Part C — Kernel Extensions Specifications

Preface node heading:part-c-kernel-extensions-specifications:33925

What this page is

This is generated FPF reference text from the specification preface or supporting sections. It helps interpret FPF; it is not FPF Reference product documentation.

Methodology

Use it to understand how the specification wants to be read, then return to a route, pattern, or work packet for active work. Cite generated IDs only when the wording changes the task decision.

Content

§PatternTagScope & Exports
Cluster C.I – Core CALs / LOGs / CHRs
C.1Sys‑CALCALPhysical holon composition; conservation invariants; resource hooks.

Epistemic holon composition (KD-CAL)

Scope & exports. A substrate‑neutral calculus for composing epistemic holons (U.Episteme) and reasoning about their motion and equivalence. Exports: (i) three point‑characteristicsFormality F, ClaimScope G, Reliability R—that locate a single episteme; (ii) a pairwise ladder of Congruence Levels (CL 0…3); (iii) four Δ‑moves (Formalise, Generalise/Specialise, Calibrate/Validate, Congrue); (iv) composition rules (Γ_epist) for aggregates; (v) propagation laws for CL through mappings and notation bridges. KD‑CAL is typed by U.EpistemeSlotGraph and never confuses ClaimGraph, EntityOfConcernSlot, GroundingHolonSlot, Viewpoint, View, ReferenceScheme, notation, publication form, or carrier. All F–G–R computations are context‑local; Cross‑context traversals require an explicit Bridge with CL and apply the B.3 congruence penalty Φ(CL) to R. // Contexts ≡ U.BoundedContext; substitution is plane‑preserving only.

Formality F is the rigor characteristic defined normatively in C.2.3. All KD‑CAL computations and guards SHALL use U.Formality (F0…F9) as specified there; no parallel “mode” ladders are allowed.

Problem Frame

FPF fixes two archetypal sub‑holons: U.System (physical/operational) and U.Episteme (knowledge holon). KD‑CAL is the primary composition pattern for U.Episteme, giving engineers a compact, testable way to say (a) how strictly an episteme is written (F), (b) how much structure it manages (G), (c) how well it is warranted by evidence or severe tests (R), and (d) how closely two epistemes coincide (CL). KD‑CAL is built atop C.2.1 U.Episteme — Epistemes and their slot graph, which reifies every episteme through U.EpistemeSlotGraph: ClaimGraph, EntityOfConcernSlot, GroundingHolonSlot, Viewpoint, View, and ReferenceScheme. Notation, publication forms, carriers, and work occurrences remain outside episteme content and are linked by their own FPF relations.

Problem

Teams routinely entangle programs, specifications, proofs, and datasets; a “proof” is treated as a tested routine, a “program” is cited as if it entailed a theorem. Trust decays because justification and evidence freshness are not explicit. Epistemes are anthropomorphised as actors (“the standard enforces…”), producing category errors at execution. Without a shared composition and equivalence calculus, aggregates hide weakest links and analogies harden into overclaims. KD‑CAL must stop these failure modes with a single constitution and scale‑set.

Forces

  • Universality vs domain idioms. One calculus must cover physics theories, legal codes, safety specs, algorithms, and formal proofs without flattening their differences.
  • Meaning vs materiality. Meaning must be independent of carrier, yet accountable to it historically.
  • Deductive vs empirical. Axiomatic certainty and empirical trust have different evidence-continuity profiles; both must compose.
  • Abstraction vs enactment. Epistemes constrain action; systems act. The calculus must keep the roles distinct.

Solution

Coordinates and the episteme slot graph

KD‑CAL characteristics (single‑episteme, point‑values).

  • Formality F. From free prose to machine‑checkable proof/specification. Litmus: would a machine reject it if wrong?
  • Claim scope (G), a set‑valued applicability over U.ContextSlice, with ∩/SpanUnion/translate algebra; CL penalties apply to R, not to F/G. Litmus: how wide is the declared scope, and under what minimal assumptions does the claim hold?
  • Reliability R. From untested idea to continuously validated claim. Litmus: where is the last successful severe test? R‑claims MUST bind to evidence and declare relevance windows; stale bindings degrade R or require waiver per ESG policy.

Congruence Level (CL), pairwise ladder. CL‑0 Opposed/Disjoint (contrastive; no substitution); CL‑1 Comparable / Naming‑only (label similarity; no substitution); CL‑2 Translatable / RoleAssignment‑eligible (structure‑preserving mapping in a declared fragment with stated loss; theorems may transport); CL‑3 Near‑identity / Type‑structure‑safe (invariants match; type‑structure substitution allowed). CL is a characteristic of a relation between two epistemes; it is not a fourth member of the F–G–R assurance tuple and it is not a characteristic space of its own. Norm: substitution is permitted only if plane‑preserving and CL ≥ 2; substituting type‑structure requires CL = 3.

Slot-graph link. The assurance components are stated over U.EpistemeSlotGraph: F by the internal ClaimGraph and formal substrate, G by the ClaimScope attached to the EntityOfConcern and assumptions, and R by evaluation templates and evidence bindings. Notation belongs to representation and reference-scheme structure; carriers remain outside the episteme and link through SCR/RSCR or other exact carrier relations. Multiple notations are allowed only when their relation is explicit; authors SHOULD register NotationBridge(n₁,n₂) with an associated CL to make conversion loss explicit.

Four Δ‑moves (epistemic motion)

  • ΔF — Formalise. Rewrite for stricter calculi/grammars; raise proof obligations.
  • ΔG — Generalise / Specialise. Widen or narrow the claim scope (assumptions & scope). Changes to decomposition granularity are an orthogonal view and do not change G unless they alter the envelope.
  • ΔR — Calibrate / Validate. Strengthen severe tests or add live monitoring; update evidence bindings.
  • ΔCL — Congrue. Establish and record the sameness relation between two epistemes (ladder 0→3). Moves compose into paths; CL along a path is the minimum of its links.

Composition (Γ_epist) and propagation

Let Γ_epist combine epistemes {Eᵢ} into a composite episteme Γ that makes a joint claim (AND‑style) or exposes an interface (series composition). KD‑CAL imposes safe defaults:

  • R (Reliability). Along any justification path P, compute R_eff(P) = max(0, min_i R_i − Φ(CL_min(P))) (weakest‑link with congruence penalty). For series composition (claims needed conjunctively), the path‑wise weakest‑link applies; for parallel support (independent lines to the same claim), use R(Γ) = max_P R_eff(P) (annotate independence); never exceed the best attested line. Cross‑context steps and NotationBridge traversals contribute to CL_min(P).

  • F (Formality). F(Γ) = minᵢ F(Eᵢ) (monotone non‑increasing along used paths). To raise F, apply ΔF to the weakest parts.

  • G (ClaimScope). On any dependency path, take the intersection of claim scopes (the narrowest overlapping scope). Across independent support paths to the same claim, set G(Γ) = SpanUnion({G_path}) constrained by support (drop unsupported regions). Widening/narrowing the scope is an explicit ΔG± operation.

  • CL (Congruence). For a chain of mappings E₀ ~ E₁ ~ … ~ Eₖ, the path congruence is min CL(Eⱼ,Eⱼ₊₁). Passing through a NotationBridge sets CL to the bridge’s declared level; the Φ(CL) penalty is applied in the R fold for any path that traverses it.

These rules keep Γ aligned with the holonic kernel: Γ is only defined on holons and respects identity/boundary discipline from the core.

What must not be conflated (normative guards)

  • Representation structure ≠ carrier. Files, PDFs, or repositories are carriers outside the episteme; they never count as parts of U.Episteme (see C.2.1 EP‑1; CC‑EPI‑2/3).
  • Epistemes do not act. Only systems perform work; epistemes carry constraints and evaluation criteria through their ClaimGraph, EntityOfConcern, grounding holon, scope, and evidence bindings (per Core A.15 / CC‑EPI‑3).
  • CL is not a score. It is a qualitative ladder of preservation classes; do not average it.

✱ Archetypal Grounding (Tell–Show–Show)

Universal rule (tell). Compose knowledge by Γ_epist with weakest‑link R, monotone F, and explicit CL on every bridge; keep ClaimGraph, EntityOfConcern, grounding holon, viewpoint, view, reference scheme, notation, publication form, and carrier in their FPF relation named by values.

System (show, Sys‑CAL lens). Consider a battery‑pack thermal subsystem integrating a physics model of heat flow and an operating envelope for fast‑charge. As a system, it composes pumps, sensors, and controllers by physical Γ with conservation constraints (Sys‑CAL). The assurance story depends on epistemes about the model and envelope; the system acts, epistemes constrain. (Archetypes and boundary discipline per core.)

Episteme (show, KD‑CAL lens). Consider a CMIP‑class climate projection episteme (post‑2015 generation): its ClaimGraph covers PDEs and parameterisations; its EntityOfConcern and grounding holon identify what projection claim is about and how it is grounded; its ClaimScope names historical forcings, resolution, and assumptions; its representation may include domain equations and a tabular schema linked by a NotationBridge with an explicit CL. Compose sub‑epistemes for radiation, clouds, and ocean mixing: R = min across the critical path; an independent hindcast line can raise R only up to its own level; F is bounded by the least‑formal sub‑claim unless the composition adds formal invariants.

Bias‑Annotation

  • Metric worship. Treating [F,G,R] as ends rather than means; mitigation: require evidence bindings and narrative of limits in the claim scope and grounding envelope.
  • Category slip. Equating a notation or carrier with ClaimGraph, EntityOfConcern, or grounding holon; mitigation: slot-graph and carrier separation under C.2.1.
  • Analogy inflation. Presenting CL‑0/1 as identity; mitigation: always name the CL rung for cross‑mappings.

Conformance Checklist

  1. C2‑1 (Slot graph). Every U.Episteme MUST satisfy C.2.1 slot discipline for ClaimGraph, EntityOfConcernSlot, GroundingHolonSlot, Viewpoint, View, and ReferenceScheme; carriers link through SCR/RSCR or other exact carrier relations and are never parts of the episteme.
  2. C2‑2 (Coordinates). Each episteme SHALL declare [F,G,R] with a brief rationale; F is U.Formality ∈ {F0…F9} per C.2.3, exactly one episteme‑level F computed as the min over essential parts. CL is declared for pairs only. Sub‑anchors: ** Contexts MAY mint named sub‑anchors (e.g., F4[OCL], F7[HOL]), which MUST preserve the global order and map to their parent anchor from C.2.3.
  3. C2‑3 (Composition). Authors SHALL choose Γ_mode (series vs parallel). For any justification path use R_eff(P) = max(0, min_i R_i − Φ(CL_min(P))); for parallel independent lines to the same claim, take R(Γ) = max_P R_eff(P) (never exceeding the highest-R support line). Compute F(Γ) = min along the used paths. For G, use path‑wise intersections and then SpanUnion({G_path}) constrained by support. Cross‑context traversals MUST use a Bridge with CL and apply Φ(CL) to R.
  4. C2‑4 (NotationBridge). Multi‑notation representation components SHOULD register NotationBridge edges with CL and loss note; any cross‑notation reasoning MUST cite the bridge’s CL.
  5. C2‑5 (No action). Epistemes MUST NOT be assigned actions; work is executed by systems in role.

Consequences

Benefits. A single, compact map for all knowledge epistemes or publications; fast detection of weakest‑link R in aggregates; disciplined reuse across domains with explicit CL; consistent separation of meaning from material carriers. Trade‑offs. Authors must learn to declare Γ‑mode and CL explicitly; multi‑notation work requires bridge bookkeeping; mitigation: the episteme slot graph and CL scale keep the discipline brief and repeatable.

Rationale

KD‑CAL turns the coarse legacy semiotic picture into holonic composition over U.EpistemeSlotGraph, where formal structure and claim scope (F,G), evidence (R), and cross‑mapping congruence (CL) are visible and composable. The explicit C.2.1 slot graph prevents carrier confusion; the characteristics provide a manager‑readable yet formalisation‑ready scale (with G grounded in scope/envelope, not part‑count); the CL scale replaces overloaded “alignment” with a typed sameness relation.

Relations

  • Depends on: U.Episteme — Epistemes and their slot graph (C.2.1): identity invariants, slot definitions, carrier separation, and evidence bindings.
  • Peers: Sys‑CAL (C.1), which composes systems; KD‑CAL composes epistemes and feeds assurance lenses in Part B.
  • Constrained by authoring: Architectural patterns must include Tell–Show–Show with Archetypal Grounding (this section).

Worked mini‑examples (post‑2015 flavours)

  • Formal lift (ΔF). Recasting a 2019 variational free‑energy narrative into a typed calculus raises F, clarifies scope, and enables CL‑2 bridges between biological and ML formulations—without claiming empirical gain (R unchanged).
  • Parallel evidence (R, max). Two independent hindcast lines (circa CMIP6, 2019) supporting the same forecast allow R(Γ)=max(R₁,R₂); if one line drifts, the composite is bounded by the higher-R support line until series constraints apply.
  • Notation bridge (CL drop). A 2021 type‑theoretic specification rendered in a semi‑formal DSL requires a NotationBridge with a CL<3 note; any theorem transported across must respect the bridge’s declared preservation.

(No tooling is implied; these are conceptual moves within the calculus.)

C.2:End

U.Episteme — Epistemes and their slot graph

One-line summary. U.Episteme is the holon type for epistemes; its internal ontology is given by U.EpistemeSlotGraph, a typed graph n-ary relation over EntityOfConcern, GroundingHolon, ClaimGraph, Viewpoint, View, and ReferenceScheme, aligned with U.RelationSlotDiscipline and ready for both symbolic and distributed representations. A coarse Symbol-Concept-Object triangle may be used only as a didactic projection of this graph, not as the normative ontology.

Context

FPF’s kernel recognises two archetypal sub‑holons: System and Episteme. Systems are operational wholes; epistemes are knowledge holons—theories, models, specifications, standards, algorithms, proofs—whose reason for being is to say something defeasible or deductive about something and to be held to account by justification.

Readers. Engineering managers and lead designers who need a uniform way to reason about theories, specifications, algorithms, proofs—from charter memos up to formal axiomatics—without collapsing into tooling or discipline‑specific notations.

KD‑CAL (C.2) needs a precise notion of what an episteme is and how it mediates between:

  • the thing(s) it is about,
  • the contexts and systems that ground and test it, and
  • the representational machinery (notations, carriers, operations) we use to work with it.

Contemporary work on formal languages as cognitive artifacts (Dutilh Novaes), operational iconicity of notations (Krӓmer), material engagement (Malafouris), distributed representations and latent‑space communication in ML, and tool‑augmented reasoning (ReAct‑style agent loops) shows that:

  • the relation between an episteme and its EntityOfConcernSlot is not a single undifferentiated “Object” vertex: it involves explicit slots and morphisms (EntityOfConcern-reference mapping, grounding, evaluation) typed by SlotKinds and contexts;
  • representations come in heterogeneous forms (symbolic, diagrammatic, latent, interactive), with very different admissible operations;
  • inference is often mixed‑mode: symbolic reasoning plus calls to tools, solvers, and learned models.

FPF therefore needs a more modular, graph‑shaped ontology for epistemes which:

  • keeps KD-CAL and EntityOfConcern / Description-episteme boundary plus specification use/refinement discipline intact,
  • is compatible with A.6.0/A.6.5 signatures (SlotKind/ValueKind/RefKind),
  • can be used uniformly by A.6.2A.6.4 (epistemic morphisms) and E.17.* (views & publication),
  • and keeps the coarse semantic triangle only as a didactic projection, not the normative ontology.

In this pattern:

  • U.Episteme is the holon genus for epistemes (C.2), with components and identity governed by A.1/A.6.0/A.7.
  • U.EpistemeSlotGraph names the internal ontology graph of U.Episteme: the small, typed n-ary relation over episteme positions (EntityOfConcernSlot, GroundingHolonSlot, ClaimGraphSlot, ViewpointSlot, ViewSlot, ReferenceSchemeSlot) on which KD-CAL, A.6.2A.6.4 and E.17.* rely.
  • Species such as U.EpistemeCard, U.EpistemeView, U.EpistemePublication are holonic realisations of U.Episteme whose component structure is constrained to be compatible with U.EpistemeSlotGraph.

Adopted EntityOfConcern family. C.2.1 uses EntityOfConcernSlot, entityOfConcernRef, EntityOfConcernRef, EntityOfConcernChangeMode, and EntityOfConcernClass as the adopted slot/ref/class family. These names are the current C.2.1 vocabulary and must not be shadowed by a second episteme ontology.

Problem

Without a shared episteme constitution, teams fall into recurring failure modes:

  1. EntityOfConcern-Description episteme-publication carrier soup. Diagrams and files are treated as the theory itself. Changes to a PDF are confused with theoretical change.
  2. EntityOfConcern blur. A spec seems to describe “everything in general”. The EntityOfConcernSlot - what exactly this knowledge describes - is implicit and drifts, while the GroundingHolonSlot that would say where the claim is grounded is also missing.
  3. Proof vs program confusion. Algorithms, specifications, and proofs are mixed: a “proof” is used as if it were a tested routine; a “program” is cited as if it entailed a theorem (Curry–Howard misunderstood).
  4. Trust without evidence path. Claims accumulate with no explicit justification graph or evidence freshness, so assurance degrades invisibly.
  5. Category errors at execution. Epistemes appear as actors (“the standard enforces…”) instead of systems acting with or on epistemes such as data sets or algorithms.

The coarse Symbol-Concept-Object semantic triangle is useful only as a didactic projection over the richer slot graph: Concept approximates ClaimGraph, Object approximates EntityOfConcern plus ReferenceScheme, and Symbol approximates notation or representation tokens.

This projection can still help with:

  • separating meaning (Concept) from carriers, and
  • integrating KD‑CAL’s F–G–R characteristics (Formality, ClaimScope, Reliability).

But the projection has structural blind spots when used as ontology:

  1. No explicit EntityOfConcern slot. The “Object vertex” bundles together what the episteme is about with how we interpret and test it. There is no explicit slot for the entity of concern (U.Entity) and no clear separation between:

    • the EntityOfConcern value, and
    • the ReferenceScheme used to read claims as statements about that thing.
  2. Grounding collapses into Object. Material and organisational contexts (labs, infrastructures, organisations) that ground an episteme (in Malafouris’ sense) are hidden in the Object/Reference Map. KD‑CAL and Bridges need explicit GroundingHolon positions.

  3. Viewpoints are not first‑class. ISO‑style viewpoints (families of stakeholders, concerns, conformance rules) and their induced views appear only indirectly, via KD‑CAL or MVPK. There is no explicit U.Viewpoint / U.View pair at the episteme core, which makes it hard to:

    • connect to DescriptionContext for Description epistemes, including Description epistemes admitted for specification use,
    • organize multi‑view descriptions (E.17.0), or
    • align publication viewpoints with engineering viewpoints.
  4. Representations and operations are compressed into “Symbol”. Very different representational regimes are flattened into one Symbol vertex:

    • label-only notations (no internal inference calculus),
    • fully operational calculi (e.g., proof assistants),
    • interactive visualisations,
    • latent vectors and prompt‑programs for LLMs. There is no place to say “this representation admits syntactic inference of such‑and‑such kind” vs “this is just a passive label”.
  5. No explicit signature discipline. The triangle speaks of “Object/Concept/Symbol” but not of slots and references in the sense of A.6.5 U.RelationSlotDiscipline. In episteme this leads to:

    • names where slot, value and ref are conflated (EntityOfConcernRef used as if it were a slot),
    • ambiguity between the EntityOfConcern value (what the episteme describes) and the episteme (the description),
    • fragile interoperability with signatures for roles, methods, services.

Thus we have problems of:

  • EntityOfConcern drift. Specifications and models accumulate without a stable notion of which EntityOfConcernSlot value they carry; fields like SubjectRef are overloaded and resist safe refactoring.
  • Viewpoint confusion. Engineering, publication and governance views are mixed, making it hard to maintain consistency across publication faces/forms or to reason about conformity of descriptions under different viewpoints.
  • Representation mismatches. Trade‑offs between neural vs symbolic, diagrammatic vs textual, or interactive vs batch representations cannot be expressed at the episteme level; they leak into ad‑hoc tool descriptions.
  • Broken modularity. As soon as we add KD‑CAL, LOG‑CAL, MVPK, and E.TGA, multiple implicit triangles appear, each with slightly different semantics, instead of a single shared U.EpistemeSlotGraph.

We need a replacement for the triangle that keeps its didactic clarity but matches the graph‑ and morphism‑centric reality of contemporary epistemic work.

Forces

ForceTension we must resolve
Geometry vs. operationsSimple geometric pictures (triangles) are memorable; real epistemic work is operational and graph‑shaped (many nodes, many edges).
Universality vs. representation regimesOne ontology must accommodate symbolic calculi, diagrams, DSLs, interactive notebooks, and latent vectors.
EntityOfConcern vs. Description episteme and specification use/refinementThe EntityOfConcern value is not the Description episteme produced by this describing, viewing, or morphing use; however, the EntityOfConcern value may itself be a U.Episteme when an episteme is the current EntityOfConcern. Specification is not a third peer class in C.2.1; it is a gated use or refinement of a Description episteme selected by neighbouring formality plus checkable constraint, harness, acceptance, C.16 measurement criterion, suffix, verification, or publication-expression discipline for an already admitted specification use.
Viewpoint locality vs. reuseViewpoints should be local to families of descriptions, yet we want reusable viewpoint bundles across domains (E.17.1/E.17.2).
Slot discipline vs. usabilityA clean SlotKind/ValueKind/RefKind discipline is vital for reasoning, but must not render engineering episteme unreadable.
Stability vs. SoTA evolutionThe core must remain stable while integrating evolving practices: LLM tool‑use, ReAct‑style loops, structured cospans, optics, etc.

Solution — U.EpistemeSlotGraph as the normative episteme ontology

Overview

For U.Episteme, U.EpistemeSlotGraph is the normative small, typed ontology graph and n-ary relation view over the core episteme positions:

Nodes / positions / slots. Minimal kernel SlotKinds (with their ValueKinds) that every episteme can refer to, following A.6.5:

  • EntityOfConcernSlot (ValueKind U.Entity or a declared subkind) → “what this episteme is about”;

  • GroundingHolonSlot (ValueKind U.Holon) → “where/how this is grounded”;

  • ClaimGraphSlot (ValueKind U.ClaimGraph) → “what is being said (claim content)”;

  • ReferenceSchemeSlot (ValueKind U.ReferenceScheme) → “how we read claims as statements about entities”;

  • ViewpointSlot (ValueKind U.Viewpoint) → “under which viewpoint we read/validate this episteme”;

  • ViewSlot (ValueKind U.View) → “a view‑episteme produced under a viewpoint”.

  • Slots and signatures. These positions are realised as SlotKinds with associated ValueKinds and RefKinds under U.RelationSlotDiscipline (A.6.5). An episteme kind (U.EpistemeKind) is a signature over these slots.

  • Episteme as n‑ary relation and as holon. Each concrete episteme instance can be seen both as:

    • a tuple filling these slots (U.EpistemeTuple), and
    • a holon with components (U.EpistemeCard, U.EpistemeView, U.EpistemePublication) whose fields correspond to those slots.

U.Episteme is thus the holon type whose components are disciplined by the U.EpistemeSlotGraph; C.2.1 fixes that discipline.

  • Morphisms. Simple epistemic morphisms (EntityOfConcern-reference mapping, grounding, encoding, evaluation) are expressed as ordinary relations/functions between these positions. A.6.2A.6.4 then specify general laws for effect-free morphisms over U.Episteme.

  • Symbol-Concept-Object triangle as didactic projection. The classic Symbol–Concept–Object triangle becomes a didactic view of this graph, not the normative ontology; it is simply the projection to:

    • Symbol ≈ a subset of U.RepresentationScheme/U.RepresentationToken,
    • ConceptU.ClaimGraph,
    • Object{EntityOfConcern, ReferenceScheme}.

The rest of this pattern fixes the minimal core needed by KD‑CAL, A.6.2A.6.4 and E.17.*. The representational nodes (U.RepresentationScheme, U.RepresentationToken, U.PresentationCarrier, U.RepresentationOperation) are introduced as an extension C.2.1+, preserving the interface defined here.

Minimal epistemic positions (nodes & slots)

This section defines the minimal node set for U.EpistemeSlotGraph and the associated SlotKinds. These are the positions that A.6.2A.6.4 and E.17.* can rely on.

EntityOfConcernSlot — “what this episteme is about”

Tech: EntityOfConcernSlot (SlotKind), entityOfConcernRef : U.EntityRef (Ref slot in tuples/cards). Plain: EntityOfConcern value, entity of concern. Older entity of concern wording is source-standard or source-migration wording, not a live Tech head.

Intent. Provide a single, explicit slot for the entity (or entities) that an episteme is about, avoiding the former conflation of Object/Reference/Context.

Normative definition.

  1. EntityOfConcernSlot is a SlotKind in the sense of A.6.5 U.RelationSlotDiscipline.

    • Its ValueKind is U.Entity.
    • Its RefKind is U.EntityRef (or a species thereof) and MUST be realised in data as a field named entityOfConcernRef : U.EntityRef (E.10 discipline).
  2. Species of U.EpistemeKind MAY constrain the ValueKind to a subtype EntityOfConcernClass ⊑ U.Entity (for example, “the entity of concern is always a U.Holon and, more specifically, a U.System or U.Episteme”). The subtype MUST NOT be named U.EntityOfConcern; “EntityOfConcern value” is a local slot-use phrase, not a kernel type.

  3. Wherever episteme previously used U.EpistemicObject as a separate type, it is re-interpreted as U.Entity filling EntityOfConcernSlot and is retained only as source-migration wording governed by E.10/F.18.

Didactic cue. “Ask: What, exactly, is this description about? That is the EntityOfConcern.”

GroundingHolonSlot — “where / in what holon this is grounded”

Tech: GroundingHolonSlot (SlotKind), groundingHolonRef : U.HolonRef?. Plain: grounding holon, holon‑of‑grounding, engagement context.

Intent. Capture the material–social holon (system, lab, infrastructure, organisation, runtime environment) with respect to which an episteme’s claims are tested, calibrated or validated.

Normative definition.

  1. GroundingHolonSlot is a SlotKind with:

    • ValueKind U.Holon,
    • RefKind U.HolonRef (or a species thereof),
    • and recommended field name groundingHolonRef? : U.HolonRef in episteme cards/views.
  2. GroundingHolonSlot is optional at the minimal core: an episteme may be un‑grounded at M‑mode (e.g., purely mathematical), but any episteme used for empirical evaluation or assurance under KD‑CAL SHALL either:

    • populate groundingHolonRef, or
    • declare explicitly that no such grounding is possible (e.g., counterfactuals, abstract logics), with consequences reflected in KD‑CAL R.
  3. The phrase “grounding holon” is plain‑register; there is no kernel type U.GroundingHolon. It always means “the holon currently filling GroundingHolonSlot for this episteme.”

Didactic cue. “Ask: In which lab/organisation/world‑slice do we test or observe this? That is the GroundingHolon.”

U.ClaimGraph and ClaimGraphSlot — claim content

Tech: U.ClaimGraph (kernel type), ClaimGraphSlot (SlotKind). Plain: claim graph, claim content.

Intent. Reuse the existing KD‑CAL notion of ClaimGraph as the episteme’s claim body, but make its slot value use explicit.

Normative definition.

  1. U.ClaimGraph is the ValueKind for ClaimGraphSlot:

    • nodes: typed claims (definitions, axioms, theorems, requirements, properties, assumptions);
    • edges: logical/derivational/refinement relations, as already defined in C.2.
  2. ClaimGraphSlot is a SlotKind whose instances are always stored by value in core patterns:

    • content : U.ClaimGraph is the normative field in U.EpistemeCard / U.EpistemeView;
    • C.2.1 MUST NOT introduce U.ClaimGraphRef as a ValueKind. Any reference type for ClaimGraphs, if needed, is a RefKind defined by discipline packs on top of U.ClaimGraph.
  3. ClaimGraphSlot is mandatory: every U.EpistemeKind that uses C.2.1 SHALL have exactly one ClaimGraphSlot.

Didactic cue. “Ask: What is actually being claimed, defined, required, proved? That is the ClaimGraph.”

U.Viewpoint and ViewpointSlot — perspective of concerns and validators

Tech: U.Viewpoint (kernel type), ViewpointSlot (SlotKind), viewpointRef : U.ViewpointRef?. Plain: viewpoint, perspective, stakeholder perspective.

Intent. Provide a first-class reusable catalogue for ISO-style viewpoints and their generalisations, as used by E.17.0 U.MultiViewDescribing, MVPK, and TEVB.

Normative definition.

  1. U.Viewpoint is the type of viewpoint specifications:

    • role-bearing system families and stakeholder groups the viewpoint speaks for,
    • their concerns,
    • allowed kinds of Description epistemes and Description epistemes admitted for specification use,
    • and conformance rules for views under this viewpoint. (The internal structure of U.Viewpoint is fixed in E.17.0, not here.)
  2. ViewpointSlot is a SlotKind with:

    • ValueKind U.Viewpoint,
    • RefKind U.ViewpointRef,
    • normative field name viewpointRef? : U.ViewpointRef on episteme cards/views.
  3. For Description epistemes, including Description epistemes admitted for specification use, under E.10.D2, viewpointRef is a mandatory part of DescriptionContext; C.2.1 treats that as a species-level constraint, not as a universal requirement for all epistemes.

  4. ViewpointSlot may be unset in purely internal, pre‑viewpoint epistemes (e.g., raw formal developments), but any episteme that participates in MultiViewDescribing (E.17.0) MUST set it or be deterministically associated to it via a ViewpointBundle.

Didactic cue. “Ask: Who is this for, and what do they need to see to accept it? That is the Viewpoint.”

U.EpistemeView / U.View and ViewSlot — episteme‑level views

Tech: U.EpistemeView (kernel species of U.Episteme), alias U.View; ViewSlot (SlotKind); viewRef : U.ViewRef. Plain: view, epistemic view.

Intent. Distinguish view‑epistemes (views of Description epistemes or Description epistemes admitted for specification use) from both:

  • the underlying Description epistemes or Description epistemes admitted for specification use themselves, and
  • the MVPK publication face/form/interop publication form publication-face kind values and the external carriers/renderings on which views are made available (E.17, publication-face/form discipline, SCR/RSCR).

Normative definition.

  1. U.EpistemeView is a species of U.Episteme whose episteme kind includes, at minimum:

    • one ClaimGraphSlot (typically a sliced or projected ClaimGraph),
    • one EntityOfConcernSlot,
    • one ViewpointSlot,
    • and appropriate ReferenceSchemeSlot.
  2. U.View is an alias for U.EpistemeView in E‑cluster patterns (especially E.17.*), used where the word “view” is conventional.

  3. ViewSlot is a SlotKind whose:

    • ValueKind is U.View,
    • RefKind is U.ViewRef (or U.EpistemeViewRef species),
    • intended usage is in meta‑structures such as U.MultiViewDescribing families and MVPK.
  4. ViewSlot MUST NOT be confused with publication-face labels, publication-face kind declarations, or carrier slots: a concrete MVPK face that is a view is represented as U.View or U.EpistemeView, while the face label or publication-form profile, publication face/form kind or interop publication form kind, and carrier or rendering remain separate lanes.

Didactic cue. “Ask: Which particular slice of the description under this viewpoint are we talking about? That is the View.”

U.ReferenceScheme and ReferenceSchemeSlot — interpreting ClaimGraph as claims about entities

Tech: U.ReferenceScheme (kernel type), ReferenceSchemeSlot (SlotKind); referenceScheme? : U.ReferenceScheme. Plain: reference scheme, interpretation scheme, description scheme.

Intent. Separate what is being said (ClaimGraph) from how claims are read as statements about entities and contexts (designation, measurement, evaluation envelopes), without reifying the referents themselves as a vertex.

Normative definition.

  1. U.ReferenceScheme is a component type of epistemes, not an external entity:

    • it determines how nodes of U.ClaimGraph are mapped to properties/relations over values of EntityOfConcernSlot,
    • it specifies measurement/evaluation templates (how to test claims on GroundingHolon),
    • it fixes claim-scope predicates / admissible regions over declared U.ContextSlice selectors (and, where needed, references to domain spaces used inside those selectors).
  2. ReferenceSchemeSlot is a SlotKind with:

    • ValueKind U.ReferenceScheme,
    • no RefKind in the minimal core (ReferenceSchemes are stored by value as referenceScheme? : U.ReferenceScheme fields on episteme cards/views). Discipline packs may introduce U.ReferenceSchemeRef as a RefKind, but must not repurpose it as a new ValueKind.
  3. ReferenceScheme is the place where Object-vertex concerns are split into explicit claim-to-EntityOfConcern and claim-to-grounding rules:

    • it does not “contain” the EntityOfConcern value or grounding referent,
    • it carries the rules that tie claims to entities and groundings.

Didactic cue. “Ask: Given this ClaimGraph, how exactly do we treat it as talking about these entities in these contexts, and how do we test it? That is the ReferenceScheme.”

Minimal node set and extension C.2.1+

The minimal U.EpistemeSlotGraph core for C.2.1 consists of positions (the episteme core SlotKinds of A.6.5 CC‑A.6.5‑5):

  • EntityOfConcernSlot (ValueKind U.Entity),
  • GroundingHolonSlot (ValueKind U.Holon),
  • ClaimGraphSlot (ValueKind U.ClaimGraph),
  • ViewpointSlot (ValueKind U.Viewpoint),
  • ViewSlot (ValueKind U.View),
  • ReferenceSchemeSlot (ValueKind U.ReferenceScheme).

This pattern only fixes these positions. The extension C.2.1+ (second step of the refactor) adds:

  • U.RepresentationScheme and RepresentationSchemeSlot,
  • U.RepresentationToken and RepresentationTokenSlot,
  • U.PresentationCarrier and PresentationCarrierSlot,
  • U.RepresentationOperation and RepresentationOperationSlot (with inference regime annotations),

without changing:

  • the definition of U.EpistemeKind,
  • the minimal U.EpistemeCard interface,
  • or the assumptions A.6.2A.6.4 / E.17.* make about episteme components.

In C.2.1+ U.PresentationCarrier, publication face/form values, MVPK face, carrier, and rendering relations remain publication-side carriers, faces, forms, units, or rendering relations, not semantic parts of the episteme: U.PresentationCarrier values are linked to U.Episteme and U.View via MVPK and publication-face/form discipline relations, such as isCarriedBy and MVPK face relations, and MUST NOT be counted as components when reasoning about episteme identity, EntityOfConcernSlot filling, GroundingHolonSlot filling, or KD-CAL morphisms. Changing carriers, publication faces/forms, units, or renderings alone never changes the U.Episteme instance determined by C.2.1; it only produces U.Work occurrences that publish or republish the same U.Episteme.

Attached epistemic structures (non-slot components)

U.EpistemeSlotGraph deliberately does not reify every episteme-adjacent structure as a node. Several key structures remain attached, non-slot components of U.Episteme:

  • JustificationGraph — the argument/evidence graph for nodes of U.ClaimGraph (A.10/B.3).
  • EvidenceBindings — per-claim U.EvidenceRole assignments that connect claims to external U.Work and carriers.
  • EditionSeries — the PhaseOf chain of episteme editions (A.14) with change-class annotations (symbol-only vs ClaimGraph vs ReferenceScheme changes).
  • ScopeCard and U.ClaimScope — USM scope values (A.2.6) describing where the episteme's claims hold.

These attached structures are not extra positions of U.EpistemeSlotGraph; they hang off the U.ClaimGraph and U.ReferenceScheme pair and are governed by KD-CAL (C.2), A.10, and B.3. C.2.1 only requires that an episteme which participates in KD-CAL exposes them in a way that keeps ClaimGraph, ReferenceScheme, Evidence, EditionSeries, and ClaimScope clearly distinguishable.

Episteme as n‑ary relation and as holon

To prevent confusion between EntityOfConcern values, their descriptions, and the slots they fill in an episteme, C.2.1 explicitly treats epistemes both as:

  1. n‑ary relations with a signature (slots & values), and
  2. holons with components (fields & parts).
U.EpistemeKind — episteme as a typed n‑ary relation

Tech: U.EpistemeKind (kernel type).

Intent. Provide a signature‑level description of an episteme as an n‑ary relation whose arguments are governed by SlotKind/ValueKind/RefKind triples per A.6.5.

Normative definition.

  1. Every episteme that participates in KD‑CAL belongs to some U.EpistemeKind. The kind determines:

    • which SlotKinds appear (EntityOfConcernSlot, GroundingHolonSlot, ClaimGraphSlot, ViewpointSlot, ViewSlot, ReferenceSchemeSlot, …),
    • the ValueKind for each slot (always a subtype of U.Type),
    • the RefKind used to store it in episteme (when applicable).
  2. U.EpistemeKind is a special case of U.Signature (A.6.0), with its slots governed by U.RelationSlotDiscipline (A.6.5). C.2.1 MUST NOT define an alternative slot discipline.

  3. For the minimal core, every U.EpistemeKind MUST include:

    • exactly one ClaimGraphSlot,
    • at least one EntityOfConcernSlot,
    • and at least one ReferenceSchemeSlot. Inclusion of GroundingHolonSlot, ViewpointSlot, ViewSlot MAY be species-level constraints (mandatory for Description epistemes, including Description epistemes admitted for specification use, optional for others).

Didactic cue. “An EpistemeKind is the type of episteme: which positions it has and what can go into them.”

U.EpistemeTuple — episteme as filled n‑ary relation

Tech: U.EpistemeTuple (kernel species).

Intent. Model filled instances of an episteme’s signature, separating the n‑ary relation from any particular holonic packaging or publication.

Normative definition.

  1. U.EpistemeTuple is a species whose instances are pure value tuples:
    • for each SlotKind in the associated U.EpistemeKind, a value of the slot’s ValueKind (or a reference value of RefKind, if the kind is configured as such).
  2. U.EpistemeTuple is notation‑agnostic and carrier‑agnostic: it does not know about files, formats, publication faces/forms, or carriers. It exists to give A.6.2A.6.4 a minimal notion of “episteme as a point in Ep”.
  3. In episteme, U.EpistemeTuple rarely appears directly; it is typically induced by U.EpistemeCard and U.EpistemeView (which add component structure and meta‑information).

Didactic cue. “An EpistemeTuple is the abstract record of what fills which slots — nothing more.”

U.EpistemeCard, U.EpistemePublication, U.EpistemeView — holonic realisations

Tech: U.EpistemeCard, U.EpistemePublication, U.EpistemeView (species of U.Episteme).

Intent. Provide holon‑level structures that engineers can work with (components, mereology, provenance), while keeping them aligned with U.EpistemeKind and U.EpistemeTuple.

Normative definition.

  1. U.EpistemeCard. A species of U.Episteme whose components correspond one‑to‑one to slots of some U.EpistemeKind:

    • content : U.ClaimGraph (for ClaimGraphSlot),
    • entityOfConcernRef : U.EntityRef (for EntityOfConcernSlot),
    • groundingHolonRef? : U.HolonRef (for GroundingHolonSlot),
    • viewpointRef? : U.ViewpointRef (for ViewpointSlot),
    • referenceScheme? : U.ReferenceScheme (for ReferenceSchemeSlot),
    • optionally representationSchemeRef? : U.RepresentationSchemeRef (C.2.1+),
    • meta : Edition/Provenance/Status…. Minimal episteme identity is the pair ⟨content, entityOfConcernRef⟩ within a U.BoundedContext; all other fields are optional at the genus level but may be mandatory in species. Changes that alter content or the effective referenceScheme (or that intentionally re-identify entityOfConcernRef) SHALL be realised as new phases in an U.EditionSeries (PhaseOf chain) under A.14 and A.7. Changes confined to U.PresentationCarrier, publication-side values, MVPK face, carrier, or rendering relations do not create a new episteme; they are captured as publication work over the same U.Episteme.
  2. U.EpistemePublication. A species representing epistemes that have been published through publication faces/forms or MVPK relations. It:

    • has at least the components of U.EpistemeCard,

    • plus references to MVPK U.View, face identity, publication face/form and interop publication form publication-face kind values, publication-scope fields, profile fields, and external carrier or rendering refs as required by E.17 and publication-face/form discipline,

    • but does not re-interpret face labels, publication-face kind values, or carriers/renderings as parts of the episteme; carriers remain external.

  3. U.EpistemeView. As defined in §4.1.5, a species of U.Episteme representing a view under a specific U.Viewpoint. Its components are a specialisation of U.EpistemeCard:

    • ClaimGraph often restricted/projection of a base description and specification-useification,
    • Viewpoint fixed,
    • ReferenceScheme tailored to that viewpoint.

Alignment requirement. For any of these species, the pattern MUST state explicitly:

  • which U.EpistemeKind it realises, and
  • how each component maps to a SlotKind/RefKind under U.RelationSlotDiscipline.

This ensures that A.6.2A.6.4 can treat any U.Episteme* uniformly as both:

  • a category-theory object in the category Ep, and
  • a structured holon with components.
Episteme, publication, view, carrier, cue, and authority-reference lanes (normative)

C.2.1 is the default FPF pattern for claim-bearing units. Do not mint a generic U.SemioObject, U.SemioticObject, U.SignObject, U.WorkingObject, or U.SourceMaterial when the claim-bearing unit in question should be modeled as an episteme. Use U.Episteme or a declared species of U.Episteme.

When the same claim-bearing unit is available to readers, tools, or downstream work as a published episteme, name that lane as U.EpistemePublication or as a governed U.Episteme publication. Then keep the adjacent lanes separate:

  • publication form — the concrete form in which the episteme is made available for some use, such as a cue pack, transfer-prepared claim set, prompt form, partial normal form, record, card, table, or profile;
  • view, including MVPK faceU.View or U.EpistemeView under a declared U.Viewpoint, including MVPK faces such as PlainView, TechCard, InteropCard, or AssuranceLane;
  • carrier or rendering — the SCR/RSCR, document, dashboard, generated screen, trace file, transport envelope, or display that bears or renders a publication;
  • source-finding cue — a badge, tile, heading, signature-looking mark, credential display, generated explanation, or other cue that helps find a source but does not by itself create an authority-reference relation;
  • governing pattern reference and authority-reference fieldgoverningPatternRef when one FPF pattern governs admissible interpretation or use; authoritySourceRef when a non-pattern authority-source referent such as an external standard, editioned register, DRR, gate decision, policy source, or role-assignment or status register carries the relevant authority. The publication records this reference; it does not become the referenced authority.

No publication form, view, face, carrier, rendering, source-finding cue, dashboard signal, credential display, generated explanation, FPF pattern file, or FPF pattern section is itself a substitute for a governed U.Episteme, an evidence relation, an assurance claim, a gate decision, a permission, a role claim, a status claim, or a U.Work occurrence. If the next move concerns work, keep candidate reliance, U.WorkPlanning, planned work, actual U.Work, work result, and work-result measurement in their own P2W lanes rather than storing them inside the episteme or its carrier.

SlotKind / ValueKind / RefKind discipline for EntityOfConcern & GroundingHolon

C.2.1 adopts A.6.5 U.RelationSlotDiscipline wholesale. For the two key positions:

  1. EntityOfConcernSlot.
    • SlotKind = EntityOfConcernSlot;
    • ValueKind = U.Entity (species may constrain to EntityOfConcernClass ⊑ U.Entity);
    • RefKind = U.EntityRef (or a species thereof);
    • normative field name in episteme cards: entityOfConcernRef : U.EntityRef. No kernel type named U.EntityOfConcern is introduced; the phrase “EntityOfConcern value” always means “an instance of U.Entity filling EntityOfConcernSlot”.
  2. GroundingHolonSlot.
    • SlotKind = GroundingHolonSlot;
    • ValueKind = U.Holon;
    • RefKind = U.HolonRef;
    • normative field name: groundingHolonRef? : U.HolonRef. There is no kernel type U.GroundingHolon; “grounding holon” is a slot-filler phrase. Any episteme that previously mixed slot/value/ref concepts (e.g., using EntityOfConcernRef as if it were a type) MUST be migrated to this discipline over time; C.2.1 provides the normative reference, and F.18 / discipline packs provide the migration guide.

Minimal epistemic morphisms (informal schema)

Note. The full mathematical treatment (categories Ep and Ref, entityOfConcern functor α : Ep → Ref, and effect‑free morphisms) lives in A.6.2A.6.4. Here we fix only the episteme-slot relations that C.2.1 expects to exist between its positions.

At the level of U.EpistemeCard components and SlotKinds, we assume the following primitive relations (not all are functions):

  1. entityOfConcernSet : U.Episteme → P(U.Entity) derivable from EntityOfConcernSlot and ReferenceScheme

    • For an episteme E, entityOfConcernSet(E) is (at least) the singleton containing the entity referenced by entityOfConcernRef(E); in more complex cases, it may be a finite set or bundle of entities, determined by ReferenceScheme.
    • The functorial EntityOfConcern mapping δ_E : Ep → Ref used in A.6.2A.6.4 is the categorical lift of this relation: it forgets episteme internals and keeps only the EntityOfConcern value in the ReferencePlane determined by the pair <EntityOfConcernSlot, GroundingHolonSlot>.
  2. grounds : (U.Entity, U.Holon) ⇝ GroundingRelation relates EntityOfConcern values to grounding holons

    • Captures how values of EntityOfConcernSlot are situated in holons that make evaluation possible (labs, infrastructures, organisations).
    • Need not be total or functional; an entity may admit multiple grounding holons, or none.
  3. designates : (U.ReferenceScheme, U.ClaimGraph, U.Entity, U.Holon) ⇝ DesignationProfile how claims are read as statements about entities in contexts

    • Specifies, for each claim in content and each <entityOfConcernRef, groundingHolonRef>, what property/relation it purports to state, and under what conditions.
  4. satisfies / evaluatesTo : (U.ClaimGraph, U.ReferenceScheme, U.Holon) → TruthProfile/SuccessProfile evaluation of claims under a reference scheme and grounding

    • Forms the bridge to KD‑CAL’s F, G, R evaluation; details are given in C.2 and B.3.
  5. View-related morphisms (to be connected with A.6.3):

    • viewProject : (U.Episteme, U.Viewpoint) → U.View — effect-free, EntityOfConcern-preserving projection that slices ClaimGraph and specialises ReferenceScheme under a given viewpoint.
    • viewEmbed : U.View → U.Episteme — embedding of a view back into the wider episteme, typically as a reference with correspondence proofs.
  6. Reflexive entityOfConcern guard. When EntityOfConcernSlot or ReferenceScheme picks out an episteme or claim that includes the referring claim itself (ReferencePlane = episteme), publishers SHALL ensure that the induced justification/evaluation structure is acyclic per evaluation chain: reflexive describe/citation handles may exist as literature handles, but they MUST NOT form a minimal justification cycle for acceptance or KD-CAL assurance. Self‑reference is allowed as a citation pattern, not as a way to close justification loops.

These are not yet laws; they are the hooks that A.6.2A.6.4 will formalise into:

  • U.EffectFreeEpistemicMorphing (Ep→Ep morphisms over this structure),
  • U.EpistemicViewing (entityOfConcern‑preserving Ep→Ep),
  • U.EpistemicRetargeting (entityOfConcern‑retargeting Ep→Ep).

Legacy semantic triangle as didactic view (informative)

Position. The classical semiotic or semantic triangle (“Symbol–Concept–Object”, Ogden–Richards/Frege–Carnap style) is not the normative ontology for epistemes in FPF. For U.Episteme, it is treated as a didactic projection of the richer hypergraph U.EpistemeSlotGraph:

  • “Symbol” corner ≈ {U.RepresentationToken, U.RepresentationScheme, U.PresentationCarrier} when C.2.1+ is in use; in the minimal core this is collapsed into whichever external carrier bears the U.ClaimGraph publication.
  • “Concept” cornerU.ClaimGraph + U.ReferenceScheme under a chosen U.Viewpoint. This is the claim content plus its interpretation recipe.
  • “Object” corner ≈ the slot filler of EntityOfConcernSlot (ValueKind U.Entity) plus the slot filler of GroundingHolonSlot (ValueKind U.Holon) and the grounding relation between them.

Under this didactic projection the triangle is a three-node quotient of the U.EpistemeSlotGraph:

(Symbol)      = RepresentationToken + Scheme + Carrier
(Concept)     = ClaimGraph + ReferenceScheme (+ Viewpoint)
(Object)      = EntityOfConcern + GroundingHolon

All viewpoints, operations, carriers and reference planes are suppressed in the classical diagram. The cost of this suppression is precisely the confusion that motivates C.2.1:

  • describing becomes a single unlabeled arrow,
  • inference regimes disappear,
  • measurement and grounding are invisible.

Didactic use. C.2.1 allows the triangle only in the following cases:

  1. As an introductory picture in guidance material (“this is the coarse triangle; the actual pattern is the episteme slot graph”).
  2. As a quotient diagram: an explicit note that “this figure ignores viewpoint, grounding, carrier, and operationality; see C.2.1 for the full structure”.
  3. As an external-triangle alignment aid when mapping to standards or literature that speak only in triangle terms.

Guard. Any pattern or documentation page that uses a “semantic triangle” diagram MUST either:

  • explicitly state “this is a didactic projection of C.2.1 U.EpistemeSlotGraph”, or
  • treat it as an external-triangle reference when aligning with external standards.

The triangle MUST NOT be used as a kernel-level ontology or as a source for morphism laws. All normative reasoning about epistemes proceeds via the slots and components of U.EpistemeSlotGraph.

Interaction with EntityOfConcern and Description-episteme boundary, specification use/refinement, and DescriptionContext (normative)

C.2.1 is the episteme-side slot schema that EntityOfConcern / Description-episteme discipline (A.7, E.10.D2) relies on. The link is made via DescriptionContext, not by treating EntityOfConcern value, Description epistemes, and specification use/refinement as layers, carriers, or peer ontology classes.

DescriptionContext over C.2.1 components

For any episteme that is a Description in the sense of E.10.D2, including a Description episteme admitted for specification use, the field subjectRef : U.SubjectRef is interpreted as a DescriptionContext triple:

DescriptionContext = ⟨EntityOfConcernRef, BoundedContextRef, ViewpointRef⟩

where:

  • EntityOfConcernRef : U.EntityRef — fills EntityOfConcernSlot (ValueKind U.Entity, species often constrained via EntityOfConcernClass ⊑ U.Entity).
  • BoundedContextRef : U.BoundedContextRef — points to the context that fixes vocabulary, units, and legal inferences for this description (E.10.D1).
  • ViewpointRef : U.ViewpointRef — fills ViewpointSlot (ValueKind U.Viewpoint) and determines which concerns, role-bearing system families, stakeholder groups, and conformance rules apply.

Normative requirement (DESCCTX-13). For every …Description episteme, and every …Spec use admitted by neighbouring specification use/refinement gates:

  1. subjectRef SHALL be decodable to a well‑formed DescriptionContext triple.
  2. EntityOfConcernRef from that triple SHALL be identical to the field entityOfConcernRef that fills EntityOfConcernSlot in the corresponding U.EpistemeCard/U.EpistemeView.
  3. ViewpointRef in DescriptionContext SHALL agree with viewpointRef in the episteme card or be uniquely derivable from a U.ViewpointBundle in E.17.1 (with the derivation rule documented).

EntityOfConcern values such as U.System, U.Method, U.Role, or U.Episteme appear in C.2.1 as values of EntityOfConcernSlot when an episteme describes, views, or retargets them. They are not the Description episteme produced by that use. The EntityOfConcern / Description-episteme boundary separates the EntityOfConcern value from the Description episteme; specification use/refinement is a separate gated use or refinement of that Description episteme, not a third peer ontology class. This boundary does not ban epistemes from being EntityOfConcern values.

Example. A formal postulate theorem in physics can be a Description episteme about the behaviour of a physical grounding holon. Its EntityOfConcernSlot points to the physical grounding holon, or to the exact behavior, method, or work entity only when a governing pattern has selected that entity under concern; its claim graph carries the theorem, postulates, and derivation; its formal language belongs to formality and publication-expression discipline. It becomes a specification only if a bounded use assigns specification force, such as acceptance criteria, harness checks, normative invariants, C.16 measurement criteria, or verification use. Formal notation alone does not change the slot graph into a third Specification ontology class.

EntityOfConcern-to-Description morphism and specification-use exit over C.2.1

  • Describing (Describe_EoC_DescEp : EntityOfConcern -> DescriptionEpisteme). Produces an episteme whose:

    • content : U.ClaimGraph encodes the descriptive claims about the EntityOfConcern value,
    • entityOfConcernRef points to the EntityOfConcern value,
    • groundingHolonRef (if present) fixes where the description is evaluated or tested,
    • viewpointRef selects the describing viewpoint.

    Describe_EoC_DescEp is conformant to A.6.2 but not an Ep→Ep morphism (domain is the EntityOfConcern value, codomain is a Description-side U.Episteme). C.2.1 provides the codomain schema and ensures that the resulting Description has a valid DescriptionContext.

C.2.1 does not decide that a Description episteme has become a Specification. If a bounded use formalises, constrains, test-harnesses, accepts, or publishes a Description episteme as a specification, the governing pattern must name the exact specification-use gate: A.6.2 for effect-free episteme refinement, C.2.3 for formality and checkability, A.21 or the relevant gate/acceptance pattern for harness and acceptance force, C.16 for measurement criteria, E.17 for publication expression, and E.10 for suffix discipline. The C.2.1 requirement is only that the Description episteme keeps the same entityOfConcernRef, BoundedContextRef, and ViewpointRef unless an retargeting or viewing pattern named by value declares otherwise.

C.2.1 does not define the full EntityOfConcern / Description-episteme boundary or the specification-use gates; it only insists that any ...Description episteme, and any ...Spec use admitted by neighbouring gates, must:

  • implement U.EpistemeCard or U.EpistemeView with content, entityOfConcernRef, groundingHolonRef?, viewpointRef?, and referenceScheme? fields, and
  • wire these fields into subjectRef as DescriptionContext.

Alignment with A.6.2–A.6.4 (episteme morphisms) (normative)

U.EpistemeSlotGraph is the slot-level substrate for the episteme morphism patterns:

  • A.6.2 U.EffectFreeEpistemicMorphing
  • A.6.3 U.EpistemicViewing
  • A.6.4 U.EpistemicRetargeting

Effect‑free episteme morphisms (A.6.2) over C.2.1

For any f : X → Y that is an instance of U.EffectFreeEpistemicMorphing:

  • Typed episteme values. X and Y are U.Episteme instances realised as U.EpistemeCard / U.EpistemeView with at least the minimal core components:

    content            : U.ClaimGraph
    entityOfConcernRef : U.EntityRef      // EntityOfConcernSlot
    groundingHolonRef? : U.HolonRef       // GroundingHolonSlot
    viewpointRef?      : U.ViewpointRef   // ViewpointSlot
    referenceScheme?   : U.ReferenceScheme// ReferenceSchemeSlot (ByValue)

    Any additional C.2.1+ components (RepresentationScheme, Tokens, Carriers, Operations) are visible to A.6.2 only through their declared SlotKinds (A.6.5).

  • EntityOfConcernChangeMode characteristic. f MUST declare a entityOfConcernChangeMode ∈ {preserve, retarget}:

    • preserveentityOfConcernRef(Y) = entityOfConcernRef(X) and any change to groundingHolonRef/viewpointRef must be justified by Bridges/CorrespondenceModel, without changing the EntityOfConcernSlot value;
    • retarget — permitted only for A.6.4 species; see below; in this case the characteristic records an intentional change in the pair <entityOfConcernRef, groundingHolonRef> under a declared KindBridge in the appropriate ReferencePlane.

    This EntityOfConcernChangeMode is a CHR-style characteristic (A.17) on episteme morphisms, which points directly to EntityOfConcernSlot. Avoid introducing a separate “entityOfConcern” term alongside EntityOfConcern.

  • Component discipline. P0–P5 from A.6.2 are read directly in terms of C.2.1 components:

    • purity ⇒ only C.2.1 components of Y may change; no Work/Mechanism side‑effects;
    • conservativity ⇒ claims in content_Y read via referenceScheme_Y about the new <EntityOfConcern, GroundingHolon> do not go beyond what already follows from content_X via referenceScheme_X under the declared EntityOfConcernChangeMode and Bridges;
    • functoriality ⇒ composition of such transformations respects the slot structure and ReferenceSchemes.

Any Ep→Ep pattern that operates on U.Episteme MUST state which C.2.1 slots it reads and which it may write, in terms of SlotKinds/ValueKinds/RefKinds (A.6.5), and then declare itself a species of A.6.2/3/4 as appropriate.

EpistemicViewing (A.6.3) as entityOfConcern‑preserving projections

U.EpistemicViewing is the EntityOfConcern-preserving species of A.6.2. Over C.2.1 this means:

  • entityOfConcernRef(Y) = entityOfConcernRef(X) — the same value in EntityOfConcernSlot.
  • groundingHolonRef is preserved, or changed only within a fixed grounding context (e.g. normalising identifiers for the same lab or runtime).
  • viewpointRef is either:
    • preserved (internal normalisation under the same viewpoint), or
    • replaced by another U.ViewpointRef within a U.MultiViewDescribing family (E.17.0), with invariants enforced by a CorrespondenceModel.
  • content and referenceScheme are transformed conservatively: no new claim content about the same EntityOfConcern is introduced.

Typical examples:

  • filtering or aggregating U.ClaimGraph to a view relevant for a stakeholder group;
  • rendering a behavioural specification into a tabular or diagrammatic episteme under a publication viewpoint;
  • normalising a logic‑heavy episteme into a more operational one, while keeping the same system EntityOfConcern and context.

In terms of SoTA, EpistemicViewing behaves like a lens or optic over C.2.1: a focus (SlotKinds for content/representation) is manipulated while the EntityOfConcern is fixed.

EpistemicRetargeting (A.6.4) as EntityOfConcern-bundle retargeting on episteme morphisms

U.EpistemicRetargeting is the species of A.6.2 where entityOfConcernChangeMode = retarget. It is always a morphism between epistemes (f : X → Y in U.Episteme), but the adjective “retargeting” refers not to the fact that an episteme is mapped to another episteme (this is true for all A.6.2 species), and not to a separate entityOfConcern, but specifically to the change in the EntityOfConcern-bundle classified by C.2.1:

  • entityOfConcernRef(Y) ≠ entityOfConcernRef(X) — the value stored for EntityOfConcernSlot changes;
  • a KindBridge must relate Kind(entityOfConcernRef(X)) and Kind(entityOfConcernRef(Y));
  • groundingHolonRef may remain the same (e.g. same plant, different subsystem) or be transformed along a Bridge in the same ReferencePlane.

In practice, many retargetings operate on the receiving bundle <EntityOfConcernSlot, GroundingHolonSlot> (for example, when an episteme about a physical module is re-interpreted as an episteme about a function-holon realised in a different environment). The characteristic entityOfConcernChangeMode still classifies such morphisms by whether this bundle is preserved or intentionally re-identified under a KindBridge and reference-plane policy; the episteme on the codomain side is just the usual A.6.2 codomain episteme.

Over C.2.1 this is used for:

  • functional vs structural reinterpretation (e.g. an episteme about a physical module retargeted to an episteme about the function it realises; StructuralReinterpretation in E.TGA becomes a species of A.6.4);
  • signal vs spectrum transitions (Fourier-style moves where the EntityOfConcernSlot value changes from time-domain signal to frequency-domain representation but an invariant, such as energy, is preserved);
  • data vs model transitions (e.g. retargeting an episteme about raw observations to an episteme about a learnt model, with an invariant such as likelihood or sufficient statistics).

C.2.1 ensures that these retargetings have a clear domain EntityOfConcernSlot value and codomain EntityOfConcernSlot value and that any such move is expressed as a morphism over well-typed slots, not as an unstructured rewrite of “subject” or “object” labels.

Alignment with E.17. (Multi‑View Describing & Publication) (normative)*

U.EpistemeSlotGraph underpins the E.17 cluster:

  • E.17.0 U.MultiViewDescribing
  • E.17.1 U.ViewpointBundleLibrary
  • E.17.2 TEVB — Typical Engineering Viewpoints Bundle
  • E.17 MVPK — Multi‑View Publication Kit

Multi‑View Describing (E.17.0)

U.MultiViewDescribing organises families of Description epistemes and Description epistemes admitted for specification use over a shared entity of concern:

  • The EntityOfConcernClass parameter of E.17.0 is a species constraint on the ValueKind of EntityOfConcernSlot (EntityOfConcernClass ⊑ U.Entity).
  • Each member of a multi‑view family is a …Description/…Spec episteme with:
    • entityOfConcernRef into that EntityOfConcernClass,
    • viewpointRef drawn from a U.ViewpointBundle,
    • subjectRef decoding to DescriptionContext.

Within this pattern:

  • U.Viewpoint is exactly the ValueKind of ViewpointSlot in C.2.1.
  • U.View is U.EpistemeView, a species of U.Episteme whose content is already restricted to a particular U.Viewpoint and often also to a particular U.RepresentationScheme.

C.2.1 thus supplies the per‑episteme structure that E.17.0 rearranges into multi‑view families.

Viewpoint bundles (E.17.1/E.17.2)

U.ViewpointBundleLibrary and TEVB specialise the U.Viewpoint node:

  • A ViewpointBundle is a set of U.Viewpoint instances tailored to a class of entities of concern (e.g., holons in engineering contexts).
  • TEVB fixes EntityOfConcernClass = U.Holon (typically U.System or U.Episteme) and provides canonical engineering viewpoints: functional, structural, role‑enactor, interface‑oriented, etc.

From the C.2.1 perspective:

  • these bundles populate the ValueKind of ViewpointSlot;
  • engineering episteme species that want to be “TEVB‑aligned” must restrict viewpointRef to TEVB’s EngineeringVPId set, while keeping the same EntityOfConcernSlot discipline.

MVPK (E.17) as publication over C.2.1 views

MVPK treats U.View (i.e. U.EpistemeView) as its primary input:

  • it uses U.EpistemicViewing species (A.6.3) to generate publication‑oriented views from engineering or logical views;
  • it then publishes these U.View epistemes through publication face/form values with declared publication viewpoints and faces.

C.2.1’s distinction between:

  • U.Viewpoint (epistemic perspective specification) and
  • U.PresentationCarrier (carrier in C.2.1+ and publication-face/form discipline)

keeps epistemic perspective and physical medium separate:

  • MVPK operates on U.View epistemes and then on carriers;
  • the same View can be realised on multiple carriers without changing its entityOfConcern or ClaimGraph.

Any MVPK species that claims to be C.2.1‑conformant MUST:

  • treat U.View as a U.EpistemeView with a valid C.2.1 core,
  • document which C.2.1 slots it reads/writes (typically only representation/carrier‑related ones, leaving EntityOfConcernSlot and GroundingHolonSlot untouched),
  • refrain from introducing new claims about the EntityOfConcern value beyond what is in the source U.View’s ClaimGraph.

Bias‑annotation (informative)

Episteme‑first and pragmatics‑first. The pattern assumes that a claim-bearing episteme is meaningful only when it is about something for someone under some perspective. This follows the pragmatic turn in semantics: entityOfConcern and concerns are not afterthoughts but part of the core structure. The graph is therefore built around slots for EntityOfConcern, GroundingHolon, Viewpoint and ClaimGraph, not around abstract “propositions in the void”.

Operational/representational bias. C.2.1+ anticipates that certain RepresentationSchemes are operational in Novaes’ sense (admitting direct syntactic inference, like pen-and-paper arithmetic or proof states) while others are purely notational. The pattern remains neutral on which schemes are used but bakes in a place for operations and carriers so that:

  • symbol‑manipulating tools (SAT/SMT, proof assistants, classical programming languages),
  • distributed/latent representations (LLM embeddings, latent protocols like “DroidSpeak”, “Coconut”‑style communication),
  • hybrid ReAct‑style agent loops

can all be treated as different species operating over the same U.EpistemeSlotGraph. There is a bias towards making these operational differences explicit instead of hiding them behind “the model”.

Viewpoint and stakeholder bias. The pattern leans on the ISO‑style idea that viewpoints encode stakeholder concerns and role‑families, but it generalises this beyond architecture. U.Viewpoint is intentionally context-local and not bound to any single discipline; still, the examples are skewed toward engineering and epistemic use‑cases.

Didactic bias. The pattern is written to be teachable: semantic triangles are kept as didactic projections; examples like stools on lab rigs, services and SLAs, and model‑evaluation epistemes are deliberately simple. This may under‑represent more exotic epistemes (e.g. artistic, legal, or socio‑technical ones), but the intention is that these use the same slots with different species‑level constraints.

Conformance checklist (normative)

CC‑C.2.1‑1 - Minimal core components for episteme species. Any species of U.Episteme that participates in EntityOfConcern / Description-episteme boundary discipline, specification use/refinement, or E.17 multi-view/publishing MUST be representable as U.EpistemeCard/U.EpistemeView with at least:

content            : U.ClaimGraph
entityOfConcernRef : U.EntityRef
groundingHolonRef? : U.HolonRef
viewpointRef?      : U.ViewpointRef
referenceScheme?   : U.ReferenceScheme      // ByValue
meta               : …                      // edition, provenance, status (A.7/F.15)

and corresponding SlotSpecs consistent with A.6.5 (EntityOfConcernSlot, GroundingHolonSlot, ClaimGraphSlot, ViewpointSlot, ReferenceSchemeSlot).

CC‑C.2.1‑2 - No kernel type for “EntityOfConcern” or “GroundingHolon”. Patterns MUST NOT introduce kernel types U.EntityOfConcern or U.GroundingHolon:

  • EntityOfConcernSlot has ValueKind U.Entity ( species‑constrained via EntityOfConcernClass if needed),
  • GroundingHolonSlot has ValueKind U.Holon.

Plain terms “EntityOfConcern value” and “grounding holon” are allowed only as slot-filler descriptions under the declared SlotKind/ValueKind/RefKind discipline.

CC‑C.2.1‑3 - SlotKind/ValueKind/RefKind discipline. All episteme‑related slots, including EntityOfConcernSlot, GroundingHolonSlot, ClaimGraphSlot, ViewpointSlot, ViewSlot, ReferenceSchemeSlot (and any extensions in C.2.1+), MUST:

  • follow the naming discipline of A.6.5 (*Slot for SlotKinds, *Ref only for RefKinds/fields),
  • declare a ValueKind and refMode (ByValue or a RefKind),
  • be used consistently across patterns that refer to the same conceptual position.

CC‑C.2.1‑4 - DescriptionContext wiring. Any episteme species whose name or pattern claims to be a …Description or …Spec in the sense of E.10.D2 MUST:

  • expose subjectRef : U.SubjectRef,
  • provide a decoding to DescriptionContext = ⟨EntityOfConcernRef, BoundedContextRef, ViewpointRef⟩,
  • ensure that EntityOfConcernRef matches entityOfConcernRef (EntityOfConcernSlot), and
  • ensure that ViewpointRef matches viewpointRef or is derivable from a U.ViewpointBundle under documented rules.

CC‑C.2.1‑5 - Morphism declarations over slots. Any pattern in A.6.2–A.6.4, E.17, E.TGA, or discipline packs that defines morphisms between epistemes SHALL:

  • state whether it is a species of U.EffectFreeEpistemicMorphing, U.EpistemicViewing, or U.EpistemicRetargeting,
  • declare its entityOfConcernChangeMode (preserve/retarget),
  • name which SlotKinds it reads and writes,
  • state its behaviour on entityOfConcernRef, groundingHolonRef, viewpointRef, and referenceScheme.

CC-C.2.1-5a - Episteme/publication lane split for semio-facing terms. Any pattern, publication-form profile, evidence-use note, or FPF-facing term that uses pre-FPF sign vocabulary, explanation, publication, source cues, authority-looking cases, or reader reliance MUST name the claim-bearing value as U.Episteme, U.EpistemePublication, or a declared species of U.Episteme. When publication is live, it MUST separately name the publication form, U.View or MVPK face, carrier or rendering, source-finding cue, and either governingPatternRef or authoritySourceRef when interpretation or use depends on a named authority reference. It MUST NOT use generic semio wording, generic source wording, generic project-work wording, or container-placement wording as solution terms.

CC‑C.2.1‑6 - Semantic‑triangle usage guard.

If a semantic triangle or parallelogram diagram appears in a pattern or tutorial, there must be an explicit note that:

  • it is a didactic projection of U.EpistemeSlotGraph, and
  • normative laws are stated in terms of C.2.1 nodes and morphisms, not in terms of triangle corners.

CC‑C.2.1‑7 - KD‑CAL / ReferencePlane alignment. Any pattern that evaluates or compares epistemes (KD‑CAL/LOG‑CAL, CHR, CG‑Spec, etc.) MUST point out:

  • how U.ClaimGraph is interpreted in a ReferencePlane,
  • how GroundingHolonSlot figures into measurement or validation,

CC‑C.2.1‑8 - Context locality and Bridges. Any U.Episteme species that is consumed by KD‑CAL / LOG‑CAL / CHR‑based patterns SHALL declare a U.BoundedContextRef; all F–G–R computations and C.2.1 slot interpretations are context‑local. Cross‑context use MUST proceed via an explicit Bridge with CL / Φ‑policy (F.9/B.3), with penalties routed to R‑lanes only; F and the slot structure from C.2.1 remain unchanged.

CC‑C.2.1‑9 - Carriers and Work outside episteme content. C.2.1 inherits A.7 and A.12 separation obligations: U.PresentationCarrier values, publication-side values, and U.Work occurrences MUST NOT be treated as parts of U.Episteme or as values of any SlotKind in U.EpistemeSlotGraph. Episteme content stays in U.ClaimGraph and U.ReferenceScheme; evidence enters only via U.EvidenceRole bindings that point to external U.Work occurrences and carriers (A.10 and B.3). Changing carriers or re-publishing work alone does not change the episteme determined by ⟨content, entityOfConcernRef, referenceScheme⟩ in its U.BoundedContext.

CC‑C.2.1‑10 - Reflexive entityOfConcern guard. When an episteme uses C.2.1 to speak about another episteme (ReferencePlane = episteme), or about itself (self-describing or meta-specification cases), patterns SHALL ensure that the resulting JustificationGraph / evaluation chains are acyclic along justification paths. Reflexive describe / citation edges may exist as literature references, but they MUST NOT form minimal justification cycles for acceptance or KD-CAL assurance decisions; the trust calculus MUST always bottom out in external evidence (U.Work with U.EvidenceRole) rather than in purely self-referential claims.

Consequences (informative)

Benefits

  • Single, extensible episteme core. C.2.1 gives a small, stable set of positions (EntityOfConcern, GroundingHolon, ClaimGraph, Viewpoint, View, ReferenceScheme) and components (U.EpistemeCard, U.EpistemeView, U.EpistemePublication) on which all higher‑level patterns depend. This avoids the proliferation of “epistemic objects” and “facets” with overlapping semantics. Transparent EntityOfConcern & grounding discipline. The pair (EntityOfConcernSlot, GroundingHolonSlot) is no longer hidden inside ad-hoc “SubjectRef” fields or semantic triangles: both are explicit, typed slots. This makes retargeting, viewing and correspondence laws (A.6.2A.6.4, E.17.0) easier to state and check.
  • Better fit for contemporary representation practice. By distinguishing ClaimGraph, RepresentationScheme, Tokens, Carriers and Operations (in C.2.1+), the pattern matches contemporary SoTA views of notation and formalism:
    • formal languages as cognitive tools and de-semanticisation techniques (Novaes),
    • operational iconicity and medium‑sensitive reasoning (Krämer, Malafouris),
    • hybrid symbolic–neural workflows (e.g. ReAct, tool‑augmented LLMs, latent protocols). FPF can model both symbol‑heavy and latent‑heavy workflows without privileging either.
  • Uniform substrate for multi‑view description and publication. MultiViewDescribing, viewpoint bundles (TEVB), and MVPK all land on the same episteme core. This avoids the current “views vs viewpoints vs faces” confusion and leaves “architecture” as a domain‑specific specialisation rather than a competing meta‑ontology.
  • Tooling alignment. Slot discipline plus explicit episteme components map cleanly to implementation types (records, row‑typed schemas, effectful handlers). Tools can generate code, schemas or telemetry from episteme species without guessing what “subject”, “context” or “object” mean.

Trade‑offs / costs

  • More explicit structure. Pattern users and authors must declare slots, ValueKinds and references explicitly, and keep DescriptionContext consistent. This is more upfront work than writing ad‑hoc “Subject/Object” fields, but it pays off in substitution safety and cross‑pattern reuse.
  • Migration effort. Legacy uses of “EpistemicObject”, “Facet”, “Subject”/“Object”, and raw …Ref fields will need refactoring into C.2.1 slots + A.6.5 SlotSpecs. Current prose uses the selected C.2.1 slots and A.6.5 SlotSpecs directly; old wording is source/input material for repair, not a live alternate vocabulary.
  • Exposure of representation biases. Being explicit about RepresentationSchemes and Operations may surface disagreements about which representations are “primary” in a team or discipline. C.2.1 does not resolve these disagreements; it only makes them visible and therefore debatable.

Relations (overview)

Builds on

  • A.1 U.Holon — for treating episteme as a holon with components.

  • A.6.0 U.Signature — for interpreting episteme kinds as n‑ary relations over slots.

  • A.6.5 U.RelationSlotDiscipline — for SlotKind/ValueKind/RefKind discipline over episteme slots.

  • A.7, E.10.D2 — for EntityOfConcern / Description-episteme boundary discipline, specification use/refinement gates, and the interpretation of subjectRef as DescriptionContext.

  • C.2 (KD‑CAL, LOG‑CAL) — for ClaimGraph semantics, ReferencePlanes, and Bridges.

  • E.8, E.10 — for pattern authoring discipline and lexical guards.

  • Constrains

  • A.6.2A.6.4 — by fixing the minimal episteme component set those morphisms operate on and by requiring an explicit EntityOfConcernChangeMode characteristic (entityOfConcernChangeMode ∈ {preserve, retarget}) over EntityOfConcernSlot/GroundingHolonSlot.

  • E.17.0E.17.2 — by specifying how EntityOfConcern, Viewpoint, View and ReferenceSchemes are represented at episteme level.

  • E.17 (MVPK) — by separating U.View (episteme) from U.PresentationCarrier (publication carrier), and by requiring that publication morphisms be U.EpistemicViewing species over C.2.1‑conformant views.

  • F.18 (LEX‑BUNDLE) — by providing the episteme‑specific name cards and guards for EntityOfConcern/GroundingHolon/Viewpoint/View/ReferenceScheme and their SlotKinds.

Used by

  • A.6.2 U.EffectFreeEpistemicMorphing — as the default episteme slot/value structure for episteme-to-episteme transforms.
  • A.6.3 U.EpistemicViewing — as the substrate for entityOfConcern‑preserving projections (views).
  • A.6.4 U.EpistemicRetargeting — as the substrate for EntityOfConcern-bundle retargeting transforms between epistemes (Ep→Ep with entityOfConcernChangeMode = retarget).
  • E.17.0 U.MultiViewDescribing, E.17.1, E.17.2 — to organise families of Description epistemes, including Description epistemes admitted for specification use, under Viewpoints and EntityOfConcernClass constraints.
  • E.17 (MVPK) — to publish episteme views through publication faces/forms and carriers.
  • E.TGA — to interpret StructuralReinterpretation and other engineering projections as episteme morphisms over a well‑typed U.EpistemeSlotGraph.

Together, these relations make U.EpistemeSlotGraph the single normative core for thinking about epistemes, their EntityOfConcern mapping, their representations, and their transformations across FPF.

C.2.1:End

Epistemic Precision Restoration

Type: Architectural (A), C.2 precision-restoration pattern Status: Stable Normativity: Normative unless a section is explicitly informative

Use this when

Source-expression clarification. Use this mode when ordinary non-FPF prose needs precise interpretation. The aim is source-local clarification: recover what the sentence may mean, identify candidate kinds and relations, preserve important wording when needed, and produce one clarified phrase, candidate-set note, epistemic precision-restoration note, or use disposition. This mode may apply E.10, A.6.P, A.6.6, F.18, A.7, E.17, or another governing FPF pattern as a repair lens, but it does not require the source expression itself to use FPF vocabulary.

FPF-governed use. Use this mode when wording has FPF-governed use and relies on loose wording around epistemes, publications, views, publication forms, generic publication faces, MVPK faces under E.17 constraints, bounded publication units, carriers, records, relations, admissible uses, or pattern application. The wording states the recovered FPF kind named by value, relation record, relation phrase, tuple-like record, project-side FPF kind and reference named by value, or explicit non-use disposition.

Use C.2.P as epistemic precision restoration for wording whose live entity or construction is an episteme, publication, or source-use construction: source wording, source-local meaning, claim-bearing episteme, publication, view, face, carrier, publication unit, EntityOfConcern, grounding relation, pattern-application wording, project-side reliance wording, or the disposition by which source expression has or lacks FPF-governed use.

E.10 governs lexical and wording-use precision. C.2.P governs epistemic precision restoration across episteme, publication, carrier, and view distinctions: expression, source-local meaning, recovered FPF kind and relation set, publication construction, carrier construction, view construction, EntityOfConcern or grounding relation, admissible reader move, and use or non-use disposition.

The practical partition is episteme-slot or publication-construction use, but it is not limited to named C.2.1 slots. It also includes publication constructions, carrier and face constructions, source expression admitted for FPF-governed use, and pattern-application wording when those are used as claim-bearing or admissibility-bearing signs. Apply this pattern from E.10 only when the governing pattern cannot yet be selected directly because source wording, claim-bearing episteme, publication or carrier construction, project-side reliance, pattern-application wording, or use or non-use disposition is still unresolved. The pattern-local decision selects source-expression clarification or FPF-governed use, recovers the live episteme-publication relation set, chooses recovered-by-value, reduced-use-cue, extension-candidate, blocked-use, rewrite-incomplete, or not-triggered disposition, and preserves the remaining admissible reader move before any neighboring pattern governs its own invariant.

Precision-restoration pattern note. A precision-restoration pattern is an architectural pattern for a recurring complex precision problem whose wording routinely hides several live distinctions. A.6.P is relation precision restoration; C.2.P is epistemic precision restoration. C.30.P is the selected architecture and structure precision-restoration pattern when architecture or structure wording hides the architecture claim being made, structure kind, structure relation, view, or publication relation or source-use relation. C.16.P is the selected characteristic and scale precision-restoration pattern when characteristic, scale, metric, score, indicator, coordinate, threshold, or comparison construction is hidden. C.16.Q is the selected quality-term precision-restoration pattern when quality-term or evaluative characterization is live and the found problem is not relation construction. E.10 detects the wording problem and selects the applicable path; E.10.ARCH carries the shared recovery algorithm and applicability-row architecture; neither replaces this pattern's episteme, publication, and source-use ontology.

Problem in the wordingUse this pattern forApplicable neighboring FPF pattern
Ordinary source text needs more precise languageSource-expression clarification: source-local clarification, candidate kinds and relations, wording preservation by value when needed, clarified phrase, candidate-set note, epistemic precision-restoration note, or use disposition.E.10, A.6.P, A.6.6, F.18, A.7, E.17, or another governing pattern as a repair lens only for the selected claim being made or admissible-use question.
Wording has FPF-governed useFPF-governed use: recovered FPF kind named by value, relation record, relation phrase, tuple-like record, project-side FPF kind and reference named by value, or explicit non-use disposition.E.10 plus the governing pattern for each recovered claim being made or admissible-use question.
Claim-bearing episteme, EntityOfConcern, grounding relation, publication, view, face, carrier, publication unit, source-side relation, receiving-side relation, or bounded publication-unit wording is liveRecover the kind and relation set, relation construction, and publication construction before accepting the sentence.C.2.1, A.7, E.17.0, E.17, MVPK, and local episteme and publication patterns.
Relation, comparison, dependency, support, sameness, grounding, mapping, endpoint, admissible-use, or project-side reliance is liveRecover the relation, claim being made, or admissible-use boundary before treating the wording as FPF-governed.A.6.P, retained A.6.P specializations, A.6.B, and the evidence named by value, work, decision, assurance, causal-use, mathematical-lens, or quality pattern when live.
A reusable term or stable local head is being chosenPrevent a broad replacement from becoming a new FPF term by taste.F.18, with E.10:0.2 replacement-candidate anti-umbrella rule.
The repair would leave correct typing but no useful reader actionTreat the rewrite as incomplete.E.2, E.8, E.10:6.2, E.12, and the FPF pattern named by value that carries the claim being made.

Ordinary-language survival. Ordinary words remain admissible until the sentence gives them FPF-kind, relation, authority, evidence, admissibility, work, gate, decision, bridge, or reliance claim. Source may stay ordinary when it only means where a quote came from; view may stay ordinary when it means what the reader sees and not U.View; route may stay ordinary navigation prose; support may stay ordinary help. Repair by FPF-governed sentence function, not by trigger word alone.

Not this pattern when. C.2.P is not the governing pattern for every recovered construct. General FPF lexical conformance stays under E.10; stable reusable naming under F.18; relation precision under A.6.P; A.6.B law-, admissibility-, deontic-, and effect-claim boundary splitting under A.6.B; EntityOfConcern, Description episteme, and carrier separation under A.7; view and publication discipline under E.17 and E.17.0; architecture and structural description adequacy under C.30, C.30.ASV, A.22, C.31, or the architecture and structure pattern governing the claim; project work, evidence, gate, decision, method, action-invitation, assurance, and engineering-justification claims under their governing FPF patterns. When one of those claims is live, this pattern supplies source-expression unpacking and rewrite disposition; the FPF pattern named by value supplies its invariant.

Do not punish clarity. Prefer the clearest ordinary head that preserves kind, relation, and admissible use. Do not replace a clear plain phrase with a technical phrase unless the technical phrase blocks a live false interpretation or is needed for accepted stable FPF naming. In an ordinary case, reader help, source-pointer-only, or comparison only may be better than a more technical phrase.

What goes wrong if missed

Episteme-publication-heavy text starts to build a parallel ontology. A generic publication face becomes a U.View, a file becomes an episteme, a dashboard tile becomes evidence, a pattern name becomes a procedure, a slash list becomes a group kind, or a broad word such as source hides whether the text means a pattern, a DRR, a publication, a document with named source, evidence, architecture, or reviewed publication, review packet, review record, or review state, a project-side FPF kind and reference named by value, or a relation.

The immediate cost is not only ugly terminology. Engineers and FPF authors start making action, evidence, gate, decision, or engineering-justification claims from the wrong entity, publication, record, relation, or carrier.

What this buys

C.2.P gives one small epistemic precision-restoration move: recover the FPF kind and relation set first, then write wording that preserves the needed distinction without adding another claim. It prevents string-replacement cleanup, keeps FPF-side and project-side episteme and publication work separate, and blocks unclear wording from having FPF-governed use by guesswork.

Successful repair condition. Epistemic precision restoration is not closed by type-correct wording alone. It is governed by E.2 Pillars, especially P-2 Didactic Primacy, together with E.12 and the register rule in E.10:6.2. It closes only when the repaired text preserves or restores one remaining admissible reader move: a usable action, a recognition reason that tells the working reader why the distinction matters, or a named FPF pattern application that carries the claim being made. When both Tech and Plain registers are live, the Tech interpretation must remain recoverable and any Plain or didactic line must map back to that Tech interpretation. A Plain, more expressive line, or intentional didactic metaphor may stay ordinary when it carries no FPF-governed use; when it carries ontological, evidence, causal, assurance, bridge, gate, work, decision, or admissibility claim, that claim being made must be recoverable through the Tech fields, FPF kind named by value, recovered relation, project-side source reference, or disposition named by the repair. If a repair in a FPF-governed Problem frame, Problem section, recognition text, example, or worked slice makes the text more exact but less able to show the working situation, why it matters, or what action remains, the repair is incomplete unless the governing FPF pattern is named for that claim being made. Overread removal is only half of epistemic precision restoration; the other half is surviving admissible action under the Pillars.

Recovery focus in plain terms. The use being made is one episteme-publication-heavy wording use inside conformant text: the word or phrase, the sentence function it carries, the FPF kind or relation it must recover, and the admissible remaining use after recovery.

Primary working reader. The first reader is an author or reviewer of conformant FPF-style text who must repair wording without losing ontology. The downstream reader is the engineer-manager using the resulting pattern or project text in a working situation.

Anti-overread payoff question. A repair is useful only if the pattern text can answer three things in ordinary prose: what false downstream interpretation is blocked; what useful admissible action remains; and when the reader must apply the FPF governing pattern named by value because evidence, gate, decision, work, assurance, bridge, release, or reliance is live. If the repair blocks an overclaim but leaves no useful action, the text is probably becoming ceremony rather than guidance.

Problem frame

FPF already has episteme, publication, view, carrier, presentation, relation, naming, and pattern-application concepts. FPF-governed project, review, draft, pattern, and architecture prose, plus source prose being unpacked for possible FPF use, can still introduce convenient intermediate words that survive into final guidance without their kind and relation set recovered.

The recurring situation is simple: a sentence is understandable enough to feel worth keeping, but its head kind is not recovered. If it is repaired by replacing one broad word with another broad word, the ontology gets worse while the text looks cleaner.

Purpose and Scope

This pattern gives the current glossary and rewrite rules for terms around epistemes, publications, views, publication forms, generic publication faces, MVPK faces under E.17 constraints, carriers, records, and bounded publication units.

It exists because episteme-publication-heavy texts can use locally convenient heads that collapse EntityOfConcern, publication unit, publication face, carrier, record, source relation, and project-side value. Those words may be useful recognition handles, but they are not safe FPF heads when they carry ontology, authority, or authority-changing meaning.

The rewrite discipline here is ontological and use-facing, not lexical; in this pattern the repair is bounded to episteme, publication, and source-use precision:

  • do not replace one broad token with one new broad token by string substitution;
  • first recover the FPF kind and relation set, the claim-bearing status, the publication, view, carrier, or relation construction, and any work, action, or authority crossing;
  • then choose the smallest wording that preserves the FPF-governed distinction without creating a second ontology.

This pattern uses the E.10 trigger result as its entry condition, then works in the C.2.1 and E.17 epistemic-publication ontology rather than in a lexical registry.

Problem

Without an epistemic precision-restoration discipline for episteme-publication-heavy wording:

  1. broad publication words hide whether the claim is about U.Episteme, U.View, publication form, generic publication face, MVPK face under E.17 constraints, PublicationUnit, carrier, document with named source, evidence, architecture, reviewed publication, review packet, review record, or review state, or project-side FPF kind and reference named by value;
  2. FPF pattern-application claims and project-side work-occurrence, work-plan, decision, action-invitation, method, record, carrier, or front-end claims get mixed in one sentence;
  3. slash lists and heterogeneous rows become false group kinds;
  4. unclear source meaning is guessed into FPF-governed wording rather than blocked or assigned to an accepted FPF extension;
  5. authors copy the same loose wording into DRRs, patterns, source-basis notes, or project texts.

Forces

ForceTension
Exactness vs readabilityFPF-governed wording needs kinds named by value, but a sentence overloaded with every possible kind becomes unreadable.
Preservation vs cleanupAccepted architecture text must not be paraphrased away, but source-companion status cannot be mistaken for pattern authority.
Local repair vs new ontologyMany phrases only need local A.6.P and F.18 recovery; a few reveal a real missing FPF kind or relation.
FPF-side vs project-side workThe same word can describe FPF pattern authorship or a user's project publication, record, work, or action.
Guidance vs auditThe pattern must tell authors what to do, while check rows only verify that the rewrite was carried out.

Solution

Repair episteme-publication-heavy wording by epistemic precision restoration, not by dictionary replacement.

A successful rewrite satisfies these field-validity constraints:

  1. the head kind and sentence function are recoverable under E.10;
  2. a stable reusable name has F.18 status;
  3. a relation, comparison, dependency, support, sameness, grounding, mapping, or endpoint claim has A.6.P relation precision, with admissibility and project-side reliance questions split into their own fields;
  4. a claim-bearing episteme, episteme species named by value, episteme-lane view, or project-side FPF kind and reference named by value has the needed C.2.1 typing or named FPF claim or admissible-use boundary named by value;
  5. publication, view, face, and carrier distinctions satisfy E.17.0, E.17, and MVPK;
  6. the repaired text satisfies E.2 Pillars, especially P-2 Didactic Primacy, by preserving or restoring one remaining admissible reader move: a usable action, a recognition reason that tells the working reader why the distinction matters, or a named FPF pattern application that carries the claim being made; when both Tech and Plain registers are live, the Plain or didactic line maps back to the recovered Tech kind, relation, or FPF pattern application under E.10:6.2; ordinary Plain wording and intentional didactic metaphor stay light when they carry no FPF-governed use, but ontological, evidence, causal, assurance, bridge, gate, work, decision, or admissibility claim in a more expressive Plain line must be recoverable through the repaired Tech fields; FPF-governed Problem frames, Problem sections, recognition texts, examples, and worked slices must still show the broad working situation and first useful move, or the rewrite is incomplete;
  7. the final phrase preserves the distinction without adding another claim;
  8. unrecoverable meaning, kind, register mapping, or remaining reader move fails closed.

The detailed solution below carries the glossary and rewrite rules as ordinary pattern subsections. It is not an external container: these subsections are the pattern's detailed epistemic precision-restoration guidance.

EpistemicPrecisionRestorationRecord

For FPF-governed cases, the recovery product is a compact pattern-local EpistemicPrecisionRestorationRecord or an equivalent local rewrite note. Ordinary local phrase repair may end as the repaired sentence itself when kind, relation, and admissible use are now clear and no downstream reliance, cross-context reuse, grouped-kind risk, hidden authority claim, project-side overclaim, conflict among publication, EntityOfConcern, and project-side action claims, or contested source meaning remains live. Prefer the plain names epistemic precision-restoration note, compact epistemic precision-restoration row, or local rewrite note when durable inspection does not require the code-like field name. The recovery note is a lightweight pattern-local authoring or review product, not a new ontology, not a dispatch table, not a durable FPF record kind, and not a mandatory heavyweight project record. It becomes a durable FPF record only if another accepted pattern or accepted DRR explicitly admits it as one. It records only the trigger, the recovered FPF kind and relation set, the requirement from the governing FPF pattern, and the final rewrite disposition that must remain inspectable after the repair.

Minimum fields when FPF-governed:

Recover by sentence function and claim being made, not word form. For words such as source, support, status, valid, ready, approved, and used, first ask what the sentence would let the reader do or rely on: source-finding only, source availability, source use, evidence relation, gate passage, decision status, readiness threshold, work permission, assurance, engineering justification, or ordinary orientation. Then fill only the field whose FPF kind named by value, relation, or project-side reference is live.

FieldMeaningGoverning FPF source when the corresponding claim is being made
triggerSpanThe exact word, phrase, field, row, or sentence fragment carrying episteme-publication claim-bearing use.E.10 and this pattern.
sentenceFunctionWhether the span is definition, claim, instruction, comparison, publication description, evidence statement, gate statement, work statement, reliance statement, example, quote, or another named function.E.8, E.10, and the local pattern being authored.
recoveredHeadKindThe FPF kind named by value or explicit non-use disposition recovered from the phrase.F.18, A.6.P, A.7, and the governing pattern for that kind.
laneAndKindSetThe live side, kind, and relation set: FPF-side pattern text; project-side episteme, publication, and work; the A.7 EntityOfConcern, Description episteme, and carrier distinction when live; publication form, generic publication face, MVPK face under E.17 constraints, U.View, PublicationUnit, carrier, front-end, and cue when live; and work named by value, evidence, gate, decision, or action-invitation value when live.A.7, E.17, current episteme and publication patterns, and project-side FPF patterns.
publicationRelationSetU.EpistemePublication, publication form, generic publication face, MVPK face under E.17 constraints, bounded PublicationUnit, carrier, carrier relation, and front-end relation when that relation is being made.C.2.1, E.17.0, E.17, MVPK, and A.7.
claimBearingEpistemeOrRecordExact claim-bearing U.Episteme, episteme-lane U.View with explicit episteme tether when the governing FPF pattern makes that view live, project record kind named by value and reference, or no claim-bearing episteme or record disposition. Publication form, generic publication face, carrier, PublicationUnit, and source cue stay in publicationRelationSet or projectSideFPFRef unless the claim is explicitly about that publication form, publication face, carrier, publication unit, or source cue. An MVPK face under E.17 constraints is handled through the episteme-lane U.View typing when that typing is live.C.2.1, E.17, and the governing pattern for the record if live.
relationClaimSliceEmpty, or a local note that A.6.P relation precision is live for this sentence. It must name the relation problem being handled: relation, comparison, dependency, support, sameness, grounding, mapping, endpoint claim, or cross-context bridge claim. The recovery then names RelationKind, QualifiedRelationRecord, relation phrase, candidate-set note, or bridge card when live.A.6.P.
admissibleUseThe exact admissible use, non-admissible stronger or adjacent use, and L-, A-, D-, and E-claim split when the sentence makes a boundary-use claim.A.6.B, A.6, and the governing pattern for the use.
projectSideFPFRefThe project-side FPF kind and reference named by value when the sentence would be used for work, evidence, gate, constraint, adjudication, decision, commitment, method, action invitation, assurance, or engineering justification.A.15, A.15.4, A.10, A.20, A.21, B.3, C.11, A.2.8, A.2.9, A.6.A, or another governing FPF pattern.
precisionRestorationExitEmpty, or the exact precision-restoration or governing pattern that takes over after source wording, current FPF wording, publication, and carrier recovery: A.6.P, A.6.F, C.30.P, C.16.P, C.16.Q, A.6.3.CSC, F.18, or an evidence named by value, assurance, gate, work, decision, causal-use, release, mathematical-lens, architecture, characteristic, quality, or publication pattern.E.10, E.10.ARCH, and the pattern governing the recovered claim named in the field.
selectedRewriteThe final wording named by value or record-shaped value.This pattern plus the governing FPF pattern named above.
remainingAdmissibleReaderMoveOne short line, Plain-facing when the text serves a working reader, naming what the reader may now do, why the distinction still matters, or which named FPF pattern governs the claim being made. This field is the local E.2 P-2 preservation check for FPF-governed epistemic precision restoration, not an optional commentary line. When both Tech and Plain registers are live, this line must map back to the recovered Tech kind, relation, or FPF pattern application. It may be more readable or memorable than the Tech line, and may use an intentional didactic metaphor, but any ontological, evidence, causal, assurance, bridge, gate, work, decision, or admissibility claim must remain recoverable through that repaired Tech interpretation. If no such line can be stated, the rewrite is incomplete or must fall to a non-use disposition.This pattern, E.2, E.8, E.10:6.2, E.12, and the FPF pattern named by value when another pattern governs a claim being made.
dispositionLocal recovery outcome: recovered by value, reduced-use cue, understandable FPF extension candidate, blocked use, rewrite incomplete, or not triggered. This slot is not a recovered FPF kind.This pattern.

Use the short form when only one field is live. Use the full record when several fields are live or when the phrase might otherwise create a grouped kind, hidden authority claim, project-side overclaim, conflict among publication, EntityOfConcern, and project-side action claims, contested source-use meaning, or procedure-like ordering of pattern applications.

General Recovery Check

Use this recovery check whenever text proposes a new term, repairs an episteme-publication-heavy term, asks for language precision, or relies on wording around PublicationUnit, EntityOfConcern, publication, view, face, carrier, source-side relation, receiving-side relation, publication face, EntityOfConcern, or bounded publication-unit status.

  1. Mode selection. Decide whether the current use is source-expression clarification over non-FPF prose or FPF-governed use. In source-expression clarification, preserve source-local nuance and do not force the whole source into FPF vocabulary. In FPF-governed use, the wording must satisfy E.10 and the governing patterns named by the recovery.

  2. E.10 trigger scan and head-kind recovery. Use E.10:0.2 as the shared trigger scan. Decide what the head noun names before accepting the phrase: EntityOfConcern, Description episteme, or Description episteme admitted for specification use, U.Episteme, U.View, publication form, generic publication face, MVPK face under E.17 constraints, carrier or rendering, project-side FPF kind and reference named by value, A.15.1 dated U.Work occurrence, A.6.A action invitation, A.2.9 SpeechActRef, A.2.8 U.Commitment, U.Method, U.MethodDescription, document with named source, evidence, architecture, reviewed publication, review packet, review record, or review state, or source-local ordinary sense. Apply EntityOfConcern and Description-episteme boundary and specification use, Context, Tech, Plain, and carrier humility rules before treating a word as meaning-bearing.

  3. F.18 naming pass when a stable term is being chosen. If the phrase is becoming a reusable head, fill at least the lightweight Name Card facts: Context, Kind, purpose and use-domain, local sense, candidate head families, NQD-front reasoning, sense-seed read-through, and the lexical Q tuple {SemanticFidelity, CognitiveErgonomics, MorphologicalActionFit, AliasRisk}. Do not pick a label only because it is intuitive. Do not accept a replacement label until it passes the E.10:0.2 replacement-candidate anti-umbrella rule.

  4. A.6.P relation-precision pass when a phrase carries relation, comparison, or action-invitation claim. Restore generic head kind first, then endpoint facets and kinds, then relation kind, slots, qualifiers, scope, time, viewpoint, and hooks for admissibility, evidence, and work. For support wording, do not stop at a substitute label: select the live support-like claim or relation under A.6.P first, including source-description relation, EntityOfConcern or grounding-holon grounding, base relation through A.6.6, evidence, assurance, causal-use, mathematical-lens, characteristic or measurement, admissible-use, work or enablement, or publication-companion use. If ambiguity remains, write a local Candidate-Set Note rather than debating synonyms.

  5. C.2.1 episteme-slot pass when the item is claim-bearing. Name EntityOfConcern, grounding, ClaimGraph, viewpoint and view, reference scheme, representation scheme, and bounded context as far as the claim needs. Do not use PublicationUnit or a carrier word as a substitute episteme.

  6. E.17.0, E.17, MVPK publication pass when the item is published or reader-facing. Separate the underlying episteme or view, U.EpistemePublication, publication form, generic publication face, MVPK face under E.17 constraints, PublicationUnit, carrier or rendering, and the project-side FPF kind and reference named by value when a project-side claim is live. A face, card, screen, or explanation can guide interpretation or source-finding without becoming evidence, work, gate passage, authority, or release permission. If those claims are live, fill admissibleUse and projectSideFPFRef instead of treating the generic publication face or MVPK face under E.17 constraints as the source value.

5a. Precision-restoration exit after source wording and current FPF wording recovery. If source wording and current FPF wording, publication, carrier, face, or PublicationUnit recovery exposes architecture or structure wording, characteristic or scale wording, quality-term or evaluative characterization, function-like carrier wording, relation construction, controlled coarsening, naming, evidence, assurance, gate, work, decision, causal-use, release, mathematical-lens, or another neighboring claim, fill precisionRestorationExit with the pattern governing the recovered claim. Do not keep the neighboring claim inside C.2.P after this pattern has recovered the source wording, current FPF wording, and publication relation set.

  1. Remaining admissible reader move. After the kind, relation, publication, and project-side splits are recovered, state the remaining admissible reader move in one short line: what the working reader can now do, why the distinction still matters, or which named FPF pattern governs the claim being made. If both Tech and Plain registers are live, keep the Tech interpretation recoverable and make the Plain or didactic line map back to the recovered Tech kind, relation, or named FPF pattern application under E.10:6.2. Do not make this a heavy form for ordinary prose: a Plain line that carries no FPF-governed use may stay ordinary; a Plain line that carries ontological, evidence, causal, assurance, bridge, gate, work, decision, or admissibility claim must be recoverable through the repaired Tech fields. If the repaired wording only proves that an overclaim was removed, but leaves no usable action, recognition reason, or FPF pattern application for the claim being made, do not classify the repair as recovered by value.

  2. Authority-changing rewrite boundary. If the result would rename an accepted FPF pattern, change an accepted FPF term, or mint a reusable FPF kind, this pattern only classifies the phrase as recovered by value or as an understandable FPF extension candidate. It does not make the authority change by itself. Use the accepted source that already carries the decision by value; do not add a second decision source merely to restate the same content.

Fail closed:

  • if the kind and relation set cannot be recovered, keep the term as plain or informative prose;
  • if the relation kind cannot be recovered, keep the statement as a cue or split alternatives;
  • if the publication construction cannot be recovered, do not use that publication, generic publication face, MVPK face under E.17 constraints, form, carrier, or rendered unit for work, evidence, gate, or authority claims;
  • fill relationClaimSlice only when a relation claim is live, and fill admissibleUse plus projectSideFPFRef when an admissibility or project-side reliance claim is live;
  • if the recovered wording is type-correct but leaves no remaining admissible reader move, recognition reason, Tech-to-Plain mapping when both registers are live, or FPF pattern application, or if a Plain or didactic line supplies practical guidance through unrecovered ontological, evidence, causal, assurance, bridge, gate, work, decision, or admissibility claim, mark the rewrite incomplete or demote the phrase to reduced-use cue or blocked use before using it as claim-bearing FPF or project text.
Slash Discipline

In conventional abbreviations, source titles, mathematical notations, standards, URLs, file paths, and ordinary notations, a slash can be part of an accepted designation rather than a hidden FPF kind. In FPF-facing episteme and publication ontology, a slash is still a recovery trigger before it is a synonym marker unless the mark is part of such accepted notation, carrier syntax, or conventional designation.

Before leaving a slash expression in current prose, classify the expression as one of these cases:

  • accepted notation or conventional designation: a standard name, source name, discipline abbreviation, established compound name, formula, ratio, fraction, unit, path-like quoted source token, title, product name, file path, URL, or quoted source wording where the slash is part of the accepted designation or carrier syntax; keep ISO/IEC, ISO/IEC/IEEE, 1/2, URLs, conventional abbreviations, and similar forms when the sentence uses them as notation;
  • a plain-language synonym pair with no ontology, authority, evidence, or admissibility claim;
  • a lazy and/or-style join that must be split or recovered before FPF-governed use;
  • a composite-kind candidate that needs F.18 and A.6.P recovery;
  • a relation claim that needs a RelationKind, a QualifiedRelationRecord, or a multi-term relation phrase with typed endpoints, slots, qualifiers, scope, time, and viewpoint;
  • a tuple-like record that needs a named record kind and named slot semantics;
  • a failed ontology signal where the sentence lists unlike values because the FPF kind under repair, relation record, relation phrase, tuple-like record, alternative-case disposition, or not-triggered disposition has not yet been recovered.

If the expression is not one of the safe notation, conventional-designation, carrier-syntax, quoted-source, or plain-language cases, do not keep the slash as final wording. Do not repair it by replacing the slash with one equally vague grouped word. Write the recovered FPF kind, relation record, relation phrase, tuple-like record, alternative-case disposition, or not-triggered disposition by value.

Unclear Source Meaning and FPF Extension Candidates

Sometimes the problem is not a bad word but one of two different cases:

  • the intended claim cannot be determined from the surrounding source, current FPF kinds, or current FPF episteme and publication ontology;
  • the claim is understandable, but current FPF does not yet contain the kind, pattern, relation record, or method guidance needed to carry it.

Do not merge those cases. An unclear claim is not current architecture truth merely because deleting it feels risky, and it must not be rewritten by guessing a likely author intention. An understandable uncovered claim may be retained as a candidate FPF extension only when the problem situation, tempting overread, rejected current uses, current FPF gap, and the first user action that would improve are stated by value.

Classify the case explicitly:

  • recovered by value: the text now names the exact U.Episteme, selected EntityOfConcern, U.View, publication form, generic publication face, MVPK face under E.17 constraints, PublicationUnit, carrier relation, relation record, relation phrase, tuple-like record, FPF pattern, document with named source, evidence, architecture, reviewed publication, review packet, review record, or review state, project-side FPF kind and reference named by value when projectSideFPFRef is live. The selected value is one live value, not the list: C.11 ChoiceResult; C.11 decision record; A.6.A action invitation; A.15 U.WorkPlan; A.15.1 dated U.Work occurrence; U.Method; U.MethodDescription; A.20 constraint or adjudication decision record; A.21 GateDecision; A.21 DecisionLogRef; A.10 evidence path; typed evidence record; B.3 assurance or engineering-justification record; typed status record whose FPF status pattern is named; carrier relation; front-end relation; or not-triggered alternative;
  • understandable FPF extension candidate: the thought is clear enough to state as a candidate new or amended FPF kind, pattern, relation record, method guidance, accepted DRR content decision, or campaign-scoped content question, but it does not carry current authority, evidence, or admissibility claim until an accepted architecture decision, accepted DRR, or accepted FPF pattern supplies that authority;
  • source wording without FPF-governed use: the phrase has no current authority, evidence, or admissibility claim;
  • reduced-use cue: the phrase is kept only as a recognition cue or anti-case, not as a claim-bearing architecture decision;
  • blocked use: the phrase is not admissible for claim-bearing architecture, pattern, or project text while the needed meaning, kind, or relation is missing.
  • rewrite incomplete: the repaired wording may be kind-correct, but it does not yet state a remaining admissible reader move, recognition reason, Tech-to-Plain mapping when both registers are live, or FPF pattern application, or a Plain or didactic line carries ontological, evidence, causal, assurance, bridge, gate, work, decision, or admissibility claim that cannot be recovered from the Tech interpretation; continue repair or demote to a non-use disposition before the text has FPF-governed use.

These dispositions are recovery results, not a meta-governance authority over all of FPF. When recovery names another FPF kind named by value, that FPF pattern governs that kind, its admissible use, and its conformance checks. C.2.P may identify that A.10, A.15, A.15.4, A.20, A.21, B.3, C.11, F.9, E.17.EFP, E.17.ID.CR, or another governing FPF pattern is live. It does not govern the recovered kind after that identification. C.2.P only makes the kind under repair, relation, and use boundary explicit enough that the right governing pattern can be applied.

No other disposition is closed. In particular, "seems to mean", "probably about", a cleaner paraphrase, or a broad umbrella replacement is not a successful recovery.

Core Glossary

Cross-Side Fields That Must Stay Split

These fields are current episteme-publication precision vocabulary for DRR, architecture, and pattern-drafting work. They exist to prevent one sentence from mixing FPF-side admissibility, project-side records, actual work or action, method selection, carrier access, and authority records. They are local recovery aids, not FPF kinds, not record kinds, and not a universal record ontology. Each field closes only by naming the FPF kind named by value, relation record, relation phrase, project-side FPF kind and reference named by value, or explicit non-use disposition that is live in the sentence. The same local-aid rule applies to neighboring field names such as sourceRelationClass, explanationSourceRelationClass, comparativeRelationClass, representationValidityAdmissibilityValue, allowedUse, misuseRisk, and worldContactPolicy: they help record a local recovery or reader-use boundary, but they do not become kinds. These local fields do not instantiate evidence, gate, assurance, work, commitment, speech act, decision, release, authority, representation kind, world-contact kind, or policy kind. Read allowedUse as a local reader-fit field under admissibleUse, not as permission, evidence relation, or authority.

TermCurrent interpretationMust not mean
FPF as epistemeThe whole FPF is a claim-bearing episteme with publications, parts, patterns, pattern sections, DRRs, and companion publications and documents with named source-basis, evidence-basis, architecture-basis, or review-basis roles.A file, repository, taxonomy, pattern-language metaphor, or packet-local summary by default.
FPF patternA named FPF pattern: a reusable episteme species that gives action guidance for a problem situation. It is applied in a live problem situation.Any recurring arrangement, procedure, method call, route, cluster label, checklist, or document with a named source-basis role.
pattern sectionEither a part of the pattern episteme or a bounded PublicationUnit of that pattern publication, depending on sentence function. State which one matters when the distinction carries a claim.Independent pattern, file location, generic locus, or record with named authority-reference relation.
accepted campaign DRRA campaign decision source that states accepted content decisions for one campaign.A pattern, current-authority summary, open-ended plan, review log, or replacement for pattern text.
relationClaimSliceEmpty, or a local note that A.6.P relation precision is live for one sentence. It must name the relation problem being handled: relation, comparison, dependency, support, sameness, grounding, mapping, endpoint claim, or cross-context bridge claim. The recovery then names RelationKind, QualifiedRelationRecord, relation phrase, candidate-set note, or bridge card when live, with typed endpoints, slots, qualifiers, and scope.Dictionary replacement, one new umbrella kind, a bare RelationKind standing in for a relation record, a generic relation slot, support relation by default, or a list left as the final answer.
admissibleUseThe exact admissible use and non-admissible stronger or adjacent use when the sentence says what use, act, claim, or reliance is admissible. Use A.6.B when the boundary claim needs L-, A-, D-, and E-claim separation.Generic supported use, permission-by-appearance, or visual cue or readability cue treated as admissibility.
projectSideFPFRefThe project-side FPF kind and reference named by value when a publication, display, cue, or explanation is treated as a project-side source for work, evidence, gate, constraint, adjudication, decision, commitment, method, action invitation, assurance, or engineering justification. The field points to the project-side FPF kind and reference; the FPF pattern governs that relation and its checks.One slot accepting records, actions, methods, carriers, evidence, gates, decisions, assurance, and engineering justification interchangeably.
rejectedOverreadA local field naming the tempting interpretation, evidence, gate, work, permission, approval, commitment, release, safety-proof, engineering-justification, or pattern-entry interpretation that must not be granted by resemblance alone. It is valid only with the recovered relation record or phrase or current-context unpacking that blocks it. It is not U.Kind, not a record kind, not a review-finding kind, and not a moralized defect class.A general risk slogan, review finding, moralized "bad use", vague misuse label, or reusable FPF kind.
admissibilityTargetKind, admissibilityTargetRefSource-local helper fields. Prefer admissibleUse; if these fields appear in material being repaired, they name the kind named by value and reference inside admissibleUse, not an A.6.P relation slot.A generic supported use, document capability, "stronger claim", reviewer permission, or untyped governing-pattern assignment.
Episteme, Publication, and Carrier Distinctions
TermCurrent interpretationMust not mean
U.EpistemeClaim-bearing episteme or episteme species. Use when the value is a claim-bearing episteme that can be described, viewed, grounded, revised, published, or relied on under FPF.File, paragraph, screen, carrier, status note, process state, or generic "content".
U.EpistemeSlotGraphThe recoverable slot graph for a claim-bearing episteme: EntityOfConcernSlot, GroundingHolonSlot, ClaimGraphSlot, ViewpointSlot, ViewSlot, ReferenceSchemeSlot, RepresentationSchemeSlot, and bounded context where live.A prose checklist, a file map, or an optional decoration.
EntityOfConcern, EntityOfConcernRefThe EntityOfConcern reference under C.2.1 named by a claim-bearing episteme or episteme-lane U.View: entity, relation, FPF pattern, FPF publication, project episteme, project publication, project-side FPF kind and reference named by value, work or action when that work or action is itself the entity of concern, or another explicitly typed EntityOfConcern referent. Use this when the text is really about what the episteme is about. In publication-unit work, EntityOfConcernRef is used only through a claim being made-bearing episteme or episteme-lane U.View; it does not float as a free field on the unit.Generic topic, local table subject, file title, reviewed publication, review packet, or review record, required project-side work, decision, action invitation, authoring work, or anything someone happens to talk about.
wording such as describedEntity, DescribedEntityRef, primary described entityUse EntityOfConcern and EntityOfConcernRef when the claim-bearing episteme slot is live. Use publicationUnitPrimaryEntityOfConcern when one bounded PublicationUnit carries or exposes a claim-bearing episteme or episteme-lane U.View and the primary entity of concern must be named.A second C.2.1 slot family, a free publication-unit field, a generic topic, a live alias, or a new ontology beside EntityOfConcern.
publicationUnitPrimaryEntityOfConcernThe primary entity of concern, non-claim-bearing kind named by value, topic, or subject that one bounded PublicationUnit is mainly about for the current use. When a claim-bearing episteme or episteme-lane U.View is live, this must be recoverable from the selected EntityOfConcernRef; otherwise name the non-claim-bearing kind named by value or keep topic and subject as plain explanatory prose.EntityOfConcernRef created without a claim-bearing episteme or episteme-lane view, publication-unit title by default, authoring process, carrier identity, or reader interest.
GroundingHolon, grounding relationThe grounding holon or grounding relation that grounds the EntityOfConcern when a claim depends on grounding, embodiment, witness, or reference-plane discipline.A convenient source citation or an untyped entity mention.
U.View, U.EpistemeViewEffect-free projection or view over an episteme under E.17.0, E.17 and the episteme morphism patterns. An MVPK face under E.17 constraints can be this kind only under MVPK constraints.A UI view, reader viewpoint, screen, generic publication face, or new claim-bearing episteme by default.
ViewpointThe stance or viewpoint specification for a view or multi-view description.A reader viewpoint, reviewer opinion, pattern-application order, publication label, or carrier label.
publicationA publishable episteme, view, record relation, act or occurrence of publishing, or publication form, depending on sentence function. Always split by kind before use.Generic document, any public-looking file, or proof that a claim is authorized.
U.EpistemePublicationClaim-bearing publication of an episteme when the publication itself carries episteme-publication identity.Publication form, generic publication face, MVPK face under E.17 constraints, copy, file, dashboard tile, or carrier.
publication formThe typed form in which an episteme, view, or record is published.The claim-bearing episteme itself, the face rendered for a reader, or the carrier holding bytes.
generic publication faceReader-facing publication projection or face. It is not U.View by default; it becomes a view only when the governing FPF pattern makes that relation live.U.View by default, carrier, UI face, front-end display, MVPK face under E.17 constraints, or claim-bearing episteme.
MVPK face under E.17 constraintsE.17 face emitted under MVPK constraints from a source episteme or episteme-lane view, publication viewpoint, scope, pins, and face kind. It may be a U.EpistemeView when the MVPK profile makes that typing live.Generic publication face, carrier, UI face, front-end display, or proof of evidence, work, gate, or authority by presentation.
carrier, front-end, renderingThe system, medium, file, display, front-end, or rendering that bears or shows an encoding.Episteme identity, publication form, U.View, proof of evidence, or authority-reference relation.
PublicationUnitE.17.AUD-cluster head for one bounded unit inside a publication that a person inspects as one unit: a pattern body, section, table, note, card, sheet, screen block, or another bounded publication unit whose boundary is named. A card, sheet, or screen block counts only when its boundary is inside a named publication or generic publication face and the sentence needs that bounded unit as the inspected publication unit. It is part of or bounded by the publication face that renders or locates it, whether that face is generic or emitted under E.17 and MVPK constraints. It may carry or expose a claim-bearing episteme, view, record, cue, or local rendered content when that carried item and relation are named, but it is not identical with the carried item.Authoring process, reviewer process, file, carrier, front-end, UI behavior, dashboard behavior or export behavior, whole publication architecture, U.Episteme, U.View, publication form, generic publication face, MVPK face under E.17 constraints, or "anything written".
project-side FPF kind and reference named by valueEvidence record, gate record, work record, status record, commitment record, role-assignment record, decision record, source U.Episteme, source U.EpistemePublication, status-register entry, or another project record whose governing FPF kind is named.Semantic content in general, current process state, or a free-form note.
source documentA document used as source basis, evidence basis, architecture basis, or review basis. Name whether it is source basis, evidence basis, architecture basis, or review basis directly.A governing source by folder proximity, the EntityOfConcern carried or exposed by that source document, or the authority-reference relation unless that relation is explicit.
reviewed publication, review packet, or review recordThe reviewed publication named by value, review packet, review record, or bounded publication unit sent or inspected in review.The EntityOfConcern carried or exposed by that reviewed publication, review packet, or review record, the source-basis role behind it, or a packet-local summary.
Trigger Boundary

Lexical trigger scanning and direct known governing-pattern selection are governed by E.10:0.2, E.10:0.2a, E.10:0.2b, E.10:0.2c, and E.10:0.2d.

This pattern is applicable after that scan only when the governing pattern cannot yet be selected directly because the sentence still confuses source wording, claim-bearing episteme, publication or carrier construction, project-side reliance, pattern-application wording, or use or non-use disposition.

When this pattern is applicable, do not restart from word taste. Keep the E.10 trigger result as input and recover source-expression clarification, FPF-governed use, live episteme-publication relation set, use disposition, and remaining admissible reader move.

Current Preferred Vocabulary

Use PublicationUnit when the intended entity is a bounded, human-inspected unit inside a publication. Do not use it for UI behavior, carrier behavior, front-end behavior, file identity, dashboard behavior, or export behavior; use A.7, carrier wording, front-end wording, or the FPF governing pattern named by value instead.

Use the current cluster names directly: PublicationUnit Stability Discipline, Local Head Restoration, and PublicationUnit Primary EntityOfConcern Discipline. When the live entity is a bounded unit inside a publication, use PublicationUnit; when the live entity is authoring or editing work, name that work directly.

Use EntityOfConcern, EntityOfConcernRef, and publicationUnitPrimaryEntityOfConcern when local wording means the EntityOfConcern named by a claim-bearing episteme or episteme-lane view, or the primary entity of concern stabilized by one bounded publication unit over that carried item.

For describedEntity, DescribedEntityRef, primary described entity, EntityOfInterest, or EoIClass, use EntityOfConcernSlot, entityOfConcernRef, EntityOfConcernRef, EntityOfConcernChangeMode, EntityOfConcernClass, publicationUnitPrimaryEntityOfConcern, or the local FPF kind named by value. If no claim-bearing episteme or episteme-lane view is live, use an non-claim-bearing kind named by value or plain topic or subject instead of inventing an EntityOfConcernRef.

Use ordinary topic, subject, or local referent only in non-normative explanatory prose where no episteme slot, publication construction, or authority relation is being asserted.

Do not mint any other new reusable FPF name from this pattern alone. PublicationUnit is governed by the E.17.AUD cluster named PublicationUnit Stability Discipline; this pattern recovers bounded-publication-unit wording into that head when the entity is live and points to that cluster for governance. FPF-governed uses keep the nearby definition or explicit publication relation set.

F.18 And A.6.P Admission Interpretation For PublicationUnit

This is the F.18 and A.6.P name interpretation that this pattern reflects from the selected E.17.AUD cluster correction. It records why PublicationUnit is the selected bounded publication-unit head for the E.17.AUD cluster, while C.2.P remains the epistemic precision-restoration pattern.

F.18 and A.6.P admission interpretation:
  Context: conformant FPF authoring and review where bounded publication units must not be confused with epistemes, views, publication forms, generic publication faces, MVPK faces under E.17 constraints, carriers, authoring work, or review process.
  Kind: primary-entity or local-head field for a bounded unit inside one publication.
  Purpose and use-domain: keep one human-inspected publication unit distinct from episteme, view, publication form, generic publication face, MVPK face under E.17 constraints, carrier, authoring work, and review process.
  Selected Tech label: PublicationUnit.
  Plain interpretation: bounded unit inside a publication that a person inspects as one unit.
  Candidate head families considered:
    - authoring-centered unit labels
    - reader-action-centered unit labels
    - mixed authoring-and-reader-action unit labels
    - PublicationReadingUnit
    - PublicationAuthoringUnit
    - PublicationUnit
    - ContentSpan
    - DocumentUnit
  F.18 result:
    - `PublicationUnit` has better SemanticFidelity than authoring-centered unit labels because the unit belongs to the publication lane, not to the authoring process.
    - `PublicationUnit` has better MorphologicalActionFit than mixed authoring-and-reader-action unit labels because it does not mix author, reader, and unit-boundary roles in one head.
    - `PublicationUnit` has lower AliasRisk than `content span` and `document unit` because `content` and `document` blur episteme, publication form, and carrier.
    - `PublicationUnit` still has nonzero AliasRisk because `publication` itself splits into act or occurrence of publishing, episteme publication, form, generic face, MVPK face under E.17 constraints, unit, and carrier; therefore FPF-governed uses keep the nearby definition or explicit publication relation set.
  Current status: admitted reusable FPF head for conformant episteme-publication-heavy FPF text within the declared bounded-publication-unit repair scope; use a more specific already accepted head where one governs the text under repair.

Epistemic Precision Restoration After E.10

Lexical trigger rewrite rules are governed by E.10:0.2b, E.10:0.2c, and E.10:0.2d.

Use this pattern after those rules only when one of these remains unresolved:

  • source-expression clarification versus FPF-governed use;
  • source-local meaning versus current FPF wording;
  • claim-bearing episteme versus publication, view, face, carrier, or publication unit;
  • EntityOfConcern, grounding relation, or source cue versus project-side evidence, work, gate, decision, assurance, method, action, release, or engineering justification;
  • declarative FPF pattern application versus project work or control flow;
  • use disposition: recovered by value, reduced-use cue, understandable FPF extension candidate, blocked use, rewrite incomplete, or not triggered;
  • remaining admissible reader move or Tech-to-Plain mapping after epistemic precision repair.

When none of these remains unresolved, apply the governing pattern selected by E.10 directly.

Rewrite Execution Modes

Use the smallest sufficient mode that preserves the distinction. The template is an epistemic precision device, not a form to fill for every ordinary wording cleanup.

Local prose cleanup

Use this mode when the phrase under repair is non-normative local prose and does not carry ontology, authority, review scope, release state, admissibility, or a reusable name.

Action: rewrite directly or leave it unchanged. No table row is required.

Compact epistemic precision-restoration row

Use a compact row for ordinary architecture and source-basis or review-basis document cleanup where a sufficient FPF kind, relation record, relation phrase, or tuple-like record can be recovered without minting a new FPF head.

Compact epistemic precision-restoration row:
  file path, if live:
  FPF pattern, if live:
  pattern section, if live:
  sentence reference:
  phrase under repair:
  live sentence function:
  selected FPF kind named by value or project-side FPF kind:
  `relationClaimSlice` triggered? yes or no
  relation problem, if triggered:
  admissibleUse triggered? yes or no
  projectSideFPFRef triggered? yes or no
  relation claim? yes or no
  if relation claim:
    RelationKind:
    endpoint, slot, qualifier notes:
    admissibilityTargetKind:
    admissibilityTargetRef:
  if local current-context unpacking:
    FPF-side kind, reference, or relation:
    project-side FPF kind, if live:
    project-side reference named by value, if live:
    notTriggeredReason:
  replacement:
  remaining admissible reader move:
  distinction disposition: preserved, split, intentionally retired, still missing
Full epistemic precision-restoration check

Use the full check when the wording may change ontology, introduce or retire a reusable head, change a claim-bearing pattern or document with named source, evidence, architecture, or reviewed publication, review packet, review record, or review state, or resolve a contested source-meaning problem.

Epistemic precision-restoration check:
  file path, if live:
  FPF pattern, if live:
  pattern section, if live:
  sentence reference:
  phrase under repair:
  sentence function:
  distinction carried:
  E.10 head kind and EntityOfConcern and Description-episteme boundary and specification use interpretation:
  F.18 naming status: no stable term, reuse, MintNew sketch, DocumentLegacy
  F.18 candidate head families, if naming is live:
  F.18 lexical Q result, if naming is live:
    SemanticFidelity:
    CognitiveErgonomics:
    MorphologicalActionFit:
    AliasRisk:
  A.6.P trigger? yes or no
  A.6.P selected relation kind, slots, qualifiers, if live:
  claim-bearing episteme live? yes or no
  FPF kind and relation set:
  EntityOfConcern, grounding, ClaimGraph, viewpoint slots triggered:
  E.17 and MVPK publication form, generic face, MVPK face under E.17 constraints, view, carrier split:
  PublicationUnit typing, if any:
  FPF-side or project-side sentence:
  `relationClaimSlice` triggered? yes or no
  relation problem, if triggered:
  admissibleUse triggered? yes or no
  projectSideFPFRef triggered? yes or no
  relation claim? yes or no
  if relation claim:
    RelationKind:
    QualifiedRelationRecord slots:
    admissibilityTargetKind:
    admissibilityTargetRef:
  if local current-context unpacking:
    FPF-side kind, reference, or relation:
    project-side FPF kind, if live:
    project-side reference named by value, if live:
    notTriggeredReason:
  rejectedOverread, if live:
  project-side record, work, action, method, carrier crossing:
  heterogeneous-list classification: one kind under repair, relation set, tuple-like record, alternative cases, failed ontology, not triggered
  pattern application, project work, decision distinction:
  chosen rewrite:
  remaining admissible reader move:
  distinction disposition: preserved, split, intentionally retired, still missing
  unrecovered wording retained? no, yes, with scope and reason:
  use disposition: recovered by value, extension candidate, reduced-use cue, blocked use, rewrite incomplete, not triggered
Epistemic Precision-Restoration Note

Use an epistemic precision-restoration note only when wording carries ontology, authority, evidence, or admissibility claim. The note records the original phrase, recovered FPF kind or relation, reference named by value when live, project-side FPF kind and reference when live, remaining admissible reader move, and disposition: recovered by value, extension candidate, reduced-use cue, blocked use, rewrite incomplete, or not triggered.

Ordinary Completion and Reopen Boundary

A C.2.P application is complete for ordinary pattern-authoring use when the smallest sufficient product is present:

  1. E.10 trigger result is kept as input and the text does not restart from word taste;
  2. the wording is either left ordinary, repaired locally, expressed as a compact epistemic precision-restoration row, or escalated to the full check because the claim being made requires it;
  3. the recovered episteme, publication, view, face, carrier, publication unit, EntityOfConcern, grounding relation, project-side reference, or use disposition is named by value;
  4. every relation-like slice that remains live is assigned to A.6.P or its retained specialization, rather than being hidden inside this pattern;
  5. the remaining admissible reader move survives in ordinary prose or the wording is explicitly demoted to reduced-use cue, blocked use, rewrite incomplete, or not triggered.

Use the lowest sufficient product. A clean sentence is enough when one sentence recovers the claim being made. Use a compact row when the reader must inspect one recovered kind, relation, or disposition later. Use the full check only when several fields are live, when source wording's FPF use is contested, when a durable name may be minted, or when a publication, carrier, or project-side overread would otherwise survive.

This pattern can be applied to its own wording at the same lowest sufficient mode. If C.2.P text itself blurs a source expression, publication construction, pattern application, relation slice, or project-side reliance claim, repair that local wording here; do not create a recursive pattern-quality apparatus.

Reopen or lower a prior C.2.P repair when one of these content discoveries appears:

  • the replacement head is another umbrella word such as support, surface, route, kind, object, record, map, or mapping without FPF kind named by value and boundary;
  • the repaired wording is type-correct but no longer tells the working reader what action, non-use, or neighboring-pattern application remains;
  • a neighboring pattern is now the true governing pattern for the live evidence, assurance, gate, work, decision, publication, architecture, structure, relation, or naming claim;
  • an entry cue, ToC row, summary, dashboard, retrieval snippet, or source-basis note preserves the pre-repair broad interpretation after the pattern body was repaired;
  • repeated use shows that authors are filling the full check where a local sentence or compact row would suffice.

The ordinary stop condition is local: once the current sentence or bounded publication unit preserves kind, relation, use disposition, and remaining admissible reader move, stop. Do not keep improving wording merely because a more elaborate record could be filled.

Archetypal Grounding

ScenarioShow - failure without C.2.PShow - repair with C.2.P
FPF pattern proseA pattern section, host, row, or source line appears to support an action. The reader cannot tell whether this is a pattern, a section as PublicationUnit, a document, a file, or a relation.The text names the governing FPF pattern, pattern section as part of the episteme or PublicationUnit, document with named source, evidence, architecture, or reviewed publication, review packet, review record, or review state, relation record, or relation phrase. The useful next move is then explicit: keep the pattern-application claim, narrow it to source-finding use, or apply the governing FPF pattern named by value before action wording is retained.
Engineering project publicationA green dashboard tile, certificate badge, or generated explanation is treated as evidence, gate passage, engineering justification, assurance, or permission for work.The engineer names the generic publication face, MVPK face under E.17 constraints, or carrier, then names the project-side FPF kind and reference named by value that makes the work claim admissible: evidence record, A.20 constraint or adjudication decision record, A.21 GateDecision, A.21 DecisionLogRef, B.3 assurance or engineering-justification record, C.11 ChoiceResult, C.11 decision record, A.6.A action invitation, A.15 U.WorkPlan, A.15.1 dated U.Work occurrence, U.Method, or U.MethodDescription. The useful next move is either orientation or source-finding only, or finding or creating the evidence named by value, gate, decision, assurance, plan, work, method, or action-invitation value before work or reliance proceeds. The row chooses the live value, not this list.
Source-basis textA source-basis note uses loose wording that says material supplies a claim without naming whether the receiving locus is an FPF pattern, document with a named source-basis role, file carrier, relation record, or project record.The text states whether the receiving locus is an FPF pattern, a document with named source, evidence, architecture, or review role or state, a pattern section, a file carrier, a relation record, or a project-side FPF kind and reference named by value whose FPF kind is named. The useful next move is to apply the FPF pattern governing the recovered claim or cite the source-basis document named by value or reference; if the meaning remains unclear, the phrase becomes reduced-use or blocked use.
Pattern-control wordingA text says that one pattern routes into another, calls another pattern, exits to a pattern, or chains patterns. The reader may treat pattern application as executable process control.The author distinguishes declarative FPF pattern application from project work or control flow. If the text means pattern applicability, say the governing FPF pattern is applied in the problem situation. If the text means work, name U.Work, U.Method, C.11 decision value, or A.6.A action invitation under the project-side pattern governing the claim.
Architecture or structure wordingA source says an architecture surface, structure representation, design rationale, or structural view carries a claim, but the sentence does not show whether the use under repair is a described holon, architecture description, structure, structural view, relation, publication face, or carrier.C.2.P first recovers the source expression, source-use role, and publication and carrier relation set. If the architecture claim, structure kind, structure relation, view, or publication relation or source-use relation is still hidden, C.30.P recovers it; if it is already recoverable, the invariant belongs directly to C.30, C.30.ASV, A.22, C.31, or the exact architecture or structure pattern. Relation-like wording belongs to A.6.P.

Boundary and Anti-Cases

Boundary caseC.2.P resultWhy this protects use
Ordinary reader helpThe sentence says a note helps a reader find another section, with no evidence, authority, admissibility, work, gate, decision, or project reliance claim. Leave ordinary wording ordinary or make one local wording repair.Keeps ordinary prose affordable; support as ordinary help is not forced into a record.
Relation-only support wordingThe sentence says one claim, source description, grounding relation, evidence record, assurance record, causal-use relation, mathematical-lens relation, characteristic relation, admissible-use boundary, work relation, or publication-companion use warrants another claim, and source-use or publication construction is already clear. Apply A.6.P; C.2.P is not the governing repair.Prevents this pattern from absorbing relation precision restoration.
Direct known FPF kind named by valueThe sentence already names the project-side FPF kind and reference named by value, such as an evidence path, gate decision, decision record, work occurrence, assurance record, or architecture pattern application. Apply that governing pattern directly.Avoids a needless logical hop and keeps the direct neighboring-pattern application intact.
Source phrase without recovered FPF-governed useSource wording is interesting but its FPF kind, relation, or use disposition cannot be recovered. Keep it as reduced-use cue or block its FPF use.Preserves source meaning without guessing FPF meaning.
Replacement head is another umbrellaA proposed repair changes support to basis, surface to face, or route to path while the kind and relation are still hidden. Mark repair incomplete.Blocks lexical churn and forces the kind named by value, relation, and admissible use to be recovered.
Apparatus too heavyA one-sentence local repair is replaced by a full record, checklist, and source note with no additional admissible use. Use the local sentence or compact row instead.Keeps first-use cost and maintenance cost inside the quality claim.

Transfer Coverage

C.2.P is intentionally narrow but must transfer across three recurrent publication situations:

  • FPF-side drafting: pattern text, DRR text, source-basis notes, review-basis notes, and pattern-host prose;
  • project-side publication: dashboards, explanations, cards, documents, front-ends, rendered files, and generated summaries used around evidence, work, gates, decisions, assurance, or methods;
  • external source-use clarification: seminar fragments, papers, reviews, standards, and tool outputs being clarified before possible FPF use.

In all three situations the same invariant holds: recover the distinction between source wording and current FPF wording, claim-bearing episteme, publication or carrier construction, relation-like slice, neighboring pattern governing that claim, and remaining admissible reader move before accepting the wording as current FPF text.

Bias-Annotation

LensRiskMitigation
OntologyExact-sounding words become a new parallel ontology.Require recovery to current FPF kinds and relations before reuse.
UsabilityThe rule becomes too heavy for ordinary edits.Use the smallest sufficient rewrite mode; reserve the full check for FPF-governed wording.
PreservationSource-basis text is mistaken for direct pattern authority.Keep source-basis status separate from the ordinary pattern guidance.
Checklist ritualThe rule becomes a form to satisfy rather than a wording action to perform.Put the action in Solution; use row evidence only when wording has FPF-governed use.

Conformance Checklist

ItemCheck
CC-C2P-1Every FPF-governed broad head names the recovered FPF kind, relation record, relation phrase, tuple-like record, project-side FPF kind and reference named by value when projectSideFPFRef is live, or explicit non-use disposition. The selected project-side entry must be one exact kind under repair, such as C.11 ChoiceResult, C.11 decision record, A.6.A action invitation, A.15 U.WorkPlan, A.15.1 dated U.Work occurrence, U.Method, U.MethodDescription, A.20 constraint or adjudication decision record, A.21 GateDecision, A.21 DecisionLogRef, A.10 evidence path, typed evidence record, B.3 assurance or engineering-justification record, typed status record whose FPF status pattern is named, carrier relation, front-end relation, or not-triggered alternative.
CC-C2P-2Slash compounds and heterogeneous lists are not left as final kinds unless they are accepted tokens, carrier syntax, plain synonym pairs with no FPF-governed use, or explicitly recovered tuple-like constructions or relation constructions.
CC-C2P-3FPF pattern-application claims and project-side publication, record, work, method, carrier, and action claims stay separated when both are live.
CC-C2P-4Broad admissibility, source-use, publication-face, carrier, placement, movement, procedure-like, topic-like, pre-FPF sign, or publication wording requires epistemic precision restoration when it carries ontology, authority, evidence, or admissibility claim. Relation-support wording belongs to A.6.P unless the publication or source-use construction is itself unresolved.
CC-C2P-5Unclear meaning is not rewritten by guesswork; it is classified as reduced-use cue, blocked use, or understandable FPF extension candidate.
CC-C2P-6Any newly stable name passes F.18; any relation claim passes A.6.P; any admissibility claim fills admissibleUse and uses A.6.B when L-, A-, D-, and E-claim separation is live; any claim-bearing episteme, episteme species named by value, episteme-lane view, or project-side FPF kind and reference named by value passes C.2.1 or the named governing FPF pattern as needed; any publication, view, or carrier claim passes E.17.0, E.17, and MVPK as needed.
CC-C2P-7The final text remains action guidance under E.2 P-2 and E.12: it tells the author what wording action to take, what overread to block, why the distinction still matters to the working reader, and what remaining admissible reader move or FPF pattern application remains. When both Tech and Plain registers are live, the Plain or didactic line maps back to the recovered Tech interpretation under E.10:6.2.
CC-C2P-8This pattern does not rename existing FPF patterns or mint reusable heads without F.18 and A.6.P.
CC-C2P-9The smallest sufficient product was used: local sentence repair, compact epistemic precision-restoration row, full check, or explicit non-use disposition. A full check is not required when a local sentence or compact row preserves the live distinction.
CC-C2P-10The repair names a lowering or reopen condition when it is used as reusable guidance, when it changes entry or projection wording, or when the result is claimed as a stable pattern-body repair.

Current Scan Boundary

Lexical trigger scanning is governed by E.10:0.2, E.10:0.2a, E.10:0.2b, E.10:0.2c, and E.10:0.2d.

C.2.P conformance begins only when the E.10 result is epistemic precision restoration required or combined precision restoration required, or when non-FPF source text is being unpacked before possible FPF transfer.

Do not copy the E.10 trigger list into this pattern as a second registry. Use the E.10 result as input and recover source-expression unpacking mode, FPF-governed use mode, live episteme-publication relation set, use disposition, and remaining admissible reader move. When the relation-bearing slice is live, A.6.P remains a separate required precision-restoration pattern.

Common Anti-Patterns and How to Avoid Them

Anti-patternFailureAvoidance
Token swapReplace surface with face or host with file without recovering kind and sentence function.Apply head-kind and relation recovery before rewriting.
Group-kind listLeave a list such as pattern, record, relation, or action as if the list names one kind.Decide whether the sentence needs one kind, a relation record, a tuple-like record, alternative cases, or a blocked ontology.
Type-correct but inert rewriteAll overread is removed, all heads are typed, and no practical guidance remains: the reader can see that local checks passed but cannot tell why the distinction matters, what to do, or which FPF pattern application or project-side FPF kind carries the claim being made.Recover the didactic or recognition function in admissible wording, keep any Plain line mapped to the recovered Tech interpretation when both registers are live, state the remaining admissible reader move, or demote the phrase to reduced-use cue, blocked use, or rewrite incomplete instead of pretending the repair landed.
Expressive overread reboundA repair tries to restore practical guidance with a memorable Plain or didactic line, but that line carries ontological, evidence, causal, assurance, bridge, gate, work, decision, or admissibility claim not recoverable from the Tech fields, FPF kind named by value, recovered relation, project-side source reference, disposition, or named FPF pattern application.Rewrite the line as ordinary recognition aid mapped to the recovered Tech interpretation under E.10:6.2; recover the claim being made through the Tech fields named by value, name the governing FPF pattern ontology that carries the claim being made, or demote the phrase to reduced-use cue, blocked use, or rewrite incomplete.
Pillar-blind precision passA broad cleanup proves trigger removal and kind recovery, but never checks whether E.2 P-2, E.6, E.8, or E.12 still let the intended reader see the working situation, why it matters, and what first useful move remains.For FPF-governed Problem frames, Problem sections, recognition texts, examples, and worked slices, state the remaining admissible reader move or FPF pattern application. Preserve intentional didactic metaphors when they are ordinary recognition aids or when their claim being made maps back to Tech. If the didactic function was harmed, repair the wording in admissible Plain mapped to Tech, or mark the rewrite incomplete instead of accepting type-correct but inert wording.
Source-status leakageCarry a source-companion header into a pattern and let Authority: none or Current use define the new pattern.State current pattern status in the pattern header and relations.
Pattern as procedureSay the pattern is called, routed, invoked, or chained as if it were executable code.Say the FPF pattern is applied in a problem situation; name project-side U.Work occurrence, U.Method, C.11 decision value, or A.6.A action invitation when project activity is live.
Strength metaphorSay a claim is strong or weak without a characteristic, threshold, evidence class, scope, gate, or admissibility relation.Name the exact comparison characteristic, threshold, evidence class, scope, gate, or admissibility relation, or replace the metaphor with the recovered admissibility relation.

Consequences

BenefitTrade-off and mitigation
Prevents parallel episteme and publication ontology from entering FPF-governed wording.Adds a small recovery step before apparently simple rewrites; mitigate by using the smallest sufficient mode.
Preserves accepted glossary and rules without turning source-basis status lines into accidental pattern authority.Requires a clear separation between pattern guidance and source-basis status.
Makes unclear meaning fail closed.Some attractive phrases will not be accepted until their kind or relation is actually recovered.
Improves DRR and pattern drafting discipline.Authors must resist convenient lists and umbrellas when one kind named by value or relation is needed.

Operating Consequence

For new episteme-publication precision prose:

  • start from FPF kinds and relations, not from familiar publication nouns and document nouns;
  • use PublicationUnit for bounded publication units;
  • use EntityOfConcern and EntityOfConcernRef when the episteme slot is live, and translate describedEntity source wording to the adopted EntityOfConcern family before FPF-governed use closure;
  • keep publication form, generic publication face, MVPK face under E.17 constraints, view, carrier, document with named source, evidence, architecture, reviewed publication, review packet, review record, or review state, and project-side FPF kind and reference named by value separate;
  • name relationClaimSlice, admissibleUse, and projectSideFPFRef separately when more than one is live;
  • classify heterogeneous kind lists before writing a sentence that depends on them;
  • say that FPF patterns are applied in problem situations, not called or routed as procedures;
  • leave accepted FPF names untouched unless a separate accepted naming decision authorizes a rename.

Operationally, each rewrite should:

  • separate FPF-side episteme and publication context from project-side episteme and publication context whenever both are present;
  • name relationClaimSlice, admissibleUse, and projectSideFPFRef separately when a publication, display, cue, or explanation is treated as evidence, gate, constraint, adjudication, decision-making reliance, work permission, assurance, or engineering justification;
  • classify heterogeneous lists before naming them: one kind under repair, relation set, tuple-like record, alternative cases, not-triggered alternatives, or failed ontology;
  • say that FPF patterns are applied in problem situations, while project records, publications, views, carriers, and actions are worked with in project practice;
  • avoid strength metaphors unless the characteristic, scale, threshold, evidence class, or admissibility relation is named.

For cleanup of existing conformant texts:

  • do not do a global string replacement;
  • classify each unclear term occurrence by the smallest sufficient rewrite mode;
  • use the full epistemic precision-restoration check only when ontology, reusable naming, FPF pattern text, or source-bearing project text is live;
  • do not rename accepted FPF patterns from this pattern alone.

Rationale

FPF already contains the relevant ontology. The recurring defect was not lack of concepts but ad hoc wording that bypassed them: source, target, surface, object, host, route, supported use, and similar trigger terms packed several FPF kinds and relations into one convenient phrase; they are examples of wording to unpack, not live replacement vocabulary.

The correct repair is therefore not a new umbrella. It is a disciplined recovery action: use E.2, E.10, F.18, A.6.P, A.7, C.2.1, E.17.0, E.17, and MVPK together until the sentence says which EntityOfConcern, relation, publication, view, carrier, record, work, action, or pattern application it means.

Because E.2 governs all normative FPF patterns, epistemic precision is not a value apart from P-2 Didactic Primacy. An epistemic precision restoration may be stricter than the original wording, but if it turns FPF-governed reader-facing problem text into a kind inventory with no working situation or first useful move, it has not landed the FPF repair. The remedy is not expressive license and not metaphor removal; the remedy is admissible recognition wording whose claim being made remains recoverable through the Tech interpretation or a named FPF pattern application.

The detailed rules remain in ordinary pattern sections, so the pattern is usable as FPF guidance rather than as an external glossary container.

SoTA-Echoing

C.2.P does not claim to replace semiotics, terminology science, document engineering, or ontology engineering. Its claim being made is narrower: episteme-publication-heavy conformant text must recover accepted FPF kinds and relations before it is rewritten, so that episteme, publication, view, carrier, naming, relation, and project-side records are not replaced by ad hoc words.

Full external SoTA comparison is therefore not the governing evidence mode for this architectural precision-restoration pattern. A reduced external practice set is still required because the pattern governs terminology drift and epistemic precision restoration. The reduced set is admitted for the recovery discipline; it does not create a new ontology and does not outrank the FPF patterns named below.

Reduced source ideaAdapted FPF invariantRejected shortcutRecovery section
ISO 704:2022 and ISO 1087:2019 terminology work distinguishes the entity under discussion, the concept used in a terminology system, the definition, the designation, and term-formation practice.Recover the FPF kind, relation, and sentence function before accepting a rewritten phrase. Use external terminology work only as external corroboration for careful designation and definition practice.Do not replace FPF episteme and publication ontology with an ISO concept system, a dictionary substitution, or a global class row.C.2.P:4.1, C.2.P:4.4, and C.2.P:10
SHACL-style constraint validation makes local constraints explicit and fail-closed when a data shape does not satisfy them.Treat the epistemic precision-restoration record as a local fail-closed recovery check when the FPF kind, relation, or admissible use cannot be recovered.Do not import SHACL ontology, machine-validation authority, or shape vocabulary as FPF pattern ontology.C.2.P:4.0a, C.2.P:4.2, and C.2.P:8
Current word-sense disambiguation and ambiguity-resolution work treats sense recovery as context-sensitive rather than solved by the most common word sense.When one local head or qualifier carries multiple possible sense candidates, recover the local FPF context and FPF governing pattern named by value before choosing wording.Do not import machine-learning benchmarks or treat common usage as proof that the local FPF sense is recovered.C.2.P:4.4.1, E.17.AUD.LHR, and F.18

External-practice boundary. External traditions are admitted only through the local FPF invariant named by value they sharpen. Object-oriented modeling and OWL-style ontology modeling do not become the default repair for vague FPF wording. Architecture-description standards help keep views, viewpoints, concerns, and descriptions explicit. Explainability and NLP faithfulness work helps prevent explanation laundering. RAG evaluation helps separate retrieval evidence, source availability, and answer trust. Quality-diversity and multi-objective search help avoid premature scalarization in candidate selection. None of these traditions becomes FPF ontology, FPF authority, or a universal pattern-quality benchmark.

Internal FPF Governing Patterns

The current FPF corpus already has explicit governing patterns for this discipline:

  • E.10 supplies the head-kind, term, morphology, register, and forbidden-umbrella discipline.
  • E.10.D2 gives the "thing vs words vs rules" discipline and the carrier humility rule.
  • F.18 gives the local-first naming protocol: Context, Kind, purpose and use-domain, local sense, candidate head families, NQD-front, semantic read-through, and lexical Q components before one label becomes a reusable head.
  • A.6.P gives the relation-precision restoration method: restore generic head kind, build candidate sets for endpoint kinds and relation kinds, select kind-explicit slots and qualifiers, then allow guardrailed wording.
  • C.2.1 gives the episteme slot graph and selected EntityOfConcern discipline.
  • A.7 keeps EntityOfConcern, Description episteme, and publication carrier distinct.
  • E.17.0, E.17 distinguish views, viewpoints, MVPK faces, publication forms, and publication projections.
  • A.15.4 is a good current pattern example of keeping encountered publication, display, or cue items distinct from the project-side FPF kind and reference named by value that makes work or reliance admissible.
  • A.16, A.16.0, A.19, B.2.5, C.27, and A.3.3 provide the movement, control, and temporal machinery used when episteme-publication prose talks about route, trajectory, movement, cadence, or dynamics.
  • E.19 already treats terminology and sentence-level precision restoration as required review checks, not editorial polish.
  • A.6.A carries action-invitation discipline when a publication, representation, or cue invites an action without itself becoming authority, evidence, gate passage, or work completion.
  • C.11 carries decision-making and decision-record discipline when the question under repair is a decision rather than generic action.
  • A.15 and A.15.4 split role, method, work-plan, and actual-work alignment from work-relevant source restoration, so episteme-publication prose must not let A.15 become a universal episteme-publication governing pattern.
  • E.9 is the campaign DRR pattern for campaign-level content decisions; E.11 is only for entry-discoverability situations and must not organize an episteme and publication repair by default.

The internal FPF governing patterns remain primary:

Claim needCurrent FPF governing pattern(s)Alignment with C.2.PAdoption status
Head-kind disciplineE.10Use head-kind recovery before accepting a phrase.Adopt.
Stable namingF.18Run a name card when a reusable head is being minted.Adopt.
Relation precisionA.6.PRecover relation kind, endpoints, slots, qualifiers, and scope when a relation or admissibility claim is live.Adopt.
Carrier and EntityOfConcern-description humilityA.7Keep EntityOfConcern, Description episteme, and carrier apart before treating a publication as evidence, work, gate, or authority.Adopt.
Episteme and publication ontologyC.2.1, E.17.0, E.17, MVPKSeparate episteme, publication, view, generic publication face, MVPK face under E.17 constraints, publication unit, carrier, and rendering.Adopt.
Project-side downstream useA.6.A, A.10, A.15, A.15.4, B.3, A.20, A.21, C.11When a publication, display, cue, or explanation is treated as evidence, gate, decision, work permission, method, assurance, or engineering justification, name the governing FPF pattern and the project-side FPF kind and reference named by value.Adopt.

This reduced external-practice set changes the Solution in one practical way: an epistemic precision restoration cannot close merely because the replacement wording sounds cleaner. It closes only when the FPF kind, relation, admissible use, and any governing-pattern application is recoverable by value; otherwise the wording is blocked or becomes a candidate for a separate FPF-kind decision.

E.19 Review Profile Carry-Through

Run PCP-TERM when the repair changes episteme-publication-heavy naming, umbrella words, slash compounds, trigger-word replacements, or relation wording.

Run PCP-BRIDGE when the repair imports terms, claims, norms, or authority expectations across contexts, disciplines, reference schemes, publication forms, or project record kinds.

Run PCP-ENTRY only when the repair changes which FPF pattern a working reader should apply in a problem situation. Do not use PCP-ENTRY as a substitute for the epistemic precision restoration itself.

Run PCP-PRAG when the repair changes reader action, practical payoff, or what the working reader can safely do next. A type-correct but inert repair fails this line even when every recovered kind is technically right.

When the repair changes evidence, proof, witness, grounding, explanation, gate, release, or engineering-justification claims, apply the governing FPF pattern for that claim (A.10, E.17.EFP, A.20, A.21, B.3, or another governing pattern when live) and select the live E.19 profile by the changed pattern claim. Do not mint a local evidence-review profile inside C.2.P.

Relations

  • Builds on: E.2 Pillars, especially P-2 Didactic Primacy; E.10, E.10.ARCH, A.7, F.18, A.6.P, C.2.1, E.17.0, E.17, MVPK, and A.6.A.
  • Coordinates with: E.6, E.7, E.8, E.9, E.12, E.19, A.10, A.15, A.15.4, B.3, A.20, A.21, A.6.F, A.6.3.CSC, A.6.3.CR, A.6.3.RT, C.30.P, C.16.P, C.16.Q, E.17.EFP, and E.17.ID.CR.
  • Does not replace: E.10 general lexical rules, F.18 naming protocol, A.6.P relation precision, or local episteme and publication patterns. It tells authors when those patterns must be applied to episteme-publication-heavy wording.

C.2.P:End

Reliability R in the F–G–R triad

Reliability (R) is a conservative, evidence-bound warrant signal for a typed claim under an explicit claim scope (G). Cross-context reuse is Bridge-only: scope may be re-expressed via translate(Bridge,·) (often narrowing), while congruence penalties route to R only.

Type: Architectural (A) Status: Stable

Problem frame

KD‑CAL asks a simple operational question: “Where can I safely use this claim?” FPF answers with a minimal “epistemic location” built from three coordinates and one bridge qualifier:

  • F (Formality) describes how the claim is expressed and how strongly it supports verification workflows (C.2.3).
  • G (Claim scope) describes where the claim is asserted to apply as a set-like object (A.2.6).
  • R (Reliability) describes how strongly the claim is warranted by linked evidence under that scope.
  • CL / CL^k / CL^plane (Congruence Levels) describe lossy transport when claims are reused across contexts, kinds, or planes (B.3, C.3). CL values live on edges/bridges (not on the claim as a “4th coordinate”).

In practice, the triad is frequently used before it is made explicit:

  • Authors implicitly “average” disparate evidence and report a single confidence.
  • Teams treat higher formality (F) as if it automatically implies higher warrant (R).
  • Scope growth is smuggled in through phrasing instead of explicit scope operators (A.2.6).
  • Cross-context reuse occurs without explicit bridges and without routing congruence loss into R.

This pattern makes R explicit in KD‑CAL and fixes the triad discipline required by Kind‑CAL (C.3) and the Trust & Assurance calculus (B.3).

Problem

FPF needs a reliability coordinate that is:

  1. Auditable. A reader can trace R to concrete evidence and see how reuse penalties were applied.
  2. Composable. R can be propagated through claim graphs conservatively, without illegal scale arithmetic.
  3. Orthogonal. R is not conflated with F (expression) or G (scope).
  4. Bridge-safe. Any loss from transport across contexts/kinds/planes is explicit and affects R only.
  5. Minimal. The solution does not introduce new core types or new face-kinds.

Forces

ForceTension
Single number vs multi-tradition evidencePeople want one scalar ↔ evidence comes from heterogeneous practices (proofs, tests, telemetry, expert review).
Rigor vs humilityClaims need to be usable in decisions ↔ overconfident scores are dangerous and hard to unwind.
Formal vs empirical warrantProof can be decisive in a formal theory ↔ real-world deployment requires empirical adequacy and drift management.
Scope realism vs marketing scopeNarrow scopes raise R ↔ incentives push for broad statements with hidden preconditions.
Reuse vs semantic lossReuse is valuable ↔ reuse across contexts/kinds/planes is inherently lossy.
Toolability vs expressive freedomA validator needs crisp rules ↔ authors want flexible narratives and domain nuance.

Solution

Canonical triad relation

Definition DEF‑C2.2‑1 (Epistemic location). An epistemic location for a claim c is the tuple:

Loc(c | K, S) = ⟨F(c), G(c), R_eff(c)⟩

where:

  • F(c) is Formality (C.2.3), treated as an ordinal.
  • G(c) is Claim scope (A.2.6), treated as a set-like scope object.
  • R_eff(c) is Effective reliability for c, treated as a ratio-scale scalar in [0,1] (or an ordinal proxy at [M‑0/M‑1]; see §4.5.A). R_eff is computed pathwise (DEF‑C2.2‑3): when more than one admissible justification path exists, publish multiple path records (PathId rows) and cite which PathId(s) a guard/decision consumed (see §4.8.A / G.6). Any collapse to a single scalar is an explicitly declared Γ‑policy (no implicit averaging).

A location is always understood relative to a bounded context and the assurance carriers used elsewhere in FPF:

  • K is the declared U.BoundedContext.
  • S ∈ {design, run} is the claim’s stance carrier (no DesignRunTag chimeras).
  • ReferencePlane is declared where applicable; plane crossings apply CL^plane and penalize R only.
  • When the claim is published on the Working‑Model surface, the author also declares validationMode ∈ {postulate, inferential, axiomatic} (E.14 / B.3).

Mode-to-lane hint (informative). validationMode sets the default expectation for which assurance lane carries the initial support load (B.3.3 or B.3.5). It does not add a new characteristic and does not change the meaning of R:

  • axiomatic → VA-dominant (constructive grounding or proof carriers); if ReferencePlane=world, LA may still be required.
  • inferential → VA+TA-dominant (reasoned chain + typing/alignment assurance); LA is optional and scope-bound.
  • postulate → LA-dominant (empirical validation with freshness/decay); VA is optional. In all modes, R remains warrant, not ontological truth; “proof ⇒ R=1 in the world” is a category error.

Profile note (informative; fold compatibility). Some profiles treat empirical R as N/A for strictly axiomatic lines and use a tagged proxy R_proxy := F (line=formal) for folding, as an explicit proxy rather than an implicit “F⇒R” rule (B.1.3).

⟨F,G,R⟩ is an assurance tuple, not a U.CharacteristicSpace; do not draw “trajectories” in ⟨F,G,R⟩.

What Reliability R means in KD‑CAL

Definition DEF‑C2.2‑2 (Reliability as warrant). R is a conservative, evidence-bound indicator of how strongly the claim “holds as stated” under its declared scope and context. It is interpreted as a warrant strength, not as truth.

Prophylactic clarification.

  • A higher R means “the evidence and its relevance supports relying on this claim under this scope.”
  • A higher F means “the claim’s form is amenable to higher-formality checking and wider reuse,” but does not itself imply the claim is warranted.
  • A larger G means “the claim applies to more cases,” but does not itself imply the claim is warranted in those cases.

KD‑CAL’s default Γ‑fold is weakest‑link on the entailment spine (the premises/lemmas actually needed), computed per justification path. It is conservative, monotone, and auditable.

Definition DEF‑C2.2‑3 (Pathwise weakest-link fold). Let P be a justification path for claim c. Let SpineClaims(P) be the required supports on the entailment spine, and let SpineBridges(P) be the bridges actually traversed on that spine (scope bridges, kind bridges, plane/notation transports where applicable).

Define the raw warrant of the path as:

R_raw(P) = min_{i ∈ SpineClaims(P)} R_eff(i)

and compute the effective warrant of the path by applying congruence penalties (see §4.5 for policy shape):

R_eff(P) = Π(R_raw(P); Φ(CL_min(P)), Ψ(CL^k_min(P)), Φ_plane(CL^plane_min(P)))

Spine discipline. The min is taken over the entailment spine only (no satellites, no “nice-to-have” citations).

This matches the KD‑CAL propagation rule (C.2:4.3) and the Trust & Assurance skeleton (B.3): weakest-link on the spine, penalize only by the worst (lowest) congruence encountered on the path (no averaging).

Parallel support (optional, declared). If the same claim c has multiple independent justification paths {P_j} (OR‑style support), the default is:

R_eff(c) = max_j R_eff(P_j)

Independence is recorded as an explicit note (e.g., separate rigs/datasets/proof lines), per CC‑C.2.2‑10 and the KD‑CAL composition rule (C.2:4.3). If the “multiple paths” actually cover different scope slices, do not use max to hide weaker slices; instead publish distinct G_path (SpanUnion‑style coverage) and keep per‑path R_eff traceable (A.2.6 / C.2:4.3).

Conflict detection (no averaging). If the evidence graph supports both p and ¬p with overlapping scope, do not average. Separate by context/scope, or mark the claim provisional with explicit conflict edges until resolved.

Congruence penalties route to R only (no silent widening)

Cross-context reuse and cross-kind reuse are treated as transport with loss, and loss is expressed as a penalty that reduces R.

Invariant INV‑C2.2‑1 (R-only penalty routing). For any transport step that uses a bridge with a declared congruence level, the transported claim preserves its F value, re-expresses its scope via an explicit scope translation (translate) when needed, and only its R value is decreased by congruence penalties:

F_out = F_in G_out = translate(Bridge, G_in) (identity only for within-context identity use; cross-context use is undefined without a Bridge) R_out ≤ R_in

Claim scope may be re-expressed by an explicit translation, but must not be silently widened:

G_out = translate(Bridge, G_in) (may narrow / drop unmappable slices; never widen without an explicit ΔG)

No implicit translation. Translation between contexts never occurs implicitly: if the target context differs, an explicit Bridge (with declared CL and loss note) is mandatory; otherwise the reuse is non-conformant. No implicit translation. Cross‑Context reuse is conformant only via an explicit Bridge (declared CL + loss note) and an explicit translate(Bridge,·); see CC‑C.2.2‑4.

This invariant is why KD‑CAL guard macros and crossing bundles can be simple: transport never silently widens a claim; it either (i) translates/narrows scope explicitly, and/or (ii) reduces warrant.

translate is the USM operator (A.2.6). It may drop unmappable slices and may include refit-like normalization; this is not a penalty. Any further narrowing is an explicit Δ‑move (ΔG−) under A.2.6. Congruence loss (CL/CL^k/CL^plane) still routes to R only.

Notation/plane transports. NotationBridge and plane transports contribute to the relevant CL*_min(P) bottlenecks for the path; they do not “lower F” by penalty. If an author actually rewrites a claim into a different formality level, that is a new episteme (ΔF), not “transport”.

Worked micro-example: translate(G) + penalty (A.2.6:12.2)

Source context: MaterialsLab@2026. Claim:

c: “Adhesive X retains ≥85% tensile strength on Al6061 for 2 h at 120–150 °C.”

  • G_src := {substrate=Al6061, temp∈[120,150]°C, dwell≤2h, Γ_time=window(1y), rig=Calib‑v3}
  • Loc_src(c) = ⟨F_src, G_src, R_raw⟩

Target context: AssemblyFloor@EU‑PLANT‑B. Reuse requires a declared Bridge b:

  • Bridge Bridge#MatLab_to_PlantB maps lab rig → plant rig and introduces a measurement correction; CL(Bridge#MatLab_to_PlantB)=2 with loss note “±2 °C bias.”
  • Scope translation: G_tgt := translate(b, G_src) which (in this case) narrows the temperature span to [122,148]°C due to the correction.
  • Penalty routing: using policy Φ=Φ_v1, compute R_eff := max(0, R_src − Φ_v1(CL(Bridge#MatLab_to_PlantB))).

Key point: G changed only because translate(b,·) explicitly re-expressed the same entitlement in the target Context’s slice vocabulary; the congruence loss still affects R only. If authors decide that only [125,145]°C is safe to claim on the floor, that is an explicit ΔG− decision (scope edit), not a congruence penalty.

Effective reliability under transport (policy-defined, monotone, bounded)

When a claim is reused via bridges, R_eff is computed by applying penalties determined by congruence levels.

Definition DEF‑C2.2‑4 (Effective reliability under transport). Let:

  • CL be the congruence level of a scope bridge (B.3).
  • CL^k be the congruence level of a kind bridge (C.3).
  • CL^plane be the congruence level of a plane transport bridge (B.3 / plane patterns).

Let Φ, Ψ, and Φ_plane be policy-defined, monotone, bounded, table-backed penalty policies applied on the relevant edges:

  • Φ(CL) — scope/context Bridge penalty (CL).
  • Ψ(CL^k) — KindBridge penalty (CL^k) when kinds are mapped.
  • Φ_plane(CL^plane) — plane-crossing penalty when ReferencePlane differs.

Important (direction of monotonicity). Congruence ladders are “polarity up” (higher CL = better fit). Per CC‑G0‑Φ and the Trust & Assurance skeleton, penalty tables are monotone decreasing in their CL ladders (if CL1 < CL2 then Φ(CL1) ≥ Φ(CL2), analogously for Ψ and Φ_plane) and bounded so that R_eff remains within [0,1] after clipping. Penalty magnitudes are not required to lie in [0,1] (tables may exceed 1 to force R_eff → 0 under the subtractive default); what matters is monotonicity, boundedness, and published policy identifiers.

Define:

R_eff(P) = clip_0^1( Π(R_raw(P); Φ(CL_min(P)), Ψ(CL^k_min(P)), Φ_plane(CL^plane_min(P))) )

where each *_min(P) is the lowest congruence level encountered on the entailment spine of P for that dimension (a bottleneck; no averages), and clip_0^1(x) truncates to [0,1].

Default (safe) instantiation (subtractive). When policies are expressed as subtractive penalties, a safe default is:

R_eff(P) = max(0, R_raw(P) − Φ(CL_min(P)) − Ψ(CL^k_min(P)) − Φ_plane(CL^plane_min(P)) )

This generalises the B.3 skeleton to multiple congruence ladders (scope vs kind vs plane) without introducing new penalty characteristics. If a dimension is not present on the path, its penalty term is treated as neutral (0 in the subtractive default).

Provisional marking. Default admissibility thresholds for reuse are set by Bridge calibration profiles (e.g., G.7). Typically, CL=1 requires an explicit waiver to proceed and CL=0 is inadmissible; this pattern only specifies that such thresholds gate transport before any numeric penalty is meaningful.

Math-by-level gating (B.1.3:4.3)

  • [M‑0/M‑1] allow ordinal comparisons only (no arithmetic on R_eff); Φ/Ψ/Φ_plane may be qualitative (“low/med/high”). Publish evidence links + lane tags.
  • [M‑2/L1] numeric R_eff requires referencing numeric, table-backed policy identifiers for Φ/Ψ/Φ_plane (and Π if not default), plus reproducibility tags for empirical legs; otherwise treat the claim as [M‑1] semantics.

Evidence lanes are not new characteristics

KD‑CAL does not add new global coordinates beyond F–G–R. Instead, it requires that reliability be explainable via assurance lanes (B.3.3):

  • TA (Typing assurance): semantic/type alignment sufficient for transport and composition.
  • VA (Verification assurance): logical/algorithmic checking, proof, model checking, static guarantees.
  • LA (Validation assurance): empirical adequacy under declared conditions, tests, benchmarks, telemetry.

Lane reporting is how KD-CAL supports the common research distinction between logical soundness and empirical adequacy without introducing new global characteristics. Lanes remain separable in SCR/Notes; they are not averaged into a “single tradition score”.

Scope operations are kind-safe (and use the ClaimScope algebra)

Reliability is meaningless if scope operations are applied to ill-typed entities.

Well-formedness constraint WFC‑C2.2‑1 (Type before scope). Let G1 and G2 be claim scopes associated to described entities of kinds K1 and K2. A scope operation that combines them (e.g., G1 ∩ G2 for serial intersection, SpanUnion({G_i}) for parallel coverage, or translate(Bridge, G) for cross‑context reuse) is defined only if:

  • K1 = K2, or
  • (same U.BoundedContext) K1 ⊑ K2 or K2 ⊑ K1 (an explicit kind relation/cast is named), or
  • (cross‑Context) there exists a declared KindBridge relating K1 and K2 with an explicit CL^k (C.3).

This constraint prevents “type-by-scope” anti-patterns where scope manipulation is used to hide type mismatch.

Minimal authoring recipe

A minimal, conforming KD‑CAL authoring flow for reliability is:

  1. Fix the typed claim. State the claim as a typed proposition about a EntityOfConcern (Kind‑CAL, C.3).

  2. Declare claim scope. Write G explicitly using A.2.6 operators; avoid scope-by-wording.

  3. Declare stance carriers. Declare K=U.BoundedContext, S ∈ {design, run}, and (where relevant on Working‑Model surfaces) validationMode ∈ {postulate, inferential, axiomatic}; declare ReferencePlane if crossings are in play.

  4. Bind evidence. Attach evidence stubs and lane tags (TA/VA/LA) and validity windows / decay policy where applicable (B.3.3, B.3.4).

  5. Choose Γ-mode. Declare whether the support is series (required) or parallel (independent lines to the same claim).

  6. Compute R_raw. Use the weakest-link fold on the entailment spine; for parallel support, use max only with an explicit independence note.

  7. Declare bridges on reuse. If you reuse across contexts/kinds/planes/notations, declare the bridge(s) (including NotationBridge where applicable) and their CLs. Cross‑Context reuse is conformant only when an explicit Bridge is declared; CL admissibility rules apply (waiver or forbid) before any numeric penalty is meaningful (see CC‑C.2.2‑4). Reuse note (FPF discipline). When this section refers to “reuse/portability across contexts or planes”, interpret it as Bridge-only reuse per §4.4: e.g., Bridge Bridge#MatLab_to_PlantB with CL=2 and an explicit loss note, applying policy ids Φ=Φ_v1 (and, where applicable, Ψ=Ψ_v2, Φ_plane=Φ_plane_v1) to reduce R_eff only.

  8. Compute R_eff. Apply the declared penalty policies into R (never into F or G), and publish ⟨F,G,R_eff⟩ with traceable references and policy identifiers.

A reliable claim is not a loud claim; it is a claim that can be carried.

Authoring template: Path summary row (copy/paste)

When publishing R_eff for a claim, authors SHOULD include a compact, claim-local path summary. This is intentionally shaped so it can be turned into tooling later (EvidenceGraph/PathId in G.6) without introducing new Core types or face-kinds.

PathIdEntailment spine (required supports)CL_minCL^k_minCL^plane_minPolicy-id(s) (Φ / Ψ / Φ_plane)R_rawR_effLane tags (TA/VA/LA)valid_until
P‑1c ← {c_a, c_b, c_c}23Φ=Φ_v1, Ψ=Ψ_v20.820.67{TA, LA}2026‑09‑30

Notes:

  • CL_*_min values are bottlenecks on the relevant path/dimension (no averaging).
  • valid_until is the earliest expiry across empirical legs (or / “fenced to TheoryVersion” for non-decaying proof legs).
  • If you publish multiple admissible paths, include multiple rows and cite which PathId(s) your decision/guard consumed.

Archetypal Grounding

Informative; non-binding.

System illustration

System. A brake controller S has a claim:

c1: “For road friction μ ∈ [0.2, 0.9] and vehicle mass m ∈ [900, 2200] kg, wheel slip stays in [0.05, 0.25] under ABS control.”

  • F(c1)=F5 because the controller and constraints are expressed as a machine-checkable model plus executable test harness (C.2.3).

  • G(c1) is the declared operating envelope (A.2.6) as a product set in (μ, m, speed, tire) space.

  • Evidence:

    • VA: model-checking of a simplified plant/controller model (strong, but only for the simplified plant).
    • LA: HIL simulation + track tests under sampled conditions with recorded telemetry windows (freshness required).
    • TA: typed alignment between “μ” in simulations, “μ” in the estimation pipeline, and “μ” inferred from real-world sensors.

If telemetry is reused from the track context to the road context, a scope bridge is declared with CL=2. Using the default monotone penalty table (B.3), the LA contribution is reduced, and the derived R_eff(c1) drops accordingly. The claim’s envelope G(c1) does not change; only the warrant for transporting the evidence does.

Episteme illustration

Episteme. A paper asserts two claims about an algorithm A:

  • c2: “A terminates for all inputs in domain D.” (axiomatic / proof-carrying)
  • c3: “A achieves ≥ 0.92 F1 on dataset family F under deployment preprocessing P.” (empirical)

c2 can achieve high VA with a proof carrier; its LA lane may be N/A, but its TA lane remains relevant because the intended meaning of “domain D” must align with the implementation’s input model. c3 requires LA evidence and a freshness/shift policy because dataset and preprocessing drift change the scope and the warrant. If c3 is reused from a lab dataset context to a production context, a bridge with explicit CL is required, and R_eff is reduced until new in-context evidence is attached.

Bias-Annotation

Informative; non-binding.

Lenses tested: Gov, Arch, Onto/Epist, Prag, Did. Scope: Universal.

  • Onto/Epist bias: High formality is often mistaken for high warrant (“proof therefore true in the world”). This pattern mitigates by forcing LA/TA visibility and by routing transport loss into R rather than mutating the claim.
  • Prag bias: Teams may Goodhart R by narrowing scope or selecting easy tests. This pattern mitigates by requiring explicit scope declaration and by making scope changes first-class (A.2.6).
  • Gov bias: Overconfident reuse across contexts is a recurring failure mode in governance settings. This pattern mitigates by forcing explicit bridges and penalties for reuse.
  • Did bias: A single scalar is seductive; it hides what kind of warrant exists. Lane reporting keeps the scalar honest.

Conformance Checklist

Normative.

IDRequirementPurpose
CC‑C.2.2‑1 (Triad publication).Authors of a KD‑CAL location SHALL publish ⟨F,G,R_eff⟩ as a bundle for a specific claim, rather than publishing R alone.Prevents decontextualised confidence scores.
CC‑C.2.2‑2 (R-only penalty routing).A conforming implementation of KD‑CAL transport SHALL satisfy INV‑C2.2‑1.Ensures bridges reduce warrant without silently mutating expression or scope.
CC‑C.2.2‑3 (Weakest-link fold).A conforming implementation of KD‑CAL reliability propagation SHALL use DEF‑C2.2‑3 as the default for required supports, unless an alternative Γ‑fold is explicitly declared and remains monotone and conservative.Prevents confidence laundering through aggregation.
CC‑C.2.2‑4 (Bridge visibility for reuse).Authors SHALL declare explicit bridges with CL values for any cross-context, cross-kind, or cross-plane reuse that affects R_eff.Makes transport loss auditable and machine-checkable.
CC‑C.2.2‑5 (Penalty policy visibility).Authors or tooling SHALL reference the active policy identifiers used for Φ, Ψ, Φ_plane and the penalty aggregation rule Π (if not the default) when computing R_eff.Ensures repeatability and prevents hidden policy drift.
CC‑C.2.2‑6 (Type before scope).Authors and validators SHALL enforce WFC‑C2.2‑1 for scope composition operations.Prevents ill-typed scope algebra from creating incoherent reliability claims.
CC‑C.2.2‑7 (Evidence binding).Authors SHALL bind any asserted R_eff to evidence references that enable TA/VA/LA inspection, consistent with the assurance lane discipline (B.3.3) and evidence decay discipline (B.3.4).Keeps R grounded and updateable.
CC‑C.2.2‑8 (No ordinal arithmetic).Validators SHALL reject any computation that treats F or CL as if they were ratio-scale numbers (e.g., averaging, subtraction), except where explicitly permitted as a policy-defined penalty function on R. Validators SHALL also reject arithmetic over R_eff when it is published as an ordinal proxy ([M‑0/M‑1]).Enforces CSLC legality and prevents silent scalarisation.
CC‑C.2.2‑9 (Stance carriers declared).Authors SHALL declare U.BoundedContext K, S ∈ {design, run}, and (where applicable) ReferencePlane and validationMode, and SHALL NOT merge design- and run-time assurance into one score.Prevents DesignRunTag chimera and makes interpretation auditable.
CC‑C.2.2‑10 (Parallel requires independence).Authors SHALL treat max-composition of support paths as admissible only when an explicit independence justification is recorded; otherwise supports are treated as one entangled line and remain weakest-link.Prevents confidence inflation by double-counting correlated evidence.

Common Anti-Patterns and How to Avoid Them

Informative; non-binding.

Anti-patternSymptomWhy it failsHow to avoid / repair
Averaging assuranceA mean/weighted sum of R values is reported as “confidence”.It violates WLNK and is usually illegal scale arithmetic.Use weakest-link min on the entailment spine, then apply congruence penalties into R only.
Truth-by-scoreR=0.9 is treated as “the claim is true.”R is warrant strength, not ontological truth.Require explicit evidence links and scope; treat R as decision warrant only.
Scope launderingThe claim’s applicability grows by wording changes while G is unchanged.It silently widens scope, making comparisons meaningless.Use A.2.6 operators and treat scope changes as explicit revisions.
Bridge launderingA claim is reused in a new context without a bridge, and R is carried over unchanged.It hides semantic loss and encourages overconfident reuse.Declare bridges with CL and recompute R_eff using penalties.
DesignRunTag chimeraDesign-time proofs and run-time telemetry are mixed as if they were the same evidence object.Evidence belongs to different stances and decays differently.Separate lanes and validity windows; treat crossings explicitly.
Ordinal arithmeticCL or F levels are averaged to produce a pseudo-score.It violates scale legality and produces non-auditable numbers.Keep CL/F ordinal; convert only via declared penalty tables on R.
Many-weak-makes-strongNumerous low-quality supports are combined to inflate confidence.It violates the weakest-link intent of conservative propagation.Default to min for required supports; allow max only with explicit independence arguments.

Consequences

Informative; non-binding.

BenefitsTrade-offs and mitigations
Comparability. Different claims can be compared in a disciplined way when F and G are explicit.Conservatism. Weakest-link propagation can feel pessimistic; mitigate by making support structure explicit and improving the weakest evidence.
Auditability. Transport loss is visible and localised to R.Overhead. Declaring bridges and evidence links is work; mitigate with templates and reuse of standard lane schemas.
Upgradeable knowledge. R can improve incrementally as evidence accumulates, without rewriting the claim.Scalar temptation. People still want one number; mitigate by requiring lane breakdown visibility behind the number.

Rationale

A triad only works if each coordinate has a single job.

  • G carries entitlement. It states where the claim is asserted to apply. If G is implicit, teams argue about “what was meant” instead of updating scope.
  • F carries checkability. It states how much the claim’s form supports mechanised scrutiny and reuse. If F is conflated with R, formalisation becomes a rhetorical weapon.
  • R carries warrant. It states how much evidence supports relying on the claim under G. If R is not conservative, evidence with a low R coordinate can be laundered into high confidence.

Routing congruence loss into R only prevents a subtle but pervasive failure mode: transport across contexts/kinds/planes does not silently rewrite the claim; it only reduces how confidently we should carry it.

Weakest-link propagation is chosen because it is the simplest rule that is monotone, conservative, and auditable. When better combination rules exist, they can be introduced as explicit Γ‑policies, but the default must be safe.

SoTA-Echoing

Normative.

SoTA pack binding note. If a SoTA Synthesis Pack exists for KD‑CAL reliability / cross‑context warrant transport in your Context (G.2), cite its ClaimSheet IDs / CorpusLedger entries / BridgeMatrix rows here. Otherwise, record SoTA-Pack: TBD/none and treat this section as the seed (do not fork it silently elsewhere).

Practice claimPost‑2015 source anchorAlignment to this patternAdoption status
Verification and validation should be distinguished and tied to evidence quality, not to rhetoric.ASME V&V 40‑2018 (model credibility assessment).This pattern separates VA and LA lanes and binds R_eff to evidence and declared scope rather than to narrative confidence.Adopt, with KD‑CAL’s conservative fold as an explicit default.
Trustworthiness is context- and risk-dependent and requires explicit documentation of limits.NIST AI Risk Management Framework 1.0 (2023).This pattern makes limits first-class via G and makes reuse loss explicit via CL penalties rather than informal caveats.Adapt, because FPF treats transport loss as an epistemic penalty, not as a purely organisational risk statement.
Safety arguments should make claims, evidence, and assumptions explicit and reviewable.UL 4600 (2020) and related assurance-case practice in autonomous systems.This pattern treats R as an auditable warrant signal whose inputs are explicit evidence items and whose reuse requires explicit transport justification.Adopt, while remaining notation-independent and avoiding tool mandates.
Empirical results should be accompanied by structured provenance and usage conditions to enable reuse and critique.“Datasheets for Datasets” (Gebru et al., 2018) and “Model Cards” (Mitchell et al., 2019).This pattern’s scope discipline and lane reporting make empirical warrant portable only when its conditions are explicit; cross‑Context reuse is Bridge-only (e.g., Bridge#MatLab_to_PlantB, CL=2, Φ=Φ_v1), and congruence loss routes to R_eff only.Adopt, with congruence penalties as the reuse control mechanism.
Reproducibility requires packaging evidence and making it re-checkable by others.ACM Artifact Review and Badging (updated practices post‑2015) and The Turing Way (2019).This pattern treats evidence as something that can be inspected across TA/VA/LA lanes and allows reliability to decay when evidence becomes stale or non-replayable.Adapt, because FPF treats decay and transport penalties as first-class calculus elements.
Strong inference benefits from “severe tests” rather than from accumulation of weak confirmations.Mayo (2018) on severity in statistical inference.Weakest-link propagation and explicit scope declarations discourage superficial confirmation piling and encourage explicit, discriminating evidence.Adapt, because KD‑CAL is agnostic to frequentist vs Bayesian inference but requires auditability.

Relations

Builds on: C.2 (KD‑CAL overview), A.2.6 (Claim scope and operators), C.2.3 (Formality F), B.3 (Trust & Assurance calculus), B.1.3 (Γ‑fold patterns), B.3.3 (assurance lanes), B.3.4 (refresh/decay), C.3 (Kind‑CAL and kind bridges), F.9 (Bridges & CL), G.6 (EvidenceGraph PathId discipline), G.7 (Bridge calibration / admissibility thresholds). Coordinates with: C.16 (MM‑CHR evidence discipline), E.14 (working-model assertions), E.18/F.9/F.17/E.17/A.21 where crossing bundles and gate checks are live, C.25 (Q‑Bundle, for avoiding confusion between epistemic reliability and system reliability). Used by: C.3.3 (cross-kind reuse discipline), guard macro bundles in C.3.A and C.21, and any acceptance/gating logic that consumes R_eff while preserving F and G. Clarifies: The KD‑CAL meaning of reliability implicit in C.2:4.1 and the transport clauses referenced across B.3 and C.3.

C.2.2:End

U.LanguageStateSpace - Language-state chart over U.CharacteristicSpace

Type: Architectural (A) Status: Stable Normativity: Normative unless marked informative

Plain-name. Language-state space.

Builds on. A.19, E.10, F.18.

Used by. C.2.LS, C.2.3, C.2.4, C.2.5, C.2.6, C.2.7, A.16.0, A.16, A.16.1, A.16.2, B.4.1, B.5.2.0, F.9.1, A.6.P, C.16.Q, A.6.A.

Problem frame

In engineering, inquiry, operator, and management practice, teams often need to say where a governed U.Episteme publication currently stands before it has reached a late endpoint governing pattern. That governed publication may later appear through several cue-bearing, route-bearing, or endpoint-bound publication forms, but the chart claim remains about the governed U.Episteme publication rather than about a local alias or a carrier lane.

Cue packs, routed cue sets, abductive prompts, typed route-bounded projection publications, partial normal forms, and endpoint-bound records are not rival occupants of the space. They are publication forms through which a current position claim is made visible. MVPK faces may render those forms, but faces are not themselves the forms. By contrast, a service disturbance, a model-vs-observation discrepancy, a bodily tension, a telemetry trace, a model output, or a carrier document may trigger, witness, or carry that episteme, but none of those is itself a coordinate in the space.

Practitioners, including engineers, operators, researchers, managers, and engineer-managers, still have to decide where such an episteme currently stands, which thresholds matter next, which publication form is admissible, and what must not yet be claimed. If this domain is described only with folk labels such as raw, early, settled, or ready, the real geometry disappears.

Problem

Without an explicit language-state chart:

  1. teams collapse several facets into one maturity story;
  2. F is silently misused as a surrogate for articulation, closure, anchoring, and representation factors;
  3. thresholds are published as vague readiness statements instead of explicit facet conditions;
  4. source phenomena, governed epistemes, publication forms, publication faces, and carriers are conflated;
  5. bridge and endpoint work inherit under-described upstream states.

Forces

ForceTension
Multi-facet fidelity vs readable publicationThe chart must preserve several independent facets without becoming unreadable.
Stable basis vs local thresholdsBasis slots should stay stable across contexts, while thresholds remain context-local.
Position semantics vs publication semanticsA position claim is not identical to the source phenomenon, publication form, or carrier through which it is currently expressed.
Comparability vs non-collapseTeams need to compare positions, but not by flattening them into one pseudo-scale.
Bridge reuse vs local authorityCross-context work benefits from a stable upstream chart, yet each context keeps local threshold authority.

Solution

U.LanguageStateSpace is the cluster-local name for the declared language-state chart over U.CharacteristicSpace as disciplined by A.19.

It is not a second kernel state-space apparatus beside A.19. It is the particular declared U.CharacteristicSpace whose basis slots are the language-state facets used in this cluster.

Core role

U.LanguageStateSpace gives FPF one explicit declared chart for answering five questions:

  • which basis slots define where the governed episteme stands;
  • what a position claim in that chart means;
  • which thresholds are locally declared over those slots;
  • what comparisons are admissible without cross-facet collapse;
  • and how the same position claim stays distinct from the publication form currently expressing it.

Position reading under A.19

A language-state position is a partial, slot-explicit coordinate claim in the declared language-state U.CharacteristicSpace.

Each basis slot publishes a ValueSet(slot), interval, or other admissible set-valued claim. Early seam publications may leave some slots unknown or wide, but that uncertainty must be declared rather than hidden inside one stage word.

position language is therefore admissible here only as shorthand for such slot-explicit A.19 coordinate claims. It does not authorize a rival process-sequence or feature-vector story.

Facet basis

The language-state chart is coordinated by explicit facet governing patterns rather than by an informal master progression. In the current cluster the basis is formed by:

  • C.2.3 for F;
  • C.2.4 for articulation explicitness;
  • C.2.5 for language-state closure degree;
  • C.2.6 for language-state anchoring mode;
  • C.2.7 for the language-state representation-factor bundle.

C.2.2a states that these basis slots together define the chart. It does not govern the internal scale semantics of the individual facets.

Ontological role lanes

Within this cluster, keep five roles distinct:

  • occupant - the governed U.Episteme publication whose current position is being claimed;
  • grounds / witnesses - disturbances, discrepancies, traces, model outputs, bodily tensions, exemplars, or contrasts that justify the current reading;
  • publication forms - cue packs, routed cue sets, prompt forms, typed route-bounded projection publications, partial normal forms, and endpoint-bound records through which the episteme is published;
  • publication faces - the existing MVPK faces on which those publication forms are rendered when face typing matters;
  • carriers - documents, console notes, cards, trace files, or model carriers that hold or render a publication.

U.LanguageStateSpace governs only the coordinate reading of the position claim. It does not collapse that claim into the grounds, publication form, publication face, or carrier.

Position publication rule

A published position claim in U.LanguageStateSpace should normally make at least the following explicit:

  • the occupant whose position is being described;
  • the relevant slot values, ValueSet claims, or intervals;
  • the current publication form and, when it matters, the MVPK face carrying it;
  • the load-bearing grounds, witnesses, or carriers that explain those values;
  • any local threshold declarations if the position is being used for a routing or gate decision;
  • any note that distinguishes source anchoring from current publication-face anchoring.

A position claim may be partial when some slots are intentionally unknown, but the unknowns should be declared rather than hidden under a broad readiness label.

Local position-reading witness

For this pattern, a position claim is reviewable when:

  • the occupant is named or inherited by an already pinned upstream publication;
  • the slot values, intervals, or ValueSet claims are explicit enough to show where the publication stands;
  • the grounds, witnesses, or inherited pins that support those values remain visible;
  • any threshold-bearing use states the local threshold note or the pinned threshold source it inherits;
  • and the text keeps the occupant, publication form, publication face, and carrier in distinct role lanes.

A polished note, a carrier with more preservation or distribution support, or a more formal face does not by itself prove a new position. The chart claim remains admissible only when those role lanes and slot claims stay visible.

Non-substitution of F

F remains one basis slot in the chart, not the whole chart.

A conforming account shall not infer:

  • closure from formality alone;
  • anchoring from publication-face format alone;
  • representation factors from articulation alone;
  • or routing legality from a lone F statement.

Where operationally meaningful thresholds exist, they must publish on the relevant slots rather than being disguised as informal F sublevels.

Position versus publication form

A position claim in U.LanguageStateSpace is distinct from:

  • the underlying governed U.Episteme,
  • the source disturbance, discrepancy, or witness,
  • the current publication form,
  • the MVPK face that renders that publication,
  • the carrier that stores or displays it,
  • or the endpoint-pattern-governed publication that may later result from it.

Those roles are coupled but distinct. U.LanguageStateSpace keeps the position claim readable without collapsing it into any one bearer lane.

Threshold publication discipline

If a threshold is used to justify a move, a handoff, or an endpoint entry, that threshold shall be stated on explicit basis slots in the chart. Statements such as this is now ready, this has matured, or this is still too early are non-conformant when they substitute for undeclared slot conditions.

Comparison and bridge note

Comparisons inside one context may use the shared chart and local thresholds. Comparisons across contexts require explicit bridge discipline. Label similarity or stage-language similarity does not establish sameness of charts, positions, or thresholds.

C.2.2a therefore supports bridge work, but does not grant cross-context identity by itself.

Corridor reading note

The current Language-State & Semantic Routing Corridor in this cluster is a distributed overlay over:

  • C.2.2a
  • C.2.LS
  • C.2.4–C.2.7
  • A.16
  • A.16.0–A.16.2
  • B.4.1
  • B.5.2.0

A.16.1 / U.PreArticulationCuePack remains the earliest durable seam publication form in that corridor. B.4.1 is the explicit route-bearing seam after cue preservation, not the first publication in the corridor. B.5.2.0 is typed prompt entry, not generic route governance.

C.16.Q, A.6.A, A.6.P, B.5.2, A.15, and C.25 are seam-coupled downstream governing patterns rather than members of this language-state governing-pattern set.

This note gives readers one corridor map only. It does not relocate articulation, closure, route, prompt, bridge, or endpoint semantics out of their current governing patterns.

Archetypal Grounding

Tell. One note can have high operator-loop anchoring yet still low closure. Another can be document-mediated and symbol-heavy while still open on route choice. Both are positions in one language-state chart, but not on one maturity progression.

Show (System). A service disturbance is a system-side phenomenon. The governed occupant is the alerting U.Episteme published from that disturbance; its position claim may be moderately formal, low-closure, high in operator-loop anchoring, and mixed in representation because terse codes and natural-language hints coexist.

Show (Episteme). A model-vs-observation discrepancy is a witness-level tension, not the occupant itself. Once preserved as a cue pack, the resulting governed U.Episteme may be low in articulation, low in closure, trace-anchored, and only partly symbolic even when later written into prose.

Bias-Annotation

The pattern deliberately biases authors toward decomposable coordinate claims and away from folk stage vocabularies. That costs some brevity, but it prevents collapse of genuinely different state facets into one adjective.

Conformance Checklist

  • CC-C.2.2a-1 U.LanguageStateSpace SHALL be treated as the declared language-state chart over U.CharacteristicSpace, not as a rival kernel space and not as a disguised F progression.
  • CC-C.2.2a-2 Published positions SHALL cite explicit facet governing patterns when those positions matter for movement, routing, or endpoint entry.
  • CC-C.2.2a-3 Position claims SHALL use slot-explicit values, ValueSet claims, or intervals; uncertainty SHALL NOT be hidden inside stage words such as ready, early, or mature.
  • CC-C.2.2a-4 A position claim in the chart MUST NOT be conflated with the current ground, witness, publication form, publication face, or carrier.
  • CC-C.2.2a-5 Cross-context comparison of positions or threshold talk SHALL go through bridge discipline rather than label similarity.
  • CC-C.2.2a-6 Corridor and navigation notes MUST NOT be read as relocation of facet, seam, bridge, or downstream governing-pattern semantics into the chart governing-pattern set.
  • CC-C.2.2a-7 If a position claim is used for routing, endpoint entry, or gate-adjacent reasoning, the threshold note and the role-lane distinction between occupant, publication form, face, and carrier SHALL remain explicit or explicitly inherited from a pinned upstream publication.

Common Anti-Patterns and How to Avoid Them

  • Maturity monism. Replace five facets with one stage word. Repair by publishing explicit slot placement.
  • Formality capture. Use F to stand in for articulation, closure, or anchoring. Repair by naming the actual facet governing pattern.
  • Carrier collapse. Treat a document, cue pack, or routed note as if it were the position itself. Repair by separating carrier lane, publication form, publication face, and position claim.
  • Threshold folklore. Speak of readiness without any explicit threshold declaration. Repair by publishing relevant local threshold notes on explicit slots.
  • Bridge by vibe. Treat similar stage language in two schools as equivalence. Repair by explicit F.9 bridge with loss notes.
  • Corridor inflation. Treat the navigation cluster or corridor map as if it were the governing-pattern set for all downstream semantics. Repair by naming whether the current statement belongs to the chart governing-pattern set, a seam publication form, or a downstream governing pattern.

Consequences

The benefit is that practitioners, including engineers, operators, researchers, managers, and engineer-managers, can speak about where a governed U.Episteme stands without hiding the reasons inside vague maturity language. The trade-off is that publication must carry explicit slot and threshold information when decisions depend on it.

Rationale

Language-state work needs one explicit statement of what this chart is before individual facet, move, and endpoint patterns start using it. Without that statement, readers have to reconstruct the same geometry from scattered local rules and examples.

SoTA-Echoing

SoTA note. This section does not mint a second rule source. It is a load-bearing alignment statement: the Solution, Conformance Checklist, and role-lane discipline of this pattern must match the stance stated here or explicitly justify divergence.

Traditions covered. This pattern binds itself to architecture-description governance, model-based systems engineering, and risk/governance profiling practice.

Claim needSoTA practice (post-2015)Primary source (post-2015)Alignment with C.2.2aAdoption status
Complex technical state should be published through explicit views, viewpoints, and model distinctions rather than one implicit maturity word.Contemporary architecture-description governance separates source architecture description, view, viewpoint, and correspondence evidence instead of letting one visible adjective stand in for the whole state.ISO/IEC/IEEE 42010:2022C.2.2a adopts this by keeping chart position, publication form, face, and carrier in distinct role lanes and by rejecting stage-language as a surrogate coordinate system.Adopt.
Rich engineering state is better represented through typed properties and relations than through one maturation progression.Recent MBSE practice favours explicit model elements, properties, and cross-view consistency over one implicit readiness staircase.OMG SysML v2 (2025)C.2.2a adapts this into a declared language-state chart with named basis facets, slot-explicit values, and local thresholds instead of one maturity rail.Adapt.
Governance-relevant readiness requires context-local profiles and thresholds, not one global adjective.Current governance and risk frameworks use explicit profiles, thresholds, and scoped conditions rather than one blanket readiness label.NIST AI RMF 1.0 (2023)C.2.2a adopts the threshold-publication discipline and rejects the popular shortcut where ready, early, or mature replaces explicit slot conditions.Adopt/Reject-popular-shortcut.

Architecture-description governance. C.2.2a adopts the discipline that positions, publication forms, faces, and carriers stay explicitly distinct, even when one local rendering makes them look aligned.

MBSE and profile discipline. C.2.2a adapts multi-property state publication into a chart over U.CharacteristicSpace whose basis facets remain decomposable and locally thresholded.

Local stance. The load-bearing SoTA claim for this pattern is narrow: best-known current practice treats governed language-state as a multi-facet chart with explicit thresholds and role-lane distinctions, not as one maturity progression or one polished publication face.

Relations

  • Builds on: A.19, E.10, F.18.
  • Coordinates with: C.2.LS, C.2.3, C.2.4, C.2.5, C.2.6, C.2.7, A.16.0, A.16, F.9, F.9.1, E.17.1.
  • Constrains: threshold publication, positional claims, and anti-collapse discipline across the language-state cluster.

Worked Examples

Inquiry cue before endpoint capture

A research cue note may occupy a position claim with:

  • moderate F,
  • low articulation explicitness,
  • low closure,
  • strong embodied or trace-based anchoring,
  • and mixed representation factors.

That position explains why the note should remain upstream of A.6.P or C.25 even if its prose happens to look polished.

Routed operator alert note

A routed operational alert may have:

  • moderate formality,
  • medium articulation,
  • low closure because several responses remain live,
  • high operator-loop anchoring,
  • and mixed symbolic and natural-language representation.

That position explains why the alert belongs in a route-bearing seam publication before it hardens into an endpoint-pattern-governed work record or reliance record.

Viewpoint-bound adequacy note

A document-mediated adequacy note about an architecture description may be relatively high in formality and articulation, mid-level in closure, document-mediated in anchoring, and symbolic in representation. That position remains within the same language-state chart even though its carrier lane differs from an embodied inquiry cue.

Polished prose is not closure

A prose rewrite may look cleaner, more compact, or more manager-readable than the source cue and still remain low in closure or articulation explicitness. If the underlying slot values, uncertainty, and route plurality remain unchanged, then publication polish changes the rendering or carrier lane, not the chart position by itself.

Position Publication Package Discipline

A publishable position claim should normally identify:

  • the occupant whose position is being described;
  • the relevant slot values, ValueSet claims, or intervals;
  • the current publication form and, if relevant, the MVPK face and carrier;
  • any source-versus-face anchoring distinction that matters;
  • the thresholds, if any, being invoked;
  • and the next governing pattern or move family that depends on the claim.

This keeps the claim operationally useful without pretending that the position is itself a full trajectory or endpoint form.

Review Guidance

A reviewer should ask:

  1. Is the author naming a position claim in the chart, or only a folk stage label?
  2. Is F being used as a surrogate for another slot?
  3. Are source phenomena, publication forms, publication faces, and carriers being confused with the occupant?
  4. Are threshold claims explicit enough for the next move or endpoint decision?
  5. If the text compares two contexts, is there a real bridge or only a lexical resemblance?

Boundary Notes

C.2.2a does not govern move kinds, seam publication forms, endpoint repair semantics, or bridge substitution licence. Those belong respectively to A.16 / A.16.0, A.16.1 / B.4.1 / B.5.2.0, A.6.* / C.25, and F.9 / F.9.1.

Its job is narrower and more foundational: to make the declared language-state U.CharacteristicSpace chart readable so that downstream patterns can refer to one visible common geometry instead of rebuilding it piecemeal.

C.2.2a:End

Unified Formality Characteristic F

Type: Definitional (D) Status: Stable Normativity: Normative unless marked informative

Plain-name. Formality characteristic.

One-line summary. C.2.3 defines Formality (F) as one ordinal U.Characteristic with polarity up, anchored by the default ladder F0...F9, and declared as the F coordinate of the typed F-G-R assurance tuple.

Problem frame

Transdisciplinary work needs one shared way to speak about rigor of expression. A research hypothesis in constrained natural language, a software interface specification with explicit invariants, a controller model checked against hybrid obligations, and a proof-bearing formal development are not comparable by domain lore alone. They are comparable by how strictly the content is expressed.

Historically, that distinction drifts. Teams mix editorial maturity, organizational status, notation choice, proof support, and scope narrowness into one vague story about something being more formal. C.2.3 removes that drift by giving FPF one explicit U.Characteristic for rigor of expression.

Problem

Without one unified F characteristic:

  1. Rigor is narrated inconsistently. Different contexts invent local mode/tier language with no shared comparability.
  2. Status and rigor collapse. Something accepted, published, or approved is mistaken for something precisely expressed.
  3. Expression changes are hidden. A move from sketch to predicates or from executable model to proof is not recorded as a distinct content change.
  4. Composition becomes unsound. A composite episteme is treated as highly formal because one segment is highly formal, even when essential support still depends on less formal parts.
  5. Other characteristics are misused as surrogates. Authors quietly use scope, evidence, or language-state facets as if they were part of one master formality characteristic.

Forces

ForceTension
Readability vs precisionNatural language is fast and legible; formal systems are unambiguous and checkable. F needs a gradient, not a cliff.
Local freedom vs shared comparabilityContexts need local exemplars and thresholds, but cross-context reasoning requires one stable characteristic.
Exploration vs assuranceEarly work must be allowed at low F, while high-assurance work needs explicit higher anchors.
Notation diversity vs semantic stabilityDifferent symbol systems may express the same rigor level; notation choice alone must not redefine F.
Thin characteristic vs rich practiceThe core characteristic should stay simple, while still supporting concrete guidance, examples, and review discipline.

Solution - U.Formality as one ordinal characteristic

C.2.3 defines U.Formality as the single governing characteristic for rigor of expression in FPF.

Identity and typing

  • Name: U.Formality (abbreviated F in the assurance tuple)
  • Type: U.Characteristic
  • Scale kind: ordinal
  • Polarity: up
  • Carrier: any U.Episteme
  • Default value family: F0...F9

F states how strictly the content is expressed. It does not state whether the content is true, well evidenced, widely applicable, or organizationally accepted.

Role in the typed F-G-R tuple

F is the formality coordinate in the assurance tuple. Its interaction rules are strict:

  • F is not G; scope remains governed by U.ClaimScope and other USM structures.
  • F is not R; evidence, warrant strength, and decay remain assurance concerns.
  • CL and bridge losses affect R, not F.
  • Changes in notation, carrier, or rendering form do not change F if the formal content is preserved.

Extensibility and local anchors

FPF provides the default anchor ladder F0...F9. A context may define sub-anchors or intermediate anchors such as F4[OCL] or F6.5, but only if:

  • global order is preserved,
  • the local anchor is explicitly docked to a parent anchor,
  • the context does not invent a rival ladder or proxy scale.

Usage obligations

  • Every normative episteme shall declare one F value.
  • Thresholds that depend on rigor should be written explicitly as F >= Fk conditions.
  • Any raise or lowering of F is a content change, not a status-only change.
  • F remains declaration and reasoning infrastructure; it is not itself a governance process.

Archetypal Grounding

Tell. F does not ask whether a claim is correct. It asks how strictly the claim is expressed.

Show (System). A system requirement written as controlled natural language with unambiguous acceptance conditions may be F3; the same requirement rewritten as explicit typed invariants may become F4; a machine-checked proof of a critical invariant may raise the relevant claim core to F7 or above.

Show (Episteme). A research conjecture can begin at F1-F3, then gain explicit predicates at F4, executable semantics at F5, and proof-bearing core content at F7-F8, while remaining recognizably the same evolving claim family.

Bias-Annotation

The pattern biases FPF toward one explicit rigor characteristic and against stories that mix formality with status, publication quality, scope width, or evidence support. That bias is intentional. The price of explicit declaration is smaller than the cost of comparing rigor through folklore.

Conformance Checklist

  • CC-F-1 Every normative U.Episteme SHALL declare exactly one U.Formality value, either a default anchor or a local sub-anchor explicitly docked to one.
  • CC-F-2 F SHALL be treated as an ordinal characteristic; arithmetic over F values is invalid.
  • CC-F-3 Higher F SHALL mean greater or equal strictness of expression, not greater truth, trust, or scope.
  • CC-F-4 Contexts MUST NOT publish alternative "formality modes" or "tiers" as surrogates for F.
  • CC-F-5 Local sub-anchors SHALL preserve the global ordering and the parent anchor meaning.
  • CC-F-6 The episteme-level F of a composite episteme SHALL be bounded by the least-formal essential support on the relevant support path.
  • CC-F-7 Implementations MUST NOT average F values numerically.
  • CC-F-8 Changes in G, R, or CL SHALL NOT change F unless the expression form itself changes.
  • CC-F-9 Cross-context transport SHALL preserve the attributed F; if the receiving context rewrites the claim materially, it becomes a new episteme with its own F.
  • CC-F-10 Translation loss, bridge loss, and plane crossings SHALL affect R rather than being hidden as F changes.
  • CC-F-11 Assigned F values SHALL be justifiable by observable content such as explicit predicates, executable semantics, or machine-checked proofs.
  • CC-F-12 Declaring a tool or notation SHALL NOT by itself justify a higher F unless the content satisfies the target anchor semantics.
  • CC-F-13 Status labels such as Draft, Approved, or Published MUST NOT substitute for F.
  • CC-F-14 A context that uses F in gates or policies SHALL write those thresholds explicitly.
  • CC-F-15 Language-state facets such as articulation or closure MUST NOT be hidden as pseudo-levels of F.

Common Anti-Patterns and How to Avoid Them

Anti-patternWhat it looks likeHow FPF prevents it
Status leakageAn episteme is called highly formal because it is approved or published.CC-F-13 keeps status and formality separate.
Tool-worshipA notation, prover, or execution harness is named, so the episteme is rated high-F without checking the content.CC-F-11 and CC-F-12 require observable semantic grounds.
Appendix inflationA small high-formality appendix is used to advertise the whole episteme as high-F.CC-F-6 keeps the whole episteme capped by the least-formal essential support.
Proxy ladderA local context invents "bronze / silver / gold" or "ready / mature / final" and uses it instead of F.CC-F-4 rejects rival ladders.
Characteristic captureArticulation, closure, scope, or evidence is spoken of as if it were part of F.CC-F-8, CC-F-10, and CC-F-15 keep the characteristics orthogonal.

Consequences

BenefitTrade-off / Mitigation
Shared rigor language. Cross-domain publication units can be compared by one stable expression characteristic.Authors must learn the anchor ladder and declare F explicitly.
Safer composition. Composite epistemes stop inheriting a misleadingly high rigor label from one polished segment.Reviewers must identify essential support rather than read only visible polish.
Cleaner governance. Thresholds can be written as explicit F conditions instead of vague maturity labels.Contexts must translate old local language into the canonical characteristic.
Better interaction with other characteristics. F, G, R, and language-state facets remain distinct.Authors lose the convenience of one master-ladder story; that loss is deliberate.

Rationale

FPF needs a rigor characteristic that is portable across mathematics, software, systems, policy, and research. The smallest stable answer is one ordinal characteristic with clear anchors and explicit composition rules. Anything more fragmented breaks comparability; anything more compressed hides the substantive differences between sketch, predicate, executable model, and machine-checked proof.

SoTA-Echoing

Post-2015 practice across formal methods, software architecture, safety engineering, verification, computational science, and typed proof environments converges on one broad lesson: rigor is not binary. It rises through explicit structuring, predicate expression, executable semantics, and machine-checked obligations. C.2.3 adopts that gradient while keeping the characteristic notation-agnostic and transdisciplinary.

Relations

  • Defines: the F coordinate of the typed F-G-R assurance tuple.
  • Builds on: characteristic machinery from A.18 / A.19 and episteme-level characteristic assignment from Part C.
  • Coordinates with: C.2.2, B.3, F.9, C.2.LS, A.16, C.2.4, C.2.5, C.2.6, and C.2.7.
  • Constrains: any pattern, gate, or editorial rule that speaks about rigor of expression.

Canonical Anchors F0...F9

Reading rule. Anchors are ordinal. They say what is minimally true of the expression form, not what is true of the world.

F0 - Unstructured prose

Free natural language with unstable vocabulary, implicit assumptions, and no stable internal structure.

F1 - Scoped notes

Still informal, but with stable topic focus and more consistent terminology. Scope is named even though criteria are not yet operationalized.

F2 - Structured outline

A recognizable template or full section shape exists. The expression is coherent end-to-end, but acceptance criteria are still largely placeholders or informal.

F3 - Controlled narrative

Claims are expressed in constrained prose with stable interpretation. Acceptance or refusal conditions are visible in language, even if not yet fully predicate-like.

F4 - First-order constraints

Critical claims can be rendered as explicit predicates or invariants over typed entities. Consistency and conflict are at least checkable in principle.

F5 - Executable math / algorithmics

The expression has declared executable semantics. Running the model, algorithm, or simulation is part of its meaning.

F6 - Hybrid formalism

Several formal layers are coordinated explicitly, typically discrete plus continuous or several tightly coupled formal subsystems, with declared obligations between them.

F7 - Higher-order verified

Core claims are encoded in a proof-capable higher-order setting and machine-checked against that logic kernel.

F8 - Dependent / constructive proofs

Programs-as-proofs or dependent-type expressions carry the relevant property in their types or proof terms.

F9 - Univalent / higher foundations

Higher-equality foundations are load-bearing. The expression relies on a frontier-grade setting where equivalence is handled as structure-level identity.

Cross-anchor cautions

  • Execution is not proof.
  • Surface structure is not yet semantics.
  • Publishing or approval is not an anchor.
  • A local sub-anchor does not erase its parent anchor's meaning.

Assigning F in Practice

First-pass questions

  1. Can a competent reader misread the claim materially? If yes, the expression is likely at F0-F2; if not, it may be F3 or above.
  2. Are the critical claims visible as explicit predicates or invariants? If yes, the expression is at least F4.
  3. Does the expression have declared executable semantics? If yes, it is likely in the F5-F6 region.
  4. Would a logic kernel or type checker reject an incorrect change to a core claim? If yes, the expression is likely F7-F8, or F9 if higher-equality machinery is essential.

Quick rubric

  • No full structure -> F0-F1
  • Full structure but mostly placeholder criteria -> F2
  • Controlled prose with one stable reading -> F3
  • Explicit predicates / invariants -> F4
  • Declared executable semantics -> F5
  • Hybrid / layered formal obligations -> F6
  • Machine-checked proof core -> F7
  • Dependent proof-carrying core -> F8
  • Higher-equality foundations are essential -> F9

Typical delta-F moves

  • F2 -> F3: replace loose prose with controlled phrasing and explicit acceptance statements.
  • F3 -> F4: recast acceptance into typed predicates or invariants.
  • F4 -> F5: give the expression declared executable semantics.
  • F5 -> F6: make multi-layer obligations explicit.
  • F6 -> F7/F8: move critical claims into machine-checked proof or dependent-type form.

Composition and Interaction

Weakest-essential-support rule

For a composite episteme, the effective F is bounded by the least-formal essential support on the relevant support path. A highly formal annex does not lift an informal essential claim core.

Relation to G

F concerns expression form; G concerns applicability or claim scope. Tightening scope may accompany a raise in F, but it is a separate change and must remain visible as such.

Relation to R

Higher F often makes evidence easier to formulate, test, or prove, but it does not create warrant strength by itself. Empirical freshness, corroboration, and bridge penalties remain R concerns.

Relation to CL and Bridges

A bridge may expose loss or mismatch across contexts. Those losses affect R; they do not silently lower or raise the attributed F. If the receiving context must materially rewrite the claim, it should publish a new episteme with its own F.

Worked Examples

Research hypothesis

A short note proposing a new scaling law with one stable reading and explicit acceptance conditions in prose is typically F3. Rewriting the acceptance conditions as typed predicates would move it toward F4.

Interface specification

An interface specification with explicit preconditions, postconditions, and invariants is typically F4. Adding declared executable semantics in a faithful reference model may move it toward F5.

Safety controller

A controller coupled to a plant model with explicit hybrid obligations is typically F6. If key invariants are then machine-checked in a higher-order proof environment, those claims move toward F7.

Decision policy

A decision policy with controlled prose may remain F3. If thresholds and conditions are published as typed predicates, it becomes F4.

Proof-bearing algorithm

A dependent-typed algorithm whose central property is carried by the type itself is typically F8.

Executable ML recipe

A fully explicit training-and-evaluation recipe with declared execution semantics is typically F5. It does not become F7 merely because the surrounding execution machinery is sophisticated.

Authoring and Review Guidance

For authors

Declare F honestly and early. A low F declaration is not a defect; it is often the correct statement about an early expression. Raise F by changing the expression form itself, not by applying prestige language or by pointing to surrounding machinery.

For reviewers

Review the actual claim core. Ask whether the target anchor semantics are visibly satisfied, whether essential support contains segments with lower R, lower F, or missing witness coverage, and whether status or other characteristics have leaked into the F declaration.

For integrators and assurance leads

Use F explicitly in gates and composition analysis, but do not let it absorb work that belongs to G, R, CL, or C.2.LS. Large F gaps across collaborating epistemes are signals for explicit formalization work, not excuses for wishful leveling.

Glossary and Notation

  • U.Formality / F. The rigor-of-expression characteristic governed by this pattern.
  • Anchor. A named ordinal milestone on the F ladder.
  • Sub-anchor. A context-local refinement docked to one parent anchor.
  • Delta-F. A content change that alters expression rigor.
  • Essential support. The support without which the central claim does not stand.
  • Example notation. F = F4, F = F7[HOL], requires F >= F6.

Change Log and Patch Notes

Supersession of legacy ladder language

This pattern supersedes deprecated wording that speaks about alternate formality modes, tiers, or editorial ladders. Forward-looking use should speak in F directly.

Migration guidance

When refreshing legacy material, assign an initial F from observable content, rewrite local maturity labels into explicit F declarations, and keep provenance notes only as historical annotations rather than live rigor surrogates.

Boundary to language-state facets

For the language-space extension, F does not govern U.ArticulationExplicitness, U.LanguageStateClosureDegree, U.LanguageStateAnchoringMode, or U.LanguageStateRepresentationFactorBundle. Contexts MUST NOT hide thresholds for those facets as pseudo-levels or submodes of F; those facets remain explicitly governed by C.2.LS and its subordinate patterns.

C.2.3:End

U.LanguageStateFacetProfile - Thin profile bundle for language-state facets

Type: Definitional (D) Status: Stable Normativity: Normative unless marked informative

Plain-name. Language-state facet profile.

Problem frame

Once position claims in the declared language-state chart over U.CharacteristicSpace must be published and compared, teams need one thin profile bundle that keeps the relevant facets visible as one explicit facet profile without turning that profile into a second characteristic calculus or a surrogate maturity progression.

Problem

Without a dedicated profile bundle, authors blur articulation, closure, anchoring, and representation into one vague maturity story, or they silently reuse F as a surrogate. That blocks admissible threshold publication, undercuts A.16 move guards, and makes school-to-school bridge work harder than it needs to be.

Forces

ForceTension
Thin profile bundle vs practical coordinationKeep the bundle small, but still give one stable place where the language-state facets are named together.
Reuse vs duplicationReuse A.18/A.19 characteristic machinery and E.18 path publication rather than building a rival calculus.
Local thresholds vs cross-context comparabilityContexts need local thresholds, but the facet names must stay stable enough for bridge work and viewpoint bundles.

Solution

U.LanguageStateFacetProfile is a typed profile bundle that names the facets by which position claims in the declared language-state chart over U.CharacteristicSpace are published and interpreted:

  • formalityRef -> U.Formality from C.2.3
  • articulationExplicitnessRef -> U.ArticulationExplicitness from C.2.4
  • languageStateClosureDegreeRef -> U.LanguageStateClosureDegree from C.2.5
  • languageStateAnchoringModeRef -> U.LanguageStateAnchoringMode from C.2.6
  • languageStateRepresentationFactorBundleRef -> U.LanguageStateRepresentationFactorBundle from C.2.7
  • thresholdRefs? -> context-local threshold declarations over the governed facets
  • routeNotes? -> informative notes that help interpret routing or reopening decisions

C.2.LS is therefore a profile-bundle governing pattern, not a characteristic governing pattern and not a trajectory governing pattern. Characteristic semantics remain with A.18/A.19; admissible moves remain with A.16; explicit path publication remains with E.18.

Governing boundary

C.2.LS governs only the profile composition and the rule that the language-state facets must remain explicit and non-collapsed. It does not:

  • redefine F;
  • invent a second formality progression;
  • govern the scale semantics of AE, CD, LanguageStateAnchoringMode, or U.LanguageStateRepresentationFactorBundle;
  • govern reopen/backoff moves;
  • govern endpoint classification or bridge kinds.

Threshold publication discipline

Any threshold used for routing, admissible move guards, or entry into A.6.P shall be published on explicit named facets within the profile. Contexts shall not speak of hidden sub-levels of F when what matters is really articulation, closure, anchoring, or the representation-factor bundle.

Local profile-reading witness

For this pattern, a published facet profile is reviewable when:

  • the facet refs are explicit or explicitly inherited from an already pinned upstream publication;
  • any threshold-bearing use names the facet whose threshold is being invoked;
  • route notes or local overlays remain informative and visibly docked to the explicit facet bundle;
  • and the profile does not smuggle move rules, bridge rules, gate state, or downstream governing-pattern semantics into the bundle record.

A polished label, one strong facet, or one memorable route note does not by itself yield an admissible profile reading. The profile remains conformant only when the named facets stay explicit and decomposable.

Composite readings

A language-state judgement may be composite, but the composite shall be decomposable. For example, a cue may be:

  • low AE,
  • medium CD,
  • AM.TraceAnchored,
  • and representation-wise mixed rather than purely symbolic.

A conforming profile makes this decomposition visible rather than hiding it under one poetic label such as "early" or "raw".

Corridor map note

C.2.LS participates in the current Language-State & Semantic Routing Corridor, but only as the thin governing pattern of the facet-profile bundle. Readers who need one map of the full language-state governing-pattern set should read the corridor note in C.2.2a.

That map does not change the governing boundary here: C.2.LS still does not govern cue preservation, route-bearing publication, prompt entry, or downstream endpoint handoff.

Archetypal Grounding

Tell. A team may say a draft is "still forming" for different reasons. U.LanguageStateFacetProfile forces the team to say whether the issue is low articulation, low candidate-space closure, an anchoring mismatch, or an unresolved representation-factor bundle.

Show (System). An operator alert note can be AM.OperatorLoop anchored and low-closure without being low-formality in every respect.

Show (Episteme). An inquiry note can be low articulation yet already tightly anchored to exemplars and traces.

Bias-Annotation

The pattern biases authors toward explicit facet governance and away from master-scale stories. That cost is intentional: the goal is to prevent surrogate progressions from entering the Core.

Conformance Checklist

  • CC-C.2.LS-1 A language-state facet profile SHALL reference explicit facet governing patterns rather than invent local unnamed factors.
  • CC-C.2.LS-2 C.2.LS MUST NOT redefine F or create a second formality progression.
  • CC-C.2.LS-3 Thresholds that matter for routing, reopening, or lexical repair SHALL be published on explicit facets.
  • CC-C.2.LS-4 Trajectory accounts that rely on facet profiles SHOULD reuse A.16 move kinds and E.18 path publication rules.
  • CC-C.2.LS-5 Composite labels such as early, settled, or ready SHALL NOT stand in for the explicit facet bundle when those states matter operationally.
  • CC-C.2.LS-6 Composite readings, overlays, and route notes SHALL remain decomposable into named facets and MUST NOT behave as hidden master factors.
  • CC-C.2.LS-7 A profile bundle MUST NOT smuggle move rules, bridge rules, gate state, or downstream governing-pattern semantics into what should remain a thin facet-profile record.

Common Anti-Patterns and How to Avoid Them

  • Shadow progression. Treating early/late as a master scale. Split the judgement into the named facets.
  • Formality capture. Letting F stand in for closure or articulation. Publish those facets explicitly.
  • Bundle inflation. Turning U.LanguageStateFacetProfile into a second A.19. Keep it thin and referential.
  • Opaque readiness. Using words such as ready or mature without naming which facet justifies the claim.
  • Route-note capture. Letting an informative route note behave like move rule, gate state, or endpoint governance. Keep route notes informative and push operative authority back to A.16, downstream governing patterns, or gate/work governing FPF patterns or authoritySourceRef targets.

Consequences

The benefit is authority-reference clarity: early cue work, bridge annotations, and reopen moves can all talk about one explicit facet profile. The trade-off is more explicit profile authoring and threshold publication.

Rationale

The pattern gives the declared language-state chart over U.CharacteristicSpace one stable facet-profile record through which its facet bundle can be published together, while respecting the rest of FPF's governing boundaries.

SoTA-Echoing

SoTA note. This section does not mint a second rule source. It is a load-bearing alignment statement: the Solution, Conformance Checklist, and boundary discipline of this pattern must match the stance stated here or explicitly justify divergence.

Traditions covered. This pattern binds itself to architecture-description governance, model-based systems engineering, and governance/profile discipline.

Claim needSoTA practice (post-2015)Primary source (post-2015)Alignment with C.2.LSAdoption status
Multi-facet state should be published through explicit profile elements rather than one summary stage label.Contemporary architecture-description practice keeps the relevant properties, views, and correspondence evidence explicit instead of replacing them with one reader-facing maturity word.ISO/IEC/IEEE 42010:2022C.2.LS adopts this by requiring explicit facet refs and by rejecting profile-by-vibe labels such as ready or raw when the bundle matters operationally.Adopt.
Complex technical state is better captured through typed properties and decomposable profiles than one maturation rail.Recent MBSE practice favours explicit properties, viewpoints, and cross-view consistency over one implicit staircase of readiness.OMG SysML v2 (2025)C.2.LS adapts this into a thin facet-profile bundle whose members remain decomposable and whose thresholds stay tied to named facets.Adapt.
Governance-facing readiness should stay scoped and profile-based, not collapse into one global adjective.Current governance frameworks use explicit profiles, scoped conditions, and local thresholds rather than one blanket readiness label.NIST AI RMF 1.0 (2023)C.2.LS adopts profile-level threshold publication and rejects the popular shortcut where one polished profile label substitutes for explicit facet talk.Adopt/Reject-popular-shortcut.

Architecture-description governance. C.2.LS adopts the discipline that useful state publication should keep the relevant profile elements explicit rather than hiding them inside one summary label.

MBSE and profile discipline. C.2.LS adapts typed multi-property state publication into a thin, decomposable language-state facet bundle rather than one master scale.

Local stance. The load-bearing SoTA claim for this pattern is narrow: best-known current practice treats language-state publication as a small explicit facet profile with local thresholds and decomposable readings, not as one maturity adjective or one route-coloured bundle label.

Relations

  • Builds on: A.18, A.19, C.2.2a, C.2.3.
  • Coordinates with: C.2.4, C.2.5, C.2.6, C.2.7, A.16.0, A.16, A.16.1, A.16.2, B.4.1, B.5.2.0, E.18, F.9.1.
  • Constrains: language-state threshold publication and profile composition.

Worked Examples and Composition Notes

Operator-facing early alert

A console alert note may be published with a language-state facet profile such as:

  • F = F2/F3 because the note is structurally controlled but still lightweight;
  • AE = AE2 because candidate anchors are visible but not yet fully relation-shaped;
  • CD = CD1 because several routes remain live;
  • LanguageStateAnchoringMode = AM.OperatorLoop because the note is directly anchored to operator intervention/work;
  • RepresentationFactorBundle = {local, sparse, mixed-symbolic} because alert text and compact codes coexist.

This example shows why no one facet can replace the others. The note is not simply early; it is early in a specific, decomposable way.

Research cue before lexical repair

A felt or trace-anchored mismatch cue in an inquiry note may be:

  • low AE,
  • very low CD,
  • AM.EmbodiedFelt,
  • and representation-wise mixed because the cue is partly verbal, partly kinesthetic, partly exemplar-based.

That profile explains why the cue should remain in A.16.1 rather than being forced into A.6.P or B.5.2 immediately.

Architecture-description case

A viewpoint-bound note about the adequacy of an architecture description may be moderately high in F, moderately high in AE, still mid-level in CD, document-mediated in AM, and symbolic in its representation-factor bundle. The profile keeps description-side adequacy distinct from system-side engineering quality.

Same F, different profile

Two notes may share the same rough F band and still differ sharply in articulation, closure, anchoring, and representation factors. One may be operator-loop anchored and low-closure; another may be document-mediated and comparatively closed. The profile bundle keeps that difference visible instead of letting F behave like a master factor.

Authoring and Review Guidance

For authors

When publishing a language-state facet profile:

  1. start from the local authoring problem rather than from a memorized progression;
  2. name the facet refs explicitly;
  3. add threshold refs only when a threshold changes routing, repair, or governance;
  4. avoid global labels such as "mature", "raw", or "ready" unless the profile decomposition is already visible.

For reviewers

A reviewer should ask:

  • is any facet silently replaced by F?
  • is a threshold published on an explicit facet rather than on a poetic surrogate?
  • do route or reopen claims actually match the published facet bundle?
  • are profile notes genuinely informative, or are they smuggling governing semantics that belong elsewhere?

For integrators

Integrators should preserve profile references rather than rephrasing them into local slang. A local alias is acceptable only if the underlying facet docking remains explicit and stable.

Extension and Migration Notes

Local extension rule

Contexts may extend the profile with local threshold refs, route notes, or additional descriptive aids, but they shall not add a new master facet that collapses the governed set into one summary factor.

Migration from surrogate prose

Older prose often says:

  • "the episteme is still early",
  • "the issue is not mature enough",
  • "the note is ready",
  • "the cue is still raw".

A conforming migration rewrites such statements into explicit facet talk: which facet is low, which is high, which threshold is or is not met, and which move that fact justifies.

Boundary reminder

U.LanguageStateFacetProfile is a coordination record. If authors find themselves putting move rules, bridge rules, scale rules, or bundle semantics into the profile itself, they are writing in the wrong governing pattern.

Profile Publication Package Discipline

Minimal publishable profile package

A publishable U.LanguageStateFacetProfile should normally carry:

  • the declared facet refs for AE, CD, LanguageStateAnchoringMode, and LanguageStateRepresentationFactorBundle;
  • any threshold refs that substantively affect routing, repair, bridge interpretation, or review load;
  • the local relation to F when readers might otherwise treat F as a surrogate;
  • any omission note when a facet is intentionally unpublished, unknown, or locally irrelevant.

One-line publication is admissible only if facet governance remains legible.

Partial-profile rule

A partial profile is admissible only when omission is explicit. Publishing AE and CD while deferring LanguageStateAnchoringMode is acceptable; silently omitting it and then speaking in scalar prose such as "early" or "ready" is not.

If only one facet is published, either explain why the others are not governed in the current note or point to the note where they are already published.

Overlay discipline

Local overlays such as "explicit-but-open", "trace-heavy", or "operator-tight" are admissible only when they dock to explicit facet refs. Overlays remain secondary to the governed profile and must not replace the facet bundle.

Cross-Facet Reading Rule

No master-facet reading

Do not infer the whole language-state profile from one facet. High AE does not entail high CD; strong AM.OperatorLoop does not fix AE or CD; symbolic representation does not entail high F; low CD does not imply low operational consequence.

Threshold interaction rule

When a threshold is expressed over one facet, say whether the other facets are merely informative or also constraining. A Context may allow entry into B.5.2.0 once AE suffices for an explicit open question while still capping CD so rival answers remain live; it may allow entry into A.6.P at AE3+ while still capping CD so the move remains exploratory rather than endpoint-binding.

Transition reading rule

Read profile transitions facetwise. A note may become more explicit without becoming more closed, more document-mediated without changing closure, or more symbolic without becoming more formal. A.16, A.16.1, A.16.2, B.4.1, and B.5.2.0 should therefore cite the facet transition that actually justifies the move.

Review Matrix and Migration Tests

Review matrix

A reviewer should ask:

  • is each published facet governed by its proper pattern rather than by surrogate prose;
  • does any overlay smuggle a hidden scalar or gate decision;
  • are threshold claims tied to the facet that really bears them;
  • do cited moves in A.16, A.16.1, A.16.2, B.4.1, or B.5.2.0 actually match the facet bundle;
  • if the profile crosses a bridge or viewpoint boundary, are stance and loss notes kept in F.9 or F.9.1 rather than imported as fake facets.

Migration test for old prose

Legacy phrases such as "still immature", "not ready yet", or "already stable enough" should be unpacked into: which facet is claimed, which anchor or bundle member justifies it, which threshold or route consequence follows, and which governingPatternRef or authoritySourceRef carries that consequence.

Comparative profile use

Compare profiles facetwise unless a Context has published an explicit local aggregation for reporting. Such an aggregation remains secondary and must not replace the profile in norms, thresholds, or bridge claims.

C.2.LS:End

U.ArticulationExplicitness

Type: Definitional (D) Status: Draft Normativity: Normative unless marked informative

Plain-name. Articulation explicitness.

Problem frame

A governed U.Episteme can already matter while its semantic shape is not yet fully explicit. The declared language-state chart over U.CharacteristicSpace therefore needs one basis-slot governing pattern for how explicit that shape already is, without confusing articulation with rigor, truth, or closure.

Problem

When articulation explicitness stays implicit, authors either overstate readiness for later repair or endpoint classification, or hide early cue structure entirely. Reusing F for this judgement creates a category error: formality is about rigor of expression, not about whether the semantic shape is already explicit enough for repair or endpoint classification.

Forces

ForceTension
Early capture vs false precisionCapture low-articulation cues without pretending they already have stable slots.
Comparability vs local nuanceKeep a shared ordinal discipline while allowing context-local threshold declarations.
Repair readiness vs exploratory opennessName when an episteme is ready for A.6.P without forcing every cue into late forms.

Solution

U.ArticulationExplicitness is an ordinal characteristic over how explicit the semantic shape is in a published position claim in the declared language-state chart over U.CharacteristicSpace, for publication, routing, and repair.

Characteristic specification

  • Kind: CHR characteristic.
  • Scale discipline: ordinal.
  • What rises: semantic shape becomes more explicit.
  • What does not follow automatically: truth, trust, closure, admissibility, or formality.

AE is therefore independent from F, from LanguageStateClosureDegree, and from endpoint authority.

Starter anchor set

AnchorReadingTypical admissible publication state
AE0felt, latent, or low-articulation cue onlystill preservable, but not yet anchor-explicit
AE1stable cue span, contrast, or disturbance cue is nameableU.PreArticulationCuePack becomes natural
AE2candidate anchors or partial roles are visiblecue pack with candidate anchors and route candidates
AE3minimally relation-like skeleton existsentry to A.6.P becomes possible if local threshold allows
AE4slot-explicit normal form is publishableexplicit relation or characteristic form
AE5articulation is explicit enough for stable endpoint classification and later bridge workendpoint-pattern-governed publication becomes straightforward

The anchors are a starter set; a Context may refine them locally, but it shall keep the ordinal direction and the distinction from F intact.

Use discipline

  • AE may be used to state entry conditions for A.6.P.
  • AE may be used to justify why an episteme remains in A.16.1 or B.4.1.
  • AE shall not be used as a surrogate for closure, confidence, or truth.
  • High F shall not be taken to imply high AE, and high AE shall not be taken to imply high F.

Change discipline

Raising AE requires additional explicit anchors, slots, or normal-form structure. Lowering AE is admissible under A.16.2 when a prior articulation proves over-committed or misleading.

Archetypal Grounding

Tell. "Something is off" may be a real cue even before role bearer, intended work move, reliance move, or evaluator are explicit.

Show (System). An operator alert cue grounded in a disturbance trace may be stabilized as a candidate intervention cue before a full work relation or reliance relation specification exists.

Show (Episteme). A research note may name a contrast and exemplars before it has a clean proposition.

Bias-Annotation

The pattern legitimizes early cues. The counter-bias is explicit: low AE never licenses hidden semantics or unreviewable leaps.

Conformance Checklist

  • CC-C.2.4-1 AE SHALL NOT be treated as a synonym for F.
  • CC-C.2.4-2 Entry into A.6.P SHOULD require at least the Context's declared articulation threshold.
  • CC-C.2.4-3 AE judgements that drive routing or repair SHALL cite the anchors, contrasts, or slots that justify the chosen level.
  • CC-C.2.4-4 Raising AE SHALL NOT be described as if it automatically settled closure or authority.

Common Anti-Patterns and How to Avoid Them

  • Formal-looking but semantically thin. High F, low AE. Declare both.
  • Mystical cue immunity. Low AE presented as exempt from authoring discipline. It is not.
  • Ready-by-tone. A sentence sounds precise, so authors assume AE3+. Publish the actual anchors.

Consequences

The benefit is admissible publication of early cues and clearer threshold setting for repair. The trade-off is that authors must distinguish "not yet explicit" from "already formal".

Rationale

AE is one basis slot in the declared language-state chart over U.CharacteristicSpace. Without it, A.16.0, A.16.1, and B.4.1 cannot state crisp entry, seam, and exit conditions.

SoTA-Echoing

The distinction echoes work on sketching, focusing/TAE, embodied cue capture, and representation probing: a cue can be real and operationally relevant before it becomes fully explicit.

Relations

  • Builds on: A.18, C.2.2a, C.2.LS.
  • Coordinates with: C.2.5, A.16.0, A.16, A.16.1, A.16.2, A.6.P, B.4.1, B.5.2.0.
  • Constrains: articulation thresholds for routing and repair.

Worked Examples and Edge Cases

High formality, low articulation

A template may be syntactically precise and therefore high in F, yet still low in AE because the actual role-bearer, relation, or intended-work-or-reliance-move slots remain unclear. This is the classic case where formal-looking language overstates semantic readiness.

Low formality, high articulation

A short, plain note may be low in F yet already high in AE because the relation skeleton is explicit enough for A.6.P. This case matters because it shows that AE is not a stylistic measure.

Threshold edge case

A cue with stable trigger span and candidate anchors may still sit between AE2 and AE3. A Context should then publish its local threshold rule explicitly rather than pretending that entry into A.6.P is obvious by tone.

Authoring and Review Guidance

Author prompt

To assign AE, ask:

  • is the trigger span stable?
  • are candidate anchors visible?
  • is there already a minimally relation-like skeleton?
  • is a normal form actually publishable, or only hinted?

Review prompt

A reviewer should reject AE claims that rely only on rhetorical confidence. The claimed level should be supported by anchors, slots, contrasts, exemplars, or explicit normal-form structure.

Threshold publication reminder

If AE determines whether an episteme stays in A.16.1, passes through B.4.1, or enters A.6.P, that threshold should be published explicitly and locally.

Extension and Migration Notes

Local anchor refinement

Contexts may refine the starter anchor set with subanchors, but the refinement must preserve the ordinal direction and the distinction from F and CD.

Migration from vague articulation prose

Statements such as "still vague", "more explicit now", or "ready for formalization" should be migrated into explicit AE claims plus the corresponding move or routing claim.

Boundary reminder

AE does not govern closure, confidence, or warrant. If authors want those meanings, they must publish them through their own governing patterns.

Articulation Publication Package Discipline

Minimal articulation package

An AE claim that matters for routing or repair should normally publish more than a level token. The supporting package should indicate which of the following are present:

  • stable trigger span;
  • candidate anchors or contrasts;
  • role-bearer / intended-work-or-reliance-move / evaluator slots where relevant;
  • a minimally relation-like skeleton;
  • a candidate normal form, or an explicit note that no such form is yet admissible.

A bare AE3 label is a publication with insufficient articulation support when the supporting articulation evidence is absent.

Threshold package for route change

If entry from A.16.1 or B.4.1 into A.6.P depends on AE, publish the threshold together with the minimum articulation package required at crossing time.

Evidence-limited rise rule

AE may rise only as far as the published anchors, slots, and contrasts warrant. Stylistic polish, templates, or rhetorical confidence do not raise AE on their own.

Threshold Crossing and Split Handling

Admissible entry into relational repair

Entry into A.6.P is admissible when the local articulation threshold is met and the note already exposes enough relation structure for precision restoration to operate on a real relation-like episteme. Entry into B.5.2.0 is admissible when the open question is explicit enough for prompt-species publication even if relation structure is still too thin for A.6.P. If the threshold is borderline, keep the episteme in B.4.1 or A.16.1 and state what anchor or slot is still missing.

High-articulation, low-closure cases

A note may reach AE4+ while remaining low or mid in CD. In such cases state that articulation is sufficient for precise handling while closure still leaves rival routes or frames live.

Split-publication rule

If one note contains a high-AE fragment and a low-AE remainder, split the publication rather than assigning one averaged level that hides the actual route structure.

Review Matrix and Endpoint Boundary Tests

Review matrix

A reviewer should ask:

  • are the named anchors genuinely present rather than merely presupposed;
  • does the claimed articulation level rest on structure rather than tone;
  • are role-bearer, intended-work-or-reliance-move, evaluator, or comparison slots still ghosted;
  • if AE is used to justify route transfer, is the destination governing pattern actually ready to receive the publication.

Endpoint-boundary test

High AE does not by itself authorize endpoint claims, gate pressure, or quality ascriptions. If such consequences appear, show which downstream governing pattern takes over.

Migration note for false precision

Rigid templates, capitalized labels, or tidy sentence rhythm can simulate articulation. Migration should therefore test whether anchors and slots are really present; if not, the articulation level should drop.

C.2.4:End

U.LanguageStateClosureDegree

Type: Definitional (D) Status: Draft Normativity: Normative unless marked informative

Plain-name. Language-state closure degree.

Problem frame

A governed U.Episteme may already be explicit enough for publication while its declared position claim remains intentionally open to rival routes or frames. The declared language-state chart over U.CharacteristicSpace therefore needs a separate basis-slot governing pattern for how fixed or closed the current candidate space has become.

Problem

Closure is often hidden inside vague words such as "ready", "settled", or "open". When closure is not explicit, teams cannot reason cleanly about reopen, sketch-backoff, or the admissibility of endpoint docking.

Forces

ForceTension
Commitment vs explorationPreserve open search without losing auditability.
Stability vs reversibilityAllow closure increases, but also admissible reopening and reframing.
Authority vs explicit retreatLet strong closure matter, but keep visible the moves that relax it.

Solution

U.LanguageStateClosureDegree is an ordinal characteristic over how fixed the current candidate set, framing, and admissible next moves are in a published position claim in the declared language-state chart over U.CharacteristicSpace.

Characteristic specification

  • Kind: CHR characteristic.
  • Scale discipline: ordinal.
  • What rises: the local state becomes more fixed or more binding.
  • What does not follow automatically: truth, trust, formality, or quality.

Starter anchor set

AnchorReadingTypical governance effect
CD0exploratory-openbroad rival space remains live
CD1weakly stabilizedsome contrasts are present, but rival routes remain normal
CD2narrowed candidate spaceexplicit rivals remain, but the field is meaningfully reduced
CD3selected route or framingone route is chosen, though reopening remains routine
CD4publication- or operation-fixed under guardchanges require named justification
CD5strongly fixedrelaxation requires an explicit A.16.2 move and governance note

Non-collapse rules

LanguageStateClosureDegree is not:

  • F;
  • articulation explicitness;
  • gate decision;
  • evaluator confidence;
  • warrant strength.

A text may be highly explicit but low-closure, or low-explicitness but already high-closure by policy. Those states shall not be collapsed.

Change discipline

Increasing CD requires narrowing candidate space, route space, or frame space explicitly. Lowering CD is admissible only through a named move such as reopen, sketchBackoff, or respecify, with a retained-witness and discarded-assumption note.

Archetypal Grounding

Tell. Two notes may look equally explicit, but one is still intentionally open while the other is already committed to a single route.

Show (System). An incident cue can be routed to rollback while remaining reopenable if new evidence arrives.

Show (Episteme). A hypothesis sketch can be highly articulated but still low closure because rival explanations remain live.

Bias-Annotation

The pattern makes closure explicit, which resists hidden overconfidence but may feel heavy to authors who prefer implicit consensus.

Conformance Checklist

  • CC-C.2.5-1 Closure SHALL be declared independently from F and AE when it matters for routing, docking, or reopening.
  • CC-C.2.5-2 Reopen/backoff moves SHALL cite the prior closure state they are relaxing.
  • CC-C.2.5-3 Strong-closure states SHOULD name the guard, governingPatternRef, or authoritySourceRef that makes the closure binding.
  • CC-C.2.5-4 Endpoint authority SHALL NOT survive a closure drop silently when the supporting route or publication form no longer holds.

Common Anti-Patterns and How to Avoid Them

  • Closure by mood. A sentence sounds decisive, so teams assume high closure. Publish CD explicitly.
  • Irreversible drift. Closure rises informally but no reopen path exists. Use A.16.2.
  • Authority smuggling. High closure is treated as if it were automatically a gate or obligation. Route those consequences through the proper governing patterns.

Consequences

The benefit is admissible handling of stabilization, commitment, and reopening. The trade-off is more explicit state declaration and more explicit retreat records.

Rationale

Closure is the route-governance basis slot that complements articulation within the declared language-state chart over U.CharacteristicSpace. A.16.0 and its seam species need both.

SoTA-Echoing

The facet aligns with iterative design, open-world reasoning, and exploratory search practices where closure is a governance choice rather than a hidden by-product.

Relations

  • Builds on: A.18, C.2.2a, C.2.LS.
  • Coordinates with: C.2.4, A.16.0, A.16, A.16.1, A.16.2, B.4.1, B.5.2.0.
  • Constrains: reopen, backoff, and endpoint docking guards.

Worked Examples and Retreat Cases

Explicit but still open

A note may sit at AE4 yet only CD1 because rival explanatory frames are still live. The important lesson is that explicit publication does not imply settled closure.

Strong closure under policy guard

An operator rule may be only moderate in AE but high in CD because policy already fixes the next step under the current horizon. This shows why closure is governance-facing, not merely stylistic.

Reopen case

A route may move from CD4 back to CD2 when counter-evidence appears. A conforming publication does not hide this as embarrassment; it records the retreat as an admissible A.16.2 move.

Authoring and Review Guidance

Author prompt

To assign CD, ask:

  • how many rivals remain live?
  • is one route merely preferred, or actually fixed?
  • what guard, governingPatternRef, or authoritySourceRef makes the closure binding?
  • what would count as an admissible reopen trigger?

Review prompt

A reviewer should ask whether closure is being inferred from tone, from hierarchy, or from social pressure rather than from an explicit narrowing of route or frame space.

Governance note

Whenever CD substantively affects gates, commitments, or late endpoint authority, the supporting guard, governingPatternRef, or authoritySourceRef should be visible.

Extension and Migration Notes

Local anchor refinement

Contexts may refine the starter closure anchors, but shall keep the ordinal progression and the explicit link to reopen/backoff discipline.

Migration from readiness language

Words such as "settled", "closed", "final", or "open" should be treated as migration prompts into explicit CD claims and, where needed, into named A.16.2 moves.

Boundary reminder

CD is not warrant strength and not a gate decision. It speaks only about the local fixity of the current episteme/publication path and its candidate space.

Closure Publication Package Discipline

Minimal closure package

A publishable CD claim should name what has narrowed:

  • the rival routes or frames that remain live;
  • the route, frame, or interpretation that is currently privileged or fixed;
  • the guard, governingPatternRef, authoritySourceRef, or policy that makes the narrowing binding;
  • the condition under which an admissible reopen or backoff would occur.

A bare claim such as "now settled" is insufficient when closure affects routing or authority.

Narrowing-source rule

Closure may rise because evidence eliminates rivals, governance temporarily binds a route, or protocol requires fixation under time pressure. State the source of narrowing because different sources imply different reopen expectations.

Partial-closure rule

Closure may be local rather than global. A note can be closed enough for one route while remaining open about broader explanation or classification; a prompt may be fixed enough to hold one question steady while still open enough that rival answers remain live. Publish that locality explicitly.

Retained and Withdrawn Authority Handling

Authority retention rule

If higher CD carried endpoint expectations, guard pressure, or route commitments, a later closure drop must say which consequences remain and which are withdrawn.

Admissible retreat record

An admissible retreat through reopen, sketchBackoff, or respecify should retain:

  • the prior closure state;
  • the reason the prior fixation no longer holds;
  • the assumption or route being relaxed;
  • the still-binding remainder, if any.

This prevents false continuity after retreat.

Closure versus obligation boundary

High CD may coexist with obligations, but CD is not itself an obligation-bearing governing FPF pattern or authoritySourceRef target. When prose treats "closed" as "must now be done", name the actual governingPatternRef or authoritySourceRef for that claim.

Review Matrix and Reopen Tests

Review matrix

A reviewer should ask:

  • what was narrowed;
  • by what governingPatternRef, authoritySourceRef, or guard it was narrowed;
  • what would reopen it;
  • whether any gate, release, work, evidence, assurance, policy, or adjudication authority survives the claimed closure level;
  • whether the publication distinguishes local closure from whole-context finality.

False-finality test

Words such as "final", "settled", or "decided" should be challenged unless the route/guard package is explicit. Final-sounding rhetoric often overstates actual closure.

Cross-facet reminder

Low CD does not imply low articulation, low anchoring, or poor representation. Reviewers should not treat openness as low seriousness.

Split-closure review case

A publication may be closed enough for immediate local work use or reliance use while remaining open about broader explanation, long-horizon consequences, or alternative classification. Allow the split when locality is explicit; reject prose that advertises whole-case finality when only one language-state segment is fixed.

C.2.5:End

U.LanguageStateAnchoringMode

Type: Definitional (D) Status: Draft Normativity: Normative unless marked informative

Plain-name. Language-state anchoring mode.

Problem frame

Published position claims in the declared language-state chart over U.CharacteristicSpace differ not only by articulation and closure, but by how the governed U.Episteme in that claim is anchored to bodies, traces, model states, documents, or operator loops.

Problem

Without an explicit anchoring-mode declaration, embodiment and source anchoring are smuggled into informal prose or folded into representation terms. That undercuts cue comparison, undercuts bridge loss notes, and turns operator-facing language-state work into a special case with no explicit governing-pattern relation.

Forces

ForceTension
Embodiment vs abstractionPreserve embodied and operator-facing cases without making them mystical exceptions.
Small core vs real diversityKeep the core compact while allowing multiple admissible anchoring regimes.
Comparability vs oversimplificationCompare anchoring regimes without flattening them into text-vs-nontext slogans.

Solution

U.LanguageStateAnchoringMode is a nominal characteristic that states the primary anchoring regime of the governed U.Episteme named by the current position claim: bodily enactment, trace, model state, document, operator loop, or an explicit mixed regime. If source anchoring and current publication-face anchoring differ, both shall be distinguished rather than collapsed.

Starter family

ModeReadingTypical evidence anchor
AM.EmbodiedFeltbodily or kinesthetic anchoring matters directlyembodiment note, felt trace, human witness
AM.TraceAnchoredtraces, logs, telemetry traces, or observations anchor the epistemetrace references, measured events, observations
AM.ModelLatentlatent or internal model state is the key anchormodel-state refs, probe results, latent summaries
AM.DocumentMediateddocument or description is the principal anchordocuments, cards, method-description text
AM.OperatorLoopthe episteme is directly tied to operator intervention or console controloperator witness, console event, policy hook
AM.Mixedmore than one anchoring mode matters substantivelyexplicit component list and why the mix matters

Governing boundary

U.LanguageStateAnchoringMode is not a representation factor bundle, not a closure state, and not a truth status. If embodiment matters, it shall be declared here or immediately beside this characteristic rather than being hidden inside representation talk.

Mixed-mode rule

AM.Mixed is admissible only when the component modes are named explicitly. "Mixed" shall not be a lazy escape from deciding whether the key anchor is bodily, trace-based, model-latent, document-mediated, or operator-loop based.

Bridge implications

Bridge work over governed U.Episteme publications in the declared language-state chart should pay attention to anchoring shifts. A translation from AM.EmbodiedFelt to AM.DocumentMediated, or from AM.ModelLatent to prose, often requires explicit loss notes in F.9 and often justifies a stance annotation in F.9.1.

Archetypal Grounding

Tell. A felt cue, a controller-side probe score, and a textual design note may all be early cues, but they are anchored differently.

Show (System). An alert tied to an operator console is AM.OperatorLoop, not just "text".

Show (Episteme). A model-probe cue grounded in latent state is AM.ModelLatent even if it is later paraphrased into prose.

Bias-Annotation

The pattern pushes authors to declare anchoring rather than hide it in metaphors such as "the system wants" or "the note suggests".

Conformance Checklist

  • CC-C.2.6-1 Anchoring mode SHALL NOT be inferred from publication phrasing alone when it matters for routing, trust, or bridge interpretation.
  • CC-C.2.6-2 Embodiment-sensitive or operator-loop cases SHOULD declare the embodiment or operator anchor explicitly.
  • CC-C.2.6-3 U.LanguageStateAnchoringMode MUST NOT be collapsed into U.LanguageStateRepresentationFactorBundle.
  • CC-C.2.6-4 Mixed-mode declarations SHALL list their component modes explicitly.

Common Anti-Patterns and How to Avoid Them

  • Text-only illusion. Treating every cue as document-mediated because it was written down later.
  • Representation capture. Using symbolic/distributed labels to hide world-anchoring distinctions.
  • Embodiment mystification. Treating bodily or operator-loop cues as beyond explicit publication.

Consequences

The benefit is cleaner reasoning about embodied, operator-facing, trace-based, and model-latent cues. The trade-off is more explicit declaration work and more explicit bridge loss notes when modes shift.

Rationale

The declared language-state chart over U.CharacteristicSpace needs one explicit anchoring basis slot so that A.16.0, A.16.1, B.4.1, and F.9.1 can refer to anchoring regime without redefining it.

SoTA-Echoing

The facet is motivated by embodied cognition, operator-facing interaction practice, active inference, and modern model-probing practice, all of which distinguish cue content from anchoring regime.

Relations

  • Builds on: A.18, C.2.2a, C.2.LS.
  • Coordinates with: A.7, A.16.0, A.16, A.16.1, B.4.1, B.5.2.0, C.2.7, F.9.1.
  • Constrains: cue publication and bridge loss notes.

Worked Examples and Bridge-Loss Cases

Embodied-to-document shift

A bodily felt cue later published as prose usually changes from AM.EmbodiedFelt toward AM.DocumentMediated. That shift is not harmless; it often introduces bridge loss and should be treated as such when cross-context equivalence is claimed.

Model-latent to operator-loop case

A latent probe score may first be AM.ModelLatent, then later feed an operator-facing alert face where the working publication becomes AM.OperatorLoop. A conforming account should keep both anchoring modes visible rather than pretending the later publication wording fully captures the model-side cue.

Mixed-mode publication

A routed alert note may admissibly be AM.Mixed when it combines operator-loop anchoring, trace anchoring, and document mediation. But the mix must be named explicitly rather than used as a catch-all escape.

Authoring and Review Guidance

Author prompt

When declaring anchoring mode, ask:

  • what is the primary anchor kind?
  • does bodily or operator participation matter directly?
  • is the key anchor trace-based, model-internal, or document-based?
  • if multiple modes matter, which ones and why?

Review prompt

A reviewer should watch for the common mistake where later prose formatting tricks authors into forgetting the original anchoring mode.

Bridge note

If anchoring changes across publication or translation, F.9 and F.9.1 should often carry explicit loss or stance notes rather than silent equivalence language.

Extension and Migration Notes

Local extension rule

Contexts may add local anchoring modes, but they should do so by extension of the starter family rather than by collapsing the family into a text-vs-world binary.

Migration from metaphorical prose

Statements like "the system wants", "the note suggests", or "the operator-facing publication says" should be repaired by naming the actual anchoring mode and the actual detector/enactor or witness structure.

Boundary reminder

U.LanguageStateAnchoringMode does not decide representation, articulation, closure, or trust by itself. It only names how the episteme is anchored.

Anchoring Publication Package Discipline

Minimal anchoring package

A publishable U.LanguageStateAnchoringMode claim should normally identify:

  • the primary anchor kind;
  • any directly relevant embodiment, operator, trace, model, or document witness;
  • the transformation chain if the current note is not at the original anchoring site;
  • any secondary modes that remain load-bearing.

This is especially important when the final wording is prose, because prose often hides the anchoring regime.

Source-versus-face rule

Distinguish the anchoring mode of the source cue from the anchoring mode of the current publication face. A bodily cue later written into a document may still require AM.EmbodiedFelt as source mode and AM.DocumentMediated as publication face.

Mixed-mode decomposition rule

AM.Mixed is admissible only when its component modes are named and the reason for the mixture is operationally real. It must not become a convenience label for an episteme that has not yet been analyzed.

Anchoring Shift and Transport Discipline

Shift declaration rule

When an episteme crosses from one anchoring mode to another, state whether the shift is merely publication-level or whether it changes what can be preserved, compared, or trusted. A move from operator-loop enactment to report prose, for example, often drops timing, bodily load, and enactment friction.

Bridge-loss handoff

If an anchoring shift matters across contexts, F.9 or F.9.1 should govern the loss or stance note. C.2.6 only requires the shift to be noticed and not misrepresented as lossless.

Same-content illusion test

Two cues may be paraphrased into the same sentence while remaining differently anchored. If the anchoring regime differs, the cues are not automatically substitutable.

Review Matrix and Extension Tests

Review matrix

A reviewer should ask:

  • what the original anchoring regime was;
  • what the current publication regime is;
  • whether the transformation chain is explicit;
  • whether any bridge loss or stance note is missing;
  • whether a declared mixed mode is genuinely decomposed.

Local extension test

A new local anchoring mode is justified only when it answers a distinct anchoring question that the starter family cannot express without distortion.

Cross-facet reminder

Anchoring mode often correlates with representation and articulation changes, but it does not govern them. Reject prose that uses AM.ModelLatent, AM.EmbodiedFelt, or AM.OperatorLoop as shorthand for being vague, early, trustworthy, or closed.

C.2.6:End

U.LanguageStateRepresentationFactorBundle

Type: Definitional (D) Status: Draft Normativity: Normative unless marked informative

Plain-name. Language-state representation-factor bundle.

Problem frame

Published position claims in the declared language-state chart over U.CharacteristicSpace must distinguish representation factors such as locality, sparsity, and symbolicity without pretending they form one master factor.

Problem

Terms such as EncodingBasis collapse several independent choices. That makes comparison brittle and encourages one-factor stories such as distributed = informal or local = precise.

Forces

ForceTension
Comparability vs reductionismAllow comparison without compressing several factors into one slogan.
Compact core vs extensibilityKeep a minimal starter bundle while leaving room for domain-specific refinements.
Representation vs anchoringDescribe how the current episteme is represented without hiding what it is anchored to.

Solution

U.LanguageStateRepresentationFactorBundle is a factor bundle, not one scalar characteristic. The minimal core starter set is:

  • U.LocalityDistribution
  • U.Sparsity
  • U.Symbolicity

A Context may publish a local alias such as EncodingBasis, but it shall dock back to the underlying factor bundle instead of replacing it.

Minimal factor readings

FactorQuestion it answersTypical values
LocalityDistributionIs the representation concentrated in local units or distributed across many units?local / mixed / distributed
SparsityHow concentrated is activation or descriptive support?sparse / mixed / dense
SymbolicityHow explicit are the symbolic structures and tokens?symbolic / mixed / subsymbolic

Non-collapse rules

LanguageStateRepresentationFactorBundle is not:

  • LanguageStateAnchoringMode;
  • Formality;
  • ArticulationExplicitness;
  • LanguageStateClosureDegree.

A representation may be distributed yet have high trace anchoring; symbolic yet low-articulation; sparse yet low-closure. Those combinations shall remain visible.

Extension rule

Contexts may add extra representation factors only if the extension is published as a factor addition rather than as a new master factor that erases the core factor bundle.

Archetypal Grounding

Tell. A model-state cue can be highly distributed but still trace-anchored; a symbolic note can be low articulation if its semantics are still vague.

Show (System). An operator decision aid may mix sparse alert codes and symbolic method-description text.

Show (Episteme). A research probe can move from distributed activation patterns to sparse symbolic hypotheses without any one-step formality story.

Bias-Annotation

The pattern resists folk theories that try to line up one representation factor with one stage or progression story.

Conformance Checklist

  • CC-C.2.7-1 LanguageStateRepresentationFactorBundle SHALL be published as a factor bundle, not as a hidden scalar.
  • CC-C.2.7-2 Local aliases such as EncodingBasis MAY exist only with an explicit docking to the governed factors.
  • CC-C.2.7-3 Representation factors MUST NOT silently replace LanguageStateAnchoringMode or LanguageStateClosureDegree.
  • CC-C.2.7-4 New local factors SHALL preserve the factor-bundle discipline.

Common Anti-Patterns and How to Avoid Them

  • One-factor myth. Treating distributed/local or symbolic/subsymbolic as the whole story.
  • Progression collapse. Equating representation shifts with formalization or closure.
  • Alias capture. Letting EncodingBasis or a similar local alias erase the factor bundle.

Consequences

The benefit is cleaner comparison across schools, substrates, and publication forms. The trade-off is that representation talk becomes more explicit and less slogan-friendly.

Rationale

The factor-bundle design keeps the representation basis-slot family in the declared language-state chart over U.CharacteristicSpace orthogonal to articulation, closure, and anchoring.

SoTA-Echoing

This factorization fits current work on sparse distributed representations, symbolic/neuro-symbolic stacks, and interpretability practice.

Relations

  • Builds on: A.18, C.2.2a, C.2.LS.
  • Coordinates with: C.2.6, A.16.0, A.16, A.16.1, B.4.1, B.5.2.0, F.9.1.
  • Constrains: language-state position publication and bridge loss notes around representation shifts.

Worked Examples and Factor Interaction Notes

Distributed but explicit

A model-side summary may be representation-wise distributed and still highly explicit once published into a stable symbolic wrapper. This case matters because it blocks the folk myth that distributed implies vague.

Symbolic but still low-articulation

A glossary-like note may be fully symbolic while still low in AE because the semantic anchors are not yet stabilized. This blocks the opposite myth: symbolic therefore explicit.

Mixed-stack publication

An operator-facing publication face may combine sparse alert codes, symbolic method-description text, and distributed back-end model summaries. The representation-factor bundle should make that mixture visible instead of compressing it into one label.

Authoring and Review Guidance

Author prompt

To publish a representation-factor bundle, ask separately:

  • how local or distributed is the representation?
  • how sparse or dense is it?
  • how symbolic or subsymbolic is it?
  • which additional factor, if any, genuinely matters enough to publish?

Review prompt

A reviewer should reject any attempt to use one factor as if it summarized the rest. The factor bundle exists precisely to block that reduction.

Cross-facet reminder

Reviewers should also watch for silent replacement of LanguageStateAnchoringMode, AE, or CD by representation talk.

Extension and Migration Notes

Local extension rule

Contexts may add extra factors, but each added factor should answer a distinct question rather than duplicating locality, sparsity, or symbolicity under another label.

Migration from alias-heavy prose

Aliases such as EncodingBasis or similar should be unfolded into explicit factor dockings before they are relied upon for routing, comparison, or bridge claims.

Boundary reminder

U.LanguageStateRepresentationFactorBundle describes representational organization only. It does not determine route authority, closure, or anchoring by itself.

Factor-Bundle Publication Discipline

Minimal representation package

A publishable U.LanguageStateRepresentationFactorBundle should normally show the current factor settings for locality/distribution, sparsity/density, and symbolicity/subsymbolicity, together with any declared extra factor. If a factor is intentionally omitted, say so rather than hiding the omission under a compact alias.

No hidden scalar rule

Compact overlays such as "sparse-symbolic" are admissible only when they dock to the underlying factor bundle. No compact label may behave as a hidden master score for routing, bridge comparison, or stage/progression talk.

Alias docking rule

Local aliases such as EncodingBasis are admissible only when their docking to the governed factors is explicit and stable. If an alias compresses several factors, the compression should remain visible.

Factor Interaction and Cross-Facet Reading Rule

Interaction rule

Representation factors may correlate, but they do not determine one another. Highly distributed cues can still be sparse; symbolic publications can still be locally dense; mixed symbolicity can coexist with either strong or weak articulation. Publish the actual factor bundle rather than narrating one factor as if it predicted the rest.

Cross-facet non-substitution

Representation talk must not silently replace AE, CD, or LanguageStateAnchoringMode. A shift from distributed to symbolic publication may change readability while leaving articulation low, closure open, or anchoring heavily operator-bound.

Bridge reminder

If a representation shift matters in transport across contexts, note that the shift may alter what is preserved or salient. The bridge itself remains governed by F.9 and F.9.1.

Review Matrix and Extension Tests

Review matrix

A reviewer should ask:

  • are all claimed factors visible in the publication or cited source;
  • does any alias hide the factor bundle;
  • is one factor being used as if it summarized the whole representation state;
  • has representation talk started to replace articulation, closure, or anchoring claims.

Local extension test

An additional factor is justified only if it captures a distinct representational question that cannot be reduced to locality, sparsity, or symbolicity. The extra factor should extend the bundle, not become a rival master factor.

Migration test for legacy terminology

Legacy vocabularies often use "symbolic", "distributed", or "encoding basis" as if one term solved the whole classification problem. A conforming migration unpacks the term into explicit factor dockings and then checks whether any cross-facet claims were smuggled into the old label.

Bundle-comparison reminder

Representation bundles may be compared across contexts only after the compared factors are explicit. If one context uses a compact local alias and another publishes the full factor bundle, require explicit docking before treating the two descriptions as commensurable.

C.2.7:End

Kinds, Intent/Extent, and Typed Reasoning (Kind‑CAL)

One‑line summary. Establishes U.Kind as the minimal, context‑local intensional carrier of “what a statement is about,” separates intent (KindSignature + its own F) from extent (which instances belong to the kind in a given Context slice), and situates typed reasoning alongside USM Scope (G) and F–G–R without conflation. Details of the core objects and operations live in C.3.1C.3.5; guard shapes are standardized in C.3.A.

Status. Normative in Part C. Identifier C.3. This pattern lays the architectural invariant and manager‑level guidance. The mechanics are defined by its child patterns.

Readers. Engineering managers, architects, and assurance leads who must reason about typed claims across Contexts without mixing up entityOfConcern (Kinds), applicability (G), and assurance (R).

Depends on.A.2.6 USM (Context slices & Scopes): U.ClaimScope = G, U.WorkScope, ∈/∩/SpanUnion/translate, Γ_time policy, Bridges + CL (scope). — C.2.2 F–G–R: weakest‑link composition; penalties to R for Cross‑context congruence (CL). — C.2.3 Unified Formality F: F0…F9 as an ordinal Characteristic (expression rigor).

Sub‑patterns (normative unless noted).C.3.1 - U.Kind & U.SubkindOf (partial order). — C.3.2 - KindSignature (intent, with F) & Extension/MemberOf (extent in a slice). — C.3.3 - KindBridge & CL^k (type‑congruence; penalties route to R). — C.3.4 - RoleMask (context‑local adaptation without cloning kinds). — C.3.5 - KindAT (K0…K3, informative facet, not a Characteristic). — C.3.A - Typed Guard Macros (annex): admit/compose, masks, Cross‑context reuse; AT is forbidden in guards.

Deprecations. — “Generality ladder” for G; G is Scope only (set‑valued over U.ContextSlice). — Any “Kind scope” characteristic (Kinds carry intent/extent, not Scope). — Mark as legacy any uses of ‘validity’ as a Characteristic or ‘operation’ as a Scope‑like Characteristic; redirect to U.ClaimScope / U.WorkScope (A.2.6) for applicability. Editors SHOULD add glossary redirects in Part E.

Editorial note (cut‑over). Content formerly in C.3 that defined guard shapes, decision trees, and macro anti‑patterns now resides in C.3.A. Membership evaluation obligations live in C.3.2 with MemberOf.

Purpose & Rationale

What you get.

  1. A neutral typed layer: name what a claim quantifies over (Kinds) without binding to any particular “type technology” (OWL, PL types, shapes…).
  2. A clean split of characteristics: – Scope (G) = where a claim holds (USM, set‑valued over Context slices). – Kind extent = which instances belong to a kind inside a given slice. – F = how strictly content is expressed (C.2.3). – R = how well supported (evidence & congruence penalties).
  3. Typed reuse across Contexts: a dedicated KindBridge with CL^k (type‑congruence), so you can predict risk without touching F or G.
  4. Manager‑oriented maps: when to invest in formalization (F), when to expand/narrow Scope (ΔG), when to test across subkinds (R), and what kind of bridge you should expect.

Why it helps. Teams routinely overspend on proofs for instance‑level questions and underspecify scope for class‑level claims. By naming the Kind, you plan ΔF/ΔR correctly and keep G honest. Typed checks also block unsafe compositions (“we were talking about different things”).

Context

Cross‑disciplinary work mixes artifacts that look like “types” but behave differently: ontology classes, schema “shapes,” programming types, BORO super/sub categories, ad‑hoc labels. At the same time, USM made “scope” precise. What was missing was a small, neutral notion of entityOfConcern that (a) does not re‑invent a global “type system,” (b) composes with USM and F–G–R, and (c) lets Contexts keep their idioms—with bridges when crossing boundaries.

Problem

  1. Scope–type conflation. Authors try to widen G by “abstracting the wording,” yielding claims that sound general but are only supported on a thin slice.
  2. Silent drift across Contexts. A “vehicle” here is not the same as a “transport unit” there; reuse proceeds without a declared mapping or risk accounting.
  3. Wasteful planning. Without a signal about the kind‑level, teams either over‑formalize single‑slice decisions or under‑test class‑level claims (no variant coverage along subkinds).
  4. Unsafe composition. Claims about incompatible “things” get composed because the entityOfConcern was implicit in prose.

Forces

ForceTension to resolve
Local freedom vs global senseContexts need their own vocabularies; Cross‑context work needs a common skeleton for entityOfConcern.
Minimality vs utilityThe notion of kind must be tiny yet powerful enough to guide ΔF/ΔR/bridges/composition.
Intent vs extentKinds come with a definition and a population in place; both are needed and must not mix.
Typed discipline vs F–G–RTyped safety must not distort G (Scope) nor introduce a parallel “assurance math.”
Abstraction vs applicability“Higher abstraction” is not “wider applicability”; the framework must make this split obvious.

Solution — Architectural Decisions (overview)

C.3‑D1 — U.Kind is intensional and context‑local. Kinds name what a claim quantifies over. They form a partial order (SubkindOf). (See C.3.1.)

C.3‑D2 — Separate intent and extent.KindSignature(k): the intensional content (predicates/invariants/Standards). It carries its own F (C.2.3). — Extension(k, slice)/MemberOf: which instances belong to k in a given U.ContextSlice. (See C.3.2.)

C.3‑D3 — Kinds do not carry Scope. Scope lives with claims/capabilities (USM): a set of Context slices where the statement holds. Kinds carry intent/extent only. (USM A.2.6 + C.3.2.)

C.3‑D4 — Typed reuse across Contexts is explicit. Use a KindBridge with CL^k (type‑congruence) and loss notes. Its effect is only via R penalties; F/G remain unchanged. (See C.3.3.)

C.3‑D5 — Local adaptation without cloning. Use a RoleMask to bind a kind to Context‑specific constraints/aliases; promote to a subkind if the mask becomes stable and widely reused. (See C.3.4.)

C.3‑D6 — An informative “abstraction tier” exists for Kinds (AT: K0…K3). A facet (not a Characteristic) that helps plan ΔF/ΔR and forecast bridge style; AT never appears in guards. (See C.3.5.)

C.3‑D7 — Guard shapes are standardized and fail‑closed. Typed compatibility first (same‑Context or KindBridge), then Scope coverage (USM), then R penalties and freshness. (See C.3.A.)

Manager’s picture — one claim-scope object and one kind-extent relation (keep them separate).Claim scope (USM, G): Where the claim holds → set of Context slices; composed by membership / intersection / SpanUnion across independent lines / translate. – Kind extent relation: Which instances in a given slice belong to the kind → MemberOf(e, k, slice). Never “widen G” by abstract wording; widen only by ΔG with support.

Core Concepts (informative summary; authoritative norms live in C.3.1–C.3.5)

This section fixes the Standard of terms used in C.3 and points to the sub‑patterns for complete mechanics. All “SHALL/MUST” statements here are normative.

Editorial note. This section is informative. It restates manager-level takeaways and points to the canonical, normative rules in C.3.1-C.3.5. Where this section summarizes a rule, treat the cited sub-pattern and rule ID as the governing source.

U.Kind & U.SubkindOf (⊑)

Definition. U.Kind is a context-local kind record naming a “kind of thing” that claims may quantify over. Order. U.SubkindOf (⊑) is a partial order (reflexive, transitive, antisymmetric). We write k₁ ⊑ k₂.

Summary of norms (authoritative text: C.3.1 K‑01–K‑02). — Contexts treat as a partial order and document any computed meets/joins if they provide them. — Kinds do not carry Scope; Scope remains on claims/capabilities (USM).

Full treatment: C.3.1 (definitions, invariants, examples).

KindSignature (intent) & F

Definition. KindSignature(k) is the intent: predicates/invariants/Standards that define the kind in the Context. Its expression rigor has an explicit U.Formality (C.2.3).

Summary of norms (authoritative text: C.3.2 K‑03–K‑04). — KindSignature(k) declares its F (C.2.3). Claim‑level F does not auto‑inherit; weakest‑link applies on the claim’s own support paths. — If a signature change alters membership, treat it as a content change (Contexts may version kinds).

Full treatment: C.3.2 (signature/intent with F; relation to claims).

Extension & MemberOf (extent in a slice)

Definition. Extension(k, slice) ⊆ EntitySet(slice) = set of instances that belong to k in the given U.ContextSlice. MemberOf(e, k, slice) is the membership predicate: e ∈ Extension(k, slice).

Summary of norms (authoritative text: C.3.2 K‑05–K‑08). — Membership is deterministic for a fixed (k, slice) (no hidden “latest”). — If k₁ ⊑ k₂, then Extension(k₁,slice) ⊆ Extension(k₂,slice) for all slices. — Definedness may be bounded; outside it, guards fail closed. — Keep Scope (G) and MemberOf as distinct guard predicates.

Full treatment: C.3.2 (extent semantics, examples, authoring hints).

KindBridge & CL^k (type‑congruence)

Summary of norms (authoritative text: C.3.3 KB‑01–KB‑12). — A KindBridge states Contexts/versions, kind mapping/rules, preserved order links, CL^k anchors, loss notes, and definedness. — No inversions of preserved subkind links; collapses must be declared. — When classification depends on a KindBridge, apply a monotone penalty Ψ(CL^k) to R (scope‑bridge Φ(CL) applies separately). F and G remain unchanged. — Chaining uses weakest‑link on CL^k.

Full treatment: C.3.3 (bridge shape, anchors, examples).

RoleMask (adaptation without cloning)

Definition. U.RoleMask(kind, Context) is a named binding that carries constraints (optional narrowing of membership), vocabulary/notation aliases, and intended use for local procedures—without creating a new Kind.

Summary of norms (authoritative text: C.3.4 RM‑01–RM‑08). — Masks are registered/versioned; constraints are observable/deterministic at guard time. — Do not treat masks as kind synonyms; promote frequently reused constraint masks to explicit subkinds ().

Full treatment: C.3.4 (mask taxonomy, guard discipline, promotion rule).

KindAT (K0…K3) — informative facet

Status. A facet attached to U.Kind, not a Characteristic: no algebra, never used in guards or composition.

Anchors (intentional view). K0 Instance; K1 Behavioral pattern; K2 Formal kind/class; K3 Up‑to‑Iso.

Use. Helps plan ΔF/ΔR and forecast bridge style (e.g., K3↔K3 suggests up‑to‑iso mapping). Do not conflate AT with G or R.

Full treatment: C.3.5 (manager heuristics, anti‑misuse).

Quick examples (two‑characteristic awareness)

E‑Sketch 1 — Policy over Vehicle. Claim: “For all x ∈ Vehicle: brakeDistance(x) ≤ 50 m (dry), ≤ 40 m (wet).” – entityOfConcern: Vehicle (Kind, typically K2) — what we quantify over. – Scope (G): {surface∈{dry,wet}, speed≤50, rig=v3, Γ_time=rolling 180d}where the claim holds. – Extent in slice: which instances the lab currently classifies as Vehicle (via MemberOf). Typed checks happen before Scope intersection; G is not widened by “abstract wording.”

E‑Sketch 2 — API rule over AuthenticatedRequest. Producer A emits Request; consumer B expects AuthenticatedRequest. – If Request ⊑ AuthenticatedRequest does not hold, add an adapter or adopt a subkind; do not force fit by widening G. – Scope remains independent (API version, Γ_time policy); evidence/freshness sits in R.

How to use typed reasoning

C.3:7.1 How typed reasoning plugs into F–G–R & USM

The basic shape of a typed claim (manager view)

A typed claim has two independent parts:

  1. entityOfConcern (Kind). Which things the statement talks about. “For every item of kind k in the target context (the selected TargetSlice) …”. — The definition of kind k lives in KindSignature(k) (with its F, C.3.2). — Which items count as “k” is evaluated in the TargetSlice (C.3.2) by a deterministic membership check.

  2. Applicability (Scope, G). Where the statement holds. U.ClaimScope(Claim) is the collection of contexts where the claim is valid (USM A.2.6). Guards test: “Scope covers the TargetSlice”.

Discipline. The guard first checks typed compatibility (in the same Context: “is‑a / subkind‑of”; across Contexts: a KindBridge, C.3.3), then Scope coverage (USM), then R freshness and any bridge congruence penalties. See C.3.A Guard_TypedClaim.

Composition of typed claims

Rule C‑T‑1 (typed pre‑check). To compose a producer claim with a consumer claim, where the producer quantifies over kind k (source) and the consumer expects kind k (expected):

  • same Context: require “is‑a / subkind‑of” to hold (the source kind is a subkind of the expected kind) (C.3.1).

  • Cross‑context: require a KindBridge that maps the source kind to a local kind that is a subkind of the expected kind in the target Context (C.3.3). If neither holds, the composition is unsafe; introduce a subkind, add an adapter (or a RoleMask), or decline.

  • Role‑aware option (same Context): if the consumer expects a RoleMask over the expected kind, you may satisfy the mask’s explicit constraints (C.3.4) instead of changing kinds, provided those constraints are observable at gate time.

Rule C‑T‑2 (scope after type). After typed compatibility is satisfied, compute Scope as in USM:

  • Serial path: take the intersection of the contributors’ claim scopes.
  • Parallel independent lines: use SpanUnion of the serial scopes (only if independence is justified).

Rule C‑T‑3 (no type‑by‑scope). A kind mismatch MUST NOT be “fixed” by widening G. Changes in entityOfConcern require subkind introduction, signature edits, or a KindBridge—not a scope change.

Manager hint. First confirm the port shape matches (kinds line up), then check the operating area (scope), and finally look at confidence (evidence freshness plus any bridge congruence penalties).

F–G–R with typed claims (what changes, what doesn’t)

  • F (Formality).Claim‑level F follows C.2.3 (weakest‑link along the claim’s support paths). – KindSignature F is declared on the kind (C.3.2) and influences claims only if the claim essentially depends on those predicates (weakest‑link again). – Raising F can reveal hidden assumptions (which may trigger ΔG in the claim), but does not change G by itself.

  • G (Scope). – Always set‑valued over Context slices (USM A.2.6). – Typed reasoning does not alter G’s algebra (∈/∩/SpanUnion/translate). – Never infer Scope from “how general the wording sounds.”

  • R (Reliability). – Evidence freshness/decay (validation windows) remains separate from Scope coverage. – Cross‑context penalties split cleanly: a scope‑bridge penalty (USM) and a kind‑bridge penalty (C.3.3). Both reduce R only; neither changes F or G.

Manager rule of thumb. Start with the reliability from your support; then apply the scope‑bridge penalty; then apply the kind‑bridge penalty. Each step can only reduce reliability. You never add or average F/G: you compose scope per USM rules and apply weakest‑link for F/R along support paths.

ESG gating with typed claims

  • Gate on F, if your Context requires rigor before use (e.g., U.Formality(Claim) ≥ F4).
  • Gate on Scope coverage (USM) and an explicit time selector (Γ_time) policy.
  • Gate on R freshness and minimum congruence for bridges (e.g., CL ≥ 2, CL^k ≥ 2).
  • Do not gate on AT (C.3.5); it is an informative facet only.
  • Use C.3.A guard macros to keep guards short and auditable.

How typed reasoning plugs into the CAL chain (Lang‑CHR → Role‑CAL)

Intent. Show a clear, end‑to‑end path a manager can follow to take a typed claim from words to safe reuse across Contexts—without any tool or data‑governance assumptions. Each stage says what it supplies, what it needs, and what it hands off to the next stage.

Lang‑CHR — stable words first

What it supplies. A disciplined vocabulary and controlled phrasing so that terms like Vehicle, AuthenticatedRequest, AdultPatient have one meaning in the Context.

What it requires. Authors use controlled narrative (C.2.3 F3) at minimum: single‑meaning terms, explicit “shall / if / then”, and no drifting synonyms.

Hand‑off. A small, curated lexicon entry for each candidate Kind‑word; these become U.Kind names in the next step.

Manager hint. If two teams cannot agree on the noun, you are not ready to type the claim. Resolve the noun in Lang‑CHR before introducing a Kind.

Kind‑CAL (this Part) — name the entityOfConcern

What it supplies.U.Kind objects for those nouns; a partial order (subkind‑of). • KindSignature(k) (intent), with declared F. • Extension(k, slice) and MemberOf(e,k,slice) (extent). • (Optional) AT (K0…K3) as an informative facet.

What it requires. • Deterministic membership (no “latest” defaults) and a clear rule for where membership is defined in each context. • No “Kind scope”: Scope remains with claims/capabilities (USM).

Manager hint. Use the kind’s AT tag only as a planning signal (where to invest rigor and tests). AT never gates decisions and never widens scope.

Hand‑off. Typed quantifier sites for claims: “∀ x ∈ Extension(k, slice) …”, plus a visible lattice for compatibility checks down the line. Typed claim sites written in Plain language: “for every item of kind k in the target context …”, plus a visible subkind‑of lattice for compatibility checks down the line.

Manager hint. Decide early whether your Kind is K0 (instance‑ish) or K2 (formal class). It sets your ΔF/ΔR budget expectations.

Structure‑CAL — give Kinds usable shape

What it supplies. Structural building blocks on Kinds: • combinations (“and”), • alternatives (“either/or”), • records (named fields), • functions (inputs to outputs), plus relations like has‑attribute and part‑kind, and the minimal invariants those structures must respect.

What it requires. • Do not hide Scope inside structure. • Put structural rules into the KindSignature as checkable statements (ideally F4+).

Hand‑off. Typed ports and shapes of claims/specifications (“this policy expects PassengerCar × ControllerConfig”), making compatibility checks crisp before any Scope math.

Manager hint. If two claims expect different shapes (for example, one needs “Vehicle with ABS”, the other just “Vehicle”), plan a subkind or an adapter. Do not “solve” it by rewording the claim.

Note (informative). If a Context declares structural constructors on kinds (e.g., product/sum/record/function), editors SHOULD document the corresponding Extension inclusion laws for those constructors. Keep Scope in USM; do not hide it in structure.

Compose‑CAL — compose with typed pre‑checks

What it supplies. The order of checks you must follow for safe composition:

  1. Typed compatibility: in the same Context, the producer’s kind is a subkind of the consumer’s kind; across Contexts, a KindBridge maps the producer’s kind to a local kind that fits, with an acceptable kind‑bridge congruence level (C.3.3).
  2. Scope checks (USM): along dependency paths, take the intersection of scopes; use SpanUnion only when support lines are truly independent.
  3. Assurance wiring: apply the scope‑bridge penalty and the kind‑bridge penalty to R; check evidence freshness separately.

What it requires. Independence justification for SpanUnion; no “type‑by‑scope” fixes.

Hand‑off. A typed, scope‑checked composition that survives audit because each risk is accounted for in R.

Manager hint. Run the typed pre‑check first. It is the cheapest failure to catch and prevents “scope gymnastics” that mask a type mismatch.

CT2R‑LOG — speak the logic, keep the math honest

What it supplies. • A clear logical reading of your typed claim: “for every item of kind K, condition φ holds” (or “there exists an item …”). • Rules for refinement and substitution that respect the subkind‑of relation. • When appropriate (K3), reasoning that treats structures as equivalent up to isomorphism (useful where exact identity is the wrong notion).

What it requires. • Pick a logic that matches the Formality you declare (e.g., machine‑checked logic for higher F). • When the logic travels across Contexts, use a KindBridge to keep meaning aligned; any mismatch is reflected as a kind‑bridge penalty in R.

Hand‑off. Proof obligations or reasoning templates that are consistent with your Kind/Structure setup and do not alter G. Shall‑note CT2R‑1. Transferring typed formulas that depend on MemberOf across Contexts uses a KindBridge; any mismatch is accounted as Ψ(CL^k) in R. F and G remain unchanged. For up‑to‑iso situations, see C.3.5 (AT) for when K3 is appropriate.

Manager hint. If your proof keeps failing when you move between Contexts, add a bridge at the Kind level; do not try to “fix” it by changing scope.

Role‑CAL — adapt without cloning

What it supplies. RoleMask(kind, Context): a named, registered adaptation (extra constraints or local aliases, with optional narrowing) that reuses the same kind instead of creating a new one.

What it requires. • Constraints must be testable at gate time and give deterministic answers. • If a constraint mask is reused often, promote it to a subkind.

Hand‑off. Context‑specific views that keep identity intact and make typed guards practical (“use PaymentAccount@PCI mask in these steps”).

Manager hint. If the same mask appears in several guards, promote it to a subkind. This reduces future bridge and audit effort.

Mini end‑to‑end example (manager‑oriented)

Scenario. A risk gate for API requests must be reused by another program across Contexts.

Lang‑CHR. Settle on Request, AuthenticatedRequest, RiskScore, BudgetSlack; write them in controlled phrases (F3).

Kind‑CAL. • Define Kind Request (K2) and a subkind AuthenticatedRequest ⊑ Request; publish a KindBridge for the PCI taxonomy with kind‑bridge congruence level 2 (loss note: token class is collapsed). • Membership MemberOf(e, AuthenticatedRequest, slice) is deterministic under API v2.3 and Γ_time policy.

Structure‑CAL.AuthenticatedRequest is a record kind with fields (headers, tokenProof, body); invariants relate tokenProof to headers.

Compose‑CAL. • Policy P says in Plain terms: “for every AuthenticatedRequest in the target context, deny the call when riskScore is at or above the set risk threshold and budgetSlack is at or below the set budget limit.” • Another service S expects PCIRequest. Typed pre‑check: does AuthenticatedRequest ⊑ PCIRequest? No. • Remedy: adapter A proves AuthenticatedRequest → PCIRequest in this Context; if reusing across Contexts, publish a KindBridge for the PCI taxonomy with CL^k=2 (loss: token class collapsed).

CT2R‑LOG. • State P in a state P in a proof‑checked logic (where appropriate for F7+), so that changes to token rules break proofs. Proofs rely on the AuthenticatedRequest definition, not on the consumer’s scope.

Role‑CAL. • Register a RoleMask over PCIRequest for the consuming team; guards must be able to test the mask’s constraints at gate time.

Outcome.Typed guard approves only when: (i) the type pre‑check passes (same‑Context subkind‑of or a KindBridge with an acceptable congruence level), (ii) Scope covers the target context (API v2.3, explicit time selector), and (iii) R reflects the scope‑bridge and kind‑bridge penalties and evidence is fresh. • No one widened Scope to hide a type mismatch; the adapter + bridge made the semantics explicit and auditable.

Takeaway. If you keep these six hand‑offs in view—words → kinds → structure → composition → logic → roles—you get predictable reviews, clean risk accounting, and reusable claims that travel across Contexts without silent meaning drift.

Compliance & Regulatory Alignment — profile

Treat regulatory categories as Kinds, carry their intent in KindSignature with declared F, move them across Contexts with a KindBridge (type‑congruence CL^k + loss notes), and express applicability as Claim scope over U.ContextSlice (with explicit Γ_time). Any Cross‑context uncertainty is routed to R via Ψ(CL^k) (kind) and Φ(CL) (scope); F and G remain unchanged.

Authoritative obligations and guard macros (C‑REG‑1…8, Guard_RegAdopt / Guard_RegChange / Guard_RegXContextUse) and worked scenarios live in C.3.A, Annex A (Regulatory adoption profile).

How typed reasoning plugs into Assurance Lanes (VA/LA/TA) & Evidence design

Intent (manager’s view). Typed reasoning turns “prove/test/qualify” into a repeatable plan by making what the rule talks about explicit (named Kinds, their subkinds, optional RoleMasks) and keeping Scope (G) over U.ContextSlice separate from membership inside the slice. Cross‑context uncertainty (Scope Bridge CL, KindBridge CL^k) always routes to R as penalties Φ/Ψ; it never changes F or G.

Evidence matrix (sketch).

Row setColumn setCell content
Kinds (subkinds or masks)Context slices (Standard versions, env ranges, Γ_time)Evidence unit (proof fragment, test batch, monitoring window), with Scope and MemberOf predicates attached

Tip. For formal kinds and “up‑to‑iso” kinds (AT K2/K3), expect more rows (variants). For instance‑like kinds (AT K0), expect fewer rows and tighter columns (narrow slices, stricter freshness).

Authoritative evidence obligations and guard macros (planning/attachment, VA/LA/TA duties, anti‑patterns) are in C.3.A, Annex B.

How typed reasoning plugs into ESG and Method–Work gating

Intent. Make state changes and work admissions deterministic, auditable, and safe by separating (1) typed compatibility (what the statement or capability is about) from (2) scope coverage (where it holds or can run). Any Cross‑context uncertainty is routed to R (reliability) only—never to F (form) or G (scope).

Scope & fit

This subsection defines normative guard obligations for:

  • ESG (Episteme State Graph) transitions whose assertions quantify over kinds, and
  • Method–Work admissions where a capability expects inputs and outputs of specified kinds.

It reuses:

  • USM (A.2.6): U.ClaimScope (G) and U.WorkScope coverage + Γ_time,
  • Kind‑CAL core (C.3.1C.3.2): U.Kind, MemberOf(e,k,slice), ,
  • KindBridge (C.3.3) with CL^k and loss notes,
  • Scope Bridge (Part B) with CL and loss notes,
  • RoleMask (C.3.4) when local adaptations of a kind are used,
  • Formality F (C.2.3) when transitions gate on rigor,
  • Assurance R (C.2.2) for evidence freshness and penalties Φ/Ψ.

Guard macros. The normative guard shapes for ESG and Method–Work (Guard_TypedClaim, Guard_TypedJoin, Guard_MaskedUse, Guard_XContext_Typed) are specified in Annex C.3.A. Use those shapes; the present section is a manager‑level overview only.

Inputs & roles (at guard time)
  • TargetSlice — the specific context you are deciding for: Context, versioned Standards, environment parameters, and an explicit time selector (Γ_time).

  • Typed carriers

    • ESG: the Claim quantifies over one or more Kinds (e.g., “for all vehicles in the target context …”).
    • Method–Work: the Capability declares expected input and output kinds (and possibly RoleMasks).
  • Thresholds (context‑local policy):

    • Minimum F level for the Claim (if the Context gates on rigor),
    • Minimum congruence for scope bridges,
    • Minimum type‑congruence for KindBridges,
    • Evidence freshness windows (R‑lane).
  • Evidence bundle (if the transition implies trust): references, dates, windows.

Manager’s 7‑step checklist (operational)
  1. Name the slice. Write the full TargetSlice/JobSlice tuple including Γ_time.
  2. Check coverage. Claim/Work scope covers the slice (USM).
  3. Check typed definedness. A deterministic membership check is available in this context for every kind you use (and any masks are registered).
  4. Check typed compatibility. same Context: (or mask constraints met). Cross‑context: KindBridge with CL^k ≥ c.
  5. Bridge scope if needed. Scope Bridge with CL ≥ c for Cross‑context scope.
  6. Apply penalties to R. Apply the scope‑bridge penalty and the kind‑bridge penalty; then check evidence freshness windows.
  7. (If gated) Check F. Enforce Formality ≥ F_k for the transition.

Remember: F and G never change because of bridges; only R is penalized. AT (K0…K3) is informative and not used in guards.

Cross‑references
  • USM / A.2.6: Scope coverage, Γ_time, serial , SpanUnion, Bridge+CL.
  • Kind‑CAL / C.3.1C.3.4: U.Kind, , MemberOf, RoleMask, KindBridge + CL^k.
  • Formality / C.2.3: U.Formality thresholds (when ESG gates on rigor).
  • Assurance / C.2.2: Freshness windows; Φ(CL) and Ψ(CL^k) penalties to R (weakest‑link on paths).

This subsection is normative for guards in ESG and Method–Work that use kinds.

Cross‑context typed reuse & assurance accounting

The two‑bridge rule (mandatory)

When any part of the use crosses Contexts:

  1. Scope Bridge (USM/Part B) with CL → penalty Φ(CL) to R.
  2. KindBridge (C.3.3) with CL^k → penalty Ψ(CL^k) to R.

Both bridges carry loss notes; neither changes F or G. See C.3.A Guard_XContext_Typed.

Narrowing after mapping (best practice)

If a bridge’s loss notes indicate material mismatch (dropped invariants, collapsed subkinds):

  • Narrow the mapped Scope to areas where those losses are benign.
  • Or introduce an adapter (plus evidence) that restores the needed properties in the target Context.
  • Document the decision; the penalties still land in R.

Typical Cross‑context patterns (manager’s catalog)

  • Name‑level overlap only (low CL^k). Expect significant Ψ penalty. Limit quantification, add local checks, or refuse reuse until the kind mapping is improved.

  • Up‑to‑iso mapping (high CL^k). Often seen for K3 kinds. Ψ penalty is small; treat as “shape‑preserving” transfer. Still apply the appropriate Φ(CL) for Scope.

  • Mask‑to‑subkind evolution. If receivers repeatedly use the same RoleMask to make a transfer safe, promote it to an explicit subkind and update the bridge to preserve that link.

Decision pattern (fast path)

  1. Typed pre‑check: k_A ⊑ k_B (same Context) or KindBridge(k_A → k′_B) with acceptable CL^k.
  2. Scope coverage: translate(Scope_A) covers TargetSlice_B.
  3. Apply penalties: Φ(CL_scope) and Ψ(CL^k) to R.
  4. Freshness: windows/decay for all bound evidence.
  5. Publish: a short “Bridge and Loss Notes” box; include any narrowing or adapters used.

Authoring guidance (engineers‑managers)

When to mint a U.Kind

Create a Kind when:

  • multiple claims refer to the same “entityOfConcern” using unstable labels;
  • you need subkinds (refinement) or repeated RoleMasks;
  • different Contexts must map this “entityOfConcern” via bridges;
  • you need to quantify over a population (and plan variant coverage) instead of over a single exemplar.

Avoid creating a Kind for one‑off instance references—prefer a clear K0 facet or just a literal exemplar in the claim.

Writing a KindSignature (and picking F)

  • Start with a concise intent: the invariants/constraints that make membership meaningful.
  • Aim for F4 (predicate‑like) if the kind is intended for reuse; rise to F7+ only where proof‑grade is justified.
  • Use observable terms (no “latest”); if a Standard matters, name its version.
  • If defining a Kind reveals systematic narrowings in use, introduce explicit subkinds () rather than accumulating opaque masks.

Example (sketch). Kind Vehicle — intent: “has VIN; has brake system; has propulsion {ICE, EV, Hybrid}; …” (F4 predicates). Subkind: PassengerCar ⊑ Vehicle. RoleMask: Vehicle@ABSRequired for processes that demand ABS (deterministic constraints; candidates for promotion to subkind if widely reused).

Setting the AT facet (K0…K3)

Use AT to aim effort, not to gate:

  • K0: instance/cohort — focus R on the TargetSlice; don’t over‑formalize.
  • K1: behavioral pattern — clarify Standards; plan ΔF (F3→F4).
  • K2: formal class — invest in F4–F7; plan variant coverage across subkinds in R.
  • K3: up‑to‑iso — expect high‑quality bridges; consider F7–F9 for critical invariants.

Never treat AT as “wider/narrower” G.

Writing a typed claim (with USM blocks)

Skeleton.

  • Kinds used: Vehicle (K2), subkinds PassengerCar.
  • Claim scope (G): surface∈{dry,wet}; speed≤50; rig=v3; Γ_time=rolling 180d.
  • Statement: ∀ x ∈ Extension(Vehicle, TargetSlice) …
  • Guards: use C.3.A Guard_TypedClaim; if Cross‑context, add Guard_XContext_Typed (two‑bridge rule).

Tip. Keep Scope, MemberOf definedness, F thresholds, and freshness as separate guard predicates—the auditor should be able to tick each box independently.

Minimal “Kind card” contents (Context catalog)

  • Name and intent summary (KindSignature snippet + F).
  • links (parents/children).
  • Examples of MemberOf@slice (what membership looks like in practice).
  • Known RoleMasks (type, constraints, determinism).
  • Known KindBridges (source Contexts, target Contexts, CL^k, loss notes, definedness).
  • (Optional) AT facet with one‑line rationale.

10 - Review & integration guidance

Reviewer’s 8‑point checklist

  1. Named entityOfConcern. Does the claim state what it quantifies over (U.Kind)?
  2. Scope explicit. Is G declared (no “domain” placeholders, no implicit “latest”)?
  3. Typed compatibility. For compositions, do we have (same Context) or a KindBridge?
  4. RoleMasks. If used, are they registered, deterministic, and not masquerading as kinds?
  5. Two‑bridge rule. For Cross‑context use, do we have both Scope Bridge (CL) and KindBridge (CL^k)?
  6. Penalties. Are Φ(CL) and Ψ(CL^k) applied to R, not smuggled into F/G?
  7. Freshness. Are validation/monitoring windows separate from Scope coverage?
  8. Evidence fit. For class‑level claims, does the test plan cover subkinds/variants?

Integrator’s composition playbook (typed first, then scope)

  • Step 1: Check k_A ⊑ k_B (or KindBridge).
  • Step 2: Compute Scope_serial = Scope(A) ∩ Scope(B) (USM).
  • Step 3: If parallel supports exist, SpanUnion them (only where independent).
  • Step 4: Apply Φ/Ψ penalties to R; enforce freshness.
  • Step 5: If a mask is repeatedly required, consider promoting it to a subkind.

Assurance lead: wiring penalties and windows

  • Identify channels used: Scope bridge? KindBridge?
  • Apply Φ(CL) and Ψ(CL^k) to R (monotone; higher congruence ⇒ smaller penalty).
  • Verify freshness windows for all bound evidence (independent of bridges).
  • Publish a one‑box summary: bridges, levels, loss notes, any narrowing/adapters, net impact on R.

Red flags (stop‑the‑line)

  • We widened G because we reworded the type.” → Reject; redo as subkind/bridge or revise Scope honestly.
  • Mask equals kind.” → Refactor; register mask properly or promote to subkind.
  • Cross‑context without KindBridge.” → Block; demand mapping and CL^k.
  • No Γ_time.” → Block; add explicit time policy (point/window/rolling).

Worked examples (end‑to‑end)

Each example shows the typed pre‑check, Scope composition, penalties to R, and the managerial decision. Full guard clauses for these scenarios are in Annex C.3.A.

Cyber‑physical braking policy across labs and plants

Claim (Lab Context). “∀ x ∈ Vehicle: brakingDistance(x) ≤ 50 m (dry), ≤ 40 m (wet).” Kinds. Vehicle (K2, KindSignature F4); subkind PassengerCar ⊑ Vehicle. Scope (Lab). {surface∈{dry,wet}, speed≤50, rig=v3, Γ_time=rolling 180d}.

Reuse at Plant B.KindBridge: Vehicle ↦ TransportUnit with CL^k=2 (loss: EV subkind collapsed). – Scope Bridge: Lab → PlantB with CL=2 (rig bias ±2 %). – Narrowing: loss notes indicate wet‑surface bias; Plant B narrows mapped Scope to temp/adhesion ranges with acceptable bias.

Decision. Typed pre‑check: OK via KindBridge. Scope coverage after translate/narrow: OK. Penalties: apply Φ(2) and Ψ(2) to R; freshness windows checked. Outcome: Adopt with reduced R; action item: qualify rig v4 to raise CL in the future.

API decision rule with adapter and subkind promotion

Consumer claim. “∀ x ∈ AuthenticatedRequest: deny if riskScore(x) ≥ θ ∧ budgetSlack ≤ β.”

Producer reality. Service A emits Request (no auth guarantee). Option A: A proves it emits AuthenticatedRequest (introduce subkind or strengthen Standard). Option B: Insert adapter that filters/annotates Request → AuthenticatedRequest.

Typed check. Before: no Request ⊑ AuthenticatedRequest. After Option B: adapter supplies the guarantee; repeated use leads to promoting mask to subkind.

Scope. API v2.3; Γ_time = rolling 30 d. R. No Cross‑context reuse; no Φ/Ψ. Evidence: adapter correctness on the TargetSlice.

Outcome. Adopt via Option B; open task: generalize producer to subkind and remove adapter later.

Clinical dosage rule across jurisdictions (bridge + mask)

Claim (Hospital X). “∀ x ∈ AdultPatient: dosage ≤ D per kg for drug M.” Kind. AdultPatient (K2, F4). Mask. AdultPatient@ClinicMask narrows to the clinic’s cohort (deterministic DOB policy).

Reuse in Jurisdiction Y.KindBridge: AdultPatient ↦ AdultPerson_Y, CL^k=1 (18 vs 21 years boundary). – Scope Bridge: coding systems differ (CL depends on mapping quality). – Narrowing: restrict Scope to datasets where DOB granularity supports boundary reconciliation.

Decision. Typed pre‑check via KindBridge: OK. Scope coverage after translate/narrow: OK. Penalties: Φ(CL_scope) and Ψ(1) applied to R. Outcome: Adopt with strong R penalty; plan: negotiate a harmonized boundary to raise CL^k.

ML fairness constraint with typed quantification

Claim (Product Context). “∀ x ∈ EligiblePerson: TPR difference ≤ δ across groups G.”

Kind. EligiblePerson transitions from K1→K2 as attributes and cohorts are formalized (KindSignature F4). Scope. {pipeline=P, features=F, Γ_time=rolling 180 d}.

Cross‑context use. Model team Context has Resident with different feature basis. – KindBridge: EligiblePerson ↦ Resident with CL^k=1 (feature loss). – Scope Bridge: pipeline P → P′, CL=2.

Decision. Typed pre‑check OK via bridges; mapped Scope covers the subset where features align. Apply Φ(2) and Ψ(1) to R; restrict groups to mapped subset; require monitoring freshness. Outcome: Adopt with reduced R and a mitigation note; action items: improve feature mapping and raise KindSignature F.

Anti‑patterns & how to fix them

Use this section as a “red flags” sheet in reviews. Each item links to a concrete remedy that preserves F–G–R & USM discipline (F/G/R separation, USM algebra, typed pre‑checks).

Anti‑pattern (what goes wrong)Why it’s wrong (conceptual fault)The fix (normative/informative pointers)
“We widened G because we reworded the type.”Confuses entityOfConcern (kind) with applicability (scope). Abstract wording ≠ broader scope.Keep typed pre‑check separate (C.3.1 or C.3.3 KindBridge). Widen G only via ΔG+ with support (USM A.2.6).
“Kind scope” block attached to a Kind.Kinds don’t carry Scope; they carry intent/extent.Remove the block. Scope stays on claims/capabilities (USM). If you meant classifier definedness, state it via K‑07 (C.3.2).
Inferring scope from extension size.Scope ≠ Extension; extension is “which instances in a slice,” not “where the claim holds.”Keep G set‑valued over U.ContextSlice (USM). Use MemberOf only inside the typed quantifier.
Mask used as a hidden kind (“just call it the masked kind”).Opaque drift; reviewers can’t see constraints.Register a RoleMask (C.3.4). If reused across guards, promote to subkind with .
Cross‑context reuse with only one bridge.Contexts differ on two characteristics: Scope and Kind.Apply the two‑bridge rule: Scope Bridge (CL → Φ) and KindBridge (CL^k → Ψ). Both penalties land in R.
Using AT (K0…K3) as a gate/threshold.AT is an informative facet, not a Characteristic; gating on AT recreates a G‑ladder.Remove AT from guards. Use it only to aim ΔF/ΔR and to set bridge expectations (C.3.5).
“Automated execution success proves the type claim.”Execution success (F5/6) is not proof (F7+); also confuses R with F.If you need proof‑grade properties, raise F for the claim/KindSignature (C.2.3) or restrict the claim. Keep R as evidence freshness/coverage.
Hidden “latest” in membership or scope checks.Non‑deterministic evaluation; unverifiable audit trail.Declare Γ_time explicitly in Scope (USM). Membership must be deterministic (C.3.2 K‑05/K‑07).
Fixing type mismatch by “unioning scopes.”G‑union cannot repair entityOfConcern mismatches.Introduce a subkind, add an adapter (+evidence), or define a KindBridge.
Collapsing subkinds silently in a bridge.Reviewers don’t see lost distinctions → false confidence.Record loss notes on the KindBridge (C.3.3 KB‑11); consider narrowing mapped Scope or adding an adapter.

Governance & conformance pull‑ups

Contexts adopt Kind‑CAL by meeting the Context‑level obligations below. They summarize, not duplicate, the formal requirements in C.3.1C.3.5 and C.3.A. Use this as an adoption checklist.

Context‑level obligations (must‑haves)

  1. Kinds & order. Maintain a Context catalog of U.Kind with an explicit partial order . – Conformance: C.3.1 (K‑01/K‑02).

  2. Kind signatures (intent). For each Kind, publish a KindSignature with declared F (C.2.3). – Conformance: C.3.2 (K‑03/K‑04).

  3. Deterministic membership. Ensure MemberOf(e,k,slice) is deterministic; declare any definedness domain. – Conformance: C.3.2 (K‑05/K‑07).

  4. Typed guards. When a claim quantifies over kinds, guards SHALL use the typed guard macros (or equivalents) from C.3.A; Scope coverage and typed checks are separate predicates.

  5. Role masks. If a local projection is needed, register a RoleMask (type: constraint/vocabulary/composite); avoid cloning kinds. – Conformance: C.3.4 (RM‑01…RM‑06).

  6. Two‑bridge rule for Cross‑context use.Scope Bridge (Part B) with CL → Φ(CL) to R. – KindBridge (C.3.3) with CL^k → Ψ(CL^k) to R. – Conformance: C.3.3 (KB‑01…KB‑10).

  7. Decision records. For each typed state change, record: TargetSlice tuple, typed compatibility outcome ( or KindBridge), Scope coverage, applied Φ/Ψ penalties to R, and freshness checks.

ESG / Method‑Work template inserts (normative snippets)

  • Kinds used: list U.Kind and any expected subkinds or RoleMasks.
  • Claim scope (G): explicit predicates over U.ContextSlice inc. Γ_time.
  • Typed guard lines: – same Context: k_A ⊑ k_B checked. – Cross Context: KindBridge(k_A → k′_B), CL^k ≥ c_k checked.
  • Scope bridge lines: Bridge(Context_A → Context_B), CL ≥ c_s checked.
  • Assurance lines: Φ(CL), Ψ(CL^k) applied to R; freshness windows hold.

Audits & levels of adoption (informative)

  • USM‑Typed‑Ready. Catalog exists; declared; guard macros installed.
  • USM‑Typed‑Guarded. All typed claims use C.3.A guard shapes; Γ_time explicit; two‑bridge rule enforced.
  • USM‑Typed‑Auditable. Decision records capture TargetSlice, typed checks, bridges, penalties, freshness.
  • USM‑Typed‑Composed. Compositions use typed pre‑check before Scope algebra; independence justified for SpanUnion.

Migration & editorial impact

Apply these edits incrementally; you do not need to stop other work. The aim is to eliminate synonym drift, restore F/G/R separation, and make typed reasoning routine.

Inventory & refactor (steps)

  1. Inventory claims that implicitly talk about “things” (vehicles, requests, accounts, cohorts…).
  2. Name kinds for recurring “entityOfConcern”; start at K1; promote to K2 as invariants stabilize.
  3. Extract KindSignature (aim F4); declare F.
  4. Refactor claims to typed quantification: ∀ x ∈ Extension(k, slice) … plus Scope (G) predicates.
  5. Publish bridges where reuse is Cross‑context: Scope Bridge (CL) and KindBridge (CL^k) with loss notes; wire penalties Φ/Ψ to R.
  6. Normalize masks: register RoleMasks; if reused, promote to subkinds ().

Edits to other parts (normative redirects, no new math)

  • A.2.6 (USM). – Add “no Scope on kinds” note. – In typed examples, show MemberOf definedness + Scope coverage. – Two‑bridge rule for Cross‑context typed reuse.

  • C.2.2 (F–G–R). – Replace any “generality/abstraction” wording with Claim scope (G). – Before scope composition, require typed pre‑check ( or KindBridge). – Distinguish penalties: Φ(CL) vs Ψ(CL^k) → both to R.

  • C.2.3 (F). – Add note: KindSignature has its own F; claim‑level F remains by weakest‑link.

  • Part B (Bridges). – Introduce KindBridge with CL^k, monotone order preservation, loss notes; determinism. – Chaining uses min of levels (weakest‑link) for both CL (Scope bridges) and CL^k (KindBridges).

  • Role‑CAL. – Add RoleMask for kinds; determinism; promotion rule to subkind when reused.

  • Compose‑CAL. – Add typed pre‑check before Scope algebra; forbid “type‑by‑scope”.

  • Part E (Lexicon). – Add: U.Kind, U.SubkindOf (⊑), KindSignature(+F), Extension, MemberOf, U.RoleMask, KindBridge, CL^k, AT (kinds, facet). – Mark as deprecated aliases (not characteristic names): generality (as ladder), kind scope, validity (as characteristic), capability envelope; redirect to Claim/Work scope or Kind entries.

Alias and record continuity

  • Archived prose and cited older records may keep deprecated aliases as labels. Guards, conformance text, and state assertions MUST use the Kind‑CAL/USM vocabulary and guard shapes.
  • When annotating older records, add a small “typed note” box: Kinds, Scope, Bridges (CL/CL^k), loss notes, penalties to R.

Extended rationale & design notes [I]

This section explains the design choices that keep Kind‑CAL compact and interoperable with F–G–R & USM without drifting into tooling or technology stacks.

Why no Scope on kinds

Scope answers “where the claim holds” (set of Context slices, USM); kinds answer “what the claim is about”. Putting Scope on kinds would either (a) duplicate claim Scope, or (b) smuggle applicability into a classifier. We prevent both by: intent/extent on kinds (C.3.2), Scope on claims/capabilities (USM).

Why two bridges (Scope vs Kind)

Contexts diverge along context (Standards, parameters, time) and classification (what counts as a member). A single bridge hides which characteristic is mismatched. Two explicit bridges keep fixes targeted: ΔG / narrowing for context misfit; subkind/adapter for classification misfit. Both risks land in R as separate penalties (Φ/Ψ).

Why AT is a facet

AT (K0…K3) improves planning (ΔF/ΔR, bridge style) and navigation without introducing new algebra. Making AT a Characteristic would recreate a “G‑ladder,” blur applicability with abstraction, and invite gating on AT. As a facet, AT remains helpful but toothless in math, which is precisely what we want.

Why RoleMask and not “clone a kind”

Operational tweaks (extra constraints, local aliases) are real but temporary. Cloning kinds creates drift and duplicate bridges. RoleMask documents the tweak without breaking identity; promotion to subkind occurs when practice stabilizes. This keeps catalogs small and bridges honest.

Fit with Compose‑CAL and LOG‑CAL

Typed pre‑checks (same‑Context or KindBridge) act like port compatibility before any Scope arithmetic. LOG‑CAL benefits from explicit quantification ∀ x : Kind with substitution rules aligned to . Neither alters F/G/R algebra; they prevent category mistakes before we do trust math.

CT2R lens (intuition)

A KindBridge behaves like a functor that (approximately) preserves structure between Contexts; CL^k is a practical knob for “how functorial” it is. At K3 (up‑to‑iso), this is literal: we expect bridges to preserve equivalences, hence higher CL^k and smaller Ψ penalties.

Rationale (Part E form)

Problem. (recap) — Authors conflate entityOfConcern with applicability, widening G by abstract wording. — Cross‑context reuse drifts semantically without declared mappings or risk accounting. — Planning misfires: over‑formalization for instance claims; under‑testing for class claims. — Unsafe compositions when entityOfConcern is implicit.

Forces. (recap) — Local freedom vs global sense; minimality vs utility; intent vs extent; typed discipline vs F–G–R; abstraction vs applicability.

Decision (C.3‑D1…D7). — D1: U.Kind is intensional and context‑local ( partial order). — D2: Separate intent (KindSignature + F) and extent (Extension/MemberOf@slice). — D3: No Scope on kinds (Scope lives with claims/capabilities via USM). — D4: Typed reuse is explicit: KindBridge + CL^k, penalties route to R only. — D5: Local adaptation via RoleMask; promote stable masks to subkinds. — D6: AT (K0…K3) as facet, not a Characteristic; never used in guards. — D7: Guard shapes: typed pre‑check → scope coverage → penalties/freshness.

Consequences. (+) Predictable Cross‑context reuse: two‑bridge rule, separate penalties (Φ/Ψ) to R. (+) Manager‑friendly planning: AT guides ΔF/ΔR; typed pre‑check blocks category mistakes. (+) Clean F–G–R discipline: no “G‑ladder,” no hidden scope inside classifiers. (−) Editorial discipline required: no “Kind scope”; masks must be cataloged; promote when stable. (−) Initial bridge authoring cost; mitigated by loss‑notes and reuse.

Alternatives considered.Global U.Type: rejected as either too thin or too prescriptive across Contexts. — “Kind scope” in USM: rejected; duplicates/obscures Scope vs Extension split.

Known uses. — §11.1 (cyber‑physical braking); §11.2 (API with adapter); §11.3 (clinical dosage); §11.4 (ML fairness). — ESG guard shapes in C.3.A; typed pre‑check in Compose‑CAL (§7.2.4).

Related patterns. A.2.6 (USM), C.2.2 (F–G–R), C.2.3 (F), Part B (Bridges), Role‑CAL, Compose‑CAL, C.3.1C.3.5, C.3.A.

Quick reference for managers

10‑minute start

  1. Name the Kind your claim talks about.
  2. Write Scope (G) as slice predicates (with Γ_time).
  3. If composing, check or KindBridge first.
  4. Use the typed guard macro (C.3.A).
  5. Route bridge levels to R (Φ/Ψ); check freshness.

30‑day rollout plan

Week 1: Inventory & name Kinds (K1); adopt guard macros. Week 2: Draft KindSignature for the top 5 Kinds (aim F4); register masks. Week 3: Wire two‑bridge rule into ESG; add CL/CL^k lines to decision templates. Week 4: Promote repeated masks to subkinds; publish first KindBridge records with loss notes.

Local glossary (reading aid)

Canonical definitions live in sub‑patterns; this list is for quick recall while reading C.3.

  • U.Kind — Minimal intensional “type/kind” object; carries KindSignature and (C.3.1/C.3.2).
  • U.SubkindOf (⊑) — Partial order on kinds (C.3.1).
  • KindSignature(k) — Predicate‑like intent that defines the kind; has its own F (C.3.2).
  • Extension(k, slice) — Set of instances of k inside a U.ContextSlice (C.3.2).
  • MemberOf(e, k, slice) — Boolean membership predicate (C.3.2).
  • RoleMask(k, Context) — Registered adaptation (constraints/aliases; optional narrowing), no new kind (C.3.4).
  • KindBridge — Cross‑context mapping for kinds (intent/order) with CL^k and loss notes (C.3.3).
  • CL^k — Kind‑congruence level; penalty Ψ(CL^k) goes to R (C.3.3).
  • AT (K0…K3) — Informative facet of a Kind; aids planning/navigation; never used in guards (C.3.5).
  • Guard macros — Typed guard shapes for ESG/composition (C.3.A).

End of C.3. See C.3.1C.3.5 and C.3.A for the referenced mechanics and guard macros.

C.3:End

U.Kind & SubkindOf (Core)

One‑line summary. Defines U.Kind as a minimal, context‑local intensional carrier for “what a claim is about,” and U.SubkindOf (⊑) as a partial order over kinds. Kinds do not carry Scope. Scope remains on claims/capabilities (USM). This core pattern supplies only identity, locality, and ordering; intent & membership (KindSignature, Extension/MemberOf) are specified in C.3.2, bridges & congruence in C.3.3, masks in C.3.4, and the AT facet in C.3.5.

Status. Normative in Part C. Identifier C.3.1. Audience. Engineering managers, architects, assurance leads.

Dependencies.

  • A.2.6 USM (Unified Scope Mechanism). Scope is a set‑valued USM property over U.ContextSlice on claims/capabilities; algebra: (membership), (intersection), SpanUnion (union across independent lines), translate (scope mapping).
  • C.2.2 F–G–R. F = formality of expression; G = Claim scope; R = assurance/evidence; weakest‑link for F/R; CL penalties feed R, not F/G.
  • C.2.3 U.Formality (F). Ordinal F0…F9; no arithmetic; applies to all content, including Kind signatures (defined in C.3.2).
  • Part B Bridges & CL. Generic (scope) bridges and CL; Kind bridges are specialized in C.3.3.

Non‑goals.

  • No data governance or repository/notation mandates.
  • No membership or signature semantics here (defined in C.3.2).
  • No Cross‑context mapping/congruence here (defined in C.3.3).
  • No role/mask mechanics here (defined in C.3.4).
  • No AT facet mechanics here (defined in C.3.5).

Purpose & Audience

This pattern gives one small, stable vocabulary to say what a claim ranges over (its entityOfConcern) without entangling that with where it applies (Scope) or how well it is supported (R). For managers:

  • It prevents the costly mistake “more abstract wording ⇒ wider scope.”
  • It enables typed composition (you cannot combine claims about incompatible “things”).
  • It keeps Scope and Assurance math unchanged and predictable.

Context

across Contexts, “type” means OWL class, SHACL shape, code type, BORO category, etc. A neutral, minimal object is needed to name the kind of entities a claim quantifies over without importing a full type system or altering USM. U.Kind fills that role; ordering between kinds captures “is‑a/refines” relationships a Context relies on.

Problem

  1. Scope–Type conflation. Teams broaden G by “abstracting” prose, not by adding supported slices.
  2. Unsafe composition. Claims are joined though they talk about different “things.”
  3. Cross‑context drift. Without an explicit core notion of kind, bridges blur entityOfConcern vs applicability.

Forces

ForceTension to resolve
Minimality vs utilityKeep the core tiny yet sufficient for composition and governance.
Locality vs reuseKinds are context‑local, but projects reuse claims across Contexts via bridges.
entityOfConcern vs applicabilityOrdering should not leak into Scope; kinds must not carry G.
Neutrality vs specificityAvoid committing to any particular type/ontology stack or notation.

Solution — Core Objects (overview)

  • U.Kind — a context‑local intensional object naming a “kind of thing” claims may quantify over.
  • U.SubkindOf (⊑) — a partial order on kinds (reflexive, transitive, antisymmetric). k₁ ⊑ k₂ reads “k₁ refines k₂.”

No Scope on kinds. Scope is for claims/capabilities (USM). Kinds supply entityOfConcern only; membership and signature live in C.3.2.

Norms & Invariants (normative)

C3.1‑K‑01 (Partial order). U.SubkindOf (⊑) SHALL be a partial order on U.Kind: reflexive, transitive, antisymmetric. Editors SHALL document any Context‑specific meets/joins if they supply them (optional).

C3.1‑K‑02 (No Scope on kinds). A U.Kind MUST NOT carry a Scope value. Scope lives with claims (U.ClaimScope = G) and capabilities (U.WorkScope) per A.2.6. Rationale pointer: see C.3.2 for the intent/extent vs Scope split.

C3.1‑K‑03 (Identity & locality). A U.Kind is context‑local. Cross‑context mapping of kinds is handled by KindBridge (see C.3.3); such mapping MUST NOT be conflated with Scope bridging.

C3.1‑K‑04 (Naming). A Context SHALL assign stable identifiers to kinds and SHOULD catalog parent/child links. Synonyms/aliases SHALL point to the canonical kind id.

C3.1‑K‑05 (Separation of concerns). This core does not define kind intent or membership; those are specified in C.3.2 (KindSignature with its own F; Extension/MemberOf and determinism).

Interactions (informative)

  • With USM (A.2.6). Guards that quantify over a kind use two predicates: “Scope covers TargetSlice” (USM) and whatever membership predicate is defined for the kind (see C.3.2). Kinds themselves carry no Scope.
  • With F–G–R (C.2.2). This pattern does not alter the triple; typed checks happen before scope algebra, preventing invalid compositions.
  • Order of checks reference. See Annex C.3.A §5 (E‑01) for the normative evaluation order: typed compatibility first, then Scope coverage, then penalties to R and freshness.
  • With Formality (C.2.3). A KindSignature (C.3.2) declares its F; claims retain their own F via weakest‑link.
  • With Bridges (Part B). Use KindBridge (C.3.3) for entityOfConcern; use Scope Bridge (Part B) for applicability. Penalties land in R via different channels.

Authoring & Review (informative)

When to mint a kind. Mint a U.Kind when claims repeatedly quantify over “the same sort of thing” and you need: (i) safe composition, (ii) clear Cross‑context mapping, (iii) a place to collect invariants (in C.3.2).

Don’t over‑mint. If a local constraint is temporary or purely procedural, prefer a RoleMask (C.3.4) over a new subkind.

Review prompts.

  1. Does the draft introduce a new entityOfConcern concept? → consider a kind.
  2. Does prose hint at “is‑a” relationships? → capture as , not as scope widening.
  3. Are authors trying to widen scope by abstracting wording? → stop; widen G only via ΔG (USM) with support.

Examples (informative, technology‑neutral)

  1. Vehicle/PassengerCar. Mint Kind Vehicle. Later add PassengerCar ⊑ Vehicle. Claims about Vehicle may be reused by narrowing to PassengerCar without touching G. Scope remains an independent predicate over U.ContextSlice.

  2. Request/AuthenticatedRequest. If multiple policies speak about “authenticated requests,” declare AuthenticatedRequest ⊑ Request. Do not widen G to compensate for missing authentication; either change the producer’s kind or insert an adapter (C.3.2/C.3.4) while keeping G honest.

Conformance checklist (normative)

IDRequirement
C3.1‑K‑01U.SubkindOf (⊑) is a partial order (reflexive, transitive, antisymmetric).
C3.1‑K‑02U.Kind does not carry Scope. Scope remains on claims/capabilities per A.2.6.
C3.1‑K‑03Kinds are context‑local; Cross‑context mapping uses KindBridge (C.3.3), not Scope bridges.
C3.1‑K‑04Kinds have stable ids; synonyms redirect; Contexts catalog links.
C3.1‑K‑05No intent/membership in this core; refer to C.3.2 for KindSignature and Extension/MemberOf.

Rationale (informative)

Why a tiny core? Contexts differ wildly in “type” practice. A large, prescriptive core would either (a) force one Tradition’s semantics on all, or (b) become an empty label. The smallest powerful core—identity + ordering—gives managers and integrators what they need (safe composition, predictable edits) and leaves intent/membership/bridges/masks to focused sub‑patterns.

Why “no Scope on kinds”? Scope (USM) answers “where a claim/capability holds” over U.ContextSlice. Kinds answer “what the claim ranges over.” Blending them recreates the failure mode we are removing (“higher abstraction ⇒ wider scope”). The right split is:

  • Kind: intensional name + order () (this pattern); intent & membership (C.3.2).
  • Scope: set of context slices (A.2.6).
  • Assurance: evidence & penalties (C.2.2 / Part B).

C.3.1:End

KindSignature (+F) & Extension/MemberOf

One‑line summary. Specifies the intent and extent of kinds: (i) a KindSignature(k) (the intensional definition of kind k) that declares its own Formality F; (ii) an Extension(k, slice) ⊆ U.EntitySet(slice) and the membership predicate MemberOf(e, k, slice) that are deterministic per U.ContextSlice; (iii) monotonicity of extension under SubkindOf; (iv) a definedness policy that fails closed outside its domain. Kinds still carry no Scope (that rule lives in C.3.1); Scope stays on claims/capabilities (USM). This pattern gives managers and reviewers the observable basis to check “what counts as a member here and now” without entangling applicability (G) or assurance (R).

Status. Normative in Part C. Identifier C.3.2. Audience. Engineering managers, architects, assurance leads, editors.

Depends on.

  • C.3.1 (U.Kind & SubkindOf Core): kinds are context‑local; is a partial order; kinds carry no Scope.
  • A.2.6 USM (Context slices & Scopes): Claim scope (G) and Work scope live on claims/capabilities; algebra (membership), (intersection), SpanUnion (union across independent lines), translate (scope mapping).
  • C.2.3 U.Formality (F): ordinal F0…F9; no arithmetic; weakest‑link composition applies to content that depends on the signature.
  • C.2.2 F–G–R: assurance calculus; CL penalties feed R, not F/G.
  • Part B (Scope Bridges & CL). CL (scope congruence) and scope translation live in Part B/USM; kind‑congruence CL^k and kind mapping live in C.3.3 (KindBridge).

Non‑goals.

  • No Scope semantics here (USM); no bridge semantics here (C.3.3).
  • No repository/notation mandates; this is concept‑level, not tooling.

Purpose & Audience

This pattern makes entityOfConcern testable in a Context:

  • Authors get a place to write what defines a kind (KindSignature) and at what rigor (F).
  • Reviewers can ask deterministic questions: “Given this TargetSlice, which entities are in k?”
  • Managers can plan ΔF (raise signature rigor) and ΔR (evidence over members) without changing G (applicability).

No tooling assumption. The pattern is conceptual and notation‑neutral (no OWL/SHACL/type‑system requirement); it specifies reviewer‑checkable obligations that managers can read in plain language.

Context

Different Contexts encode “type” intent differently (predicates, schemas, ontologies, Standards). Regardless of notation, a team must be able to answer, reproducibly: who belongs to the kind at this slice? If this is not stable, claims quantified over the kind are unverifiable, bridges are opaque, and composition becomes unsafe.

Problem

  1. Ambiguous membership. Membership depends on tacit “latest” states or unwritten defaults.
  2. Signature opacity. A kind’s definition is scattered; no single place to declare rigor (F) or assumptions.
  3. Order violations. Subkind hierarchies do not guarantee subset behavior in practice.
  4. Scope leakage. Teams smuggle applicability (G) into kind definitions, recreating G‑ladders by another name.

Forces

ForceTension to resolve
Local freedom vs comparabilityContexts need their own notations, but membership must be checkable in a common style.
Expressivity vs determinismRich intent is welcome, but membership must be deterministic given slice.
Intent vs applicabilityDefine “what counts” (intent/extent) without encoding “where valid” (G).
Rigor vs costRaising signature F has cost; the framework must support low‑F drafts and high‑F safety cores alike.

Solution — Objects & Standards (overview)

  • KindSignature(k) — the intensional definition of kind k in the Context; it declares U.Formality per C.2.3.
  • U.EntitySet(slice) — the set (or well‑defined universe) of entities addressable in a given U.ContextSlice.
  • Extension(k, slice) ⊆ U.EntitySet(slice)which entities belong to k at slice.
  • MemberOf(e, k, slice) — membership predicate: e ∈ Extension(k, slice).

Design split.

  • Intent lives in KindSignature (with F).
  • Extent is computed per slice via MemberOf.
  • Applicability (where a claim holds) remains a Scope on the claim (USM) and MUST NOT be encoded into KindSignature.

Norms & Invariants (normative)

IDs C3.2‑K‑03…K‑08 correspond to the rules announced in C.3; additional local rules use C3.2‑S‑*.

Signature & Formality

C3.2‑K‑03 (Signature F). Every KindSignature(k) SHALL declare U.Formality per C.2.3 (F0…F9). — Note: Raising signature F does not automatically raise claim‑level F; claims follow weakest‑link along their own support paths.

C3.2‑K‑04 (Signature change = content change). Any change to KindSignature(k) that alters membership (i.e., would change Extension(k, slice) for some slice) SHALL be recorded as a content change (Contexts may version kinds).

Extension & Membership

C3.2‑K‑05 (Deterministic membership). For fixed (k, slice), MemberOf(e, k, slice) MUST be deterministically evaluable from observable content in slice. — Implication: “latest” is forbidden; Γ_time must be explicit on slice (A.2.6). — If a classifier makes external assumptions, they MUST be named in KindSignature.

C3.2‑K‑06 (Monotone in ). If k₁ ⊑ k₂, then for every slice: Extension(k₁, slice) ⊆ Extension(k₂, slice).

C3.2‑K‑07 (Definedness & fail‑closed). Each Context MAY restrict the domain of definedness for MemberOf(–, k, –) (e.g., only when a Standard or dataset is present at a given version). Outside that domain, MemberOf MUST be treated as not defined for guard purposes, and guards MUST fail closed (deny). Implementations MAY internally return False, but there MUST be no path where undefined membership yields implicit success.

C3.2‑K‑08 (Separation from G). Guards SHALL keep Scope coverage (USM) and membership as separate predicates: “U.ClaimScope(Claim) covers TargetSlice AND MemberOf(?, k, TargetSlice) is defined/used”.

Entity set & time

C3.2‑S‑01 (U.EntitySet). A Context SHALL document what counts as U.EntitySet(slice) (e.g., “rows in dataset D at version v,” “live objects in service S at build b,” “ontology individuals at vocabulary v”). This documentation MUST be stable and addressable via the slice tuple. C3.2‑S‑02 (Time). slice SHALL specify Γ_time (point/window/policy). Membership MUST NOT rely on implicit recency.

U.EntitySet(slice) MUST NOT expand implicitly via external defaults or time; its extent is fixed by the slice tuple (see C3.2‑S‑02).

Interactions & Placement (informative)

  • With C.3.1. Kinds carry identity and ; no Scope on kinds. This pattern adds the intent/extent layer under those constraints.
  • With A.2.6 (USM). A typed claim’s guard normally evaluates, in the order specified by Annex C.3.A §5 (E‑01): (1) typed compatibility, (2) Scope coverage at TargetSlice, (3) MemberOf(?, k, TargetSlice) definedness and any instantiation, followed by penalties to R and freshness checks. Use Guard_TypedClaim / Guard_TypedJoin rather than ad‑hoc shapes.
  • With C.2.3 (F). Signature F influences claims only if the claim depends on the signature content; weakest‑link min applies along the claim’s support path.
  • With C.3.3 (KindBridge). When MemberOf is computed via a kind mapping across Contexts, kind‑congruence CL^k contributes a **monotone penalty to R only (Ψ(CL^k)); F/G MUST NOT be adjusted.
  • With Role‑CAL (C.3.4). A RoleMask may narrow membership (context‑local adaptation). Frequent masks that encode stable narrowing SHOULD be promoted to subkinds ().

Authoring & Review Guidance (informative)

Authoring KindSignature

  • Be explicit and observable. Prefer predicate‑like clauses over prose (“has VIN format …”; “axles ≥ 2”).
  • Bind to versions. Name Standards/schemas by version; avoid “current.”
  • Declare F honestly. F3 for controlled narrative is fine in early phases; aim F4+ for durable kinds; consider F7+ for safety‑critical cores.
  • Name assumptions. If membership requires external conditions (e.g., calibrated rig), put them in the signature.

Authoring membership

  • Define U.EntitySet(slice). Write it down once per Context, make it addressable via the slice tuple, and reuse.
  • Determinism first. No hidden IO, no implicit time; membership must be recomputable from the slice.
  • Document definedness. If MemberOf is undefined without a Standard, say so; guards will fail closed.
  • Respect . If you declare k₁ ⊑ k₂, verify subset behavior (C3.2‑K‑06).

Review checklist (10 minutes)

  1. Is signature F declared? Is the signature sufficient to evaluate membership?
  2. Is U.EntitySet(slice) documented and addressable?
  3. Is membership deterministic with explicit Γ_time (no “latest”)?
  4. If links exist, does subset behavior hold at sample slices?
  5. Are Scope and membership kept separate in guards?
  6. Any Cross‑context classification? If yes, is KindBridge referenced (C.3.3)?

Worked Examples (informative)

Vehicle (signature F4) and membership

KindSignature(Vehicle) (F4):

  • hasVIN(x) is true and parseable;
  • axles(x) ≥ 2;
  • hasBrakeSystem(x);
  • Standards: registryAPI v1.4; Γ_time policy: rolling 365 d for registry fields.

U.EntitySet(slice): “records in registryAPI v1.4 for plant A at build b, as of Γ_time.” Extension(Vehicle, slice): all records satisfying the predicates in that slice. Monotonicity: PassengerCar ⊑ VehicleExtension(PassengerCar, s) ⊆ Extension(Vehicle, s).

AuthenticatedRequest (definedness & fail‑closed)

KindSignature(AuthenticatedRequest) (F4):

  • Request with authHeader present and authSignature valid according to AuthStandard v2.3;
  • Γ_time: point in time for key validity check.

Definedness: MemberOf(–, AuthenticatedRequest, slice) is undefined if AuthStandard v2.3 is absent in slice ⇒ guards fail closed (C3.2‑K‑07).

Clinical cohort (low‑F signature; deterministic membership)

KindSignature(AdultPatient) (F3→F4 as it hardens):

  • ageYears(x, Γ_time) ≥ N (jurisdictional N varies; recorded in the Context’s signature note).
  • EntitySet(slice): EHR ehr‑east v7.5 @ Γ_time;
  • Membership deterministic if DOB present; undefined otherwise (fail closed).

Anti‑patterns & Remedies (informative)

Anti‑patternWhy it’s wrongRemedy
Using “latest” implicitly in membershipNon‑deterministic; unreproducibleRequire explicit Γ_time; treat freshness separately in R
Encoding Scope (“only in EU plant”) in the signatureConfuses applicability with entityOfConcernMove such conditions to Claim scope (G); keep signature general
Declaring k₁ ⊑ k₂ but not ensuring subset behaviorBreaks typed reasoningTighten KindSignature or drop the link
Treating RoleMask as a different kindCatalog sprawl; hidden semanticsKeep mask as adaptation; promote to subkind if widely reused
Membership relying on external, unnamed assumptionsHidden dependencies; review fatigueName assumptions in the signature; point to Standards/versions

Rationale (informative)

Why give F to KindSignature?

Because rigor in the definition of a kind materially affects how safely teams can quantify over it. A signature at F4 (predicate‑like) makes membership checkable in principle; F7+ (machine‑checked) can support proof‑carrying development. Keeping this separate from claim‑level F prevents “signature formalization” from inflating unrelated claims.

Why Extension is not Scope

  • Extension answers: “Which entities count as k in this slice?”
  • Scope (G) answers: “In which slices does this claim hold?” Blending the two recreates the old failure mode where “more abstract wording” was treated as “wider applicability.” USM already gives the set‑algebra for G; Kind‑CAL supplies the typed universe the claim quantifies over.

Why determinism and fail‑closed?

Guards must be reproducible and auditable: same slice ⇒ same membership result. If inputs are missing (undefinedness), the safest default is deny (fail closed), prompting either a richer slice or a scope/claim change.

Conformance checklist (normative)

IDRequirement
C3.2‑K‑03Every KindSignature(k) declares U.Formality (F0…F9).
C3.2‑K‑04Signature changes that alter membership are content changes (Contexts may version kinds).
C3.2‑K‑05MemberOf(e, k, slice) is deterministic for fixed (k, slice) (no “latest”).
C3.2‑K‑06Monotonicity: if k₁ ⊑ k₂ then Extension(k₁, s) ⊆ Extension(k₂, s) for all s.
C3.2‑K‑07Definedness: outside domain, membership fails closed; guards deny use.
C3.2‑K‑08Separation: guards keep Scope coverage (USM) and membership as distinct predicates.
C3.2‑S‑01The Context documents U.EntitySet(slice) (stable, addressable via slice).
C3.2‑S‑02slice specifies Γ_time; membership must not rely on implicit recency.

C.3.2:End

KindBridge & CL^k — Cross‑context Mapping of Kinds

One‑line summary. Defines KindBridge as the normative mechanism for moving kinds (their intent and selected subkind‑of links) between bounded contexts (“Contexts”). A bridge declares how a source kind maps to a target kind, which parts of the order are preserved or collapsed, and publishes a type‑congruence level CL^k with loss notes and a definedness area. CL^k penalties apply only to Reliability (R) when a claim depends on Cross‑context classification; F (formality) and G (Claim scope) remain unchanged. Scope translation continues to use the USM Bridge + CL channel; KindBridge is a separate, parallel channel for EntityOfConcern.

Status. Normative in Part C. Identifier C.3.3. Audience. Engineering managers, architects, assurance leads, editors.

Depends on.

  • C.3.1 — U.Kind & SubkindOf (Core): kinds are context-local U.Kind records; is a partial order; kinds do not carry Scope.
  • C.3.2 — KindSignature (+F) & Extension/MemberOf: signature declares its own F; membership MemberOf(e,k,slice) is deterministic per U.ContextSlice.
  • A.2.6 — USM (Context slices & Scopes): Claim scope (G) and Work scope live on claims/capabilities; scope bridging and CL penalties are defined there.
  • C.2.2 — F–G–R: weakest‑link; penalties land in R, not F/G.
  • C.2.3 — U.Formality (F): signature rigor.

Non‑goals. — No repository/notation mandates; conceptual only. — No Scope mapping here (that’s USM); KindBridge maps kinds, not scopes. — No new arithmetic on CL^k; it reuses the ordinal anchor semantics of CL (Part B) but applies to kinds.

Purpose & Audience

Cross‑context reuse fails in two orthogonal ways:

  1. Applicability (G): where the claim holds (handled by USM Scope Bridge).
  2. entityOfConcern (Kind): what the claim quantifies over (handled by KindBridge).

C.3.3 gives managers an explicit, auditable channel for (2), so a team can say, with evidence: Vehicle in Lab maps to TransportUnit in Plant with CL^k=2; the EV subkind collapses; here’s what we lost.” Guards stay deterministic; assurance math stays clean (penalties in R only).

Context

Contexts use different classifications: ontology classes vs shape Standards, regulatory cohorts vs app types, etc. Informal “same‑name” reuse silently mutates entityOfConcern. USM already made scope moves explicit. KindBridge does the same for kinds: declare the mapping, rate its congruence, and capture known losses.

Problem

  1. Semantic drift. Moving a claim into a target‑context with a different taxonomy changes “what counts” without anyone noticing.
  2. Hidden order breaks. Subkind relationships invert or vanish; downstream proofs/tests are misapplied.
  3. Entangled channels. Teams conflate “scope mapping” with “kind mapping,” making it impossible to assign penalties coherently.
  4. Incomputable guards. “We map it somehow” yields non‑deterministic classification at guard time.

Forces

ForceTension to resolve
Minimal disclosure vs precisionBridges must be light to write yet precise enough to avoid semantic drift.
Local autonomy vs global reuseEach target‑context keeps its vocabulary; reuse requires explicit, reviewable mappings.
Typed safety vs agilityWe need typed compatibility checks without blocking exploratory reuse.
Separate channels vs operator workloadTwo channels (Scope & Kind) must be explicit, but guard writers shouldn’t drown in boilerplate.

Solution — The KindBridge object (overview)

A KindBridge connects source Context A and target Context B for a set of kinds. It declares:

  1. Mapping of kinds: either to named target kinds or via signature translation rules.
  2. Order preservation: which links are preserved (monotone), which are collapsed, and which are unknown (not claimed).
  3. Type‑congruence CL^k: reuses the same anchors/labels as CL (Part B) but applies to kind intent/order (not to Scope). Gloss: higher CL^k ⇒ closer preservation of kind intent and declared links.
  4. Loss notes: human‑readable list of invariants and subkinds not preserved.
  5. Definedness area: the subset of U.ContextSlice characteristics where the mapping is intended to be used (e.g., certain Standards/versions).
  6. Determinism: fixed versions + mapping rules ⇒ deterministic result (no “latest”).

Effect on assurance. When a claim in B depends on classification that goes through this bridge, reduce R by a monotone penalty Ψ(CL^k). Do not change F or G.

Norms & Invariants (normative)

The following formalize the KB‑01…KB‑12 rules announced in C.3.

Subject & Scope of a KindBridge

KB‑01 (Subject). A KindBridge maps:

  • one or more KindSignature(s) from source to target; and
  • an explicitly declared subset of links (which it claims to preserve or collapse).

KB‑02 (No Scope). A KindBridge MUST NOT map Claim/Work scope (G). Scope translation uses the USM Bridge + CL channel (A.2.6, Part B).

No blended score. Congruence for Scope (CL) and for Kind (CL^k) MUST NOT be aggregated into a single “interoperability” score in guards; each channel is assessed and penalized separately. See Annex C.3.A §5 (E‑06).

Declaration & Shape

KB‑03 (Declaration). A KindBridge record SHALL include:

  1. source Contexts, target Contexts, and vocabulary or Standard versions;
  2. a kind mapping per source kind k: either a named target kind k′ or a signature translation rule that constructs the target‑context KindSignature(k′) (the result is declared and versioned in the target Context);
  3. an order preservation claim for any k₁ ⊑ k₂ it covers: preserved / collapsed / unknown;
  4. CL^k value (using the CL anchor ladder) labeled “kind‑congruence”;
  5. loss notes (non‑preserved invariants, collapsed subkinds, equality quirks);
  6. definedness area (constraints on U.ContextSlice dimensions where the bridge is meant to apply).

KB‑04 (Determinism & local evaluation). Given fixed Context versions and mapping rules, translateₖ MUST be deterministic (no implicit “latest”). After mapping to k′, membership SHALL be evaluated using the target Context’s own KindSignature(k′) and MemberOf(–, k′, –); source‑context membership results MUST NOT be reused as truth in guards (they may be cited as evidence in R).

Order & Monotonicity

KB‑05 (Monotone order). If the bridge claims to preserve k₁ ⊑ k₂, then in the target Context translateₖ(k₁) ⊑′ translateₖ(k₂) MUST hold. KB‑06 (No inversions). The bridge MUST NOT assert preserved links that invert order. If real‑world constraints force reversal, the link MUST be marked not preserved with a loss note. KB‑07 (Collapse semantics). Marking a link as collapsed is allowed (two subkinds mapped to one target kind), but the record SHALL list the merged subkinds and any properties thereby lost.

Congruence & Assurance

KB‑08 (Anchor reuse & AT neutrality). CL^k reuses the ordinal anchor semantics of CL (Part B) but applies to kinds. Editors SHALL label it explicitly as kind‑congruence to avoid confusion with Scope CL. KindBridge records MUST NOT compute or alter KindAT (C.3.5 AT‑04); AT is editorial and independent of CL^k. KB‑09 (Effect on R only). When a claim in the target Context depends on MemberOf(–, translateₖ(k), TargetSlice), a monotone penalty Ψ(CL^k) SHALL reduce R (alongside any Φ(CL) penalty from the Scope Bridge). Implementations MUST NOT adjust F or G due to CL^k. KB‑10 (Chaining). For a chain of bridges, effective CL^k = min of the links (weakest‑link).

Loss Notes & Definedness

KB‑11 (Loss notes). Bridges SHALL publish human‑readable loss notes: which invariants of KindSignature are not preserved, which subkinds are collapsed, and any higher‑equality caveats (e.g., up‑to‑iso only). KB‑12 (Definedness & guard use). The bridge’s definedness area SHALL be stated. Guards MUST fail closed outside it (i.e., if a classification relies on the bridge where it is not defined, the guard denies use).

Interactions (informative)

With USM Scope bridges (two channels)

When using a claim across Contexts, expect two concurrent bridges:

  • Scope Bridge (USM): maps G; publishes CL; penalty Φ(CL) to R.
  • KindBridge (this pattern): maps kinds; publishes CL^k; penalty Ψ(CL^k) to R.

Discipline: compute both; do not collapse them into one “interoperability score.”

See Annex C.3.A §5 (E‑01) for the normative evaluation order in guards.

With membership (C.3.2)

After mapping k to k′ = translateₖ(k), the target Context evaluates membership as usual: MemberOf(e, k′, TargetSlice). If the bridge provides a signature translation, that definition becomes the local KindSignature(k′) (versioned per target Context policy).

With Role masks (C.3.4)

If a claim uses a RoleMask(k) across Contexts, you need:

  • a KindBridge for k (CL^k + loss notes), and
  • a documented mask adapter (how mask constraints translate). Penalties still land in R. If the mask’s effect is stable and widely reused, consider promoting it to a subkind on the target side.

With guards (Annex C.3.A)

Use the Guard_XContext_Typed macro (Annex C.3.A), which requires both bridges and applies both penalties to R:

  • find Scope bridge (CL≥threshold), translate G, check coverage;
  • find KindBridge (CL^k≥threshold), translate kind, check membership definedness;
  • apply Φ(CL) and Ψ(CL^k) to R; keep F/G untouched.

Authoring, Review & Rating Guidance (informative)

Authoring a KindBridge

  • Start narrow & honest. Declare only the kinds and links you actually preserve; mark the rest unknown.
  • Prefer named targets. If the target already has a suitable kind, map to it; use signature translation only when necessary, and list what is preserved, relaxed, or dropped.
  • Write loss notes in plain language. Example: “EV vs ICE subkinds collapsed; battery‑health invariants dropped.”
  • Fix the definedness area. Bind to target Standards/versions and any environment selectors essential to classification.
  • Assign CL^k from exemplars. Calibrate on concrete counter‑examples and preserved properties; resist optimistic ratings.

Review playbook (10 minutes)

  1. Two bridges present? Scope Bridge and KindBridge?
  2. Order claims honest? Any inversions? Collapses disclosed?
  3. CL^k plausible? Based on preserved properties, not name similarity?
  4. Loss notes present? Will they force narrowing of Scope or extra tests?
  5. Definedness area clear? Guard will fail closed outside it?
  6. Penalties wired to R? No hidden tweaks to F/G?

Rating CL^k (rules of thumb)

  • High CL^k: signature equivalence or up‑to‑iso; fragment preserved; only cosmetic losses.
  • Medium CL^k: some invariants relaxed or lost; selected subkinds collapsed; order preserved on critical path.
  • Low CL^k: name‑only correspondences; properties diverge; order not preserved. Expect significant R penalty and/or adapters.

Worked Examples (informative)

Vehicle → TransportUnit (manufacturing)

Source kind: Vehicle (K2, signature F4). target Context: PlantB, kind TransportUnit exists.

KindBridge:

  • Vehicle ↦ TransportUnit; order: preserves PassengerCar ⊑ Vehicle; collapses EV ⊑ Vehicle into TransportUnit (no EV subkind).
  • CL^k=2 (mid); loss notes: “battery‑health invariants not carried”; definedness: only for registryAPI v1.4, Γ_time in last 365 d.

Use: Claim quantified over Vehicle crosses to PlantB. Guards: scope bridge CL=2 (rig bias); kind bridge CL^k=2; both penalties reduce R. F/G unchanged.

AuthenticatedRequest across services (software)

Source kind: AuthenticatedRequest defined by AuthStandard v2.3. target Context: Frontend with different auth header scheme.

KindBridge: signature translation (authHeaderx‑auth), preserves “signature valid” property; CL^k=3 (high). Loss notes: none; definedness: only where AuthStandard v2.3 is in scope.

Effect: Rules quantified over AuthenticatedRequest can be reused; R penalty small (Ψ(3) near 1). Scope remains independent (API v2.3).

AdultPatient across jurisdictions (clinical)

Source kind: AdultPatient (≥ 18 at Γ_time). target Context: JurisdictionY uses ≥ 21.

KindBridge: AdultPatient ↦ AdultPerson_Y with boundary mismatch; CL^k=1. Loss notes: “Boundary 18 vs 21; map narrows to ≥ 21”. Guard: Require mask adapter or narrow Scope to cohorts where DOB is known and ≥ 21. R penalty strong; F/G remain as declared.

Anti‑patterns & Remedies (informative)

Anti‑patternWhy it’s wrongRemedy
One “interop score” for both kind & scopeBlurs channels; corrupts penaltiesUse two bridges; apply Φ(CL) (Scope) and Ψ(CL^k) (Kind) separately
Claiming preserved while inverting orderMakes typed reasoning unsoundMark as not preserved; add loss note; consider adapter or subkind redesign
Hiding collapsesOverstates coverageList collapsed subkinds explicitly; plan extra R for lost granularity
“Latest mapping”Non‑deterministic; non‑auditableVersion bridges; bind to Standards/versions; fail closed outside definedness
Using KindBridge to widen GConflates entityOfConcern with applicabilityKeep Scope edits in USM (ΔG±); KindBridge never widens Scope
Adjusting F/G for poor CL^kViolates F–G–R & USM separationRoute consequences to R only; consider narrowing Scope or adding adapters

Conformance Checklist (normative)

IDRequirement
KB‑01A KindBridge maps KindSignature(s) and an explicitly declared subset of links.
KB‑02A KindBridge MUST NOT map Scope; Scope uses USM Bridge (Part B).
KB‑03Bridge records SHALL include Contexts/versions, kind mapping/rules, order‑preservation claims, CL^k, loss notes, and definedness area.
KB‑04Mapping MUST be deterministic given fixed versions/rules (no “latest”).
KB‑05Preserved order links MUST stay monotone: k₁ ⊑ k₂translateₖ(k₁) ⊑′ translateₖ(k₂).
KB‑06No inversions: preserved links cannot invert order; otherwise mark not preserved and add loss notes.
KB‑07Collapses are allowed but MUST list merged subkinds and lost properties.
KB‑08CL^k SHALL reuse CL anchors and be labeled “kind‑congruence.”
KB‑09Penalties: when classification uses KindBridge, apply Ψ(CL^k) to R; MUST NOT adjust F/G.
KB‑10Chaining: effective CL^k across a chain is min (weakest‑link).
KB‑11Loss notes SHALL enumerate non‑preserved invariants and collapsed subkinds.
KB‑12Definedness: bridge SHALL state its valid area; guards fail closed outside it.

Integration requirements with Part B (bridges):

  • B‑P1. Part B (Bridges) SHALL list KindBridge as a distinct bridge class alongside USM Scope bridges.
  • B‑P2. Part B SHALL state that CL^k penalties route to R via a monotone Ψ, never to F/G.
  • B‑P3. Part B SHALL define chaining = min for both CL and CL^k (weakest‑link).
  • Templates. ESG/Method templates should expose fields for Scope Bridge (CL) and KindBridge (CL^k) with loss notes & definedness.

C.3.3:End

RoleMask — Contextual Adaptation of Kinds (without cloning)

One‑line summary. Defines U.RoleMask(kind, Context) as a context‑local adaptation of a U.Kind that (a) adds constraints and/or vocabulary bindings, and (b) may narrow membership deterministically within a U.ContextSlice, without creating a new kind. RoleMasks are catalogued, versioned, and guard‑addressable; frequent, stable constraint masks SHOULD be promoted to explicit subkinds. Cross‑context use of a RoleMask requires a KindBridge (for kinds) and, when needed, a MaskAdapter (for mask constraints). All penalties route to R; F/G remain unchanged.

Status. Normative in Part C. Identifier C.3.4. Audience. Engineering managers, architects, reviewers, editors.

Depends on.

  • C.3.1 — U.Kind & SubkindOf (Core): kinds are intensional; is a partial order; kinds carry no Scope.
  • C.3.2 — KindSignature (+F) & Extension/MemberOf: signature F; deterministic MemberOf(e,k,slice); EntitySet(slice).
  • C.3.3 — KindBridge & CL^k: Cross‑context kind mapping; CL^k penalties → R only.
  • A.2.6 — USM (Context slices & Scopes): Claim/Work scope (G) over U.ContextSlice; bridges and CL for scope.
  • C.2.2 — F–G–R; C.2.3 — U.Formality (F).

Non‑goals. — No repository/notation mandates; conceptual only. — RoleMask is not a governance tier, data policy, or “mini‑type system.” — RoleMask does not redefine Scope; context conditions belong to USM.

Purpose (manager’s view)

Teams often need a local projection of a widely used kind:

  • Constraint: “For our procedure, take Vehicle with ABS only.”
  • Vocabulary: “Here, AuthHeader is called X‑Auth.”

If each team clones a fresh kind, catalogs fragment and bridges multiply. RoleMask is the disciplined alternative: keep the kind identity, apply declared constraints and bindings, and make the mask first‑class (registered, versioned, guard‑addressable). When a mask becomes stable “de‑facto subkind,” promote it to .

Benefits: fewer near‑duplicates, cleaner Cross‑context reuse, deterministic guards, and auditable narrowing instead of hand‑wavy “this is the version we mean.”

Context

Kinds (C.3.1/3.2) name what claims quantify over; USM (A.2.6) governs where claims hold. In practice, procedures need local tailoring of kinds for a role/process (compliance profile, product line, cohort). RoleMask gives that tailoring without mutating entityOfConcern (Kind) or applicability (Scope).

Problem

  1. Kind sprawl. Teams mint near‑duplicate kinds (“Account_PCI”, “Account_Ledger”), and alignment decays.
  2. Hidden constraints. Informal “we only accept …” statements leak into prose; guards can’t check them deterministically.
  3. Scope conflation. Contextual requirements (jurisdiction, API version) get smuggled into “type” talk, blurring Scope vs Kind.
  4. Cross‑context fragility. Masks don’t travel unless their constraints are mapped; teams reuse names and hope.

Forces

ForceTension to resolve
Local specialization vs common coreNeed Context‑specific tailoring without forking kinds.
Expressivity vs determinismMasks must express real constraints and be deterministically checkable at guard time.
Context vs entity constraintsConditions over ContextSlice (Scope) vs conditions over entities (membership) must be split cleanly.
Reuse vs proliferationEncourage reuse and promotion to subkind when stable; avoid a mask zoo.

Solution — RoleMask (overview)

A RoleMask is a named, versioned binding U.RoleMask(kind, Context) that:

  1. Adds constraints (entity‑level predicates only),
  2. Binds vocabulary/notation (aliases, field maps) for the Context/process,
  3. May declare context expectations (selectors over U.ContextSlice, e.g., jurisdiction, API version). These are enforced via USM Scope guards (A.2.6) and do not change mask membership.
  4. May narrow membership: Extension_mask(k, s) ⊆ Extension(k, s) (entity‑level narrowing only),
  5. Never creates a new kind; identity stays with k.
  6. Is guard‑addressable and deterministic (no “latest”).

Mask types (declared):

  • Constraint mask — adds constraints; may narrow membership;
  • Vocabulary mask — aliases only; no membership change;
  • Composite mask — both.

Separation discipline.

  • Entity‑level predicates (e.g., “hasABS(x)”) → mask membership (narrowing).
  • Context conditions (e.g., “jurisdiction=EU”, “API=v2.3”) → USM Scope guards (intersection), not mask membership. Masks may carry both kinds of information, but guards must route them into the right channel.

Norms & Invariants (normative)

The following formalize and expand RM‑01…RM‑08 referenced in C.3.

Definition & Shape

RM‑01 (Definition). U.RoleMask(kind, Context) SHALL be a named, versioned record with: (a) intent (what role/procedure the mask serves), (b) constraints (entity‑level predicates; optional context requirements), (c) vocabulary/notation bindings, (d) membership narrowing definition (if any), (e) intended guard use.

RM‑02 (Not a new kind). A RoleMask MUST NOT introduce a new U.Kind. If the domain needs a stable refinement, Contexts SHALL publish an explicit SubkindOf node (C.3.1).

RM‑03 (Determinism). Membership under a mask (if defined) MUST be deterministic given slice and published constraints; implicit “latest” is forbidden.

RM‑04 (Mask taxonomy). A mask SHALL declare its type: constraint / vocabulary / composite. — Vocabulary masks MUST NOT change membership; — Constraint/composite masks MAY narrow membership only via entity‑level predicates.

Separation of channels

RM‑05 (Context vs entity).

  • Predicates about entities (features, attributes) MAY narrow membership: Extension_mask(k, s) ⊆ Extension(k, s).
  • Predicates about ContextSlice (jurisdiction, Standards, Γ_time) SHALL be enforced via USM Scope guards (A.2.6). Masks MUST NOT hide Scope requirements inside membership checks.

Guard routing. Enforce ContextSlice predicates via USM Scope (A.2.6) and entity predicates via membership; see Annex C.3.A §4.3 (Guard_MaskedUse) and §5 (E‑01) for the normative order of checks.

RM‑06 (Guard use). Guards MAY reference a RoleMask by name only if the mask is registered, versioned, and its constraints are observable at guard time. Mask names MUST NOT be treated as kind synonyms.

Promotion & Catalog

RM‑07 (Promotion rule). A constraint mask reused broadly and stably SHOULD be promoted to an explicit subkind with a link; retire the mask or keep it as a vocabulary wrapper. Editors SHALL track promotions in the catalog.

RM‑08 (Catalog). Contexts SHALL catalog masks (name, version, type, intent, constraints, bindings, examples, related subkinds, known bridges/adapters). Redundant masks SHOULD be consolidated.

Cross‑context use

RM‑09 (Bridges & adapters). If a claim uses MemberOf(–, RoleMask(k), TargetSlice) across Contexts, the receiving Context SHALL require: (a) a KindBridge for k (CLᵏ, loss notes), and (b) a MaskAdapter — a documented, deterministic mapping of the mask’s entity‑level constraints and vocabulary bindings into the target Context — whenever those constraints/bindings differ. Penalties MUST route to R: Ψ(CLᵏ) for kind, plus any Φ(CL) for scope bridge.

RM‑10 (Definedness & fail‑closed). Mask evaluation SHALL state its definedness area; outside it, guards fail closed.

Invariants & Non‑goals (normative)

  • No Scope leakage. RoleMasks cannot widen/narrow Claim scope (G); any context conditions are enforced by USM guards.
  • Identity preservation. The carrier kind remains k; RoleMask does not change entityOfConcern.
  • Weakest‑link unaffected. RoleMasks do not alter weakest‑link rules on F/R; guards route entity predicates to membership and context predicates to USM Scope.

Interactions (informative)

With Kinds & Subkinds (C.3.1)

Use RoleMask for procedural tailoring. If the tailoring becomes conceptual and stable, introduce a subkind with and update references.

With Membership & Signature (C.3.2)

  • Entity‑level constraints live in mask membership (deterministic).
  • Signature F belongs to the kind; raising F in the signature does not auto‑change masks.

With KindBridge (C.3.3)

A RoleMask crossing Contexts needs two artifacts: the KindBridge (CL^k, loss notes) and a MaskAdapter (how constraints/aliases translate). R gets both penalties; F/G stay intact. If the adapter systematically narrows membership in the target Context, consider target‑side subkind.

With Guards (Annex C.3.A)

Use Guard_MaskedUse (Annex C.3.A §4.3). It requires: — mask registration & determinism; — Scope coverage (A.2.6), Γ_time explicit; — where Cross‑context: KindBridge (CL^k) + MaskAdapter + penalties → R. — Cross‑context combo. When masks cross Contexts, use Guard_MaskedUse together with Guard_XContext_Typed (Annex C.3.A §4.5) so both bridges are checked and both penalties (Φ(CL) and Ψ(CLᵏ)) land in R. — Order of checks. Follow Annex C.3.A §5 (E‑01): typed compatibility first, then Scope coverage, then penalties to R and freshness.

Anti‑patterns & Remedies (informative)

Anti‑patternWhy it’s wrongRemedy
Mask as “new type”Duplicates kind; breaks alignmentKeep the kind; if stable refinement → publish subkind ().
Hiding Scope in mask membershipConflates channels; non‑portableMove context conditions to USM guards; keep only entity predicates in membership.
Unregistered mask in guardsNon‑deterministic; un‑auditableRegister & version the mask; fail closed otherwise.
Cross‑context use without KindBridge/MaskAdapterSilent semantic driftRequire KindBridge + MaskAdapter; apply Ψ(CL^k) and any Φ(CL) to R.
Mask proliferation (ten masks that mean the same)Catalog entropy; inconsistent behaviorConsolidate; promote frequently used constraints to subkinds.
Treating mask name as kind synonymHides constraints; invites misuseIn prose, say “RoleMask(k, name)”; in guards, reference mask fields explicitly.

Worked Examples (informative)

Vehicle@ABSOnly (constraint mask)

Kind. Vehicle (K2, signature F4). Mask. Vehicle@ABSOnly — entity‑level predicate hasABS(x)=true; type constraint. Guards. MemberOf(–, Vehicle@ABSOnly, TargetSlice) defined & deterministic; Scope (surface/speed/rig/Γ_time) checked separately. Promotion? If ABS‑only becomes a conceptual category, publish VehicleWithABS ⊑ Vehicle and retire the mask.

AuthenticatedRequest@Frontend (vocabulary mask)

Kind. AuthenticatedRequest defined by AuthStandard v2.3. Mask. @Frontend binds authHeader → X‑Auth (aliases only); no narrowing; type vocabulary. Cross‑context. If reused in another Context, require KindBridge for the kind; no MaskAdapter needed (aliases are local). R. Only scope bridge penalties apply (if any).

AdultPatient@Clinic (composite mask) across jurisdictions

Kind. AdultPatient (≥ 18 at Γ_time). Mask. @Clinic: entity constraint “DOB present”; context hint “EHR system = X” (this part belongs with Scope). Type composite. Cross‑context. Jurisdiction Y uses ≥ 21 → KindBridge with CL^k=1; MaskAdapter maps DOB fields. Guards. Scope bridge (coding system) + KindBridge + MaskAdapter; penalties Ψ(1) (kind) + Φ(CL) (scope) to R. Outcome. Allowed with reduced R; consider target‑side subkind AdultPerson_Y.

Authoring & Review Guidance (informative)

Authoring a RoleMask card

Fields (suggested). name, kind, type (constraint/vocabulary/composite), intent, constraints (entity vs context split), bindings, membership definition (if any), definedness, examples, known bridges/adapters, promotion note. Rules of thumb.

  • Keep entity predicates small and testable.
  • Put context in Scope, not in membership.
  • If ≥ 3 teams reuse the same constraint mask → promotion review.

Reviewer 7‑point checklist

  1. Mask registered and versioned?
  2. Type declared correctly (constraint/vocabulary/composite)?
  3. Entity vs context split respected?
  4. Determinism (no “latest”) satisfied?
  5. Guard routes context to USM and entity to membership?
  6. Any Cross‑context use has KindBridge + MaskAdapter with penalties to R?
  7. Promotion warranted (stable, reused) or consolidation needed?

Conformance Checklist (normative)

IDRequirement
RM‑01RoleMask SHALL be a named, versioned record with intent, constraints, bindings, membership definition (if any), and intended guard use.
RM‑02RoleMask MUST NOT introduce a new U.Kind; stable refinements SHALL be modeled as subkinds ().
RM‑03Mask membership (when defined) MUST be deterministic given slice and mask fields; implicit “latest” forbidden.
RM‑04Mask SHALL declare its type: constraint / vocabulary / composite; vocabulary masks MUST NOT change membership.
RM‑05Context conditions SHALL be enforced via USM Scope guards; membership narrowing MAY use entity predicates only.
RM‑06Guards MAY reference a mask only if it is registered, versioned, and its constraints are observable; mask names MUST NOT be kind synonyms.
RM‑07Frequently reused constraint masks SHOULD be promoted to subkinds; editors SHALL track promotions.
RM‑08Contexts SHALL catalog masks; redundant masks SHOULD be consolidated.
RM‑09Cross‑context masked use SHALL declare a KindBridge (CL^k) and any MaskAdapter; penalties MUST reduce R only.
RM‑10Mask definedness SHALL be stated; guards fail closed outside the defined area.

C.3.4:End

KindAT — Intentional Abstraction Facet for Kinds (K0…K3)

One‑line summary. Defines KindAT as an informative facet attached to U.Kind that classifies the intentional abstraction stance of a kind—K0 Instance, K1 Behavioral Pattern, K2 Formal Kind/Class, K3 Up‑to‑Iso—to guide ΔF/ΔR planning, bridge expectations, catalog/search, and refactoring. KindAT is not a Characteristic: it has no algebra, no thresholds, and MUST NOT appear in guards or composition math. All assurance remains in F–G–R; typed semantics remain in C.3.1C.3.4.

Status. Mixed: — Informative for the anchors, heuristics, examples, and guidance. — Normative for the usage rules that forbid employing AT in guards/composition and constrain its placement.

Placement. Part C (Kinds), identifier C.3.5. Audience: engineering managers, architects, editors, assurance leads.

Depends on.C.3.1 (U.Kind, U.SubkindOf (⊑)), C.3.2 (KindSignature + F, Extension/MemberOf), C.3.3 (KindBridge + CL^k), C.3.4 (RoleMask). — A.2.6 USM (Claim/Work scope over U.ContextSlice), C.2.2 F–G–R, C.2.3 U.Formality (F). — MM‑CHR distinction Facet vs Characteristic (editors).

Non‑goals. — No numerical scale, no gating, no composition operators, no “quality” scoring. — No effect on F, G, or R besides planning hints.

Purpose (manager’s view)

Teams constantly decide how far to formalize and how broadly to validate:

  • Are we speaking about this cohort (instances), about things that behave like X (pattern), about a formal class with invariants, or about objects up to isomorphism?
  • Given that stance, should we invest in F4 predicates, F7 proofs, or R across variants?
  • What kind of KindBridge is realistic (coarse mapping vs up‑to‑iso), and what CL^k should we expect?

KindAT answers these with a small, shared vocabulary (K0…K3) that is safe to use (cannot distort F/G/R) yet actionable for planning and catalog/search.

Context & Rationale

The orthogonality we preserve

  • G (Claim scope) is where a claim holds (A.2.6).
  • Kinds give what a claim is about (C.3.1/3.2).
  • R is assurance (evidence, freshness, penalties).
  • F is expression rigor (C.2.3).

Teams often conflate abstraction with applicability (“sounds general ⇒ applies broadly”) or over‑engineer proofs where slice‑checks suffice. AT separates these concerns.

Why a facet, not a Characteristic

Per MM‑CHR, Characteristics (e.g., F, G) carry algebra and appear in guards/composition. KindAT is only a tag on U.Kind:

  • No algebra, no thresholds, not used in guards.
  • Editorial placement only: on kinds, not on claims.
  • Planning signal: what ΔF and ΔR typically pay off; what bridge style to expect.

This keeps AT useful without risking a “second G” or back‑door quality scores.

Design choice recap (moved from C.3 §15.2)

  • Making AT a Characteristic would duplicate G’s role and encourage gating.
  • As a facet, AT remains a catalog/navigation and planning device, not an assurance dimension.

Anchors K0…K3 (informative)

How to read. Each anchor states the intentional stance of the kind, inclusion cues, non‑examples (to prevent misuse), and planning hints (ΔF/ΔR/bridge expectations). Anchors are context‑local editorial tags on U.Kind.

K0 — Instance‑level

Intent. The kind denotes exemplars or a tightly curated set; often a named cohort or a concrete template. Cues. Membership relies on listing or direct identity features; little to no general invariants. Non‑examples. Any kind with stable, general invariants belongs in K2. Planning hints. Focus R on TargetSlice (executable checks, F5/6); avoid premature proof engineering. Bridges are instance‑maps; expect low CL^k outside the Context.

K1 — Behavioral Pattern

Intent. The kind is a role/behavioral pattern (“things that act like …”), typically stated via Standards or controlled NL, not a full type. Cues. “Duck‑typing” flavor; Standards reference behavior/state transitions. Non‑examples. If you can state global invariants as predicates, consider K2. Planning hints. Invest in F3→F4 (predicate‑like acceptances); R must test behavioral diversity; bridges are pattern maps with moderate CL^k.

K2 — Formal Kind/Class

Intent. A formal class with explicit invariants/relations (ontology class, type with Standards). Cues. Predicate‑like signature, subkind lattice, invariants reviewed. Non‑examples. Pure examples/cohorts (K0); informal roles (K1). Planning hints. Raise KindSignature F to F4+, consider F7 for safety‑critical cores; R should cover subkinds/variants; bridges are type‑maps, CL^k often medium/high.

K3 — Up‑to‑Iso

Intent. Defined up to isomorphism/equivalence (category‑theoretic flavor; “equal as structure,” not by identity); equality‑as‑structure matters. Cues. Statements invariant under isomorphism; reasoning by equivalence classes. Non‑examples. Classes where identity matters beyond structure. Planning hints. Expect up‑to‑iso bridges; CL^k can be high where equivalence is respected. F7–F9 likely for key properties; R focuses on witnesses of equivalence at interfaces.

Manager Heuristics (informative)

Decision areaK0K1K2K3
ΔF investmentPrefer F5/6 executable semanticsF3→F4 acceptance predicatesF4→F7 (predicates/proofs)F7→F9 (proof‑carrying, higher equality)
ΔR designSlice‑focused checksBehavioral diversityVariant/subkind coverageEquivalence witnesses at boundaries
Bridge styleInstance mapPattern mapType mapUp‑to‑iso / functorial
Expected CL^kLow outside ContextMediumMed/HighHigh where iso holds
RefactoringAggregate to K2 when stableCrystallize invariants → K2Maintain lattice; promote masks → subkindsKeep iso constraints explicit

Misuse & Antidotes (informative)

  • “Higher AT ⇒ wider G.” Wrong. G changes only via ΔG (USM). AT does not alter scope.
  • “Gate on AT.” Wrong. Use F thresholds and scope/evidence guards; AT is never a gate.
  • “Depth in ⇒ AT.” Wrong. AT is about intentional stance, not graph depth.
  • “AT on claims.” Wrong. AT tags U.Kind only.
  • “AT as quality score.” Wrong. Use F and R for rigor/reliability.

Usage Rules (normative)

These are the only normative constraints in this pattern. Everything else is guidance.

AT‑01 (Facet, not Characteristic). KindAT SHALL be treated as a Facet per MM‑CHR: it has no algebra, no thresholds, and MUST NOT appear in guards or composition math.

AT‑02 (Placement). If recorded, KindAT SHALL be attached to U.Kind (or its catalog card). It MUST NOT be attached to claims/capabilities or used as a proxy for G/F/R.

AT‑03 (Editorial discipline). Editors SHALL NOT write text implying “higher AT widens scope” or “higher AT increases rigor/reliability.” Any such text MUST be revised to reference ΔG/F/R explicitly.

AT‑04 (Bridge neutrality). KindBridge records MUST NOT compute or adjust AT; they may include informative remarks about likely anchor alignment. CL^k is independent of AT and is assessed from signature/order preservation.

AT‑05 (Catalog). Contexts that use AT SHOULD record it in Kind catalog entries alongside: signature snippet & F, subkinds, RoleMasks, KindBridges. Absence of AT implies “not set”, not K0.

Authoring & Review Guidance (informative)

How to tag (fast rubric)

  • If the card lists concrete items/cohorts, tag K0.
  • If the card defines behavioral obligations in prose/templates but few global invariants, tag K1.
  • If the card states predicates/invariants and participates in a subkind lattice, tag K2.
  • If the card explicitly reasons up to isomorphism, tag K3.

Review checklist (5 minutes)

  1. Is the carrier a U.Kind (not a claim)?
  2. Does the tag match the signature (intent)?
  3. Are ΔF/ΔR implications noted for planning (not gating)?
  4. Any RoleMasks that should be promoted to subkinds (K2 hygiene)?
  5. Any Cross‑context reuse that suggests bridge style (pattern/type/iso)?

Integration Notes (informative)

  • With C.3.1/3.2 (Kinds, Signature, Extension). AT guides how to evolve signature F and what R coverage is sensible; it does not change membership semantics.
  • With C.3.3 (KindBridge). AT hints at likely bridge style (instance‑map / pattern‑map / type‑map / up‑to‑iso), but CL^k is still computed from signature/order preservation; penalties route to R.
  • With C.3.4 (RoleMask). Persistent K1‑style masks often warrant promotion to K2 subkinds.
  • With A.2.6 (USM). All scope decisions remain under G. AT text should never be used to infer coverage.
  • With C.2.3 (F). AT does not raise/lower F; it suggests where raising F is cost‑effective.

Worked Mini‑Examples (informative)

  • K0 (Instance). Account_US_GAAP_2025_Q1_Cohort. Plan R slice checks; avoid type‑maps across Contexts.
  • K1 (Behavior). CacheableRequest (“idempotent under retry; cache key well‑formed”). Raise F3→F4; design R for failure‑mode diversity; expect pattern bridges.
  • K2 (Formal). Account with invariants (balance = debits−credits; posting rules). Raise F4+; plan R over Asset/Liability subkinds; bridge via type maps.
  • K3 (Up‑to‑Iso). UndirectedGraph up to node relabeling. Expect up‑to‑iso bridges; proofs at F7+; R checks interface equivalence witnesses.

Conformance Checklist (normative)

IDRequirement
AT‑01KindAT is treated as Facet (no algebra/thresholds); MUST NOT appear in guards/composition.
AT‑02AT MUST be attached to U.Kind only (if used); not to claims/capabilities.
AT‑03Editorial text MUST NOT imply AT alters F/G/R; revise to name ΔF/ΔG/ΔR instead.
AT‑04KindBridge MUST NOT compute/alter AT; CL^k is assessed independently.
AT‑05If a Context catalogs AT, it SHOULD include it in Kind cards with signature F, subkinds, masks, bridges.

C.3.5:End

Typed Guard Macros for Kinds + USM (Annex)

One‑line summary. Provides normative guard macros that combine USM Scope (A.2.6) with Kind‑CAL (C.3.x) so authors can gate state changes and compositions that quantify over kinds without conflating entityOfConcern (Kinds) with applicability (Scope G) or assurance (R). Includes decision trees, anti‑patterns, and examples (informative). AT (KindAT) is never used in guards.

Status. Mixed: — Normative: guard macro clauses, evaluation order, fail‑closed discipline, conformance checklist. — Informative: … decision trees, anti‑patterns, worked examples, macro skeletons.

Placement. Part C (Kinds), identifier C.3.A (Annex). Audience: engineering managers, editors, reviewers, assurance leads.

Depends on.A.2.6 USM: U.ContextSlice, U.ClaimScope (G), U.WorkScope, ∈/∩/SpanUnion/translate, Γ_time policy, Bridge + CL (scope). — C.3.1: U.Kind, U.SubkindOf (⊑); C.3.2: KindSignature (with F) and Extension/MemberOf; C.3.3: KindBridge + CL^k (kind‑congruence) & loss notes; C.3.4: RoleMask. — C.3.5: KindAT (facet) — explicitly forbidden in guards. — C.2.2 F–G–R: weakest‑link, penalties to R only; C.2.3 F: F0…F9 (expression rigor). — Part B Bridges & CL: scope bridge semantics and CL ladder.

Purpose & Audience

Purpose. Give Contexts a single set of guard shapes to: (a) admit typed claims safely, (b) compose typed claims/specs, (c) use RoleMasks properly, and (d) reuse across Contexts via both scope and kind bridges—without inventing new scales or conflating G, F, and R.

Audience. Engineering managers and reviewers who must read/author guards that are legible, deterministic, and auditable in context.

Context & Problem

Projects often:

  • treat “more abstract wording” as wider G,
  • glue claims with incompatible entityOfConcern (kinds),
  • move typed content across Contexts without declared bridges,
  • or bake AT (abstraction vibe) into decision logic.

C.3.A fixes this by supplying guard macros that: — separate typed compatibility (kinds) from Scope coverage (USM), — require both bridges where needed, — push congruence penalties to R only, and — forbid AT in guards.

Solution Overview (what these guards do)

All guards in this Annex share three invariants:

  1. Fail‑closed. If any required predicate is undefined/false, the guard denies the transition.
  2. Deterministic. Given a fixed TargetSlice (with explicit Γ_time) and published declarations, evaluation yields one outcome.
  3. Separation of concerns. Typed compatibility (same‑Context or KindBridge) is not Scope. Scope coverage is a USM set‑membership judgment over Context slices. Assurance penalties (Φ(CL) for scope bridges; Ψ(CL^k) for kind bridges) reduce R only.

Normative Guard Macros

Notation.SHALL” clauses are normative obligations. “Notes” are informative reminders. Names like Guard_TypedClaim are editorial handles; Contexts may alias them, but MUST preserve semantics. Macro names (e.g., Guard_TypedClaim) are editorial handles; Contexts may alias them provided the logical obligations are preserved.

Guard_TypedClaim — admit a claim quantified over a kind

Intent. Approve a state transition that asserts Claim C which quantifies over U.Kind k at TargetSlice.

Guard_TypedClaim(C, k, TargetSlice, thresholds?)SHALL include, in this order:

  1. ScopeCoverage. U.ClaimScope(C) covers TargetSlice. (USM A.2.6)
  2. Γ_time declared. TargetSlice SHALL specify Γ_time (point/window/policy). No “latest”. (A.2.6)
  3. Kind definedness. MemberOf(?, k, TargetSlice) is defined and deterministic. (C.3.2 K‑05/K‑07)
  4. Typed compatibility. 4.1 same Context: if C expects k′, require k ⊑ k′. (C.3.1) 4.2 Cross Context: if Contexts differ, require a declared KindBridge that maps k → k′ and publishes CL^k ≥ c with loss notes. (C.3.3)
  5. Assurance penalties (R only). If step 4.2 used a KindBridge, the guard SHALL apply a monotone penalty Ψ(CL^k) to R. If a Scope bridge was used to move C’s Scope (USM), apply Φ(CL) to R. (C.2.2 + C.3.3 + Part B)
  6. Evidence freshness (if trust is implied). Freshness windows and expiry checks SHALL be separate predicates (not Scope). (C.2.2)
  7. Formality threshold (if ESG mandates). If the Context gates rigor, require U.Formality(C) ≥ F_k. (C.2.3)

Prohibitions.AT forbidden. KindAT MUST NOT appear in this guard. (C.3.5 AT‑01/02)No “domain” placeholders. Guards SHALL name an addressable TargetSlice, not a fuzzy “domain”.

Guard_TypedJoin — compose two typed claims/specs (A → B)

Intent. Permit composition where A produces facts over k_A and B consumes k_B.

Guard_TypedJoin(A, k_A; B, k_B; TargetSlice)SHALL include:

  1. TypedCompat. 1.1 same Context: require k_A ⊑ k_B. 1.2 Cross Context: require KindBridge mapping k_A → k′_B with CL^k ≥ c and k′_B ⊑ k_B.
  2. ScopeSerial. Compute Scope_serial = ClaimScope(A) ∩ ClaimScope(B). Require Scope_serial covers TargetSlice. (A.2.6)
  3. Penalties (R only). Apply Ψ(CL^k) if a KindBridge was used; apply Φ(CL) if a Scope bridge was used. (C.2.2 / Part B / C.3.3)
  4. Freshness. Guard SHALL assert required freshness windows for evidence along the serial path.
  5. No type‑by‑scope. The guard MUST NOT widen Scope to “fix” a type mismatch; remedies are subkind introduction, adapter, or bridge.

Mask awareness. If B expects a RoleMask(k_B): either show A’s outputs already satisfy mask constraints, or add a documented mask adapter (see 4.3) and treat any contextual constraints as part of ScopeSerial.

Guard_MaskedUse — use a RoleMask with a kind

Intent. Use U.Kind k under a RoleMask m in Context R.

Guard_MaskedUse(k, m, TargetSlice)SHALL include:

  1. MaskRegistered. RoleMask(k, m, version) is registered and versioned. (C.3.4 RM‑06)
  2. MaskDeterminism. All mask constraints are observable on TargetSlice; if the mask narrows membership, it SHALL be deterministic. (RM‑03)
  3. MaskType clarity. Mask SHALL declare its type: constraint / vocabulary / composite. (RM‑04)
  4. Promotion cue. If mask is reused widely as a de‑facto subkind, editors SHOULD promote it to an explicit link. (RM‑05)
  5. Cross‑context use. If TargetSlice.Context ≠ owner(k).Context, require: 5.1 KindBridge with CL^k ≥ c; 5.2 MaskAdapter (if constraints need translation), deterministic; 5.3 Penalty Ψ(CL^k) to R. (RM‑07 + C.3.3)
  6. ScopeCoverage. U.ClaimScope(artifact) covers TargetSlice. (A.2.6)

Prohibitions.Mask ≠ Kind. Guards MUST NOT treat the mask name as a synonym for the Kind. (RM‑06)

Guard\SpanUnion\Typed — publish parallel coverage across independent support lines

Intent. Publish SpanUnion of scopes for the same typed claim supported by independent lines L₁…Lₙ.

Guard_SpanUnion_Typed(C, k, {Lᵢ})SHALL include:

  1. Per‑line discipline. For each line Lᵢ, first satisfy Guard_TypedClaim(C, k, Sliceᵢ) (or its Cross‑context variant) at the relevant slices/supports.
  2. Independence justification. Publisher SHALL include a partition or certificate showing that essential components of Lᵢ are disjoint from Lⱼ (no shared weakest link). (A.2.6 §7.3)
  3. Published scope. Scope_published = SpanUnion({Sᵢ}), where each Sᵢ is the serial scope for line Lᵢ.
  4. No overreach. The union MUST NOT include slices not covered by any Sᵢ.
  5. Typed consistency. The entityOfConcern (kind k) is the same across lines; if not, normalize via subkinds or adapters before union.

Note. Independence and union rules are USM‑native; this macro ties them to typed claims without adding new algebra.

Guard\XContext\Typed — Cross‑context typed reuse (both bridges)

Intent. Reuse C quantified over k in another Context’s TargetSlice.

Guard_XContext_Typed(C, k, TargetSlice)SHALL include:

  1. Scope bridge. There exists a Scope Bridge b_s (source = owner(C).Context, target = TargetSlice.Context) with CL ≥ c_s. (Part B)
  2. Kind bridge. There exists a KindBridge b_k (source = owner(k).Context, target = TargetSlice.Context) with CL^k ≥ c_k. (C.3.3)
  3. Mapped scope coverage. Scope′ = translate(b_s, ClaimScope(C)) and Scope′ covers TargetSlice.
  4. Mapped kind definedness. k′ = translate(b_k, k) and MemberOf(?, k′, TargetSlice) is defined.
  5. Penalties (R only). Apply Φ(CL(b_s)) and Ψ(CL^k(b_k)) to R.
  6. Loss notes. Publisher SHALL attach loss notes from both bridges (rig bias, collapsed subkinds, etc.).

Prohibitions.Do not “merge” bridges; Scope and Kind are orthogonal channels. — Do not alter F or G due to CL/CL^k; penalties land in R only.

Evaluation Semantics & Order (normative)

E‑01 (Order of checks). Guards SHALL check typed compatibility first (same‑Context or KindBridge), then Scope coverage (USM), then apply penalties to R and verify freshness.

E‑02 (Determinism). Given fixed inputs (slices, bridges, versions), evaluation MUST be deterministic. “Latest” time, unversioned Standards, or implicit mappings are disallowed.

E‑03 (Fail‑closed). Undefined membership (MemberOf) or missing bridge MUST cause guard failure.

E‑04 (No AT in guards). AT is an editorial facet and MUST NOT be referenced. (C.3.5 AT‑01/02)

E‑05 (Weakest link on congruence). For chained bridges, effective CL / CL^k is the minimum of links.

E‑06 (Separation of predicates). Scope coverage and evidence freshness SHALL be distinct predicates; do not fold freshness into Scope or kinds.

Evaluation order. Apply checks in the order defined in §5 (E‑01): typed compatibility → Scope coverage → penalties to R → freshness.

Conformance Checklist (normative)

IDRequirement
GC‑01Guards that admit/compose typed claims SHALL use Guard_TypedClaim or Guard_TypedJoin (or proven‑equivalent Context aliases).
GC‑02Guards that use RoleMasks SHALL use Guard_MaskedUse (or equivalent) and comply with RM‑01…RM‑07.
GC‑03Cross‑context typed reuse SHALL use Guard_XContext_Typed with both bridges; penalties MUST route to R (Φ/Ψ), not to F/G.
GC‑04All guards SHALL declare Γ_time explicitly and SHALL fail closed on undefined membership or missing bridges.
GC‑05Guards MUST NOT reference AT; any such reference MUST be removed or replaced with ΔF/ΔG/ΔR predicates.
GC‑06Scope union MUST follow USM SpanUnion rules (independence justification); typed union MUST NOT change entityOfConcern.

What counts as “proven‑equivalent” (editorial rule)

A Context may adopt a different surface phrasing iff the Context’s guard contains all obligations listed in the relevant macro, in the same logical roles (typed compatibility, Scope coverage, R penalties, freshness).

Where penalties land (assurance calculus hook)

Norm. Φ(CL) (scope congruence) and Ψ(CL^k) (kind congruence) are monotone non‑increasing functions into R. Contexts SHALL calibrate them per policy; this Annex does not prescribe numeric forms.

Minimal conceptual formulas (informative)

  • R after bridges: R_final = R_base × Φ(CL_scope) × Ψ(CL_kind) (concept only).
  • No arithmetic on F/G. F is ordinal (thresholds only); G is set‑valued (membership only).

Decision Trees (informative)

D1 - Admitting a typed claim

  1. same Context? If yes → check (k ⊑ k′ if expected). If no → require KindBridge.
  2. Scope coverage? Compute covers(TargetSlice).
  3. Membership defined? MemberOf(?, k(′), TargetSlice) defined? If no → deny.
  4. Bridges used? Apply penalties Φ/Ψ to R.
  5. Freshness? Check windows. Optional: F ≥ F_k if ESG mandates.

D2 - Composing A → B

  1. Typed: k_A ⊑ k_B or KindBridge to k′_B ⊑ k_B.
  2. Scope: Scope(A) ∩ Scope(B) covers TargetSlice.
  3. Penalties: apply Φ/Ψ to R.
  4. Freshness: along serial path.
  5. If mask expected: either A implies it or add mask adapter.

D3 - Union across lines

  1. Prove per‑line typed admission.
  2. Provide independence partition.
  3. Publish SpanUnion; no extrapolation.

Guard Anti‑patterns & Remedies (informative)

Anti‑patternWhy it’s wrongRemedy
Widening G to “fit” a type mismatchConflates entityOfConcern with applicabilityIntroduce subkind, adapter, or KindBridge; keep G honest
Using mask name as kindHides constraints; breaks determinismRegister mask; reference constraints; promote to subkind if stable
Ignoring CL^k in Cross‑context classificationUnder‑counts risk; silent driftRequire KindBridge; apply Ψ(CL^k) to R
Inferring Scope from Extension sizeScope ≠ ExtensionKeep Scope (where) distinct from Extension (which instances)
Implicit “latest” timeNon‑deterministic; non‑auditableDeclare Γ_time policy explicitly
Gating on ATAT is a facet, not a CharacteristicReplace with ΔF thresholds or Scope/Evidence predicates

Worked Examples (informative, brief)

Detailed scenarios remain in C.3 §11. This Annex sketches how the macros apply; cross‑reference as needed.

E1 — Safety braking policy (same Context). Use Guard_TypedClaim: PassengerCar ⊑ Vehicle passes; ClaimScope ∩ plant scopes covers TargetSlice; no bridges → no penalties; freshness checked.

E2 — Cross‑plant reuse (both bridges). Use Guard_XContext_Typed: Scope bridge (CL=2) narrows temp; KindBridge (CL^k=2) collapses EV subkind. Apply Φ(2)×Ψ(2) to R; publish loss notes.

E3 — API rule with adapter. Use Guard_TypedJoin: producer Request → consumer expects AuthenticatedRequest. Either prove or add adapter; Scope remains separate (API v2.3 with Γ_time window).

E4 — Masked clinic cohort across jurisdiction. Use Guard_MaskedUse + Guard_XContext_Typed: registered mask, deterministic DOB constraint; KindBridge CL^k=1; Scope bridge CL depends on coding; penalties to R; Scope narrowed to overlap.

Rationale (why an Annex) (informative)

  • Focus. Keeps guard mechanics together, easing adoption in ESG/Method templates.
  • Separation. Prevents leakage of AT/typed flavor into “Scope math”.
  • Auditability. Standard shapes let reviewers check determinism, bridges, penalties, and freshness quickly.
  • Inter‑pattern glue. Hooks USM, Kind‑CAL, Bridges, and F–G–R without inventing new scales.

C.3.A:Annex A - How typed reasoning plugs into Compliance & Regulatory Alignment [A/I]

For managers. This section shows how to make regulatory adoption and reuse precise, auditable, and portable using Kinds, KindBridges (with a kind‑bridge congruence level, noted as CL^k for editors), and USM Scope. It cleanly separates what the law is about from where and when it applies, and routes any cross‑jurisdiction uncertainty to R (assurance). It never changes F (form) or G (scope) to hide mismatches.

C.3.A:A.1 Purpose & fit

What this solves. Regulations and standards name classes of things (“Adult person,” “Class II medical device,” “Personal data,” “Lease”). In one context they are native; in another they are foreign. Without typed reasoning, teams either (a) hand‑translate terms (silently changing meaning), or (b) reduce everything to Context labels (“domain = EU”), which cannot be checked by guards.

What we add.

  1. Model regulatory categories as Kinds (with KindSignature and ),
  2. map them across Contexts with KindBridges and type‑congruence CL^k,
  3. express Claim scope (G) over Context slices that explicitly list jurisdiction, version, and a time selector (Γ_time), and
  4. apply R‑penalties (Ψ(CL^k)and, if scope is bridged,Φ(CL)) while keeping F and G unchanged.
C.3.A:A.2 Normative obligations

Conformance. A model or authoring action conforms to A.2 iff it satisfies C‑REG‑1..C‑REG‑8 below.

C‑REG‑1 (Regulatory kinds). Regulatory categories SHALL be represented as U.Kind in the authority’s Context (e.g., AdultPerson@RegY, MedicalDeviceClassII@FDA, PersonalData@GDPR, Lease@IFRS). Each such kind SHALL have a KindSignature with a declared F level (C.3.2).

C‑REG‑2 (KindBridge). Cross‑context reuse of a regulatory category MUST declare a KindBridge with a kind‑bridge congruence level (CL^k) and loss notes (C.3.3). The mapping SHALL preserve the “is‑a / subkind‑of” direction and MUST NOT invert it.

C‑REG‑3 (Scope is USM). Regulatory applicability (jurisdiction, effective dates, product families, platforms) SHALL be expressed as Claim scope (G) over U.ContextSlice, with an explicit time selector (Γ_time). Applicability MUST NOT be encoded into kinds.

C‑REG‑4 (No synonym shortcuts). Editors MUST NOT treat legal terms as synonyms of local kinds without a KindBridge. Any term alignment SHALL be documented (mapping + CL^k + loss notes).

C‑REG‑5 (Determinism). MemberOf(e, k_reg, slice) MUST be deterministically evaluable when used in guards (no “latest law” or unstated grace periods).

C‑REG‑6 (Penalties land in R). When a claim or guard relies on Cross‑context classification (membership decided via a KindBridge), the receiving Context MUST apply the kind‑bridge penalty (based on CL^k) to R; if the Scope is also bridged, apply the scope‑bridge penalty (based on CL) to R as well. Invariant: penalty routing changes R only; F and G remain unchanged.

C‑REG‑7 (Editioning). Changes in law/regulator guidance that alter membership or applicability SHALL be recorded as content changes: update KindSignature (kinds) and/or update Claim scope (ΔG±). Guards MUST name a time selector (Γ_time) and MUST NOT rely on an implicit “latest” time.

C‑REG‑8 (Masks, not clones). Local process nuances (e.g., clinic‑specific cohort definitions) SHALL be captured with RoleMasks over the adopted kind; editors MUST NOT clone a new kind unless a stable subkind is warranted.

C.3.A:A.3 Guard macros (ready to use)

(a) Guard_RegAdopt — adopt a regulatory requirement into a Context (Plain: check scope, map the legal category, and account for penalties)

Use when an internal policy is defined by reference to an authority’s category.

Inputs: Claim P (policy), RegKind k_reg in Context R_auth, TargetSlice S_local
Guard_RegAdopt(P, k_reg, S_local):
  1. ScopeCoverage:       U.ClaimScope(P) covers S_local                 // USM
  2. Γ_time:              S_local specifies Γ_time (no "latest")         // USM
  3. KindBridge:          a KindBridge exists that maps the legal category to a local kind, with **CL^k** at least the minimum policy level
  4. MemberOfDefined:     MemberOf(?, k_local, S_local) is defined       // determinism
  5. Penalties→R:         apply the **kind‑bridge penalty** (based on CL^k) to **R**
  6. ScopeBridge?         if the policy’s scope lives in the authority’s Context, translate it via a Scope Bridge; apply the **scope‑bridge penalty** (based on CL) to **R**
  7. EvidenceFreshness:   freshness windows for any bound evidence hold  // C.2.2

(b) Guard_RegChange — react to a regulatory change (Plain: re‑issue the kind and/or scope and refresh penalties)

Inputs: Reg change Δ (new edition, guidance), impacted kinds/claims
Guard_RegChange(Δ):
  1. Identify impact:      does Δ alter KindSignature (membership) or Scope predicates?
  2. If KindSignature:     version k_reg; update KindBridge; re-evaluate CL^k; update loss notes
  3. If Scope:             publish ΔG± (widen/narrow) to Claim scope; update guards
  4. Reassess penalties:   recompute Ψ(CL^k), Φ(CL) → R
  5. Γ_time discipline:    set sunrise/sunset; forbid implicit retroactivity in guards

(c) Guard_RegXContextUse — cross‑jurisdiction use with both bridges (Plain: move scope and kind, then account for both penalties)

Guard_RegXContextUse(P, k_reg@R_auth, S_local@R_local):
  1. Scope bridge:      a Scope Bridge from the authority Context to the local context exists with CL at least the policy minimum; the translated scope covers the local slice
  2. Kind bridge:       a KindBridge maps the legal category to a local kind with **CL^k** at least the policy minimum
  3. MemberOfDefined:   MemberOf(?, k_local, S_local) is defined
  4. Penalties→R:       apply the **scope‑bridge** and **kind‑bridge** penalties to **R**
  5. Loss-guided narrow: optionally narrow Scope' where known losses are material (best practice)
C.3.A:A.4 Worked examples [I]

(1) Healthcare — “Adult” dosage rule across jurisdictions

Reg source. Jurisdiction Y defines AdultPerson@RegY (AT around K2, F4) with age at least 18; your hospital Context uses AdultPatient (age at least 21). Claim. “For all x ∈ AdultPatient: dosage ≤ D/kg for drug M.” Adoption.

  • KindBridge. Map AdultPerson@RegY → AdultPatient; CL^k = 1; loss note: boundary mismatch (18↔21).
  • Scope. {jurisdiction=Y, formulary=M, time selector (Γ_time)=from 2026‑01‑01}.
  • Guard. Guard_RegAdopt passes; R penalized by Ψ(1). Policy narrows Scope to mapped cohort (age≥21) for in‑house use.
  • Change. If Y changes adult to ≥19 (new edition), run Guard_RegChange: version the kind, refresh the bridge, re‑assess CL^k, update guards.

(2) Privacy — GDPR↔CCPA PII across Contexts

Reg kinds. PersonalData@GDPR, PersonalInformation@CCPA. Internal kind. PersonalData@Product with masks per data store. Policy claim. “No sharing of SensitiveAttribute outside processors.” Adoption.

  • KindBridges. SensitiveAttribute@GDPR → SensitiveAttribute@Product (CL^k=2); SensitivePersonalInformation@CCPA → SensitiveAttribute@Product (CL^k=1, loss: biometric nuance).
  • Scope. Two policies with SpanUnion over {jurisdiction=EU} and {jurisdiction=CA}, each with its own Γ_time windows and evidence freshness.
  • Guards. For CA, apply stronger R penalty (Ψ(1)), and narrow to the mapped subset (exclude ambiguous fields).
  • Do not. Do not rename GDPR terms to local labels without a KindBridge.

(3) Export control — US EAR “600‑series” classification

Reg kind. EAR600SeriesItem@US (AT≈K2, F3→F4 as predicates are formalized). Local kind. Product@Company. Work scope. {destination=countries, end_use, time selector (Γ_time)=shipment date} for the shipping capability. Adoption.

  • KindBridge. Map EAR600SeriesItem@US → Product@Company; CL^k=2 (loss: component kit edge cases); loss notes recorded.

  • Capability guard (Method–Work).

    • U.WorkScope(Ship) covers JobSlice (destination, end use, time).
    • MemberOf(product, EAR600_mapped, JobSlice) defined (classification present).
    • Apply Ψ(2) to R (classification uncertainty) and, if reusing US scope text, Φ(CL_scope) too.
  • Outcome. Shipment admitted only for allowed destinations; higher R may require manual review.

(4) Finance — IFRS vs US GAAP “Lease”

Reg kinds. Lease@IFRS, Lease@USGAAP. Local kind. LeaseStandard@Corp used in policy “recognize lease liabilities.” Adoption.

  • KindBridge. Lease@IFRS → LeaseStandard@Corp (CL^k=2; loss: short‑term exceptions differ).
  • Scope. {jurisdiction=IFRS, Γ_time=financial period, ledger=v7}.
  • Evidence. LA plans cover subkinds (operating vs finance) per your classification; the kind‑bridge congruence level (CL^k) drives extra testing near boundary cases.
C.3.A:A.5 Design guidance & pitfalls [I]

Do this.

  • Treat regulatory categories as Kinds. Put the definition into KindSignature (aim for F4 predicates where practical).
  • Make time explicit. In guards, require a time selector (Γ_time) for effective dates and grace periods. Forbid “latest”.
  • Publish bridges with loss notes. If two jurisdictions’ categories are “almost the same,” say how, rate CL^k, and note what is lost.
  • Split “where” from “what.” Keep Scope (G) over U.ContextSlice (jurisdiction, plant, Standard versions) separate from MemberOf on the kind.
  • Route uncertainty to R. Use Ψ(CL^k) and Φ(CL); never modify F/G to hide ambiguity.

Avoid this.

  • Synonym games. Don’t alias “Adult” to local AdultPatient in prose. Use a KindBridge.
  • Scope by labels. “Domain = EU” is not a guard. Use explicit U.ContextSlice fields (jurisdiction, version, time selector) and Scope predicates.
  • Hiding time. Never rely on “current law”; always fix Γ_time (point/window/policy).
  • Widening G to compensate for type gaps. If kinds don’t line up, introduce a subkind, add a mask/adapter, or narrow; don’t “make the scope bigger”.
C.3.A:A.6 Migration checklist [I]
  1. Inventory regulatory references in policies/specs.
  2. Create Kind cards for referenced legal categories (intent summary, KindSignature + F, known subkinds, AT tag if helpful).
  3. Publish KindBridges to your local kinds with CL^k and loss notes.
  4. Rewrite guards to use Scope coverage (USM) plus MemberOf on the mapped kind; add an explicit time selector (Γ_time).
  5. Wire penalties: Ψ(CL^k) and Φ(CL) lower R; refresh evidence windows.
  6. Catalog RoleMasks for local nuances; promote frequently reused masks to subkinds.
C.3.A:A.7 Manager’s one‑page pattern [I]
  • Question 1 — Where does the rule apply?Scope (G) over Context slices (jurisdiction, plant, Standard, and a time selector (Γ_time)).
  • Question 2 — About what things?Kind (regulatory category) with a KindBridge if foreign.
  • Gate recipe. Scope covers the TargetSlice and membership for the mapped kind is defined, and both bridges are present where needed; then apply bridge penalties to R and decide.
  • Change handling. New law edition? Update KindSignature/Bridge (kinds) and/or Scope (ΔG); never rely on “latest.”
  • Accountability. Keep loss notes, CL/CL^k, and Γ_time in the decision record.

C.3.A:Annex B - How typed reasoning plugs into Assurance Lanes (VA/LA/TA) & Evidence design [A/I]

Intent (manager’s view). Typed reasoning turns “prove/test/qualify” into a repeatable plan. By making what the rule talks about explicit (named Kinds, their subkinds, and optional RoleMasks), you can:

  1. design proof obligations that actually quantify over the right things (VA),
  2. build test plans that cover the right variants/subkinds in the right context slices (LA), and
  3. isolate tool risk (TA) instead of letting it bleed into scope or type semantics.

Invariant reminders.Scope (G) is where a claim holds — expressed over U.ContextSlice (with an explicit time selector, Γ_time). — Kind membership is which things the claim ranges over inside that slice — checked with MemberOf(… , kind, slice). — Bridge penalties: the scope‑bridge penalty (based on CL) and the kind‑bridge penalty (based on CL^k) both lower R (assurance). They never change F (form) or G (scope).

C.3.A:B.1 What you get with typed assurance [I]
  • Targeted proofs (VA). If a policy says “for every PassengerCar …” (notation hint: ∀x:PassengerCar), the VA lane now has a clear target. You can prove obligations once for the kind (and its subkinds), instead of re‑proving per ad‑hoc label.
  • Subkind‑aware test plans (LA). Test matrices are indexed by subkinds (and RoleMasks) × context slices; coverage stops being accidental.
  • Deterministic guards. A test/proof either applies to the TargetSlice and Kind (Scope covers & MemberOf defined) or it doesn’t. No “latest,” no silent widening.
  • Clean tool boundaries (TA). You qualify the prover/model‑checker/classifier once and route tool confidence to TA, not to “broadened” claims.
C.3.A:B.2 Normative obligations for evidence design

EA‑1 (Two checks). Every VA/LA artifact that supports a typed claim SHALL bind both:

  • Scope predicate: U.ClaimScope(Claim) covers TargetSlice (with explicit Γ_time), and
  • Kind predicate: MemberOf(?, k, TargetSlice) is defined (deterministic).

EA‑2 (Subkind coverage). When a claim quantifies over k, target‑contexts SHALL justify LA coverage per relevant subkind of k (or per RoleMask if masks stand in for stable subkinds). “Representative set” MUST be stated explicitly.

EA‑3 (Independence for unions). If a published SpanUnion of evidence lines is used to enlarge covered area, independence of lines SHALL be documented (no shared weakest link).

EA‑4 (Bridges accounted). If a VA/LA artifact travels across Contexts:

  • Scope movement SHALL use a Scope Bridge (Part B) with CL and apply the scope‑bridge penalty to R.

  • Kind movement SHALL use a KindBridgeC.3.3) with CL^k and apply the kind‑bridge penalty to R. Neither movement SHALL alter F or G.

    Neither movement SHALL alter F nor G.

EA‑5 (Freshness). LA evidence SHALL declare freshness windows tied to Γ_time (no implicit “latest”). Expiry MUST fail guards closed until refreshed.

EA‑6 (No scope‑by‑wording). Editors MUST NOT widen G by rewriting a claim to sound “more general.” Widening G (ΔG+) is permitted only with new support that truly enlarges the set of slices.

EA‑7 (TA separation). Tool qualification (TA) SHALL be tracked independently. VA/LA guards MUST NOT substitute “tool is trusted” for content proof/coverage.

C.3.A:B.3 Designing the evidence matrix [I]

A practical way to plan LA/VA is a matrix:

Row setColumn setCell content
Kinds (subkinds or masks)Context slices (Standard versions, env ranges, Γ_time)Evidence unit (proof fragment, test batch, monitoring window), with Scope and MemberOf predicates attached
  • Choose rows. Start with the kind and list relevant subkinds (notation hint: kᵢ is a subkind of k) or stable RoleMasks.
  • Choose columns. Split your declared Scope (G) into named slices you intend to support (e.g., “dry, speed up to 50” and “wet, speed up to 40” with specific rigs and versioned Standards).
  • Fill cells. Attach one or more evidence units per cell (proof obligations for VA; test campaigns/monitoring windows for LA). Mark bridged cells and their CL/CL^k penalties to R.

Tip. For formal kinds and “up‑to‑iso” kinds (AT K2/K3), expect more rows (more variants to cover). For instance‑like kinds (AT K0), expect fewer rows and tighter columns (narrow slices, stricter freshness).

C.3.A:B.4 VA lane — proofs that match the kind [A/I]

What VA contributes. Proofs reduce ambiguity and eliminate many LA proof requirements when they truly quantify over the intended kind and live in the declared Scope.

VA‑patterns (informative):

  • Proof over the Kind (F7–F8). “For every PassengerCar, the property holds” (notation hint: ∀x:PassengerCar). If the property depends on subkind‑specific rules, split lemmas per subkind.
  • Proof‑carrying components. When the content is F8 (dependent types), the build rejects violations; LA can shrink to conformance smoke within the slices.
  • Up‑to‑iso (AT K3). Equational reasoning “up‑to‑iso” is acceptable only if the KindSignature works at that level and receivers accept KindBridge that preserves equivalences.

VA‑obligations (normative):

  • VA‑1. A proof carrier SHALL cite the Kind it quantifies over and reference the Claim scope slices it assumes.
  • VA‑2. Cross‑context acceptance of proofs SHALL use both bridges (Scope+Kind) and apply Φ/Ψ penalties to R (never to F/G).
  • VA‑3. If the proof relies on tool kernels, their TA status SHALL be disclosed; weakening TA MUST NOT be “paid for” by silent scope widening.

Mini‑example (VA). Policy P: “∀ x: PassengerCar. stoppingDistance(x) ≤ 50 m on dry at speed≤50.” — Kind: PassengerCar ⊑ Vehicle (K2), signature F4 (predicates). — Scope: {surface=dry, speed≤50, rig=v3, Γ_time=rolling 180 d}. — Proof: a proof assistant lemma over PassengerCar (tool choice is context‑local). — Reuse to Plant‑B: a Scope Bridge with CL=2 (rig bias) and a KindBridge with CL^k=3 (same classification). Apply the scope‑bridge penalty for CL=2 and the kind‑bridge penalty for CL^k=3 to R.

C.3.A:B.5 LA lane — tests & monitoring that cover the right variants [A/I]

What LA contributes. Empirical assurance for claims with executable semantics or physical interfaces; especially when F ≤ F6 or when stochastic/real‑world effects matter.

LA‑patterns (informative):

  • Cover by subkind. Test at least one representative per subkind; add more where variability inside a subkind matters.
  • Boundary probing. Concentrate tests near KindSignature and Scope boundaries (e.g., temp limits, speed caps).
  • Hybrid checks (F6). When software controllers interact with physical systems, ensure both sides declare obligations; include their interaction cases in the matrix.
  • Monitoring windows. For live systems, define Γ_time policies (e.g., rolling 30 d) and tie alerts to kind‑aware metrics (“error rate per ServiceInstance”).

LA‑obligations (normative):

  • LA‑1. Each test campaign SHALL specify rows/columns in the evidence matrix and attach Scope/MemberOf predicates to each run.
  • LA‑2. Freshness windows SHALL be explicit and enforced in guards (no “latest”).
  • LA‑3. If a KindBridge merges subkinds, test plans SHALL be adjusted (more cells, stricter acceptance), and the kind‑bridge penalty (based on CL^k) applied to R.
  • LA‑4. Publishing SpanUnion coverage requires the independence note (which support lines differ).

Mini‑example (LA). Claim: “For all x ∈ Vehicle: brakeDistance ≤ 50 m on dry, ≤ 40 m on wet.” — Rows: {PassengerCar, LightTruck}. — Columns: {dry, ≤50}, {wet, ≤40} with rigs and versions. — Cells: PC/dry covered by track tests; LT/wet by simulation + surrogate tests (independent lines → SpanUnion allowed). — Bridge to jurisdiction Y collapses EV vs ICE ⇒ CL^k=2. Apply Ψ(2) to R; add extra wet tests to compensate.

C.3.A:B.6 TA lane — tool qualification where it belongs [A/I]

What TA contributes. Confidence in provers, checkers, model‑checkers, data classifiers and pipelines. TA is about the machinery, not the claim or kind semantics.

TA‑patterns (informative):

  • Prover kernels. Audit/qualification of the kernel version used for VA proofs.
  • Automated Model‑checkers. Qualification against seeded faults; document limits (precision, nondeterminism).
  • Classifiers used for MemberOf. If membership uses ML or rules engines, qualify the classifier separately; any drift monitoring belongs to LA freshness.

TA‑obligations (normative):

  • TA‑1. Tools critical to VA/LA SHALL declare their qualification status and version; guards SHALL reference these declarations when they matter. TA‑2. Lower tool qualification MUST NOT be hidden by relaxing F or widening G. target‑contexts may offset it by demanding more evidence in R (for example, extra tests), per policy.
C.3.A:B.7 Guard macros for evidence planning & attachment

Guard_EvidencePlan_Typed — approve a plan that is adequate for a typed claim. Plain reading. The first macro checks that the plan names the rows (kinds or masks) and columns (slices), that scope and membership can be checked for each cell, that any Cross‑context moves declare bridges, and that penalties are budgeted in R.

1. MatrixDeclared:    Evidence matrix rows = {subkinds or masks of k}; columns = {TargetSlices within ClaimScope}
2. ScopeBound:        For each column, ClaimScope covers that slice with explicit Γ_time
3. KindBound:         MemberOf(?, k, slice) is defined (deterministic) for all planned slices
4. BridgeBudgeted:    If cross-context:
                        (a) Scope Bridge(s) declared with CL → attach the **scope‑bridge penalty** to the **R** budget
                        (b) KindBridge(s) declared with CL^k → attach the **kind‑bridge penalty** to the **R** budget
5. FreshnessPolicy:   LA freshness windows specified per slice; monitoring plan defined (if live)
6. IndependenceNote:  If SpanUnion is claimed, independence justification attached
7. TADecls:           Tools and their TA status listed; residual risk routed to R (not to F/G)

Guard_EvidenceAttach_Typed — attach concrete evidence to a state change. Plain reading. The second macro checks that each attached evidence unit clearly states which row and column it covers, binds scope and membership in a reproducible way, applies bridge penalties to R, and respects freshness.

1. CellMatch:         Each evidence unit cites (subkind/mask, slice) it covers
2. PredicateBinding:  Evidence embeds Scope and MemberOf predicates (or references them verifiably)
3. BridgeApplied:     If evidence is bridged, apply the **scope‑bridge** and/or **kind‑bridge** penalties to **R**; record loss notes
4. FreshnessMet:      Evidence within declared freshness; else guard fails closed
5. VA/LA Mix:         If VA present, verify it matches the quantified Kind; if LA fills gaps, show matrix deltas
6. TAConsistent:      Tool versions match TA declarations used at planning time
C.3.A:B.8 Anti‑patterns & remedies
Anti‑patternWhy it’s riskyRemedy
“We tested one golden case.”Hides variant risk; ignores subkinds.Build a subkind‑indexed matrix; add boundary tests per column.
“Latest data suffices.”Non‑deterministic; un‑auditable.Declare Γ_time windows; fail closed on expiry.
“Tool is trusted, so we’re done.”Confuses TA with VA/LA; misses content risk.Keep TA separate; add VA proofs or LA tests as needed.
Bridging without penaltiesUnderstates risk; mapping gaps surface laterApply scope‑bridge and kind‑bridge penalties to R; publish loss notes.
Widening G to cover evidence gaps.Conflates applicability with available tests.Keep G honest; expand matrix or lower claim scope explicitly (ΔG−).
Inferring scope from how many items matchScope is not the same as membershipKeep Scope (where it applies) distinct from membership (which items match in the slice).
C.3.A:B.9 End‑to‑end example (manager’s cheat‑sheet) [I]

Scenario. You want to publish “∀ x: PassengerCar. brakeDistance ≤ 50 m dry; ≤ 40 m wet” across two plants.

  1. Kinds. PassengerCar ⊑ Vehicle (K2, signature F4).
  2. Scope (G). {surface in {dry, wet}, speed limits, rig version, time selector (Γ_time)=rolling 180 days} in Plant‑A.
  3. VA. Prove the property for PassengerCar using a proof assistant, and cite the Scope slices it assumes.
  4. LA. Build an evidence matrix with rows {PassengerCar} and columns {dry, up to 50} and {wet, up to 40}, including rig variants; add boundary tests near the limits.
  5. TA. Qualify the prover kernel and the automated checker used for wet surrogates.
  6. Bridge. To Plant‑B: a Scope Bridge with CL=2 (rig bias) and a KindBridge with CL^k=3 (same classification).
  7. Penalties. Apply the scope‑bridge penalty for CL=2 and the kind‑bridge penalty for CL^k=3 to R. Per policy, add extra test cells in Plant‑B to compensate for rig bias.
  8. Guards. Use Guard_EvidenceAttach_Typed on the state change; include freshness checks.

Outcome. A defensible, auditable publication: typed, scoped, with clear evidence coverage and explicit risk penalties — no conflation of abstraction with applicability, and no tool risk smuggled into content.

C.3.A:Annex C. ESG guards

Status note. This profile restates the guard semantics from §4 for ESG/Method contexts. It does not add obligations; where wording diverges, §4 controls.

C.3.A:C.1 ESG guard obligations (normative)

When a state transition publishes or affirms a claim that quantifies over kinds, the guard SHALL:

  1. Scope coverage (USM). U.ClaimScope(Claim) covers TargetSlice (singleton or finite set) and TargetSlice declares Γ_time (no “latest”).

  2. Typed definedness. A deterministic membership check is available for every kind used by the claim in the TargetSlice. If membership cannot be evaluated in that context, the guard fails closed.

  3. Typed compatibility (same Context). If a downstream consumer expects a specific kind, then for each kind used by the claim either:

  • the used kind is an is‑a / subkind‑of the expected kind, or
  • a documented RoleMask for the expected kind is used and its constraints are met and observable in the TargetSlice.
  1. Typed compatibility (Cross‑context). If any referenced kind is used across Contexts, a KindBridge SHALL be declared with a published type‑congruence level (minimum acceptable level per Context policy), order preserved (no inversions), and loss notes. The guard SHALL apply the kind‑bridge penalty to R.

  2. Scope translation (Cross‑context claim use). If the Claim’s scope originates in another target‑context, a Scope Bridge with a published congruence level is required; apply the scope‑bridge penalty to R.

  3. Formality threshold (if gated). If the ESG state requires rigor, enforce U.Formality(Claim) ≥ F_k (C.2.3). (Note: Raising F does not widen G; do not substitute.)

  4. Evidence freshness (R). Where the new state implies trust, assert freshness windows and confirm no expired bindings.

Prohibitions (normative).

  • Do not widen G to “hide” a type mismatch. Fix typed compatibility (introduce a subkind, use a RoleMask, publish a KindBridge) or reject.
  • Do not treat a mask name as a kind—masks must be registered and deterministic.
  • Do not infer G from the size of a kind’s Extension; Scope ≠ Extension.
Method–Work guard obligations (normative)

To admit a capability for a specific Work step at JobSlice, the guard SHALL:

  1. Work scope coverage (USM). The capability’s Work scope covers the JobSlice, and the JobSlice includes an explicit time selector (Γ_time).

  2. Measures & qualification. All required U.WorkMeasures hold at JobSlice and the U.QualificationWindow is valid at Γ_time.

  3. Typed inputs (same Context). For each declared input kind (or RoleMask), assert:

    • Membership check available: the system can deterministically decide whether the input belongs to the expected kind in this JobSlice.
    • Compatibility: the provided input kind is an is‑a / subkind‑of the expected kind, or the RoleMask constraints are satisfied and observable.
  4. Typed outputs and post-conditions (if declared). If the capability guarantees an output kind k_out, record the obligation to demonstrate MemberOf(output, k_out, JobSlice) (typically via conformance tests or audits).

  5. Cross‑context typed use. If inputs and outputs are typed in a different target-context than the capability or JobSlice:

    • KindBridge(s) are required with a published type‑congruence level and loss notes; apply the kind‑bridge penalty to R.
    • If the capability resides in another target‑context, a Scope Bridge with a published congruence level is required; apply the scope‑bridge penalty to R.
  6. No substitution by G. Do not “fix” a typed mismatch by widening the Work scope. Use an adapter or a RoleMask, or reject.

Guard macros (ready‑to‑use)

ESG_TypedGate(Claim, TargetSlice, Kinds, thresholds) Manager view: The following macros are for editors; target‑contexts may automate them if desired. Managers can read the comments on each step; the checks are the same ones described in Plain language above.

1  assert ClaimScope(Claim) covers TargetSlice                 // USM
2  assert Γ_time(TargetSlice) is explicit                  // no "latest"
3  for each kind k in Kinds used by Claim:
4      assert membership_defined(k, TargetSlice)               // C.3.2 K-07
5  if same-Context typed expectations exist:
6      assert is_subkind(k, k_expected) OR meets_mask_constraints(k_expected, TargetSlice)
7  if cross-context kinds:
8      assert KindBridge(k, k') with type_congruence ≥ c_kind and loss notes
9      apply_kind_bridge_penalty(type_congruence)
10 if cross-context scope:
11     assert ScopeBridge(Claim.Context, TargetSlice.Context) with congruence ≥ c_scope
12     apply_scope_bridge_penalty(congruence)
13 if F-threshold applies: assert Formality(Claim) ≥ F_k        // C.2.3
14 if trust implied: assert Fresh(evidence, window) AND NoExpiredBindings

MethodWork_TypedGate(Capability, JobSlice, InputKinds, OutputKinds, thresholds)

1  assert WorkScope(Capability) covers JobSlice                // USM
2  assert Γ_time(JobSlice) is explicit
3  assert WorkMeasures(JobSlice) satisfied AND QualificationWindow holds
4  for each expected input-kind k_in:
5      assert membership_defined(k_in, JobSlice)
6      assert is_subkind(k_input, k_in) OR meets_mask_constraints(k_in, JobSlice)
7  if declared output-kind k_out: record obligation to show MemberOf(output,k_out,JobSlice)
8  if cross-context kinds: assert KindBridge(… ) with type_congruence ≥ c_kind; apply_kind_bridge_penalty(type_congruence)
9  if cross-context capability/scope: assert ScopeBridge(… ) with congruence ≥ c_scope; apply_scope_bridge_penalty(congruence)
Worked examples (manager‑focused)

(A) ESG — Promote a braking policy to Effective. Claim. “For all vehicles: braking distance is ≤ 50 m on dry and ≤ 40 m on wet.” TargetSlice. {surface∈{dry,wet}, speed≤50 km/h, rig=v3, Γ_time=rolling 180 d} Kinds. Vehicle (K2, KindSignature at F4); the consumer subsystem expects PassengerCar. Guard.

  1. Scope covers TargetSlice (USM ✓).
  2. Definedness of MemberOf(?, Vehicle, TargetSlice) ✓.
  3. Typed compatibility: PassengerCar ⊑ Vehicle ✓.
  4. No bridges → no penalties.
  5. F‑threshold: Formality(Claim) ≥ F4 ✓.
  6. Freshness: evidence ≤ 180 days ✓. Result: Transition allowed. F/R apply weakest‑link on support paths; G remains the set declared.

(B) Method–Work — Admit “RiskScore” step with typed input. Capability. ComputeRiskScore expects AuthenticatedRequest; promises SLOs (latency ≤ 50 ms, error ≤ 0.5 %). JobSlice. {api=v2.3, region=eu‑west, Γ_time=now, traffic_class=gold} Inputs. Producer emits Request (no auth guarantee). Guard.

  1. Work scope covers JobSlice; Measures & QualificationWindow ✓.
  2. Typed inputs: MemberOf(?, AuthenticatedRequest, JobSlice) must hold. Not true for raw Request.
  3. Remedy: insert an adapter that enforces/attests auth → yields AuthenticatedRequest.
  4. No Cross‑context → no bridges. Result: Admitted with adapter; Scope unchanged; R relies on adapter evidence. Widening Work scope is not acceptable to bypass typed mismatch.

(C) Cross‑context ESG — Adopt policy across plants. Claim Context. SafetyLab@2026. target Context. PlantB@EU. Kinds. Vehicle ↦ TransportUnit via KindBridge with CL^k=2 (EV/ICE collapsed); Scope Bridge from lab to plant with CL=2 (rig bias ±2 %). Guard.

  1. Translate Scope and cover TargetSlice_B.
  2. Translate Kind and ensure MemberOf(?, TransportUnit, TargetSlice_B) is defined.
  3. Apply the scope‑bridge penalty (level 2) and the kind‑bridge penalty (level 2) to R; publish loss notes. Result: Transition allowed with reduced R; G is the mapped set; F unchanged.
Anti‑patterns & remedies (normative where noted)
Anti‑patternWhy it’s wrongRemedy
Widening G to “make kinds match”Conflates entityOfConcern with applicabilityIntroduce subkind, RoleMask, or KindBridge; keep G honest.
Using a mask name as a kindHides constraints; breaks determinismRegister mask; ensure constraints are observable; promote to subkind if reused.
Ignoring CL^k when classifying across ContextsUnder‑counts riskRequire KindBridge; apply Ψ(CL^k) to R; record loss notes.
Inferring Scope from the size of the ExtensionScope is not the same as ExtensionKeep Scope (where it applies) distinct from Extension (which items count in the slice).
Implicit “latest” timeNon‑deterministic guardRequire explicit Γ_time (point/window/policy).

C.3.A:End

Decision Theory (Decsn-CAL)

Type: Calculus (C) Status: Stable Normativity: Normative unless marked informative

At a glance. C.11 is the choice-calculus pattern for the moment when options already exist and the working question is which option to choose, including whether another probe is worth its cost before commitment.

Problem frame

Use this when. Use this pattern when one DecisionSubject already has an OptionSet in hand and the real question is how to choose among those already-available options under uncertainty, preference, causal or subjunctive dependence, and bounded probing or computation.

Start here when. Start here when a person, team, organization, or other decision-capable system must decide whether to choose now or spend more effort on probing, information gathering, or computation before choosing.

First output. The first useful output is one explicit DecisionSubject, one explicit OptionSet, one explicit comparison basis, one explicit ChoiceRule, and one explicit ChoiceResult saying whether the best next move is choose now, reject the current set, probe more, or move to a neighboring question.

If that first output still cannot be written honestly, the current comparison state is not late-stage choice doctrine yet. The case is still unfinished local choice work or one neighboring question in disguise.

Immediate failure indicators.

  • The chooser is still moving between person, team, organization, or another collectivity-bearing level.
  • The current comparison is still inventing, expanding, or reframing options while also claiming to compare them.
  • The current comparison says more information would help but cannot name one next probe that could still change the result.
  • The current result is really surfacing one selected set or one enactment plan rather than one local choice.

First-minute questions.

  • Who or what is actually choosing here, and at what chooser-bearing level?
  • What options are already on the table now?
  • What current basis is being used to compare them?
  • What next probe could still change the choice, if any?
  • Is this still local choice, or has the question already moved to search, pool policy, publication, or enactment?

Typical reroutes. C.18 when the real question is still inventing or reframing options; C.19 when the working question is how broadly to explore or exploit the candidate pool; C.24 when one option is already chosen and the work has become sequencing or enactment; A.13 / C.9 when the hard question is agenthood rather than choice; A.18 / A.19 when the mathematical support question itself becomes primary.

Common neighboring-pattern mistakes. Do not use C.11 to hide search work inside "decision", to hide candidate-pool policy inside one local choice, or to hide execution planning inside one generic rationality account. Do not treat selected-set publication or shortlist semantics as if they were the same question as deciding.

What goes wrong if this pattern is missed. Search, selection policy, planning, and choice doctrine collapse into one blurred notion of rationality. Teams either choose too early because pool policy was never stated, keep probing without one reason the next probe is still worth its cost, or leave only one vague claim that "a decision was made" without one explicit decision record naming the current result.

What this pattern buys. This pattern gives one stable place to compare classical, causal, success-first or subjunctive, bounded-resource, active-inference-adjacent, and quantum-like decision lines without silently reassigning search, selection, or planning doctrine to the wrong question. In practice it buys one explicit answer to four questions: choose now, reject the current set, probe again, or reroute.

Not this pattern when. Do not start here when the current question is still generating candidate options, governing exploration or exploitation over a candidate pool, publishing shortlisted-set semantics, or sequencing execution under an operational plan.

Decision work often fails not because no options exist, but because the choice among existing options is never typed as its own question. C.11 starts from one narrower and more useful center: one decision subject choosing among already-available options, including whether more probing is worth the cost before the choice is fixed.

Problem

Many systems have options on the table but still lack one explicit doctrine for what makes one option rational to choose. They mix together at least four different questions.

One question is still generating candidate options, variants, or open-ended search directions. Another question is governing how broadly a candidate pool should be explored or exploited before narrowing. A third question is planning, sequencing, replanning, or enacting the move once a choice has already been made. The fourth question, and the one governed here, is choosing among already-available options under uncertainty, dependence, and bounded deliberation.

A second distortion appears when decision theory is reduced to one thin slogan about expected utility. Real choosers face evidential and causal distinctions, subjunctive or success-first cases, probe costs, information value, computation value, and situations where the chooser is not just one isolated individual.

Without one explicit place for choice calculus, search, candidate-pool policy, and planning rush into the same question, while the actual doctrine of choosing among live options disappears behind generic talk about rationality.

ForceTension
Choice doctrine versus option generationC.11 must govern choice among already-available options without swallowing C.18 search and candidate-generation work.
Evidential, causal, and subjunctive dependenceThe pattern must stay usable with classical decision language while making room for causal and success-first repairs where correlation is not enough.
Decide now versus probe moreThe chooser may need to stop and choose now, or spend more effort on information and computation first. The theory must make that trade legible.
Decision subject versus narrower agent languageThe chooser may be one person, one team, one organization, or another collectivity-bearing system. The pattern must not silently force all cases into one narrow Agent reading.
Minimal mathematical floor versus premature heavy formalismThe pattern needs a stable object stack for disciplined reasoning and inspection, but it should not pretend that one full quantum-like or geometry-heavy package is already settled.

Solution

Causal-use hook for choice records

When the admissible choice among an existing OptionSet depends on an effect claim, intervention claim, counterfactual comparison, causal policy claim, or off-policy causal evaluation, the ChoiceResult keeps the decision-theory question local and cites C.28 for the causal-use question and support basis.

Optional ChoiceResult.causalUseSpec?:

ChoiceResult.causalUseSpec? {
  causalUseQuestionRef?: U.CausalUseQuestion
  targetCausalityLadderRung: CausalityLadderRung
  causalUseClaimKind: CausalUseClaimKind
  causalActionPolicyClass?: CausalActionPolicyClass
  causalEvidenceSupportBasis?: CausalEvidenceSupportBasis
  causalIdentificationProfileRef?
  counterfactualSamplingRealizabilityProfileRef?
  causalUseEvidenceDesignRef?
  causalUseSupportRecordRef?: CausalUseSupportRecordRef
  causalUseSupportVerdict?: CausalUseSupportVerdict
  supportedUse: CausalUseSupportStatement
  unsupportedUse: CausalUseUnsupportedStatement
}

The causal-use tail may be omitted only when the choice result does not reach CausalUseActivation: it is not decision-bearing on the causal claim, not publication-bearing, not assurance-bearing, and not reused as support for deployment, fairness, benchmark, or downstream selection. If causal wording changes the admissible choice result, the tail is present or the causal wording is downgraded.

What changes in practice: a decision record that says "choose this because it improves outcome", "choose this because it would have prevented harm", or "choose this policy because replay shows it is better" must state whether the claim is observational association, interventional action/effect, or counterfactual comparison before the ChoiceResult is treated as supported.

What this does not authorize: [C.11](/generated/patterns/C.11) does not identify causal effects, certify target-trial emulation, validate off-policy causal evaluation, or decide counterfactual sampling realizability; it emits one ChoiceResult and redirects the causal-use question to [C.28](/generated/patterns/C.28).

Primary EntityOfConcern and admissible decision move

C.11 governs theory-side choice among already-available options. Its selected decision move is deciding what should be chosen from the current OptionSet, including whether further probing, information gathering, or computation is rational before the choice is fixed.

The OptionSet choice question begins only after an option set already exists. It does not govern open-ended generation of options, and it does not govern the execution order of a plan after a choice has already been made.

Decision discipline over a live option set

A conforming C.11 pass does not stop at naming schools of decision theory. It carries one usable choice discipline over a live OptionSet, and it ends with one explicit ChoiceResult under one explicit ChoiceRule.

  1. Fix the chooser and the choice-bearing level. State one DecisionSubject and one DecisionSubjectGranularity. If the real dispute is still about who or what counts as the chooser, coordinate with A.13 / C.9 instead of hiding that dispute inside one local choice.

  2. Freeze the current option set. State the already-available options being compared now as one OptionSet. If the hard work is still inventing, expanding, or reframing the options, stop here and apply C.18.

  3. Make the comparison basis explicit. State one PreferenceOrder or one EvaluativeMeasure, plus one BeliefState and one OutcomeModel. The comparison is not usable if some options are being judged under one belief state and other options under one later, unmarked update. If two options are only comparable after one further probe or one model revision that changes the belief state or outcome model before comparison, say that the current comparison is unfinished and apply step 5 rather than pretending that one silent basis shift already solved it.

  4. Choose the dependence layer that actually governs the case. Start from the evidential baseline when the choice is being compared through likely outcomes under the current BeliefState. Add one InterventionModel when taking one option changes the world through intervention rather than mere observation. Add one CounterfactualModel plus one SubjunctiveDependenceRelation when the case depends on one predictor, one structurally linked chooser, or one decision-procedure coupling that intervention talk alone does not capture. Use the least-committing dependence layer that still covers the live case, and do not switch layers across options without saying so explicitly.

  5. Run the probe-worthiness test before commitment. State one ProbeActionSet, one ProbeBudget, and one CostToProbe. Use ValueOfInformation for additional observation or measurement, and ValueOfComputation for additional reasoning, simulation, or search over the already-available options. This rule is intentionally local or myopic: it judges the best next feasible probe over the current OptionSet and current comparison basis, not one full sequential or non-myopic experimental program. Richer OED lines may strengthen this doctrine, but the local C.11 closure rule already has to decide whether the next feasible probe can still change the current choice. If no feasible further probe fits the remaining ProbeBudget, or if the best available probe no longer justifies its CostToProbe, close under the current comparison basis. If a feasible probe is still worth its cost, and that probe could still change which option survives or whether the current OptionSet should be rejected, run it, update the BeliefState and OutcomeModel, and return to step 3. If one choice result is already fixed and the remaining probe would change only execution-path description, call-plan ordering, enactment budget, or checkpointing of that chosen move, stop treating the probe as local choice doctrine and apply C.24.

  6. Apply one ChoiceRule and emit one ChoiceResult plus the next question. End with one explicit result: choose now, reject current set, probe again, or reroute because this is no longer local choice. If the result is choose now, name the winning option or the retained tie-set plus the reason no remaining feasible probe is worth its cost. If the result is reject current set, name the reason no current option survives under the present basis and, when more work follows, the neighboring question that now takes over. If the result is probe again, name the next probe and the exact comparison defect it is supposed to repair. A C.11 pass is done only when it names the lawful next move and the reason that move is lawful.

Well-formed comparison state

Well-formedness constraint: a live C.11 comparison state is usable only when the decision record states all of the following:

  • one DecisionSubject at one DecisionSubjectGranularity;
  • one current OptionSet;
  • one current comparison basis through PreferenceOrder or EvaluativeMeasure, plus one BeliefState and one OutcomeModel;
  • one active dependence layer for the current comparison, unless the record explicitly says that comparison is still being reopened;
  • one current account of whether another probe is still feasible and worth its cost.

The comparison is still unfinished, not yet wrong but not yet closeable, when any of the following remains true:

  • the chooser is still shifting between person, team, organization, or another collectivity-bearing level;
  • the option set is still changing while the record also claims to rank the options;
  • one option is being judged under one belief state and another under one later update that is not itself declared as the next probe result;
  • one heavier dependence layer is invoked for rhetorical force, but the record never states what defect of the lighter comparison it repairs;
  • the record says more information would help, but never says which probe could still change the choice and why.

Minimal admissible decision semantics

This minimal choice doctrine does not settle every decision-theory dispute, but it already supports some semantic moves by value and rules out others.

The following are lawful in this C.11 body when they are stated explicitly:

  • one incomplete or only partially ordered PreferenceOrder, so long as the unresolved comparison stays visible through one retained tie-set, one further probe, or one honest reject current set result rather than one fake winner;
  • one EvaluativeMeasure for magnitude, threshold, or trade-off-sensitive cases, so long as the measure being used now is explicit enough to explain why the current result follows under it;
  • one temporary unresolved criterion conflict, so long as the record says whether the present comparison is using one priority order, one threshold, one explicit trade-off measure, or one unfinished state that still blocks closure;
  • one explicit BeliefState revision, so long as it enters the comparison as one named probe result or one named model repair rather than as one silent basis shift;
  • one widened DecisionSubject at person, team, organization, or other collectivity-bearing level, so long as the current subject-bearing level is explicit and the record does not hide unresolved cross-scale or cross-collective conflict behind one generic chooser label.

The following are not admissible in this C.11 body:

  • silently totalizing one genuinely partial preference relation just to force choose now;
  • silently switching from one criterion mix or one belief state to another across options;
  • pretending that unresolved cross-scale or cross-collectivity conflict is already one settled local ranking when the aggregation question has not actually been discharged;
  • using one polished record shape as a substitute for one stated comparison doctrine.

This is why C.11 is more than one note-taking protocol. The body already supports local incompleteness, partial order, explicit trade-off measures, and wider chooser-bearing cases, but it requires those semantic facts to change the lawful result rather than remain hidden beneath one elegant summary line.

Probe-worthiness rule

Another probe is worth doing only when all three conditions hold together:

  • the probe fits inside the remaining ProbeBudget;
  • the expected gain from the probe, through ValueOfInformation or ValueOfComputation, is large enough to justify its CostToProbe;
  • the probe can actually change the local choice result by changing the ranking, breaking or creating a tie, showing that no current option survives, repairing one missing comparison, or showing that the question should reroute.

This is the current local or myopic probe-worthiness rule for C.11: judge the best next feasible probe over the current OptionSet, not one whole non-myopic experiment design over longer horizons. Later sequential or non-myopic OED may strengthen this doctrine, but they do not move the local-choice question out of C.11.

Do not keep probing merely because uncertainty remains. Uncertainty is ordinary. What matters is whether one feasible next probe can still change what should be chosen, or whether the current OptionSet should be rejected, from the current local choice question.

If the best available next probe cannot change which option survives, cannot change whether the current set should be rejected, or cannot justify its cost, the correct result is not one vague statement that the case is hard. The correct result is one explicit ChoiceResult under the current basis and current ChoiceRule.

If the next probe would no longer change which option survives but would only change how one already-chosen move gets enacted, budgeted, or checkpointed, the question has already crossed to C.24.

ChoiceRule versus ChoiceResult

ChoiceRule and ChoiceResult are not the same kind of thing.

  • ChoiceRule is the doctrine or operator that says how the current comparison basis, dependence layer, and probe-worthiness value support one next move.
  • ChoiceResult is the emitted record stating which next move is lawful now under that rule.

The operational answer of this pattern is therefore one emitted ChoiceResult under one explicit ChoiceRule. The result is complete only when it states the next move and the condition that makes that move lawful.

Only four result forms are lawful here:

  • choose now
  • reject current set
  • probe again
  • reroute

A fifth soft result such as "keep thinking", "stay with the current view", or "the case is still complex" is not a conforming output. It is one unfinished state that still needs to be typed.

For choose now, the emitted ChoiceResult should show:

  • the selected option or the retained tie-set;
  • the comparison basis under which that result currently holds;
  • the reason no still-feasible probe is worth its cost.

For reject current set, the emitted ChoiceResult should show:

  • that no member of the current OptionSet survives under the present comparison basis;
  • the exact shared defect, threshold failure, or dominated-outcome reason that defeats the current set;
  • the next neighboring question only when more work now follows, such as new option generation or one explicit escalation path.

For probe again, the emitted ChoiceResult should show:

  • the exact next probe;
  • the comparison defect that probe is expected to repair;
  • the reason the probe is still worth its cost.

For reroute, the emitted ChoiceResult should show:

  • the neighboring pattern authority that now governs the question;
  • the reason this is no longer local choice among already-available options.

Closure rule over the current OptionSet

The comparison may close as choose now only when all of the following are true together:

  • the current OptionSet is stable enough that the decision record is no longer still inventing options;
  • the current comparison basis is explicit enough to state why one option survives or why one tie-set remains;
  • no still-feasible next probe is expected to change the survivor relation with enough expected value to justify its cost;
  • the record is still governing local choice rather than pool policy, publication, or enactment.

The comparison may close as reject current set only when all of the following are true together:

  • the current OptionSet is explicit and stable enough to reject as the present choice set;
  • the current comparison basis is explicit enough to show why no member survives under the present basis;
  • no still-feasible next probe is expected to rescue one member with enough expected value to justify its cost;
  • the result is still one local choice conclusion rather than one disguised pool-policy, publication, or enactment result.

The comparison should close as probe again only when all of the following are true together:

  • one next probe is named by value;
  • that probe fits the remaining ProbeBudget;
  • that probe is expected to repair one named comparison defect;
  • that repaired defect could still change which option survives, whether the current set should be rejected, or whether the question should reroute.

The comparison should close as reroute when the record has already learned that the selected decision move changed:

  • to C.18 when the option set itself is still under invention or reframing;
  • to C.19 when the question is now how broadly to keep exploring or exploiting one candidate pool;
  • to C.24 when one choice result already exists and the next task is now sequencing, enactment, or execution-path probe work;
  • to G.5 when the next task is now selected-set surfacing or publication.

If none of those closure conditions can yet be satisfied, the record is still unfinished. It is not rescued by richer terminology alone.

Minimal decision-record form

A minimal C.11 decision record has this shape:

DecisionSubject(...)
DecisionSubjectGranularity(...)
OptionSet(...)
ComparisonBasis(
  preferenceOrder or evaluativeMeasure,
  beliefState,
  outcomeModel,
  optional intervention/counterfactual/subjunctive layer
)
ChoiceRule(
  closure rule over the current basis and probe decision value
)
ProbeDecisionValue(
  probeActionSet,
  probeBudget,
  costToProbe,
  valueOfInformation,
  valueOfComputation
)
ChoiceResult(
  nextMove = choose_now | reject_current_set | probe_again | reroute,
  selectedOption or retainedTieSet or rejectedCurrentSet or rerouteOwner,
  reason this is the lawful next move
)

The record does not need that exact syntax. It does need that exact content.

If the record does not state the current chooser, current options, current comparison basis, current ChoiceRule, current probe decision value, and current ChoiceResult, then it still behaves more like one doctrinal essay than one usable decision record.

Use branch language only when it changes the actual comparison being performed.

Resource-aware choice is one lens over declared source families

  • Start from one declared source family or one declared source-family composition such as Front, Archive, or Front+Archive.
  • Apply one declared decision lens over that source family rather than inventing one hidden universal winner rule.
  • CostToProbe, ValueOfInformation, and ValueOfComputation belong to that lens-side choice doctrine.
  • They may justify another probe, one changed local comparison outcome, or one stop decision, but they do not rename the current DominanceSet and do not publish one shortlist-family result.
  • If one candidate remains worth probing because its expected information value still exceeds its expected cost, say that explicitly as one lens-side choice judgement.
  • If one archive point remains worth probing because it may change the frontier later, keep that as one resource-aware choice claim, not as evidence that the point is already on the current front.
  • The kernel floor here is:
    • A.19.SelectorMechanism remains the cited set-return floor
    • SelectionSlot remains the selector output floor
    • if later selector-facing publication is required, that set-returning floor may support one Shortlist or one RankedShortlist in G.5 rather than one forced single winner
Classical evidential baseline

Stay with the classical evidential baseline when the question is to compare already-available options through preferences, utilities or desirabilities, beliefs, and likely outcomes under uncertainty.

In this baseline, the options are being compared as evidence about what consequences are likely if they are chosen. This is the ordinary default when intervention structure, predictor-coupling, or context-sensitive non-commutativity are not yet doing real work in the case.

Typical practical cash-outs are:

  • choose now because the current shared BeliefState and OutcomeModel already make one option or tie-set survive, and no still-feasible probe is worth its cost;
  • probe again because one further observation, measurement, or comparison pass could still change the ranking without requiring a heavier causal, subjunctive, or context-order repair;
  • reroute because the selected decision move is no longer really comparing one fixed OptionSet, but has become search, pool policy, publication, or enactment work.

The baseline is still unfinished when the current comparison invokes it but cannot keep one shared BeliefState and OutcomeModel across the compared options, or when one heavier defect is already live and the current comparison still pretends one plain evidential comparison is enough.

Causal repair

Switch on one InterventionModel when taking one option changes the world through intervention rather than merely signaling which outcome was already likely.

What changes here is not the prestige label of the theory line, but the comparative question itself: the working question is no longer only what this option indicates about the outcome, but what this option causes in the outcome structure.

Typical practical cash-outs are:

  • choose now because, under the declared intervention structure, one option now causally dominates or remains the survivor and no remaining feasible probe can reverse that causal ranking;
  • probe again because one intervention-relevant uncertainty still blocks a lawful causal comparison and one named next probe could still change which option causally survives;
  • reroute because the intervention-use question has already moved from local choice into enactment planning, protocol design, or one neighboring question.

This repair has not yet landed if the comparison still treats options only as evidence after invoking causal language, or if an InterventionModel is named without stating what defect of the lighter evidential comparison it repairs.

Success-first or subjunctive repair

Switch on one CounterfactualModel plus one SubjunctiveDependenceRelation when Newcomb-like, blackmail-like, or other predictor-coupled cases remain under-described by the older evidential-versus-causal split.

What changes here is that the comparison must stay answerable to linked decision procedures, predictors, or structurally similar choosers rather than only to direct intervention on one local event.

Typical practical cash-outs are:

  • choose now because, under the declared counterfactual or subjunctive structure, one option survives once the predictor-coupled comparison is made explicit;
  • probe again because one further model clarification, predictor assumption check, or decision-procedure comparison could still reverse the current survivor relation;
  • reroute because the selected decision move is no longer settling local choice doctrine but has become one wider characterization, negotiation, or enactment question that only borrowed predictor-coupling language.

If that coupled structure is not live, do not activate this branch. If a predictor-coupled or success-first repair is named but the linked structure that changes the comparison is still unspecified, the branch is not yet load-bearing in the current decision.

Active-inference neighboring repair

Bring the active-inference line into view when the chooser is embodied, online, and socially coupled, and when the decision cannot be understood as one disembodied choose-then-act moment.

What changes here is practical next-move logic, not one neighboring-school label. The comparison is no longer over one frozen snapshot alone. The comparison must now ask whether one more observation, one more coupled update, or one more socially mediated or role-expectation clarification actually changes what should be done now.

This minimal choice doctrine makes that social-expectation pressure explicit, but it does not yet operationalize one full ROE or SocialExpectationRegime object model inside C.11. If that heavier machinery is itself what the case hinges on, the decision record should say so honestly rather than pretending the local C.11 floor has already settled it.

Typical practical cash-outs are:

  • probe again because one further embodied observation, coupled update, or explicit role-expectation clarification can still change the state estimate enough to reverse the current survivor relation;
  • choose now because delay itself now worsens the state being managed, closes the window in which the preferred option remains feasible, or leaves no lawful time for one more socially mediated check;
  • reroute because the question has already become enactment sequencing or agent-characterization work rather than local choice.

C.11 keeps the choice question visible there, but A.13 and C.9 still govern the narrower question of what kind of agent or agential system is in play, and C.24 still governs later sequencing and enactment once a choice result has already been fixed.

Do not invoke this line only because one agent is acting in the world. Invoke it when embodied coupling, online updating, or explicit social-expectation pressure actually changes what the chooser should do now from the current OptionSet.

Quantum-like neighboring repair

Bring the quantum-like line into view when context effects, order effects, response-replicability tension, or incompatible-question structure change the comparative state enough that one simple commutative probability reading no longer fits.

What changes here is the practical structure of comparison. One order of questioning or one framing path may produce one different survivor relation from another. The comparison must therefore either stabilize the comparison under one declared order or show why one more clarifying pass is still needed.

This minimal choice doctrine keeps the branch at that measurement-sensitive recognition point. It does not yet claim one full quantum-like state-space package inside C.11; it claims only that the live comparison may need one explicit measurement-class or order-sensitive repair rather than one plain commutative reading.

Typical practical cash-outs are:

  • choose now under one declared order or framing because rival orders no longer change which option survives;
  • probe again because one framing-sensitive comparison pass, one further question order, one response-replicability check, or one explicit measurement-class clarification could still reverse the survivor relation;
  • reroute when the selected decision move is no longer deciding among live options but has become one publication or enactment problem that only borrowed order-effect language rhetorically.

Do not promote this line to the unmarked default unless those repaired limitations are live in the case.

Do not invoke this line merely because a case feels psychologically subtle. Invoke it when one changed order, framing, response pattern, or incompatible-question structure actually changes the comparison state or the survivor relation in the live choice.

If none of those repaired limitations is live, stay with the classical evidential baseline rather than switching branches without one live repaired limitation.

The family map is therefore one disciplined set of refinements over the same choice question, not one excuse to rename every neighboring question as decision theory.

Reroute as soon as the question stops being local choice

Use C.11 while the question remains: from this current OptionSet, what should the DecisionSubject choose, and is another probe worth its cost before commitment?

Reroute immediately when the question changes:

  • If the hard question is still what options should exist at all, or whether the current option set needs to be expanded or reframed, leave this pattern and work in C.18 first.
  • If the options already exist but the question is how broadly to keep exploring or exploiting the candidate pool, leave this pattern and work in C.19, where the next useful output is one explicit pool-policy result rather than one local ChoiceResult.
  • If one option is already chosen and the question is how to sequence, budget, or enact that choice, leave this pattern and work in C.24, where the next useful output is one enactment-facing call plan or CheckpointReturn.
  • If the question has shifted from deciding to surfacing, publishing, or naming the selected set, leave this pattern and work in G.5, where the next useful output is one published shortlist, ranked shortlist, narrowed handoff plan, or explicit abstain outcome rather than one more local choice result.

ProbeBudget stays here while it means the epistemic or deliberative budget for one more probe before choice and while that probe can still change which option survives or whether the current set should be rejected. When the same word now means execution budget, call budget, enactment budget, or execution-path scouting after one choice result already exists, the question has moved to C.24.

ValueOfInformation and ValueOfComputation also stay theory-side here as comparative criteria while the question is still local choice among the current options. If one more probe could still change which option survives or whether the current set should be rejected, stay in C.11. If the choice result is already fixed and those criteria now govern only execution-path sequencing, call-plan ordering, or enactment of the chosen move, the question has crossed to C.24. C.19 and C.24 may consume the criteria, but they do not become the doctrine authorities for them.

Outside this pattern remain candidate generation, pool-wide exploration policy, selected-set publication semantics, and execution planning.

Minimal inventory and mathematical floor

The minimum usable inventory for this pattern is:

  • subject and option objects: DecisionSubject, DecisionSubjectGranularity, OptionSet;
  • evaluative and epistemic objects: PreferenceOrder, EvaluativeMeasure, BeliefState, OutcomeModel;
  • dependence and comparison objects: InterventionModel, CounterfactualModel, SubjunctiveDependenceRelation, ChoiceRule, ChoiceResult;
  • probe and bounded-resource objects: ProbeActionSet, ProbeBudget, CostToProbe, ValueOfInformation, ValueOfComputation.

These objects are required because the decision record must carry one explicit path from a live OptionSet through one live ChoiceRule to one emitted ChoiceResult.

Always explicit versus conditionally activated objects

The following objects should be explicit in every usable C.11 decision record:

  • DecisionSubject and DecisionSubjectGranularity;
  • OptionSet;
  • one evaluative basis through PreferenceOrder or EvaluativeMeasure;
  • BeliefState;
  • OutcomeModel;
  • ChoiceRule;
  • ChoiceResult.

The following objects activate when the case needs them:

  • InterventionModel for causal repair;
  • CounterfactualModel plus SubjunctiveDependenceRelation for success-first or predictor-coupled repair;
  • ProbeActionSet, ProbeBudget, CostToProbe, ValueOfInformation, and ValueOfComputation when one more probe or one more computation pass is still live.

What matters is not that every decision record mechanically mentions every token. What matters is that the current comparison does not smuggle one active question without naming the object that carries it.

Immediate lexical commitments:

  • the default chooser term is DecisionSubject, not Agent;
  • DecisionSubjectGranularity names the chooser-bearing level when the question is about whether the chooser is one person, team, organization, or another collectivity-bearing system rather than one generic scalar or coordinate;
  • relation-heavy wording remains answerable to A.6.P together with A.6.5.

Local plain glosses for the load-bearing inventory:

  • DecisionSubject: who or what is actually carrying this choice now, whether that is one person, one team, one committee, one organization, or another collectivity-bearing system;
  • DecisionSubjectGranularity: the level at which the choice is being attributed, such as person-level, team-level, or organization-level rather than one vague "agent" label;
  • OptionSet: the concrete options already on the table now;
  • PreferenceOrder: the current better-than / worse-than ordering over those options for this decision subject;
  • EvaluativeMeasure: the explicit utility-style or desirability-style scoring measure used when the case needs magnitudes, thresholds, or trade-offs rather than only one ordering;
  • BeliefState: the current uncertainty-bearing state about the world, the case, and the likely consequences of the options;
  • OutcomeModel: the model that maps options plus the current uncertainty picture to the consequences that matter for this choice;
  • InterventionModel: the part of the model that says how the world changes because one option is actually taken;
  • CounterfactualModel: the model used to compare relevant non-actual alternatives or alternate decision procedures;
  • SubjunctiveDependenceRelation: the dependence between this choice and one predictor, one linked chooser, or one structurally similar decision procedure when intervention talk alone is not enough;
  • ChoiceRule: the current choice doctrine or operator that says what conditions make choose now, reject current set, probe again, or reroute lawful in this case;
  • ChoiceResult: the emitted result record saying which of those lawful next moves actually follows now under the current ChoiceRule;
  • ProbeActionSet: the further checks, measurements, simulations, or questions that can still be run before commitment;
  • ProbeBudget: the remaining time, money, attention, or tolerated delay available for those pre-choice probes;
  • CostToProbe: the real cost of another measurement, question, simulation, trial, or delay before commitment;
  • ValueOfInformation: the expected gain from learning more before choosing;
  • ValueOfComputation: the expected gain from spending more reasoning or compute before choosing.

What follows from DecisionSubject being wider than Agent:

  • the chooser in C.11 need not be one person-like agent;
  • a team, committee, organization, or coupled human-tool system may be the DecisionSubject when that is the real level at which the choice is being made;
  • the pattern therefore does not force agency characterization to do the job of naming who or what is currently choosing.

This floor is enough to keep choice doctrine inspectable and stable. It does not yet assume one full branch-specific quantum-like package or one cross-scale geometry-heavy package.

Boundary on multilevel and social-expectation doctrine

DecisionSubject and DecisionSubjectGranularity are the local answer to human-only and individual-only narrowing. They keep the chooser explicit at person, team, organization, or other collectivity-bearing level so the doctrine does not silently collapse back into one generic individual agent.

This minimal choice doctrine does not yet settle all of the heavier doctrine that can sit behind that wider chooser-bearing scope. In particular, this body does not yet fully settle:

  • collective aggregation doctrine over conflicting preferences or criteria;
  • cross-scale or cross-collective conflict between person-, team-, organization-, or broader system-level objectives;
  • one full ROE or social-expectation structure for socially scaffolded choice;
  • one full multilevel or geometry-heavy formal package for those cross-scale or cross-collective questions.

Those absences are not hidden exceptions. They are explicit scope boundaries of this C.11 body. If one of those heavier questions is already live in the case, the decision record should say that the local C.11 floor is being used only as the current typed floor and should keep the unresolved aggregation, ROE, or multilevel support question visible by value.

Minimal decision tuple and finish condition

A C.11 decision record is complete only when it states:

  • who or what is choosing: DecisionSubject at one DecisionSubjectGranularity;
  • what is currently choosable: OptionSet;
  • how the options are compared: PreferenceOrder, EvaluativeMeasure, BeliefState, and OutcomeModel;
  • which heavier dependence layer is active when the case needs it: InterventionModel, CounterfactualModel, and SubjunctiveDependenceRelation;
  • what comparison doctrine currently governs the case: one explicit ChoiceRule;
  • what further probing is still available and worth paying for: ProbeActionSet, ProbeBudget, CostToProbe, ValueOfInformation, and ValueOfComputation;
  • what the current comparison concludes: one emitted ChoiceResult that says choose now, reject the current set, probe again, or reroute. That result must name either the selected option, the retained tie-set, or the next probe or reroute named by value.

Without that explicit tuple, choice doctrine usually collapses into one of three easier but wrong substitutes: generic rationality talk, search folklore, or planning folklore.

The finish condition is more specific than "the record now sounds informed." The record is finished enough for practical use only when the next move follows from the stated comparison basis, stated ChoiceRule, stated probe decision value, and emitted ChoiceResult rather than from unstated background assumptions.

A C.11 pass is finished enough for practical use when all three conditions hold:

  • the current comparison basis is explicit enough to state why one option now outranks or survives the others;
  • the reason to stop probing, or the reason to probe again, is explicit rather than assumed;
  • the next question is explicit: choose now, reject current set, probe again, or reroute.

If the case remains tied or underdetermined under the current basis, say that directly and keep the tie-set explicit. A lawful ChoiceResult may still be probe again or reroute, but it must not pretend that one winner already exists when the current basis has not earned that conclusion.

If those conditions are still missing, the pattern has not yet answered the choice question even if the terminology already sounds sophisticated.

System grounding

Tell. A research team already has three experiment plans on the table. The option set exists. The real question is to decide which plan to run and whether one more measurement is worth the delay.

Show. The DecisionSubject is the team, the DecisionSubjectGranularity is team-level, the OptionSet is the three current plans, the team's PreferenceOrder puts risk reduction ahead of schedule convenience, and the current OutcomeModel still carries calibration uncertainty. The extra calibration run belongs in the ProbeActionSet, its one-day delay is part of the ProbeBudget, and the practical question is whether its ValueOfInformation exceeds its CostToProbe by enough to change the emitted ChoiceResult under the current ChoiceRule.

Show. If the extra calibration run could still change which plan survives and the one-day delay fits the remaining ProbeBudget, the right ChoiceResult is probe again with that exact calibration run named. If the measurement can no longer overturn the ranking, the right ChoiceResult is choose now with the winning plan and the reason further probing is no longer worth its cost.

Show. A finished result here should therefore read like one decision record, not one research-theory aside: "Team-level chooser; three current plans; risk reduction preferred; calibration uncertainty still live; one extra calibration run remains feasible and could still overturn the current ranking; ChoiceResult = probe again with calibration run." Or, after that probe is no longer worth doing: "ChoiceResult = choose plan B now because the remaining calibration gain no longer justifies one more day of delay."

Show. C.18 is still the place for inventing new plans, C.19 is still the place for broader exploration policy over the plan pool, and C.24 is still the place for the run sheet and execution order after the choice is made.

Episteme grounding

Tell. A model-selection comparison takes three already-articulated explanations and asks whether one more observation or one more comparison pass is rational before preferring one explanation over the others.

Show. C.11 governs the decision doctrine over the current explanation set: one BeliefState, one OutcomeModel, one explicit PreferenceOrder or EvaluativeMeasure, and, when the case needs it, one InterventionModel, CounterfactualModel, or SubjunctiveDependenceRelation rather than one thinner evidential comparison. When another model comparison pass is on the table, ValueOfComputation belongs here as part of the current choice doctrine rather than as one later planning afterthought.

Show. If one more comparison pass cannot realistically change which explanation survives, the decision record should not end with "more analysis may help." It should end with one ChoiceResult that prefers the current explanation now. If one more pass could still reverse the ordering and is cheap enough to justify, the decision record should say exactly which pass is worth doing and what ambiguity it is expected to resolve.

Show. A lawful closing line here is therefore something like: "ChoiceResult = choose model 2 now because the surviving uncertainty no longer changes the ordering under the current evidence" or "ChoiceResult = run one additional comparison pass on models 1 and 2 because the current outcome model still cannot distinguish their failure costs." Anything vaguer leaves the decision question unfinished.

Show. This pattern does not yet govern open-ended hypothesis generation and does not yet govern operational rollout. Those questions stay outside this pattern even when the decision later feeds them.

Collective and contextual grounding

Tell. A clinical board must decide whether to escalate a patient now or order one more test. The board is the chooser, not one isolated individual, and the result shifts when the case is discussed in prognosis-first versus risk-first order.

Show. C.11 keeps the case legible by typing the chooser as one DecisionSubject at explicit DecisionSubjectGranularity, keeping the available actions as one current OptionSet, keeping one explicit BeliefState and OutcomeModel around those actions, and asking whether another test belongs in the ProbeActionSet with enough expected value to justify its CostToProbe.

Show. Active-inference-adjacent pressure is visible because the chooser is embodied, online, and socially coupled; quantum-like pressure is visible because context and question order change the comparison state. C.11 keeps both repaired limitations visible without pretending that the whole pattern has already become one full active-inference or quantum-like formal package.

Show. If the order effect still changes which option survives, the comparison should say that directly and keep the comparison unfinished. The lawful next move is then either one framing-stabilizing probe or one declared comparison order under which the current result will be judged. It should not hide that instability inside one vague statement that the board has mixed intuitions.

Show. An admissible output here therefore looks like one of three concrete records:

  • ChoiceResult = probe again with one rapid diagnostic test because the current prognosis-first versus risk-first framing still changes which option survives;
  • ChoiceResult = choose now and escalate because, under the fixed risk-first order and current evidence, no remaining feasible test can reverse the survivor relation before delay increases harm;
  • ChoiceResult = the next question is governed by C.24 because the board has already chosen escalation and the next task is now treatment sequencing rather than local choice.

Show. The output still has to be one actionable record. If the current result cannot say which of those three forms is now lawful, then the contextual pressure has been noticed but not yet carried into one usable decision result.

Bias-Annotation

This pattern is intentionally biased toward Prag and Onto/Epist discipline.

It prefers one clear decision-theory EntityOfConcern, one explicit neighboring-question split, and one minimal mathematical floor over one looser but more rhetorically flexible notion of rationality.

That bias can feel too strict in cases where the chooser, option set, or dependence structure is still genuinely moving. The mitigation is not to weaken the pattern back into one general rationality account. The mitigation is to keep the unfinished state explicit: hold one tie-set, hold one probe again result, or state the neighboring governing pattern that now truly governs the question.

The family map also remains plural: causal, success-first, active-inference, and quantum-like repairs stay visible without being overpromoted into one default doctrine.

Conformance Checklist

IDRequirementPurpose
CC-C11.1The pattern SHALL state that C.11 governs choice among already-available options rather than candidate generation.Keeps C.18 outside and prevents search takeover.
CC-C11.2The pattern SHALL keep DecisionSubject as the default chooser term, and SHALL NOT use Agent as the generic chooser term unless one explicit agency claim is governed by A.13 or C.9.Prevents unwanted narrowing of the chooser.
CC-C11.3The pattern SHALL state the C.11 / C.18 / C.19 / C.24 / G.5 split explicitly in the body.Prevents collapse of choice doctrine, candidate generation, candidate-pool policy, planning, and selected-set publication.
CC-C11.4Solution SHALL state one inspectable decision procedure from DecisionSubject and OptionSet through comparison basis, dependence layer, probe-worthiness test, one explicit ChoiceRule, and one emitted ChoiceResult.Keeps C.11 as one operational answer to the choice question rather than one survey of schools.
CC-C11.5The pattern SHALL name one minimal decision inventory including DecisionSubject, DecisionSubjectGranularity, OptionSet, PreferenceOrder, EvaluativeMeasure, BeliefState, OutcomeModel, ChoiceRule, ChoiceResult, ProbeActionSet, ProbeBudget, CostToProbe, ValueOfInformation, and ValueOfComputation.Keeps the calculus objectual rather than slogan-like.
CC-C11.6Load-bearing inventory terms used in the pattern text SHALL receive local plain glosses or equivalent operational clarification inside the body.Prevents the core terminology from remaining implicit or displaced into outside basis carriers.
CC-C11.7Relation-heavy terms such as PreferenceOrder, CounterfactualModel, and SubjunctiveDependenceRelation SHALL remain answerable to A.6.P together with A.6.5.Keeps dependence language inspectable and deconflicted.
CC-C11.8Active-inference and quantum-like lines SHALL be introduced through the limitations they repair, not as prestige branch names.Preserves practical meaning and avoids branch-name citation without operational load.
CC-C11.9The pattern SHALL expose one minimal mathematical floor without overclaiming one full quantum-like or geometry-heavy formal package.Keeps the pattern usable now while leaving heavier support work typed and explicit.
CC-C11.10ProbeBudget SHALL stay in C.11 while it means the budget for further probing before choice, and ValueOfInformation / ValueOfComputation SHALL stay theory-side comparative criteria even when C.19 or C.24 later consume their outputs.Preserves the bounded-resource bridge without letting neighboring patterns steal the doctrine.
CC-C11.11Shortlist or selected-set publication semantics SHALL NOT be treated as part of C.11; if the question shifts to surfacing or publishing the selected set, the text SHALL apply G.5.Preserves selector-facing publication placement and keeps publication semantics out of local choice doctrine.
CC-C11.12When one heavier dependence layer or neighboring family line is activated, the text SHALL state what limitation of the simpler comparison it repairs and what changes in the actual comparison once that line is in play.Prevents branch-name citation from replacing use-time doctrine.
CC-C11.13The text SHALL make the closure rule explicit enough to justify why the lawful result is choose now, reject current set, probe again, or reroute rather than some softer holding-pattern output, and SHALL treat vaguer endings as unfinished rather than as lawful results.Prevents the decision record from ending in one sophisticated but operationally empty result.
CC-C11.14The decision record SHALL make one minimal decision-record shape explicit: chooser, option set, comparison basis, one explicit ChoiceRule, probe decision value, and one emitted ChoiceResult; choose now, reject current set, probe again, and reroute outputs SHALL each state their mandatory fields explicitly enough to determine the next move without reopening surrounding rationale.Keeps the pattern usable as one working decision record rather than one doctrinal memo.
CC-C11.15If a ChoiceResult is supported by a causal effect, counterfactual comparison, causal policy, or off-policy causal evaluation claim, it SHALL carry ChoiceResult.causalUseSpec? with targetCausalityLadderRung, causalUseClaimKind: CausalUseClaimKind, supported use and unsupported use, and the relevant C.28 support refs.Prevents decision-theory vocabulary from certifying causal-use support.

Common Anti-Patterns and How to Avoid Them

One quick usability test helps here: if the closing line does not state one lawful next move for the working chooser or team, the current result is still unfinished even if the doctrine survey looks polished.

Anti-patternSymptomWhy it failsHow to avoid / repair
Search takeoverThe text starts treating option generation as if it were already part of decision doctrine.C.11 loses its decision-theory EntityOfConcern and silently absorbs C.18.The option set is stated as already existing, and search questions are handled by C.18.
Policy collapseExploration or exploitation governance over a candidate pool is written as if it were identical with choosing among current options.Choice doctrine and candidate-pool policy become indistinguishable.C.19 remains explicit as the neighboring pattern for selection policy and exploration governance.
Planning collapseSequencing, replanning, and enactment budgeting are written as if they were already part of the choice calculus.Planning-side question moves out of C.24 by accident.Execution order and operational budgeting remain in C.24, even when C.11 says more probing is rational.
Inventory without decision ruleThe current comparison names many objects and schools but never shows how to move from a live option set through one ChoiceRule to one ChoiceResult.The pattern becomes one cleaned-up survey rather than one decision discipline.State one explicit decision-record shape: chooser, option set, comparison basis, dependence layer, probe-worthiness test, one explicit doctrine, and one emitted result.
Hidden basis shiftDifferent options are compared under different belief states, outcome models, or dependence layers without one explicit statement that the basis changed.The comparison only looks precise; in fact the choice rule cannot be audited.Keep one shared comparison basis until one named probe or model change updates it, and state explicitly when the dependence layer changes.
No closure ruleThe text sounds careful but never says what makes choose now, reject current set, probe again, or reroute lawful.The record never closes into one explicit decision result.State the closure conditions explicitly and show why the current case satisfies exactly one of them.
Undefined load-bearing termsTerms such as PreferenceOrder, BeliefState, or OutcomeModel appear without local operational clarification.Core comparison objects stay implicit and the decision question depends on outside theory or undocumented assumptions.Give one local plain gloss or equivalent operational clarification for each load-bearing term used in the pattern text.
Bounded-resource bridge lossProbeBudget, ValueOfInformation, or ValueOfComputation are mentioned, but the text silently lets C.19 or C.24 own them.The theory-side doctrine disappears into neighboring policy or planning prose.Keep those objects theory-side in C.11; let neighboring patterns consume their outputs without minting the concepts.
Publication collapseThe text starts treating shortlist or selected-set publication semantics as if they were identical with deciding.Choice doctrine silently absorbs selector-facing publication question and collides with the G.5 placement.Keep selected-set publication outside C.11 and apply G.5 when the question becomes surfacing or publishing the selected set.
Agent-default narrowingEvery chooser is described as one Agent even when the subject is really one team, organization, or other collectivity-bearing system.The governed chooser is narrowed before the doctrine even starts.DecisionSubject remains the default, and DecisionSubjectGranularity types the chooser-bearing level.
Prestige-branch citationActive inference or quantum-like work is cited only as one fashionable name.The text sounds current without stating what limitation is being repaired.The repaired limitation is stated directly: embodied online updating for active inference, and context or order effects for quantum-like lines.
Cost-free deliberationThe text speaks as if probing and computation are free.Bounded-resource doctrine disappears behind one idealized choice moment.ProbeBudget, CostToProbe, ValueOfInformation, and ValueOfComputation stay visible in the calculus.

Consequences

BenefitsTrade-offs / Mitigations
Keeps decision doctrine distinct from search, candidate-pool policy, and planning.The same working episode now needs an explicit question split across choice, pool policy, and planning rather than one blurred rationality account.
Makes evidential, causal, and subjunctive branches comparable in one place.The pattern becomes more explicit about dependence language and therefore needs tighter lexical discipline.
Keeps bounded-resource probing inside the doctrine rather than as one afterthought.Fast-path use now carries a slightly richer inventory before the doctrine feels natural under pressure.
Keeps active-inference and quantum-like repairs visible without letting them silently replace the whole core.Those lines stay load-bearing only when they change the actual ChoiceResult, unfinished state, or reroute logic; heavier formal packages still remain outside this body.
Makes the next move explicit through one ChoiceResult record instead of one general statement that the case is complex.Each decision record has to show why choose now, reject current set, probe again, or reroute is lawful, which removes rhetorical room to sound informed without committing to one result.
Makes downstream work cleaner because search, pool policy, publication, and enactment can receive one explicit output instead of one blurred upstream "decision happened" claim.Reroutes now require one named next governing pattern and one reusable part of the record instead of one vague upstream claim that deliberation happened somewhere.
Lets one comparison stay open honestly through one explicit tie-set or probe again result instead of forcing a fake winner.Some outcomes will look less rhetorically decisive because the pattern refuses to hide unfinished comparison under elegant prose.

Rationale

A live option set and a live choice among that set are not the same question as generating options, governing a candidate pool, or sequencing execution. Keeping that distinction explicit is what makes the doctrine usable rather than ceremonial.

DecisionSubject is the better default chooser term because decision theory often applies to persons, teams, organizations, and other system-bearing collectivities. Agent remains useful, but only when an explicit agency claim is actually being made.

A minimal mathematical floor is necessary because choice doctrine without one stable object stack quickly turns into verbal drift. But a pattern also fails if it keeps only the object names and never shows how those objects discipline an actual choice. That is why Solution here is procedural: it must carry the path from OptionSet through one ChoiceRule to one ChoiceResult, including the stop-or-probe decision, rather than only one survey of neighboring theories.

The practical gain of that procedure is not elegance for its own sake. It is that later search, policy, publication, and planning work receive one explicit result instead of one hand-waving claim that deliberation happened somewhere upstream.

At the same time, this pattern should not pretend that one full quantum-like or geometry-heavy package is already settled just because those neighboring lines are real.

SoTA-Echoing

ClaimSoTA practicePrimary sourceAlignment with C.11Adoption status
Decision theory still needs an explicit classical baseline over options, preferences, utility, and uncertainty.Contemporary reference treatments still present decision theory through option sets, preferences, utilities, and uncertainty as the baseline language of rational choice.Decision Theory (Stanford Encyclopedia of Philosophy, Fall 2023)C.11 adopts this as the baseline vocabulary for choice among already-available options.Adopt.
Evidential dependence is not enough in all cases.Causal decision theory remains the standard repair when intervention structure matters.Causal Decision Theory (Stanford Encyclopedia of Philosophy, Winter 2024)C.11 keeps one explicit evidential-versus-causal split rather than one blended correlation claim.Adopt.
The field no longer stops honestly at the older EDT/CDT split.Functional or success-first work keeps subjunctive dependence live in Newcomb-like and related cases.Functional Decision Theory: A New Theory of Instrumental RationalityC.11 keeps success-first or subjunctive repair visible without treating it as one settled default doctrine.Adapt.
The live EDT/CDT/FDT family map now has more technical comparison structures than one older philosophical split alone.Recent mechanized or causal-graph taxonomies compare live decision-theory families through more explicit technical structures rather than only one slogan-level naming dispute.Mechanized-causal-graphs taxonomy of decision theories (2023)C.11 therefore treats EDT, CDT, and success-first or FDT-like lines as technically live family options rather than one frozen classroom argument.Adapt.
Decision under bounds cannot leave probing and deliberation cost as one slogan.Current metareasoning and optimal-experimental-design lines treat information acquisition, probing, and computation allocation as first-class theoretical questions rather than free background steps.Metareasoning: Theoretical and Methodological DevelopmentsC.11 therefore keeps ProbeActionSet, ProbeBudget, CostToProbe, ValueOfInformation, and ValueOfComputation inside the doctrine rather than hiding them in planning-only prose; the current closure rule is intentionally local or myopic over the next feasible probe, with richer sequential or non-myopic OED left as later strengthening.Adapt.
Decision and update can be embodied, online, and socially coupled.Active-inference work treats decision as tightly coupled to action, inference, and expectation regimes rather than one disembodied one-shot selection.Embodied decisions as active inferenceC.11 carries this as one neighboring repair of the chooser picture, makes social-expectation pressure explicit enough for use-time reroute or probe logic, and states honestly that full ROE or social-expectation object modeling remains outside this local choice body.Adapt.
Some decision cases exhibit context effects, order effects, response-replicability tension, and incompatible-question structure.Current quantum-like decision and cognition work treats those cases as one measurement-sensitive research program rather than one discarded curiosity or one automatic physics transfer.Measurement-theory decision/cognition anchor (2025)C.11 carries this as one named neighboring branch where those repaired limitations are real, while leaving heavier branch-specific formalism outside this body.Adapt.
Incompatible question/context structures need a cleaner cue than "context matters."Contextuality-by-Default treats same-content-looking measurements in different contexts as distinct random variables unless an admissible joint treatment is supplied.Use CbD as the clean formal cue when question/context structure changes variable identity, joint availability, or admissible comparison inside the current option set.Adopt/Adapt.
Some quantum-like lines also claim one practical representational gain from linear state dynamics over harder nonlinear underlying processes.Quantum-like modeling in biology presents linear Hilbert-space dynamics as one simplifying and potentially faster information-processing lens over nonlinear classical biophysical dynamics, while treating this as representational modeling rather than proof that the modeled system is physically quantum.Quantum-like modeling in biology with open quantum systems and instrumentsC.11 takes this only as one possible practical reason to keep the quantum-like branch available when measurement-sensitive effects are real; it does not treat quantum-like choice as one claim of physical quantumness.Adapt cautiously.
Broader contextual and multilevel lines pressure decision texts to keep one typed substrate rather than pure verbal drift.Current multilevel-learning and evolution-as-inference work argues for one shared formal lens across levels even when the heavier final geometry is still unsettled.Multilevel selection as Bayesian inference, major transitions in individuality as structure learningC.11 therefore keeps one minimal typed floor and one wider chooser-bearing scope while stating by value that full aggregation doctrine, cross-scale or cross-collective conflict doctrine, and heavier multilevel mathematics remain outside this local choice body.Adapt.

Practical reading of this alignment:

  • In ordinary current-option cases, start with the classical evidential baseline and use it to emit one explicit choose now, probe again, or reroute result under one shared BeliefState and OutcomeModel.

  • Failure of a simple Bayesian or passive-read-like model is not yet evidence that QL is necessary. Try richer classical, causal, performative, instrument, active-sensing, or representation-abstraction rivals before keeping the QL branch as load-bearing.

  • If intervention structure changes the survivor relation, state that explicitly and switch to causal comparison rather than leaving the comparison at the level of correlation talk.

  • If predictor-coupling or structurally linked choice procedures remain load-bearing, keep the subjunctive layer visible and say what linked structure could still reverse the current result.

  • If another measurement, comparison pass, or search pass is being considered, treat its value and cost as part of the current decision doctrine rather than as one later planning afterthought.

  • If the chooser is embodied, online, and socially coupled, or if context and order effects change the comparison state, keep those repaired limitations visible by naming the observation named by value, social-expectation clarification, order stabilization, response-replicability check, or measurement-class clarification that could still change the current ChoiceResult, and say directly when fuller ROE, quantum-like state-space, or multilevel doctrine still sits outside this local choice body.

  • If the quantum-like line is activated, treat it as one measurement-sensitive mathematical lens or representational repair, not as one claim that the chooser or world is physically quantum.

  • If none of those heavier repaired limitations is live, stay with the lighter branch rather than activating one prestigious label that does not yet change the next move.

Worked-slice discipline from these rows:

  • the system grounding slice is disciplined primarily by the bounded-resource and classical-baseline rows, so the output must end in one explicit probe-or-choose result;
  • the episteme grounding slice is disciplined primarily by the bounded-resource and subjunctive-repair rows, so the output must say what comparison pass or predictor-coupled clarification could still reverse the result;
  • the collective and contextual grounding slice is disciplined primarily by the active-inference and quantum-like rows, so the output must name the embodied observation, framing stabilization, or reroute that now becomes lawful.

Relations

  • Builds on: A.6.P, A.6.5, A.13, C.9, A.18, A.19
  • Read next when this question moves: C.18 for candidate generation and open-ended search, C.19 for one explicit pool-policy result over exploration or exploitation governance, C.24 for one enactment-facing call plan or CheckpointReturn, G.5 for shortlist-family public selected-set label and emitted selected-set semantics, C.28 when the choice result depends on causal-use support
  • Keeps outside: candidate generation, pool-wide exploration or exploitation policy, selected-set publication semantics, and execution sequencing
  • Aligns with: classical evidential decision theory, causal decision theory, success-first or subjunctive repair, bounded-resource metareasoning and probe-cost doctrine, C.28 causal-use question/rung/support vocabulary, active-inference-adjacent decision work, quantum-like contextual repair where context or order effects are real, and multilevel mathematical-lens pressure at the minimal-floor level only

Quantum-like choice-boundary note

Use C.11 first when the question is local choice, belief, preference, comparison, question order, option-menu framing, or an incompatible-question effect inside one decision situation. Quantum-like wording is retained only when it adds a concrete residual order-effect, probe, frame, or comparison reading that ordinary decision or probability language would hide.

Action path:

  1. State the current DecisionSubject, OptionSet, comparison basis, and ChoiceRule.
  2. Ask whether the apparent QL issue changes the local choice result: choose now, reject current set, probe again, or reroute.
  3. If the issue is question order, incompatible questions, response-replicability tension, non-shared comparison frames, or CbD-style variable identity / joint-availability trouble inside the current option set, keep the QL repair inside C.11.
  4. If the current option set itself is suspect, incomplete, generated by the wrong frame, or still needs expansion/reframing/search, leave C.11 and apply C.18, C.19, A.19, or B.5.2 as appropriate.
  5. If the issue changes boundary state, bridge/export faithfulness, coordinated-work evidence, measurement legality, or viability envelope, route out.
  6. Emit one ChoiceResult and one next question; do not leave the QL branch as a theory label.

When the question leaves local choice, route it out instead of stretching C.11:

Question that appears in the decision caseFirst pattern
Boundary interaction, API read, workshop, dashboard, or message changes the represented stateC.26.1 only for the remaining state or probe question, with A.6, A.6.B, and A.6.P still active
Cross-context export, translation, or same-label comparison loses state or comparabilityF.9
Coordinated work evidences a state no report faithfully carriesA.15 plus evidence patterns, with C.26.2 only for the remaining low-recoverability distributed-state reading
Measurement, metric, survey, or score frame changes the represented stateC.16 plus evidence patterns
Viability envelope, adaptation cost, or boundary-maintenance decision is load-bearingC.25 first, with C.26.3 only for the remaining probe/export/frame/coarsening viability question
Current option set is suspect, incomplete, frame-generated, or still being expanded/reframed/searchedC.18, C.19, A.19, or B.5.2 before returning to C.11

Useful outputs:

  • choose now under a declared order/frame;
  • probe again because another question order, response-replicability check, or frame test could still change the survivor relation;
  • reroute because the live problem is no longer local choice;
  • no QL wording when ordinary uncertainty, preference conflict, or option-generation work is enough.

C.11 may cite C.26 as the common quantum-like modeling lens only for the residual question after the local-choice split is applied. It is not the whole-cluster pattern for boundary, bridge/export, distributed-evidence, viability, or state-representation coarsening claims.

C.29 mathematical-lens use relation

C.29 may supply a lens-supported prediction, distinction, obstruction, diagnostic boundary, or rival-lens note that a decision record can cite. If the output is a ChoiceResult, local choice record, selected-set publication, or selected option set, C.11 governs the decision discipline and any G.5/G.9 selector or benchmark publication remains separate. C.29 does not select the option by mathematical elegance.

C.11:End

C.13 — Constructional Mereology (Compose‑CAL)

Intent

Provide a single, generative calculus for part–whole structure so that all structural relations in FPF are constructed (not merely declared) from three primitives and thereby inherit extensional identity by design. The calculus is hidden from day‑to‑day users behind relation aliases; its artefacts are traces that witness how a whole arises from its parts.

Also known as “Γₘ mereology”, “constructor‑based composition”.

Layer. calculus. Depends on. Kernel only (no upward imports). Consumed by. CT2R‑LOG (B.3.5) Working‑Model alias logic and any FPF pattern that needs part–whole semantics. Compose‑CAL does not import alias definitions; it merely emits traces that others may reference.

Compose‑CAL introduces a single construction operator Γₘ with exactly three constructors—sum, set, slice—sufficient to build structural wholes, collections‑as‑wholes, and aspects without extending the Kernel’s type set. No “parallel” or “temporal slice” constructor is added. Every construction yields a trace that serves as the witness for structure. Human‑facing relations such as ComponentOf, MemberOf, AspectOf are defined elsewhere as Working‑Model aliases and are grounded in these traces; Compose‑CAL itself remains purely generative and extensional.

Problem frame & Problem

FPF presents a unified structural backbone used across disciplines. Historically, sub‑relations like ComponentOf or MemberOf were declared directly. This maximised usability but provided no generative guarantee that a new subtype was extensionally well‑behaved or reducible to common mereology.

Declared lists of part‑of sub‑relations scale poorly and lack identity guarantees. Engineers ask for a single dial (“is x part of y?”), while ontologists need a principled foundation that (a) avoids Kernel bloat and (b) proves that wholes are nothing over and above their parts. Adding yet another bespoke relation (e.g., PortionOf) should not entail schema surgery or ad‑hoc rules.

Forces

  • Parsimony (C‑5). Add no core types if composition suffices; keep the constructor set minimal.
  • Minimal Kernel (P‑1). Generativity must live in a calculus pattern, not in Kernel axioms and postulates.
  • Cognitive asymmetry. Everyday users want “one part‑of query”; specialists accept complexity backstage.
  • Trans‑disciplinary unification. Every pattern that needs mereology should reuse one generative basis.
  • Green‑field strictness. With no legacy to break, we can require grounding for new structural edges.

Solution

Solution sketch

Compose‑CAL SHALL provide Γₘ with three and only three constructors:

  1. Γₘ.sum(parts:Set[U.Entity]) — returns a whole W such that each p in parts stands in KernelPartOf(p, W).
  2. Γₘ.set(elems:Set[U.Entity]) — returns a collection C; each e in elems stands in a calculus‑internal mero:KernelPartOf(e, C) under member‑as‑part semantics (publication alias: typically ut:MemberOf). Counts/order (e.g., parallel/serial factors) are not carried here; they live in method/time families adjacent to structure. Note: although mero:KernelPartOf is transitive in the calculus, the published MemberOf alias remains non‑transitive by design (see A.14 guards).
  3. Γₘ.slice(entity:U.Entity, facet:U.Facet) — returns an aspect S such that mero:KernelPartOf(S, entity) and S carries the declared facet. Temporal facets are excluded here.

Note. The calculus names an internal backbone mero:KernelPartOf; the Kernel’s public ut:PartOf/A.14 catalogue remain unchanged. Publish only via Working‑Model aliases (CT2R‑LOG).

The calculus emits a trace for every construction; Structural aliases MUST be grounded by exactly one such trace.

Non‑goals (clarifications).

  • No extra constructors for “parallelism” or “time slices”; parallelism is modelled via set (with order handled in Γ_method), and temporal parts live in the appropriate temporal/system calculus. This preserves parsimony.
  • Compose‑CAL does not define user‑visible relation names; those belong to the alias layer.

Normative Standard (high‑level)

  • C13‑N1. Extensional identity. Two Γₘ results are identical iff they have the same parts under the same constructor and facet conditions.
  • C13-N2. Structural grounding stance. Every structural edge MUST reference exactly one Γₘ trace as its grounding witness and SHALL declare validationMode = axiomatic (see B.3.5 / E.14). Structural edges MUST NOT be published in postulate or inferential stances.
  • C13‑N3. Algebraic laws. Γₘ.sum and Γₘ.set are commutative and idempotent over their inputs; Γₘ.slice composes only by facet‑compatible refinement.
  • C13‑N4. Acyclicity & antisymmetry. Structural part‑of induced by Γₘ is transitive, antisymmetric, and acyclic at the level of entities. (Formal axioms appear later in this pattern.)
  • C13‑N5. Separation of concerns. Γₘ provides constructions and traces; naming, aliasing and human‑level relation taxonomies are defined outside Compose‑CAL (see B.3.5 for the CT2R‑LOG handshake).
  • C13‑N6. Member vs component. Γₘ.set yields collections whose Working‑Model alias is MemberOf; authors SHALL NOT infer ComponentOf from MemberOf without a separate Γₘ.sum narrative.
  • C13‑N7. Domain guard. Do not apply Compose‑CAL to roles, methods, or works (see A.12/A.15): these are outside mereology.

Scope, applicability, terms & notation

Use Compose-CAL whenever a claim concerns structural containment of entities (assemblies, collections, aspects). Compose-CAL is not used for epistemic relations between knowledge epistemes or publications; those are epistemic relations and may be justified by Logical/Mapping and/or Empirical Validation with an explicit validationMode ∈ {inferential, postulate}. Compose-CAL is neutral with respect to domain (mechanical, biological, software, etc.).

  • Γₘ — the mereological construction operator of this calculus.
  • trace — a minimal, inspectable witness that a constructor was applied to given inputs to yield a whole (or aspect).
  • structural part‑of — the structural relation induced by Γₘ; user‑facing aliases (e.g., ComponentOf, MemberOf) are separate patterns that must point back to traces.

Alias readiness. Typical CT2R mappings:

  • ComponentOfsum narrative;
  • MemberOfset narrative;
  • AspectOfslice narrative;
  • PortionOfslice(entity, facet="material/spatial‑region") plus metrical semantics (A.14);
  • ConstituentOf (logical/content) ⇢ sum narrative over conceptual parts. (Material mixtures are not ConstituentOf; use PortionOf or ComponentOf per A.14.)

Archetypal Grounding (System / Episteme duo)

Tell–Show–Show. Compose‑CAL is a thinking‑level calculus for building structural wholes from parts. We show it twice—first on a System (structural) and then on an Episteme case (where constructive grounding is not the primary mode).

System (structural; constructive grounding)

Story. A Skid is assembled from its Pump, Motor, Baseframe, and Manifold.

Constructive grounding (Γ_m). Narrate a sum of parts: “Skid = sum{Pump, Motor, Baseframe, Manifold}.” This uses Γ_m.sum to obtain a whole whose parts stand in KernelPartOf; the resulting Working‑Model relation engineers publish is ut:ComponentOf on each edge from part to whole. The mapping “sum → ComponentOf” reflects the intended aliasing between constructive traces and human‑facing mereology.

Facets and collections. Need the inspection surface? Narrate Γₘ.slice(Skid, "spatial") and publish ut:AspectOf. Need a group of Transfer interactions? Narrate Γₘ.set{…} and publish ut:MemberOf—this is a collection-as-whole, not a sub‑assembly; no component identity is implied without a separate Γₘ.sum narrative.

Plane separation. Assembly order and time are not encoded here: parallel lines and schedules live in method/time families and are described adjacent to, not inside, the part‑tree.

Episteme (knowledge‑bearing; non‑constructive first)

Story. A Mass‑Flow Representation is used to stand for a measured flow in a plant dataset.

Grounding choice. Here the Working‑Model relation (e.g., RepresentationOf) is epistemic. Authors typically justify it by inferential or postulate stances (argument or calibration cues), not by a mereological construction; constructive traces remain optional. This preserves the firewall between structure and knowledge claims while keeping a clear path to an assurance record with additional constructive evidence if the team later reframes part of the representation structurally (e.g., sets of interactions as a Γ_m.set for a flow bundle).

Scope justification

  • Universality. The trio sum / set / slice appears across mechanical assemblies, biological complexes, and organizational artifacts; aliasing to ComponentOf / MemberOf / AspectOf provides a stable Working‑Model surface for those domains.
  • Parsimony. No “parallel” or “temporal slice” constructor is added; time slices belong in the temporal calculus, and parallelism is modelled as a set plus method metadata.

Bias‑Annotation (cognitive anti‑patterns and counter‑moves)

Bias (name)SymptomCounter‑move (conceptual)Where to look
Constructor‑centrismTreating the trace as “the real thing” and the Working‑Model edge (e.g., ComponentOf) as merely decorative.Re‑affirm Working‑Model first (publish in ut:*Of), then attach constructive narratives only when assurance demands it.B.3.5 (Working‑Model relations & grounding)
Collection ↔ Composition swapUsing MemberOf to stand in for PartOf, then inferring structural identity.Keep set outputs as collections; use sum for wholes with extensional identity.A.14 (Advanced Mereology)
Temporal leakageSmuggling sequence/phase into part‑trees.Route order/time to their planes; no “temporal slice” constructor in Compose‑CAL.B.1.* (Γ_method and Γ_time)
Over‑slicingMultiplying aspects until identity becomes opaque.Declare the facet explicitly; stop when aspects no longer aid recognition of the same whole.A.14 (Aspect/Phase distinction)
Feature creepProposing a new constructor for a special case.Reduce to sum / set / slice; if reduction fails across ≥ 3 domains, reconsider the modelling plane before adding power.C‑5 (Parsimony)
Axiomatic inflationDemanding constructive traces for epistemic links by default.Use inferential / postulate where appropriate; reserve axiomatic for structural identity.B.3.5 (validation modes)

Conformance Checklist (normative, calculus‑level)

The following regulate how to think and write when invoking Compose‑CAL. They are notation‑agnostic and conceptual.

IDRequirementPurpose
CC‑C13‑1 (Three moves only).Authors SHALL construct structural narratives using exactly Γ_m.sum, Γ_m.set, and Γ_m.slice. No additional constructors are introduced in this calculus.Preserve parsimony and cross‑domain comparability.
CC‑C13‑2 (Kernel invariants).Constructive narratives SHALL respect KernelPartOf invariants (transitivity, antisymmetry, acyclicity) and yield extensional identity for wholes.Keep structural identity intelligible and replayable.
CC‑C13‑3 (Algebraic laws).sum/set are commutative & idempotent; slice composes only with facet‑compatible refinement.Make traces peer‑reconstructible and easy to replay in thought.
CC‑C13‑4 (No order/time in mereology).Authors SHALL NOT encode execution order, parallelism, or temporal coverage via constructors; such concerns belong to method/time planes and are stated adjacent to structure.Maintain the plane firewall.
CC‑C13‑5 (Narratability).Each constructive trace SHALL be narratable in plain language without introducing new primitives.Enforce human‑first clarity; uphold C‑5.
CC‑C13‑6 (Alias alignment).When Publishing Working‑Model relations for structural content, authors SHOULD align “sum→ComponentOf”, “set→MemberOf (or pattern‑specific)”, “slice→AspectOf” in their explanatory prose.Keep alias semantics stable across Contexts.
CC-C13-7 (CT2R-LOG handshake).For every structural edge on the Working-Model, authors SHALL set validationMode=axiomatic and point tv:groundedBy to exactly one Γₘ trace (`sumset
CC‑C13‑8 (Member ≠ Component).A set output remains a collection; authors SHALL NOT infer ComponentOf from MemberOf. When an integrated assembly is intended, provide a separate Γ_m.sum narrative.Prevent membership→component conflation.
CC‑C13‑9 (Facet explicitness).Slice narratives SHALL name the facet used; temporal facets are excluded (handled elsewhere).Keep aspects precise and non‑temporal.
CC‑C13‑10 (No roles in mereology).Do not apply Γₘ to U.Role, U.Method, or U.Work; these are outside mereology (A.12/A.15).Preserve the plane firewall.
CC‑C13‑11 (Member non‑transitive).When publishing MemberOf, do not rely on transitive closure across collection‑of‑collections; surface semantics remain non‑transitive per A.14.Prevent Member→Component drift.

Author’s note. Compose‑CAL is a calculus for constructive reasoning about structure. Publishing remains in the Working‑Model layer (see B.3.5); constructive narratives are attached when the team seeks an assurance record with additional constructive evidence, never as a substitute for clear human‑facing relations.

Consequences

Benefits

  • Extensional clarity. Every structural claim is reconstructed from Γ_m.sum | Γ_m.set | Γ_m.slice: sum establishes component‑assembly identity; set establishes collection identity; slice yields aspects as parts—without expanding the Kernel.
  • Human–first publication, formal–on‑demand. Teams keep publishing Working‑Model relations (e.g., ut:ComponentOf), while assurance is attached as needed via a constructive grounding narrative and tv:groundedBy (see B.3.5).
  • Separation of planes preserved. Order/parallelism and temporal coverage remain in Γ_method / Γ_time; structure is never overloaded to carry them, avoiding recurrent category errors.
  • Uniformity across domains. The same triad models mechanical assemblies, socio‑technical memberships, and informational wholes without domain‑specific constructors or ad‑hoc exceptions.
  • Didactic economy. Authors learn one compact calculus; reviewers gain a predictable place to look for constructive justification when validationMode = axiomatic (B.3.5 alignment).
  • Compositional reuse. Traces are reusable fragments of reasoning; complex wholes are narratable as sums of sub‑traces, with sets for concurrency and slices for aspect selection.

Trade‑offs / Mitigations

  • Discipline cost at higher assurance. Writing a concise grounding narrative for axiomatic claims takes effort. Mitigation: reuse the micro‑templates in this pattern’s Grounding section and keep narratives notation‑free.
  • Over‑use risk. Temptation to treat collections as integrated assemblies. Mitigation: keep MemberOf distinct from ComponentOf; both set and sum yield wholes, but only sum establishes component structure and assembly identity.
  • Temporal leakage risk. Authors may try to smuggle time into structure via “temporal slices.” Mitigation: use Γ_time for temporal statements and slice only for intensional aspects, not for time windows.

One‑line takeaway. Compose‑CAL gives a minimal, universal how‑it‑was‑built story for any structural edge, without disturbing the human‑first publication surface defined in B.3.5.

Rationale (informative)

Why exactly three moves? sum, set, and slice are jointly sufficient and minimally overlapping:

  • sum creates an integrated whole from parts and thereby establishes component structure (assembly identity).
  • set creates a collection‑as‑whole; members are parts of the collection under member‑as‑part semantics, but no component integration is implied.
  • slice returns an aspect as part of its bearer (facet‑constrained, e.g., spatial/material); temporal facets are excluded here.

All three moves create new entities; sum is the only move that establishes component identity. Neither set nor slice changes the identity of their inputs, and set never upgrades membership to component status. Temporal coverage and workflow order are handled in their own planes.

This separation mirrors long‑standing distinctions between composition, collection, and aspect, while enforcing parsimony: no additional constructors are introduced into the Kernel (C‑5). The calculus remains notation‑agnostic: its meanings are given in prose and mathematics; any diagrams are illustrative only, in line with the Notational‑Independence guard‑rail (E.5).

Why constructive grounding lives outside the publication surface. FPF privileges Working‑Model relations as the canonical form for communication and design. Compose‑CAL supplies the constructive shoulder of the Assurance Layer: when authors choose validationMode = axiomatic, they narrate the whole as a sum of parts (with optional set and slice scaffolding) and point to that narrative via tv:groundedBy. This keeps the text readable while preserving a path to an assurance record with additional constructive evidence (B.3 family, Authoring Template).

Why order/time are out of scope. Correctness‑by‑sequence and temporal coverage are orthogonal to parthood. Encoding them as parts breeds contradictions (e.g., “phase‑as‑component”). Compose‑CAL deliberately refuses any “serial/parallel/temporal constructor,” delegating such concerns to Γ_method and Γ_time and aligning with B.1’s flavour separation.

Relations

Builds on

  • A.14 Advanced Mereology. Uses its structural catalogue (Component/Portion/Aspect vs Member) as the target of constructive narratives; never collapses Member into Part.
  • E.5 Guard‑Rails (Notational Independence). Meanings are given in prose; diagrams are illustrative only.
  • E.5 Guard‑Rails (Unidirectional Dependency). Compose‑CAL depends downward only; it never imports alias layers or higher planes.
  • E.8 Authoring Conventions. Conforms to the canonical pattern template (Grounding section for architectural patterns; CC placement).

Coordinates with

  • B.3.5 CT2R‑LOG. tv:groundedBy refers (conceptually) to Compose‑CAL traces when validationMode = axiomatic; Working‑Model relations remain the publication interface.
  • B.1 flavours. Keeps order (Γ_method) and time (Γ_time) outside structure; may co‑appear in narratives when relevant but never as constructors.
  • Kind-CAL / Lang‑CHR. Provide the Mapping shoulder of assurance (labels, type alignment) that complements constructive narratives in this pattern.
  • KD‑CAL. Provides the Logical shoulder when authors justify relations inferentially instead of constructively.
  • C.16 (Measurement substrate). Supplies quantitative hooks when a constructive narrative benefits from explicit counts/ratios (e.g., cardinalities, coverage), while keeping metrics distinct from mereology.

Constrains

  • Any pattern that creates or reasons about structural wholes SHOULD narrate them using only sum | set | slice.
  • Structural publication MUST NOT encode order/time; such claims belong to their dedicated flavours.
  • Introducing new structural constructors requires a separate parsimony argument and is discouraged unless the triad cannot narrate the case without ambiguity.

Provides

  • A minimal generative basis (Γ_m.sum | Γ_m.set | Γ_m.slice) and the corresponding reading discipline for constructive narratives.
  • A stable interface with CT2R‑LOG for tv:groundedBy links under validationMode = axiomatic.

C.13:End

Measurement & Metrics Characterization (MM‑CHR)

Status: Stable

Intent (Normative)

Name. Measurement & Metrics Characterization (MM‑CHR). This is a user‑oriented name: in user‑facing narrative we may say metrics; in Tech register we speak Characteristic, Scale, Level, Coordinate, Value, Score, Unit, and ScoringMethod; in Formal register we use U.DHCMethod(Ref), U.Measure, U.Unit, and U.EvidenceStub. Intent. Provide a transdisciplinary substrate for measurement that any FPF pattern can rely on: a small, stable set of measurement-definition constructs and relations—U.DHCMethodRef, U.Measure, U.Unit, U.EvidenceStub—disciplined by CSLC (Characteristic, Scale, Level, Coordinate) so that every recorded value is interpretable, and any claim of “comparability” is auditable (physics lab time‑of‑flight, figure‑skating judging, architectural modularity, etc.). C.16 does not re‑define Characteristic (A.17) nor the CSLC kernel Standard (A.18); instead, it exports the measurement substrate that binds an FPF pattern’s measurable notions to one Characteristic and one Scale and frames a conceptual link to evidence. This characterization is notation‑neutral, tool‑agnostic, and open‑ended (no “lifecycle” narrative; evolution proceeds via RSG moves with checklists).

One‑minute mental model (didactic; non‑normative).

  • Template (U.DHCMethod) says what a value means: the Characteristic, Scale (and Unit when applicable), plus polarity and applicability.
  • Measure claim (U.Measure) says what was claimed about a subject: a value on that Scale, with a time stance and (when required) an EvidenceStub.
  • Direct comparability is conservative: same template; everything else requires a named and cited comparability basis governed by the relevant FPF pattern, Bridge, method description, or specification record.

Boundary to neighboring governing patterns and specification records. C.16 governs measurement templates, readings, score meanings, scale legality, direct comparability, and evidence-stub adequacy. It does not govern (i) characterization mechanisms such as normalization, indicatorization, scoring, comparison, or selection, (ii) normalization and equivalence notions such as method tokens, invariant-value notions, or equivalence relations, (iii) claim-use policies such as comparability modes and legality gates, or (iv) suite protocol obligations. Those meanings are governed by their FPF patterns or specification records, such as CN-Spec, CG-Spec, and the CHR mechanism-governing patterns. C.16 may cite those patterns or records when motivating evidence or interpretability, but MUST NOT introduce or restate their terminology or laws.

Use this when a value, score, rating, metric label, QL probe output, dashboard reading, or comparison is being treated as meaningful without a visible characteristic, scale, unit, polarity, comparability basis, or evidence pointer. The action is to rebuild the measurement claim as a typed reading: name the subject, bind one characteristic to one scale, state the coordinate or level, declare unit and polarity when they matter, attach the evidence stub, and keep comparison or scoring claims with broader scope, higher evidence requirement, or release or admission use with the governing pattern or specification record that governs that comparison or scoring claim.

Thin precision-restoration pointer: if the issue under repair is still whether wording such as metric, measure, score, axis, dimension, level, coordinate, quality, or stronger/weaker value names a characteristic, scale, coordinate, score, unit, scoring method, quality-term repair, or application of the pattern governing the recovered claim, use C.16.P first. Do not copy the C.16.P trigger table here; C.16 resumes after the measurement or characteristic construction is recoverable. Useful output: a measurement claim that a reader can interpret and compare only within its declared measurement basis, without turning a convenient number into a free-floating fact.

Metric legality does not make causal use admissible. If a measured value, score, dashboard reading, or metric disparity reaches CausalUseActivation by being used to claim effect, intervention success, causal fairness, policy optimality, counterfactual comparison, or causal method superiority, keep the measurement repair in C.16 and carry the causal-use question, causal-ladder rung, estimand, support basis, support verdict, admissible causal use, and inadmissible causal use in C.28.

Outcomes. (1) A uniform way for FPF patterns to declare what is measured and read what has been measured; (2) explicit Characteristic binding and Scale typing per CSLC; (3) principled comparability and polarity (declared at the template level); (4) traceability via conceptual evidence stubs; (5) seamless alignment with cross‑domain quantity notions (ISO 80000, ISO/IEC 25024, QUDT, SOSA/SSN, Verspoor) through Unification rows (Part F).

Scope & Status (Normative)

Scope. C.16 specifies the measurement substrate for FPF patterns: the roles of U.DHCMethodRef, U.Measure, U.Unit, U.EvidenceStub; their CSLC discipline (by reference to A.17 and A.18); and evidence linkage semantics at the level of conceptual conditions. It defines direct interpretability and direct comparability (same template), and it equips other patterns to state—and audit—comparability claims beyond direct comparability by citing the governing FPF pattern, method description, Bridge, or specification record. It exports these constructs for all FPF patterns (KD‑CAL, Arch‑CAL, etc.) without prescribing domain formulae, procedures, or any CHR mechanism semantics.

Status. Normative C.16 depends on A.17 (canonical Characteristic) and A.18 (minimal CSLC in Kernel). Where C.16 cites external CG‑frames, the stance is through Part F rows and Bridges (with CL and loss notes), not by vocabulary import.

Out of scope. No computational recipes, no workflow prescriptions, no governance or process guidance. No definitions of normalization, indicatorization, scoring, comparison, or selection mechanisms, no comparability policy specifications, and no legality gate specifications. C.16 concerns measurement-definition constructs and their validity conditions for measurement claims, not records or tooling. (Implementation guidance, if any, belongs outside Part C.)

Problem & Context (Informative)

The problem C.16 solves

Across FPF patterns, people say “score”, “metric”, “rating”, “property”. Without a shared substrate, numbers drift: 42 of what? on which scale? comparable to whom? C.16 eliminates drift by requiring every metric notion to bind to one Characteristic and one Scale, and by separating Characteristic/template bindings from descriptions and ScoringMethods. The result is portable meaning: a measure is always readable as a Coordinate on a declared Scale of a named Characteristic, with a principled path to evidence.

Context and prior art

  • Kernel canon. A.17 makes Characteristic the sole canonical head for measurability; A.18 fixes CSLC as the minimal sufficiency for interpretability. C.16 relies on both.
  • Cross‑domain alignment. The MM‑CHR family already maps FPF U.Types to ISO 80000‑1 (Quantity), ISO/IEC 25024 (Data‑quality Characteristic), QUDT (QuantityKind and QuantityValue), W3C SOSA/SSN (Observable, Observed, and Result), and domain “feature/metric” usage (Verspoor, TF Metrics). C.16 uses these rows as Bridges (Part F), preserving local senses and documenting losses.
  • Open‑ended evolution. FPF replaces “lifecycle” with Role‑State Graph (RSG) style state checklists (A.2.5): movement is along certified states with checklists; re-entry is valid when distinctions change. C.16 uses this device only to frame readiness and revision of metric notions conceptually (no processes implied).

Forces (Informative)

F1 — Interpretability first. A value detached from its Characteristic and Scale is meaningless; CSLC supplies minimum context. F2 — Transdisciplinarity. Physics, architecture, curation, sport judging—one substrate must cover all while respecting scale types and polarity. F3 — Characteristic/template vs description. Confusing the U.Characteristic or measurement template with its rubric or exemplar text (descriptions) corrupts claims; C.16 keeps them distinct. F4 — Comparability without coercion. Ordinal ≠ interval; ratio admits unit change, ordinal does not; polarity matters for “better/worse”. C.16 encodes these as conceptual constraints, not formulas. F5 — Evidence sufficiency. A measure should be checkable in principle; evidence is a conceptual link (not storage advice). F6 — Lexical discipline. One canon in normative register; narrative labels are didactic only (Part E). C.16 reuses E.10’s register mapping.

Solution Outline (Normative)

S1 — Exported objects. C.16 exports four measurement constructs to be used by any FPF pattern:

  1. U.DHCMethod — a measurement template (a Definition) that binds one U.Characteristic to one Scale form, with declared polarity and (optionally) a citation point to the governing FPF pattern, method description, Bridge, or specification record for any non-trivial equivalence or comparability claim that is relied upon elsewhere. References to this template use U.DHCMethodRef. It is a measurement-definition specification, not a record layout.
  2. U.Measure — an assertion that a subject occupies a Coordinate (or Level, if discrete) on that Scale; the measure references its template and carries a conceptual pointer to evidence (U.EvidenceStub).
  3. U.Unit — the unit kind associated with the Scale where applicable (physical quantities, normalized “points”, “stars”, “%”); unit coherence is part of comparability conditions.
  4. U.EvidenceStub — a conceptual locator of grounds for the asserted value (type, identifier, brief summary, optional integrity notion); sufficiency criteria are conceptual (see §9 below).

S2 — Comparability stance (boundary‑aware). C.16 states only the direct comparability condition for measurement claims: same template (hence, same Characteristic, Scale, and Unit semantics by reference to A.17 and A.18). Any comparability claim that relies on transformations (normalization, scoring, aggregation, cross‑context transport, bridge losses, legality gating) MUST cite the governing CN-Spec record, CG-Spec record, or relevant mechanism pattern. C.16 does not define those transformations or their laws. (Details: §7–§8 below.)

S3 — Evidence stance. A measure that, by its template, requires evidence, is inadmissible without a meaningful U.EvidenceStub. C.16 defines what it means conceptually for evidence to “connect” the subject, the Characteristic, and its symbolic description; mechanisms are out of scope. (Details: §9 below.)

S4 — RSG framing (open‑endedness). Readiness, calibration, and revision of metric notions are expressed as RSG node moves with checklists (e.g., “characteristic bound”, “Scale typed”, “Unit coherent”, “ScoringMethod declared”), allowing re‑entry when distinctions change; there is no terminal “lifecycle”. (Details: §10 below.)

Lexical Discipline & Registers (Normative)

L1 — Canon. Use Characteristic, Scale, Level, Coordinate, Value, Score, Unit, and ScoringMethod in Tech register; their U.* counterparts in Formal. Narrative labels (e.g., axis, points, stars) are didactic only, and are mapped at first mention to the Tech canon (E.10). L1‑bis — “metric”. The noun metric is not a Tech‑register canonical token for measurables; use Characteristic, Scale, Coordinate, Score, and ScoringMethod. It may appear in the pattern title and in the Formal names U.DHCMethodRef and U.Measure. Do not use metric as a synonym for Characteristic or Score in normative prose. L2 — Characteristic/template vs Description. Keep C.16 measurement-definition objects (U.DHCMethodRef, U.Characteristic) distinct from descriptions (rubrics, exemplars) and from claims (U.Measure). No collapsing of names across these positions. L3 — No synonym sprawl. In normative clauses do not substitute dimension, axis, property, or feature for Characteristic; A.17 governs canonicalization. (C.16 inherits A.17’s rename policy.) L4 — Bridge‑only unification. Cross‑vocabulary sameness appears only via F.9 Bridges with CL and loss notes; C.16’s lexicon is the source side for measurement rows. L5 — Plain‑register shorthand. In Plain register metric MAY be used as shorthand for “template + readings”, but on first use it MUST be mapped to U.DHCMethod (template) and U.Measure (reading), and to the Tech canon terms that matter for meaning. L6 — No local CHR-mechanism terminology canon. Tokens and laws governed by characterization mechanisms (e.g., normalization method tokens, invariant-value notions, indicatorization policy terms) MUST be introduced only by their governing FPF patterns. C.16 may mention them only as cited external terms, never as locally defined canon.

Relations (pointers; details below)

To A.17 and A.18. C.16 uses A.17’s canonical Characteristic and A.18’s CSLC sufficiency; it neither re‑states nor weakens them. To Part F. C.16 is the exporting pattern behind measurement rows in UTS rows and Bridges (e.g., result‑value ↔ SOSA Result, ISO QuantityValue). To Arch‑CAL. Architectural qualities (Coupling, Cohesion, Evolvability) become Characteristics measured via C.16 templates; architectural dynamics read as trajectories in CharacteristicSpace (A.17 context).

Normative Core Model (types & Standards)

Position. MM‑CHR does not redefine kernel terms; it binds them to an FPF‑level Standard that every metric must satisfy. Canonical vocabulary and CSLC duties are inherited from A.17 and A.18 and referenced here without duplication.

Governing references. A.17 and A.18 govern Canon and CSLC; C.16 adopts by reference and keeps restatements of their definitions out of scope. C.16 only exports U.* constructs, comparability stance, evidence semantics, and RSG touch‑points.

CHR boundary reminder. Any notion that belongs to characterization mechanisms (normalization, indicatorization, scoring, aggregation, comparison, selection) appears in C.16 only as a pointer to its governing FPF pattern or specification record. C.16 MUST NOT become a shadow governing pattern for any such terminology or laws.

U.DHCMethod — the measurement template (normative)

Role. A measurement-template Standard that fixes what is measured and how values must be read—without producing any values itself. It is a Definition, not a Measure. References to this template use U.DHCMethodRef. (Didactic: think “the meaning declaration for a reading”.)

R-MT-1 (CSLC binding). A DHCMethod SHALL bind to exactly one U.Characteristic and exactly one Scale‑form admissible for that Characteristic (cf. A.18). Level is optional (used when the scale is enumerated); otherwise values are given directly as Coordinates.

R‑MT‑2 (Unit). If the scale carries units (interval or ratio), the template SHALL designate a Unit of presentation. For ordinal or nominal scales, unit may be absent or a nominal label (e.g., “stars”). (Old MM‑CHR Annex A already listed these structural elements; here we fix the conceptual obligation. )

R‑MT‑3 (Polarity). For any ordered scale, the template SHALL declare polarity (higher-is-better, lower-is-better, or target-is-best), as a semantic reading aid and as an input to consuming patterns. If polarity is target-is-best, the template SHALL name the target value (or target set) and MAY cite by reference the governing method description, scoring pattern, normalization pattern, selection pattern, or policy publication that carries any tolerance or fall-off convention used by downstream mechanisms or methods. C.16 does not standardize tolerance or fall-off semantics.

R‑MT‑4 (Applicability). A template SHALL state the applicability frame (what kinds of subjects it meaningfully applies to) in conceptual terms; this is a property of the definition, not of any measure.

R‑MT‑5 (Template vs description). The template is a measurement template. Any rubric, checklist, or prose that explains it is a Description; they are related but not identical (E.10 discipline).

R‑MT‑6 (Cardinality hint). A Template MAY declare its intended cardinality semantics for a subject within a time stance (e.g., latest‑only, at‑most‑one‑per‑day, time series). Where declared, claims outside that semantics are inadmissible conceptually (they must be reframed or versioned). Purpose: prevent silent duplicates and mixed regimes without imposing storage logic.

R‑MT‑7 (MAY). UncertaintyPolicy — optional conceptual guidance on how uncertainty is expressed or read (e.g., band, confidence interval, or quantile), without prescribing methods/tools. (Informative examples: calibrated probability with a confidence band; a prediction interval; a set‑valued reading such as a prediction set.)

U.DHCMethod — the measurement template (normative)

Role. A measurement-template Standard that fixes what is measured and how values must be read—without producing any values itself. It is a Definition, not a Measure. References to this template use U.DHCMethodRef. (Didactic: think “the meaning declaration for a reading”.)

R-MT-1 (CSLC binding). A DHCMethod SHALL bind to exactly one U.Characteristic and exactly one Scale‑form admissible for that Characteristic (cf. A.18). Level is optional (used when the scale is enumerated); otherwise values are given directly as Coordinates.

R‑MT‑2 (Unit). If the scale carries units (interval or ratio), the template SHALL designate a Unit of presentation. For ordinal or nominal scales, unit may be absent or a nominal label (e.g., “stars”). (Old MM‑CHR Annex A already listed these structural elements; here we fix the conceptual obligation. )

R‑MT‑3 (Polarity). For any ordered scale, the template SHALL declare polarity (higher-is-better, lower-is-better, or target-is-best), as a semantic reading aid and as an input to consuming patterns. If polarity is target-is-best, the template SHALL name the target value (or target set) and MAY cite by reference the governing method description, scoring pattern, normalization pattern, selection pattern, or policy publication that carries any tolerance or fall-off convention used by downstream mechanisms or methods. C.16 does not standardize tolerance or fall-off semantics.

R‑MT‑4 (Applicability). A template SHALL state the applicability frame (what kinds of subjects it meaningfully applies to) in conceptual terms; this is a property of the definition, not of any measure.

R‑MT‑5 (Template vs description). The template is a measurement template. Any rubric, checklist, or prose that explains it is a Description; they are related but not identical (E.10 discipline).

R‑MT‑6 (Cardinality hint). A Template MAY declare its intended cardinality semantics for a subject within a time stance (e.g., latest‑only, at‑most‑one‑per‑day, time series). Where declared, claims outside that semantics are inadmissible conceptually (they must be reframed or versioned). Purpose: prevent silent duplicates and mixed regimes without imposing storage logic.

R‑MT‑7 (MAY). UncertaintyPolicy — optional conceptual guidance on how uncertainty is expressed or read (e.g., band, confidence interval, or quantile), without prescribing methods/tools. (Informative examples: calibrated probability with a confidence band; a prediction interval; a set‑valued reading such as a prediction set.)

U.Measure — the recorded reading (normative)

Role. A claim that a subject occupies a Coordinate (or named Level) on the template’s scale, backed by a minimal pointer to its grounds.

R‑ME‑1 (Template binding). Every Measure SHALL reference exactly one DHCMethodRef; its Value or Coordinate must be valid for that template’s scale (type, range, category).

R‑ME‑2 (Subject). A Measure SHALL identify its subject‑of‑measurement (the bearer) unambiguously in the same Context of meaning as the template’s applicability frame.

R‑ME‑3 (Evidence stub). Where the template requires it, a Measure SHALL include an EvidenceStub—a conceptual pointer sufficient to support independent reasoning about the claim’s origin. (The old spec framed this as “traceability or provenance”; we keep only the conceptual role here. )

R‑ME‑4 (Time stance). A Measure SHALL carry a time stance (e.g., “as‑observed at T”, or “as‑aggregated over W”), expressed conceptually; it disambiguates the reading’s intended window without prescribing formats.

R‑ME‑5 (Entity vs relation). If the Characteristic is relational, the subject is a tuple (pair, k‑tuple); the wording of the claim reflects that arity and the template’s relation topology (cf. A.17).

R‑ME‑6 (MAY). UncertaintyStub — optional conceptual pointer to the adopted uncertainty estimation for this Measure, if required by the template.

Informative source reference. The old Annex B example “Article Completeness” illustrates the split template/measure/evidence; C.16 keeps the split but keeps storage-level talk out of scope.

U.Unit — semantics of quantities (normative)

Role. A conceptual marker of quantity kind and admissible conversions within that kind; not every scale requires it.

R‑UN‑1 (Quantity kind). Where units apply, the template SHALL indicate the quantity kind (e.g., Time, Length, Dimensionless‑Score). Units are meaningful only within one kind.

R‑UN‑2 (Convertibility). Comparisons across different units are valid iff they are convertible by kind-preserving transformation (ratio or interval scales); for ordinal or nominal scales, no numeric conversions exist. (Old Annex A listed conversion hints; here we assert the conceptual boundary. )

R‑UN‑3 (Canonical labels). % denotes “fraction×100”; “points” denotes dimensionless magnitudes used for scores; “stars” denotes discrete ordinal marks. These are labels of representation, not new characteristics.

R-UN-4 (Quantity-kind bridge). A Template on an interval or ratio Scale SHOULD name the underlying quantity kind (e.g., ISO 80000/QUDT category) to enable safe external bridges. This does not import external vocabularies; it declares an alignment point.

U.EvidenceStub — pointer to grounds (normative)

Role. A compact tie from a Measure to the grounds sufficient for reasoned audit (not a repository prescription).

R‑EV‑1 (Minimal sufficiency). An EvidenceStub SHALL carry, at minimum, a type‑of‑ground and an identifier sufficient to retrieve or reconstruct the grounds in the appropriate Context of meaning.

R‑EV‑2 (Compositionality). Multiple grounds may be composed as a finite set; composition is commutative, associative, and idempotent at the level of stubs, enabling conceptual merge of corroborations.

R‑EV‑3 (Soundness axiom). A Measure is MM‑CHR‑admissible only if at least one auditable chain of grounds can be stated from the bearer to the Characteristic via an appropriate description episteme that carries the measured subject, characteristic, and evidence relation. (Note: mechanism‑level admissibility gates (e.g., legality thresholds or evidence thresholds in CG‑frames or CHR mechanisms) are governed by their FPF patterns or specification records; C.16 defines only the conceptual “has grounds” link.) R‑EV‑3 (Soundness axiom). A Measure is MM‑CHR‑admissible only if at least one auditable chain of grounds can be stated that connects: bearer (subject) -> grounds -> Characteristic -> Coordinate or Level on the declared Scale, in the appropriate Context of meaning. (Informative: this is the measurement-claim binding chain.) (Boundary note: mechanism‑level admissibility gates (e.g., legality thresholds or evidence thresholds in CG‑frames or CHR mechanisms) are governed by their FPF patterns or specification records; C.16 defines only the conceptual “has grounds” link.)

Polarity, Comparability, and ScoringMethods (normative)

Notation. To avoid clashes with the kernel’s global aggregation symbol, this FPF pattern denotes a ScoringMethod (score‑level mapping) by 𝒢 (calligraphic 𝒢).

R‑POL‑1 (Declared polarity). Every ordered scale SHALL declare polarity at the template. Any disclosed scoring method 𝒢 that issues a Score for that template SHALL be order‑compatible with the declared polarity semantics (monotone for ↑/↓ polarity; target‑aware only when the target semantics is explicitly declared and cited where it depends on external conventions).

R‑CMP‑1 (Direct comparability). Two readings are directly comparable only when they reference the same U.DHCMethodRef (hence share Characteristic, Scale, and Unit semantics by reference to A.17 and A.18). “Same‑template” is the only comparability relation defined by C.16. (Clarification: sharing a name, unit label, or scale type across distinct templates is not sufficient for comparability in MM‑CHR; cross‑template comparability must be established via R‑CMP‑2.)*

R‑CMP‑2 (Transformed comparability is cited, not defined). If a comparison relies on any transformation or supporting step (e.g., normalization, indicatorization, scoring, aggregation, cross‑context transport, bridge conversions, legality gates), that step SHALL be named and cited via its governing FPF pattern or specification record. C.16 does not define such transformations, their law sets, or their admissibility conditions.

R‑G𝒢‑1 (ScoringMethod disclosure). If a pattern issues a Score (a value on a score scale), its scoring method 𝒢 : Coordinate -> Score SHALL be identified by reference to its governing method-description episteme or FPF pattern, and SHALL disclose: (i) a bounded codomain and score range, and (ii) an explicit order‑compatibility statement (e.g., monotonicity) consistent with the template’s declared polarity. When reproducibility matters, the reference SHOULD be edition-pinned according to that episteme or pattern's authoring discipline. C.16 does not define scoring methods; it only requires that a score be interpretable as a reading on a declared scale.

R‑G𝒢‑2 (Ordinal respect). For ordinal inputs, any cited scoring method must be order‑preserving; interval assumptions MUST NOT be smuggled in. (Normative source for scale legality remains A.18; C.16 only enforces “no silent semantics upgrade”.)

Entity vs Relation bindings (normative clarifications)

R‑ER‑1 (Arity preservation). If the Characteristic is U.EntityCharacteristic, the subject is one bearer; if U.RelationCharacteristic, the subject is a k‑tuple (k ≥ 2). The Measure’s claim text SHALL reflect this arity.

R‑ER‑2 (Relation scale). Relation‑valued scales SHALL fix their symmetry/antisymmetry and directionality (e.g., distance symmetric; influence directional), at the template level.

R‑ER‑3 (Bridge to CG‑frames). In architectural CG‑frames, Coupling/Cohesion are Characteristics over modules (structure) or roles (function). Their measures are relational (Coupling) or unary (Cohesion within an element), but both live in the same MM‑CHR substrate. (Alignment hinted in the old mapping rows across contexts. )

Acceptance (conceptual, RSG‑aware)

Acceptance here is thought‑level. It uses the Role‑State Graph (A.2.5) pattern to organise mental checks—no “lifecycle” narratives.

SCR‑C16‑A (Template sufficiency). You can check—without invoking tooling—that the template has: (i) a fixed Characteristic (A.17), (ii) a typed Scale form (A.18), and (iii) coherent Unit semantics where applicable (plus declared polarity for ordered scales).

SCR‑C16‑B (Reading sufficiency). For a given subject, you can check that the reading: (i) cites the template, (ii) states a value valid for the Scale (Coordinate/Level), (iii) states a time stance, (iv) names 𝒢 when a Score is issued, and (v) provides EvidenceStub(s) where the template requires them.

SCR‑C16‑C (Comparability). When two readings are placed side‑by‑side, you can state in one breath whether they are comparable as‑is or only after 𝒢, and why.

SCR‑C16‑D (Evidence adequacy). For any required EvidenceStub, you can sketch at least one auditable chain of grounds from the subject to the Characteristic via a Description in the right Context.

C.16:5.7 Cross-references & source references

  • A.17 (CHR‑NORM). Canonical Characteristic and Entity/Relation split; lexical rules and alias sunset.
  • A.18 (CSLC‑KERNEL). One Characteristic + one Scale per template; Level optional; operation guard by scale type.
  • Annex C (old MM‑CHR). Cross‑domain alignment hints for Characteristics, Observations, and Quantities across ISO 80000, ISO/IEC 25024, QUDT, SOSA/SSN (used here only as conceptual witnesses).

Scale‑type legality quick reference (Informative)

Didactic note. This table is a memory aid for engineers and managers. It does not introduce new legality rules. Normative legality of operations by scale type is governed by A.18 (CSLC) (and, where mechanized in CG‑frames, by the relevant legality profiles). If any row below conflicts with A.18, treat it as an illustrative example and follow A.18.

Scale typeComparisonsLocationDifferencesRatiosAdmissible summariesTypical unsupported anti-patterns
Nominal=, ≠mode, frequenciescounts, proportionsaveraging labels; ordering categories without a declared order
Ordinal<, =, > (rank)median, quantilesnot meaningfulorder‑respecting summaries (median rank, percentiles)arithmetic mean of ranks; variance on ranks; linear blends of ranks
Interval<, =, >mean locationΔ meaningfulratio not meaningfulmean, sd of differences, correlationratio claims (“twice as hot” in °C); geometric mean
Ratio<, =, >mean locationΔ meaningfulratios meaningfularithmetic/geometric means, cv, growth ratesadding heterogeneous units; log on nonpositive values

Reminders (informative; see A.18 for normative rules). G‑1 (Order). On ordinal, transforms should be monotone. G‑2 (Differences). On interval or ratio, Δ is meaningful; on ordinal or nominal, it is undefined. G‑3 (Ratios). Only ratio Scales admit x/y semantics; interval, ordinal, or nominal do not. G‑4 (Unit coherence). Interval or ratio arithmetic presumes compatible units (or a declared conversion). G‑5 (Target polarity). If polarity is targeted, comparisons use distance‑from‑target semantics as declared by the relevant governing pattern, template, and cited method or mechanism.

(These rules line up with the MM‑CHR exposition of CSLC and term discipline; A.17 fixes the lexical side.)

Evidence Semantics (Normative)

What an Evidence Stub is (and is not)

Definition. U.EvidenceStub is a conceptual pointer that ties a measure to the grounds sufficient for independent checking (observations, arguments, admissible transformations). It is not the run log, not the evidence carrier, and not the characteristic itself. This keeps EntityOfConcern and Description-episteme boundary and specification use distinct per E.10.D2 and the Clarity Lattice.

Rule Σ‑1. Whether evidence is required is a property of the metric template; if required, each U.Measure SHALL include an U.EvidenceStub. Rule Σ‑2. Evidence composition is commutative, associative, idempotent at the concept level (sets/multisets of grounds); combining grounds can never reduce what is knowable about the measure’s warrant. Rule Σ‑3. Soundness minimum: there exists a conceptual chain linking bearer → Characteristic → Scale and Unit → admissible method or episteme. (No “free‑floating numbers”.) Rule Σ‑4. Any declared agreement construct used as evidence (e.g., dual readings, panels) SHALL respect the template’s scale type (per A.18) (e.g., order‑based concordance for ordinal; tolerance‑based agreement for interval or ratio). Note (boundary). CG‑frame evidence thresholds (e.g., “minimal evidence” gates used by selection, scoring, or comparison mechanisms) are governed by their FPF patterns or specification records. C.16 defines only the EvidenceStub semantics that such gates may cite. Source references: MM‑CHR units and evidence notion; Strict Distinction and the separation of objects from their descriptions and specifications.

Integration with RSG & Dynamics (Normative and Clarifying)

RSG (Role‑State Graph) touch‑points

MM‑CHR supplies recognisers used in State Checklists. A checklist criterion may refer to a measure (e.g., “Cohesion ≥ T on ordinal ladder”), but the state itself remains the EntityOfConcern of the checklist; the checklist is its description, and a StateAssertion is an evidence‑backed verdict over a Window. No lifecycle language is implied; RSGs are open‑ended graphs with re‑entry edges.

Rule RSG‑M1. When a checklist cites a measure, it SHALL do so by Characteristic + Scale semantics (and unit if applicable), not by colloquial aliases; Tech and Formal registers apply. Rule RSG‑M2. Thresholds in checklists MUST respect the scale type (no ratio talk on interval scales; no arithmetic on ordinal ladders).

Dynamics & CharacteristicSpace

U.Dynamics.stateSpace is a CharacteristicSpace—a named set of Characteristics with units and topology. MM‑CHR provides the measurement side of that space; patterns specify the transition law. Architectural or epistemic dynamics are then trajectories in the declared CharacteristicSpace. No procedural or storage commitments are implied.

Conformance Checklist (Normative)

Thought‑level acceptance conditions for authors and assessors; they constrain meaning, not tooling.

CC-MCHR-1 - CSLC binding. Each U.DHCMethodRef binds exactly one U.Characteristic and exactly one scale; each U.Measure carries a value valid for that scale (cf. A.18). CC‑MCHR‑2 - Polarity declared. Every ordered scale in a template declares polarity; any Score via 𝒢 is monotone w.r.t. that polarity. CC‑MCHR‑3 - Unit coherence. Claims that compare or combine values are grounded in unit coherence (or declared conversions for interval or ratio). CC‑MCHR‑4 - Comparability honesty. Ordered comparisons are asserted only when R‑CMP‑1 holds (same‑template direct comparability) or when a named and cited transformation basis is provided per R‑CMP‑2; otherwise authors use qualitative/set‑level language. CC‑MCHR‑5 - Evidence sufficiency. Where evidence is required by the template, the measure’s grounds are conceptually sufficient to retrace the claim; composition respects Σ‑1…Σ‑4. CC‑MCHR‑6 - RSG alignment. If a measure gates a state in an RSG, the checklist criteria respect scale semantics and the EntityOfConcern vs Description-episteme split. No lifecycle phrasing; use RSG open‑ended moves. CC‑MCHR‑7 - Dynamics awareness. Where discussions involve change, the CharacteristicSpace is named (characteristics, units, topology) and separated from the transition law. CC‑MCHR‑8 - Lexical guard‑rails. Tech identifiers and headings use Characteristic, Scale, Level, Value, Score, Unit, and ScoringMethod; aliases (axis, dimension, points, or stars) appear only in explanatory Plain register with a first‑mention mapping to the Tech canon. CC‑MCHR‑9 - Causal-use metric boundary. A measurement, metric disparity, score, dashboard reading, or benchmark value that reaches CausalUseActivation SHALL keep measurement construction, scale legality, comparability, and evidence-stub repair in C.16, and SHALL carry causal-use question, causal-ladder rung, causal estimand, support basis, support verdict, admissible causal use, and inadmissible causal use in C.28.

Invariants & Anti‑Patterns (Normative unless marked “Informative”)

Invariants (N‑rules)

N‑1 — One Characteristic + one Scale per template. Every U.DHCMethodRef binds exactly one Characteristic and exactly one Scale (its type + admissible range or level‑set). This is the CSLC sufficiency condition for interpretability.

N‑2 — Value validity. A U.Measure holds a Value that is admissible for the template’s Scale (numeric range, categorical level); when a Level is used, it is among the named levels declared for that Scale.

N‑3 — Polarity is declared at the template. For ordered Scales, the template states the comparison direction (↑ better, ↓ better, or target-is-best). Any ScoringMethod mapping to Score preserves that monotonic ordering. (Note: we use “ScoringMethod mapping” instead of the Greek letter used elsewhere in FPF to avoid symbol conflicts.) For ordered Scales, the template states the comparison direction (↑ better, ↓ better, or target-is-best). Any scoring method 𝒢 that issues a Score is order‑compatible with that declared polarity semantics.

N‑4 — Unit coherence. Within one template there is one primary Unit of expression (or an explicit level‑set for non‑numeric Scales). Conversions are conceptually valid only where the Scale supports meaningful arithmetic (interval or ratio); nominal/ordinal Scales are not subject to numeric conversions.

N‑5 — Comparability guard. Two Measures are comparable iff they share the same template (hence, the same Characteristic, Scale, and Unit) or stand in an explicit comparability relation whose governing FPF pattern or specification record is cited (e.g., an F‑cluster Bridge, or a cited characterization mechanism’s declared equivalence). Otherwise, comparability is not presumed.

N-6 - Evidence as conceptual relation. If a template requires it, each Measure includes an EvidenceStub that conceptually links the Value to its grounds; absence where required makes the Measure inadmissible for use. (This is a conceptual obligation; no process mechanics are implied.)

N‑7 — Arity clarity. If the Characteristic is relational (applies to a pair or tuple), the subject of measurement is the relation itself; the reading must not be re‑described as a unary property of either participant.

N‑8 — Open‑ended evolution; graph, not lifecycle. When MM‑CHR is used in change reasoning, movement happens in a CharacteristicSpace and along a Role‑State Graph (RSG). There is no lifecycle terminal; revisions may re‑enter earlier framing nodes as per A.17. (Conceptual control structure only.)

Anti‑Patterns (A‑rules) — with cures

A‑1 — Scale drift under the same template. Smell: the Scale meaning (bounds, categories) shifts while the template ID remains. Cure: version the template; declare the relation in the Unification suite.

A‑2 — Arithmetic on ordinal. Smell: averaging “stars” or ranking labels as if they were intervals. Cure: either keep order‑respecting operations only, or introduce a ScoringMethod that defines a proper Score range.

A‑3 — Unit soup. Smell: mixing milliseconds and seconds for the same template, or “%” and “points” for one Scale. Cure: one primary Unit per template; conversions (when meaningful) are declared conceptually, not ad‑hoc.

A‑4 — Alias leakage. Smell: “axis”, “dimension”, “point”, or “ladder” in normative identifiers or headings. Cure: use only canonical tokens in normative prose; narrative labels are valid solely in Plain register with first‑mention mapping (A.17).

A‑5 — Multi‑Characteristic stuffing. Smell: one template tries to carry a vector of Values for several Characteristics. Cure: separate templates (one Characteristic each) and compose coordinates explicitly when needed.

A‑6 — Evidence afterthought. Smell: Measures required to have grounds are introduced without an intelligible EvidenceStub. Cure: treat the EvidenceStub as part of the measurement claim itself, not an accessory.

A‑7 — Template mutation after Measures exist. Smell: retro-editing Characteristic, Scale, and Unit of an active template. Cure: immutability of that triad post‑use; publish a successor template if the concept changes.

A‑8 — Score‑of‑everything. Smell: collapsing heterogeneous Values into a single “points” Score without declared ScoringMethod and SCP. Cure: retain the Value on its Scale; add an explicit scoring method by reference to its governing method-description episteme or FPF pattern and an explicit legality profile governed by the relevant FPF pattern or specification record only when there is a justified need for a Score.

Cross‑Domain Vignettes (Informative, transdisciplinary)

Each vignette shows an CSLC‑conformant template → measure, without duplicating the A.17 and A.18 glossaries.

V‑A (Architecture — relational property). Characteristic: Coupling (relational) between modules; Scale: ordinal {Low, Med, High}; Unit: level‑labels; Polarity: ↓ better. Reading: subsystem pair ⟨M₁, M₂⟩ gets Med; ScoringMethod (optional) maps levels monotonically to a bounded Score for comparative dashboards.

V-B (Physics — interval or ratio). Characteristic: ResponseTime; Scale: ratio with non‑negative reals; Unit: seconds; Polarity: ↓ better. Reading: subject S has 0.237 s; direct comparability holds with readings on the same template; cross‑template comparability requires an explicitly cited equivalence relation, Bridge, or transformation relation with its governing FPF pattern or specification record named.

V‑C (Performing arts — ordinal). Characteristic: EdgeControlQuality; Scale: ordinal levels 1…5; Unit: level‑labels; Polarity: ↑ better. Reading: performance P gets 4; any aggregation remains order‑respecting. If a numeric dashboard score is needed, cite a scoring method 𝒢 that maps levels monotonically to a bounded Score.

V‑D (AI ethics — ratio). Characteristic: ParityGap (difference of positive rates); Scale: interval with symmetric bounds; Unit: percentage points; Polarity: ↓ better (0 is target). Reading: model M on cohort C shows 3.2 pp; evidence points conceptually to the derivation rationale (inputs, reference cohorts).

Relations & Placement (Informative)

Precision-restoration relation. C.16.P is the first-stage wording-use restoration pattern for characteristic, scale, coordinate, score, metric, axis, dimension, and related characterization wording when the measurement or characteristic object is not yet recoverable. C.16 keeps the measurement substrate and resumes after the bearer, characteristic, scale, coordinate/value, unit, evidence stub, or exact non-C.16 governing pattern has been recovered. C.27 temporal-claim relation.

  • C.27 may flag: a rate/rate-change reading whose admissible use depends on admissible measurement construction, evidence, sampling window, or finite-difference method.
  • This pattern keeps: measurement construction, comparability, units, sampling windows, evidence, and admissible metric use.
  • Non-admissible use: a rate-change label is not a measurement template, and temporal words such as velocity, acceleration, throughput, cadence, or recovery speed are not admissible measures by themselves.
  • Exit: when load-bearing, the claim cites baseCharacteristicRef, the relevant measure reference, sampling window, construction method such as DHCMethodRef, and C16RouteRef; C.27 keeps only the temporal-claim adequacy question.

C.28 causal-use relation. C.16 governs measurement templates, readings, score meanings, scale legality, direct comparability, and evidence-stub adequacy. C.28 governs the causal-use relation when the same reading is used to claim effect, intervention success, causal fairness, policy optimality, counterfactual comparison, off-policy causal evaluation, causal-RL evaluation, or causal method superiority. A C.16-admissible measure is therefore not by itself admissible for causal use under C.28.

Kernel. MM‑CHR imports the canonical Characteristic vocabulary and the CSLC discipline fixed by A.17 and A.18; it does not redefine them. CharacteristicSpace reasoning (for change) lives in the patterns that consume MM‑CHR readings.

Using patterns. KD‑CAL, Arch‑CAL and others instantiate templates and produce measures; MM‑CHR remains a neutral measurement substrate. Trade‑off analyses and architectural trajectories operate over coordinates that MM‑CHR makes available, not inside MM‑CHR.

Unification (F‑cluster). External standards (e.g., ISO 80000 quantity types; W3C SOSA/SSN observable properties; QUDT units/quantity kinds) are related via Concept‑Set rows and Bridges; MM‑CHR treats those alignments as context supplied by F‑patterns, not as local re‑definitions.

Measurement and probe note for quantum-like readings

Use C.16 first when the question under repair concerns a measure, metric, score, survey, dashboard, sensor, coordinate, scale, or characteristic. A metric is not quantum-like because it is noisy, probabilistic, discrete, gamed, or difficult to interpret. Metric gaming is not QL; a metric-caused state update may be QL only when the publication, probe, order, frame, or export changes what the result can admissibly support.

Action path:

  1. Name the Characteristic, Scale, Coordinate or Value, Unit when relevant, and EvidenceStub.
  2. Separate the observable, probe method, measurement scheme, emitted output or result record, state update, and evidence carrier.
  3. Ask whether the measurement frame or probe frame changes the represented state, whether probe order changes the admissible reading, whether frames cannot share one sample space, or whether exporting the measured state loses the structure needed for intended use.
  4. If no, stay in C.16 and ordinary evidence or engineering-justification patterns.
  5. If yes, add a C.26 reading only for that remaining passive-read, shared-frame, or lossless-export mistake.
  6. State the local stop condition: which decision, audit, release, comparison, or work use with a higher evidence requirement the measurement does not support.

Minimum measurement and probe note:

FieldRequired content
Characteristic or state coordinateWhat is being measured or represented
Instrument or probeSurvey, dashboard, API read, sensor, interview, workshop, metric, body or sensor placement, or other access act
Before and after readingWhat was expected before the probe and what is observed or inferred after
Scale/frame legalityWhich scale, coordinate, frame, option menu, or sample-space assumption is active
Evidence carrierWhat carrier holds the measurement result and under which conditions
Admissible useWhich reading, comparison, triage, decision, or pattern-handoff move the result can carry
Non-admissible useWhich inference with a higher evidence requirement the measurement does not support without more evidence

Useful outputs:

  • a C.16 measure/template repair when the issue is metric legality;
  • an A.10/B.3 route when the issue is evidence or assurance;
  • a C.26.1 route when the probe changes the state it reports;
  • no QL wording when noise, uncertainty, discreteness, or metric gaming is the whole issue.

C.29 mathematical-lens use relation

If a mathematical lens depends on measurement construction, scale, unit, polarity, direct comparability, or evidence-stub adequacy, write that measurement-dependent relation in C.16 before treating the lens as usable for those measurement-dependent claims. A C.29 output may state only the measurement-dependent LensUseAdmissibilityValue for the mathematical-lens use claim; it does not construct the measure, make values comparable, or supply an evidence stub. Evidence paths remain A.10; assurance remains B.3.

C.16:End

Characteristic and Scale Precision Restoration

Type: Characterization precision-restoration pattern Status: Stable Normativity: Normative unless explicitly marked informative

Plain-name. Characteristic-scale wording repair.

Intent. Recover characteristic, scale, coordinate, score, metric, indicator, threshold, comparison, and scalar-quality wording whose construction is hidden before a reader applies C.16, A.17, A.18, A.19, C.25, C.29, E.21, or another governing pattern.

This pattern is not a metrics-only pattern, not a measurement-method replacement, not a Q-bundle pattern, and not a gate or decision pattern. It repairs overloaded characterization wording so the exact Characteristic, Scale, Coordinate, Value, Score, Unit, ScoringMethod, indicator role, comparison reference or comparator set, proxy role, admissible use, and governing pattern become recoverable.

Builds on. E.10, E.10.ARCH, A.17, A.18, C.16, A.19, C.25, C.29, E.21, F.18, and A.6.P.

Coordinates with. C.16.Q, A.19.ECS, CHR mechanism patterns, G.0, G.5, G.9, C.11, A.10, B.3, A.20, A.21, C.28, A.15, evidence, assurance, gate, decision, causal-use, release, work, benchmark, and publication patterns governing those claims.

E.10.ARCH governing relation. When E.10 encounters metric, score, axis, dimension, feature, property, indicator, strong, weak, robust, level, coordinate, threshold, benchmark, or scalar-quality wording whose characteristic and scale construction is hidden, E.10.ARCH selects C.16.P only until bearer, characteristic, scale, value or score construction, comparison reference or comparator set, threshold rule or reference, proxy relation, admissible use, and governing pattern are recovered. After that recovery, the governing pattern governs its own invariant.

Use this when

Use this pattern when wording such as axis, dimension, feature, property, metric, indicator, score, strong, weak, robust, level, coordinate, threshold, rating, benchmark, quality coordinate, or architecture score carries a characterization claim but does not yet show the recoverable construction.

What goes wrong if missed. A metric becomes a measure without a scale, a score becomes proof, strong becomes a verdict without a characteristic, a level becomes an undefined maturity status, an indicator becomes the thing indicated, or a benchmark result becomes gate passage or release permission.

What this buys. The reader can recover the bearer, characteristic, scale, value, score, unit, scoring method, indicator role, comparison reference or comparator set, threshold, admissible use, and governing pattern before treating a number, adjective, coordinate, or comparison as actionable.

First useful move. Ask which bearer, characteristic, scale, value or score construction is recoverable; then apply C.16, A.19, C.25, C.29, E.21, or the neighboring pattern governing that claim instead of letting the compact word decide.

Not this pattern when.

  • If the Characteristic, Scale, value set, scoring method, and admissible use are already recoverable, use C.16, A.17, A.18, or A.19 directly.
  • If the claim being made is a Q-bundle, quality-term or evaluative characterization, or pattern-quality coordinate, use C.25, C.16.Q, or E.21 directly after any needed characteristic-scale repair.
  • If the claim being made is mathematical-lens use, use C.29.
  • If the claim being made is evidence, assurance, gate, work, decision, causal-use, release, benchmark harness, or project-side authority claim, use the governing pattern for that claim after characteristic and scale construction is recovered or blocked.

Problem frame

Working texts often need compact characterization words. The problem starts when compact words begin to carry comparison, proof, selection, gate, readiness, release, quality, or decision claim without recoverable characteristic and scale construction.

The repair question is:

What characteristic or scale construction is recoverable, and what governing pattern carries the remaining claim?

The recoverable item may be:

  • a Characteristic under A.17;
  • a Scale, coordinate, value, unit, scoring method, measure, or measurement use under A.18 and C.16;
  • a CharacteristicSpace under A.19;
  • a Q-bundle under C.25;
  • quality-term or evaluative characterization under C.16.Q;
  • pattern-quality coordinate use under E.21;
  • mathematical-lens use under C.29;
  • comparison, threshold, indicator, proxy, benchmark, gate, evidence, decision, or work claim under neighboring patterns governing those claims;
  • ordinary prose with no FPF-governed use.

Problem

How can FPF repair characterization wording without:

  • treating metric as a universal measurement kind;
  • treating score as proof, readiness, gate passage, release permission, or decision;
  • treating axis, dimension, feature, property, or level as a recoverable characteristic by appearance;
  • treating strong, weak, robust, high, low, or better as meaningful without a scale and comparison reference or comparator set;
  • turning C.16.P into a CHR super-pattern or replacement for C.16, A.17, A.18, A.19, C.25, C.29, or E.21;
  • copying first-stage characterization repair lists into every governing pattern.

Forces

ForceTension
Compact comparison vs recoverable constructionReaders want quick words such as strong, weak, metric, score, and level; FPF needs characteristic, scale, value, and use boundaries.
Measurement discipline vs ordinary evaluationSome words are informal cues, some are real measurement claims, and some are quality-term or evaluative characterization.
Proxy usefulness vs proxy overreadIndicators and scores can be useful proxies but can also hide distortion, threshold choice, and non-comparability.
Characteristic-space breadth vs gate disciplineA characteristic space can guide comparison without becoming a gate, decision, or release authority.
Mathematical-lens use vs scalar shortcutA mathematical lens may expose structure, but C.29 lens-use result is not repaired by score wording alone.
Small repair vs full formMany cases need one repaired phrase or compact note, not a full measurement or characteristic-space publication.

Solution

Repair compressed characterization wording by producing a characteristic-scale repair note or equivalent local rewrite.

Minimum fields:

CharacteristicScaleRepairNote:
  triggerSpan:
  boundedTextSpanOrPublicationUnit:
  bearer:
  candidateConstruction:
  recoveredCharacteristic?:
  recoveredScale?:
  recoveredCoordinate?:
  recoveredValue?:
  recoveredScore?:
  unit?:
  scoringMethod?:
  indicatorRole?:
  comparisonReferenceOrComparatorSet?:
  thresholdRuleOrReference?:
  proxyDistortionRisk?:
  governingPatternRef:
  repairedWordingOrDemotion:
  admissibleUse:
  nonAdmissibleUse:
  remainingReaderMove:
  disposition:

Use the full note only when the repair must remain inspectable. Use a local rewrite when one sentence clearly states the characteristic and scale construction and governing pattern.

Recovery sequence

  1. Capture the trigger. Copy the exact word or phrase and the sentence that uses it.
  2. Recover the bearer. Name what is being characterized: holon, pattern, DRR, architecture description, structure, model, method, work result, publication, candidate, relation, decision option, evidence path, or another FPF kind named by value.
  3. Recover the construction. Decide whether the trigger means Characteristic, Scale, coordinate, value, score, unit, scoring method, indicator, threshold, comparison reference or comparator set, proxy, Q-bundle, mathematical lens, gate, evidence, decision, or ordinary prose.
  4. Select direct governing pattern when possible. If C.16, A.17, A.18, A.19, C.25, C.29, E.21, or another governing pattern is already recoverable, use it directly.
  5. Repair hidden characteristic and scale construction. When construction is hidden, recover the minimal needed set: characteristic, scale, value set, score, unit, scoring method, indicator role, comparison reference or comparator set, threshold rule or reference, admissible use, and non-admissible use.
  6. Exit adjacent claims. Evidence, assurance, gate, work, decision, causal-use, release, benchmark, publication, or authority claims go to governing patterns.
  7. State remaining reader move. Say what the reader can now compare, measure, score, block, or assign to a neighboring pattern. If the result is type-correct but gives no action or recognition reason, the repair is incomplete.

Trigger split

Trigger wordingFirst recovery questionNot enough
metricIs there a declared Characteristic, Scale, measure, unit, scoring method, and admissible use?Saying "metric" as a synonym for evidence, quality, performance, or success.
scoreWhat value on which scale, computed how, and used for what comparison or threshold?Score as proof, gate passage, readiness, or release.
axis or dimensionIs this a Characteristic, coordinate in a characteristic space, mathematical factor, latent coordinate, structural aspect, or ordinary explanatory direction?Axis or dimension as self-evident ontology.
feature or propertyIs this an observed feature, characteristic, model feature, entity property, relation property, or ordinary prose?Feature or property as automatic characteristic.
strong or weakStrong or weak on which scale, for which characteristic, under which comparison reference or comparator set?Strength without scale.
robustRobust to what perturbation, under which scale, comparison, loss, or preserved-structure and lost-structure?Robust as general praise.
levelLevel on which declared scale or abstraction, not a free hierarchy.Level as undefined scale or maturity status.
indicatorIndicator of what characteristic or claim, with what proxy relation and distortion risk?Indicator as the indicated property.
thresholdThreshold on which scale, with what comparison reference or comparator set, gate relation, and non-use boundary?Threshold as decision by itself.
benchmarkBenchmark for which characteristic, comparison set, front, archive, or harness?Benchmark result as proof or release.

Governing-Pattern Exits Named by Value

Recovered construction, claim kind, or admissible-use boundaryExit
CharacteristicA.17
Scale, value set, value, coordinate, unit, scoring method, measurement useA.18, C.16
CharacteristicSpaceA.19 or A.19.ECS when evaluation-characteristic-space construction is live
Q-bundle or quality-characterization disciplineC.25
Quality-term or evaluative characterization wordingC.16.Q after any needed characteristic and scale repair
Pattern-quality coordinate or pattern-quality evaluationE.21
Mathematical function, mathematical lens, preserved-structure and lost-structure, model adequacy or lens-use resultC.29
CHR mechanism, characteristic-space mechanism, selector, suite, or set-return lawA.19.CN, G.0, A.19.UINDM, A.19.USCM, A.19.ULSAM, A.19.CPM, A.19.SelectorMechanism, G.5, C.11, or mechanism pattern named by value
Evidence or proofA.10 or evidence pattern governing the claim
Assurance or engineering justificationB.3 or assurance pattern governing the claim
Gate, constraint, release, readiness thresholdA.20, A.21, release or admissibility pattern, or gate pattern governing the claim
Decision, choice, selected optionC.11
Causal-use claimC.28
Work, method, operation, implementationA.15, A.15.4, method or work pattern
Source, publication, carrier, dashboard, documentationC.2.P, E.17, or publication or source-use pattern governing the claim
Relation construction, comparison relation, or wording that says one value supports or is based on anotherA.6.P or retained relation named by value specialization

Refresh and reopen conditions

Reopen or narrow C.16.P when current pattern-language ecology changes the first characteristic and scale entry:

  • a new characteristic named by value, scale, evaluation, benchmark, proxy or indicator, gate or decision, mathematical-lens, quality, OEE, NQD, or publication pattern can receive one row directly;
  • current best-known practice changes comparability, proxy-risk, threshold, measurement, scoring-method, or benchmark-harness discipline adopted in C.16.P:8;
  • README, ToC, E.11, retrieval, or local Problem-frame entry cues change the first practical entry for hidden characteristic and scale wording;
  • a governing pattern starts copying first-stage metric, score, axis, strong, or indicator trigger lists that belong here;
  • C.16.P begins to act as a metrics catalog, maturity scheme, or CHR super-pattern rather than a wording-use repair pattern for hidden construction.

The refresh action is to remove, narrow, or redirect the first-stage row. It is not to preserve old exits as history.

Worked cases

WordingRepair
"This pattern is stronger."Recover the characteristic and scale. If the sentence means pattern-quality evaluation, use E.21; if it means relation strength, use A.6.P; if no scale exists, demote to ordinary prose or rewrite with the exact gain.
"Architecture score improved."Recover whether this is a score on a declared scale, pattern-quality coordinate, grounded architecture adequacy value, selected-structure characteristic value, Q-bundle value, benchmark result, gate threshold, or ordinary comparison. Use C.16.P before using the score.
"The metric supports launch."Recover measure, characteristic, scale, scoring method, threshold rule or reference, and gate or decision pattern. The metric alone is not launch evidence, gate passage, decision authority, or launch justification.
"The model has robust quality."Recover robustness perturbation and scale, quality-term or evaluative characterization under C.16.Q, Q-bundle under C.25, or mathematical-lens use under C.29.
"Latent axis explains behavior."Recover whether axis is a latent coordinate, factor, mathematical lens, characteristic, or ordinary source-local word. Use C.29 when a mathematical-lens use is being claimed.
"The benchmark proves the method is better."Recover benchmark harness, characteristic space, comparison set, scale, statistical or evidential claim, and decision use. Use evidence named by value, decision, and work patterns as needed.

Reduced SoTA row

Current measurement, quality, proxy-risk, and comparison practice distinguishes characteristics, scales, measures, scores, indicators, thresholds, comparability, proxy status, and decision use. FPF adopts this line only where it changes examples, non-comparability boundaries, indicator and proxy boundaries, scale and scoring method fields, gate and comparison exits, or conformance checks.

Practice sourceSource-use relation and currentnessWhat C.16.P adopts or adaptsFPF import boundary
ISO/IEC/IEEE 15939:2017 systems and software measurement process.Current-standard reference for measurement-process discipline.Disciplines CharacteristicScaleRepairNote fields for measure, scale, indicator, measurement use, and information need; informs CC-C16P-1 and direct exits to C.16, A.17, and A.18.Does not make "metric" a recovered kind, evidence path, gate, or decision by itself.
ISO/IEC 25010:2023 product quality model.Current-standard reference for quality-characteristic families.Disciplines quality and scalar-quality cases: a quality word needs characteristic and scale construction or quality-pattern use named by value before comparison, score, or gate use.Does not import ISO quality characteristics as the FPF quality ontology; quality-term or evaluative characterization still exits to C.16.Q, C.25, or E.21 when live.
ISO/IEC 80000 quantities and units practice and VIM-style metrology vocabulary.Current reference for quantities, units, and measurement vocabulary.Disciplines unit, value, scale, and scoring-method fields; blocks number-without-scale and unitless comparison overreads.Does not impose physical-quantity metrology on qualitative, ordinal, or pattern-quality characteristic spaces.
NIST AI RMF 1.0 metric and risk-management practice, including measurement, monitoring, validity, and risk-tolerance framing.Current practice reference for proxy and indicator risk.Disciplines indicatorRole, proxyDistortionRisk, threshold rule or reference, and non-admissible use; informs the indicator and proxy and score-as-gate anti-patterns.Does not let a risk metric, dashboard, or benchmark become assurance, release permission, or decision authority.
Current FPF internal characterization stack: A.17, A.18, C.16, A.19, C.25, C.29, and E.21.Current FPF governing-source relation; primary authority for FPF characteristic and scale recovery.Selects the governing pattern after repair and prevents C.16.P from becoming a CHR super-pattern.Does not copy local trigger lists into governing patterns or replace characteristic named by value-space, quality, mathematical-lens, benchmark, gate, or decision patterns.

This row blocks scalar verdicts without declared scale and admissible use. It does not import metric lists, maturity-status schemes, or external scoring traditions as FPF ontology.

Conformance checklist

CheckRequirement
CC-C16P-1The repair names trigger span, bearer, recovered characteristic or scale construction, governing pattern, admissible use, non-admissible use, and remaining reader move.
CC-C16P-2metric, score, axis, dimension, feature, property, indicator, strong, weak, robust, level, coordinate, threshold, and benchmark are trigger words, not recovered kinds by themselves.
CC-C16P-3Direct C.16, A.17, A.18, A.19, C.25, C.29, E.21, or governing-pattern use applies the governing pattern directly when construction is already recoverable.
CC-C16P-4Evidence, assurance, gate, work, decision, causal-use, release, publication, benchmark, and authority claims exit to governing patterns.
CC-C16P-5The repair does not create a metrics-only restoration pattern, CHR super-pattern, scalar verdict, undefined maturity-status scheme, or release decision.
CC-C16P-6The repaired wording preserves one useful admissible reader move; type-correct but inert characterization wording is not recovered by value.

Common anti-patterns

Anti-patternSymptomRepair
Metric-as-evidenceA metric is treated as evidence, proof, gate input, or decision authority without evidence named by value, gate, decision, and measurement construction.Recover characteristic and scale construction, then apply A.10 or evidence named by value, gate, or decision pattern if that claim is being made.
Score-as-gateA score is treated as gate passage, readiness, release, or decision.Recover scale, threshold rule or reference, comparison reference or comparator set, and exact gate, decision, or release pattern.
Axis-as-ontologyAxis or dimension is treated as if it already named a characteristic or factor.Recover Characteristic, coordinate, latent factor, mathematical lens, structural aspect, or ordinary prose.
Strong-without-scaleStrong or weak modifies a claim without scale, characteristic, or comparison reference or comparator set.Write the characteristic named by value and scale or demote to ordinary prose.
Indicator-as-indicated-characteristicIndicator wording hides the indicated characteristic or proxy relation.Name indicator role, indicated characteristic or claim, and proxy-distortion risk.
Characterization repair copied everywhereReceiving patterns keep their own metric, score, or strong trigger lists.Keep one thin cue and send hidden construction to C.16.P.
  • E.10 catches hidden characteristic and scale wording and selects this pattern only when construction is hidden.
  • E.10.ARCH defines the shared wording-use recovery order and applicability row.
  • A.17, A.18, and C.16 govern characteristics, scales, values, measures, and measurement use.
  • A.19 governs characteristic-space construction.
  • C.25 governs Q-bundles.
  • C.16.Q governs quality-term or evaluative characterization wording.
  • E.21 governs pattern-quality evaluation characteristic spaces.
  • C.29 governs mathematical-lens use.
  • Exact evidence, assurance, gate, work, decision, causal-use, release, benchmark, and publication patterns govern their own claims.

C.16.P:End

Quality-Term Precision Restoration

Type: Characterization precision-restoration pattern Status: Stable Normativity: Normative unless explicitly marked informative

Plain-name. Quality-term precision restoration.

Intent. Provide a reusable discipline for repairing overloaded quality and evaluative-characterization wording in FPF texts.

This pattern lives in the C.16 characterization pattern nest. It rewrites bare evaluative prose either into one explicit endpoint-pattern-governed evaluative form or, when endpoint selection is still being stabilized, into one explicit transitional quality-term repair form with a declared sense family, admissible normal form (SignalPack | Characteristic | Bundle | Objective), reference-plane accountability, and lexical guardrails.

It allows philosophical, neuro-symbolic, control-theoretic, engineering, and open-ended-search uses to coexist without false identity by label. It does not treat quality-term or evaluative characterization as relation construction by default. When the found problem is relation construction, bridge, basedness, action-invitation relation, endpoint mismatch, or another relation-shaped claim, use A.6.P or the relation named by value specialization.

Placement. Part C > C.16 characterization pattern nest > precision-restoration pattern for overloaded quality and evaluative-characterization wording.

Builds on. E.10, E.10.ARCH, C.16.P, C.16, C.25, E.21, A.17, A.18, A.19, A.7, C.2.1, E.8, F.9, and F.18.

Coordinates with. A.6.P for relation-construction exits; A.6.A for action-invitation exits; C.2.2a, A.16, A.16.1, A.16.2, and B.4.1 for language-state chart positions, admissible moves, early cue handling, responsibility handoff, and admissible retreat when an evaluative publication must be reopened; B.5.2.0 when the admissible continuation is still an open explanatory probe rather than a stable endpoint characterization; C.2.LS, C.2.4, C.2.5, C.2.6, and C.2.7 for articulation, closure, anchoring, and representation-factor facets referenced but not governed here; E.17.0, E.17, and E.18 for viewpoint publication; A.10 and B.3 for evidence and assurance; A.19.CN for comparability governance; F.9.1 for bridge-stance annotations; C.3.3 for explicit kind-bridge repair when endpoint kind mismatches appear.

E.10.ARCH governing-pattern relation. When E.10 encounters quality, good, fit, high-quality, quality metric, quality score, quality characteristic, quality requirement, model quality, architecture quality, solution quality, or evaluative -ility wording whose quality sense, bearer, evaluation frame, endpoint normal form, or governing pattern is hidden, E.10.ARCH assigns the repair to C.16.Q only until those values are recovered or the claim being made exits to C.16.P, C.25, E.21, A.6.P, A.6.A, C.29, A.10, B.3, A.20, A.21, C.11, C.2.P, or another pattern governing the recovered claim. C.16.Q does not keep evidence, assurance, gate, decision, work, release, relation, action-invitation, mathematical-lens, source-use, or publication invariants after that exit is recoverable.

Non-goal. This pattern does not assert that phenomenal character or qualia, phenomenological preconceptual fit, Pirsig-style dynamic quality and static quality, latent fit in learned representations, explanatory merit, engineering -ilities, QD and NQD selector value, and control adequacy are one concept. Its job is to publish a disciplined evaluative-characterization use across those traditions while preventing false identity by shared label. It also does not assert that every trigger use of "quality" is admissibly repaired by the transitional quality-term repair form: where the repaired statement is primarily about an action invitation under A.6.A, relation construction under A.6.P, or a requirement or commitment over explicit heads, the admissible move is to exit to the pattern governing the recovered claim rather than assigning a quality-term or evaluative characterization.

Use this when

Use this pattern when wording such as quality, good, fit, high-quality, quality characteristic, quality improved, or an evaluative -ility claim hides which quality or evaluative-characterization use is live.

Lowest sufficient use. Keep ordinary praise or quoted source-local wording ordinary when it carries no FPF-governed use. When the evaluative endpoint is already known, prefer a direct endpoint-governed rewrite. Use qualityTermAscription(...) only when transitional ambiguity must remain inspectable. Use the full slot set only when decision-bearing, publication-bearing, cross-tradition-bearing, or boundary-bearing claim is live.

What goes wrong if missed. A broad quality word becomes a scalar verdict, a gate, an evidence claim, a relation, a bridge, an action invitation, or a bundle by appearance, while the bearer, evaluation frame, quality sense, admissible normal form, and pattern governing the recovered claim remain hidden.

What this buys. The reader can recover the bearer, evaluation frame, candidate quality sense, admissible normal form, bridge or relation exit when live, and the pattern governing the recovered claim before using the quality word as action guidance.

First useful move. Name the bearer and evaluation frame, choose whether the wording is quality-term or evaluative characterization, characteristic-scale construction, Q-bundle, pattern-quality coordinate, relation construction, bridge stance, action invitation, or ordinary prose, then apply the pattern governing the recovered claim.

Not this pattern when.

  • If the issue under repair is hidden characteristic, scale, score, metric, coordinate, threshold, or comparison construction, use C.16.P first.
  • If the claim being made is already a Q-bundle, pattern-quality coordinate, relation construction, action invitation, evidence, assurance, gate, work, decision, causal-use, release, or source-use claim, use the pattern governing the recovered claim directly after any needed quality-word repair.
  • If the word is ordinary praise or source-local wording with no FPF-governed use, keep it ordinary, quote-only, or reduced-use rather than publishing a quality-term repair.

Problem frame

FPF repeatedly encounters a predictable precision failure mode around the token quality:

drafts say:

  • “this design has quality”
  • “the model quality improved”
  • “quality matters before formalisation”
  • “quality characteristics”
  • “quality in QD and NQD”
  • “the world model is higher quality”
  • “the explanation is high-quality”

…but the intended meaning is actually one of several different evaluative families, for example:

  1. Phenomenal character or qualia when the experienced quality itself is the topic of description rather than an externally measured characteristic.
  2. Preconceptual fit or felt rightness before stable EntityOfConcern characterization.
  3. Latent and distributed fit signals in learned representations, world models, or active inference loops.
  4. Explanatory merit of a theory, problem frame, or conjecture.
  5. Architectural-description fitness and compression merit of an architecture description or architecture model under a declared viewpoint.
  6. Engineering quality families such as reliability, maintainability, security, evolvability.
  7. Usefulness and selection value in open-ended search, novelty–quality–diversity, or portfolio selection.
  8. Control adequacy of a policy, model, or controller in a closed loop.

The failure modes are recurrent:

  • Sense elision. One broad evaluative noun hides several non-equivalent evaluative kinds.
  • Bearer confusion. The bearer of the evaluation is unclear: record, publication carrier when the carrier itself is evaluated, episode, model, policy, explanation, candidate, architecture, relation, or action loop.
  • Form confusion. A non-metric signal is rewritten as a metric; a bundle is treated as one scalar; an objective is mistaken for a characteristic.
  • Substrate confusion. Embodied and preconceptual, latent and distributed, and symbolic-local representations are silently collapsed.
  • Plane confusion. Quality of the EntityOfConcern being described, quality of the description, quality of the carrier, and quality of the publication face are silently collapsed across ReferencePlane values and A.7 lanes.
  • Bridge illusion. Similar wording across traditions is mistaken for sameness.
  • Illegal scalarisation. Composite engineering families or explanatory merit are compressed into one number without an admissible scoring method.
  • Viewpoint conflict. One stakeholder means architectural attributes, another means usefulness, another means preconceptual fit.

Problem

How can FPF let working texts keep the communicative convenience of the word quality while preventing category errors when the term crosses:

  • phenomenological and epistemological discourse,
  • architecture-description fitness discourse and viewpoint-fit discourse,
  • representation-learning and neuro-symbolic discourse,
  • Popper- and Deutsch-style explanation-and-criticism discourse,
  • engineering architecture and quality-characteristic discourse,
  • open-ended evolution, NQD, and selection discourse,
  • control, world-model, and active-inference discourse,
  • ecological affordance discourse, including source-tradition affordance cases that must leave quality-term restoration for A.6.A or another action-invitation governing pattern?

Forces

  • Breadth vs precision. “Quality” is attractive because it is broad; that same breadth makes it unsafe at boundaries.
  • Preconceptuality vs auditability. Some uses refer to something real but not yet stably characterised.
  • Distributed substrate vs local publication. Some evaluative signals arise in distributed or embodied substrates but must later be published in explicit local forms.
  • Comparability vs non-reduction. Engineering and selection settings need comparability, but not every evaluative signal is an admissible metric.
  • Cross-tradition dialogue vs false unification. The framework should permit parallels without asserting identity.
  • Progressive articulation. A term may begin as a felt signal and later become a bundle, proxy set, or objective.

Solution

Stable repair frame > Sense Family > Slots > Normal Form > Change Lexicon > Guardrails

Trigger rule

A use of quality is in scope for C.16.Q when any of the following holds:

  • the token quality or high-quality or low-quality appears in Tech or normative prose;
  • a boundary statement relies on “quality” for admission, selection, explanation, comparison, assurance, or requirement-setting;
  • different traditions are compared using the same word quality;
  • a draft introduces quality metric, quality score, quality characteristic, quality requirement, model quality, architecture quality, solution quality, or quality in QD without a declared sense;
  • the occurrence is intended to carry more than one of: evaluative fit, measurable characteristic, bundle, utility, or optimization objective.

Operational repair sequence

When the trigger fires, follow the E.10.ARCH recovery order specialized to quality-term or evaluative characterization:

  1. Capture the trigger span. Copy the trigger phrase using quality or a red-flag derivative such as high-quality, quality metric, quality characteristic, or model quality.

  2. Recover the bearer and publication lane. Name the bearer and the relevant A.7 lane or kind: EntityOfConcern being described, description, episteme or publication face, carrier when the carrier itself is evaluated, pattern, model, policy, explanation, candidate, architecture description, work result, relation, action loop, or ordinary prose.

  3. Reconstruct candidate quality senses and endpoint patterns. Enumerate plausible candidate senses and, when relevant, candidate endpoint-governing FPF patterns or explicit endpoint source references. If the occurrence is decision-bearing, publication-bearing, or cross-tradition-bearing, record a short quality-term candidate note before selecting the repair.

  4. Exit when the claim being made is not quality-term or evaluative characterization. If the occurrence is primarily action invitation, relation construction, bridge, basedness, endpoint mismatch, evidence, assurance, gate, work, decision, causal-use, release, mathematical-lens use, characteristic and scale construction, or source-use, do not assign a QualitySense. Apply A.6.P, A.6.A, C.16.P, C.29, C.2.P, or the pattern governing the recovered claim.

  5. Select one explicit quality sense. Pick one QualitySense token and state why rival senses were rejected in this local context.

  6. Emit an endpoint-explicit or transitional rewrite. Rewrite the sentence either into one explicit endpoint-pattern-governed evaluative form (Characteristic | Q-Bundle | Objective | ExplanatoryMeritBundle | selector-value endpoint) or, when endpoint choice is still being stabilized, into one explicit qualityTermAscription(...) transitional repair form with bearer, frame, evaluator and viewpoint, normal form, and explicit qualifiers.

  7. Classify boundary-bearing consequences. If the repaired statement is used for admissibility, commitments, publication, evidence-bearing decisions, gates, release, or work, apply the governing pattern instead of letting quality carry the required claim by itself.

Transitional repair frame: evaluative classification anchored by qualityTermAscription(...)

C.16.Q stabilizes the ambiguity cluster by treating every in-scope quality statement as explicit evaluative content that must name the endpoint governing pattern or publication with named authority-reference relation that carries it, not as a bare adjective.

qualityTermAscription(...) is the canonical transitional quality-term repair form when the endpoint choice is not yet fixed. It is not the universal resting place, not a relation kind by default, and not a shadow endpoint source.

Entry into C.16.Q presupposes enough articulation explicitness to name the bearer, evaluation frame, and at least one candidate evaluative family. Closure degree may remain low while qualityTermAscription(...) is serving as a transitional repair form, but if the content is still only a cue pack, forwarded cue, or open explanatory probe, keep it in A.16.1, B.4.1, or B.5.2.0 rather than publishing it here prematurely. If a previously published evaluative record later loses the evidence, witness, or authority-reference relation needed to keep even that transitional status live, retreat via A.16.2.

The transitional form is:

qualityTermAscription :=
{
  bearerTuple,
  qualitySense: QualitySense,
  evaluationFrame,
  evaluator?,
  viewpoint?: U.Viewpoint,
  view?: U.View,
  referencePlane?,
  refScheme?: U.ReferenceScheme,
  reprScheme?: U.RepresentationScheme,
  normalForm: SignalPack | Characteristic | Bundle | Objective,
  scope?: U.Scope,
  gammaTime?,
  representationSubstrate?: embodied-kinesthetic | latent-distributed | symbolic-local | hybrid,
  bridgeRef?,
  witnesses?,
  endpointGoverningPatternRef,
  admissibleUse,
  nonAdmissibleUse
}

So the sentence "X has quality" is never accepted as a terminal form. It must be rewritten either into an explicit endpoint-pattern-governed evaluative form or into this transitional repair form with a declared endpoint-governing pattern or explicit endpoint source relation.

Discipline note. QualitySense is a slot value inside the transitional repair form; it is not a replacement for the endpoint FPF pattern or explicit endpoint source reference. The sense token refines what kind of evaluative characterization is being made while the endpoint source, governing pattern, or EntityOfConcern remains explicit.

Separation note. evaluator and viewpoint are not synonyms. When both matter, publish them separately: the evaluator is the observing, criticizing, or selecting party or policy, while the viewpoint is the declared U.Viewpoint under which the ascription is presented.

Polarity discipline (bearer-centred; no silent inverse)

qualityTermAscription is bearer-centred. Tech and normative prose SHALL keep the evaluated participant in the bearer position and SHALL publish evaluator and viewpoint separately.

  • “Architects rate the system highly” rewrites to qualityTermAscription(bearer=System, evaluator=ArchitectureReviewBoard, …).
  • “The benchmark says model quality is high” rewrites to qualityTermAscription(bearer=Model, evaluator=BenchmarkPolicy, …).

There is no inverse token that silently makes the evaluator the bearer. If inverse wording is used in Plain prose, the wording SHALL be rewritten into the bearer-centred form (or publish an explicit inverse form under the pattern governing the recovered claim that governs it).

Endpoint-first discipline

When the admissible endpoint-governing FPF pattern or explicit endpoint source reference is already known, the endpoint-pattern-governed evaluative form SHOULD be published directly, and qualityTermAscription(...) SHOULD remain only when preserving the transitional ambiguity is itself informative. qualityTermAscription(...) is therefore a transitional characterization record, not a shadow endpoint source.

Typical direct endpoints are:

  • engineering -ility heads published as one Characteristic or one Q-Bundle,
  • selector-context uses published as an Objective headed by QS.UseValue unless overridden explicitly,
  • architecture-description uses published under the description-side evaluative head already selected by the viewpoint bundle,
  • explanatory-merit uses published under the explicit merit bundle when that bundle head is already known.

Core construct: QualitySense

Every in-scope use SHALL resolve to an explicit QualitySense token.

A QualitySense token publishes at least:

QualitySense :=

    senseId,
    bearerArity,
    articulationMode,
    representationSubstrate,
    defaultNormalForm,
    admissibleNormalForms,
    evaluationFrameKind,
    admissibleEvidenceModes,
    admissibleChangeClasses,
    bridgePolicy

Where:

  • articulationMode{ preconceptual, exemplar-grounded, proxy-grounded, characteristic-bound, bundle-bound, objective-bound }
  • representationSubstrate{ embodied-kinesthetic, latent-distributed, symbolic-local, hybrid }
  • defaultNormalForm{ SignalPack, Characteristic, Bundle, Objective }
  • admissibleNormalForms is the explicitly declared set of admissible evaluative normal forms for the sense. defaultNormalForm names the primary evaluative normal form; any additional endpoint forms MUST be declared here rather than inferred ad hoc. If the quality ascription is published, route publication face, form, unit, carrier, and rendering questions to E.17, E.8, or the publication pattern governing the claim.

Normative starter set of sense families

A Context MAY add local senses, but the following starter set is normative as the initial disambiguation menu:

QualitySense tokenUse when “quality” means…Default normal formTypical substrateMust not be silently collapsed into
QS.PreconceptualFitpreconceptual fit, felt rightness, “quality before definition”, kinesthetic or embodied salienceSignalPackembodied-kinesthetic or hybridCharacteristic, utility, fitness score
QS.PhenomenalCharacterphenomenal character, qualia, or felt characteristic when the experienced quality itself is describedSignalPackembodied-kinesthetic or hybridQS.PreconceptualFit, engineering quality, utility
QS.LatentFitdistributed fit or tension in learned representations, world models, probes, prediction structuresSignalPacklatent-distributed or hybridQS.PreconceptualFit, engineering quality, explanatory merit
QS.ExplanatoryMeritepistemic merit of an explanation, conjecture, problem frame, or theoryBundlesymbolic-local or hybridengineering -ilities, use-value
QS.ArchitecturalDescriptionFitnesstask-fit and compression merit of an architecture description, architecture model, or viewpoint bundle as a description of structure for downstream reasoningBundlesymbolic-local or hybridQS.EngineeringQualityFamily, QS.ExplanatoryMerit, publication polish
QS.EngineeringQualityFamilyreliability, availability, security, maintainability, evolvability, usability, and related engineering familiesBundlesymbolic-local or hybridfunction or capability statements, preconceptual fit
QS.UseValueusefulness of a candidate under a declared goal or CG-frame; the “Q” head in NQD or QD by defaultObjectivesymbolic-local or hybridengineering quality family, explanatory merit
QS.ControlAdequacyadequacy of a policy, model, or controller in a closed action loopBundlehybridbare model “quality”, felt fit

Default-form note. QS.EngineeringQualityFamily and QS.ControlAdequacy default to Bundle. A local Context MAY operationalize one explicit head as a Characteristic, but that is a declared operationalization, not a second default normal form.

Normative rewrite note.

  • In NQD, QD, or selector contexts, bare quality SHALL rewrite to QS.UseValue unless a different QualitySense is explicitly declared.

  • In engineering contexts, bare quality SHALL rewrite either to:

    • one explicit U.Characteristic + CSLC Scale, or
    • one explicit Bundle, preferably published as a Q-Bundle when composite.
  • In phenomenological contexts, bare quality SHALL rewrite to QS.PhenomenalCharacter when the experienced quality itself is the topic of description, and to QS.PreconceptualFit when the talk is about preconceptual fit or felt rightness before stable characterisation.

  • In representation-learning and world-model contexts, bare model quality SHALL rewrite to QS.LatentFit, QS.ControlAdequacy, or both, with the distinction made explicit.

  • In epistemic evaluation contexts, “good explanation” SHALL rewrite to QS.ExplanatoryMerit.

  • In architecture-description fitness or viewpoint contexts, bare architecture quality or architectural quality SHALL first disambiguate the bearer lane: if the bearer is the system-side bearer, use QS.EngineeringQualityFamily; if the bearer is the description or episteme, use QS.ArchitecturalDescriptionFitness.

Required slots for a conforming qualityTermAscription

A conforming qualityTermAscription SHALL make explicit:

  1. Bearer tuple. What is being evaluated, with arity explicit.

  2. QualitySense. Which evaluative family is intended.

  3. Evaluation frame. The evaluation criterion or criterion frame under which the ascription is made. Examples: exemplar pack, probe pack, criticism or test pack, Q-bundle definition, CG-frame, acceptance spec, control horizon.

  4. Evaluator or viewpoint. State the evaluator (observer, critic, selector policy, stakeholder family, or review body) and, when relevant, the U.Viewpoint, separately. The two SHALL NOT be silently collapsed when they differ.

  5. Normal form. Whether the ascription is published as SignalPack, Characteristic, Bundle, or Objective.

  6. Scope and time when relevant. The relevant USM scope (U.ClaimScope, U.WorkScope, U.PublicationScope, or generic U.Scope) and Γ_time SHALL be explicit when omission changes meaning. Freshness windows, qualification windows, or evidence decay windows SHALL be declared in the appropriate evidence or capability lane rather than smuggled into “quality” as an adjective.

  7. Reference plane when relevant. Especially when the same trigger phrase can refer to the EntityOfConcern being described, its description, its carrier, or a publication face under a different ReferencePlane.

  8. Reference and representation scheme when relevant. Especially when the ascription depends on a declared reference scheme, representation scheme, or viewpoint-specific decoding convention.

  9. Representation substrate when relevant. Especially when discussing parallels between preconceptual, latent-distributed, and symbolic-local treatments.

  10. Witness and evidence mode. Exemplars, probes, measurements, bundle members, tests, traces, or closed-loop performance carriers.

Normal-form discipline

A QualitySense SHALL declare one admissible default evaluative normal form and MAY declare additional admissible evaluative normal forms explicitly.

The normal forms in this section are endpoint or evaluative forms. They are not publication forms by themselves. Publication face, publication form, publication unit, carrier, rendering, export, and front-end questions remain with E.17, E.8, or the endpoint-governing publication pattern named by value.

QNF-1 - SignalPack. Use for QS.PhenomenalCharacter, QS.PreconceptualFit, and many cases of QS.LatentFit.

A conforming SignalPack contains:

  • exemplar or contrast set or probe set,
  • articulation notes,
  • source episode, carrier, and observer,
  • optional ordinal or thresholded summaries,
  • explicit warning that the signal is not yet a Characteristic unless an admissible proxy is later declared.

QNF-2 - Characteristic. Use only when the sense is truly one measurable characteristic on one declared scale. This uses A.17, A.18, and C.16 and inherits full scale legality.

QNF-3 - Bundle. Use when the sense is composite. Typical for QS.ExplanatoryMerit, many engineering quality families, and QS.ControlAdequacy.

A conforming bundle contains:

  • member heads,
  • whether each head is Characteristic, status, mechanism, scope, or test,
  • aggregation policy if any,
  • prohibition on hidden scalarisation.

Engineering note. For engineering -ility families, the preferred bundle endpoint is Q-Bundle (C.25), because it keeps Measures[CHR] distinct from ClaimScope and WorkScope and from Mechanisms and Status. Q-Bundle is a C.25-governed bundle endpoint rather than a fifth normal form beside SignalPack | Characteristic | Bundle | Objective. Do not use a free-floating bundle with hidden metric semantics.

QNF-4 - Objective. Use for QS.UseValue in selection, generation, or search contexts.

A conforming objective contains:

  • CG-frame or objective endpoint source reference,
  • admissible comparators,
  • acceptance or selector policy,
  • reference plane and window,
  • relation to novelty, diversity, and constraints.

Functional vs quality-family discipline

C.16.Q SHALL prevent the collapse of function or capability claims into quality-family claims.

  • A statement about what a system does uses A.6.F first when function-like wording hides the FPF kind named by value, relation, or claim, then the pattern governing the recovered capability, method, work, role, A.6.M module-interface, architecture, mathematical, evidence, assurance, gate, decision, or release claim whose primary EntityOfConcern, bearer, relation record, or characteristic-space construction is recovered.
  • A statement about how well, how safely, how robustly, or how maintainably it does so belongs to QS.EngineeringQualityFamily.
  • “Quality characteristic” and “functional characteristic” SHALL NOT be used as interchangeable labels.
  • In engineering contexts, -ility names are quality-family labels, not automatically Characteristics. They become admissible only as one explicit U.Characteristic or one explicit Bundle (preferably expressed through Q-Bundle when composite).
  • Cross-references are allowed; category collapse is not.

Bridge discipline across traditions

Whenever two different traditions are compared using the word quality, the repair SHALL publish an explicit bridge stance and loss note.

Allowed bridge stances:

  • localRename — near-synonymous within one Context.
  • operationalizes — one sense is turned into a proxy or measurable form.
  • partialAnalogy — structurally similar but not identical.
  • projection — one richer sense is projected into a narrower evaluative frame.
  • nonEquivalent — same word, no admissible bridge asserted.

Examples:

  • QS.PreconceptualFit - QS.LatentFit is usually partialAnalogy, not identity.
  • QS.PreconceptualFit - QS.PhenomenalCharacter is usually a progression-by-articulation relation, not identity.
  • QS.PreconceptualFit > engineering measures is usually operationalizes or projection, with loss notes.
  • QS.EngineeringQualityFamily > QS.UseValue is usually projection under a CG-frame.
  • QS.ExplanatoryMerit - QS.UseValue is not identity unless a Context explicitly defines such a projection.
  • Pirsig-style dynamic quality usually applies QS.PreconceptualFit (sometimes QS.LatentFit) only as localRename or partialAnalogy under a declared U.BoundedContext; it is not identity by label.
  • Pirsig-style static quality usually applies Characteristic or Bundle publication under some other declared sense; it is not identity with dynamic quality.
  • QS.ArchitecturalDescriptionFitness - QS.EngineeringQualityFamily is usually projection or nonEquivalent unless the Context explicitly states which heads of description-fitness are intended to proxy which system-side characteristics.

Change lexicon

A conforming quality-term repair publication SHALL narrate changes with a stable change lexicon aligned to A.6.P:

  • declareQualityTermAscription(...) — create a new explicit quality ascription record.
  • withdrawQualityTermAscription(...) — retire a prior record.
  • retargetBearer(...) — change the evaluated bearer tuple while keeping the same quality-term repair form.
  • reviseSense(...) — change the value in the qualitySense slot.
  • reArticulate(...) — change articulationMode while preserving sense family.
  • reProxy(...) — change proxy, probe, or operationalisation details.
  • reBundle(...) — change bundle members or aggregation policy.
  • reScale(...) — change characteristic scale or scale type.
  • reFrame(...) — change evaluation frame.
  • reView(...) — change evaluator and viewpoint.
  • rescope(...) — change U.Scope.
  • retime(...) — change Γ_time.
  • refreshWitnesses(...) — refresh evidence or witness bindings.
  • assignToGoverningPattern(...) — semantic move to a non-quality governing pattern; never edit in place silently.

A silent sense rewrite is a breaking semantic change. If the ascription ceases to mean “quality ascription” at all, use assignToGoverningPattern(...) rather than pretending the same record survived unchanged.

A.6.P rewrite note. retargetBearer(...) is the family-specific form of retargetParticipant(BearerSlot, …). reviseSense(...), reArticulate(...), reProxy(...), reBundle(...), reScale(...), reFrame(...), and reView(...) are family-specific refinements of reviseByValue(...) and SHALL preserve the A.6.5 distinction between ref retargeting and by-value edits.

A.6.B boundary classification template for quality-term repair

When a repaired quality statement becomes boundary-bearing, classify it explicitly:

  • LqualityTermAscription repair-form skeleton, QualitySense semantics, normal-form admissibility, and declared bridge stances;
  • A — admissibility conditions for using the ascription in selector, gating, and publication lanes (required qualifiers, witnesses, thresholds, qualification windows);
  • D — publication requirements (lexical firewall, mandatory rewrites, publication duties);
  • E — carrier-anchored evidence and work effects (measurements, traces, critique sheets, probe packs, selector logs).

Where this family is published as a reusable boundary publication, stable L-Q*, A-Q*, D-Q*, and E-Q* claim ids SHOULD be published (or the reused L/A/D/E-classified claim set should be cited by location), and paraphrase drift across quadrants SHALL be avoided. Do not let the bare word quality carry L/A/D/E claim by itself.

Lexical guardrails

In Tech and normative prose:

  • bare quality MUST NOT appear without immediate resolution to a QualitySense;

  • high-quality, low-quality, quality metric, quality score, quality requirement, model quality, architecture quality, and solution quality are red-flag tokens;

  • quality characteristic MAY appear only as:

    • a bridge label to an external standard or tradition, or
    • a family label immediately rewritten into one explicit U.Characteristic or Q-Bundle;
  • quality requirement or quality requirements MUST NOT remain bare noun phrases; the text SHALL rewrite them into explicit RequirementRole, U.Commitment, or U.PromiseContent.acceptanceSpec structures over one named U.Characteristic, one Q-Bundle head, or one explicit objective head;

  • architecture quality or architectural quality MUST NOT appear without an explicit bearer lane (EntityOfConcern being described, description, episteme or publication face, or carrier when the carrier itself is evaluated) and, when omission changes meaning, an explicit referencePlane;

  • in QD and NQD contexts, bare quality MUST default to QS.UseValue;

  • preconceptual uses MUST NOT be presented as if they were already Characteristics;

  • latent and distributed fit MUST NOT be presented as if it were automatically explanatory merit;

  • if the occurrence is primarily action-invitation talk, the text MUST NOT assign a QualitySense; it SHALL exit to A.6.A or another action-invitation governing pattern, with source-tradition affordance wording kept only as a quoted cue when needed;

  • scope words (applicability, envelope, generality, validity) MUST NOT be used as hidden substitutes for U.Scope, U.ClaimScope (G), or U.WorkScope;

  • quoted metalinguistic uses of the token quality are allowed, but SHALL be marked as token-under-discussion, not as a boundary-bearing term.

Progressive elaboration

C.16.Q permits monotone elaboration:

  1. Start by selecting a QualitySense and capturing rival candidates when ambiguity is live.
  2. Declare bearer, frame, viewpoint, and substrate.
  3. Choose an admissible normal form.
  4. Add exemplars, probes, characteristic heads, bundle members, and objective pins.
  5. Add bridges and loss notes if comparing traditions.
  6. If the repaired sentence is boundary-bearing, emit L/A/D/E hooks rather than letting “quality” carry them implicitly.
  7. Never move between sense families silently.

Archetypal Grounding

Tell

If a draft says quality, the draft has not yet named the evaluative family. A conforming rewrite publishes either one explicit endpoint-pattern-governed evaluative form or one explicit qualityTermAscription(...) transitional record with one QualitySense, one bearer tuple, one evaluation frame, one evaluator and viewpoint, one admissible normal form, explicit scope, time, and bridge qualifiers when they matter, and declared endpoint-governing pattern or explicit endpoint source relation.

Show (System lane)

Draft: “The model quality improved.”

Repair A — latent representation line qualityTermAscription( bearer = Model_v5, qualitySense = QS.LatentFit, evaluationFrame = ProbePack_PP2, evaluator = RepLearningReviewBoard, normalForm = SignalPack, Γ_time = Window_W5, witnesses = {ProbeSeparationRun_22, AliasRiskCard_9} )

Repair B — closed-loop control line qualityTermAscription( bearer = PolicyModelPair_PM5, qualitySense = QS.ControlAdequacy, evaluationFrame = Horizon_H × EnvClass_E, evaluator = ControlReviewBoard, viewpoint = ControlView_VP, normalForm = Bundle, scope = U.WorkScope(ControlDeploymentScope_7), Γ_time = RunWindow_RW, witnesses = {ClosedLoopTraceSet_41} )

Show (Episteme lane)

Draft: “Quality matters before definition.”

Repair A — preconceptual or phenomenological line qualityTermAscription( bearer = ProblemFramingEpisode_PF3, qualitySense = QS.PreconceptualFit, evaluationFrame = ExemplarPack_EP3, evaluator = ReviewerGroup_A, normalForm = SignalPack, representationSubstrate = embodied-kinesthetic, witnesses = {EpisodeNotes_3} )

Repair B — explanatory line qualityTermAscription( bearer = Explanation_N5, qualitySense = QS.ExplanatoryMerit, evaluationFrame = CriticismBundle_CB4, evaluator = TheoryReviewPanel, referencePlane = episteme, normalForm = Bundle, witnesses = {CritiqueSheet_14, CounterexampleSet_2} )

Show (Architecture description lane)

Draft: “The architecture quality improved.”

Repair A — quality of the system-side bearer qualityTermAscription( bearer = PaymentPlatform_v4, qualitySense = QS.EngineeringQualityFamily, evaluationFrame = Q_Bundle_AvailabilitySecurityEvolvability_3, evaluator = ArchitectureReviewBoard, viewpoint = TEVB_ArchitectureViewpointSet, referencePlane = world, normalForm = Bundle, witnesses = {AvailabilityReport_8, CouplingCheck_3, EvolvabilityNote_2} )

Repair B — quality of the architecture description qualityTermAscription( bearer = ArchitectureDescription_AD12, qualitySense = QS.ArchitecturalDescriptionFitness, evaluationFrame = ViewpointBundle_TEVB × DecisionQuestionSet_DQ7, evaluator = ArchitectureReviewBoard, viewpoint = TEVB_ArchitectureViewpointSet, referencePlane = episteme, normalForm = Bundle, witnesses = {CoverageMatrix_4, CorrespondenceCheck_7, ViewConsistencyNote_2} )

Show (QD or selector lane)

Draft: “Quality in our QD loop.”

Repair qualityTermAscription( bearer = Candidate_7, qualitySense = QS.UseValue, evaluationFrame = CG_Frame_9, evaluator = SelectorPolicy_P4, normalForm = Objective, Γ_time = SelectionWindow_SW, witnesses = {ObjectiveCard_9, AcceptanceSpec_4} )

Bias-Annotation

Lenses tested: Gov, Arch, Onto-Epist, Prag, Did. Scope: Universal for overloaded evaluative uses of quality in FPF-governed wording.

  • Gov bias: this pattern favors explicit evaluative publication and explicit L/A/D/E hooks, which improves auditability but adds drafting overhead.
  • Arch bias: this pattern prefers one stable ascription relation over free-form philosophical prose, which improves reuse but can feel rigid in exploratory notes.
  • Onto-Epist bias: this pattern refuses to collapse preconceptual, latent, explanatory, engineering, and selector senses into one concept; that increases honesty at the cost of extra lexical work.
  • Prag bias: this pattern defaults QD and NQD uses toward UseValue, which improves selector clarity but can feel narrower than colloquial “quality”.
  • Did bias: this pattern is intentionally teachable through repeated rewrites; the risk is over-formalizing early exploratory language.

Conformance Checklist (CC-C16Q)

A text or pattern conforms to C.16.Q iff:

  1. CC-C16Q-1 - Explicit endpoint classification and explicit sense. Every in-scope use of quality resolves either to one declared endpoint-pattern-governed evaluative form or to one declared qualityTermAscription(...) transitional record with one declared QualitySense and explicit endpoint classification.

  2. CC-C16Q-2 - Explicit bearer and arity. The evaluated bearer tuple is explicit.

  3. CC-C16Q-3 - Explicit frame. Evaluation frame is explicit and reviewable.

  4. CC-C16Q-4 - Evaluator and viewpoint are explicit. The ascription states who evaluates, from which viewpoint, or under which selector or observer policy.

  5. CC-C16Q-5 - Substrate and referencePlane are declared when relevant. Cross-talk between preconceptual, latent-distributed, symbolic-local, and ReferencePlane values world, concept, and episteme is not allowed without an explicit substrate declaration and, when live, referencePlane declaration when those distinctions are live.

  6. CC-C16Q-6 - Scope and Γ_time are explicit when omission changes meaning. If scope or time selection affects interpretation, the ascription declares U.Scope and, when live, Γ_time explicitly.

  7. CC-C16Q-7 - Admissible normal form. The ascription uses SignalPack, Characteristic, Bundle, or Objective as its endpoint or evaluative normal form, with the corresponding discipline observed.

  8. CC-C16Q-8 - No illegal scalarisation. Composite senses are not collapsed into one score without an explicit scoring method.

  9. CC-C16Q-9 - No silent sense rewrite. Any semantic change in the ascription uses the declared change lexicon; changing sense silently is forbidden.

  10. CC-C16Q-10 - QD default. In search, selection, or NQD contexts, quality resolves to QS.UseValue unless overridden explicitly.

  11. CC-C16Q-11 - Engineering family discipline. Engineering -ility uses resolve to one explicit U.Characteristic or one explicit Bundle (preferably published as Q-Bundle when composite); they are not left as free-floating adjectives.

  12. CC-C16Q-12 - Functional separation. Function or capability claims remain distinct from quality-family claims.

  13. CC-C16Q-13 - Bridge accountability. Cross-tradition parallels publish bridge stance and loss notes; cross-context or cross-plane reuse cites explicit Bridge ids and CL policy where applicable.

  14. CC-C16Q-14 - Boundary-claim hook when needed. If a repaired quality ascription is used for admissibility, commitments, publication, or adjudication, the downstream L/A/D/E hooks are explicit rather than carried implicitly by the word quality.

  15. CC-C16Q-15 - Lexical firewall. Bare quality is absent from Tech and normative prose except as quoted metalinguistic discussion.

  16. CC-C16Q-16 - qualityTermAscription repair-form skeleton is published. The family-specific transitional token qualityTermAscription resolves to a repair-form skeleton that publishes bearer position, evaluator and viewpoint slots, qualifier expectations, repair paths for bearer-kind mismatches, witness discipline, admissible change classes, and cross-context or cross-plane policy.

  17. CC-C16Q-17 - Candidate-Set Note is used when ambiguity is live. If sense selection, bearer facet, or A.7 lane or kind (EntityOfConcern being described, description, episteme or publication face, or carrier when the carrier itself is evaluated) is non-obvious, the text records a short Candidate-Set Note before the rewrite is treated as decision-bearing or publication-bearing.

  18. CC-C16Q-18 - Evaluator and viewpoint are not silently collapsed. When both an evaluator and a U.Viewpoint matter, they are represented as separate slots or fields.

  19. CC-C16Q-19 - Family-specific change verbs dock cleanly with A.6.P and A.6.5. retargetBearer(...) is used only for ref retargeting; sense, frame, bundle, scale, and view edits are narrated as explicit by-value revisions; silent retyping is forbidden.

Common Anti-Patterns and How to Avoid Them

Anti-patternSymptomWhy it failsHow to avoid or repair
Magic scalar qualityone number silently stands for several evaluative familiescollapses senses, carriers, and scoring legalitypublish one explicit QualitySense and an admissible normal form
Preconceptual-as-metricfelt fit is presented as if it were already a measured characteristicerases articulation stage and overstates evidencekeep it as SignalPack until an admissible proxy is declared
Engineering adjective driftreliable, maintainable, or high-quality appear with no explicit Characteristic or Q-Bundlehides measurement shape and scoperewrite to one U.Characteristic or one Q-Bundle
Selector ambiguityquality in QD and NQD is left undefinedbreaks comparability and selection semanticsdefault to QS.UseValue unless another objective head is declared explicitly
Model-quality collapselatent fit, explanatory merit, and control adequacy are merged under one phrasedestroys carrier and frame distinctionssplit into separate qualityTermAscription(...) records
Architecture-vs-description collapsearchitecture quality is used with no explicit bearer lanecollapses the system-side bearer into its description, carrier, or publication facepublish the bearer lane explicitly and select QS.EngineeringQualityFamily or QS.ArchitecturalDescriptionFitness
Action-invitation-as-qualityaction invitations are narrated as if they were evaluationswrong governing pattern; the rewrite hides action semantics instead of clarifying themstop the Q-rewrite and use assignToGoverningPattern(...) into A.6.A or another action-invitation governing pattern; keep source-tradition affordance wording only as a quoted cue
Bridge-by-labeltwo traditions both use quality, so the draft implies they are the samecreates false identity and silent losspublish one bridge stance with loss notes

Consequences

Benefits. This pattern makes evaluative language auditable across phenomenology, engineering, and search and selection contexts. It also makes subsequent wording repair easier because the repair is carried by one explicit quality-term repair form plus endpoint governing-pattern assignments rather than by ad hoc prose rules.

Trade-offs and mitigations. The pattern adds drafting overhead and can feel heavy in exploratory notes. Mitigation: allow bare quality in Plain commentary during exploration, but require repair before the term enters Tech and normative, boundary, selector, or assurance use.

Rationale

C.16.Q makes one strategic move:

The word “quality” is not treated as one concept. It is treated as a family of evaluative ascriptions whose members differ by substrate, articulation mode, bearer, frame, and admissible publication form.

This lets FPF discuss:

  • Pirsig-like preconceptual fit,
  • representation-learning and neuro-symbolic latent fit,
  • explanation quality in criticism-driven inquiry,
  • architecture-description fitness under a viewpoint,
  • engineering quality families,
  • use-value in open-ended evolution,
  • control adequacy in action loops,

without forcing them into one false universal scalar.

It also makes the distributed-vs-local issue explicit:

  • some senses originate in embodied or latent-distributed substrates,
  • some are only publishable as symbolic-local CHR, bundle, and objective forms,
  • and some require an explicit projection from the first into the second.

It also makes the bearer and plane issue explicit:

  • some uses evaluate the EntityOfConcern being described,
  • some evaluate its description under a viewpoint,
  • some evaluate a carrier or publication face,
  • and those uses must not be collapsed without an explicit bearer lane and, when needed, a declared referencePlane.

That is exactly where semantic drift usually starts; C.16.Q turns that drift into an auditable design choice.

SoTA-Echoing

Evidence binding note. If your Context maintains a SoTA Synthesis Pack for evaluative language, architecture-quality vocabularies, selector and objective semantics, world-model evaluation, or embodied and preconceptual articulation, this section SHALL cite its ClaimSheet IDs, CorpusLedger entries, and BridgeMatrix rows and keep the adoption statuses below consistent with those IDs. Otherwise, use the table below as the current source-use and source-currentness record for this pattern revision, not as a generic seed list.

This section follows the required structure: claim > practice > source use and currentness > source > alignment > adoption status. C.16.Q aligns with contemporary practice across architecture-description standards, software-quality standards, evolutionary architecture, QD search, active-inference and world-model research, phenomenology and TAE, source-tradition affordance work, and philosophy of explanation, while making one explicit FPF move that those traditions usually leave implicit: the overloaded token quality is repaired into explicit evaluative endpoint forms, with qualityTermAscription(...) available as a declared transitional record carrying QualitySense, bearer, frame, admissible normal form, and bridge disposition while governing-pattern assignment remains open.

Source-use convention. Current-best source use means the row is used as the best-known current line for the narrow effect named in the alignment cell. Current-standard and reference-only use means an official standard supplies a useful distinction but does not by itself solve C.16.Q's quality-term restoration question. Current-practice reference use means the source family records a widely used current practice that C.16.Q adapts. Lineage and local-gloss material means the row helps recognition or terminology only. Rejected import states what C.16.Q refuses to import as FPF ontology.

Claim (C.16.Q need)SoTA practice (post-2015)Source use and currentnessPrimary source (post-2015 unless marked lineage)Alignment with C.16.QAdoption status
Description-side quality must not be confused with system-side quality.Contemporary architecture-description practice distinguishes the system or entity that fills the architecture-description EntityOfConcern from the architecture description and structures discourse through viewpoints, concerns, and model kinds.Current-standard and reference-only use. The standard is a current architecture-description reference for entity, description, and viewpoint separation; it is not treated as a full quality-term repair method.ISO/IEC/IEEE 42010:2022, Software, systems and enterprise - Architecture description.C.16.Q mirrors this split by separating QS.ArchitecturalDescriptionFitness from system-side QS.EngineeringQualityFamily, and by requiring an explicit bearer lane plus referencePlane when phrases such as architecture quality appear.Adopt and adapt. Adopt the EntityOfConcern-vs-description split; adapt by making lexical repair and bearer-lane publication mandatory. Reject importing the standard's conceptual model as FPF ontology.
Engineering “quality” should resolve to explicit heads, not free adjectives.Contemporary systems/software quality practice works through named characteristics and subcharacteristics used to specify, measure, and evaluate quality, and to define acceptance criteria and requirements.Current-standard and reference-only use. The standard supplies a current quality-model reference for explicit heads; C.16.Q still requires FPF U.Characteristic, Q-Bundle, objective, or endpoint governance named by value.ISO/IEC 25010:2023, Systems and software engineering - Systems and software Quality Requirements and Evaluation (SQuaRE) - Product quality model.C.16.Q adopts the explicit-head discipline by assigning engineering uses either to one admissible Characteristic or to one explicit Bundle or Q-Bundle, and by refusing to leave quality requirement(s) as bare noun phrases.Adopt and adapt. Adopt explicit quality heads; adapt by treating composite families as bundles rather than pretending that every family label is already a scalar. Reject ISO characteristic lists as automatically sufficient FPF evaluation spaces.
Evolutionary architecture needs continuously checked heads rather than generic “quality”.Evolutionary-architecture practice uses fitness functions to drive, manage, and automate change across architectural concerns, and ties structure to the capacity for change.Current-practice reference use. The row records concern-specific fitness heads, not a universal definition of quality.Ford, Parsons, Kua, Sadalage (2022), Building Evolutionary Architectures, 2nd ed.C.16.Q aligns by treating engineering quality families and change-enabling concerns as explicit evaluative heads under declared frames, not as one rhetorical “high quality” scalar.Adopt and adapt. Adopt the fitness-function discipline; adapt by keeping QS.EngineeringQualityFamily, QS.ControlAdequacy, and QS.UseValue distinct and by forbidding function and quality-family collapse.
In QD, NQD, or selector settings, “quality” is an objective head under a declared search frame.Modern QD work is explicit that search returns a collection of solutions that are high with respect to an objective and diverse with respect to declared measures and behavior descriptors; the archive is not a synonym for one hidden global score.Current-best source use for selector-quality semantics in this pattern revision. The row governs the QS.UseValue default, objective form, and scalar-collapse boundary; it does not define all QD and NQD practice.Fontaine, Togelius, Nikolaidis, Hoover (2020), Covariance matrix adaptation for the rapid illumination of behavior space; Fontaine & Nikolaidis (2023), Covariance Matrix Adaptation MAP-Annealing.C.16.Q therefore defaults selector-context quality to QS.UseValue in Objective form, while keeping novelty, diversity, and constraints explicit and separate.Adopt and adapt. Adopt objective-explicit selector semantics; adapt by making the Q-head a named QualitySense and by rejecting unexplained scalar collapse.
Latent fit, world-model adequacy, and closed-loop control must not collapse into one phrase.Contemporary world-model and active-inference work evaluates generative and predictive models, planning, action, uncertainty reduction, and intrinsic objectives through explicit factor sets rather than through one undifferentiated “model quality”.Current research and practice source use. The row is used for multi-factor separation of latent, control, and value claims; it is not imported as an active-inference ontology for FPF.Parr, Pezzulo, Friston (2022), Active Inference: The Free Energy Principle in Mind, Brain, and Behavior; LeCun (2022), A Path Towards Autonomous Machine Intelligence; Friston et al. (2024), Designing Ecosystems of Intelligence from First Principles.C.16.Q adapts this by separating QS.LatentFit, QS.ControlAdequacy, and QS.UseValue, and by requiring explicit evaluation frames and witnesses for each ascription.Adapt. Adapt multi-factor evaluation into one repair discipline; reject the colloquial habit of letting model quality silently cover representation, prediction, control, and utility at once.
Preconceptual felt fit should remain pre-metric until admissibly articulated.TAE-style practice treats felt aspects of thinking as something that can be clarified progressively with tentative language that stays responsive to lived experience and widens conceptual structure.Current-practice reference use with lineage use. The row is used for progressive articulation and the SignalPack boundary; it is not current-best source use for metric construction.Schoeller (2022), work on Thinking at the Edge and embodied critical thinking.C.16.Q uses this as a practice reason for QS.PreconceptualFit in SignalPack form, with exemplars, articulation notes, and an explicit ban on premature promotion to Characteristic.Adopt and adapt. Adopt progressive articulation from felt sense to wording; adapt by giving that articulation an admissible publication form and explicit witness discipline.
Some trigger uses of “quality” are really about action invitation, not evaluative characterization.Recent source-tradition affordance work treats affordances as perceptually available action possibilities, and in some accounts as invitations or action-guiding structures that position the agent to act.Current research cue and boundary cue. The row is used only to recognize action-invitation cases and send them to A.6.A or another action-invitation governing pattern.Hansen (2024), Perceiving affordances and the problem of visually indiscernible kinds; Jorba & Lopez-Silva (2024), Mind in action: expanding the concept of affordance.C.16.Q uses this only as an action-invitation cue: when the trigger use is primarily action-invitation talk, the admissible FPF move is assignToGoverningPattern(A.6.A, action-invitation claim) or another action-invitation governing-pattern assignment, rather than forcing a QualitySense or qualityTermAscription(...).Adopt and adapt. Adopt the action-guiding insight; adapt by making the governing-pattern assignment named by value and auditable. Reject importing affordance as a quality sense or FPF governing-pattern name.
Explanation quality is an epistemic merit family, not engineering quality or selector utility.Contemporary philosophy of explanation treats understanding, explanatory value, and the cognitive significance of explanations as a distinct epistemic topic.Lineage and reference source use for a local evaluative family. The row is used for the QS.ExplanatoryMerit distinction and anti-scalarization boundary; it is not presented as current-best source use for all explanation evaluation.Khalifa (2017), Understanding, Explanation, and Scientific Knowledge.C.16.Q therefore treats explanatory evaluation as QS.ExplanatoryMerit, typically Bundle-shaped, and rejects silent collapse into engineering -ilities, bare usefulness, or one unexplained “high-quality explanation” score.Adapt. Adapt explanatory-value practice into a slot-explicit evaluative family; reject cross-family scalarization by label.

Short alignment notes.

Architecture-description practice. ISO 42010 is a current-standard reference for not collapsing the selected system or other entity under description into its description. C.16.Q adopts that guardrail and adds lexical discipline: a draft may not say architecture quality without publishing which bearer lane is under evaluation and whether the evaluation is description-side or system-side.

Engineering quality practice. ISO 25010 gives a mainstream current-standard reason not to leave quality as a free noun: contemporary quality work is organized around named characteristics and subcharacteristics that are specified, measured, and evaluated. C.16.Q adopts that explicit-head discipline, but adapts it by assigning composite cases to Bundle or Q-Bundle and by treating quality requirement(s) as requirements over explicit heads rather than as self-standing nouns.

Evolutionary-architecture practice. Fitness functions treat architecture-relevant concerns as continuously monitored heads tied to change and governance, not as one mystical scalar. C.16.Q adopts that operational spirit, but adapts it by keeping engineering-family evaluation, control adequacy, and selector value distinct and by forbidding function and quality-family collapse.

QD and NQD practice. Modern QD work is explicit that search returns a collection of solutions that are high with respect to an objective and diverse with respect to declared measures. C.16.Q therefore adopts the default rewrite of selector-context quality to QS.UseValue in Objective form and rejects any rewrite that silently blends novelty, diversity, constraints, and utility into an unexplained scalar.

World-model and active-inference practice. Contemporary world-model and active-inference work uses generative and predictive models for perception, planning, learning, and action, which makes evaluation inherently multi-factor: latent representation quality, model evidence or predictive adequacy, policy adequacy, and task and objective value are not one thing. C.16.Q adapts this by separating QS.LatentFit, QS.ControlAdequacy, and QS.UseValue, and by requiring explicit evaluation frames and witnesses for each ascription.

Phenomenology and TAE practice. TAE-style work treats a felt sense as something that can be clarified and worded progressively, with tentative language that stays responsive to lived experience. C.16.Q adopts this progressive-articulation stance by giving QS.PreconceptualFit an admissible SignalPack form and by keeping QS.PhenomenalCharacter separately available when the experienced character itself, not action-guiding fit, is the topic.

Action-invitation boundary. Recent source-tradition affordance work emphasizes that affordances can be perceptually experienced as action possibilities that position or invite the agent to act. C.16.Q uses that insight only as a governing-pattern boundary cue: when the trigger use of quality is really action-invitation talk, the text should use assignToGoverningPattern(...) into A.6.A or another action-invitation governing pattern rather than forcing a QualitySense or qualityTermAscription(...).

Explanation practice. Contemporary philosophy of explanation keeps explanatory understanding and epistemic value distinct from engineering performance or utility maximization. C.16.Q adapts this by publishing QS.ExplanatoryMerit as its own evaluative family, typically Bundle-shaped, and by rejecting hidden scalarization into “high-quality explanation” without explicit heads.

Scale legality. The rows above do not license free arithmetic on the word quality. Whenever C.16.Q operationalizes engineering heads, selector objectives, or control adequacy numerically, it SHALL bind the comparison to an explicit ComparatorSet, CG-Spec, or declared aggregation policy and SHALL reject covert scalarization of bundles, explanations, or preconceptual signals.

Cross-Context and plane note. This section states alignment and non-identity only; it does not assert silent sameness across U.BoundedContexts or across planes. Any actual reuse of a quality vocabulary, selector head, or viewpoint-bound quality family across Contexts and planes SHALL publish BridgeId, CL, and loss-note policy and, where planes differ, the relevant Φ(CL) and Φ_plane policy ids.

Historical-lineage note. Earlier touchstones such as Pirsig, Popper, and Deutsch remain useful as lineage and local-gloss resources, but C.16.Q does not use them as formal SoTA anchors here because E.8 requires post-2015 primary sources for Architectural patterns unless the row is explicitly lineage or local-gloss material.

This SoTA alignment backs the pattern’s central move: quality is not one universal evaluative noun. In contemporary practice, the relevant work is already distributed across explicit characteristics, objectives, viewpoints, world-model criteria, explanatory virtues, felt signals, and action invitations; C.16.Q makes that distribution first-class and auditable.

Refresh and reopen conditions

Reopen or narrow C.16.Q when any of these current-pattern-language conditions becomes live:

  • a recurring quality or evaluative family appears that is not covered by the current QualitySense starter set and cannot be treated as an existing endpoint-pattern-governed form;
  • a new endpoint governing pattern can govern a class of uses that currently require transitional qualityTermAscription(...);
  • A.7, C.2.P, C.2.1, or bridge-policy vocabulary changes the admissible lane, EntityOfConcern, publication-face, carrier, or ReferencePlane wording used by this pattern;
  • current best-known practice changes a QualitySense, normal-form boundary, action-invitation boundary, scale-legality boundary, or source-use and currentness row used in C.16.Q:11;
  • README, ToC, E.11, retrieval, or local Problem-frame first-entry cues change for quality, characteristic, action-invitation, architecture-description, selector, or explanation wording;
  • subject patterns begin copying quality trigger lists, QualitySense rows, or transitional repair-form slots that belong in this first-stage quality-term precision-restoration pattern.

The refresh action is to remove, narrow, or redirect the affected row or exit. Do not preserve a stale QualitySense, endpoint exit, lane wording, or source row as historical compatibility text.

Relations

  • Lives in: C.16 characterization pattern nest as the quality-term realization of E.10.ARCH and C.16.P.
  • Builds on: E.10.ARCH for shared wording-use restoration architecture; C.16.P for characteristic and scale exits; A.2.6 for explicit scope and Γ_time; A.17, A.18, and C.16 for admissible measurable characteristics; C.25 for engineering Q-Bundle publication.
  • Coordinates with: A.6.P when the recovered content is relation construction rather than quality-term or evaluative characterization; A.6.A or another action-invitation governing pattern when the trigger invites action rather than evaluates a bearer; C.2.2a, A.16, A.16.1, A.16.2, and B.4.1 for language-state chart positions, admissible moves, early cue handling, responsibility handoff, and admissible retreat or reopen; use A.16.0 only when lineage, branch, loss, or handoff history itself must be published as an explicit trajectory account; B.5.2.0 for prompt-shaped continuations that are not yet stable endpoint publication; C.2.LS, C.2.4, C.2.5, C.2.6, and C.2.7 for language-state facet governance; C.17, C.18, and C.19 for QS.UseValue, novelty and diversity discipline, and selector policy; E.17.0 and E.17.2 for architecture-description and viewpoint bundles; F.9 and F.9.1 for Bridges, CL, and bridge-stance annotations; A.6.B when repaired ascriptions become boundary-bearing.
  • Publishes vocabulary through: E.10, F.17, and F.18 when the qualityTermAscription repair-form skeleton, the QualitySense starter set, and the red-flag rewrites become stable shared vocabulary.

Language-space refactor note

This pattern uses endpoint-first assignment rather than universal governance of all quality language. qualityTermAscription(...) remains useful as a transitional repair form, but it is not the required resting place or durable local record kind for every repaired use of quality.

Explicit endpoint selection

Admissible endpoints after repair include:

  • a single Characteristic,
  • a Q-Bundle,
  • an E.21 PatternQualityQBundle, when the bearer is one FPF pattern version and the evaluative claim asks whether the pattern is good enough for a declared reader, use, and scope. In this case, do not assign the claim to general C.25 unless the bearer is a non-pattern engineering quality family,
  • an Objective,
  • an explanatory-merit bundle,
  • a selector-value endpoint.

Bare quality in Tech prose should therefore be banned or rewritten immediately under an explicit endpoint-governing FPF pattern or explicit endpoint source reference. If that endpoint source is already known, qualityTermAscription(...) need not remain in the published normal form.

Endpoint-governance boundary

This pattern does not govern articulation-state characteristics, bridge stances, or representation factors. Those remain governed by A.16, C.2.LS, C.2.4, C.2.5, C.2.6, C.2.7, and F.9.1.

C.16.Q:End

Characterising Generative Novelty & Value (Creativity‑CHR)

Status. Mechanism specification (CHR) — normative where stated. Depends on. A‑kernel (A.1A.15), CHR‑CAL (C.7), MM‑CHR measurement infrastructure (C.16), KD‑CAL and Sys‑CAL for carriers and holons, Decsn‑CAL (utility), Norm‑CAL (constraints/ethics). Coordinates with. B.5.2.1 NQD (abductive generator) for search instrumentation, Agency-CHR (C.9) for agential capacity, B-cluster trust/assurance (B.3), Canonical Evolution Loop (B.4), Role Assignment & Enactment Cycle (Six-Step) (F.6) and Naming Discipline for U.Types & Role Names (F.5). Guard‑rails. Obeys E‑cluster authoring rules (Notational Independence; DevOps Lexical Firewall; Unidirectional Dependency).

What this pattern provides (exports):

This pattern exports Characteristics and measurement templates only. It does not export any Γ_* operators, retained-set composition rules, Front/Archive/Shortlist heads, or selection/scalarization policies; those live in C.18 NQD-CAL, C.19 E/E-LOG, and G.5 (or Decsn-CAL for decision lenses). A Context publishes the measurement space and admissible policies; later choice using that space is attributed to a declared DecisionSubject at explicit DecisionSubjectGranularity under a named lens.

  • U.CreativitySpace — a CharacteristicSpace (CHR) with named Characteristics and scale metadata for evaluating creative work/outcomes inside a U.BoundedContext.
  • U.CreativityProfile — a vector of coordinates in U.CreativitySpace attached by a U.Evaluation to a specific Outcome (usually an U.Episteme produced by U.Work).
  • Core Characteristics (kernel nucleus; Context‑extensible):
  1. Novelty@context — distance from a ReferenceBase in the current Context/time window; ∈ [0, 1].
  2. Use‑Value (alias: ValueGain) — measured or predicted improvement against a declared objective; interval/ratio scale per Context.
  3. Surprise — negative log‑likelihood under a GenerativePrior; bits or nats.
  4. ConstraintFit — degree of must‑constraint satisfaction (Norm‑CAL / Service acceptance); ∈ [0, 1].
  5. Diversity_P (declared retained-set / portfolio-level) — coverage/dispersion (set-level). Illumination is a report-metric over Diversity_P (coverage/QD-score summaries). It is report-only and never part of the primary dominance test.
  6. AttributionIntegrity — provenance/licensing discipline for lawful, transparent recombination; ∈ [0, 1].
  7. FamilyCoverage — (count, polarity ↑, scope=declared retained set or portfolio, unit=families, provenance: F1‑Card)
  8. MinInterFamilyDistance — (ratio [0,1] or metric units, polarity ↑, scope=declared retained set or portfolio, DistanceDef@F1‑Card)
  9. AliasRisk — (ratio [0,1], polarity ↓, diagnostic; drop if dSig ≥3/5 characteristics collide)
  10. U.DomainDiversitySignature (dSig) — 5‑tuple over discrete characteristics [Sector, Function, Archetype, Regime, MetricFamily] attached to each U.BoundedContext. Used for Near‑Duplicate diagnostics and AliasRisk. Policy: flag as Near‑Duplicate when ≥3 characteristics match; see F.1 invariants and SCR‑F1‑S08..S09.
  11. Note (AliasRisk binding). AliasRisk MAY be computed using dSig collision diagnostics; a Context MUST declare the collision rule and policy id in DescriptorMap provenance when AliasRisk is reported.
  • Supporting types (linking points):

    • U.ReferenceBase — the domain‑local corpus (by Context & time window) used to compute Novelty@context.
    • U.SimilarityKernel — a declared similarity metric class for the Context (text/image/design/code/etc.), with invariance notes.
    • U.GenerativePrior — a predictive model over the Context’s artifacts/behaviours used to compute Surprise.
    • U.CreativeEvaluation — a specialisation of U.Evaluation that yields a U.CreativityProfile and the Evidence Graph Ref.
    • EffortCost (advisory) — resource outlay to achieve the outcome; from WorkLedger (Resrc‑CAL). (For normalization and planning; not itself “creativity.”)
  • Operators (first tranche): composeProfiles (set → declared retained-set profile), dominates (partial order in space), frontier (Pareto set), normaliseByEffort. (Formal laws introduced in Quarter 2.)

  • Relations (informative; not exported): dominance relation (partial order in the space), frontier predicate (Pareto set), retained-set composition view. C.17 exports no operators and does not mint public set-result family heads; these are mathematical relations only.

Scope note. This pattern does not define who is “a creative person.” It characterises creative outcomes and episodes as observed in Work and expressed as Epistemes. Agency (capacity to originate) is measured in Agency‑CHR (C.9); here we measure what came out and how it scores against stated goals and references. A Context publishes the measurement space and admissible policies; later choice is attributed to a declared DecisionSubject at explicit DecisionSubjectGranularity, using a named lens within that space. CHR exports no Γ‑operators and no team workflow rules.

Motivation & Intent (manager’s read‑first)

Problem we solve. Teams talk past each other about “creativity”: some prize novelty, others business value, others originality or risk‑managed invention. Without a shared, context‑local measurement space, reviews derail, portfolios drift, and safety constraints are waived ad‑hoc.

Intent. Provide a small, universal measurement kit that turns “this is creative” into checkable, context‑local statements — grounded in evidence, aligned to objectives, and composable from individuals to portfolios.

Manager’s one‑screen summary (what you can do with it):

  1. Score a design/code/theory change on Novelty–Value–Surprise–ConstraintFit with declared references and models.
  2. Compare options in a Pareto sense (no single magic score forced).
  3. Consider constraints as a coordinate in the space; compare options on frontiers while keeping Context for high‑novelty options
  4. Track the declared retained set’s Diversity_P to avoid local maxima and groupthink.
  5. Defend decisions with an auditable CreativeEvaluation that cites what was new relative to which base, how value was measured, and why this counts here.

Forces

ForceTension we must resolve
Universality vs. domain detailOne kit must serve hardware design, software, policy, and science, yet let each Context pick similarity kernels, priors, and value models.
Invention vs. constraintCreative leaps are valuable; safety, ethics, and acceptance are non‑negotiable.
Local truth vs. Cross‑context reuseMeaning is context‑local (A.1.1); yet we need Bridges to compare across organisations/disciplines.
Single score vs. frontierManagement wants a number; reality is multi‑objective.
Randomness vs. intentionRandom noise looks “novel” yet useless; planned recombination can be highly creative.

Design answer. A context‑local CreativitySpace with a small set of characteristics, each with clear measurement templates and Evidence Graph Ref; composition uses frontiers and partial orders, not forced scalarisation.

Solution Overview — The context‑local CreativitySpace

Idea. Creativity is not a type; it is a profile measured on an outcome (episteme) or episode (set of works) inside a bounded context. The context supplies the ReferenceBase, SimilarityKernel, GenerativePrior, objective function(s), and acceptance constraints.

Objects in play (A‑kernel alignment):

  • A system (person, team, service) performs U.Work under a role (A.2).
  • That work yields a carrier (doc/model/design/code), i.e., an U.Episteme.
  • We apply a U.CreativeEvaluation to that episteme (and linked work) to produce a U.CreativityProfile with evidence.

Cre­ativitySpace (first‑class CHR): U.CreativitySpace(Context) := 〈Novelty@context, ValueGain, Surprise, ConstraintFit, Diversity_P, AttributionIntegrity, EffortCost?〉 with scale/unit metadata from MM‑CHR (C.16), and Context‑specific measurement methods bound by MethodDescription.

DesignRunTag split (A.4):

  • Design‑time: score concepts or specs against surrogate value models and priors; record assumptions (USM scopes; A.2.6).
  • Run‑time: recompute ValueGain and ConstraintFit from Work evidence (service acceptance, KPIs) and refresh Surprise if priors update.

Vocabulary (CHR terms & D‑stubs)

Names are context‑local; below are kernel terms. Roles like “Designer/Reviewer” are contextual (A.2). Documents don’t act (A.7/A.12); they are evaluated.

  1. U.ReferenceBase (D). A curated, versioned set of artifacts (epistemes) and/or behaviours that define “what exists already” in this Context and time window. Conformance (RB‑1): must declare inclusion criteria, time span (TimeWindow), and coverage notes.

  2. U.SimilarityKernel (D). A declared metric family with invariances (e.g., text: cosine over embeddings, image: LPIPS, code: AST graph edit). Conformance (SK‑1): must cite MethodDescription and test corpus; state limits.

  3. U.GenerativePrior (D). A model that yields likelihood of artifacts given the Context’s history (n‑gram/LM, design grammar, trend model). Conformance (GP‑1): must publish training slice, fit method, perplexity/fit metrics, and refresh policy.

  4. U.CreativeOutcome (D). Any U.Episteme put forward for creative evaluation (e.g., new design, algorithm, spec, policy draft). Note. If the outcome is a system change without a single carrier, attach the evaluation to a bundle (set) of carriers referenced from Work.

  5. U.CreativeEvaluation (D). A U.Evaluation that outputs a U.CreativityProfile and anchors to ReferenceBase, Kernel/Prior, objective(s), acceptance tests, and Work evidence.

  6. U.CreativityProfile (D). The coordinate tuple in U.CreativitySpace with provenance to the above inputs and USM scopes. Conformance (CP‑1): profile must include scales/units, scopes, confidence bands (B.3), and the edition of space definitions.

The Core Characteristics (kernel nucleus)

Each characteristic is specified per MM‑CHR (C.16) with: name, intent, carrier, polarity, scale type, measurement template, evidence, scope (USM), and didactic cues. Context profiles MAY add characteristics; kernel characteristics MAY NOT be removed without a Bridge.

Novelty@context — “How unlike the known set is this?”

  • Intent. Quantify distinctness of the outcome relative to U.ReferenceBase (global or targeted slice).

  • Carrier. U.Episteme (the outcome).

  • Polarity. Higher is “more novel.”

  • Scale. [0, 1]; ratio (0 = duplicate under kernel; 1 = maximally distant).

  • Measurement template (normative pattern):

    1. Declare ReferenceBase B and TimeWindow window.
    2. Declare SimilarityKernel σ and its invariances.
    3. Compute Novelty@context := 1 − max_{b∈B} sim_σ(outcome, b), or a robust variant (top‑k mean).
    4. Publish sensitivity note (how results shift with kernel/B).
  • Evidence. Kernel/version id; top‑k neighbours with distances; ablation on invariances.

  • Scope hooks (USM). B must be a declared slice; Cross‑context use needs a Bridge with CL and loss notes.

  • Didactic cues.

    • Not “randomness.” Noise has high novelty, low value.
    • Local, not global. Novelty is to this Context now, not timeless originality.

Use‑Value (alias: ValueGain) — “What good did this add under our objective?”

  • Intent. Quantify benefit vs a baseline objective (Decsn‑CAL utility, Service acceptance, KPI).

  • Carrier. Outcome (episteme) with Work evidence.

  • Polarity. Higher is better.

  • Scale. Interval/ratio, unit declared by the Context (e.g., ΔSNR, % defects, profit/period).

  • Measurement templates (pick one):

    • Measured: ValueGain := metric_after − metric_before (declare counterfactual method).

    • Predicted: E[ValueGain | model] with error bars; update post‑run.

    • Evidence. Declared objective/criterion; measurements or credible predictions; counterfactual method (A/B, back‑test, causal inference).

    • Scope. State the context window used for the objective; claims outside that window are informative only.

    • Didactic cues.

    • Value is relative to stated objective; if the objective is wrong, the value reflects it.

    • Keep counterfactual discipline; otherwise “gain” is storytelling.

Surprise — “How improbable under our learned world?”

  • Intent. Capture unexpectedness given U.GenerativePrior.

  • Carrier. Outcome.

  • Polarity. Higher surprise = more unexpected.

  • Scale. bits or nats: Surprise := −log p_prior(outcome).

  • Measurement template:

    1. Declare GenerativePrior (training slice, model class).
    2. Encode outcome for the prior; compute likelihood proxy.
    3. Publish calibration curve (reliability diagram / PIT histogram).
  • Evidence. Model cards; fit metrics; OOD diagnostics; refresh policy.

  • Scope. Training slice declared as ContextSlice; Bridges penalise R (trust), not the value itself (A.2.6).

  • Didactic cues.

    • Novelty vs Surprise: high novelty under one kernel may be low surprise under a broad prior; publish both.

ConstraintFit — “Did it honour the non‑negotiables?”

  • Intent. Ensure mandatory constraints (safety, ethics, standards, SLOs) are satisfied.
  • Carrier. Outcome + Work evidence.
  • Polarity. Higher is better (1 = all mandatory satisfied).
  • Scale. [0, 1], ratio or pass/fail.
  • Measurement template: declare set C_must (Norm‑CAL / Service acceptance), compute ConstraintFit := |{c∈C_must : pass(c)}| / |C_must|; optionally weight per criticality.
  • Evidence. Checklists, tests, audits; Who/Role performed the SpeechActs (approvals/waivers).
  • Scope. Constraints are context‑local; Cross‑context requires Bridge; waivers are SpeechAct Work with RSG gates (A.2.5).
  • Interpretation note. Low ConstraintFit signals tension with declared must‑constraints and warrants reframing or redesign; this pattern does not prescribe go/no‑go rules.

Diversity_P (declared retained-set / portfolio-level) — “Are we exploring the space?”

  • Intent. At the set level, avoid myopic exploitation; promote coverage.
  • Carrier. A set of outcomes.
  • Polarity. Higher means broader coverage (not “better” per se).
  • Scale. Set‑functional; Context defines metric (e.g., average pairwise distance, k‑cover over features).
  • Template. Declare kernel and covering policy; compute score and coverage map (illumination); relate to USM ClaimScopes.
  • Alignment note. The illumination/coverage view corresponds to IlluminationScore used by B.5.2.1 NQD‑Generate; no separate characteristic is introduced here—measure it as part of Diversity_P.
  • Evidence. Distance matrix/cover plots; sensitivity to kernel.
  • Didactic cue. Use Diversity_P to shape portfolios, not to pick single winners.
  • Marginal gain (for generators) — normative. For a candidate h and current set S, ΔDiversity_P(h | S) := Diversity_P(S ∪ {h}) − Diversity_P(S). Contexts using NQD SHALL compute D as this marginal and publish the Diversity_P definition alongside the CharacteristicSpace/kernel and TimeWindow.

Heterogeneity Characterisation

  • FamilyCoverage (polarity ↑) — count of distinct domain‑families covered by a declared retained set, portfolio, or triad; unit: families; window: declared.
  • MinInterFamilyDistance (polarity ↑) — min distance between selected families in DescriptorMap for that declared retained set, portfolio, or triad; unit: per DistanceDef; window: declared.
  • AliasRisk (polarity ↓) — collinearity/near‑duplicate risk indicator for contextual signatures; unit: score (0–1) with policy id.

Lexical special case (F.18 naming). For lexical CandidateSets used by Name Cards (F.18), Diversity_P SHALL be computed over head-term families, not over raw strings. Variants that share the same lexical head (e.g., “Reference plane”, “Plane of reference”, “Planar reference”) MUST be treated as one family for coverage and distance; only candidates with distinct heads contribute to lexical Diversity_P. This aligns lexical use of Diversity_P with FamilyCoverage / AliasRisk and prevents inflating diversity by near-synonyms of a single head.

AttributionIntegrity — “Did we credit sources and licences correctly?”

  • Intent. Discourage “novelty theft”; ensure recombination is lawful and transparent.
  • Carrier. Outcome + provenance graph.
  • Polarity. Higher is better.
  • Scale. [0, 1]; fraction of required attributions/licence duties satisfied.
  • Template. Trace graph coverage against Context policy; licence constraints as Norm‑CAL rules.
  • Evidence. PROV‑style links; licence scans; acknowledgements.
  • Didactic cue. High AttributionIntegrity signals lawful and transparent recombination; low values indicate unacceptable practice in most Contexts.
  • Default role. AttributionIntegrity is measurable but non‑dominant. It MAY serve as a policy filter/tie‑break (C.19). If certain attribution duties are must‑constraints, they belong to ConstraintFit (Norm‑CAL) and act as eligibility gates. It is not part of the default dominance set.
  • Dominance & gating note (normative). AttributionIntegrity is a measurable Characteristic; it is not in the default dominance set. Contexts MAY use it as a filter or tie‑break via policy (C.19). Legal/ethical must‑fit checks live in ConstraintFit (Norm‑CAL); failing those blocks eligibility before dominance.

EffortCost (advisory) — “What did it take?”

  • Intent. Normalise comparisons by cost; not part of “creativity” per se.
  • Carrier. WorkLedger.
  • Polarity. Lower is better when used as denominator.
  • Scale. Resource units (hours, energy, $).
  • Template. Sum cost categories over Work that produced the outcome.
  • Evidence. Time/resource logs; BOM deltas.
  • Didactic cue. Use CreativityPerCost := f(Novelty@context, ValueGain, Surprise)/EffortCost for operations planning, not for excellence awards.

Conformance Checklist (first tranche)

IDRequirement (normative)Purpose / audit hint
CC‑CR‑1 (context‑locality)Every CreativityProfile MUST name the U.BoundedContext and the edition of U.CreativitySpace.Prevents Cross‑context slippage.
CC‑CR‑2 (Declared bases)Novelty@context claims MUST declare ReferenceBase, SimilarityKernel, and TimeWindow; Surprise claims MUST declare GenerativePrior and its training slice.Makes “new to whom?” and “unexpected under what?” explicit.
CC‑CR‑3 (Objective anchor)ValueGain MUST reference the objective (KPI/utility) and counterfactual method (if predicted, the model).Stops free‑form value stories.
CC‑CR‑4 (Must‑fit)If must constraints exist, ConstraintFit MUST be present; enactment decisions SHALL treat ConstraintFit<1 as fail, unless an explicit waiver SpeechAct exists.Keeps safety & ethics non‑negotiable.
CC‑CR‑5 (Evidence)Each coordinate MUST have Evidence Graph Ref (neighbours, tests, logs, model cards).Enables audit & replication.
CC‑CR‑6 (Scopes)Profiles MUST include USM scopes (ClaimScope/WorkScope) relevant to measurement; off‑scope claims are advisory.Ties numbers to where they hold.
CC‑CR‑7 (No scalarisation by default)The pattern SHALL NOT force a single scalar “creativity score.” If a Context defines one, it MUST publish the weighting and its drift policy.Keeps decisions on a Pareto frontier unless a policy opts‑in.
CC‑CR‑8 (Bridge discipline)Cross‑context comparisons MUST use a Bridge with CL and recorded losses; any mapped coordinate MUST note penalties in the R lane, not silently alter the value.Honest portability.

Manager’s Quick‑Start (apply in 5 steps)

  1. Name the Context (context + edition).
  2. Pick measurement defaults (kernel, prior, objective, constraints) from the Context’s handbook.
  3. Score outcomeNovelty@context, Use‑Value, Surprise, ConstraintFit.
  4. Decide by declared set result: identify the non-dominated Front; emit a Shortlist only through one named lens or policy when selector-facing publication is needed; use ConstraintFit as a gate; apply policy if a scalar is approved.
  5. Record a CreativeEvaluation with evidence; if crossing Contexts, attach the Bridge id.

Mental check. New to our base? Helpful to our objective? Unexpected under our model? Safe & licenced? If any answer is “unknown,” you are not done measuring.

Archetypal Grounding (three domains)

(a) Manufacturing design change) Outcome. New impeller geometry for Pump‑37. Context. PlantHydraulics_2026. Novelty@context 0.42 (shape‑descriptor kernel vs last 5 years). ValueGain. +6.8% flow @ same power (bench Work). Surprise. 1.3 bits (within evolutionary trend prior). ConstraintFit. 1.0 (materials, safety, noise). Decision. Frontier-based choice: modest novelty, clear value, safe. The retained exploration set keeps Diversity_P by also funding one high‑surprise concept for exploration.

(b) Software architecture refactor) Outcome. New concurrency model for ETL. Context. DataPlatform_2026. Novelty_G. 0.27 (AST/edit kernel vs internal corpus). ValueGain. −20% latency, −35% p95 stalls (A/B Work). Surprise. 0.5 bits (trend prior expected co‑routines). ConstraintFit. 0.83 (fails SoD—same author as reviewer). Decision. Return for SoD fix; then likely adopt. Creativity is not a waiver over governance.

(c) Scientific hypothesis) Outcome. A new scaling law claim. Context. GraphDynamics_2026. Novelty_G. 0.66 (formula kernel vs literature base). ValueGain. Predicted: explains 12 prior anomalies (model check). Surprise. 3.7 bits (strongly unexpected under prior). ConstraintFit. 1.0 (ethics N/A; evidence roles bound with decay windows). Decision. Fund replication Work; track R decay per policy.

Anti‑Patterns (fast fixes)

Anti‑patternWhy it failsFix with this FPF pattern
“Creativity = randomness.”Noise yields high Novelty@context, low ValueGain and often low ConstraintFit.Evaluate all four characteristics; require ConstraintFit=1 for musts.
Global originality claims.Ignores context‑local meaning and current corpus.Declare Context & ReferenceBase; cross Contexts only via Bridge.
One magic score.Hides trade‑offs; fragile under drift.Decide on Pareto frontier; publish scalar only with explicit weights/policy.
Hand‑wavy value.No objective → no audit.Tie to Service/KPI or utility; state counterfactual.
Silent borrowing.Legal/ethical risk; reputational damage.Track AttributionIntegrity; licence scans in evidence.

Relations

  • A.2 Role & A.15 Run‑alignment. Creative Work is performed by systems in roles; outcomes are epistemes. Creativity is measured by U.Evaluation, not “done by a document.”
  • B.3 Trust/Assurance. Coordinates carry confidence bands; Bridges lower R by CL. Evidence roles (A.2.4) bind datasets/benchmarks used in measurements.
  • C.9 Agency‑CHR. Agency measures capacity to originate; a high‑agency system may still output low‑creativity outcomes (and vice versa with strong scaffolding).
  • A.2.6 USM (Scope). All measurements sit on ContextSlices; G‑ladder is explicitly not used (C.17 follows A.2.6’s set‑valued scopes).
  • D‑cluster ethics. ConstraintFit is where must constraints, ethics, and safety bind the evaluation; waivers are explicit SpeechActs.

Authoring Aids (didactic cards)

  • Write the Context. Context + edition on every profile.
  • Name the base & kernel. Without them, Novelty@context is undefined.
  • State the objective. Value without a KPI is a story.
  • Publish priors. Surprise needs a trained model with cards.
  • Gate by musts. ConstraintFit < 1 blocks enactment unless waived.
  • Prefer frontiers. Identify non-dominated options on the declared Front; emit a Shortlist only through one named lens or policy when publication needs that head.
  • Bridge explicitly. Cross‑context talk needs CL and loss notes.

CSLC recap and the Creativity CharacteristicSpace

Purpose. Ground “creativity” as a measurable family of characteristics (CHR) rather than a role, capability, or virtue. Each characteristic is scoped to a U.BoundedContext, evaluated on U.Work episodes, U.Episteme values such as design sketches or models, or holders (systems/teams) via MM‑CHR exports (U.DHCMethodRef, U.Measure, U.Unit, U.EvidenceStub), using the CSLC discipline (Characteristic / Scale / Level / Coordinate).

Strict Distinction (A.7) reminders. Creativity is not a Role (no one “plays CreativityRole”). It’s a characterisation of outcomes/process. Creativity is not Work (no resource deltas). Work produces work results or publications that we later characterise. Creativity is not a service promise clause (no external promise). Promise clauses are judged from Work; creativity may correlate with value.

The Creativity CharacteristicSpace (CHR‑SPACE)

The core characteristics below are kernel‑portable names; Contexts specialise them (rename if needed, but keep semantics). Each characteristic declares: what we measure, on what carrier, typical scale, and where it lives in FPF.

Characteristics (kernel name)What it captures (intuitive)Measured onTypical scale (CSLC)Lives with / checked by
Novelty@contextDistance from known ideas in this ContextU.Episteme value or U.Work setRatio or bounded [0..1] via similarity→distanceKD‑CAL corpus + U.BoundedContext
Use‑ValueBenefit vs a declared objectiveU.Episteme value or U.EvaluationOrdinal (Fail/Partial/Pass) or scalar KPIB.3 Evidence & U.Evaluation
SurpriseUnexpectedness under the Context’s GenerativePriorU.Episteme valuebits or nats (−log‑likelihood)Prior cards & calibration
ConstraintFitDegree of must‑constraints satisfied while exploringU.Work or U.Episteme value% satisfied (0–100)Norm‑CAL + step guards
Diversity_PDeclared retained-set coverage/dispersion (incl. coverage map view)Set of U.Episteme valuesSet‑functional; coverage indexΓ_ctx fold + USM ClaimScopes
AttributionIntegrityLawful and transparent provenance/licensingU.Episteme value plus provenance[0,1]PROV + Norm‑CAL

Locality. Every characteristic is context‑local (e.g., Novelty@context). Cross‑context claims must use a Bridge and record CL penalties (B.3). No global novelty.

Context extensions & policy‑level characteristics (non‑kernel)

The following context‑local characteristics remain available but are not part of the kernel nucleus; use them as derived or policy measures:

  • ReframeDelta — change in the problem frame that improves solvability (episteme‑pair; ordinal).
  • Compositionality — degree of re‑use and new relations among parts (U.Episteme value; boolean + structure score).
  • Transferability@X — portability to Context X via a Bridge (U.Episteme value; ordinal + CL penalty).
  • DiversityOfSearch — breadth of approach classes tried (work set; count/rate).
  • Time‑to‑First‑Viable — elapsed time to first Use‑Value = Pass (work; duration).
  • Risk‑BudgetedExperimentation — planned vs realized exploration share (workplan vs work; ratio; policy gate).

Compatibility note. This split removes duplicate “core lists” and aligns C.17 with B.5.2.1 NQD and C.16/A.17A.18: the kernel nucleus captures creativity qualities; the items above instrument Work, policy, or declared retained-set shaping without renaming Front, Archive, or Shortlist.

Scale choices (CSLC discipline)

For each characteristic, declare the scale explicitly (nominal / ordinal / interval / ratio). Do not average ordinal scores; fold with medians or distributional summaries. Choose units (when applicable) and coordinate semantics (e.g., what “distance” means).

  • Novelty@context. Coordinate = 1 − max_similarity(candidate, corpus) with a declared encoder (text, graph, CAD). Unitless in [0..1]. Document encoder & corpus freeze (A.10 Evidence Graph Ref).
  • Use‑Value. Pass iff acceptanceSpec (from U.PromiseContent or Decision KPI) is met from Work evidence; else Partial/Fail. For scalar KPIs, publish mean ± CI and the acceptance threshold; predicted values carry error bars and are updated post‑run.
  • ConstraintFit. Ratio = satisfied / declared must constraints. Constraints are Norm‑CAL rules; count only declared ones (no unspoken “norms”).

Metric templates (normative kernels + manager‑ready variants)

Template syntax (MM‑CHR): U.DHCMethod { name, context, carrierKind, definition, unit?, scale, EvidencePin, acceptanceHook? } Note: Data instances carry DHCMethodRef pointing to this template.

Templates (kernel definitions)
  1. MT.Novelty@context
  • carrierKind: candidate U.Episteme value or work output.
  • definition: 1 − max_sim(encode(x), encode(y)) over y in ReferenceSet@Context.
  • scale: ratio [0..1].
  • EvidencePin: {ReferenceSetId, EncoderId, Version}; frozen by A.10.
  • notes: Publish encoder & corpus drift in RSCR.
  1. MT.Use‑Value
  • carrierKind: work-fulfillment occurrence and resulting decision-memo publication.
  • definition: Evaluation of an outcome against a declared objective/criterion for the current context (or predicted value with explicit model & error).
  • scale: ordinal {Fail, Partial, Pass} or scalar KPI.
  • EvidencePin: links to U.Work that fulfilPromiseContent`; cite acceptanceSpec edition.
  1. MT.ConstraintFit
  • carrierKind: U.Work or U.Episteme value.
  • definition: |{c∈C_must : pass(c)}| / |C_must| within the MethodDescription scope; optional weighting by criticality allowed if declared.
  • scale: ratio [0..1].
  • EvidencePin: constraint list from Norm‑CAL; checks from Work telemetry.
  1. MT.ReframeDelta
  • carrierKind: Episteme pair (ProblemStatement v0→v1).
  • definition: Categorise frame change as {None, Local, BoundaryShift, Systemic}; justify with a Scope diff ([A.2.6](/generated/patterns/A.2.6) U.ContextSlice delta) and causal map simplification.
  • scale: ordinal 0–3.
  • EvidencePin: diff publication plus Bridge notes if Cross‑context.
  1. MT.DiversityOfSearch
  • carrierKind: Work set (episode).
  • definition: Count of distinct approach classes tried (domain‑local typology) / time.
  • scale: count; derived rate.
  • EvidencePin: tagged Work items; typology lives in the Context glossary.
  1. MT.Compositionality
  • carrierKind: U.Episteme value.
  • definition: set aggregator (Compose‑CAL) of reused components ≥ K and presence of novel relation among ≥ 2 parts.
  • scale: boolean + secondary “structure score” (e.g., depth or edge novelty).
  • EvidencePin: component graph + provenance of parts.
  1. MT.Transferability@X
  • carrierKind: U.Episteme value.
  • definition: Applicability in target Context X via a Bridge; report CL and residual scope slice.
  • scale: ordinal {not portable, portable with loss, near‑iso}; record CL (0–3).
  • EvidencePin: Bridge id + pilot Work in X.
  1. MT.Time‑to‑First‑Viable
  • carrierKind: Work episode.
  • definition: elapsed wall‑clock to first UsefulnessEvidence = Pass.
  • scale: duration.
  • EvidencePin: first passing U.Work id.
  1. MT.Risk‑BudgetedExperimentation
  • carrierKind: WorkPlan vs Work.
  • definition: (Planned exploratory spend) / (Allowed risk budget) and realised counterpart; flag overrun.
  • scale: ratio + policy gate (pass/fail).
  • EvidencePin: WorkPlan ledger vs WorkLedger.
Manager’s quick checks (plain‑language adapters)
  • Novelty without a frozen corpus is storytelling—freeze corpus, fix encoder, then score.
  • Use‑Value without a consumer‑facing acceptance is a proxy—bind to a Service or explicit Objective.
  • Diversity counts approach classes, not color‑swap variants—publish your typology.

Novelty & transfer are context‑local (Bridges mandatory)

Rule N‑1 (Locality). Novelty@context is defined only within its U.BoundedContext. Never compare scores across Contexts without an Alignment Bridge (F.9).

Rule N‑2 (Directional mapping). A Bridge may assert a directional substitution (e.g., Novelty@DesignLab → Novelty@Manufacturing with CL = 2, loss: aesthetics encoder absent). Reverse mapping is not implied.

Rule N‑3 (Penalty to R, not to G). Cross‑context novelty does not change scope G; it reduces R (reliability) by the CL penalty (B.3), unless validated by pilot Work in the target Context.

Practical pattern. Publish novelty with its Context tag and—when reused—attach the Bridge id and target‑context pilot outcomes.

Anti‑Goodhart guard (use creativity metrics safely)

Goodhart’s Law: “When a measure becomes a target, it ceases to be a good measure.” — We bake in guards so creativity scoring improves outcomes instead of gaming them.

Guard‑rails (normative)

  • G‑1 Paired appraisal. Never assess Novelty in isolation; pair it with Use‑Value or ConstraintFit to avoid proxy myopia
  • G‑2 Frozen references. Novelty requires frozen corpus + encoder; changes create a new edition and RSCR rerun. Portfolio-publication heuristics and selection heuristics are policy-level (see C.19); do not “reward” Illumination beyond its role as a report-metric.
  • G‑3 Time‑lag sanity. Include a post‑fact check (e.g., 30–90‑day retention or cost‑to‑serve delta) before celebrating “creative wins.”
  • G‑4 Exploration budget. Tie DiversityOfSearch to Risk‑BudgetedExperimentation; flag overspend.
  • G‑5 No ordinal averaging. Do not average ordinal scales; use distributions/medians or convert only under declared models.

Conformance Checklist — CC‑C17‑M (metrics & guards)

IDRequirementPractical test
CC‑C17‑M.1Each metric instance MUST cite its Context, edition, and evidence hooks (corpus/encoder, acceptanceSpec, constraint set).Scorecard lists ContextId, Edition, and hook ids resolvable via A.10.
CC‑C17‑M.2Novelty scores MUST NOT be used to approve Work without a paired gate (Use‑Value or ConstraintFit).Find decisions referencing novelty; check co‑gate present.
CC‑C17‑M.3Cross‑context reuse MUST cite a Bridge and record CL; R is penalised accordingly.Scorecards with foreign Context tag lacking Bridge → fail.
CC‑C17‑M.4Ordinal metrics MUST be summarised with medians/distributions, not means, unless a declared model justifies numeric treatment.Reports using a mean on ordinal without model → fail.
CC‑C17‑M.5Metric templates MUST be versioned; changing encoder, reference set, or acceptanceSpec creates a new edition.Diff shows changed hooks without edition bump → fail.

Worked mini‑cases (engineer‑manager focus)

All names are context‑local; bridges and editions are explicit. We show (a) what is measured, (b) who acts, (c) what is accepted, and (d) how evidence flows.

Case A — Hardware ideation sprint (manufacturing design)

  • Context. DesignLab_2026.
  • Objective. Reduce fastener count by ≥ 30 % without tooling changes.
  • MethodDescription. “Morphological matrix ideation v2.”
  • Work. 1‑day sprint, 6 sessions.
  • Metrics. Novelty@context (encoder: CAD‑graph v1; ReferenceSet: in‑house assemblies), ConstraintFit (no‑tooling‑change), Use‑Value (acceptance: Pass if sim shows ≤ +5 % assembly time).
  • Roles. Performers = design cell (#TransformerRole); Observer = methods coach (#ObserverRole ⊥).
  • Outcome. 22 candidates; 4 Pass usefulness; best Novelty=0.41 with 100 % constraints respected; Time‑to‑First‑Viable = 3 h 40 m.
  • Evidence. Scorecard episteme holds metrics; links to Work ids; acceptance tied to internal promise content “Design‑for‑Assembly Simulation”.

Manager’s read. “We didn’t just produce ‘novel’ shapes; 4 passed the sim and respected constraints, within the day.”

Case B — Data‑science hypothesis generation (health analytics)

  • Context. Cardio_2026.
  • Objective. Find a new risk factor candidate for readmission (< 30 days).
  • MethodDescription. “Causal discovery v3 + clinician review.”
  • Metrics. DiversityOfSearch (approach classes: feature ablation, IVs, DAG‑learners), Novelty@context (text encoder over prior hypotheses), Use‑Value (AUROC uplift ≥ 0.03 on hold‑out), Transferability@Hospital_B (Bridge CL=2).
  • Roles. SRE pipeline (#ObserverRole) computes metrics; clinicians (#ReviewerRole) set acceptance; data squad (#TransformerRole) performs experiments.
  • Outcome. Two candidates; one meets AUROC uplift; Transferability requires follow‑up (CL penalty).
  • Evidence. Episteme bundle: model cards, hold‑out plots, Bridge note.

Manager’s read. “One candidate works here; plan a pilot at Hospital B (we recorded CL=2).”

Case C — Product squad reframing (software UX)

  • Context. SaaS_Onboarding_2026.
  • Objective. Reduce time‑to‑value (TTV) by 20 %.
  • MethodDescription. “JTBD interviews + onboarding flow experiments.”
  • Metrics. ReframeDelta (BoundaryShift: split onboarding into ‘job setup’ and ‘first result’), Use‑Value (TTV ‑22 % on A/B), Risk‑BudgetedExperimentation (within cap), Compositionality (reuse of existing workflow widgets).
  • Roles. UX researcher (#ObserverRole), squad (#TransformerRole), product ops (#ReviewerRole).
  • Outcome. Frame changed; TTV target passed; experiments within budget.
  • Evidence. Reframing episteme with Scope diff + A/B report.

Manager’s read. “We changed the problem frame and proved the value drop—within risk limits.”

C.17:15.4 What these cases illustrate (tie‑backs)

  • Locality. All novelty/usefulness claims are Context‑tagged; Cross‑context steps use Bridges with CL.
  • Dual‑gate. Novelty never acts alone; usefulness/constraints co‑gate decisions.
  • SoD & Evidence. Observers are separate from performers; metrics live on epistemes with frozen hooks; Work proves fulfillment.

Working examples

Software (algorithmic/architectural ideation)

Kernel characteristics (↑/↓/gate). Novelty↑ (algorithmic / compositional), Use‑Value↑ (targeted user/job metric), ConstraintFit=gate (resource/latency envelope), Cost‑to‑Probe↓ (hours to runnable spike), Evidence‑Level↑ (tests/benchmarks confidence), Option‑Value↑ (paths unlocked), RegretRisk↓ (scope of adverse impact if wrong).

Priors.

  • Novelty prior skeptical beyond nearest known family (discount by conceptual distance).
  • Evidence prior at L0 (B.3) until benchmarks exist; regression tests act as ObserverRole evidence.

Context card (one screen).

  • Γ_bundle: Cost = sum; ConstraintFit = AND; Novelty = subadditive; Evidence = min (chain) / SpanUnion (indep).

Hardware (mechanical/electro‑mechanical concepting)**

Kernel characteristics. Novelty↑ (principle/material), Use‑Value↑ (performance delta), ConstraintFit=gate (manufacturability window), Time‑to‑Probe↓ (bench jig), Cost‑to‑Probe↓, SafetyRisk↓ (hazard), Evidence‑Level↑ (bench data), Option‑Value↑ (platform reuse).

Priors.

  • SafetyRisk has WLNK priority (R must cover hazard chain).
  • ConstraintFit must pass manufacturing gate before frontier inclusion.

Context card.

  • Γ_bundle: Hazard = max; ConstraintFit = AND; Cost = sum+coupling; Evidence = min on chain; Scope via WorkScope (A.2.6).

Policy design (rules/standards/programs)

Kernel characteristics. Novelty↑ (institutional), Use‑Value↑ (measurable social/operational effect), ConstraintFit=gate (legal/operational), Cost‑to‑Probe↓ (pilot), Evidence‑Level↑ (triangulated), EthicalRisk↓ (D‑cluster), Option‑Value↑ (coalitions/pathways), Scope (ClaimScope G) explicit.

Priors.

  • EthicalRisk uses status‑only eligibility conditions; Evidence aging (decay) is fast; cross‑context Bridges carry CL penalties.

Context card.

  • Γ_bundle: EthicalRisk = max; ConstraintFit = AND (legal & operational); Cost = sum; Evidence = min/SpanUnion; Scope = ClaimScope (A.2.6).

Consequences & fit (for engineer‑managers)

  • You can reason on paper about creativity: compare with dominance, pick along a frontier, and steer exploration with a few policy characteristics.
  • Changes to the space (scales, eligibility conditions, operators) are handled by RSCR, so decisions are explainable over time.
  • The Context handbooks are a thinking OS: one screen to start ideating without importing tool stacks or management playbooks.

Cross-scale characteristics need one visible distortion account

  • Cross-scale talk should state what characteristics are being preserved, aggregated, projected, or lost when the line moves between scales such as organism, species, population, or ecosystem.
  • BridgeDistortionNote is the explicit warning that one bridge, aggregation, or projection changes what can be compared directly.
  • A distortion note does not cancel the declared Front, Archive, or Shortlist; it says how far one cross-scale reading can be trusted without further qualification.
  • When one retained set, frontier view, or transition path is projected into one atlas-like reading, keep the distortion note near that projection instead of leaving the loss to implication.
  • If that projection also depends on one declared OutcomeMapRef or TransitionRelationRef, cite that support next to the distortion note so the reader can see both why the projection is useful and where it stops being faithful.
  • Different atlas-like projections over the same retained set or frontier may preserve different characteristics; keep those differences visible instead of treating one cross-scale view as information-preserving by default.
  • This lets the line say both the bridge is useful and the bridge is not information-preserving in every respect.

Use-Value is not the whole Q-set by default

  • Use-Value may be one member of a declared Q-set, but it is not the whole Q-set by default.
  • When creativity or novelty characteristics stay outside the declared Q-set, keep that placement visible as tie-breaker, telemetry, archive-retention reason, or explicitly promoted criterion under policy.
  • Do not let Use-Value language silently promote Novelty@context, DeltaDiversity_P, Surprise, or IlluminationSummary into current dominance.

Relations

  • Builds on: B.1 Γ‑algebra (WLNK/COMM/IDEM/MONO), B.3 Trust & Assurance (F–G–R, CL), A.2.6 USM (Claim/Work scopes), A.10 Evidence Graph Referring.
  • Coordinates with: A.2 Role suite (Observer/Evidence roles for probes), A.15 (Work & plans for probes), C.16 MM‑CHR (scale polarity & units). C.18 NQD-CAL (generation/illumination operators Γ_nqd.*) and C.19 E/E-LOG (policies, selection, and declared retained-set rules). This CHR remains measurement-only.
  • Defers to: F.9 Bridges for Cross‑context transfers; D‑cluster for ethical/speech‑act gates.

Quick reference cards (tear‑out)

  • Dominance test: apply indicators + eligibility conditions + trust; then partial order.
  • Frontier use: show frontier + name the lens that picked your choice.
  • Retained-set policy: keep ExploreShare and WildBetQuota; set BackstopConfidence; rebalance on cadence.

Conformance Checklist (pattern‑level, normative)

Pass these and your CS modelling remains a thinking architecture, not a team‑management manual.

CC‑C17‑1 (context‑local CS). Every CreativitySpace (the characteristic set where ideation and selection are measured) MUST be defined inside one U.BoundedContext; all characteristics and their scales are local to that Context. (Bridges with CL penalties are required across Contexts; see §C.17.16.)

CC‑C17‑2 (Characteristics, not “characteristics”). Each CS dimension SHALL be a named Characteristic per MM‑CHR, with kind (qualitative, ordinal, interval, ratio, or set‑valued), unit and scale, polarity, and admissible operations. No free‑floating coordinates. (A.CHR‑NORM / A.CSLC‑Kernel.)

CC‑C17‑3 (Profile ≠ plan). A Profile is a state description over characteristics (what the option is in CS); a Plan or Method is how you will act. Never encode choices or schedules into the profile.

CC‑C17‑4 (Portfolio / retained-set view = set + rule). A Portfolio or retained-set view is a declared set of candidate profiles plus a selection or retention rule (objective + constraints) declared in the same Context. It is not a synonym for Palette, Front, Archive, Shortlist, or RankedShortlist; use the specific set-result family head when that head is recoverable. Presenting only a scatterplot is non‑conformant.

CC‑C17‑5 (Dominance operator well‑typed). A dominance claim MUST name the characteristic subset and polarity under which it is evaluated. Dominance on incomparable scales (or mixed polarities without explicit transformation) is invalid.

CC‑C17‑6 (Frontier from rule, not from taste). A Frontier (Pareto or constraint‑bound) SHALL be computed from the declared selection rule; drawing a “nice hull” by eye fails conformance.

CC‑C17‑7 (Search–Exploit as dynamics, not policy dogma). Exploration/exploitation MUST be expressed as a dynamics on the declared retained-set measure(s) (e.g., exploration share as a function of marginal value of information), not as a prescriptive budget recipe. Objective, constraint, and decision-policy statements belong to Decsn‑CAL / C.19; C.17 may cite them, but does not own or restate them.

CC‑C17‑8 (Evidence Graph Referring for scores). Any numeric score in a profile MUST cite its MeasurementTemplate (MM‑CHR) and the observation/evaluation that yielded it. No anonymous numbers.

CC‑C17‑9 (Separable uncertainty lanes). Keep aleatory vs epistemic uncertainty separate on characteristics; their combination rule MUST be stated (e.g., interval arithmetic, conservative bound).

CC‑C17‑10 (Time is explicit). Comparisons across iterations MUST state TimeWindow (snapshot window) and whether drift or refit occurred (§C.17.14). “Latest” is not a time selector.

CC‑C17‑11 (No proxy collapse). If a composite “creativity index” is used, its aggregation algebra (weights, monotone transforms) MUST be declared; the primitive characteristics remain queryable.

CC‑C17‑12 (Work stays on Work). Resource/time actuals and run logs live on U.Work; CS never carries actuals. We reason about profiles / retained sets; we do not audit operations here.

Worked‑Context Handbooks (concept cards, not runbooks)

Each Context publishes one page per card. These are thinking kernels: priors, objectives, admissible characteristics, and example transforms. No staffing, no process charts.

(a) Kernel Card — “What is a creative win here?”

  • Context: <Context/Edition>
  • Purpose Characteristic(s): what “win” means (e.g., Novelty, Usefulness, Adoptability), with polarity and admissible ops.
  • Constraint Characteristics: Risk, Cost of change, Time to learn, etc.
  • Objective (Decsn‑CAL pointer): Maximise <purpose> subject to declared constraints.
  • Frontier Rule: Pareto over {purpose ↑, risk ↓, cost ↓, time ↓}.
  • Evidence Hooks: which observations/evaluations populate each characteristic.

(b) Priors Card — “What we believe before seeing data.”

  • Default priors on uncertainty for each characteristic (e.g., Beta for adoption probability).
  • Bridge policy: minimal CL acceptable for imported profiles.
  • Exploration prior: initial exploration share as a function of prior entropy.

(c) Objective Variants Card — “Admissible objective shapes.”

  • Catalog the few objective forms this Context allows (lexicographic tie‑break, ε‑constraint, max‑min fairness), with didactic pictures of their frontiers.
  • State when to switch objective (e.g., during bootstrapping vs exploitation).

(d) Ready‑to‑use transforms (MM‑CHR aligned)

  • Monotone maps (e.g., log utility), normalizations, ordinal→interval “do & don’t” (only with evidence of order‑to‑interval validity).
  • Forbidden transforms list (e.g., averaging ordinal ranks).

These cards are conceptual fixtures; Tooling may implement them, Pedagogy may teach them, but C.17 only standardises their content as thinking supports.

Placement sanity‑check across the pattern language (avoid scope creep)

  • MM‑CHR (C.16): defines Characteristic/Scale/Unit/Measure and the characterisation discipline. All CS dimensions live there; C.17 uses them, never re‑defines scales.
  • A.CHR‑SPACE (A.19): exports CharacteristicSpace & Dynamics hooks; C.17 is a Contexted specialisation for creative reasoning (profiles / retained sets / selection).
  • Decsn‑CAL (C.11): defines objective functions, constraints, preference orders, utility proofs, and the search–exploit dynamics as decision policies. C.17 only names the hooks (objective, rule), keeps policy math out.
  • KD‑CAL (C.2) & B.3 (Trust): carry evidence provenance, assurance and congruence penalties (CL) for Cross‑context reuse. C.17 requires anchors; it does not invent confidence calculus.
  • Compose‑CAL (C.13): governs set/union/slice aggregation; a declared retained set is a Γ_m.set over profiles; frontier is derived without ad‑hoc geometry.
  • B.4 Canonical Evolution Loop: where Run→Observe→Refine→Deploy sits. C.17 supplies the view in which refinement is judged.

Out of scope here: team staffing, budgeting workflows, data‑governance procedures, ticket states, any “how to manage people”. This pattern organises thought, not teams.

Anti‑patterns & canonical rewrites (conceptual hygiene)

  1. characteristic‑speak. “Along the novelty characteristic…” → Rewrite: “Along the Novelty characteristic (ordinal; higher is better)…”.
  2. Pretty hulls. Drawing a convex hull and calling it a frontier → Rewrite: compute Pareto under declared characteristic polarities.
  3. Ordinal arithmetic. Averaging ranks or Likert values → Rewrite: either treat as ordinal and use order‑safe operators, or justify an interval mapping via MM‑CHR evidence.
  4. Proxy tyranny. Single composite index driving choice unseen → Rewrite: publish primitive characteristics, index formula, and sensitivity.
  5. Policy‑as‑math. “10% wild bets” as a rule → Rewrite: declare an exploration dynamics tied to value‑of‑information; if keeping a heuristic, label it as such.
  6. Global meaning. Porting a profile from another Context by name → Rewrite: attach a Bridge with CL and loss notes; adjust trust, not scales.
  7. Plan‑profile blur. Putting milestones into profiles → Rewrite: move schedules to U.WorkPlan; keep CS for how options compare, not how to execute.

Minimal didactic cards (one screen each)

(1) Profile Card

  • Option id & Context
  • Characteristics table (value, unit and scale, uncertainty split)
  • Evidence Graph Ref (Observation/Evaluation ids)
  • Notes (bridges used, CL penalties)

(2) Declared Set-with-Rule Card

  • Set of candidate profiles (refs)
  • Objective & constraints (Decsn‑CAL pointer)
  • Dominance subset & Frontier snapshot (with TimeWindow)
  • Delta vs previous (entered/exited/moved)

(3) Search–Exploit Card (conceptual)

  • Exploration share as function of marginal VOI (symbolic)
  • Update cadence (TimeWindow policy)
  • Stop conditions (e.g., VOI below threshold; risk bound reached)

(4) RSCR Summary Card

  • What changed? (refit/Δ±)
  • Sentinels status
  • Frontier churn
  • Bridge CL drift

These cards are thinking scaffolds; they do not prescribe org process.

Consequences (informative)

BenefitWhy it matters
context‑local rigourCreative comparison is made decidable where meaning lives; Cross‑context reuse is explicit and penalised only in trust, not scale.
Frontier honestyDecisions rest on declared characteristics and polarities; frontiers follow rules, not taste.
Temporal comparabilityRSCR prevents silent drift; “better/worse” claims retain meaning over iterations.
Method independenceAny tooling can implement the cards; C.17 remains a conceptual API for thought.

Trade‑offs: upfront ceremony (declare characteristics, polarity, TimeWindow) and disciplined bridges. The payoff is comparability and explainability.

C.17:26- Open questions (non‑normative, research hooks)**

  • Information geometry of CS: can certain Contexts justify canonical distance metrics across characteristics without violating MM‑CHR parsimony?
  • Multi‑agent exploration: how to couple individual CS frontiers into a co‑exploration equilibrium without importing team governance?
  • Learning‑to‑rank vs measurement: what minimal evidence suffices to treat an ordinal characteristic as interval for the purpose of frontier estimation?

C.17:End


Open‑Ended Search Calculus (NQD‑CAL)

Status. Calculus specification (CAL). Exports Γ_nqd.* operators for open‑ended, illumination‑style generation. ΔKernel = 0 (no kernel primitives added). Minting note: this CAL does not mint new U‑types; it defines CAL‑records that MAY alias to registered U‑types where present via E.10/UTS.

Depends on. A‑kernel (A.1A.15), MM‑CHR (C.16) for measurements, KD‑CAL for similarity/corpora, Sys‑CAL for carriers, Decsn‑CAL (objectives; advisory), Compose‑CAL (set aggregation; advisory).

Coordinates with. B.5.2.1 (binding), C.17 Creativity‑CHR (characteristics & scales), C.19 E/E‑LOG (policies: emitter selection, explore/exploit).

Exports (CAL; no U‑type minting here).

  • Records: NQD.DescriptorMap (alias of U.DescriptorMap if minted), NQD.NQDArchive (alias of U.NQDArchive), NQD.Niche, NQD.ArchiveCell, NQD.EmissionSeed?, U.EmitterPolicyRef, U.InsertionPolicyRef, U.IlluminationSummary, and NQD.CandidateSet (alias of Set<U.Hypothesis>).

Problem frame

Open‑ended search (NQD) equips FPF with illumination‑style generation and Pareto / selected-set selection in multi‑criteria, partially ordered spaces; it feeds G.5 without scalarising ordinal or mixed‑scale characteristics.

Problem

Without a disciplined NQD calculus, contexts (a) conflate illumination telemetry with dominance, (b) lose reproducibility due to undeclared DescriptorMap/DistanceDefRef.editions, and (c) perform illegal aggregations across scales.

Forces

• Posets vs. scalarisation — selectors must return sets (Pareto/archive) rather than illegal weighted sums across mixed scales. • Exploration vs. exploitation — emitters must adapt while preserving provenance and editioning. • Telemetry metric vs. objective — Illumination (coverage/QD‑score) informs health but is not a dominance characteristic by default. • Reproducibility vs. adaptivity — budgets, ε, K, and InsertionPolicy must be edition‑tracked.

Solution

Provide Γ_nqd.* operators and U.Types for DescriptorMap, Archive/Niche, policies, and illumination telemetry summaries; bind measurement legality to MM‑CHR and policy control to E/E‑LOG. (Exports/Type notes/Operator specs below are normative parts of this Solution.)

  • Operators (Γ):
    • Γ_nqd.generate(seed?, EmitterPolicyRef, Budget, DescriptorMapRef, QualityMeasuresRef, NoveltyMetricRef, CoverageGrid, CellCapacity K=1, EpsilonDominance ε=0, DedupThreshold?, InsertionPolicyRef?) → CandidateSet<U.Hypothesis>
    • Γ_nqd.updateArchive(Archive, CandidateSet, InsertionPolicyRef?) → Archive'
    • Γ_nqd.illuminate(Archive) → IlluminationSummary{coverage, QD-score, occupancyEntropy, filledCells} (report‑only telemetry summary; not a dominance characteristic unless a policy explicitly promotes it).
    • Γ_nqd.selectFront(Archive|CandidateSet, characteristics={Q components, Novelty@context, ΔDiversity_P, …}) → ParetoFront

Type notes.

  • U.DescriptorMap (Tech; twin‑labelled Plain) : Hypothesis → ℝ^d (declares encoder, invariances, version, CharacteristicSpaceRef). Publish Tech/Plain per E.10; declare DescriptorMapRef.edition and DistanceDefRef.edition. Dimensionality rule. Require d≥2 only when QD/illumination surfaces are active; for non‑QD contexts d≥1 is lawful.
  • NQD.CandidateSetSet<U.Hypothesis> with attached per‑item vectors {Q_i, N_i, D_i:=ΔDiversity_P, S_i?, provenance_i}.
  • U.NQDArchive holds per‑cell elites and genealogy refs; context‑local.
  • U.Niche is a region in CharacteristicSpace (grid bucket / CVT centroid / cluster).
  • U.EmitterPolicyRef points to a named policy in C.19 E/E‑LOG.
  • U.InsertionPolicyRef — named archive‑update policy (e.g., replace_if_better | replace_worst | bounded_age | bounded_regret); versioned.
  • U.IlluminationSummary is a telemetry summary over Diversity_P (see C.17), not a dominance characteristic.

Operator specs (normative).

  • Γ_nqd.generate(… ) SHALL: (a) respect Budget, (b) compute {Q_i} (vector), N_i (Novelty@context), D_i := ΔDiversity_P(h_i | Pool) under the same CharacteristicSpace & TimeWindow as the Pool, and optional S_i (Surprise), (c) deduplicate by DedupThreshold in CharacteristicSpace, (d) record DescriptorMapRef.edition, DistanceDefRef.edition, EmitterPolicyRef, ε, K, Seeds, and genealogy references (parent/seed ids) to enable replay and selection auditing.
  • Γ_nqd.updateArchive SHALL apply local competition per cell (keep up to K elites), preserve genealogy, and enact the declared InsertionPolicyRef; default is replace_if_better with deterministic tie‑breakers.
  • Γ_nqd.illuminate SHALL return coverage and QD‑score computed against the declared grid and archive edition.
  • Γ_nqd.selectFront SHALL compute the (ε‑)Pareto front over the declared characteristics; Illumination is excluded by default (report‑only).

Pipeline: apply Eligibility (ConstraintFit=pass)Dominance over the declared DominanceSetTie‑breakers (Novelty@context, ΔDiversity_P, Surprise; Illumination telemetry metric). When the context relies on the ordinary default, consume DefaultId.DominanceRegime from G.Core/G.5 together with the active C.19 emitter/archive policy instead of restating one local dominance doctrine here. Ordinary default Q-front mode: When no narrower promotion policy is declared, dominance stays on the context-declared Q components while N/ΔD work through archive occupancy and tie-breakers. Any deviation SHALL be declared by policy id and recorded in provenance.

Reproducibility & editions. Each call SHALL emit provenance sufficient for replay: {DHCMethodRef.edition, DescriptorMapRef.edition, EmitterPolicyRef (params), **InsertionPolicyRef**, DedupThreshold?, ε, K, Seeds, TimeWindow}. Telemetry hook: whenever IlluminationSummary increases (Δcoverage>0 or ΔQD‑score>0), the Context SHALL emit a Telemetry(PathSlice) record that cites {EmitterPolicyRef, DescriptorMapRef.edition, DistanceDefRef.edition, InsertionPolicyRef?, TimeWindow}. (Aligns with G.6/G.7/G.11 PortfolioMode/edition constraints.)

Measurement alignment. Novelty@context, Use‑Value (ValueGain), Surprise, Diversity_P SHALL be measured per C.17 (MM‑CHR templates). IlluminationSummary is a telemetry summary over Diversity_P (coverage/QD‑score); when CharacteristicSpace includes domain‑family cells, publish grid id and FamilyCoverage, plus DescriptorMapRef.edition/DistanceDefRef.edition. .

Front and archive are different returns

  • Start from one declared EligibilitySet.
  • Return the non-dominated Front over the declared DominanceSet.
  • When archive mode is active, return the corresponding ExplorationArchive separately.
  • Archive membership may use novelty, diversity, stepping-stone potential, or coverage policy and is not by itself evidence of membership in the current Q-Front.
  • Keep TieBreakerSet and TelemetrySet explicit so diversity or illumination signals do not silently rewrite the front semantics.
  • Use RetentionIntent=steppingStone when the point of retention is frontier expansion rather than current dominance.
  • Here EligibilitySet, DominanceSet, TieBreakerSet, and TelemetrySet are comparison-bundle sets, while RetentionIntent=steppingStone is one archive-retention field value; none of them renames the returned Front or ExplorationArchive.
  • If one line keeps both returns, say that the front answers current non-domination while the archive answers retained exploration value.
  • When retained exploration value depends on future reachability or curriculum expansion across transitions, cite the declared reachability or transfer rule together with LearningProgressSignal, CompetenceModelRef, or GoalSpaceExpansionCue. That bridge stays archive/pool-policy-side unless one explicit policy promotes it; it does not require the heavier atlas layer and it does not rewrite front semantics.

Conformance Checklist

  • C18‑1 Declare DescriptorMap (encoder, invariances, corpus edition) before generation.
  • C18‑1b When used in F/G triads, DescriptorMap SHALL declare a domain‑family coordinate (grid/cells) and reference an F1‑Card::DistanceDefRef & δ_family.
  • C18‑1c When a domain‑family coordinate is declared, the Context SHALL compute and publish AliasRisk for each front / declared set-result emission, together with the dSig collision rule and the policy id. AliasRisk is computed against U.DomainDiversitySignature (dSig); the DescriptorMap SHALL publish: (i) collisionRuleId (near‑duplicate threshold, e.g. “≥3 characteristics equal”), (ii) dSigSource pointers used for coding the five characteristics. The collision rule and formula MUST be part of DescriptorMap provenance (see Creativity‑CHR, Heterogeneity Characterisation).
  • C18‑2 Record EmitterPolicyRef (policy id from C.19) and parameter set.
  • C18‑3 Compute D = ΔDiversity_P(h | Pool) under the same DescriptorMap & TimeWindow as the Pool (see C.17).
  • C18‑4 Exclude Illumination from dominance unless policy explicitly promotes it.
  • C18‑5 Keep Use‑Value separate from assurance scores; do not alter F/G/R semantics (see B.3, C.17 §Use‑Value).
  • C18‑6 Emit full provenance; thinning after front computation MUST be recorded.
  • C18‑7 Before computing any front, apply ConstraintFit = pass as a hard eligibility filter.

Defaults. Default-governance responsibility is split on purpose: G.Core and G.5 govern DefaultId.DominanceRegime and selector-facing default routing, while C.19 governs emitter, insertion, and pool-policy defaults. C.18 consumes those defaults and records the active refs instead of restating them locally. Minimum provenance remains: DescriptorMapRef.edition and DistanceDefRef.edition, DHCMethodRef.edition, EmitterPolicyRef, InsertionPolicyRef, TimeWindow, Seeds, DedupThreshold?; also record FamilyCoverage/MinInterFamilyDistance.

Didactic quickstart (Context).

  1. Pick 2–4 Quality coordinates and a simple DescriptorMap (2–4 dims).
  2. Set defaults: K=1, ε=0, a conservative EmitterPolicy.
  3. Run Γ_nqd.generate to fixed Budget; inspect the front; log coverage (IlluminationSummary).
  4. Apply abductive plausibility filters; promote prime hypothesis to L0.

Archetypal Grounding

System. Legged‑robot gait exploration: Q = {forward speed, energy efficiency}; DescriptorMap/CharacteristicSpace = morphology/coordination descriptors (ℝ^d); D = ΔDiversity_P(h | Pool) computed over that declared descriptor space; Archive = CVT grid; illumination reports coverage without entering dominance. Episteme. SoTA palette synthesis: Q is one declared objective tuple for the current synthesis task, for example external-validity gain, reuse value, or Use-Value only when the Context explicitly declares it inside Q; DescriptorMap/CharacteristicSpace carries method-family or claim-graph descriptors; D = ΔDiversity_P(h | Pool) is computed over that declared descriptor space or niche grid. Publish DescriptorMapRef.edition and DistanceDefRef.edition so the front remains reproducible.

Bias‑Annotation

Lexical firewall and notation independence apply; no vendor/tool tokens; ordinal characteristics never averaged; illumination treated as report‑only telemetry unless a policy promotes it. (E.5.1, E.5.2, C.16)

Consequences

• Selected-set honesty (no forced scalarisation). • Reproducibility (editioned maps/policies). • Healthy diversity signals via telemetry metrics.

Rationale

Post‑2015 Quality‑Diversity (MAP‑Elites & successors) demonstrates illumination efficacy; NQD‑CAL captures these ideas while preserving MM‑CHR legality and LOG governance.

Relations

Builds on: C.16, C.2. Coordinates with: B.5.2.1 (binding), C.17, C.19, G.5, G.6, G.11.

C.18:End


Scaling‑Law Lens Binding (SLL)

Status: Stable

One‑screen purpose (manager‑first). Make generation/selection scale‑savvy: at the level of conceptual descriptors, declare (a) which monotone knobs we would scale, (b) the ScaleWindow over which we claim behaviour, and (c) the elasticity class we observed—without imposing numeric fits or vendor tools at Core level. This surfaces knees early and keeps comparisons lawful and fair across families. (Parity is handled by G.9; illumination remains a report-only telemetry unless a CAL policy promotes it.)

Builds on. C.16 (MM‑CHR), C.17 (Creativity‑CHR), C.18 (NQD‑CAL); advisory: C.5 (Resrc‑CAL). Coordinates with. C.19 (E/E‑LOG), G.5 (Selector & Registry), G.9 (Parity Harness), G.10 (Shipping), G.11 (Refresh‑Telemetry), C.24 (Agent‑Tools‑CAL). Keywords. scaling law; Scale Variables (S); ScaleWindow; knee; diminishing returns; iso‑scale parity; UNM/NormalizationMethod‑based mapping; scale‑probe; DoE (design‑of‑experiments); segmented regression; knee detection.

Problem frame

Teams often say a method “scales” without disclosing which resources, across what window, and how outcomes respond (convex rise → knee → plateau). Without that, parity is skewed (unequal budgets, unmatched windows), coverage/illumination report-metrics leak into dominance, and “knees” are found late. SLL supplies a notation‑independent lens to make scale behaviour explicit and comparable.

Problem

Omitting Scale Variables and the comparison window causes: (i) unfair parity (compute/data/FoA mismatched), (ii) illumination/coverage report-metric creep into dominance by default, (iii) late detection of knees and budget waste. G.9 already forbids scalarising mixed scales and mandates equal FreshnessWindows/pinned editions; SLL complements this with ScaleWindow & elasticity.

Forces

Notation independence vs useful scaling heuristics; local context vs cross‑context generality; telemetry vs objectives (illumination stays report‑only telemetry unless policy promotes it); early exploration vs reproducible policy.

Solution — binding lens for generator/selector profiles (normative)

Types (aliases; ΔKernel = 0).

SLL.Profile is an annotation on a MethodFamily/Generator or a Selector profile; no new U.Types are minted (LEX discipline).

Fields (conceptual descriptors).

  • S — Scale Variables. Minimal set of monotone knobs for the Context: compute (steps/tokens/FLOPs/time/energy), data (size/quality), model capacity (params/branches), iteration budget, freedom‑of‑action (FoA)/environment richness, etc. Declare units via Resrc‑CAL and bind to a ScaleWindow. Where training/inference trade, name the phase the claim concerns.
  • ScaleWindow. Declared range of S values for which behaviour claims hold (editioned). This is distinct from FreshnessWindow used by parity.
  • Scale‑Probe. At least two (preferably ≥ 3) parity‑respecting points in S within the ScaleWindow, recorded with replicates/seeds and CI/error bars to support elasticity classification. Pick points via a small factorial or Latin‑hypercube when multiple knobs vary.
  • ElasticityClass χ ∈ {rising, knee, flat, declining} — a qualitative class; numeric exponents/fits live in domain annexes, not Core.
  • ParityNotes. iso‑scale parity? flag (and loss notes if not achieved), plus Bridge/Φ/Ψ IDs when crossing contexts (penalties route to R only).

Norms (SLL).

  • SLL‑1 (Declaration). Any profile claiming scale behaviour SHALL declare S and a ScaleWindow for the Context.
  • SLL‑2 (Probe). Early investigation SHALL include a scale‑probe (≥ 2 points in S, with replicates/CI) and record χ. Multi‑knob probes SHALL hold unspecified knobs fixed or pinned, and disclose invariants.
  • SLL‑3 (Parity). Where S is declared, comparisons SHALL ensure iso‑scale parity and lawful UNM/NormalizationMethod‑based mapping across heterogeneous knobs (e.g., FLOPs↔tokens) before comparing outcomes; FreshnessWindows/editions must be equal/pinned per G.9. Record seeds/replicates, ComparatorSet, and policy‑ids in telemetry/SCR.
  • SLL‑4 (Selection lens). Within the same Context and ScaleWindow, if other heads (N/U/C) are tied, selectors MAY use illumination as a tie‑breaker, but it SHALL NOT change default dominance; illumination remains report‑only telemetry unless a CAL policy promotes it.
  • SLL‑5 (Knee test). A knee is claimed only where a monotone rise is followed by a statistically significant slope drop across adjacent probe points within the ScaleWindow; thresholds (e.g., Δslope & CI level) are policy‑defined (E/E‑LOG) and must be cited. Absent such evidence, classify as rising.
  • SLL‑6 (Telemetry invariants). Probes SHALL export seeds/replicates, edition pins, policy‑ids, and Resrc‑CAL units to G.11.

Method — minimal SoTA probe recipe (notation‑agnostic; informative).

  1. Choose knobs S that are plausibly monotone in the Context (compute/data/capacity/FoA).
  2. Pick 3–5 probe points per active knob (edge/mid/edge) under iso‑scale parity; use a fractional factorial if >2 knobs.
  3. Run replicates (≥ 3 preferred) and bootstrap 95% CI on the primary objective(s); log seeds.
  4. Estimate local slopes on a log‑log grid; apply piecewise/segmented regression or a knee detector (e.g., L‑curve/Kneedle) to support χ.
  5. Record invariants (pinned knobs, safety envelope) and publish SLL.Card@Context.
  6. If χ changes across the window, split the ScaleWindow and re‑classify per segment.

Interfaces — minimal I/O (conceptual)

G.9 Plan/Run Parity consumes S/ScaleWindow to align budgets, pin editions, and perform UNM/NormalizationMethod‑based mapping; G.11 carries policy‑id, PathSliceId, seeds/replicates, CI level, and edition pins per parity CC.

Conformance Checklist (CC‑SLL)

  1. S declared or S = N/A with rationale.
  2. Scale‑probe performed; χ recorded with replicates/CI; invariants disclosed.
  3. iso‑scale parity or loss notes + penalties → R only; editions/seeds pinned; ComparatorSet cited.
  4. If used as tie‑breaker, the selector cites χ and lens id in E/E‑LOG provenance.
  5. Knee claims cite the policy threshold and CI level used.

Anti‑patterns & remedies

Hidden budget mismatches; averaging ordinals across families; illumination in dominance by default; unpinned editions; slope claims without replicates/CI; training/inference phase mixing → cure with G.9 parity (equal windows/editions; normalize‑then‑compare; return sets), phase‑label the claim, and record slope uncertainty per Scale‑Audit discipline.

Archetypal grounding (post‑2015; informative)

  • LLM scaling. Kaplan‑style & Chinchilla‑optimal regimes; Mixture‑of‑Experts and retrieval‑augmented families shift effective capacity with different inference budgets; prompt‑policies often transfer better than narrow pipelines.
  • RL/Planning. Model‑based optimization & general agents vs hand‑tuned controllers; slopes reported wrt budget/FoA under safety envelopes.
  • QD/OEE. MAP‑Elites, CMA‑ME, DQD, QDax; POET/Enhanced‑POET families: coverage/illumination as telemetry metrics; parity uses fixed grids/spaces and edition pins.

Payload — exports

SLL.Card@Context (UTS row; editioned): ⟨S{knobs, units, phase}, ScaleWindow, Scale‑Probe{points≥2, design=one‑liner, seeds, CI}, ElasticityClass χ, ParityNotes{iso‑scale?|loss, invariants}, BridgeIds?/Φ/Ψ, PolicyIds? (E/E‑LOG), PathSliceId?⟩.

UTS row template (conceptual; pencil‑ready). SLL.Card@Context := S=(COMPUTE|DATA|CAPACITY|FOA; units=…; phase=TRAIN|INFER), ScaleWindow=[LOW…HIGH], Probe=(points=…, design=factorial|LHD, seeds=…, CI=…), χ=rising|knee|flat|declining, ParityNotes=(iso=true|false; invariants=…), Bridge/Φ/Ψ=(…), PolicyIds=(…), PathSliceId=(…).

Relations

C.27 temporal-claim relation.

  • C.27 may flag: a claim that more review capacity, tool calls, tokens, data, model capacity, parallelism, freedom of action, sprints, or another declared scale variable changes rate, learning, recovery, throughput, stabilization, or improvement.
  • This pattern keeps: scale variable, scale window, scale probes, and elasticity posture.
  • Non-admissible use: more scale is not linear improvement, and a scale word does not create a C.27 rate-change claim by itself.
  • Exit: if comparison or benchmark use is live, cite G.9 for parity; if the statement is only a linear effort fantasy, name the scale variable and scale window or downgrade.

Builds on: C.16/17/18. Coordinates with: C.19 (lenses/policies), G.5 (set‑returning selector), G.9 (parity; ParetoOnly default; UNM/NormalizationMethod‑based mapping), G.10 (shipping).

Pedagogical cue. Say what you would scale, probe it twice, and use the slope‑class to steer.

C.29 mathematical-lens use relation

C.18.1 supplies scale-window and scaling-law evidence for C.29 when a mathematical lens claims scale behavior, universality, knees, exponents, coarse-graining validity, or diminishing returns. C.29 cannot treat mathematical compression as scalable without an SLL or BLP-compatible scale-window account where scale is load-bearing. If no scale claim is live, C.29 uses a local stop condition rather than opening scale-law work.

C.18.1:End

Explore–Exploit Governor (E/E‑LOG)

Type: Calculus (C) Status: Stable Normativity: Normative

Plain-name. Explore-exploit governor.

Intent. Govern exploration/exploitation policy over still-live candidate pools so frontier treatment, graduation, narrowing, and sunset treatment stay explicit, auditable, and stated as one pool-policy result without taking over local choice, enactment, or publication questions.

Export relation. No Γ operators are exported; policies parameterize calls in C.18 NQD-CAL.

Depends on. C.18 NQD-CAL (generators), C.17 Creativity-CHR (measurements), Decsn-CAL (objectives/constraints and scalarization lenses), B.3 (trust adjustments), and Compose-CAL (set aggregation; advisory).

Coordinates with. C.11 for local choice among already-available options, C.24 for enactment planning after choice, G.5 for selector-facing publication, C.17, and G.9.

Use this when

  • several candidate lines, family regions, or frontier segments remain live under one declared exploration/exploitation policy and the question is now policy over that pool rather than one more local choice result
  • the next result should say how the pool will be treated next: widen, keep frontier, narrow to subset, sunset line, or reroute
  • the governing lens or policy state must be explicit rather than inferred from vague exploration language

What goes wrong if missed

  • scalarized top-1 picks are mislabeled as "the frontier", so it becomes unclear whether the result names one lens-ranked winner or the lawful live set
  • exploration continues without one named pool, one named governing lens, or one explicit next treatment
  • local option choice, pool policy, enactment planning, and published shortlist semantics collapse into one blurred result

What this buys

  • one explicit pool-governance result for exploration, graduation, narrowing, and sunset treatment
  • one explicit link from lens or policy state to the next pool-side treatment
  • one repeatable way to preserve heterogeneity and frontier discipline without forcing illegal totalization

First-minute questions

  • Which still-live pool, frontier segment, or family region is actually under governance now?
  • Which lens or policy state is governing it?
  • Is the next lawful treatment widen, keep frontier, narrow to subset, sunset line, or reroute?
  • What event or threshold would justify changing that treatment next?

First output

The first useful output is one explicit pool-policy result that names the live pool, the governing lens or policy state, the current treatment (widen, keep frontier, narrow to subset, sunset line, or reroute), and the exact event that would justify changing that treatment next.

That result records how the pool will be treated next under the current exploration/exploitation policy; it does not replace one local C.11 choice record, one C.24 enactment plan, or one G.5 published selector result.

If that first output still cannot be written honestly, the current pool-policy result is not finished C.19 policy yet.

Problem frame

The E/E governor provides named, versioned policies and lenses that steer NQD generation/selection under lawful dominance and provenance constraints.

When C.11 has already made local choice among one fixed OptionSet explicit, C.19 begins where the question becomes policy over several still-live candidate lines, family regions, or frontier segments rather than one more local ChoiceResult record.

Immediate failure indicators for this pattern:

  • the current pool-policy result cannot name the still-live candidate pool it is governing
  • the governing lens or policy state is missing
  • the next pool-side treatment exists only as one vague promise to continue exploration later

If the question is still which single option should survive now, apply C.11. If the next artifact must already be one enactment-facing plan, apply C.24. If the retained set must be published for downstream consumption, apply G.5.

Problem

Ad‑hoc exploration mixes ordinal and interval folds, silently scalarises posets, and loses lens/policy provenance—undermining legality and reproducibility.

Forces

• Trust gates vs. discovery — graduation requires backstop confidence while maintaining explore_share. • Heterogeneity vs. focus — fairness quotas by family vs. depth on proven lines. • Lens expressiveness vs. audit — scalarised choices must not be called 'the frontier' and MUST record lens ids.

Solution

Causal data and causal-policy exploration hook

When an exploration/exploitation policy collects data to support a causal claim, changes intervention budget, learns a causal policy, evaluates a policy from behavior/logging-policy data, or treats a counterfactual strategy as a candidate line, the pool-policy result keeps C.19 authority and cites C.28 for causal-use support.

Optional PoolPolicyResult.causalUseSpec?:

PoolPolicyResult.causalUseSpec? {
  causalUseQuestionRef?: U.CausalUseQuestion
  targetCausalityLadderRung: CausalityLadderRung
  causalUseClaimKind: CausalUseClaimKind
  causalActionPolicyClass?: CausalActionPolicyClass
  causalEvidenceSupportBasis?: CausalEvidenceSupportBasis
  causalUseEvidenceDesignRef?
  offPolicyCausalEvaluationProfileRef?
  causalUseSupportRecordRef?: CausalUseSupportRecordRef
  causalUseSupportVerdict?: CausalUseSupportVerdict
  supportedUse: CausalUseSupportStatement
  unsupportedUse: CausalUseUnsupportedStatement
}

The causal-use support tail may be omitted only when the pool-policy result does not reach CausalUseActivation: it does not make, publish, rank, retire, deploy, or reuse a causal claim. If exploration or exploitation is justified by effect, counterfactual replay, causal policy support, or causal data collection, the support tail is present or the result is downgraded to a non-causal pool-policy reason.

What changes in practice: a frontier policy that explores "to learn what works", exploits a causal policy, or graduates a line because counterfactual replay looks better must declare the causal-use question, CausalUseClaimKind, causality-ladder rung, causal evidence support basis, and supported use and unsupported use before the pool-policy result can carry a causal claim.

What this does not authorize: [C.19](/generated/patterns/C.19) does not become causal identification, causal fairness, off-policy causal evaluation, or counterfactual-realizability authority; it governs pool treatment and redirects causal-use support to [C.28](/generated/patterns/C.28).

Define EmitterPolicy (regime key, params, ε, K, insertion/dedup) and selection lenses with a fixed pipeline (Eligibility → Dominance → Tie‑breakers); bind provenance (policy id, lens id) and guard promotions of Surprise/Illumination to dominance to explicit policy declarations.

Decision-subject clarification. Later choices are attributed to one declared DecisionSubject at explicit DecisionSubjectGranularity. Contexts publish measurement spaces and admissible policies as semantic frames; LOG profiles lenses and policies but does not enact choices. Depends on. C.18 NQD‑CAL (generators), C.17 Creativity‑CHR (measurements), Decsn‑CAL (objectives/constraints, scalarization lenses), B.3 (trust adjustments), Compose‑CAL (set aggregation; advisory).

EmitterPolicy (named profile). A context‑local, versioned policy with fields: { name, regimeKey ∈ {UCB, Thompson, BO‑EI, GP‑UCB, PES, InformationGain, …}, params, explore_share∈[0,1], temperature τ≥0, rebalance_period, wild_bet_quota≥0, backstop_confidence (assurance level), epsilon_dominance ε, cell_capacity K, **insertion_policy**, **dedup_threshold** }. Policies are referenced as U.EmitterPolicyRef by NQD generator call (C.18) and are conceptual lenses, not staffing/budget instructions. Ordinary default tokens remain governed by G.Core/[G.5](/generated/patterns/G.5); [C.19](/generated/patterns/C.19) explains their pool-policy consequences but does not become one rival default authority.

Decision-theory bridge. [C.11](/generated/patterns/C.11) governs theory-side choice among already-available options and the meaning of ProbeBudget, ValueOfInformation, and ValueOfComputation. [C.19](/generated/patterns/C.19) may consume such outputs only as criteria for pool policy, graduation, keep-frontier, or sunset treatment; it does not re-govern local choice doctrine.

Ordinary default routing (if policy is unspecified):Dominance: consume DefaultId.DominanceRegime from G.Core/[G.5](/generated/patterns/G.5); in ordinary Q-front use this means {Q components} with ConstraintFit=pass as eligibility gate. • Tie‑breakers: Novelty@context, ΔDiversity_P, Surprise; Illumination (telemetry over Diversity_P: coverage/QD‑score) MAY be used as a tie‑breaker but is not in the dominance set. • Archive: K=1, ε=0, deduplication in CharacteristicSpace. • Policy family: one uncertainty-aware explore policy family with one declared regime key and explicit change triggers; UCB-class with moderate temperature and explore_share ≈ 0.3–0.5 is one didactic starter profile, not the semantic default family. • Provenance (minimum): record DescriptorMapRef.edition, DistanceDefRef.edition, DHCMethodRef.edition, EmitterPolicyRef, InsertionPolicyRef, dedup_threshold?, TimeWindow, Seeds.

Scalarization lenses (policy‑level). A lens J_ℓ declares: (a) hard eligibility conditions (e.g., ConstraintFit=pass), (b) soft aggregation (weights/curves), (c) trust policy (how assurance/CL discounts enter). Conformance. A Context MUST name the lens used to pick from a frontier; scalarized rankings MUST NOT be presented as “the frontier”; the lens id MUST be recorded in provenance of each selection.

Promotion rules (policy).

  • Tie‑breaks. Surprise and Illumination MAY act as tie‑breakers; promotion into the dominance set MUST be declared by lens or policy id and captured in provenance.
  • Graduation. Profiles graduate from Explore→Exploit when backstop_confidence (B.3 level) and eligibility conditions are met.
  • Sunset/Pivot. Profiles failing VOI/backstop thresholds are sunset or pivoted at rebalance_period.

Explore/Exploit loop (per rebalance_period).

  1. Recompute frontier with trust discounts.
  2. Enforce explore_share (minimum attention on high‑Novelty, not‑yet‑proven profiles).
  3. Update generator temperature τ / emitter mix.
  4. Apply backstop_confidence to graduate; sunset stale probes.
  5. Satisfy wild_bet_quota by seeding fresh high‑Novelty candidates.
  6. HET‑FIRST — apply group‑fairness quotas by domain‑family and/or DPP/Max‑min repulsion before exploit lenses; log quotas and sampler policy id.

Named lenses (heuristics; policy‑level, not norms) The following lens profiles are illustrative heuristics. Contexts MAY reuse/modify them; they are not normative. • Frontier‑sweeper — maintain attention on the full front; promote only when backstop_confidence holds. • Barbell — enforce explore_share ≥ θ with a wild_bet_quota; otherwise exploit top‑trust region. • Spike‑first — pick highest Use‑Value subject to ConstraintFit=pass and a small Cost‑to‑Probe cap. • Safety‑first — minimize SafetyRisk subject to Use‑Value ≥ θ and ConstraintFit=pass. • Platform‑option — maximize Option‑Value under probe cost bounds. • Pilot‑then‑scale — optimize Use‑Value on pilot scope with BackstopConfidence ≥ L1; widen G once R holds. • Heterogeneity‑first (policy id). Eligibility → Dominance → Tie‑breakers; Hard gate: FamilyCoverage ≥ k, MinInterFamilyDistance ≥ δ_family; Fairness quotas: ≤1 candidate per sub‑family at pre‑front sampling; DPP/Max‑min sampler allowed. Conformance (lens recording). A decision that uses any lens MUST record its lens id alongside EmitterPolicyRef. (This restates and localizes C19-3.)

Explicit pool-policy result

A finished C.19 pass should publish one explicit pool-policy result rather than one atmospheric statement that exploration will continue somehow.

That result should state:

  • the still-live pool, frontier, or family scope under governance now;
  • the governing lens id or policy state;
  • the next treatment, chosen from widen, keep frontier, narrow to subset, sunset line, or reroute;
  • the event or threshold that would justify changing that treatment next.

A compact result may therefore state, for example:

  • poolScope = frontier_F
  • governingLens = barbell_policy_v2
  • nextTreatment = keep_frontier
  • changeTrigger = backstop_confidence reaches L1 for one retained line

or, for one narrower family region:

  • poolScope = family_region_beta
  • governingLens = heterogeneity_first
  • nextTreatment = narrow_to_subset
  • changeTrigger = quota satisfaction plus one explicit novelty floor

Those fields define the result: governed pool, governing lens, next treatment, and change trigger.

Closure rule over the live pool

A C.19 pass may close only when one explicit pool and one explicit next treatment are both visible.

  • Close as widen when the current frontier is too narrow for the declared exploration policy or when the evidence basis is too thin to justify current narrowing.
  • Close as keep frontier when several lines must remain live under the current lens and no narrower lawful subset is yet justified.
  • Close as narrow to subset when one declared lens now justifies retaining one smaller internal live set without pretending that one scalar winner has already been chosen.
  • Close as sunset line when one line or family region no longer clears the current lens, quota, or backstop requirements.
  • Close as reroute when the question has stopped being pool policy and has become local choice, enactment planning, or selector-facing publication.

One internal retained subset here is still one pool-treatment result. It is not yet one public Shortlist, RankedShortlist, or ShortlistId-bearing selector artifact. If the retained subset must be published for downstream comparison, handoff, or registry-facing consumption, C.19 closes only by rerouting to G.5.

If the result still cannot say which pool remains live, which lens governs it, and which event would justify changing the treatment, it is still unfinished pool policy rather than one finished C.19 result.

Minimal pool-policy record

The smallest useful C.19 record usually states:

  • livePool = ...
  • governingLens = ...
  • currentTreatment = widen | keep frontier | narrow to subset | sunset line | reroute
  • changeTrigger = ...
  • learningProgressSignal? = ... when an autotelic or capability-discovery reason materially supports widening, keeping the frontier live, or probing one goal region further
  • competenceModelRef? = ... when the pool policy depends on a model of what the system or method family can learn next
  • goalSpaceExpansionCue? = ... when the lawful next treatment widens the goal/task palette rather than merely re-ranking current candidates
  • goalSpaceExpansionPolicyRef? = ... when goal/task-space growth is itself governed by one declared archive/curriculum expansion policy
  • whyNotLocalChoice = ... when the result might otherwise be mistaken for C.11

A lawful short record may therefore read:

livePool = frontier_F
lens = barbell_policy_v2
currentTreatment = keep_frontier
changeTrigger = backstop_confidence reaches L1 for one retained line
whyNotLocalChoice = several family regions remain live

When currentTreatment = narrow_to_subset, livePool still names one internal retained subset or one live pool subset. It does not yet mint one public Shortlist, one public RankedShortlist, or one ShortlistId. If selector-facing publication is now required, the lawful [C.19](/generated/patterns/C.19) record closes as reroute to [G.5](/generated/patterns/G.5) rather than silently renaming the internal subset as though publication had already happened.

Goal/task-space growth is one pool-policy doctrine over the archive/curriculum side. When autotelic or capability-discovery pressure is active, cite one GoalSpaceExpansionPolicyRef together with the supporting LearningProgressSignal, CompetenceModelRef, or GoalSpaceExpansionCue; that doctrine may justify widen, keep frontier, or one further probe decision value, but it does not become default Q, does not rename the front, and does not publish one selector-facing shortlist without a [G.5](/generated/patterns/G.5) handoff.

If the record does not already state which pool remains live, what governs it, and what would change that policy treatment next, it is still one unfinished [C.19](/generated/patterns/C.19) result.

Worked closure slice

Three short contrasts keep the closure law practical.

Several family regions remain live. When the point is to keep several lines active under one declared lens, C.19 should not pretend it has already made one local choice:

livePool = frontier_F
lens = frontier_sweeper_v3
currentTreatment = keep_frontier
changeTrigger = one retained line reaches backstop_confidence L1
whyNotLocalChoice = three family regions remain live

One region should now be sunset. When one region no longer clears the active novelty floor or backstop, [C.19](/generated/patterns/C.19) should say so directly rather than leaving that retirement implicit:

livePool = family_region_beta
lens = barbell_policy_v2
currentTreatment = sunset_line
changeTrigger = reopen only if new evidence or quota deficit reactivates the region
whyNotLocalChoice = other regions still remain live under the same pool policy

The pool has already been narrowed and the next question is selector-facing publication. When one internal retained subset is already explicit and the next question is to publish it for downstream use, [C.19](/generated/patterns/C.19) should close by rerouting instead of naming that subset as though it were already one public shortlist artifact:

livePool = retained_subset_{option_B, option_C}
lens = pool_policy_completed
currentTreatment = reroute
changeTrigger = G5 publishes one selector-facing Shortlist or RankedShortlist now
whyNotLocalChoice = pool governance is already complete

Bounded shortlist from declared source sets

  • Treat Shortlist as the set emitted by one named lens from one declared source set, not as a synonym for Front.
  • If the mathematical set object must be named, treat it as the choice set underlying that shortlist rather than as one second public head.
  • When the current Context consumes the ordinary default DefaultId.DominanceRegime, keep DominanceSet equal to the declared current Q tuple and cite that consumed default rather than re-governing it here.
  • Novelty@context, DeltaDiversity_P, Surprise, and IlluminationSummary stay outside default dominance unless one declared PromotionPolicy promotes them.
  • If Use-Value belongs in Q, declare it there; do not let it drift between core objective and side note.
  • ExplorationArchive is the exploration-specific specialization of Archive; use Archive as the wider family head only when that exploration-specific subtype does not matter.
  • Resource bounds govern how much probing, comparison, or retention is warranted, but they do not by themselves redefine the front.
  • Decision under budget may draw from the front, from the archive, or from both, but the source set and the decision lens must be explicit.
  • The selected-set kernel floor here is:
    • one set-return comes first
    • one named lens acts over that declared return
    • one Shortlist is emitted from that lens-declared source set
    • one ShortlistId may later name that shortlist when it must be carried as one stable public token
    • one RankedShortlist may appear later when the shortlist is explicitly ordered
  • PortfolioMode may state how the selector operated, but it does not rename the emitted set result.
  • When the comparison question becomes load-bearing, the minimum mathematical substrate should stay visible:
    • the compared candidates live in one declared outcome or characteristic space
    • the archive may depend on one declared search, niche, or reachability space
    • the shortlisted result is emitted from one explicit selected-set return rather than from one hidden scalar winner
  • When a context-local creativity or novelty characteristic remains outside the declared Q tuple, keep that distinction visible rather than treating it as one silent override of the current dominance basis.

First public wording for shortlisted outputs

  • Prefer wording like shortlist from the declared Q-Front under LensId=... over wording that makes the shortlisted result sound like one second front.
  • When one stable emitted object must be cited across documents or tools, say ShortlistId for that shortlist rather than letting the token name replace the shortlist result itself.
  • If the shortlist later acquires order, say RankedShortlist and keep the prior shortlist result recoverable.
  • Reserve choice set underlying that shortlist for mathematical discussion, proofs, or object-level set operations.

Choice doctrine stays source-set explicit

  • State the declared source set and the declared decision lens in the same place as the shortlisted-choice rule.
  • CostToProbe, ValueOfInformation, ValueOfComputation, explore_share, and backstop_confidence may appear here when they justify choice from one declared source set.
  • Those terms explain why another probe, defer, or stop decision is warranted; they do not rename Front, Archive, or Shortlist.
  • When teams need a fuller account of budgeted probing or sequencing, add that as one separate resource-aware choice explanation rather than overloading the shortlist doctrine itself.
  • Selector-facing publications should keep speaking about the emitted set and its source set rather than trying to explain the whole budgeted-choice rationale there.

System grounding

A product-search or architecture-search team often keeps several family regions alive even after one tempting line starts to look best locally. A lawful C.19 result might therefore keep the frontier live under frontier_sweeper_v3 until one retained line actually clears the declared backstop_confidence, instead of collapsing the whole pool into one premature winner.

Episteme grounding

A SoTA pack often compares traditions that stay non-dominated for different reasons: one clears current evidence quality, one keeps broader transfer value, one preserves family coverage. The lawful C.19 result is then often keep frontier or narrow to subset, not one fake scalar champion.

Collective and contextual grounding

A regional or stakeholder-diverse pool may have to sunset one line while keeping others alive to preserve coverage, fairness quotas, or contextual fit. The practical point is that C.19 governs that pool-treatment decision only while the question under repair is still about the live set; once the result must become one local choice, one enactment plan, or one published selected set, reroute immediately.

Bias-Annotation

No global scalarisation of partial orders; ordinal scales excluded from arithmetic; all selections record lens id and policy id; notation/tool neutrality.

Conformance Checklist

  • C19-1 Each NQD generator call (C.18) SHALL cite U.EmitterPolicyRef (policy id + params) and the active InsertionPolicyRef/dedup_threshold when not inherited.

  • C19-2 The characteristic set and indicators used for dominance MUST be declared; eligibility conditions applied first. (References to C.18 generator operators are descriptive only; LOG exports no Γ.)

  • C19-3 If a lens is used, its id MUST be recorded; do not label scalarized top-1 as "frontier".

  • C19-4 Promotion of Surprise/Illumination into dominance MUST be explicit in policy.

  • C19-5 USM/RSG gate applies: policy actions SHALL operate within the Context's scope and enactable RSG states.

  • C19-6 Each selection lens MUST implement and document the pipeline Eligibility (ConstraintFit=pass) → Dominance (declared set) → Tie-breakers (declared). Any promotion of Surprise/Illumination into the dominance set MUST be named by lens/policy id and recorded in provenance.

  • C19-7 (LEX-AUTH trigger). Any change to EmitterPolicy defaults that affects domain-family quotas/samplers (HET-FIRST), or any change to DescriptorMap family coordinates, DistanceDef, or the δ_family threshold MUST be authored via E.15 LEX-AUTH. Any resulting LAT lives in the relevant LAT/evidence authority; the DRR need only carry the content decision itself plus any decisive evidence or validation consequence by value when that consequence materially shaped the choice (see CC-DRR.6). Record policy/card ids in SCR.

  • C19-8 When the Heterogeneity-first lens is used, provenance MUST include: (i) the family-quota vector (including the default triad quota k), (ii) the subFamilyDef id (from F1-Card) if sub-family quotas apply, (iii) the sampler class, seed, and policy id.

  • C19-9 When C.19 returns one pool-policy result, that result MUST identify the still-live pool or family scope, the governing lens or policy id, and the next treatment (widen, keep frontier, narrow to subset, sunset line, or reroute).

  • C19-10 If the question under repair is still local option choice, already one enactment-facing plan, or already one selector-facing publication result, C.19 MUST reroute rather than restate C.11, C.24, or G.5.

  • C19-11 If autotelic or capability-discovery evidence is used, the record MUST name the GoalSpaceExpansionPolicyRef when one governs widening and the LearningProgressSignal, CompetenceModelRef, or GoalSpaceExpansionCue that supports the pool treatment, and it MUST keep those signals outside default dominance unless an explicit promotion policy is recorded.

  • C19-12 If exploration/exploitation collects data for a causal claim, changes intervention budget, learns a causal policy, evaluates a policy from behavior/logging data, or treats counterfactual replay as support, PoolPolicyResult.causalUseSpec? MUST carry targetCausalityLadderRung, causalUseClaimKind: CausalUseClaimKind, causal evidence support basis when known, supported use and unsupported use, and relevant C.28 support refs.

Common Anti-Patterns and How to Avoid Them

  • Treating one scalarized top-1 as the frontier. Avoid by naming the governing lens and keeping the live frontier distinct from any lens-ranked pick.
  • Running exploration without one explicit next treatment. Avoid by ending each pass with one explicit pool-side action: widen, keep frontier, narrow to subset, sunset line, or reroute.
  • Letting Surprise or Illumination quietly become dominance criteria. Avoid by promoting them only through one declared lens or policy id and recording that promotion in provenance.
  • Absorbing neighboring questions. Avoid by rerouting fixed-option choice to C.11, enactment-facing call planning to C.24, and selector-facing publication to G.5.

Consequences

  • the result states whether the pool is being widened, kept live, narrowed, sunset, or rerouted
  • heterogeneity can remain lawful without pretending every frontier is one scalar winner
  • the cost is stricter provenance and the need to name lenses, policies, and change triggers explicitly

Rationale

C.19 exists because pool governance is neither local choice nor execution. Once several candidate lines remain live, the key question is no longer which single option should survive now; it is how the pool should be governed next under one explicit lens or policy. That question needs its own explicit pool-policy result, otherwise frontier drift, silent scalarization, and policy amnesia return immediately.

  • Post-2015 bandit and Bayesian-optimization practice treats explore/exploit policy as an explicit policy object, not as one hidden side effect of whichever candidate looked best first. The practical implication here is to emit one explicit pool treatment plus one change trigger, not one atmospheric frontier story.
  • Contemporary frontier and quality-diversity practice also distinguishes the live frontier from any scalarized pick taken under one declared lens. The practical safeguard is to keep keep frontier, narrow to subset, and sunset line as visible alternatives rather than silently totalizing the pool.
  • Modern pool-management and fairness-preserving lines keep coverage or heterogeneity pressures explicit until one declared reason justifies retirement or reroute. The practical implication is simple: sunset or reroute only when the current pool-policy result can already say why the pool no longer belongs to C.19.

Relations

C.27 temporal-claim relation.

  • C.27 may flag: a temporal claim that changes exploration, exploitation, narrowing, widening, convergence speed, or search cadence in a way that changes admissible use.
  • This pattern keeps: pool-policy result and explore/exploit governance, including keep frontier, narrow to subset, and sunset line.
  • Non-admissible use: faster narrowing is not automatically a positive result; it may collapse exploration health, diversity, archive coverage, or frontier discovery.
  • Exit: use C.19 for the pool-policy result; use C.27 only for the temporal-claim adequacy question when speed or change affects admissible use.

Builds on: Decsn-CAL, B.3. Coordinates with: C.11 for local choice among already-available options, C.18 for candidate generation and open-ended search, C.24 for post-choice enactment planning, G.5 for selector-facing publication, C.28 for causal-use question/rung/support vocabulary when pool policy is used causally, C.17, and G.9.

C.19:End

Bitter‑Lesson Preference (BLP)

One‑screen purpose (manager‑first). Establish, at governing policy level, the empirical Bitter Lesson: prefer general, scale‑amenable methods—those that improve with more data/compute/capacity and greater freedom‑of‑action—over bespoke narrow heuristics when safety and legality are equal. Exceptions require a transparent Scale‑Audit under the parity harness.

Builds on. C.19 (E/E‑LOG), C.24 (Agent‑Tools‑CAL; ATC‑2), B.3 (Assurance), E.3 (Precedence), E.5 (Guard‑Rails). Coordinates with. G.5 (Selector), G.8 (SoS‑LOG Bundles), G.9 (Parity), G.11 (Refresh‑Telemetry), A.0 (On‑Ramp). Keywords. general‑method preference; scale‑amenability; BLP‑waiver; iso‑scale parity; Scale‑Audit; slope vector; α/δ tolerances.

Problem frame

Bespoke heuristics can win locally but do not scale; general methods (search/learning/planning) improve with scale and transfer across bridges/planes. Without a standing policy, selectors drift toward bespoke local heuristics and single-winner leaderboards, violating parity and admissible order relations.

Policy clauses (normative; synchronized with Core)

BLP‑1 — Scale‑Audit requirement. Any DRR that selects a narrower/hand‑engineered method over a general/scalable alternative while claiming scale advantage, BLP override, selector-facing method preference, publication-facing method superiority, or durable project-side method preference MUST include a Scale‑Audit: (a) Parity harness: equal FreshnessWindows, a common ComparatorSet, replicates/seeds, set-returning evaluation; Dominance = ParetoOnly unless a CAL policy says otherwise (policy‑id cited). (b) Budget sweeps: vary compute, data, and FoA within a fixed safety envelope; pin any unsweepable knob and record the invariant. (c) Slopes & uncertainty: report ∂quality/∂compute, ∂quality/∂data, and (where applicable) ∂coverage/∂FoA, with CI/error bars and edition/policy pins in telemetry. Use bootstrapped CIs or repeated‑seed estimates; disclose heteroscedasticity handling. (d) Resources: publish Resrc‑CAL accounts (time/energy/FLOPs) and assurance deltas (B.3). (e) Objective vector: list Q/Risk/Cost and—only if policy promotes them—illumination/coverage telemetry metrics. (f) DoE recipe: for ≥2 active knobs, apply a fractional factorial or Latin‑hypercube with ≥ 3 levels per knob to avoid aliasing; justify any lower design. (g) Knee & regret tests: if claiming a heuristic wins, show either (i) a knee inside the audited window for the general method (per SLL‑5 policy thresholds) or (ii) budget‑constrained regret over the sweep where the heuristic dominates within CI.

BLP‑2 — Preference rule (with α/δ tolerances). Among admissible options with comparable assurance (within δ) and budget (within α), prefer the method whose slope vector Pareto‑dominates over the audited range; if no dominance within error bounds, prefer the more general method; else resolve by the E/E‑LOG tie‑breakers declared in policy. (Agentic contexts implement this as ATC‑2; BLP_delta_α/δ live in ATC.Policy.)

BLP‑2.1 — Valid waiver grounds (override transparency). Overrides of BLP‑2 are allowed only when: • Deontic override: regulation/ethics make the general method inapplicable (E.5/E.3). • Scale‑probe overturn: under iso‑scale parity in the declared ScaleWindow, the heuristic sustainedly outperforms with uncertainty accounted for. • Complementary bias: the heuristic is an inductive bias that improves the general method without blocking scale (graceful degradation as S grows). All overrides record a BLP‑waiver with rationale, responsible role, and expiry/review in the DRR.

BLP‑2.2 — Task-family specialization compatibility. A bounded task-family specialization remains BLP-compatible when it is produced by a general, scale-amenable substrate, when it acts as a complementary bias that does not block scale, or when it survives the ordinary BLP comparison discipline on the same declared task family and work target. If the user is not claiming scale advantage or overriding a general method, a bounded task-family specialization may be used with explicit task family, work target, budget guard rails, and evidence source or evidence locus. Full Scale-Audit is triggered by scale-advantage, override, selector-facing publication, publication-facing superiority, or durable reusable-method claim, not by the mere existence of specialization. BLP therefore governs whether the narrower current method was generated, compared, audited, waived, and overridden admissibly; it does not require the final local behavior at every moment to look maximally generic.

Low-human-overlap or newly discovered approaches remain admissible when the task family, budget guard rails, and evidence source or evidence locus are explicit by value and the same Scale‑Audit, α/δ, waiver, and override discipline is preserved. BLP‑3 — Minimal‑prescription default. Author rules‑as‑prohibitions (negative constraints) instead of stepwise scripts; encode limits in Φ policy tables (and Φ_plane) and allow agents to sequence autonomously within those constraints. Scripts are permissible only when mandated by safety/regulation or with compelling DRR evidence reviewed under E.3/E.5.

BLP‑4 — Heuristic‑Debt register (mandatory). Record Heuristic Debt only when an admitted heuristic functions as reusable method-family policy, selector-facing method preference, durable override of a general scale-amenable alternative, DRR-backed scale waiver, or project-side method choice that claims scale advantage or BLP override. Ordinary local bounded tactics that make no reusable-method, scale-advantage, selector-facing, or override claim may remain local and bounded without Heuristic Debt publication. BLP.HeuristicDebtEntry is a C.19.1-local or G.11-linked policy/debt entry; it is not a universal U.* record kind unless separately admitted through F.18, C.3, and E.9. For a live debt entry, record scope, responsible role, expiry/review window, and a de-hardening plan; track in CalibrationLedger/BCT and cite in SCR.

BLP‑5 — Continuous‑learning posture. Where product policy allows, enable feedback‑driven adaptation (preference learning, critique loops) within Guard‑Rails and privacy controls; disabling adaptation requires DRR justification and review date.

BLP‑6 — Precedence & safeguards. BLP is constitutional (instantiates P‑10/P‑11/P‑7/P‑1), but does not supersede Guard‑Rails (E.5) or precedence rulings (E.3). Where NQD/E/E‑LOG promotes illumination into dominance, BLP adopts that lens for the audited window.

BLP‑7 — Publication discipline. Scale‑Audit artefacts SHALL be exported to G.11 with edition pins, CI level, α/δ, ComparatorSet, and BLP.Policy@Context reference so downstream selectors can reuse evidence without re‑running audits.

Conformance Checklist (CC‑BLP)

  1. α/δ tolerances declared in DRR or via policy profile (and CI level stated).

  2. DRR includes a Scale‑Audit (BLP‑1a–g) with slopes, CI, edition/policy pins, and Resrc‑CAL.

  3. Selection cites BLP‑2 and precedence checks.

  4. Any heuristic that meets the BLP‑4 trigger is recorded as a BLP.HeuristicDebtEntry with scope, responsible role, expiry or review window, and de‑hardening plan; ordinary local bounded tactics do not create a debt entry.

  5. Authoring defaults to rules‑as‑prohibitions; deviations are DRR‑justified and safety‑anchored.

  6. Resrc‑CAL accounts and assurance deltas reported.

  7. Replicate counts/seeds and confidence intervals recorded for slope estimates; heteroscedasticity handling disclosed.

  8. Audit artefacts exported to G.11 with BLP.Policy@Context id.

  9. When a narrower specialist method is selected or returned for one declared task family, the record names the task family/work target and the Scale‑Audit, waiver, or override ground that keeps the choice BLP‑compatible.

Anti‑patterns & remedies

Single‑winner leaderboards; hidden budget mixing; promoting illumination into dominance without policy; missing edition pins; heuristics without expiry; slope estimates without CI or with aliased designs → remedy with G.9 parity + edition pins, explicit policy‑ids, DRR publication, Heuristic‑Debt entries, and BLP‑1f DoE discipline.

Elegant-math override. A specialized or elegant mathematical lens is selected over a more general or scale-amenable alternative because of elegance or prestige while scale advantage is live. Remedy: use BLP scale-audit when the claim is scale advantage; otherwise mark the lens as local and bounded by C.29 stop condition.

Archetypal grounding (post-2015; informative)

Source posture: this section is informative grounding for scale-amenable method comparison, not a current SoTA table. A concrete BLP claim still needs the local context, comparator set, alpha/delta tolerances, budget, assurance boundary, and source-currentness row named by the applying pattern or parity harness.

  • LLMs: prompt-programs, retrieval-augmented and MoE policies vs narrow task-specific pipelines; set-returning selection across editions/budgets.
  • RL & planning: model-based optimization/general agents vs hand-coded controllers (subject to alpha/delta and safety).
  • Preference learning: RLHF <-> DPO families.
  • QD/OEE: MAP-Elites/CMA-ME/DQD/QDax; POET/Enhanced-POET; illumination remains report-only telemetry unless policy promotes it.

Payload — exports

BLP.Policy@Context (UTS row; editioned): ⟨PreferenceDefault, α/δ tolerances + CI, Scale‑Audit recipe (G.9 link; DoE), WaiverRegister{reason, responsibleRoleRef, expiry}, E/E‑LOG lens policy‑ids, ATC.PolicyRef? (agentic), G.11.TelemetryPins⟩.

UTS row template (conceptual; pencil‑ready). BLP.Policy@Context := PreferenceDefault=(prefer‑general|neutral), α/δ=(α=…, δ=…, CI=…), Scale‑Audit=(parity=G.9; sweep=S={…}; DoE=factorial|LHD; kneeTest=policy‑τ), WaiverRegister=[{reason=…, responsibleRoleRef=…, expiry=…}], E/E‑LOG=(policyIds=…), ATC.PolicyRef=(…), TelemetryPins=(edition=…, seeds=…, comparatorSet=…).

Relations

Depends on: G.5/G.9 (selector/parity), G.11 (refresh telemetry), C.5 (Resrc‑CAL), C.18 (NQD‑CAL), C.19 (E/E‑LOG), F.7/F.9 (Bridges, CL/Φ/Ψ). Constrained by: E.5 Guard‑Rails and E.3 precedence.

C.29 mathematical-lens use relation

When a mathematical lens is chosen over a general, scale-amenable method because it is elegant, specialized, or theoretically prestigious, C.19.1 governs the scale-advantage and method-preference claim. A C.29 application may state CandidateMathObject, LensMappingMode, PreservedStructure, LostStructure, LensUseAdmissibilityValue, admissibleUse, nonAdmissibleUse, and StopCondition; it does not supply BLP compatibility, scale dominance, or waiver evidence.

If scale advantage is live, cite a Scale-Audit or BLP-waiver. If scale advantage is not live, keep the mathematical lens local and bounded by its C.29 stop condition.

Memory hook. Prefer what scales; explain when you don’t.

When E.23 selects between a Ralph-like general adaptive loop, a specialized object-family cycle, or a mixed operation-family set, C.19.1 governs the BLP comparison and waiver discipline. The local E.23 cost and risk prompt token_or_compute_cost + tool_cost + adaptation_attempt_cost + human_supervision_cost + rework_cost - avoided_loss_value is not a scalar quality score; it is a practical accepted-work cost account for deciding whether the next pass, added operation, or method-family switch is BLP-compatible. Repeated automation alone does not satisfy BLP; the record must still name the object under improvement, object-under-improvement evaluation, protected trade-offs, bounded cost and risk posture, and stop or switch condition.

C.19.1:End

Composition of U.Discipline (Discipline‑CAL)

Builds on. C.2 KD‑CAL (F–G–R & CL routing), A.19/G.0 CG‑Spec (comparability), F.9 Bridges (cross‑Context alignment), E.10 LEX (registers & twin labels). Coordinates with. C.21 (Discipline‑CHR, field health), C.23 (Method‑SoS‑LOG), F.17F.18 (UTS).

Problem Frame

Disciplines persist as knowledge canons (epistemes), codified practices & standards, and institutional carriers (journals, bodies, curricula). FPF needs a typed, provenance‑preserving way to compose these into a reusable holon of talk that travels across contexts admissibly. Composition must honour KD‑CAL lanes and the CG‑Spec Standard so that any numeric comparison or aggregation remains auditable and legal.

Problem

Without a composition calculus for disciplines:

  • fields degenerate into labels; editions and rival Traditions/Lineages blur;
  • cross‑Context reuse silently drops meaning (no Bridge/CL), or performs illegal aggregations (means on ordinals; unit mixing);
  • selectors (Part G) cannot admissibly gate methods because maturity and evidence are not tied to a field's canon and carriers.

Forces

ForceTension
Pluralism vs CohesionRival traditions must co‑exist ↔ a discipline holon must present a coherent public surface.
Locality vs FederationMeaning is context‑local (rooms) ↔ reuse needs Bridges with CL and recorded loss notes.
Rigor vs AgilityCG‑Spec legality, KD‑CAL lanes ↔ practical authoring and edition flow (UTS/DRR).
Didactic surface vs Assurance depthHuman‑readable Discipline Card ↔ auditable F–G–R & provenance.

Solution — the Discipline holon and Γ_disc

U.Types (minting & registers)

  • U.Discipline — a Holon that composes an EpistemeCanon, Standards/Practices, and Organisational Carriers into a durable unit of talk (R‑core name; twin labels).
  • U.AppliedDiscipline, U.Transdiscipline — subtypes of U.Discipline. (Kernel U‑types; LEX‑governed).
  • U.Tradition, U.Lineage — auxiliary holons that organise variants/editions within a U.Discipline.

Placement/LEX. U.Discipline and its subtypes are Kernel U‑types introduced under the Open‑Ended Kernel & Ontological Parsimony guards (A.5, A.11) and registered per E.10/F.17. This CAL uses them, it does not redefine them. If not yet present in A‑cluster, mark as “provisionally minted” and open a DRR to finalize placement (E.10 strata).

All are UTS‑published with twin labels; minting follows E.10 registers/prefix policy and A.11 parsimony.

What a U.Discipline is / is not

  • A U.Discipline is not a U.BoundedContext and not a Domain. Domain remains a catalog label (stitched to D.CTX + UTS): Discipline ≠ Domain is enforceable via E.10 LexicalCheck; any cross‑Domain/Context reuse MUST cite a Bridge (F.9) + CL + loss notes; penalties to R only; F/G invariant (USM/KD‑CAL).
  • Comparability of a discipline flows only through the discipline’s CG‑Spec entries (no ad‑hoc formulas).
  • Cross‑Context/Tradition reuse MUST use Bridge(s) with CL and loss notes; CL penalties route to R (KD‑CAL/B.3); F/G remain invariant.
  • Public naming surfaces obey LEX (EntityOfConcern / Description / specification-use; twin labels; banned heads); “discipline column” is didactic only and carries no semantics (enforced by LexicalCheck).

Constructor Γ_disc (CAL export)

Signature. Γ_disc : ⟨EpistemeCanon, StandardsSet, OrgCarriers, {Bridges}, Policy⟩ → U.Discipline Intent. Fold the three constituents into a U.Discipline, preserving provenance, publishing UTS cards, and enabling lawful comparability via referenced CG‑Spec rows. Obligations.

  1. Provenance & lanes. Each imported episteme/standard declares A.10 anchors and lane tags {TA, VA, LA}; freshness windows are recorded.
  2. Assurance fold. Use KD‑CAL weakest‑link on R with Φ(CL) (and, where applicable, Φ_plane for ReferencePlane crossings) table‑backed and monotone; publish policy ids. For any justification path P, compute R_eff(P) = max(0, min_i R_i − Φ(CL_min(P))); for parallel independent lines to the same claim take R(Γ) = max_P R_eff(P); F(Γ)=min along used paths. No thresholds inside CHR/CAL (Acceptance‑only). Unknowns propagate as {pass|degrade|abstain} to Acceptance.
  3. CG‑Spec guard. Any numeric comparison/aggregation in Discipline reports MUST cite the discipline’s CG‑Spec with lawful ScaleComplianceProfile (SCP), Γ‑fold, and MinimalEvidence; units/scale/polarity legality via MM‑CHR/CSLC precedes aggregation.
  4. Scale/Unit/Polarity legality. Before any comparison/aggregation, prove legality via MM‑CHR/CSLC and cite CG‑Spec characteristic ids used in the fold (A.17A.19).
  5. ReferencePlane guard. When crossings touch world|concept|episteme, apply CL_meta and route penalties to R only; record plane on the UTS row.
  6. Edition discipline. Changes to canons/standards that alter computed ⟨F,G,R⟩ create a new edition; DRR captures the rationale; UTS edition-continuity records transitions.
  7. No stealth globalisation. Cross‑Context mappings are by Bridge only; “by‑name reuse” is forbidden** even with similar labels.

Discipline ESG (state graph, informative surface)

Export a Discipline.ESG with named states and guarded transitions (e.g., Emerging → Consolidating → Codified → Fragmenting), where guards reference C.21 metrics (CHR‑typed; Scale/Unit/Polarity + freshness windows) and cite CG‑Spec ids; all thresholds live only in AcceptanceClauses (G.4). ESG is descriptive; all gating remains in CHR/CAL/LOG packs.

Archetypal Grounding (Tell–Show–Show)

SlotSystem (safety code in a factory)Episteme (discipline canon across editions)
ObjectProduction line with hazardous operations“Safety engineering” as entityOfConcern target (accident models, tolerable risk)
ConceptAcceptance clauses & evaluation templates bound to rigs/windowsCanon texts: causality models, design rules, proofs/benchmarks (e.g., formal knowledge bases, proof carriers, concept schemas)
SymbolLocal SOP/notation sets for checklistsNotation packages (CLIF, RDF/TriG, proof scripts)
Γ_disc assemblyFold {line‑specific standard, plant procedures, certifying unit} into Discipline: Safety‑Plant‑AFold {canon papers, formal models, journals/committee} into Discipline: Safety‑Engineering with Traditions (e.g., system safety vs resilience engineering)
Evidence lanesLA test campaigns (freshness windows), VA design proofs, TA tool qualsVA proofs over kinds, LA replications/meta‑analyses; TA for checkers

Bias‑Annotation

Lenses: Governance (naming/UTS), Architecture (CAL+CHR split), Onto/Epist (discipline ≠ domain; triangle fidelity), Pragmatic (authoring/editions), Didactic (twin labels; System/Episteme scenes). Scope: context‑local; no “global discipline”.

Conformance Checklist (normative)

IDRequirementPurpose
CC‑C20‑1 (CG‑Spec linkage).A U.Discipline SHALL declare the CG‑Spec ids and CHR characteristic ids behind any comparison/aggregation; thresholds live only in Acceptance clauses referenced by those CG‑Specs.Auditable comparability; no illegal ops.
CC‑C20‑2 (Bridge‑only reuse).Any cross‑Context/Tradition use SHALL cite Bridge id + CL + loss notes; penalties route to R only; F/G invariant.Prevent silent globalisation; align with KD‑CAL.
CC‑C20‑3 (ReferencePlane). For any crossing touching `worldconceptepisteme`, publish plane and apply Φ(CL) (and Φ_plane, where applicable) — both MUST be monotone, bounded, table‑backed; unknowns propagate as **{pass
CC‑C20‑4 (Γ_disc integrity).Γ_disc MUST record lane tags and freshness windows for all imported evidence; Φ(CL) MUST be monotone and table‑backed per policy.Deterministic assurance; hygiene of penalties.
CC‑C20‑5 (Edition & DRR).Discipline editions SHALL be recorded via UTS edition-continuity records with DRR links; no silent rewrites or renames.Traceable evolution.
CC‑C20‑6 (LEX/I‑D‑S).U.Discipline names SHALL follow LEX (twin labels; registers; banned heads). Domain mentions are catalog‑only.Register hygiene; avoid “Domain = Discipline”.
CC‑C20‑7 (Crossing visibility hooks).Any cross‑stance / cross‑Context / cross‑plane reference in Discipline materials SHALL publish a CrossingBundle for the crossing (E.18; Bridge+UTS through F.9, F.17, E.17, and E.18) and expose it via Expose_CrossingHooks (G.10‑3). Published crossings MUST be checkable for LanePurity (CL→R only; F/G invariant; Φ tables present) and Lexical SD (E.10) under the active GateProfile / GateChecks (A.21).Prevents implied crossings; makes provenance auditable & replayable.
CC‑C20‑8 (Discipline column is didactic).Any use of a “discipline column” in tables is didactic only; semantics are carried by UTS rows + Bridges; Domain remains a catalog stitch (E.10/F.17).
CC‑C20‑9 (Lexical firewall).Normative sections remain notation/tool‑neutral; vendor/tool tokens are avoided (see E.5.1).

Canonical rewrites (anti‑ambiguity)

  • “TDD discipline” → Tradition: Test‑Driven (Plain twin keeps “Tradition”).
  • “Safety Discipline Owner” → Holder#DisciplineStewardRole:Safety‑Context.
  • “ClinicalSafetyDomain Governance” → DisciplineSpec: Clinical‑Safety with comparability in CG‑Spec; the Domain mention remains a D.CTX + UTS catalog stitch.

Consequences

Benefits. Auditable field composition; lawful federation across traditions; selector‑ready maturity/evidence linkage; didactic surface for stewardship. Trade‑offs. Discipline authoring requires CG‑Spec literacy and Bridge hygiene; paid back by safe reuse and clearer governance.

Rationale

The calculus keeps entityOfConcern local, comparability lawful, and assurance explicit. It aligns with KD‑CAL’s weak‑link folds and CL routing, with CG‑Spec’s ScaleComplianceProfile (SCP) and Γ‑fold rules, and with LEX twin‑label governance. It avoids “phlogiston disciplines” by tying fields to measurable CHRs (C.21) and evidence lanes.

Relations

Builds on. KD‑CAL (C.2); CG‑Spec (A.19/G.0); Bridges (F.9); LEX (E.10). Coordinates with. C.21 (field‑health CHRs), C.22 (Problem‑CHR), C.23 (Method‑SoS‑LOG). Constrains. G.2 MUST publish TraditionCards/BridgeMatrix sufficient for Γ_disc to assemble ≥2 Traditions and ≥3 U.BoundedContext per SoTA synthesis to avoid monoculture. G.5 selector SHALL cite Discipline CG‑Spec ids and EvidenceGraph rows when admitting families.

C.20:End

Field Health & Structure (Discipline-CHR)

Purpose. Give FPF a typed, reviewable way to characterize the health, maturity, and structure of a scientific or engineering discipline, without collapsing into taste, anecdotes, dashboard views, audit labels, or single-number scores. The pattern defines a portable set of Characteristics and guards (legality, freshness, scope) that any Context can specialize.

This pattern supplies the CHR vocabulary of health for disciplines. C.20 composes the discipline; C.21 declares discipline-health characteristics and admissible readings; Part G may publish SoTA palettes or time-series views; Bridges keep cross-context meaning honest; penalties touch R only.

Status & placement. Part C (Kernel Extention Specifications) → Cluster C.I (Core CHRs/CALs). Depends on: MM-CHR (C.16), KD-CAL (C.2), USM/Scope (A.2.6), Trust & Assurance (B.3), E.10 (LEX‑BUNDLE). Coordinates with: C.20 Discipline‑CAL (what a U.Discipline is), G.2 (SoTA palette), G.12 (dashboard), G.0 (CG‑Spec registry).

Problem Frame

FPF treats disciplines as first-class holons (see C.20): they aggregate epistemes, practices, standards, institutions, and observed Work. Teams routinely say “the field is fragmented,” “standards are converging,” or “replication is improving,” but these claims are rarely typed (scale/unit/polarity) or replayable (evidence lanes, freshness, scope). C.21 supplies the CHR vocabulary: named Characteristics with CSLC typing, so discipline-health claims can be compared admissibly (CG-Spec) and monitored through time (G.12) when a project needs that use. Each published value declares ReferencePlane ∈ {world|concept|episteme} and DisciplineId (U.Discipline@UTS); cross-plane use applies CL^plane in Assurance (penalty to R_eff only).

Problem

Narrative health claims cause three recurrent failure modes:

  1. Illegality. Averaging ordinals, mixing units, or comparing incommensurate Contexts ⇒ nonsense roll-ups.
  2. Staleness. Health “scores” rarely declare freshness windows or evidence lanes (TA/VA/LA).
  3. Scope slippage. “The field” is left implicit; cross-Context reuse lacks Bridges & CL, leading to silent semantic loss. Any numeric comparison or aggregation cites a CG-Spec row (characteristics, ScaleComplianceProfile (SCP), Γ-fold, MinimalEvidence) before computation.

Forces

ForceTension
Comparability vs nuanceNeed global pictures without erasing local meaning (Context, traditions, cohorts).
Ordinal vs interval/ratioPowerful stats tempt illegal ops on ranks and categories.
Local evidence vs federationHealth must be computed in room (Context slice) yet projectable across rooms via Bridges & CL (penalties to R only).
Recency vs stabilityHealth evolves; time-series or dashboard views need freshness, not just cumulative history.

Solution — Discipline Health Characterisation (DHC)

Ontology quick sheet (normative, clarifying)

What “DHC” is. DHC is a CHR vocabulary pack that defines Characteristics + Scales/Units/Polarity for discipline health; it is not a document or a run. Artifacts.U.DHCPack (I-lane name; published as an episteme): the slot set (Characteristic/Scale declarations) for a Context. • U.DHCMethodSpec (S-lane): the computational specification(s) for deriving each DHC slot (e.g., replication‑window definition, CD‑index class), table‑backed; multiple per slot allowed, editioned separately. • U.DHCSeries (episteme w/ EditionSeries): a time‑indexed publication of computed DHC readings for a Discipline×Context, each value bound to …Ref.edition for every referenced method/metric/distance. Edition subjects. (i) DHCPack.edition — when the slot semantics (Characteristic/Scale) change. (ii) DHCMethodSpecRef.edition — when a computation method (formula/class/policy) changes. (iii) DHCSeries.edition — when the published series changes its content (not carriers). Publication. Releases are Work on Carriers; no edition change unless content changes per U.EditionSeries. Ref discipline. All bindings to packs/methods/distances use ...Ref.edition (dot on the Ref).

Define a portable minimal set of CHR slots. Each slot is CHR-typed (Characteristic, Scale/Unit/Polarity per A.17A.18), Context-local, and guarded by USM (Claim scope G), freshness windows, and evidence lanes (TA/VA/LA). Contexts may extend the set; conforming extensions do not alter scale types illegally.

“Health” is a vector of CHR‑typed coordinates; no single scalar is implied. Lawful scalarization lives in Acceptance (G.4) under an explicit CG‑Spec ScaleComplianceProfile (SCP) and Γ‑fold rules, and is never embedded in CHR.

Core Characteristics (kernel-portable names)

  1. ReproducibilityRate (ratio ∈ [0,1]; polarity ↑; ReferencePlane=episteme; CG‑Spec‑bound) Fraction of tested claims/benchmarks that independent teams replicate under a declared ContextSlice and Γ_time window. Lane tags: LA (validation) with TA (typing) for protocols.

  2. StandardisationLevel (ordinal; polarity ↑; ReferencePlane=episteme) {none, emerging, de facto, de jure}. No mean. Use medoid/mode; legal comparisons are ≤/=/> only. Tracks convergence on vocabularies, interfaces, or procedures.

  3. AlignmentDensity (ratio; polarity ↑; ReferencePlane=episteme; CG‑Spec‑bound) Density of Substitution Bridges (same senseFamily, CL≥2) between major U.Traditions per 100 DHC‑SenseCells (G.2 F‑hooks) in the SoTA palette. Substitution rule: free substitution permitted at CL=3; at CL=2 substitute only with extra‑guard (count in reporting, but this is not «free substitution») Units: bridges_per_100_cells. Cross‑Context use requires Bridge+CL; penalties → R_eff only.

  4. DisruptionBalance (interval; polarity = target band; ReferencePlane=episteme; CG‑Spec‑bound) Relative share of disruptive vs consolidating works within Γ_time using a registered CD‑index class (editioned; cite method id in UTS). Default plane: episteme. Publish the target band via Acceptance (G.4); not in CHR.

  5. EvidenceGranularity (Context-declared: ordinal|ratio; polarity ↑; ReferencePlane=episteme) If ratio: units = claims_per_artifact or anchors_per_claim (declare). If ordinal: publish level names and ORD_COMPARE_ONLY. Fineness of evidential units and declared envelopes (experiment cards, benchmark tasks, audit granules). Encourages smaller, well-scoped claims over monoliths.

  6. MetaDiversity (portfolio dispersion; polarity ↑ to band; ReferencePlane=episteme; CG‑Spec‑bound) Use entropy/HHI over MethodFamily/Tradition shares (method edition id in UTS); publish guard‑band as Acceptance binding; cross‑ordinal scalarisation is forbidden. Entropy/Herfindahl-type dispersion across U.Traditions, method families, or data regimes, bounded by a Context-declared guard-band (too low ⇒ monoculture; too high ⇒ incoherence).

Typing & legality. Each slot declares Scale/Unit/Polarity; illegal ops (e.g., mean on ordinals; unit mixing) are fail-fast per A.18/MM-CHR.

Engineering-grade and semio-substitution extension slots

Contexts MAY add these DHC slots when the discipline-health question includes engineering-grade reasoning, architecturing, optimization, prediction, comparison, assurance input, decision input, first-principles justification, mathematical-lens use, or source-publication overread. These slots remain discipline-health characteristics. They do not become evidence relations, assurance relations, gate decisions, mathematical-lens use, measurement legality, release permission, or project authority.

  1. EngineeringClaimJustificationRecoverability (ordinal; polarity ↑; ReferencePlane=episteme|world by declared claim; CG-Spec-bound when aggregated) Degree to which engineering-grade claims in the discipline or Context expose the exact justification that carries their force for the declared use. The justification may be a named construction, source, model, lens, evidence relation, characteristic relation, assurance relation, gate relation, method relation, or heuristic triage boundary, but it must cite the neighboring pattern governing the claiming FPF pattern when that force is live (A.10, B.3, A.15, A.20, A.21, C.16, C.29, or another governing pattern). Heuristic examples may carry recognition and triage only; prediction, comparison, optimization, falsification, assurance-input, decision-input, or architecture-readiness force requires the recoverable justification.

  2. SemioSubstitutionPressure (ordinal or ratio; polarity ↓ to band; ReferencePlane=episteme; CG-Spec-bound when aggregated) Degree to which discipline texts, patterns, dashboards, views, publications, source chains, or review artifacts substitute wording, publication form, record appearance, source appearance, or explanation fluency for the operative engineering entity, relation, work, evidence, assurance, gate, decision, method, or mathematical-lens claim. Lower pressure is healthier when the discipline keeps EntityOfConcern, episteme, publication, source, carrier, and project-side claim kind or admissible-use boundary separable and names the pattern governing the recovered claim for any claim being made or admissible-use boundary.

Extension guard. Activating either extension slot requires a local EngineeringClaimJustification note or semio-substitution note that names the claim kind being made or admissible-use boundary, neighboring pattern governing the claiming FPF pattern, admissible use, non-admissible overread, and stop or reopen condition. The note is a DHC value explanation, not a new evidence source, assurance case, gate, release record, or work authority.

Guard Macros (normative)

  • ORD_COMPARE_ONLY(x) — for StandardisationLevel (ordinal).
  • UNIT_CHECK(x) — forbid cross-unit aggregation (AlignmentDensity, ReproducibilityRate).
  • POLARITY_CHECK(x) — enforce declared polarity (↑/↓/target-band) per MM‑CHR.
  • FRESHNESS(x; window) — ensure values come from evidence within declared Γ_time; record valid_until; stale ⇒ {degrade|abstain} at Acceptance.
  • PLANE_NOTE(x) — record ReferencePlane; compute CL^plane on crossings; penalties → R_eff only.
  • LANE_TAGS(x; {TA|VA|LA}) — annotate contribution lanes.
  • SCOPE_COVERS(x; TargetSlice) — enforce USM coverage of the computation.
  • BRIDGE_CL(x; id, CL≥k) — on cross‑Context roll‑ups, require Bridge with CL; penalties route to R only. If planes differ, apply CL^plane and cite Φ_plane policy id. Hint: for AlignmentDensity reporting, set k=2 (CL≥2); CL=3 counts as free substitution.

Legality Matrix (extract)

OperationReproducibilityRate (ratio)StandardisationLevel (ordinal)AlignmentDensity (ratio)DisruptionBalance (interval)
meanOKFORBIDOKOK
medianOKOKOKOK
compare (<,>)OKOKOKOK
unit mixFORBIDn/aFORBIDn/a

Note: For MetaDiversity/EvidenceGranularity (ordinal) use median/mode; forbid affine ops; unit mix always fails.

Interfaces & Data Paths

  • Inputs. U.Discipline from C.20 (composition), SoTA Palette/BridgeMatrix from G.2 (DHC‑SenseCells included), EvidenceProfiles from G.4/G.6.
  • Outputs. Per‑Context DHC rows (these six slots), UTS Name Cards with twin labels (E.5/F.17F.18), Registry/RSCR hooks on method edition changes; feeds G.12 (time‑series).
  • Cross-Context reuse. Only via F.9 Bridges with CL and loss notes; Φ(CL) penalties applied to R (never F/G).

Archetypal Grounding (three fields)

Computer Vision (Benchmarks 2015→)

  • ReproducibilityRate. Ratio of independently reproduced results on ImageNet-style tasks within rolling 24 mo (LA lane).
  • StandardisationLevel. de facto for dataset specs and metrics in Vision_2024; emerging for robustness protocols.
  • DisruptionBalance. Use an editioned CD‑index class (e.g., Wu‑style disruption family) with method id; publish target band via Acceptance; annotate ReferencePlane=episteme.
  • AlignmentDensity. Bridges with CL≥2 across sub-traditions (supervised vs self-supervised).
  • MetaDiversity. Entropy across method families (CNN/ViT/Hybrid) kept within guard-band to avoid monoculture.

Biomedicine (Gene–Disease Associations)

  • ReproducibilityRate. Fraction of associations replicated in independent cohorts within Γ_time(36 mo); LA lane with TA (typing of protocols).
  • StandardisationLevel. de jure for certain reporting guidelines; emerging for pre-registration norms.
  • EvidenceGranularity. Move from “paper-level” to claim-level units (Context raises the score).
  • DisruptionBalance. Target band discourages sustained “novelty spikes” unbacked by replication.

Software Performance Engineering (SPE)

  • StandardisationLevel. emergingde facto for SLO taxonomies and trace schemas across vendors.
  • AlignmentDensity. CL-rated Bridges between tracing ecosystems.
  • ReproducibilityRate. Share of publicly replicable perf claims in rolling windows.
  • MetaDiversity. Balance across load models, failure modes, and toolchains.

Decision‑Making (2015→)

• ReproducibilityRate — share of causal effect estimates replicated across independent datasets within Γ_time; LA lane. • StandardisationLevel — emerging for identification checklists; de facto for SCM notation in leading stacks (ordinal; no means). • AlignmentDensity — CL‑rated Bridges between SCM/DoWhy‑style and RL/BO traditions per 100 DHC‑SenseCells. • MetaDiversity — dispersion across method families (SCM/RL/BO/DT) within guard‑band; entropy/HHI (units declared in CG‑Spec).

Evolutionary Architecture (software)

• ReproducibilityRate — fraction of architecture fitness results reproduced on independent workloads (rolling 18–24 mo; LA lane). • StandardisationLevel — de facto for ADR/ATAM patterns; emerging for continuous fitness protocols. • AlignmentDensity — Bridges across ATAM/SAAM/ADR style guides (CL≥2) normalised per 100 DHC‑SenseCells. • MetaDiversity — portfolio dispersion across patterns (microservices, event‑driven, layered) with guard‑bands; no ordinal arithmetic.

Characteristic reading and publication path

  1. Declare Context & TargetSlice. (USM) Name editions, Standards, env params, Γ_time.
  2. Collect evidence. Bind sources via G.6 EvidenceGraph; tag lanes and freshness.
  3. Compute DHC slots. Enforce Legality Matrix and Guard Macros.
  4. Bridge (if needed). Map via F.9; attach CL and loss notes; apply R penalties.
  5. Publish to UTS. Name Cards (Tech/Plain), twin labels; bind DHCMethodSpecRef.edition, DistanceDefRef.edition, and, where templates are used, DHCMethodRef.edition; register RSCR triggers (method change, ScoringMethod/NormalizationMethod edits).
  6. Publication view. Feed G.12 with time-series and guard-bands (disruption, diversity) when a dashboard or trend publication is live.

Bias-Annotation (E-cluster lenses)

  • Didactic. Plain names + twin labels; one-screen tables for managers.
  • Architectural. No ordinals averaged; all cross-Context movement goes through Bridges+CL; penalties never touch F/G.
  • Pragmatic. Freshness-aware; unknowns tri-state; values are decision-input cues, not trophies.
  • Epistemic. Evidence lanes explicit; reproducibility is LA, typing is TA; validation distinct from dashboard or report publication.

Conformance Checklist

This checklist verifies a DHC reading after the practitioner has selected the live discipline-health question. It is not an audit form and not a dashboard specification.

CheckPassing readingBoundary preserved
CC-C.21-1 CHR typing.Every DHC slot declares Characteristic, Scale/Unit, and Polarity, with CSLC legality visible before aggregation.Prevents health labels from becoming untyped opinion.
CC-C.21-2 Freshness.Published values carry a Γ_time selector and freshness window; stale rows route to `{degradeabstain}` in G.4 Acceptance.
CC-C.21-3 Plane.ReferencePlane is declared; cross-plane reuse publishes CL^plane policy id alongside CL, with penalties routed to R_eff.Keeps world, concept, and episteme readings distinct.
CC-C.21-4 Design/run tag.Each DHC row declares DesignRunTag ∈ {design, run} and does not mix design- and run-characteristics in one value or aggregate.Prevents design claims and run observations from collapsing.
CC-C.21-5 Lane tags.Each value tags TA/VA/LA lanes of contributing evidence.Keeps typing, validation, and live-assurance lanes visible.
CC-C.21-6 Ordinal discipline.StandardisationLevel remains ordinal: comparisons only, no means or z-scores.Blocks pseudo-quantification.
CC-C.21-7 Scope.All computations declare TargetSlice; USM membership is decidable for the declared use.Prevents free-floating field-health claims.
CC-C.21-8 Bridges.Cross-context comparisons or publications cite Bridge id and CL; penalties route to R_eff, never to F/G.Keeps local meaning loss visible.
CC-C.21-9 UTS.DHC rows are publishable as UTS Name Cards with Tech/Plain twin labels.Keeps names recoverable across contexts.
CC-C.21-10 Registry.DHC methods are table-backed; method changes bump DHCMethodSpecRef.edition and trigger RSCR.Prevents silent method drift.
CC-C.21-11 Unknowns.Unknown inputs propagate tri-state `{passdegrade
CC-C.21-12 Lexical firewall.Core narrative follows E.5.1 and does not use tool/vendor tokens as discipline-health kinds.Prevents vendor or tool labels from becoming characteristics.
CC-C.21-13 CG-Spec citation.Numeric comparison or aggregation in DHC cites CG-Spec: characteristics, ScaleComplianceProfile, Γ-fold, and MinimalEvidence.Keeps operations scale-legal.
CC-C.21-14 Phi policies.Phi(CL) and Phi_plane are monotone, table-backed, and published by policy id.Prevents hidden penalty functions.
CC-C.21-15 Ref discipline.Edition pinning appears as ...Ref.edition on the relevant reference field; bare ...Edition fields are repaired.Keeps edition subject explicit.
CC-C.21-16 Role kit, informative.Standard roles from F.4 may be used: DisciplineStewardRole, DHCMethodAuthorRole, DHCSeriesPublisherRole; values still declare design/run stance and ReferencePlane.Roles do not become evidence or authority.
CC-C.21-17 Engineering-grade and semio-substitution extensions.When EngineeringClaimJustificationRecoverability or SemioSubstitutionPressure is active, the DHC row names the neighboring pattern governing the claiming FPF pattern that carries live engineering claim kind or admissible-use boundary or semio-substitution repair, plus admissible use, non-admissible overread, and stop or reopen condition.The extension note is not evidence, assurance, gate passage, mathematical-lens use, release permission, work authority, or project certification.

Consequences

Benefits. Scale-legal comparisons; freshness-aware governance; explicit cross-tradition alignment; dashboard views that do not lie by averaging ranks. Costs. Some ceremony (scales, windows, lanes, bridges), offset by template macros and UTS automation. Risks avoided. “Phlogiston disciplines” (charisma-driven fields) surface as unhealthy in DHC readings; No-Free-Lunch preserved by G.5 (selector returns sets, not universal scalars).

SoTA-Echoing and rationale

SoTA/practice anchorWhat it changes in C.21Adoption stanceBoundary of non-overread
Open Science Collaboration (2015), Munafò et al. (2017), and current reproducibility/metascience practice on replication, transparency, claim granularity, and freshness.ReproducibilityRate, EvidenceGranularity, freshness windows, and evidence-lane tagging are live discipline-health characteristics rather than one global credibility score.Adopt and adapt: use reproducibility as one typed characteristic with scope, window, and evidence lanes.C.21 does not certify any single claim as true; claim evidence remains under A.10, G.6, or the evidence pattern governing the claim.
Fortunato et al. (2018) science-of-science framing and Wu, Wang, and Evans (2019) disruption-index family.DisruptionBalance is a banded characteristic, not a monotone novelty target; the method id and edition are declared before use.Adapt: use disruption/consolidation as a typed reading over a declared corpus and method edition.Disruption is not quality, truth, safety, or project usefulness by itself.
Standards and ecosystem-convergence practice in engineering disciplines.StandardisationLevel stays ordinal with comparison-only operations, and cross-context reuse goes through Bridge+CL rather than hidden averaging.Adopt lightly: use standardization as an ordinal characteristic and preserve local meanings.Standard status is not SoTA proof, evidence sufficiency, gate passage, or assurance.
Current plural-tradition and bridge-mapping practice in mature fields.AlignmentDensity counts CL-rated Bridges per declared DHC-SenseCells; it rewards recoverable substitutions without semantic collapse.Adopt: use explicit bridge/loss notes and keep penalties in R/R_eff only.A high bridge count is not a universal language, consensus, or authority claim.
Engineering architecture and semio-bias control practice from the current FPF architecture workstream.Adds EngineeringClaimJustificationRecoverability and SemioSubstitutionPressure as discipline-health extension slots.Adopt for FPF-facing engineering disciplines: evaluate whether engineering claim kind or admissible-use boundary and semio-substitution pressure remain recoverable through neighboring patterns governing those claims.These slots do not replace mathematical-lens use, evidence, assurance, gate, release, work, or project certification patterns.

The practical consequence is that C.21 reads discipline health through typed characteristics. It can feed dashboards or time-series publications, but the dashboard is only a publication view over DHC readings; it is not the discipline-health ontology and not project authority.

Relations

  • Builds on: A.17A.18 (Characteristic/CSLC), A.2.6 (USM scopes), B.3 (assurance lanes), C.16 (MM-CHR templates).
  • Coordinates with: C.20 (what a U.Discipline is), G.2 (SoTA palette and BridgeMatrix), G.12 (Dashboard operationalization), G.9 (parity harness for fair comparisons).
  • Constrains: G.10 (pack ships DHC rows + method ids), G.11 (refresh windows/decay), G.5 (selector may reference DHC only via admissible predicates; no cross‑ordinal scalarisation). Coordinates: F.9 (Bridges for cross‑Tradition comparisons).

Annex — Author’s quick template (copy-paste)

C.21.DHC(Context: <name/edition>; TargetSlice: <tuple>; Γ_time: <policy>)
  ReproducibilityRate:
    value: <0..1>   lane: LA   window: <…>   scope: <…>
  StandardisationLevel:
    value: {none|emerging|de_facto|de_jure}   compare_only: true
  AlignmentDensity:
    value: <ratio>   units: bridges_per_100_DHC_SenseCells   CL_min: 2   scope: <…>
  DisruptionBalance:
    value: <−1..1>   method: <CD-index class / edition>   target_band: [l,u]
  EvidenceGranularity:
    value: <ordinal|ratio per Context>   notes: <…>
  MetaDiversity:
    value: <entropy/HHI>   target_band: [l,u]
Guards: ORD_COMPARE_ONLY(StandardisationLevel), UNIT_CHECK(*), FRESHNESS(*), LANE_TAGS, SCOPE_COVERS, BRIDGE_CL(if x-Context)
Publish: UTS twin labels; RSCR triggers on method edition change.

C.21:End

Problem Typing & TaskSignature Assignment (Problem-CHR)

Purpose. Give FPF an admissible, minimal, and portable way to type a problem for downstream selector-facing use after the problem-side representation is stable enough for Principles-to-Work, eligibility, acceptance, or policy-governed choice. C.22.2-selector-facing use carries the first problem-framing record for a messy signal; C.22-selector-facing use attaches the stabilized problem to CHR-grounded traits and a minimal TaskSignature (S2) record for downstream selector-facing use. The TaskSignature attachment is Context-local, evidence-relation-traceable, tri-state-aware, and bridge-visible. TaskSignature is minimal but sufficient for eligibility, acceptance, and policy-governed choice.

Status & placement. Part C (Kernel Extensions Specifications) → Cluster C.I (Core CHRs/CALs). Depends on: C.16 MM‑CHR (measurement admissibility), G.5 (selector S2/S3), G.0 (CG‑Spec invariants). Coordinates with: G.4 (Acceptance and Evidence profiles), C.23 (MethodFamily admissibility and maturity), C.18 NQD‑CAL (QD and illumination), C.19 E/E‑LOG (emitters and policies), E.10 (LEX).

Intent

Operationalise No-Free-Lunch discipline in selection by making every run-time decision against a typed TaskSignature (S2), not a paragraph. A problem reaches C.22 when its problem-side representation is stable enough for a selector-facing typed attachment record; a task or work target is ready for selection only when that attachment can be made to a declared TaskKind, task family, or work target without pre-binding a method. Method absence, method contestability, or method-family ambiguity is a common practical cue for this transition, but it is not the ontology of problemhood. The signature is the smallest CHR-typed set sufficient to drive Eligibility -> Acceptance -> policy-governed selection without inadmissible arithmetic or silent coercions; crossings are reviewable (Bridge+CL -> R_eff only).

Term split used in this pattern

  • TaskSignature attachment means attaching one typed problem record to one declared task family or work target; it does not pre-bind a method.
  • ScopeSlice(G) means the claim-bounding scope cut over EntityOfConcernRef and scope; it is not an evidence-path slice and not a baseline-set slice.
  • threshold is not one undifferentiated family here:
    • articulation and closure thresholds stay with cue or prompt governing patterns such as B.4.1 and B.5.2.0
    • acceptance-gate thresholds stay with G.4
    • the work-measure threshold target used in specialization claims is only the declared success mark for the current task family or work target

ProblemCard@Context relation

ProblemCard@Context is the C.22.2-problem-side record-side record shape for stabilizing one context-bound problem representation before downstream Principles-to-Work (P2W).

A ProblemCard@Context record can be used to prepare ProblemProfile, TaskKind, or candidate TaskSignature material for later use. Binding to one TaskSignature is admissible only when the downstream selector-facing object is ready. If several downstream signatures remain plausible, keep them as candidate signatures rather than binding one chosen TaskSignature.

This relation does not move problem-card fields into TaskSignature. TaskSignature remains the minimal C.22 attachment record for eligibility, acceptance, and selection. ProblemCard@Context remains the reviewable problem-side record that carries the reason this problem, in this context, can proceed to P2W, characterization, comparison, search, refresh, retirement, or another governing pattern.

The corresponding claims are governed by their named governing patterns.

Problem Frame (DesignRunTag split; crossing-visible)

Selector-facing problem case For selector-facing C.22 use, a problem case applies when the problem-side representation is stable enough to attach or emit a minimal TaskSignature for eligibility, acceptance, and policy-governed selection. Method absence, method contestability, or method-family ambiguity is a common downstream reason for C.22 use, but it is not the only reason a ProblemCard@Context may be needed upstream. C.22 therefore does not define problemhood by method absence; it defines the downstream typed attachment record used once problem-side readiness is truthful. When the question under repair is still a symptom, contested framing, stale context, set-derived candidate, opportunity cue, or preselected work item, use C.22.2 before binding one chosen TaskSignature. When selection or synthesis of a method becomes live, strategy or policy is governed by G.5 and E/E-LOG; C.22 use does not introduce a strategy or policy kernel type. Unknown‑first discipline. Author S2 with unknown traits rather than coercions; SoS‑LOG branches MUST specify {admit|degrade|abstain|sandbox} handling for unknown via closed enums registered at UTS.

Un‑typed "problems" collapse into informal prose; selectors cannot filter or abstain admissibly; acceptance-gate thresholds leak into scoring; cross‑Context reuse is by name, not Bridge. We need a Context‑local descriptor that (i) obeys MM‑CHR admissibility (Scale/Unit/Polarity proven before any aggregation), (ii) records Assurance lanes (TA/VA/LA) per A.10 and ReferencePlane, (iii) carries tri‑state unknowns explicitly, and (iv) records crossing attestations (BridgeCard + UTS row) with Φ(CL)/Φ_plane policy‑ids.

Problem

Without typed descriptors, Eligibility and Acceptance degenerate into prose; inadmissible operations creep in (ordinal means; unit mixing); cross‑plane comparisons lose CL/Φ penalty assignment (penalties to R_eff only).

Forces

ForceTension
Parsimony vs sufficiencyFewer fields to avoid ceremony vs enough to drive admissible gating.
UnknownsMany traits are unknown in the initial problem record → tri‑state semantics must propagate to Acceptance without silent coercions.
CHR admissibilityNo mean on ordinals; no unit mixing; polarity & scale type must be declared before aggregation.
Locality vs portabilityProblem is in‑room; still must cross via Bridges, with CL and (if planes differ) CL^plane penalties → R only.

Solution — Problem‑CHR (fields) + TaskSignature (S2) attachment (normative)

Minimal CHR fields (tri‑state aware).

Selector-side field boundary. The fields below are live only after problem framing has been stabilized enough to ask eligibility, acceptance, selection, method-family, or policy-governed choice questions. They are not a universal problem-framing checklist and must not replace the C.22.2 Thin ProblemCard@Context pass for a messy signal. Each live field is CHR-typed (Characteristic, Scale, Unit, Polarity; MM-CHR discipline). Every predicate admits unknown (tri-state). Unknown-handling policy propagates {degrade|abstain|sandbox} per Acceptance profile or EvidenceProfile policy (recorded in SCR). (G.4/G.6 alignment)

Optional extension absence rule. If QD, OEE, archive, generator, parity, specialization, or another optional relation is not live for the current case, the corresponding optional fields are absent, not unknown. Use unknown only for a live field whose value is currently unknown. An absent non-live extension does not trigger {degrade|abstain|sandbox} propagation.

  • DataShape — data regime and admissible transforms (e.g., tabular, sequence, graph; density; stationarity claims).
  • NoiseModel — uncertainty class and robustness envelope (e.g., iid Gaussian; heavy‑tailed; adversarial budget).
  • ObjectiveProfile — objective heads (Scale, Unit, Polarity and ReferencePlane declared), polarity, and admissible order relations (lexicographic, Pareto, medoid or median where admissible). Weighted sums across mixed scale types are forbidden; ordinal heads use order-only guards. For QD tasks, explicitly enumerate quality heads, diversity or descriptor-space heads, and any policy-authorized QD contribution heads; see DominanceRegime below. Do not introduce a default QD score. If a scalar or set-scalarization policy is live, cite the governing CAL policy and keep dominance and telemetry roles explicit.
  • RegularityTraits — method‑relevant structure (convexity, differentiability, separability, monotonicity) as CHR‑typed predicates with guard‑macros (e.g., ORD_COMPARE_ONLY, UNIT_CHECK, POLARITY_CHECK). Include ConditionClass (e.g., stiffness/κ‑proxies) where applicable.
  • Constraints — explicit hard and soft constraint classes (feasibility predicates; ResourceEnvelope and RiskEnvelope). Acceptance-gate thresholds live in G.4 only; never inside CHR or code paths.
  • ShiftClass and stationarity — CHR‑typed claims about regime stability (iid | covariate‑shift | concept‑drift | adversarial). Default=unknown. Acceptance or flow use is governed by this field in gating; otherwise abstain.
  • EvidenceGraphRef (A.10) — carriers & lane tags (TA/VA/LA) with freshness windows; no self‑evidence; default Γ‑fold = weakest‑link unless CAL proves an alternative.
  • ScopeSlice(G) — the USM claim-bounding scope cut over EntityOfConcernRef and scope (discipline governance in CG‑Spec; Domain is a catalog mark only).
  • Size/Scale — size and condition proxies (n, m, κ, sparsity) with declared units; unit mismatch ⇒ {sandbox|refuse}.
  • Freshness — validity window for descriptors.
  • MissingnessMCAR, MAR, or MNAR (or mapped equivalents) per CHR.Missingness; MUST be honoured by Acceptance and Flows.
  • KindSetU.Kind[] for the selected entities addressed by the TaskKind; separates EntityOfConcern kind from Scope (USM).

QD and Illumination extensions (normative; ties to C.18 and C.19).

Use this extension block only when QD, illumination archive, set-return, or OEE generator relation is live for the current case. It is not part of every TaskSignature.

  • CharacteristicSpaceRef — reference to U.CharacteristicSpace, with declared d≥2; characteristics are CHR‑typed; ReferencePlane per characteristic; pin edition via CharacteristicSpaceRef.edition.
  • ArchiveConfig — archive topology (grid, CVT, or graph), resolution (bins or centroids), K‑capacity, InsertionPolicyRef (elite replacement, dedup, or novelty), and DistanceDefRef.edition (declare metric or pseudometric status and invariances; any normalisation MUST cite admissible scale transforms in CG‑Spec); admissibility follows CG‑Spec.
  • EmitterPolicyRef — pointer to emitter/governor policy (C.19) applicable to this TaskSignature; edition id recorded.
  • DominanceRegime{ParetoOnly | ParetoPlusIllumination}. Default = ParetoOnly (illumination remains report‑only telemetry unless CAL explicitly authorises ParetoPlusIllumination, policy‑id cited).
  • IlluminationSummary — a telemetry summary over Diversity_P; reported by default; excluded from dominance unless a CAL enables ParetoPlusIllumination (policy‑id cited).
  • IlluminationMap (parity‑run) — required IlluminationMap publication (grid, CVT, or graph per ArchiveConfig) recording coverage per niche or cell with DescriptorMapRef and DistanceDefRef.edition. Leaderboards as single‑score lists are forbidden; comparisons MUST be under CG‑frames.
  • PortfolioMode{Pareto | Archive}. Default = Archive: selectors preserve retained archive evidence (QD archives) rather than a single “best” set; ε‑fronts remain admissible for local decisions under CG‑Spec.
  • Budgeting — evaluation, time, and batch budgets, including E/E‑LOG exploration budget id; units declared (CG‑Spec).
  • TelemetryHooksPathSliceId, decay and refresh policy ids, and edition counters to record U.DescriptorMap and policy‑id updates upon illumination gains.
  • GeneratorIntent (OEE) — optional intent to use a registered GeneratorFamily (G.5), with pointers to EnvironmentValidityRegion, TransferRulesRef, and coverage and regret reporting expectations.

Admissibility. Before any numeric comparison or aggregation, prove CSLC admissibility (Scale, Unit, Polarity) and cite CG‑Spec.Characteristics; record ReferencePlane. Unknowns propagate as {degrade|abstain|sandbox}; no unknown→0/false coercions.

TaskSignature (S2) — attachment definition (design‑time + run‑time).

A TaskSignature is the minimal typed record consumed by selector-facing use: ⟨Context, TaskKind, TaskFamilyRef?, KindSet:U.Kind[], DataShape, NoiseModel, ObjectiveProfile, Constraints{incl. Resource/Risk Envelopes}, ScopeSlice(G), EvidenceGraphRef, Size/Scale, Freshness, Missingness, ShiftClass?, BehaviorSpaceRef?, ArchiveConfig?, EmitterPolicyRef?, DominanceRegime?, PortfolioMode?, Budgeting?, TelemetryHooks?, GeneratorIntent?⟩

Minimality rule. S2 carries only fields required for Eligibility→Acceptance→admissible selection; any additional traits derived at design‑time are recorded as provenance (UTS) but do not expand S2.

Values are CHR‑typed with provenance; traits may be inferred from CHR and CAL bindings (e.g., convexity known? differentiable? ordinal vs interval scales?) and from USM scope metadata. Unknowns are tri‑state; Missingness semantics MUST align with CHR.Missingness and be honored by Acceptance and Flows.

TaskKind names the governing kind of work or problem under this context. TaskFamilyRef? names one comparison-relevant family inside that task kind when specialization, transfer, or parity question is live. TaskSignature is the context-bound typed attachment record for one current case under that kind and scope cut. KindSet continues to name the selected entities addressed by the task kind; it is not a substitute for the task-family reference.

DesignRunTag hygiene. Do not mix DesignRunTag in one signature; record GateCrossings as CrossingBundles (E.18; Bridge+UTS through F.9, F.17, E.17, and E.18) when importing design‑time traits into run‑time.

Specialization-claim reference discipline (normative)

Any claim that one holder, dyad, team, or explicitly scoped specialist portfolio acquired usable specialization SHALL state one declared TaskFamilyRef or TaskSignature, one named work-measure threshold target, an adaptation budget, and the freshness or provenance basis for reuse. A method may be selected, refined, or retired as part of that story, but the method is not the bearer of the specialization claim. The attached task-family record should stay rich enough for the same task family and work target to remain admissible in C.22.1 adaptation signatures, G.5 specialization profiles, and G.9 adaptation parity without reconstructing the claim from narrative prose.

Low-human-overlap or newly discovered task families remain admissible when those task-family or signature references are explicit by value.

Provenance & planes.

Record Context and ReferencePlane for each value; on any cross-Context or cross-plane reuse, attach BridgeDescription + UTS row, apply CL (and, if planes differ, CL^plane) penalties to R_eff only; both Φ(CL) and (if used) Φ_plane MUST be monotone, bounded, and table‑backed; no “distance” language; penalties never mutate F/G. Record policy‑ids in SCR and cite Bridge ids on crossings.

Attachment & use.

  • Eligibility gates read TaskSignature against each MethodFamily.Eligibility (C.23) and CG‑Spec.MinimalEvidence for referenced characteristics.
  • Acceptance clauses (G.4) use these fields for acceptance-gate threshold predicates (acceptance-gate thresholds live in Acceptance only).
  • Selection kernel (G.5.S3) applies an admissible order (often partial); weighted sums across mixed scale types are forbidden. If only a partial order remains, return a Pareto (non‑dominated) set with tie notes. If PortfolioMode=Archive, the selector may return a QD archive (per ArchiveConfig) in addition to or instead of a Pareto set. Illumination enters dominance only if DominanceRegime=ParetoPlusIllumination is enabled by CAL (policy id cited); otherwise, QD telemetry values are reported but excluded from dominance.
  • When GeneratorIntent is present, G.5-governed selection may use a registered GeneratorFamily (POET‑class); the selection domain becomes pairs {environment, method}, with Environment guarded by EnvironmentValidityRegion and TransferRulesRef (C.23 wiring). Report IlluminationSummary as a telemetry summary over Diversity_P (report‑only by default) in telemetry; dominance remains unaffected unless policy changes as above.

Unknowns.

Every field admits unknown; downstream degrade, abstain, or sandbox behavior is explicit per Acceptance profile or EvidenceProfile; no implicit coercions.

Publication.

Output a ProblemProfile (...Description) that carries the bound TaskSignature, UTS Name Cards for any minted values (twin labels), and SCR-visible provenance (A.10 evidence relations, lane tags, freshness, ReferencePlane). Mark any vendor or tool examples as Plain‑register only (LEX V‑4); they are non‑normative.

Open‑Ended tasks (GeneratorFamily) (normative).

If the problem requires open‑ended generation of tasks or environments, S2 SHALL include GeneratorIntent with pointers to EnvironmentValidityRegion (admissible region for generated environments), TransferRulesRef (cross‑environment transfer constraints), and coverage and regret telemetry expectations. Selector outputs are then declared sets over {environment, method}; coverage and regret are reported telemetry values and IlluminationSummary is a telemetry summary (reported), excluded from dominance unless a CAL policy promotes them (policy‑id recorded in SCR; see DominanceRegime). Edition increments of CharacteristicSpaceRef.edition, DescriptorMapRef.edition, DistanceDefRef.edition, and (OEE) TransferRulesRef.edition, and the policy‑id associated with illumination increases SHALL be recorded in SCR.

Archetypal Grounding (Tell–Show–Show)

Tell–Show–Show hook (per E.8): label examples as Show‑1 (continuous ODE) and Show‑2 (MIP) and cite CHR guard‑macros in‑line so engineers can see which field supplied which Eligibility or Acceptance input. Explicitly annotate which S2 fields triggered each Eligibility and Acceptance decision (e.g., service_level@ordinal → ORD_COMPARE_ONLY, budget@ratio → unit alignment check).

A. Differential equations (continuous systems, solver choice). ProblemProfile. DataShape=ODE, stiff?=unknown, Size/Scale={n≈10^3}, ObjectiveProfile={↓error@ratio, ↑throughput@ratio}, Constraints={budget≤X, safety_gate@ordinal}, RegularityTraits={Lipschitz known?=unknown, Jacobian sparsity=high}, Missingness=MAR. Attachment. Selector consumes TaskSignature; eligibility filters MethodFamilies that require known stiffness or differentiability (unknown ⇒ degrade/abstain per family); Acceptance enforces safety_gate as ordinal predicate, not averaged (ORD_COMPARE_ONLY), and budgets with unit‑aligned sums (ratio). The selector returns a Pareto set; no cross‑ordinal weighting.

B. Mixed‑integer optimisation (planning and scheduling). ProblemProfile. DataShape=MIP, NoiseModel=deterministic, ObjectiveProfile={↓cost@ratio, ↑service_level@ordinal}, Constraints={SLA hard, workforce soft}, RegularityTraits={convex_relaxation=available}, Size/Scale={vars~10^5}, Missingness=MCAR. Attachment. CG‑Spec forbids means over service_level (ordinal); Acceptance holds acceptance-gate thresholds; Eligibility checks convex‑relaxation availability; Selection applies lexicographic guard (assumption‑fit ≻ evidence‑fit ≻ resource), compute R_eff with Γ‑fold, apply CL penalty to R only; if partial order remains, return a Pareto set.

Contemporary source references (informative): modern Julia ecosystems illustrate a registered outer interface with specialised implementations inside (e.g., DifferentialEquations.jl, JuMP), aligning with C.22G.5 multi‑method selection under NFL.

C. Quality-Diversity archive and declared set (illumination). ProblemProfile. DataShape=policy‑search; ObjectiveProfile={↑reward@ratio, ↑coverage@ratio (report‑only)}, DominanceRegime=ParetoOnly, PortfolioMode=Archive, CharacteristicSpaceRef(d=3, characteristics=CHR‑typed), ArchiveConfig(grid, res=32×32×16, K=1, InsertionPolicyRef=elite‑replace, DistanceDefRef.edition=v1), EmitterPolicyRef=v2, Budgeting{eval=1e6}, TelemetryHooks{PathSliceId=…}. Binding. Selector may return an archive; coverage and illumination are reported but excluded from dominance (default). Any change of DistanceDefRef.edition or Emitter policy is editioned and logged in SCR.

D. Open‑ended environment generation (POET‑class). ProblemProfile. GeneratorIntent{GeneratorFamilyRef=…, EnvironmentValidityRegion=… (CHR‑typed), TransferRulesRef=…, CoverageMetric=…}, PortfolioMode=Archive. Binding. Selector outputs {environment, method} pairs that pass Eligibility; TransferRules govern cross‑environment policy reuse; telemetry reports coverage and regret and IlluminationSummary with edition and policy‑id when improved.

Bias‑Annotation (LEX/discipline guards)

  • No minted U.Type “Strategy”. Strategy and policy remain roles inside G.5; keep “strategy” as Plain-register wording where it helps recognition, but do not introduce a new U.Type or strategy head.
  • Transdiscipline vs domain. Comparability flows through U.Discipline CG‑Spec; “Domain” is a catalog mark stitched to D.CTX + UTS; do not attach norms to Domain labels.
  • Plain twins and head selection. Use Description and Spec morphology correctly (I, D, S; E.10.D2).

Anti‑patterns (normative):

  • AP‑1 Pre‑binding a Method into S2 (“problem as if task”); Remedy: keep S2 method‑agnostic; bind only admissible traits.
  • AP‑2 Silent unknown→false or unknown→0 in Eligibility and Acceptance.
  • AP‑3 Cross‑ordinal averaging or ordinal–interval scalar mixes.
  • AP‑4 DesignRunTag chimera signatures (mixing stances).
  • AP‑5 Domain treated as governance (attach governance to U.Discipline and CG‑Spec, not Domain).
  • AP‑6 Implicit handling of data‑shift (assume iid); Remedy: declare ShiftClass (or unknown) and gate via Acceptance.
  • AP‑7 Tool or vendor tokens in normative text; Remedy: move to Plain‑register note; keep Tech references on CHR and CAL ids (LEX V‑4).

Remedies: tri‑state predicates; admissible order relations (lexi, Pareto, median, or medoid); explicit GateCrossing visibility through CrossingBundle (BridgeCard + UTS row + CL/Φ policy‑ids; E.18, F.9, F.17, E.17, and A.21 where live); Domain stitched to D.CTX + UTS only.

Conformance Checklist (normative)

  1. Minimal S2. S2 contains only fields necessary for Eligibility, Acceptance, and selection; any extra derived traits remain provenance.

  2. TaskSignature present (S2). Every exported TaskKind has a TaskSignature with all fields declared and CHR‑typed; unknown is an admissible value for each.

  3. CHR admissibility proven. Any numeric comparison or aggregation cites CG‑Spec by Characteristic id and proves CSLC admissibility; no mean on ordinals; no unit mixing.

  4. Unknowns propagate. Unknowns must map to {pass|degrade|abstain} in Acceptance and Eligibility; no implicit coercions; behavior recorded in SCR.

  5. Evidence lanes. A.10 evidence relations + Assurance lanes (TA/VA/LA) + freshness windows recorded; Γ‑fold default=weakest‑link unless proved otherwise.

  6. ReferencePlane guarded. ReferencePlane noted per value and per ObjectiveProfile head; on crossings apply CL (and CL^plane if planes differ); Φ(CL)/Φ_plane are monotone, bounded, table‑backed and documented in the CG‑Spec; penalties → R_eff only (F/G invariant).

  7. Acceptance thresholds live in CAL. No acceptance-gate thresholds in CHR or code paths; only in G.4 AcceptanceClauses.

  8. Selector admissibility. Selection uses admissible (possibly partial) orders; weighted sums across mixed scale types are forbidden; return a Pareto set when appropriate.

  9. Crossings visible. Any cross-stance/cross-Context reuse records BridgeCard/BridgeDescription + UTS row with CL notes and (if planes differ) CL^plane + Φ_plane.

  10. UTS twin labels. All exported cards include Name Cards with twin labels; Bridges carry loss notes.

  11. GateCrossing checks. Exported TaskSignature and any referenced crossings satisfy: (i) stance tagging (if used; informative only), (ii) CrossingBundle presence/consistency (E.18; F.9; F.17; E.17; A.21 when gate checks are live), (iii) LanePurity (CL→R only; F/G invariant; Φ tables present), and (iv) Lexical SD (E.10). Failures are blocking under the active GateProfile / GateChecks (A.21).

  12. QD fields (when QD is in scope). If PortfolioMode=Archive or QD heads are present, CharacteristicSpaceRef (d>=2), ArchiveConfig (topology, resolution, K, InsertionPolicyRef, DistanceDefRef.edition), and EmitterPolicyRef SHALL be present and CHR-typed; characteristics declare ReferencePlane.

  13. DominanceRegime default. DominanceRegime defaults to ParetoOnly; inclusion of illumination in dominance MUST be enabled by a CAL.Acceptance policy; the policy id SHALL be recorded in SCR.

  14. Telemetry. PathSliceId, decay and refresh policy ids, and edition counters for CharacteristicSpaceRef, DistanceDefRef, and EmitterPolicyRef SHALL be recorded; any illumination increase SHALL log the policy-id that triggered it.

  15. GeneratorIntent (when OEE is in scope). GeneratorIntent SHALL cite EnvironmentValidityRegion and TransferRulesRef (ids resolvable in G.5/C.23); absence => Abstain for OEE generator-family use.

  16. Budgets. Budgeting (evaluation, time, and batch) SHALL declare units and E/E-LOG exploration budget id when used.

  17. Archive admissibility. DistanceDefRef.edition and any novelty measures SHALL be CSLC-admissible and editioned; inadmissible operations => Abstain.

  18. Planes. ReferencePlane SHALL be declared for all QD heads or characteristics; plane crossings apply Phi_plane (penalty to R only).

  19. Unknowns. Unknown QD fields map to {degrade|abstain|sandbox}; no coercions.

  20. Specialization claims referenced. Any declared specialization on this TaskSignature SHALL name the task family/work target, named work-measure threshold target, adaptation budget, freshness or provenance basis for reuse, and enough attachment detail for the same claim to remain admissible in C.22.1, G.5, and G.9 use.

Interfaces & Data Paths

Inputs. ProblemProfile (...Description), CG-Spec ids, Evidence Graph Ref (A.10), D.CTX; CharacteristicSpaceRef, ArchiveConfig, and EmitterPolicyRef configs when QD is live; GeneratorIntent when OEE is live. Produces. TaskSignature under a declared Context field (S2) with provenance; SCR-visible fields; UTS Name Cards for any minted traits; archive, PortfolioMode semantics, and telemetry hooks declared when QD is live. Do not introduce TaskSignature@Context as a separate kind. Used by. G.5 (Eligibility and Selection kernel), G.4 (Acceptance and Evidence), C.23 (admit, degrade, and abstain rules and method-family maturity checks).

Consequences (informative)

  • Admissible selection. Selection is explainable and review-ready; every reason in/out cites TaskSignature fields, CG-Spec rows, and Gamma-fold contributors.
  • Local first, portable later. Context-local semantics are primary; Bridges make portability deliberate and costed (penalties to R only).
  • Frictionless downstream. G.1-G.5 use one single, typed TaskSignature; thresholds are cleanly separated into Acceptance; unknowns are not guessed.
  • QD and OEE-ready. Typed QD and GeneratorIntent fields make declared returned-set structure and open-ended generation contexts explicit, with admissible dominance, editioned distances, and policy-aware illumination.

Relations

Builds on: C.16 MM-CHR, G.0 CG-Spec. Coordinates with: G.4 Acceptance, G.5 Selector, C.18 NQD-CAL, C.19 E/E-LOG, C.23 Method-SoS-LOG. Constrained by: E.10 (selected EntityOfConcern, Description-episteme, specification-use, and publication-lane wording), E.18 (GateCrossing visibility and publication gating).

Practical use checks

  • If two candidate approaches are answering different TaskKinds or different ScopeSlice(G) cuts, a direct comparison is not admissible yet.
  • If specialization is the live specialization question, the task-family reference, threshold target, adaptation budget, and provenance basis should already be recoverable from the attached TaskSignature.
  • If crossing, normalization, or missingness changes what comparison means, state that in the signature and its cited refs rather than hiding it in code, local memory, or later prose.
  • If QD or OEE heads are in scope, archive and generator fields belong in the same typed signature rather than in a detached explanatory appendix.

Goldilocks hook (design‑time)

When generating candidate solutions for a TaskKind, aim for “goldilocks” slots (feasible‑but‑hard) so that the TaskSignature is informative (neither trivial nor impossible); this aligns with G.1 (goldilocks target, abductive provenance) and ensures the TaskSignature is informative (neither trivial nor impossible) for G.5 selection.

C.22:End

Task-family adaptation signature

Status: Stable

One-screen purpose (manager-first). Make a specialization claim publishable as one typed adaptation record over a declared TaskFamilyRef or TaskSignature, so later selector and parity work compares the same threshold target, budget burn, prior exposure, transfer, durability, downside, and corridor-entry field rather than reconstructing that story from narrative prose.

Builds on. C.22 (TaskSignature attachment and task-family anchoring), C.19.1 (BLP compatibility), A.15 (role, method, work-plan, and work-occurrence split for scout/probe work), C.24 (CheckpointReturn planning semantics), E.16 (budget enforcement). Coordinates with. G.5 (selector specialization profiles), G.9 (adaptation parity), G.11 (later telemetry and refresh reuse). Keywords. adaptation signature; task-family specialization; time-to-threshold; budget-to-threshold; prior exposure; corridor entry; stepping stone; transfer; retention; downside field.

Problem frame

Final task score alone does not tell whether a holder, dyad, or bounded specialist portfolio acquired usable specialization quickly, under what budget, with what prior exposure, whether the resulting competence transferred, or whether it entered a genuinely new solution corridor. If those elements are not published together, the adaptation claim splinters across task typing, probe notes, selector prose, and parity notes, and later readers can no longer tell what exactly was being compared.

Problem

FPF needs one compact way to publish a bounded specialization claim on the same declared task family and work target without retyping the task anchor from C.22 or silently pushing the adaptation-signature question into selector/parity prose.

Use this when

  • the live task-family adaptation claim is not only that a holder or dyad solved a task, but how fast it acquired usable specialization on a declared task family
  • comparison must stay honest about the work-measure threshold target, prior exposure, adaptation budget, transfer field, and reuse window
  • movement into a new solution corridor or stepping-stone family is part of the real novelty claim

What goes wrong if missed

  • adaptation claims collapse into vague got better language with no declared work-measure threshold target or budget-to-threshold account
  • parity later compares outcomes that were reached under different prior exposure, different work-measure threshold targets, or different reuse windows
  • nonhuman or unfamiliar solution corridors are either romanticized as novelty or dismissed as noise because the corridor entry was never typed

What this buys

  • adaptation speed becomes reviewable by value on the same declared TaskFamily and work target
  • later G.5 / G.9 portfolio and parity work can compare the same specialization object instead of reconstructing it from narrative prose
  • stepping-stone or solution-corridor movement becomes visible as one typed part of the adaptation claim rather than one afterthought

Forces

ForceTension
Threshold crossing vs final scoreA static outcome can look similar even when one system specialized much faster or more cheaply than another.
Local novelty vs reproducible evidenceCorridor-entry claims matter, but they are easy to over-romanticize when no baseline or entry evidence is published.
Task anchor vs adaptation-signature questionThe section must keep the adaptation-signature question readable without retyping task anchoring from C.22 or turning selector/parity law into the same pattern.
Reuse upside vs specialization costTransfer, retention, and downside matter to the same claim even when the first threshold crossing looks impressive.

Solution — one adaptation signature over the C.22 anchor

  • Use one shared adaptation-signature field set for this question. G.5, G.9, and later notes may cite or consume it, but they should not silently rename threshold, prior-exposure, transfer, downside, or corridor-entry terms.
  • When specialization is the live adaptation question, publish one adaptation signature bound to the declared TaskFamilyRef or TaskSignature, not one generic improvement claim.
  • The signature should expose at least:
    • thresholdTarget
    • timeToThreshold
    • budgetToThreshold
    • postThresholdEfficiency?
    • priorExposureDeclaration
    • transferTarget?
    • transferGain?
    • retentionWindow?
    • downsideEffect?
    • corridorEntryBaseline?
    • corridorEntryEvidence?
    • steppingStoneEvidence?
  • These fields stay anchored to the same work target and work-measure threshold semantics already declared by C.22, so adaptation is typed as movement toward usable specialization rather than as an ungrounded growth story.
  • C.22 continues to carry the declared task-family anchor, task typing, and baseline TaskSignature. C.22.1 narrows the adaptation-signature question to threshold timing, reuse, downside, and corridor-entry disclosure over that existing anchor.

Corridor, transfer, and durability discipline

  • If the adaptation claim depends on entering a new solution corridor, publish the corridorEntryBaseline first: the prior repertoire, baseline set, or comparison family relative to which corridor entry is being claimed.
  • Then publish the corridorEntryEvidence that marks real entry into that corridor rather than exotic accident, for example a reproducible solution class, a stable descriptor shift, or one explicit stepping-stone sequence.
  • If a stepping stone mattered, publish the stepping-stone evidence as part of the adaptation signature rather than treating it as retrospective color.
  • Corridor or stepping-stone notes do not replace the work-measure threshold account; they explain why the adaptation path matters, not whether the threshold was actually reached.
  • A fast threshold result is not yet enough to claim durable specialization.
  • If transfer to a neighboring task family is claimed, name the transfer target and the observed gain explicitly.
  • If retention is claimed, name the reuse or retention window rather than letting durability hide inside one isolated run.
  • If specialization harms neighboring task families, narrows reusable competence, or creates de-specialization cost, publish that in downsideEffect? rather than telling only the upside story.
  • If post-threshold performance matters to later exploitation, publish postThresholdEfficiency? so the claim is not trapped at the threshold-crossing moment only.

Worked moment

  • Two agentic research setups both eventually reach an acceptable threshold on a new catalyst-search task family.
  • One of them reaches threshold after a small probe budget, shows a declared transfer gain on one adjacent task family, and records that the winning path entered a previously unused solution corridor.
  • The other reaches threshold only after much larger budget and without any reusable transfer.
  • The adaptation signature makes that difference publishable without pretending that both runs express the same specialization story.

Consequences

  • Threshold speed, budget burn, prior exposure, and post-threshold efficiency become part of the same reviewable object instead of one after-the-fact prose explanation.
  • Selector and parity pattern applications can consume a stable upstream specialization object without minting shadow vocabularies.
  • Corridor-entry and downside fields stay visible in the same claim that celebrates the specialization gain, reducing romanticized novelty talk.

Rationale

The reader needs one place where the adaptation claim stays whole. C.22 keeps the task family and work target explicit. A.15, C.24, and E.16 may generate the probe, checkpoint, and budget evidence. G.5 and G.9 later compare several candidates or parity runs. C.22.1 keeps the specialization story readable across those neighbouring pattern applications by making threshold timing, reuse, downside, and corridor-entry field recoverable in one short read instead of forcing the reader to reconstruct it from scattered notes.

SoTA-Echoing

Claim 1. Current frontier adaptation work judges usable specialization by threshold-crossing under bounded resources, not by terminal score alone.

Practice source, local alignment, and adoption decision. Current QD and agentic-adaptation sources such as A survey on Quality-Diversity optimization: Approaches, applications, and challenges, Swarm and Evolutionary Computation 100:102240 (2026), FactorMiner arXiv:2602.14670v1 (2026-02-16), and SkillOpt arXiv:2605.23904v2 (2026-05-25) repeatedly separate threshold target, budget burn, transfer evidence, reuse evidence, and changed object/version from one final benchmark score. This pattern adopts that practical field set, adapts it through one TaskFamilyRef or TaskSignature-bound adaptation signature, and rejects generic got better narratives that leave threshold and budget semantics implicit.

Claim 2. Current open-ended exploration work treats corridor entry and stepping stones as evidence-bearing novelty signals rather than decorative commentary.

Practice source, local alignment, and adoption decision. Current QD/OEE source-use role/currentness plus current FPF C.17, C.18, C.19, G.5, G.9, and G.11 neighbours distinguish real corridor entry from one exotic sample by asking for explicit baseline, stable descriptor shift, reproducible solution class, or an explicit stepping-stone trace. This pattern adopts explicit corridor baseline/evidence discipline, adapts it as declared adaptation-signature fields, and rejects novelty talk that names no baseline, evidence source, or evidence locus.

Claim 3. Current selector and parity practice needs one stable shared field set for specialization claims.

Practice source, local alignment, and adoption decision. Current FPF selector and parity neighbours keep compared candidates reviewable only when candidates reuse the same published field set for threshold, prior exposure, transfer, retention, downside, and corridor-entry field. This pattern adopts that reuse discipline, adapts it by publishing one stable adaptation-signature field set here, and rejects silent downstream field redefinition in G.5 or G.9.

Evidence-source note. Peer-reviewed or archived frontier anchors carry the most direct evidence for threshold, budget, and parity claims. Fast-moving frontier lines remain explicit evidence for corridor-entry and open-ended exploration pressure only when the row names their local contribution; they are not a flattened single evidence status.

Source-bound anchor familySource-use role/currentnessWhat it disciplines in this pattern
QD / OEE corridor-entry workCurrent QD overview plus current FPF OEE/NQD neighbours.Corridor baseline, descriptor shift, stepping-stone evidence, and whether novelty is reproducible rather than one exotic sample.
Agentic adaptation benchmarksCurrent narrow source lines such as FactorMiner and SkillOpt when the task family is comparable.Threshold target, time-to-threshold, budget-to-threshold, prior exposure, and post-threshold efficiency under a declared task-family anchor.
Transfer / retention evaluationSource-use role/currentness supplied by the applying benchmark or neighbour pattern.Transfer target, retention window, downside, and reuse evidence so specialization speed is not confused with one isolated threshold crossing.

Relations

C.27 temporal-claim relation.

  • C.27 may flag: a claim that a holder, dyad, team, specialist portfolio, method, or agent acquires usable specialization faster on one declared TaskFamilyRef or TaskSignature.

  • This pattern keeps: threshold target, time-to-threshold, budget-to-threshold, prior exposure, transfer, retention, downside, corridor-entry evidence, and adaptation-signature fields.

  • Non-admissible use: generic "learns faster" wording without task-family anchors does not create a C.27 profile or a complete adaptation signature; faster threshold crossing is not durable specialization unless transfer, retention, downside, and corridor-entry evidence are stated when claimed.

  • Exit: downgrade to Dyn1 trend when only a trend is live; use C.24 when the question is only tool-use planning; use C.22.1 when specialization is the live adaptation question.

Builds on: C.22 TaskSignature anchoring, C.19.1 BLP compatibility, A.15 role, method, work-plan, and work-occurrence separation, C.24 scout/probe and CheckpointReturn semantics, E.16 budget enforcement. Coordinates with: G.5 selector specialization profiles, G.9 adaptation parity, G.11 later telemetry/refresh reuse.

Coordinates with: E.23 when a quality-improvement loop claims durable task-family specialization. C.22.1 carries the adaptation-signature fields for threshold target, time-to-threshold, budget-to-threshold, prior exposure, transfer, retention, downside, and corridor entry; it does not restate the E.23 loop method, E.22 review framing, or pattern-quality or DRR-adequacy object-under-improvement evaluations.

Constrained by: E.10 lexical discipline and E.19 pattern-quality review when this child section is newly landed or materially revised.

Not this pattern when

  • the claim only needs to name the task family and work-measure threshold target, with no adaptation-speed or transfer claim at all; ordinary C.22 anchoring is enough
  • the question under repair is already selector or parity law across candidate selected sets; that belongs to G.5 / G.9
  • the text cannot yet declare one work-measure threshold target, one prior-exposure stance, or one evidence source or evidence locus for corridor entry

Conformance checklist

  • CC-C22.1-1 An adaptation signature SHALL bind to one declared TaskFamily or TaskSignature, one work target, and one work-measure threshold target rather than one generic improvement story.
  • CC-C22.1-2 An adaptation signature SHALL publish timeToThreshold, budgetToThreshold, and priorExposureDeclaration; if threshold was not reached, the signature SHALL say so explicitly instead of implying success.
  • CC-C22.1-3 Any declared transfer, retention, post-threshold-efficiency, downside, corridor-entry, or stepping-stone claim SHALL be explicit by value with the target, baseline, evidence source, or evidence locus named, not left as narrative garnish.
  • CC-C22.1-4 This pattern may refine specialization timing and reuse claims over the declared C.22 anchor, but it SHALL NOT redefine acceptance-gate thresholds, task-family attachment, or selector/parity law governed by another FPF pattern.
  • CC-C22.1-5 Downstream selector/parity pattern applications SHALL cite or consume the same published adaptation-signature field set rather than silently redefining threshold, prior-exposure, transfer, retention, downside, or corridor-entry terms.

C.22.1:End

ProblemCard@Context

Type: Calculus (C) Status: Stable Normativity: Normative

Plain-name. Context-bound problem card.

Intent. Give a practitioner one compact problem-side record that turns a messy problem signal into a reviewable problem-side record before downstream Principles-to-Work (P2W) or selector use, while leaving claims outside the card to the governing FPF patterns that govern those claims.

Use this when. Use this pattern when a signal, anomaly, drift, risk, hypothesis, stakeholder pressure, set-derived candidate, underused capability, new constraint, new environment, opportunity-like cue, or solution-shaped request must become reviewable before task typing, method-family selection, work planning, evidence use, gate passage, autonomy control, or P2W. Also use it when P2W would otherwise use a slogan, wish, ticket-shaped task, preselected work item, or solution-shaped task as if it were reviewable problem-side output.

Do not use this when. Use another pattern directly when the question under repair is already work planning, method selection, evidence, provenance, assurance, gate decision, autonomy, archive, selected-set governance, mathematical-lens use, or ordinary discussion with no project-side move.

Builds on. E.2, E.9, E.10, C.2.P, A.6.P, C.16.Q, C.16, A.19, C.22, C.25, C.29, G.5, G.9, A.6.3.RT, and A.6.4.

Coordinates with. C.11, C.18, C.19, C.22.1, C.24, C.27, C.28, A.15, A.21, E.16, G.6, G.11, A.10, B.3, E.17, E.17.ID.CR, A.6.3, F.9, and E.18.

Boundary summary. C.22.2 use starts from messy problem-side signals and yields one reviewable ProblemCard@Context, a P2W-ready problem-side input for downstream C.22, or a stop with a governing-pattern cue for the claim being made, relation, or boundary outside the card.

Problem Frame

A working team can reach the beginning of development with symptoms, anomalies, stakeholder signals, constraints, risks, old solution evidence, comparison ideas, solution temptations, underused capabilities, new environments, and opportunity-like cues. Opportunity-like signals still need context, scope cut, not-wish reason, improvement or acceptance probe, and honest next move; they do not turn this pattern into an ideation pattern. If FPF only says "type the task" or "choose a method", P2W can start from a slogan, a ticket-shaped wish, or a solution-shaped task before the problem itself is reviewable.

Problematization becomes useful for FPF use when it makes the problem side explicit. A problem needs symptom detection, improvement check, acceptance probe or candidate acceptance criterion, mandatory constraints, risk condition, problem-formulation next-move reason, validation boundary, freshness or expiry, and a relation to candidate solution search. Many problems also arrive from a retained set: candidates, anomalies, hypotheses, non-dominated fronts, shortlists, selected sets, live pools, and retained stepping stones.

Current FPF already has patterns for archive, pool, front, selected set, parity, refresh, method selection, evidence, autonomy, gate, representation transition, bridge, and mathematical-lens use. The missing piece is a compact problem-side output that lets a practitioner see what is present before P2W use starts from the problem-side output and which current FPF pattern carries each heavier question.

The first-minute working question is:

Can I write or review a problem-side record that is specific enough to guide P2W, selection, acceptance, evidence, and first-principles or mathematical-lens use, while keeping archives, fronts, pools, selected sets, parity, evidence, autonomy, and work planning in their existing FPF patterns?

Thin First Use and Output Kind

Thin First-Use Form

The first substantive use of this pattern is the Thin form. It is a practitioner-facing prompt for writing the smallest reviewable problem card, not a demand to complete a field list.

A ProblemCard@Context is complete for its current use when it states:

  1. why this signal matters now;
  2. what problem representation is being carried under which context and scope;
  3. why this is not merely a wish, ticket, slogan, or preselected work item;
  4. what would count as improvement or an acceptance probe;
  5. what the honest next move is.

The Thin form asks for:

  • the problem signal or selected-problem cue: what made the practitioner stop before downstream task typing or work selection;
  • context grounding and scope cut, including what is outside the current problem;
  • the reason this is not merely a wish, slogan, ticket, or preselected work item;
  • a provisional improvement check or acceptance probe;
  • one honest next move: P2W-ready, characterize, compare, search, refresh, retire, archive, abstain/no-change, or apply the FPF pattern governing the named claim kind, relation kind, or boundary that changes the problem-card move.

If the Thin form lacks an improvement check or acceptance probe, it may preserve the signal and choose characterization, comparison, search, refresh, retirement, archive, abstain/no-change, or governing-pattern application for the claim being made; it must not declare P2W-ready.

Only after the Thin pass is legible, recover the output-kind boundary:

C.22.2 - ProblemCard@Context is the compact problem-side output under current C.22.

C.22.2 - ProblemCard@Context is the pattern heading. ProblemCard@Context is the C.22.2 problem-side record shape; an instance is a reviewable problem-side record before P2W. ProblemCard@ContextRef may be used as a reference form when downstream text cites such an instance, but it is not a separate durable kind unless a separate naming or kind decision approves one under F.18 and A.6.P. The Tech heading remains C.22.2 - ProblemCard@Context. Plain-register glosses or section-local practitioner labels may appear in this pattern, but those labels do not replace the Tech heading.

Local labels in this pattern are local to the C.22.2 record shape unless a separate accepted FPF naming or kind decision assigns them a broader FPF kind. This includes problem-formulation next-move reason, validation boundary, risk condition, solvability band, P2W-ready, reviewable, stale, refreshed, retired, archived, abstain/no-change, and firstPrinciplesCue; they do not create FPF kinds, gate statuses, state-machine kinds, or local mathematical-lens objects. When a claim outside C.22.2 is live, do not mint a local reference field for it; name the governing FPF pattern, claim kind named by value, project-side reference when known, and stop condition in the next move or source cue. When a mathematical or first-principles cue is live, cite C.29; local problem-formulation next-move reason names only why the problem formulation or structure cue is worth reviewing or moving onward from C.22.2; C.29 carries mathematical-lens use and the problem-formulation next-move reason for that lens.

Reference labels ending in Ref are reference roles, not object names. This includes ProblemCard@ContextRef, setContextRef, rivalProblemFormulationRef, and representationOrWordingUseRelationRef; do not shorten or promote them into local object kinds such as ProblemCardRef, SetContext, RivalFrame, or RepresentationRelation.

@Context means that the card is bound to declared context grounding: a named U.BoundedContext, a project-side context reference, or an explicitly bounded practice situation with recoverable local meaning. Domain or practice wording may identify the informative locus of the problem, but it does not replace context grounding. A broad label such as healthcare, education, engineering, research, or operations is not context grounding by itself. When domain or practice wording is used for context grounding, recover the named bounded context, project-side context reference, or explicit bounded practice situation and state what local meaning or rule is being used. The card does not assert global problem identity outside that declared context grounding.

Plain gloss for P2W-ready: problem-side input ready. It means ready as input to downstream P2W or selector reasoning, not ready to execute work, pass a gate, or select a method.

Required Solution Moves

The C.22.2 Solution is organized around practitioner moves from signal to reviewable problem to one admissible next move, not around schema completion.

  1. Capture the symptom, anomaly, risk, stakeholder cue, drift, hypothesis, or other source signal before naming the problem.
  2. Stabilize the cheap problem-side record: context grounding, scope cut, EntityOfConcern when it changes the problem-side move, primary viewpoint or role concern, and provisional problem framing.
  3. Make action possible by separating the symptom detector, improvement check, candidate acceptance criterion, optimization target when live, monitored risk signal when live, and proxy-distortion risk when an indicator can be gamed or substitute for value; then state mandatory constraints, risk condition when live, and intended next move before downstream selection.
  4. Pay only for live complexity: add conditional fields only when their kind is live for the problem-card move; otherwise stop at the lighter card or name the governing FPF pattern and claim kind named by value that must be used next.
  5. Run the representation-continuity check: if the problem formulation changes the EntityOfConcern, representation scheme, diagram, functional description, or TGA path interpretation, name the representation-transition, retargeting, bridge, structural-reinterpretation, or wording-use relation before reusing an inherited local cue or readiness disposition.
  6. Close by the honest next move rather than by a completed form. A filled card without a truthful next move is not a successful C.22.2 result.

Cheap-stop rule: the smallest card that gives a truthful next move is sufficient. A conforming C.22.2 use must not require heavier fields merely because the full field list exists.

First practitioner pass before governing-pattern cues:

  1. Capture the problem signal or selected-problem cue, context grounding, and scope cut.
  2. State why it is not merely a wish, slogan, ticket, or preselected work item.
  3. State the provisional improvement check or acceptance probe.
  4. Choose the honest next move. Use the relation boundary aid only when a conditional relation is live.

This is the Thin-form writing order, not a completion sequence for the whole pattern. It adds no fields; it keeps the practitioner on the smallest truthful card before Standard or High-relation material is paid for.

Relation Boundary Aid

Use this aid only after the Thin ProblemCard@Context is legible: signal, context grounding, scope cut, not-wish reason, improvement check or acceptance probe, and honest next move. It is not a second writing order and not a catalogue of other patterns. It answers one question:

Which claim being made, relation, or boundary changes the problem-card move, and which FPF pattern governs that item?

If the item does not change the current problem-card move, leave it out of the card. If it does change the move, keep only the local cue or reference that makes the card reviewable, then apply the governing pattern for that claim, relation, or boundary.

Live item that changes the card moveLocal ProblemCard@Context contentGoverning pattern for that item
Characterization, measurement, indicator, Q-bundle, comparison, acceptance, or parityCharacterization cue, acceptance probe, candidate criterion, comparator/window cue, and the current reason the item changes the next move.C.16, A.19, C.25, G.0, G.4, or G.9 according to the relation named by value.
Archive, pool, front, shortlist, selected set, retained candidate, or set-return sourcesetContextRef, source-set kind, selection or retention criterion, budget/window when live, and non-scalar next move.C.18, C.19, G.5, G.9, G.11, A.6.P:7a, or C.16.Q according to the relation named by value.
Method family, work planning, performed work, result record, evidence, provenance, assurance, gate, or autonomyProblem-side cue, source reference when it changes formulation, and stop condition before that outside use.G.5, A.15, A.10, G.6, B.3, A.21, or E.16 according to the claim named by value.
Temporal, causal-use, representation-transition, retargeting, bridge, structural-reinterpretation, or wording-use relationRelation reference plus the inheritance boundary: what can be reused from the old card and what must be reopened.C.27, C.28, A.6.3.RT, A.6.4, E.17, F.9, E.18, or E.10 according to the relation named by value.
First-principles or mathematical structure cueCandidate structure, preserved and lost structure when live, practical payoff for problem formulation, problem-formulation next-move reason, and stop condition.C.29 for mathematical-lens use; A.6.0 for a U.Signature(profile=FormalSubstrate) declaration when that signature declaration is live.
Agentic safe probe or world-affecting next moveProbe need, risk condition, bounded next move, and the safety named by value, autonomy, gate, work, evidence, or assurance claim kind that blocks local action.C.24, E.16, A.21, A.15, A.10, G.6, or B.3 according to the relation named by value.

Over-capture symptom: the practitioner spends the pattern use classifying FPF patterns while the problem signal, context, scope, improvement check, acceptance probe, and next move remain unstable.

Repair: return to the Thin problem-side action. State the signal, context, scope, why this is not merely a wish, ticket, slogan, or preselected work item, the improvement check or acceptance probe, and the honest next move. Reopen this aid only for the claim, relation, or boundary that changes that move.

Use Boundaries and Profiles

Use C.22.2 when a signal must become a problem-side record before downstream task typing, P2W, method-family selection, work planning, evidence use, gate passage, autonomy control, or selected-set use. A known method does not close this pattern when the problem signal, scope, acceptance probe, or EntityOfConcern remains unstable.

Use another pattern directly when the question under repair is already that pattern's EntityOfConcern or governed relation: A.15 for work planning or performed work, A.10/G.6/B.3 for evidence, provenance, or assurance, A.21 for gate decision, E.16 for autonomy, C.11 for a local choice among explicit options, and C.18/C.19/G.5 for archive, pool, front, or selected-set governance. C.22.2 may still preserve the problem-side cue or reference that explains why that pattern is now live.

Use profiles as record budgets:

  • Thin profile: signal, context grounding, scope cut, not-wish, not-slogan, not-ticket, or not-preselected-work reason, provisional improvement check or acceptance probe, and one honest next move.
  • Standard profile: Thin fields plus the live comparison, acceptance, risk, validation, freshness, unknown-handling, or P2W-readiness fields needed for downstream use.
  • High-relation profile: Standard fields plus only the relation references needed when public, disputed, high-risk, set-derived, cross-context, evidence-adjacent, autonomy-adjacent, gate-adjacent, agentic, temporal, causal, representation, or Part-G relations are live.

Stop at Thin when it gives a truthful next move. Stop at Standard when it is enough to emit or bind a minimal TaskSignature, TaskKind, or ProblemProfile. Apply the governing FPF pattern for the claim being made, relation, or boundary instead of enlarging the card when the issue under repair is no longer the problem-side record itself.

Field Labels and Liveness

The first problem-side move is to make one problem usable before P2W by stating these field labels when they are live for the case:

  • problem signal;
  • source signal reference: prior solution-use evidence, environmental drift observation, new constraint, new environment, underused capability, opportunity-like cue, risk signal, anomaly, hypothesis, stakeholder signal, accepted local theory, or safe-probe or environment cue;
  • domain or practice locus when helpful, plus the context grounding that carries local meaning;
  • EntityOfConcern or project-side FPF kind or reference named by value when it changes the problem-side move;
  • context grounding;
  • primary viewpoint or role concern;
  • scope cut;
  • symptom detection;
  • problem hypothesis or cause-theory cue;
  • rival-frame reference when multiple plausible problem frames remain live;
  • improvement check;
  • comparison-and-acceptance cue or acceptance-criterion reference;
  • characterization relation;
  • characteristic or Q-bundle relation;
  • indicator selection;
  • comparability or parity relation, or explicit current reason it is not needed;
  • mandatory constraints;
  • risk condition;
  • problem-formulation next-move reason;
  • validation boundary;
  • freshness or expiry condition;
  • unknown handling;
  • setContextRef when a set, pool, front, archive, shortlist, selected set, or portfolio context is live;
  • firstPrinciplesCue for a first-principles or mathematical structure cue that changes problem formulation;
  • governing-pattern cue when a claim outside C.22.2 changes the problem-card move: governing pattern for that claim, relation, or boundary; claim kind named by value; project-side reference when known; and stop condition;

Field liveness for C.22.2 is determined as follows:

Field liveness classRequired treatment
Always-core problem-card identity fieldsState the problem signal or selected problem cue, context grounding, EntityOfConcern when it changes the problem-side move, scope cut, and the current reason this is not just a wish, slogan, ticket, or preselected task.
Conditional-live fieldsState source signal reference, domain or practice locus when helpful plus the context grounding that carries local meaning, viewpoint or role concern, symptom detection, problem hypothesis or cause cue, rival-frame reference when multiple plausible frames remain live, improvement check, comparison-and-acceptance cue or acceptance-criterion reference, characterization or comparability relation, characteristic or Q-bundle relation, indicator selection and indicator role, mandatory constraints, risk condition, problem-formulation next-move reason, validation boundary, freshness or expiry, unknown handling, setContextRef or set-source cue, first-principles cue, and representation-transition, retargeting, bridge, structural-reinterpretation, or wording-use relation reference when that relation affects reviewability.
Exact-pattern cueWhen a claim, relation, or boundary outside C.22.2 changes the card's next move, state only the source cue or reference needed by the problem card, plus the governing pattern and claim kind named by value to use next. The named pattern carries the outside use.

Field absence rule: if a conditional field kind is not live, the field is absent, not unknown. Use unknown only for a live field whose value is currently unknown. If a live value is unavailable, state whether the next move is blocked, degraded, sandboxed, or requires the FPF pattern governing the named claim kind before that use. If a value is stale, use the freshness or expiry disposition in C.22.2:12 and G.11. If a field is intentionally omitted, state the record-budget reason and do not imply that the omitted kind has been checked. A minimal ProblemCard@Context contains the always-core fields; conditional fields are added only when live for the problem-card move.

When the card compares options, selected-set members, retained candidates, or rival problem formulations, it must state the live comparison or parity relation, or state why comparison is not live for the current move. Absence of a parity relation is not automatically a defect; it is a disposition. The admissible result is either parity not live for the current card, or a G.9-governed parity relation before P2W-ready is claimed. A local fair-comparison result or selected-set result is not admissible inside C.22.2.

A conforming C.22.2 use includes minimal source and context witness material when source, set, selection, characterization, parity, freshness, representation relation, or wording-use relation is live. Otherwise a Thin card may cite the observed signal in plain form. The field-group label problemCardSource may be used inside the pattern, but it is not a new FPF object and not an evidence graph. It is a recoverability field group for source cues and project-side references that make the problem-side record reviewable:

problemCardSource:
  sourceSignalRef?
  setContextRef?
  selectionOrRetentionCriterion?
  characterizationRelationRef?
  parityRelationRef?
  freshnessRef?
  representationOrWordingUseRelationRef?

Generated problem variants, evaluator feedback, and open-ended problem mutation may be recorded only as sourceSignalRef, selectionOrRetentionCriterion, or setContextRef when they make the problem-side record reviewable. They do not provide problem-side validity, evidence sufficiency, or permission to probe or act.

Anti-Pattern Checks and Worked Slices

Anti-pattern checks start from the local card move:

  • card-as-work-item: the card is treated as executable work while method, plan, and work occurrence remain undecided;
  • form-completion: every field is filled because the template exists, even though the Thin next move would be truthful;
  • readiness shortcut: P2W-ready is declared from signal and scope alone, without improvement check or acceptance probe;
  • source-claim shortcut: a preselected solution, work item, proof-looking reference, gate-looking cue, or permission-looking cue replaces the problem-side signal, context, scope, acceptance probe, and next move;
  • scalar shortcut: archive, set-return, Goldilocks, NQD, OEE, partial-order, stepping-stone, or indicator material collapses into one readiness score;
  • prestige shortcut: first-principles or mathematical wording is kept without practical payoff, preserved/lost structure when live, problem-formulation next-move reason, and stop condition.

Local stop rule: if the encountered material tries to carry a claim outside C.22.2, the card keeps only the cue or reference that changes problem formulation or the next move, then names the governing FPF pattern and claim kind named by value to use before that claim is relied on.

A conforming C.22.2 use is testable against at least one Thin worked slice, such as repeated task rework or another compact source signal, showing signal, context, not-preselected-work reason, improvement check, and next move. It is also testable against at least one High-relation worked slice from a set, archive, pool, front, shortlist, selected set, or portfolio context, showing setContextRef, candidate acceptance criterion, risk condition, and the claim being made, relation, or boundary without creating a local portfolio or archive kind.

Conformance Checklist Requirements

The checklist protects a completed or reviewed card from overread. It is not the writing order and not a gate. The writing order remains Thin form, honest next move, and relation references only when they change the move.

CheckRequired test
Name and kind identityThe pattern output is ProblemCard@Context: a compact problem-side record shape under C.22; it is not a downstream selector, work, evidence, gate, or autonomy object.
Core card identityThe card states signal, context grounding, scope cut, EntityOfConcern when it changes the move, and the reason the record is not merely a wish, slogan, ticket, or preselected work item.
P2W-ready reasonP2W-ready appears only with an improvement check or acceptance probe and a downstream P2W or selector-facing use. It means problem-side input ready, not downstream readiness.
Field-budget disciplineConditional fields appear only when live. A missing relation is absent, not unknown; unknown is used only for a live value whose absence changes the next move.
Exact-pattern cueClaims outside C.22.2 are recorded only as source cues or references when they change the card. The next move names the governing pattern and claim kind named by value for that use.
Source-local wordingSource terms such as passport, rule-of-choice card, evidence pack, autonomy budget, logs, gates, portfolio, or factory wording are recovered by use. They become problem-card content only when they supply problem-side source, set, characterization, comparison, or next-move material.
Scalarization and proxy guardGoldilocks, NQD, OEE, set-return, partial-order, stepping-stone, priority, or visible indicator wording does not become one local readiness score or value proxy.
Currentness and loweringFreshness, expiry, changed representation, retargeting, evidence change, redress, or unknown-blocked use states refresh, retirement, bounded use, abstain/no-change, or the relation named by value that must be reopened.
First-principles and mathematical cue payoffA first-principles or mathematical cue states practical payoff, preserved and lost structure when live, problem-formulation next-move reason, and stop condition; C.29 governs mathematical-lens use.
Record-budget invariantThe card is as small as the next move permits. A compact card template, relation aid, or worked example is not a separate FPF object.

Problem-Kind Recovery

For this decision, problem remains an ordinary word in non-FPF-governed prose. Recovery is required only when the wording changes an admissible move, FPF kind, FPF relation kind, downstream selector reference, evidence claim, causal-use claim, bridge claim, assurance claim, decision claim, admissibility claim, or another exact governed claim. The preferred center is the framed problem representation: a problem-side representation of a selected EntityOfConcern under context, scope, viewpoint or role concern, constraints, and improvement or acceptance probe. When problem carries FPF work, selection, evidence, causal, bridge, assurance, decision, or admissibility claim, it must be recoverable through this table:

FPF-governed useCurrent FPF recoveryC.22.2 disposition
Symptom, anomaly, deviation, risk signal, or stakeholder signalProblem signal or source signal referenceMay trigger a ProblemCard@Context, but is not yet a problem-side representation by itself.
Problematic situationContext-bound situation under a viewpoint, domain, constraints, risks, and candidate EntityOfConcernCaptured only through fields that make the situation reviewable.
Framed problem representationProblem-side representation of a selected EntityOfConcern under context and acceptance constraintsCenter of ProblemCard@Context; representation-change claims apply A.6.3.RT, A.6.4, E.17, F.9, or E.18 when live.
Candidate problem in archive or retained candidate poolMember of a retained candidate set, pool, archive, or frontMust preserve source set or reference, declared set relation when that FPF relation is being made and named by value, retention criterion, budget or window, and review cadence when the retention rule requires it.
Selected problem from a set-return treatmentSelected set member or emitted problem-side record under a selection criterionProblemCard@Context may carry the selected problem, but selected-set semantics remain with G.5, C.18, C.19, G.9, G.11, A.6.P:7a, and C.16.Q.
Problem ready for selector-facing useProblem-side record sufficient to emit or bind TaskSignature or TaskKindC.22 uses the typed selector reference; C.22.2 does not expand TaskSignature into a problem-card dump.
Downstream task or performed-work cueMethod known enough for task typing, method-family selection, planning, or performed workUse the exact selector, work-family, TGA, evidence, provenance, assurance, gate, or decision pattern for that claim.
E.8 pattern Problem framePractitioner-recognition section inside a patternNot the C.22 problem-side representation.
E.9 DRR Problem frameDecision-rationale section in a design-rationale recordNot the C.22 problem-side representation.

Local interpretation rule: ProblemCard@Context is the problem-side record shape before downstream typing or work. It may name candidate ProblemProfile, candidate TaskSignature, setContextRef, source cue, governing-pattern cue, or first-principles cue material only when those references change the problem-card move. It does not promote those references into local objects or claims outside C.22.2.

Problem, Task, Method, Work, and Result Split

ProblemCard@Context is admissible while the method is unknown, contested, not yet selected, or not yet specific enough for downstream work. A known method does not by itself make the problem ready: if the proposed method is known but the problem signal, scope, acceptance probe, or EntityOfConcern remains unstable, C.22.2 remains live. If both the problem representation and the method are already accepted and the remaining question is planned execution, apply A.15. The card may carry method-family cues and reasons for method search, but it must not present downstream work as already known task execution.

Use this split:

Term or objectCurrent FPF recoveryLocal disposition
ProblemProblem-side representation of the selected EntityOfConcern under contextCenter of C.22.2 only after problem-kind recovery.
ProblemCard@ContextCompact problem-side record before P2WC.22.2-governed record shape under C.22; stabilizes a problem-side representation under declared context.
ProblemProfileC.22-facing profile prepared or bound from a problem-side representation when sufficientDownstream profile reference; not the card itself and not a work item.
TaskKindSelector-facing task kind in C.22Downstream typed selector reference; not a plan item.
TaskFamilyRefReference to a family of task kinds or method-consumption classesUsed only when current C.22 selector logic requires it.
TaskSignatureMinimal selector-facing signature for eligibility, acceptance, and selectionMay be emitted or bound from ProblemCard@Context; must stay minimal.
Method-family selection objectComparison or selection among method familiesGoverning pattern G.5; not a problem-card field.
U.Method, U.MethodDescriptionMethod and method descriptionGoverning pattern family A.15 and related method-description anchors.
U.WorkPlan, SlotFillingsPlanItemPlanned work and plan itemGoverning pattern family A.15; not a C.22 task signature.
U.WorkPerformed workGoverning pattern family A.15; if the attempted claim is evidence, provenance, or assurance, use A.10, G.6, or B.3 for that relation.
Result record and result measurementEvidence, provenance, measurement characterization, assurance, or refresh material according to the attempted claimUse A.10, G.6, B.3, C.16, or G.11 according to the claim kind being made.

Transition condition: ProblemCard@Context may prepare a candidate ProblemProfile, bind an existing ProblemProfile, emit a candidate TaskSignature, or bind a TaskSignature only when P2W or selector readiness is declared. If several downstream signatures remain plausible, keep them as candidate signatures instead of binding one chosen TaskSignature. When the issue under repair becomes method-family selection, selected method, planned work, performed work, result record, or result measurement, apply the governing FPF pattern for that claim; do not expand the card.

Relation to C.22

C.22 remains the foundation for ProblemProfile, TaskKind, TaskFamilyRef, and TaskSignature. ProblemCard@Context is earlier and more explicit: it explains why this problem, under this context, is admissible for P2W, search, comparison, characterization, refresh, retirement, or governing-pattern application.

A ProblemCard@Context may prepare a candidate ProblemProfile, bind an existing ProblemProfile, emit a candidate TaskSignature, or bind a TaskSignature only when P2W or selector readiness is declared. If several downstream signatures remain plausible, keep them as candidate signatures instead of binding one chosen TaskSignature.

This relation does not move problem-card field detail into TaskSignature. TaskSignature stays minimal for eligibility, acceptance, and selection. Downstream method, work, result, evidence, gate, autonomy, archive, portfolio, and selected-set claims remain with their governing patterns.

Characterization, Indicators, and Comparability

ProblemCard@Context must state either a recoverable characterization relation and comparability or parity relation, or an explicit current reason why the problem can proceed without one.

The heavy content stays with existing FPF patterns:

  • C.16 carries measurement characterization, backing, and comparability discipline;
  • A.19 carries characteristic, scale, unit, polarity, and indicator admissibility discipline;
  • C.25 carries Q-bundles and quality-like multi-characteristic bundles;
  • G.9 carries parity, comparison-window, comparator, budget, unit, repeatability, and reproducibility pins;
  • G.0 carries comparison-frame and CG-Spec governance;
  • G.4 carries acceptance clauses and threshold predicates;
  • G.5 governs selected-set publication when the problem enters a selected set.

Missing characterization or parity relation is a current disposition. The record applies the characterization, parity, search, or pool pattern when that relation is live instead of pretending the problem is ready for P2W.

The C.22.2 candidate acceptance criterion must distinguish functional check, constraint compliance, risk or safety boundary, parity or comparison relation, and freshness window when those relations are live. Comparison frame, CG-Spec, or comparability governance is governed by G.0. Acceptance clauses and acceptance threshold predicates apply G.4; C.22.2 may name only the need, cue, or reference. Passing a test, improving one observed indicator value, or naming an acceptance phrase is not by itself admissible acceptance for P2W.

Source Record-Form Recovery

Source record names are recovered by use, not by label shape. This section prevents source prose from becoming local C.22.2 subobjects.

| Source form family | C.22.2 preservation | Governing pattern named by value for outside use | |---|---|---| | Problem card, problematization passport, problem-side note, or ordinary source signal | Carry the problem signal, context grounding, scope cut, improvement check or acceptance probe, and next move. | C.22.2 governs only the problem-side record shape; downstream selector-facing use remains with C.22. | | Archive, portfolio, palette, front, shortlist, selected set, live pool, set-return, or retained candidate | Preserve setContextRef, source-set kind, selection or retention criterion, budget/window when live, and non-scalar next move. | C.18, C.19, G.5, G.9, G.11, A.6.P:7a, and C.16.Q according to the relation named by value. | | Characterization passport, characteristic card, parity plan, comparison note, rule-of-choice card, or acceptance-looking row | Preserve the cue, candidate criterion, comparator/window cue, and current reason the relation changes formulation. | C.16, A.19, C.25, G.0, G.4, G.9, or C.11 according to the relation named by value. | | Evidence pack, provenance note, assurance row, gate log, autonomy budget, runbook, rollback plan, method selection, work plan, performed-work note, result record, or result measurement | Preserve only the problem-side cue, risk or validation boundary, source reference, and stop condition before that use. | A.10, G.6, B.3, A.21, E.16, G.5, A.15, C.16, or G.11 according to the claim named by value. | | Candidate solution, described system, ordinary log, budget, ledger, protocol, plan, pack, or factory wording | Recover the use under repair: problem-side source, selected-set material, work/evidence/gate/autonomy material, or ordinary example. | Apply the governing pattern for the recovered relation; do not mint a local C.22.2 kind from the label. |

The repair rule is short: if the source form supplies problem-side material, copy the material into the card's live fields. If it supplies another FPF-governed claim, keep only the local cue and apply the pattern that governs that claim.

Portfolio, Archive, and Set-Return Treatment

Archive, portfolio, pool, front, shortlist, selected-set, and set-return material remain source and set cues for the current problem-side record. ProblemCard@Context preserves setContextRef, source-set kind, selection or retention criterion, and the non-scalar next move when live; portfolio and archive governance stays with the named governing patterns and does not become a local problem-card kind.

Archive, portfolio, palette, front, shortlist, ranked shortlist, selected set, live pool, and set-return material remain live source distinctions, but their current FPF governing patterns are already available:

Source wordingCurrent FPF pattern or relationRequired problem-card preservation when the corresponding claim is being made
Problem archiveC.18, C.19, A.10, G.6Preserve source set or reference, retention criterion, candidate status, and provenance relation.
Problem portfolioG.5, C.19, G.9, G.11Preserve selection or retention criterion, budget or window, review cadence, and selected-set or live-pool relation.
PaletteC.18, C.19, G.5Preserve candidate-family or option-set interpretation without turning it into evidence or approval.
FrontC.18, A.19, C.25, G.5Preserve declared characteristics and non-dominated set interpretation.
ShortlistG.5, with G.9 when comparison pins matterPreserve selected-set criterion and downstream use.
Ranked shortlistG.5 only when an admissible order is declaredPreserve ranking criterion or narrow to selected set with tie notes.
Selected setG.5Preserve selected-set output, selection pins, and unknown handling.
Live poolC.19Preserve pool policy, current treatment, and change trigger.
Set-returnG.5, C.18, C.16.Q, declared comparison recordsPreserve set-valued result when total order is not admissible.

A singleton problem card is the degenerate case. If it came from a portfolio, front, archive, or pool, the selected problem remains traceable through setContextRef: the lightweight reference to the source set kind, source reference, selection or retention criterion, budget or window, review cadence, and pattern reference named by value when live. setContextRef is a reference field, not a new SetContext kind and not a downstream claim carrier.

setContextRef must preserve the recoverable source-set form when live: Palette, Front, Archive, ExplorationArchive, Shortlist, RankedShortlist, SelectedSet, LivePool, or another accepted source-set form. If the source-set form is not recoverable, the card may keep a source cue, but it must not claim selected-set readiness or archive-derived readiness.

When multiple plausible problem formulations remain live, C.22.2 must not bind one TaskSignature prematurely. Each optional rivalProblemFormulationRef must state the rival formulation, EntityOfConcern, context, preserved concern, lost concern, reason not selected yet, and next discrimination move. It is not a CG-Frame, not the E.8 Problem Frame, and not a representation-frame object. The next discrimination move may be to characterize, compare, retarget, reopen the source, choose a local problem formulation, or apply the relation-bearing pattern. Reframing is triggered when context grounding, EntityOfConcern, viewpoint, scope cut, or cause-theory cue changes the problem representation enough that readiness or admissibility cannot be inherited by wording continuity.

Goldilocks and Set-Return Docking

Goldilocks problem selection is the problem-side adaptation of the current NQD, OEE, and set-return family. It is not direct QD or OEE vocabulary import, not a new scalar readiness doctrine, not a local QD or OEE vocabulary, and not a single score. C.22.2 must not mint GoldilocksProblem, GoldilocksScore, GoldilocksReadiness, or any equivalent local kind; Goldilocks remains a readiness and selection interpretation carried by current governing patterns.

A Goldilocks, stepping-stone, or archive-derived problem must be represented as source context or set context, selection or retention criterion, and current next move, not as problem difficulty, priority, or readiness score.

ProblemCard@Context carries only the problem-side readiness fields and relation references:

  • source set kind when archive, pool, front, shortlist, selected set, or portfolio language is live;
  • solvability band;
  • characteristic-space, declared problem-side characteristic descriptor, or Q-bundle relation;
  • declared difference criterion when novelty or diversity is claimed, or apply the governing characterization or comparison pattern;
  • non-scalar trade-off, dominance, partial-order, or set-return relation when that relation is being made;
  • measurability or explicit unknown handling;
  • reversibility or containment for safe probing when live;
  • stepping-stone option value when retention matters;
  • expiry or refresh condition;
  • selected-set, archive, pool, front, or parity relation when that relation is being made.

The local solvability band label means a context-bound, non-scalar interpretation of feasible-but-not-trivial fit under current capability, constraints, validation boundary, and optional set-return relation. It is not a universal difficulty claim, not a hidden readiness scale, and not a single-score ranking.

If the band cannot be tied to a characteristic, Q-bundle, comparison, retention, or capability-context cue, treat Goldilocks wording as informal recognition only and bind any selection, set-return, or parity claim to the governing FPF pattern for that claim.

The current governing family is C.18, C.19, G.5, G.9, G.11, A.6.P:7a, and C.16.Q. The relation to C.22:14 is a role and timing relation inside the same family: C.22.2 uses the family before P2W, while C.22:14 uses it downstream when candidate solutions for a TaskKind make TaskSignature informative.

Structure Cue That Improves Formulation

C.29 carries mathematical-lens use for first-principles or mathematical structure cues used by ProblemCard@Context.

firstPrinciplesCue is a local cue label for a formulation-changing structure and a cue to apply C.29; it is not a local mathematical-lens kind or a substitute for a C.29 lens-use result.

The problem card may ask whether a first-principles or mathematical structure helps find or improve the problem formulation, not only whether an already-mentioned mathematical object is admissible. Useful cues include state space, graph, boundary, topology, symmetry, invariant, variational or constrained-optimization structure, probability or information structure, resource bound, obstruction, scale window, composition, or coarse-graining choice.

The admissible practitioner move is:

State the structure that improves the problem formulation, the preserved structure, the lost structure, the practical payoff, the problem-formulation next-move reason, and the stop condition.

Distribution by principles:

Source pressureCurrent FPF pattern or relationC.22.2 use
Zero-principles and first-principles invariants, constraints, symmetry, composition, multi-scale description, variational structure, probability or information, and resource limitsC.29, with A.19, C.16, C.25, and G.9 when characteristics, measurement characterization, quality bundles, or parity are liveCarry a first-principles or mathematical structure cue and apply the governing pattern for the claim being made, relation, or boundary.
Second-principles method-family implicationsG.5, A.15, E.18, A.19 as applicableName the method-family cue; do not perform method selection in the problem card.
Third-principles reproducibility, checks, templates, records, logs, rollback, evidenceA.10, G.6, B.3, A.21, G.11, E.16 as applicableName the reproducibility or evidence cue and apply the governing pattern for the claim kind named by value before relying on that claim.

When no useful mathematical structure survives, record that absence and proceed without forcing mathematical prose into the problem card.

Validation, Reliance, AI-Agent Pressure, and Safe Probing

ProblemCard@Context exposes three local fields for downstream use:

  • problem-formulation next-move reason: why this formulation is worth keeping, reviewing, discriminating, or moving onward now;
  • validation boundary: what has been checked for the current next move, what may be used now, and which use needs another pattern;
  • risk condition: the monitored risk, cost-of-error concern, or containment concern that may change the safe next move.

Use these fields to state a local reliance disposition, not to authorize downstream action.

Card-use conditionLocal dispositionNext pattern application
The current reason supports the named reversible P2W use.RelianceDisposition=pass for that named use, with validation boundary, context, window, and stop condition.Apply measurement, evidence, temporal, refresh, representation, gate, autonomy, work, or assurance patterns only when those claims are part of the use.
The reason is useful but narrower than the attempted use.RelianceDisposition=degrade; name the narrowed use, non-admissible attempted use, and stop condition.Apply the governing pattern for the missing claim, relation, or boundary.
Source, validation, or currentness is stale, conflicted, uncalibrated, or untied to the live relation.RelianceDisposition=abstain, evidence-needed, refresh, or reopen; name the missing relation and decision point.Use A.10, G.6, B.3, C.16, C.27, G.11, A.6.3.RT, A.6.4, E.17, F.9, or E.18 according to the reopened relation.
The proposed next move can affect the world, spend resources, call tools, delegate to agents, change operational state, or make safety/release/gate/work claims.RelianceDisposition=safety-case-required, no-current-admissible-use, or the relation named by value label.Apply B.3, A.21, E.16, A.15, A.10, G.6, or B.2.5 when the corresponding controlled-object relation is live.

Cause-theory cues may focus problem formulation inside ProblemCard@Context. Association, intervention, counterfactual, responsibility, expected-effect, or causal-evidence claims are governed by C.28 plus evidence, provenance, or assurance patterns when those claims are being made.

Environment design and safe probing may appear as source signal reference, validation boundary, risk condition, or governing-pattern cue. If the next move can affect a controlled object, the card names the probe need plus the claim kind named by value that blocks local action; it does not authorize the probe locally.

Freshness, Expiry, and Unknown Handling

C.22.2 includes a section-local state and disposition vocabulary for ProblemCard@Context; this vocabulary is not a new FPF kind. These labels describe the card's current admissible use; they are not required states in a transition sequence, event kinds, or gate records. The local labels are:

State or disposition labelRequired interpretation
draftSignalA source signal has been captured, but the card is not yet reviewable.
reviewableThe problem-side record can be inspected, challenged, sent onward, or refined, but it is not necessarily P2W-ready.
P2W-readyLocal disposition label with plain gloss: problem-side input ready. The problem-side record is sufficient for downstream P2W or selector-facing use; it is not ReadyForWork, GateReady, MethodReady, AutonomyReady, or work authorization.
governing-pattern cueA claim, relation, or boundary outside C.22.2 changes the current problem-card move; the card names the governing FPF pattern and claim kind named by value to use next without claiming that use inside C.22.2.
staleFreshness or expiry blocks the intended downstream use until refreshed, retired, or otherwise disposed.
refreshedThe relevant source, context, characterization, parity, evidence, provenance, assurance, representation relation, or wording-use relation has been updated enough for the named use.
retiredThe problem-side record should no longer be used as a live problem for downstream work.
archivedThe record is retained under the relevant archive, pool, front, or selected-set pattern without being live for P2W.
abstain/no-changeNo downstream project-side move is selected because the signal is stale, duplicate, already solved, already absorbed, unnecessary, or not worth current downstream work.

Freshness must name the affected locus: problem signal, context, characterization or parity relation, problem-formulation reason or source, set-source reference, representation relation, or wording-use relation. For the problem-signal locus, ask whether the original signal is still present, recurring, solved, absorbed, duplicate, unnecessary, or no longer worth downstream work. For context, ask whether the local context or scope cut has changed enough to alter the formulation. For characterization or parity, ask whether measurement, comparison, and parity relations are current enough for the intended next move. For problem-formulation reason or source, ask whether cited sources, provenance, and stated reason/source references are fresh enough for the problem-formulation next-move reason. For set-source reference, ask whether archive, front, pool, shortlist, or selected-set membership and the selection or retention criterion are still current. For representation relation or wording-use relation, ask whether wording, diagram, functional description, TGA path, bridge, retargeting, or representation change alters the EntityOfConcern, admissibility inheritance, context grounding, viewpoint or role concern, scope cut, comparison relation, admissible next move, or relation needed for inheritance.

A stale source or evidence reference does not always retire the problem; it may require refresh while the problem remains reviewable. A stale problem signal may lead to refresh, retire, archive, abstain or no-change, or a governing-pattern cue for the claim, relation, or boundary that must be checked.

Freshness or expiry failure is a current disposition. A stale or unknown-bearing problem card may remain reviewable as a problem-side record, but it does not become P2W-ready unless freshness and unknown handling permit the intended downstream move. A stale problem card does not silently remain admissible for P2W.

When freshness, expiry, or unknown handling fails, choose one of these current dispositions:

  • refresh the problem card or its characterization or comparison relation under G.11, C.16, A.19, C.25, or G.9;
  • retire or deprecate the problem-side record under the relevant archive, pool, selected-set, or refresh pattern;
  • continue only as explicitly governed bounded-risk use under the governing pattern for the claim being made, relation, or boundary.

Unknown-handling fields must state whether they permit use, require degraded use, abstention, or sandbox treatment, or make the current problem formulation inadmissible. No P2W, no change, or abstain-for-now may be a successful next move when the signal is stale, duplicate, already solved, already absorbed, unnecessary, or not currently worth downstream work. Before ProblemCard@Context emits or binds TaskSignature, it must check whether the problem signal is still present and whether prior work has already solved or removed the problem.

Representation and Wording-Use Relation Continuity

C.22.2 names A.6.3.RT, A.6.4, E.17, F.9, E.18, and E.10 only when changed problem formulations, diagrams, functional descriptions, TGA paths, wording, or PathSlice examples carry a live representation, bridge, retargeting, structural-reinterpretation, or wording-use claim. The card may preserve the local cue, reference, or problem-formulation next-move reason, but it does not prove continuity or admissibility inheritance by wording similarity.

Framing is not wording repair. A framing change applies when EntityOfConcern, context grounding, scope cut, viewpoint, comparison relation, admissibility inheritance, or honest next move changes. Wording-use repair is live only when wording, diagram, functional description, TGA path, bridge, retargeting, or representation change alters the carried problem-side representation, EntityOfConcern, admissibility inheritance, context grounding, viewpoint or role concern, scope cut, comparison relation, admissible next move, or governing-pattern cue. Ordinary wording cleanup does not trigger a representation-continuity relation and does not block a Thin ProblemCard@Context.

Pattern or pattern familyWhen it matters for the cardC.22.2 use
C.22Problem-side record, ProblemProfile, and TaskSignature are being related.Keep TaskSignature minimal and apply representation-transition, bridge, retargeting, structural-reinterpretation, or wording-use patterns only when a live relation claim or admissible-use boundary appears.
C.16, A.19, C.25, G.9, and G.11Characterization, characteristic, Q-bundle, parity, or freshness representation changes the selected entity or comparison relation.Preserve only the problem-card cue and apply the exact characterization, parity, bundle, or refresh relation when that relation is being made.
C.29A mathematical representation preserves, coarsens, or retargets the EntityOfConcern or the problem-side representation.Use C.29 output and representation or wording-use relation references when structure changes entity interpretation.
C.18, C.19, and G.5Archive, pool, front, shortlist, selected set, method-family, or selected-set output uses transformed representations.Preserve source-set reference, criterion, and downstream use; keep selection semantics outside the card.
A.6.P, C.16.Q, E.10, E.17, F.9, E.18, A.10, G.6, B.3, A.21, E.16, and A.15Source wording, quality wording, multi-view, bridge, structural reinterpretation, evidence, provenance, assurance, gate, autonomy, method, or work relation is live.Keep the local cue only; apply the governing pattern for the claim being made, relation, or boundary before reusing readiness or relying on the transformed material.

C.22.2 may not treat changed-problem examples as admissible relations unless the appropriate accepted FPF relation is named.

Source and P2W Carry-Forward

The source presentation is not compressed into a generic problem-card summary. The following source details become carry-forward constraints for C.22.2 use and for the P2W-facing relation from C.22.2.

Source detailCurrent FPF recoveryC.22.2 carry-forward relation
Source examples: person, team, organization, system, community, episteme, and work projectSource-local recognition examples for the domain or practice locus when that locus helps identify use, and for the EntityOfConcern or project-side FPF kind or reference named by value when it changes the problem-side move; not a new FPF kind taxonomyProblemCard@Context may state the domain or practice locus when it affects time horizon, indicators, cost of error, role concern, or admissible comparison, but it must also state the context grounding that carries local meaning. The listed examples are not minted here as a new taxonomy of FPF kinds.
Engineering language for reproducibility and management language for coordination, rights, resources, and responsibilityVerification and reproducibility, coordination, right, resource, and responsibility claims are different FPF relationsC.22.2 may name reproducibility, role, budget, right, or responsibility pressure only as a field or relation reference; claims outside the problem-side record stay with their governing patterns.
Problem factory, solution factory, and factory-of-factoriesSource exposition for three related work families, not FPF process kindsC.22.2 covers only the problem-side output. Solution and P2W relations use G.5, A.15, E.18, A.10, G.6, B.3, A.21, E.16, and G.11; organizational-development or platform-capability questions are outside this pattern.
Characterization protocol: context or slice, compared set, role or viewpoint characteristics, scale, polarity, measurement method, freshness, repeatability, budget, missing data, and comparison rulesC.16, A.19, C.25, and G.9 governing patternsProblemCard@Context must cite characterization and comparability relation when that relation is being made; it must not treat available measurement as admitted indicator.
Indicator roles: admission constraints, optimization objectives for the current cycle, and risk signalsCharacteristic and Q-bundle use under selected comparison or acceptanceC.22.2 must preserve whether an indicator is a mandatory constraint, an optimization objective, or a monitored risk signal when that distinction affects acceptance.
Problem portfolio as period-bounded selected set with budget, role assignment, review cadence, and not-selected dispositionG.5, C.19, G.9, G.11, A.6.P:7a, and C.16.QProblemCard@Context must preserve source set or reference, selection or retention criterion, budget or window, review cadence, and not-selected or stepping-stone disposition when the set-source relation is live.
Goldilocks as zone-of-growth selection calibrated to current capability and contextProblem-side entry to current NQD, OEE, and set-return familyC.22.2 must not turn Goldilocks into one global difficulty scale or scalar readiness score.
Stepping stones as option value: new actions, tools, data, interfaces, environments, or experiment modes that may expand downstream searchRetained archive, front, or pool member, or selected-set reasonC.22.2 may record stepping-stone value only with a governing set-return, archive, or pool pattern and a retention or tie-break criterion.
P2W chain: signatures and principles help select formalism, ontology, characterization, and method-family materialA.6.0, A.6.1, C.16, A.19, C.29, G.5, and E.18C.22.2 supplies problem-side cues and relation references; it does not select the formalism, ontology, mechanism, or method family by itself.
P2W chain: condition measurement and comparison help select a concrete methodC.16, A.19, C.25, G.9, G.5, and A.15State the comparison-and-acceptance cue or acceptance-criterion reference and parity and characterization relations needed by downstream method selection.
P2W chain: work planning makes planned work inspectableA.15, A.15.3, and SlotFillingsPlanItemC.22.2 may emit or bind TaskSignature, but planned work stays in work-planning patterns.
P2W chain: performed work produces work-result recordsA.15, A.10, G.6, and B.3C.22.2 must not treat performed work or result records as problem-card fields beyond problem-side cues or named relation references.
P2W chain: result measurement can trigger refresh or return to earlier source materialC.16, G.11, A.10, G.6, B.3, C.18, and C.19C.22.2 must state freshness or expiry and unknown-handling dispositions that let downstream result measurement refresh, retire, or re-open the problem-side record.
Runbook, rollback plan, canary, SafeStop, error budget, and override protocolWork, gate, autonomy, evidence, and control recordsThese source forms are not C.22.2 subobjects; apply A.15, A.21, E.16, A.10, G.6, or B.3 when the corresponding claim is live.
Trust debt after validity expiryFreshness and decay indicator and bounded-risk continuation questionTreat trust debt as an indicator or problem-formulation next-move reason, not as punishment, proof failure, or gate passage by itself.

This carry-forward preserves detail, not broader scope. C.22.2 remains the problem-side output; P2W uses it with enough source cues and project-side references to select method families, plans, performed work, and result measurement without making the problem card a P2W pattern.

SoTA Decision-Use Source Material

The following external anchors are adopted or adapted only where they change this pattern's local answer by value.

Current source or relation lineReferencePattern useDisposition
Problem framing turns an ill-structured situation into a solvable design problem and requires care because "framing" is ambiguous.2025 CEEA paper "Towards a Theoretical Framework of Framing in Engineering Design", https://doi.org/10.24908/pceea.2025.19713Contributes deconfliction of symptom, situation, framed problem representation, and task.Adopted as field and kind-recovery pressure; wording is expressed in current FPF terms.
Strategic problem framing distinguishes symptoms and attention allocation from causal problem formulation.2025 Organization Science article "Looking at the Trees to See the Forest: Construal Level Shift in Strategic Problem Framing and Formulation", DOI suffix 2024.19134, https://doi.org/10.1287/orsc.2024.19134Motivates the fields for problem signal, problem hypothesis/cause-theory cue, and improvement check.Adapted; causal claims still apply C.28 plus evidence, provenance, or assurance patterns when live.
QD and OEE work motivates collections, fronts, archive retention, set-return, and non-single-winner treatment.2026 survey "A survey on Quality-Diversity optimization: Approaches, applications, and challenges", https://www.sciencedirect.com/science/article/pii/S2210650225003979; QD-as-MOO reference https://arxiv.org/abs/2602.00478 checked 2026-05-20Motivates set-source-reference and Goldilocks docking into current C.18, C.19, G.5, G.9, G.11, A.6.P:7a, and C.16.Q.Adopted as field and relation pressure; no local QD or OEE vocabulary or scalar readiness score is introduced.
Open-ended coding agents use archives, self-improvement, problem variants, evaluator feedback, and stepping-stone retention.Darwin Godel Machine https://arxiv.org/abs/2505.22954, FrontierSmith https://arxiv.org/abs/2605.14445, and AlphaEvolve https://arxiv.org/abs/2506.13131, all checked 2026-05-20Contributes record-form, set-source reference, Goldilocks, safe-probe, and freshness fields and relation references for archive, problem generation, safe probes, evaluator feedback, no-change and abstain dispositions, and autonomy and evidence boundaries.Adapted as recent stress/trend pressure; C.22.2 is not turned into AI-agent doctrine or an AI-agent management pattern.
External AI-agent and autonomy practice increases pressure for evidence, logs, gates, autonomy budgets, and update discipline.Source presentation plus current FPF autonomy, evidence, and gate patternsMotivates governing-pattern assignment for validation, AI-agent pressure, and safe probing.Non-FPF-governed for the center of C.22.2; FPF-governed content remains with E.16, A.21, A.10, G.6, B.3, A.15, and G.11.

If a C.22.2 use carries a wider external claim than these dispositions, the claim is outside this pattern and requires a separate content decision or demotion to a non-FPF-governed example.

Each FPF-governed SoTA use is recovered as a local test: source idea, FPF invariant, practitioner check, and popular shortcut rejected. A source citation without that local test is not enough to carry pattern use.

Local SoTA-to-action tests:

Source or relation pressurePopular shortcut rejectedRequired local resultReopen condition
Problem framing is ambiguous and abstraction shifts matter.Symptom, root-cause story, request, or ticket is treated as the problem.Recover source signal, framed problem representation, context and scope, viewpoint or role concern, improvement check, and rival frame when live.Reopen when context, scope, viewpoint, rival frame, evidence need, or improvement or acceptance probe changes.
P2W uses only a reviewable problem-side record.P2W-ready is treated as work authorization, gate passage, method selection, evidence proof, assurance, or selected solution.State problem-formulation next-move reason, validation boundary, readiness disposition, admissible P2W use, non-admissible use, and governing-pattern cue when a claim outside C.22.2 is live.Reopen when the signal, context, scope, acceptance probe, problem-formulation next-move reason, validation boundary, freshness, or named claim outside C.22.2 changes.
QD, OEE, and set-return work produce archives, fronts, pools, and selected sets.Priority score, single winner, local problem portfolio, or local selected-set claim.Preserve setContextRef, source set kind, selection or retention criterion, and a non-scalar next move; apply the governing set, parity, archive, pool, or refresh pattern when live.Reopen when the source set, retention criterion, parity relation, archive, pool, front, selected set, budget, window, or freshness disposition changes.
Open-ended agents, problem variants, evaluator feedback, and stepping stones change source pressure.Agent output, evaluator trace, or generated variant is treated as permission to act.Record generator, evaluator, variant, or stepping-stone reason source only as a source cue; name validation, freshness, and pattern reference named by values before probe or action.Reopen when generator, evaluator, variant, stepping-stone reason source, safety/probe condition, or pattern reference named by value changes.
First-principles or mathematical structure can improve formulation.A named formalism or mathematical or ontological prestige is treated as adequacy or rigor.Record the candidate structure, mapping or C.29 relation, preserved and lost structure when live, practical formulation payoff, problem-formulation next-move reason, and stop condition.Reopen when candidate structure, preserved or lost structure, problem-formulation next-move reason, stop condition, or C.29 result changes.
Early class or kind taxonomy looks available.A class list or ontology-first taxonomy is treated as the problem formulation.Keep the formulation question live; record candidate structure, preserved and lost structure when live, and representation or retargeting relations before freezing kind structure.Reopen when formulation question, kind structure, relation, representation-transition relation, or retargeting relation changes.
Object model looks clarifying.Object-model clarity freezes the wrong EntityOfConcern or relation.Keep EntityOfConcern and relation reviewable; name representation-transition, retargeting, or bridge relation references before reusing a local cue or readiness disposition.Reopen when EntityOfConcern, relation, view, bridge relation, or representation-transition relation changes.

Rationale

ProblemCard@Context gives the practitioner one compact problem-side record between vague problem talk and downstream P2W. The card is useful because it is light enough for ordinary use and exact enough to show when comparison, characterization, evidence, selection, mathematical-lens use, method, work, gate, autonomy, bridge, representation transition, or refresh must apply another FPF pattern.

The card gives the practitioner one thing to write, inspect, and challenge. A practitioner can see whether a problem is ready without first assembling the problem-side record from TaskSignature, Q-bundle, parity report, evidence note, selected-set output, and refresh record. Claims beyond the problem-side record stay with their governing patterns.

The archive and portfolio distinctions remain live when they matter because the card preserves setContextRef and names the governing pattern for any live set, archive, or portfolio claim. Changed problem formulations, diagrams, functional descriptions, or TGA path interpretations require the accepted representation or retargeting relations before a local cue or readiness disposition is reused. Current SoTA and first-principles cues matter only when they change fields, relation references, boundaries, or the problem formulation itself.

Problem-Card Use Invariants

InvariantRequirement
One card, one current problem-side representationOne ProblemCard@Context instance carries one problem-side representation under one declared context. A changed represented problem states the changed representation or the relation that must be reopened.
P2W-ready is problem-side readinessThe card can be ready as input to P2W or selector-facing use without being work-ready, gate-passed, method-selected, evidence-proved, or autonomy-authorized.
Claims outside C.22.2 stay outside the cardEvidence, provenance, assurance, gate, autonomy, work, archive, selected-set, comparison, acceptance, representation, temporal, causal, and mathematical-lens claims remain with the pattern that governs each claim being made.
Stale or blocked cards state a dispositionA stale, unknown-blocked, changed-representation, or missing required reason/criterion/source-reference card states refresh, retirement, bounded use, abstain/no-change, or the relation that must be reopened.

Misuse Modes and Repairs

Misuse modeSymptomRepair
Card-as-work-itemA solution-shaped task or implementation request is treated as a problem-side record.Recover signal, context, scope, improvement check or acceptance probe, and next move before any work pattern is applied.
Content creepThe card starts carrying claims outside the problem-side record.Keep only the cue or reference needed by the problem-side record and apply the pattern that governs the claim being made.
Hidden scalarizationGoldilocks, readiness, priority, OEE, QD, or indicator wording becomes one local score.Preserve source-set kind, selection or retention criterion, characteristic or Q-bundle relation, and non-scalar next move.
Silent retargetingA changed EntityOfConcern, representation scheme, diagram, functional description, or TGA path interpretation inherits old readiness by wording continuity.Name the representation-transition, retargeting, bridge, structural-reinterpretation, or wording-use relation before reuse.
Refresh dead endExpiry or unknown handling is recorded as a passive note.State refresh, retirement, bounded use, abstain/no-change, or the relation that must be reopened.

Use-Quality Checks

These checks protect the card's practical use; they do not add fields.

CheckQuality question
RecognitionCan the practitioner recognize the working situation before outside-governed relation material appears?
Thin affordanceCan a truthful card fit under one page when only Thin fields are live?
Next moveDoes the card choose P2W-ready, characterize, compare, search, refresh, retire, archive, abstain/no-change, or the FPF pattern governing the named claim kind, relation kind, or boundary?
Record budgetAre heavier fields present only because they change the current move?
P2W exportDoes the card state what P2W may use now and which governing-pattern cues remain outside the card?

Worked Slices and Anti-Cases

Five-Case Worked Slices

CaseProblem-side signalRepaired card moveBoundary preserved
AI and human task transfer reworkRepeated rework appears after transfer between human and agent.Stabilize signal, context, acceptance probe, and safe-call or work relation before another delegation.The card is not a prompt retry instruction or permission to delegate again.
Musical mastery tempo driftPractice tempo drifts away from the intended mastery band.State the temporal claim, practice context, acceptance probe, and C.27 relation when tempo, rhythm, recovery, or learning rate changes the next move.A trend line is not an intervention model or evidence of mastery.
Customer-service escalation after a policy or interface changeEscalation volume rises after the change.Stabilize affected user path, acceptance probe, risk boundary, measurement relation, and causal-use relation when that relation is being made.Escalation volume is not an automatic fix request, staffing plan, rollback order, or causal proof.
Literature-synthesis anomaly before method selectionAn anomaly does not fit current category labels.Preserve rival formulation, EntityOfConcern, evidence need, bridge/representation/math relation when that relation is being made, and next discrimination move.The anomaly is not proof for a new theory or a selected research method.
Selected-set candidate before P2WA retained candidate from a front or pool looks promising.Preserve setContextRef, source-set kind, selection or retention criterion, non-scalar next move, and currentness/window.Set membership is not selected-solution proof, priority score, or work authorization.

Compact P2W-ready Disposition Slice

A support team sees repeated failed hand-offs after a new interface policy. The incoming request says "rewrite the escalation workflow." A conforming ProblemCard@Context first repairs the problem-side record instead of accepting the work-shaped request.

Thin card fieldFilled value
Source signalEscalations reopen after hand-off from first-line support to specialist support.
Context groundingSupportOps@EU, new interface policy edition, two-week incident window.
Problem-side EntityOfConcernThe hand-off ambiguity at the support interface, not the whole escalation process.
Improvement check or acceptance probeSample reopened cases; accepted improvement means fewer reopened hand-offs in the same context without increasing unresolved safety, compliance, or customer-impact exceptions.
Problem-formulation next-move reasonSeparate interface wording, role-method-work alignment, evidence/currentness, and possible policy-boundary relations before any method or work-plan choice.
Validation boundarySame support interface, policy edition, incident window, and source logs; refresh if the policy edition, source logs, context, or acceptance probe changes.
Readiness dispositionP2W-ready only for the carried problem-side distinction: hand-off ambiguity under a declared interface policy and acceptance probe.
Exported governing-pattern cuesA.6 for policy or interface wording, A.15 for role-method-work alignment, A.10 for evidence/currentness, A.21 only if a gate claim later becomes live.

The P2W export is narrow: accepted problem-side material, context grounding, improvement check, validation boundary, freshness condition, and governing-pattern cues. If the improvement check or acceptance probe is missing, the card stays reviewable-only or source-finding and cannot claim P2W-ready. If the next user wants evidence sufficiency, a gate decision, work authorization, or selected method, the card preserves the cue and the corresponding governing pattern carries that later claim.

Anti-Cases

Anti-caseCorrect result
The card is cited as safety acceptance, gate passage, tool-call permission, or work authorization.Apply the safety named by value, gate, autonomy, work, evidence, provenance, or assurance pattern; keep only the problem-side cue in the card.
A mathematical phrase is added because it sounds rigorous.Use C.29 only when the candidate structure, preserved/lost structure, payoff, next-move reason, and stop condition are recoverable.
A source archive produces a "best" problem by one score.Use source-set and selected-set patterns; the card carries non-scalar set context and problem-side next move.

Machine-Assisted Drafting Boundary

Machine-assisted ProblemCard@Context drafting is admissible only as drafting aid. Before the draft is used for P2W or selector-facing work, a practitioner checks the card's local fields and any governing-pattern cues for claims outside C.22.2.

Required practitioner checks for a machine-assisted draft:

  • source signal;
  • improvement check or acceptance probe;
  • problem-formulation next-move reason;
  • unknown handling;
  • freshness or expiry disposition;
  • governing-pattern cues for claims being made, relations, or boundaries outside C.22.2.

First Practical Entry Aid

This section is a discoverability aid only. It helps a practitioner or assistant find a candidate pattern; it does not prescribe a transition sequence and does not require opening C.22.2 for every problem-sounding text.

These likely practitioner entry phrases point to C.22.2:

  • "We have a problem, but it is not yet clear what work should be done."
  • "This looks like a ticket, but I am not sure the problem is stated."
  • "A signal or anomaly keeps recurring before method selection."
  • "We selected this candidate from a front, archive, pool, or selected set, but need to state why it is a problem now."
  • "P2W would otherwise use 'implement X' as if it were reviewable problem-side output."
  • "There is a symptom, but we do not yet know what to solve."
  • "We need to know whether this problem is ready for P2W or should apply another pattern."

Direct-entry cues that are not C.22.2:

  • accepted method or work planning: use A.15;
  • proof, provenance, reliability, or assurance claim: use A.10, G.6, or B.3;
  • local choice among explicit options: use C.11, or G.5 when set publication or selected-set semantics are live;
  • agent tool-call, gate, or autonomy claim: use C.24, E.16, or A.21; ProblemCard@Context may only name the problem-side cue or relation named by value;
  • ordinary discussion with no downstream project-side move: no C.22.2 use.

First-use Thin-card test:

Given a messy signal, a practitioner must be able to produce a Thin ProblemCard@Context in under one page and correctly choose one admissible next move: P2W-ready, characterize, compare or parity, search or pool, refresh, retire, abstain/no-change, or apply the FPF pattern that governs the claim being made, relation, or boundary outside the card.

Entry relation:

The entry relation is local: C.22.2 is introduced under C.22, and C.22 names the ProblemCard@Context relation. The C.22.2 body carries the Problem frame, first-entry phrases, tempting-wrong-pattern boundaries, and first-use Thin-card test needed for ordinary discovery.

Downstream Cue Export

ProblemCard@Context exports problem-side material, not a claim over downstream use.

The compact export fields are:

  • problem signal and context grounding;
  • EntityOfConcern and scope cut when they change the move;
  • improvement check or acceptance probe;
  • readiness disposition: reviewable-only, P2W-ready, no-work or abstain/no-change, refresh, retire, archive, or governing-pattern application cue;
  • source-set or representation relation reference when live;
  • problem-formulation next-move reason and validation boundary when P2W relies on the card.

For P2W carry-through, use E.18.1 with the accepted problem-side material and the live relation named by the card. For selector-facing readiness and candidate TaskSignature relation, use C.22. For selected-set or search cues, use G.5 only when that relation is live. For work need, use the A.15 family only after work planning, performed work, or work-relevant source restoration is live. For any other claim being made, apply the pattern that governs it; do not treat the whole card as carrying that claim.

Consequences

Benefits

  • FPF gains a clear problem-side output for problematization as the input P2W can use.
  • P2W uses a typed problem-side record rather than a slogan, ticket-shaped wish, or preselected method.
  • C.22.2 has practical value for FPF when it reduces at least one expensive failure: a wish enters P2W as TaskSignature; a preselected work item is treated as the problem; method selection happens before the problem is reviewable; a problem from a set loses setContextRef; an indicator is used without admission; problem-formulation next-move reason is cited as proof; a stale problem remains active; scalar readiness replaces set-return; or the problem-formulation next-move reason is inherited across a changed representation without the governing representation-continuity or wording-use relation.
  • Current archive, pool, front, shortlist, set-return, parity, refresh, evidence, and C.29 patterns are reused instead of duplicated.
  • The positive role of mathematical and first-principles thinking is preserved: it can find missing structure, not only check already-written mathematics.
  • Characterization and parity are no longer optional background when they are prerequisites for problem reviewability.
  • Representation-change relations are handled through named relation references rather than local proof inside the problem card.

Costs of Use

  • A ProblemCard@Context adds a small writing step before P2W. The cost is justified only when the signal must become reviewable before downstream use.
  • The practitioner must keep the card small: preserve the split between problem, task, method, work, and result; keep TaskSignature minimal; and add conditional fields only when their relation is live.
  • For problems emitted from archives, pools, fronts, selected sets, or portfolios, the practitioner must preserve setContextRef or the set-source relation without turning the card into a portfolio, archive, selected-set, or work-planning object.
  • External or source-local terms may guide recognition only when they change a concrete boundary, field, relation, or validation obligation. Otherwise they remain examples or source cues.

Relations

  • Builds on: E.2, E.9, E.10, C.2.P, A.6.P, C.16.Q, C.16, A.19, C.22, C.25, C.29, G.5, G.9, A.6.3.RT, and A.6.4.
  • Coordinates with: C.11, C.18, C.19, C.22.1, A.15, A.21, E.16, G.6, G.11, A.10, B.3, E.17, E.17.ID.CR, A.6.3, F.9, E.18, and E.18.1.

C.22.2:End

MethodFamily Evidence & Maturity (Method‑SoS‑LOG)

LOG (logic) for deductive shells for admissibility First use expansion: SoS‑LOG = Science‑of‑Science LOG (LEX short‑form discipline applied).

RegistrationContext. For this pattern, RegistrationContext means the U.BoundedContext where a MethodFamily is registered (LEX D.CTX).

Builds on. G.5 (MethodFamily registry/selector), G.4 (Acceptance & EvidenceProfiles), C.22 (TaskSignature S2), C.18 NQD‑CAL (QD/illumination), C.19 E/E‑LOG (emitters/policies), B.3 (Assurance lanes & R_eff), A.10 (Evidence Graph Ref), E.10 (LEX), E.18 (GateCrossing / CrossingBundle visibility). Coordinates with. G.6 (EvidenceGraph), G.8 (LOG bundling), G.9 (Parity), G.11 (Refresh).

Problem frame

Families of methods compete inside a CG‑Frame. The selector (G.5) must admit, degrade, or abstain per family without universal scores, using typed problem descriptors and auditable evidence. Maturity of a family (how far it has travelled from “clever idea” to “run‑safe”) must be visible to LOG rules yet separate from thresholds (which live only in AcceptanceClauses, G.4).

Problem

Unstructured “readiness” stories and undisciplined evidence lead to:

  • (i) Illicit scalarisation across mixed scale types,
  • (ii) Prose‑only gating that a dispatcher cannot execute,
  • (iii) Cross‑Context reuse without Bridges/CL, and
  • (iv) Immature families leaking into production. We need a notation‑independent LOG layer that turns TaskSignature (S2) + EvidenceProfiles into executable rules for admit / degrade / abstain, routing any CL penalties to R_eff only (never mutating F/G).

Forces

  • Pluralism vs. dispatchability. Competing Traditions expose different invariants; selection must compare without semantic flattening.
  • Maturity vs. opportunity. Open‑ended exploration (E/E‑LOG) must coexist with run‑safe exploitation; immature ≠ forbidden → provide safe degrade paths.
  • Unknowns (tri‑state). Missing or unknown S2 fields must propagate explicitly to degrade/abstain/sandbox; no silent coercions.
  • Lexical discipline. Head‑anchoring, EntityOfConcern / Description / specification-use separation, Bridge hygiene; no tool names in Core.

Solution — Method‑SoS‑LOG: deductive shells over Eligibility & Evidence

Objects & heads (LEX/I‑D‑S)

Tech heads; Plain twins are published via UTS. MethodFamily (registered in G.5) carries Eligibility and artefact identity; MaturityCard (this pattern) carries evidence‑aware maturity; SoS‑LOG.Rule (this pattern) is an executable rule schema that returns one of {Admit | Degrade(mode) | Abstain} for a (TaskSignature, MethodFamily) pair. Descriptions live as …Description; when harnessed they become …Spec.

Rule schema (normative)

For each MethodFamily f, author an executable rule set:

LOG.Deduce_f(TaskSignature S2) → {Admit | Degrade(mode) | Abstain}

with the following branch obligations:

R0 — CG‑Spec gate (precondition, RegistrationContext). Before R1–R3, verify CG‑Spec.MinimalEvidence for every CHR characteristic referenced by f’s Acceptance/Flows in the registered U.BoundedContext; failure ⇒ Abstain with reasons (no silent sandbox). Publish the CG‑Spec ids consulted. Rationale: selector legality requires the CG‑Spec gate to be explicit, not implicit in prose. Publish associated ReferencePlane notes alongside the consulted ids.

R0.QD — QD/OEE pre‑gates (if applicable). If S2 declares BehaviorSpaceRef/ArchiveConfig/EmitterPolicyRef or PortfolioMode=Archive, verify: (i) CharacteristicSpaceRef characteristics are CHR‑typed, d≥2, ReferencePlane per characteristic declared; (ii) ArchiveConfig is lawful (topology, resolution, K>0, InsertionPolicyRef, DistanceDef with edition id and declared metric/pseudometric status); (iii) EmitterPolicyRef present (with edition id); (iv) DominanceRegime present; if absent, default= ParetoOnly. Failure of any ⇒ Abstain with reasons.

R1 — Admit. Admit IFF (a) S2 satisfies Eligibility predicates of f (tri‑state aware), (b) EvidenceProfile minima referenced by Acceptance/Flows for f are met (lanes/anchors/freshness) in the registered U.BoundedContext (post R0), (c) all relevant CAL.AcceptanceClauses (G.4) evaluate to true under lawful CHR comparisons, (d) any maturity gating (e.g., a floor on Maturity rungs) is expressed as an AcceptanceClause and referenced here by id (no thresholds inside LOG). LOG never sets thresholds; it only executes and cites Acceptance verdicts.

R2 — Degrade. If (a) holds but (b) or (c) is partially satisfied or unknown, return Degrade(mode) where mode ∈ {scope‑narrow | sandbox | probe‑only} and emit scope notes (USM Scope(G), Γ_time). Record which S2 unknowns or Evidence minima caused the degrade. LOG‑Degrade never changes CHR scales or planes; it narrows Scope (G) or execution mode. Note (CAL vs LOG). CAL‑level degrade.order (fall‑back to order‑only comparisons) is governed by G.4/CG‑Spec and is not a LOG mode. SoS‑LOG never overrides CAL outcomes; a LOG branch only narrows Scope(G) or execution mode (e.g., sandbox, probe‑only), it does not alter CHR scales or admissible orders. probe‑only MUST cite an E/E‑LOG policy id (exploration budget) and Acceptance‑bound guards.

R3 — Abstain. If S2 violates Eligibility or R0 fails, return Abstain (with reasons). Abstain is mandatory on illegal CHR operations (e.g., ordinal means) and when Bridge/CL requirements are unmet.

R4 — CL routing. Any cross-Context or cross-plane reuse must cite Bridge ids (with loss notes). Apply Φ(CL) and (if planes differ) Φ_plane that are monotone, bounded, table‑backed; publish policy‑ids in the SCR; penalties reduce R_eff only; F/G must remain invariant.

R5 — Proof hooks. Every branch MUST cite Evidence Graph Ref (A.10), lane tags (TA/VA/LA), freshness windows, and (if bridged) Bridge ids + loss notes; the decision is SCR‑visible. When G.6 EvidenceGraph is present, also publish EvidenceGraph path id(s) for the branch (admit/degrade/abstain). No self‑evidence.

R6 — QD archive / PortfolioMode semantics (if applicable). If PortfolioMode=Archive, Admit may return a QD archive (per ArchiveConfig) instead of only a Pareto set. Unless CAL authorises DominanceRegime=ParetoPlusIllumination (policy‑id recorded in SCR), IlluminationSummary is a report‑only telemetry summary and any coverage/regret are telemetry metrics (reported) that do not affect dominance.

R7 — GeneratorFamily branches (open‑ended). If S2 includes GeneratorIntent, SoS‑LOG MUST: (i) verify EnvironmentValidityRegion is declared and lawful; (ii) verify TransferRulesRef exists; if unknownDegrade(scope‑narrow) or Abstain per family policy; (iii) treat the selection surface as pairs {environment, method}; publish coverage/regret and IlluminationSummary as report‑only telemetry (IlluminationSummary = telemetry summary; coverage/regret = telemetry metrics); dominance participation per R6.

R8 — Telemetry & Refresh hooks. On any illumination increase or archive change, publish edition increments for CharacteristicSpaceRef/DistanceDefRef and the policy‑id (Emitter/Acceptance) that caused the change; expose PathSliceId for refresh/decay in SCR.

Aphorism. “Admit on admissibility and sufficiency; degrade on uncertainty; abstain on inadmissibility.”

Maturity ladder (poset, not a scalar; Description, not Spec)

Publish a MethodFamily.MaturityCardDescription@Context (UTS enum ids; Scale kind = ordinal; ReferencePlane declared). Do not embed thresholds here; any maturity floors used for admission are authored as G.4 AcceptanceClause and referenced by id from R1.

  • L0 — Anecdotal. Claims exist; lanes sparse; examples ad‑hoc.
  • L1 — Worked‑Examples. Multiple worked examples with lane tags and Scope slices declared; no replication yet.
  • L2 — Replicated. Independent replication(s) in distinct Context slices (publish D.CTX + UTS rows), lane separation observed, decay windows explicit.
  • L3 — Benchmark‑Severe. Repeated wins or parity on community baselines or severe tests; cross‑Tradition bridges declared with loss notes.

Optional rung (for QD/OEE‑heavy families; ordinal, closed enum):

  • L4 — QD‑Hardened. Archive stability under declared InsertionPolicy/DistanceDef editions; reproducible IlluminationSummary improvements under controlled budgets; OEE generators pass EnvironmentValidityRegion severe tests.

Norms. M1. The ladder is lane‑aware (TA/VA/LA) and freshness‑aware; it is not a global numeric score. Declare Scale kind=ordinal and the closed enumeration of rungs; register the enum at UTS (twin labels; editioned). M2. Transitions MUST be justified by EvidenceGraph paths (once G.6 is available) and UTS publication; missing anchors ⇒ no advance. M3. Any maturity floor used for admission (e.g., “run‑critical Context requires ≥L2”) MUST be authored as a CAL.AcceptanceClause and referenced by id from R1; SoS‑LOG does not embed thresholds. M4. Declare ReferencePlane for the MaturityCard; on ReferencePlane crossings apply published Φ_plane policy (penalty to R_eff only), with Bridge id and loss notes.

Rationale note. Treating maturity as a poset aligns with B.3’s lane calculus and avoids scalarisation across ordinal/ratio scales; assurance penalties remain on R, never F/G.

Unknowns & Shift classes (tri‑state discipline)

U1. (LEX). Enumerations for Degrade(mode) and Maturity rungs MUST be declared as closed value sets and registered at UTS (twin labels). Lexical SD (E.10) applies. U2. Every S2 field is tri‑state; unknown MUST map to a branch (Degrade or Abstain) declared on the family (no coercions). Each branch publishes a branch‑id and (where used) a mode from a closed enum registered at UTS (LEX enum clarity). U3. ShiftClass semantics follow C.22. If ShiftClass ∈ {covariate‑shift, concept‑drift, adversarial} or unknown, default outcome is Degrade(scope‑narrow) unless a CAL.AcceptanceClause explicitly guards the regime.

Publication & wiring

W1. Each family publishes a MaturityCardDescription@Context (UTS twin labels; ReferencePlane declared) and registers SoS‑LOG rule ids; editions are versioned and RSCR‑tested for branch‑coverage (Admit/Degrade/Abstain, unknown paths). Φ(CL)/Φ_plane policy‑ids must be present in SCR where applicable. W2. Admissibility Ledger. Publish an AdmissibilityLedger@Context: rows = (MethodFamilyId, RuleId, MaturityRung, BranchIds, BridgeIds, ΦPolicyIds, EvidenceGraphPathIds?, DominanceRegime, PortfolioMode, Edition), UTS‑registered; this ledger is the selector‑facing export. W3. Strategy token. Do not mint a U.Type “Strategy”; strategy remains a composition inside G.5 (Compose) under E/E‑LOG. W4. Selector (G.5) consumes these rules; results appear in the Dispatcher Report with reasons in/out and cited anchors/bridges.

Archetypal Grounding (Tell–Show–Show)

(Plain register for pedagogy; Core remains notation‑independent per E.10/E.8.)

Show‑1 - Continuous dynamics (ODE task). S2 excerpt. DataShape=ODE; stiff?=unknown; Size≈10^3; Objective={↓error@ratio, ↑throughput@ratio}; Constraints={safety_gate@ordinal}; Jacobian_sparsity=high; Missingness=MAR. Families. Implicit‑BDF vs Explicit‑RK vs Symplectic. Rules.Implicit‑BDF: Eligibility tolerates stiff?=unknown if Jacobian_sparsity=high (guarded precondition); MaturityCard=L3 (replicated & benchmarked). Outcome: Admit. — Explicit‑RK: requires stiff?=false; with unknownDegrade(sandbox) (probe). — Symplectic: eligible only when Hamiltonian=true; here ⇒ Abstain. Didactic anchor. This mirrors C.22’s typed‑signature discipline and CHR legality (no ordinal means; unit alignment for ratio).

Contemporary ecosystem examples of these families (post‑2015) are organised in DifferentialEquations.jl, which exposes multiple solver families under one call surface—precisely the pattern G.5 expects. (Journal of Open Research Software)

Show‑2 - Planning/scheduling (MIP task). S2 excerpt. DataShape=MIP; NoiseModel=deterministic; Objective={↓cost@ratio, ↑service_level@ordinal}; Size≈10^5 vars; convex_relaxation=available. Families. MILP (branch‑and‑bound), Constraint‑Programming, Heuristic meta‑search. Rules.MILP: Eligibility requires convex_relaxation=available; MaturityCard=L3 in the registered U.BoundedContextAdmit. — Constraint‑Programming: MaturityCard=L2; Acceptance demands service_level≥B (ordinal predicate). With B met but baseline parity unknown ⇒ Degrade(scope‑narrow). — Heuristic meta‑search: MaturityCard=L1Degrade(sandbox) or Abstain depending on RSCR parity policy. Didactic anchor. Selector returns a Pareto set (no cross‑ordinal weighting), as required by G.5.

Contemporary “single call / many solvers” packaging that motivates MethodFamily rows is exemplified by JuMP (2017–2022), which cleanly separates model description from solver choice. (Miles Lubin)

DifferentialEquations.jl illustrates family‑based solver packaging (multi‑method under one interface), 2017–2024 ecosystem. (Journal of Open Research Software) — JuMP illustrates model/solver separation and registry‑like selection (2021–2022 papers, site). (Miles Lubin) — Science of Science review (2018) supports the emphasis on replication/benchmarks in maturity assessment. (Science)

Show‑3 - QD archive (policy search). S2 excerpt. PortfolioMode=Archive; CharacteristicSpaceRef(d=2); ArchiveConfig(CVT, res=1k cells, K=1, DistanceDefRef.edition=v2, InsertionPolicyRef=dyn‑elite); EmitterPolicyRef=v3; DominanceRegime=ParetoOnly. Rules. Admit returns an archive; illumination reported; changes to DistanceDef/Emitter editioned in SCR; dominance remains ParetoOnly.

Show‑4 - Open‑ended GeneratorFamily (POET‑class). S2 excerpt. GeneratorIntent{GeneratorFamilyRef=GF‑01, EnvironmentValidityRegion=EVR‑A, TransferRulesRef=TR‑A, CoverageMetric=…}; PortfolioMode=Archive. Rules. Admit yields declared sets over {environment, method}; Degrade(scope‑narrow) if TransferRules=unknown; telemetry publishes coverage/regret and IlluminationSummary with edition/policy‑id on improvements.

Bias‑Annotation

Principle‑taxonomy lenses. Universality (trans‑discipline), Didactic primacy (Tell–Show–Show), Open‑ended evolution (refresh‑ready), Lexical firewall (no tool names in Core), Notation independence. Limits: Worked examples reference widely‑used ecosystems in Plain register only.

Conformance Checklist (normative)

IDRequirementPurpose
CC‑C23.1Each MethodFamily SHALL publish a MaturityCard with rung justification via A.10 anchors (lanes, freshness windows) and (if bridged) Bridge ids with CL and loss notes.Makes maturity auditable and lane‑typed.
CC‑C23.2SoS‑LOG rules MUST be executable (no prose‑only) and cite: Eligibility test result; CG‑Spec gate verdict; EvidenceProfile minima; Acceptance verdict; Γ‑fold contributors; EvidenceGraph PathId/PathSliceId; CL/Φ policy‑ids.
CC‑C23.3Enumerations used by the rules (Degrade(mode); Maturity rungs) SHALL be closed and UTS‑registered (twin labels).
CC‑C23.4Unknowns in S2 SHALL map to `{degradeabstain
CC‑C23.5Cross-Context or cross-plane use MUST cite a Bridge; Φ(CL)/Φ_plane MUST be monotone, bounded, table‑backed; penalties R_eff only.Keeps F/G invariant; legal CL routing.
CC‑C23.6No thresholds in CHR or Maturity; thresholds live only in AcceptanceClauses (G.4).Separation of concerns.
CC‑C23.7MaturityCard SHALL NOT be turned into a global scalar; treat as poset; any ordering MUST be lawful over CHR types.Forbids cross‑scale scalarisation.
CC‑C23.8Publish to UTS with twin labels; run GateCrossing visibility checks on cited crossings: CrossingBundle attestation (E.18/F.9/F.17/E.17/A.21 where live), LanePurity, and Lexical SD (E.10) under GateChecks/GateProfile (A.21).Publication & crossing visibility hygiene.
CC‑C23.9All enumerations (e.g., Degrade(mode), Maturity rungs) SHALL declare a closed value set and Scale kind, and be registered at UTS (LEX enum clarity).Avoids lexical drift; lawful typing.
CC‑C23.10RSCR tests cover negative/refusal paths (illegal CHR ops; CG‑Spec gate fail; Bridge missing; Φ table/policy‑id missing; Lexical SD violations (E.10)); ensure branch coverage (Admit/Degrade/Abstain, unknown).
CC‑C23.11If QD fields are in scope, R0.QD MUST pass: lawful CharacteristicSpaceRef (d≥2, characteristics typed, planes declared per characteristic), ArchiveConfig (topology/resolution/K, InsertionPolicyRef, editioned DistanceDef), EmitterPolicyRef present.QD legality gate.
CC‑C23.12DominanceRegime SHALL default to ParetoOnly; switching to ParetoPlusIllumination MUST be authorised by CAL and cited by id in SCR.Prevents implicit scalarisation.
CC‑C23.13If PortfolioMode=Archive, LOG MUST allow archive outputs (R6) and publish IlluminationSummary as a report-only telemetry metric unless CAL opts‑in to dominance participation.Lawful archive semantics.
CC‑C23.14If GeneratorIntent present, R7 MUST verify EnvironmentValidityRegion and TransferRulesRef; outputs are declared {environment, method} sets; coverage/regret telemetry published.OEE legality & telemetry.
CC‑C23.15On illumination increases/archive changes, edition increments (BehaviorSpace/DistanceDef/EmitterPolicy) and the policy‑id responsible SHALL be logged (R8).Reproducibility & refresh.

Consequences

  • Explainable admission. Every Admit/Degrade/Abstain is backed by anchored evidence and explicit unknown handling (selector reports are SCR‑linked).
  • Run‑safe pluralism. Multiple families can co‑exist with policy‑governed exploration (E/E‑LOG) and maturity‑aware gating.
  • Portable governance. Bridge hygiene and CL routing make cross‑Tradition reuse deliberate and costed (penalties to R only).

Rationale

The ladder and LOG shells align with FPF’s Assurance calculus: F (form) is governed by artefact kind, G (scope) by USM slices, and R (reliability) accumulates via WLNK then Φ(CL) penalties. Treating maturity as evidence‑typed rungs—rather than a “score”—avoids illegal arithmetic and lets DesignRunTag values remain separate via DesignRunTag discipline (A.4) and explicit GateCrossings. This mirrors contemporary science‑of‑science insights: replication, benchmarking, and field health indicators are the currency of maturity, not anecdote. (Science)

Relations

Builds on: G.5 (selector consumes these rules), G.4 (Acceptance & EvidenceProfiles), C.22 (S2 typing), C.18 NQD‑CAL, C.19 E/E‑LOG, B.3 (Assurance tuple & WLNK). Publishes to: UTS (MaturityCards, rule ids), SCR/RSCR (branch coverage; parity hooks). Constrains: G.8 (LOG Bundling must cite MaturityCards), G.9 (parity harness draws baselines per rung), G.11 (refresh windows per rung & decay), G.5 (Open‑Ended Family mode for GeneratorFamily). Outcome. The pattern introduces new content (LOG shells + maturity poset + degrade modes + publication Standard) and does not duplicate CG‑Spec legality rules, CHR guard‑macros, or CAL acceptance mechanics; it integrates them into admissibility logic for MethodFamilies.

C.23:End

Agentic Tool-Use and Call Planning (C.Agent-Tools-CAL)

Type: Calculus (C) Status: Stable Normativity: Normative

Plain-name. Agentic tool-use and call planning.

Intent. Govern admissible tool-call planning and replanning under explicit budget, assurance, and policy while keeping upstream choice, pool policy, planning, and execution distinct.

Instantiates and refines Pillars. E.2 P-3 Scalable Formality, P-7 Pragmatic Utility, P-10 Open-Ended Evolution, P-11 SoTA Alignment, and the Bitter-Lesson Preference: prefer scalable, general methods that benefit from more data or compute over fragile hand-tuned heuristics when assurance and cost stay comparable.

Depends on. A-kernel (A.1–A.15) for holonic basics and Role-Method-Work separation; B.3 Trust & Assurance (F–G–R with CL penalties); E.3/E.5 (precedence and Guard-Rails); C.5 Resrc-CAL; C.18 NQD-CAL (candidate generation and declared set results); C.19 E/E-LOG (explore-exploit policies); optional Compose-CAL and KD-CAL where available.

Coordinates with. U.WorkPlan and U.PromiseContent bindings (acceptance gates), Working-Model publication discipline per B.3, and evidence or provenance (G.6).

Use this when

  • one concrete choice result already exists and the next task is now how to plan, gate, sequence, and replan tool calls admissibly
  • the next admissible output should be one enactment-facing CallPlan or one CheckpointReturn, not one more local choice result or pool-policy result
  • budget, assurance, and stop conditions must be visible before calls are burned

What goes wrong if missed

  • calls get scheduled by ad-hoc heuristics, so the plan cannot say which budget is being burned or what event should stop or replan execution
  • planning quietly collapses into execution, or execution quietly inherits unresolved upstream choice and pool-policy questions
  • a successful probe is mistaken for committed rollout even though the commit trigger was never made explicit

What this buys

  • one tool-agnostic planning record for admissible calls, budgets, stop conditions, and replan triggers
  • one explicit enactment record with objective, budget, stop conditions, and next move
  • one replayable call graph and assurance record instead of one opaque chain of tool invocations

First-minute questions

  • Has one choice result already been fixed, with the accepted decision material named, so that planning may begin now?
  • Which budget is being burned now: enactment budget, tool-call budget, or still one upstream probe budget?
  • What event stops or replans the route?
  • Is the next admissible output one CallPlan, one CheckpointReturn, or a neighbouring-pattern exit?

First output

The first useful output is either one enactment-facing CallPlan with the current objective, cited route descriptions, the planned budget envelope, the stop or replan condition, and the next move stated explicitly in one place, or one bounded CheckpointReturn with the current objective or task family, the burned and residual actual budget, the commit trigger, and the recommended next action stated explicitly in one place.

If that first output still cannot be written honestly, the current planning result is not finished C.24 planning yet.

Problem frame

Modern systems in agential roles increasingly rely on tool-call planning: selecting admissible tool-service routes, arranging intended call work, and replanning under uncertainty. Without a calculus:

  • calls are scheduled by ad-hoc heuristics,
  • budgets (compute, cost, wall-time) are implicit,
  • assurance and policy provenance are lost, and
  • systems in agential roles either over-constrain themselves with brittle scripts or wander without guard-rails.

This CAL provides the conceptual API for thought that lets any implementation (LLM-based, search-based, code-based, robotic) plan calls admissibly, auditably, and scalably. (Role-Method-Work alignment; didactic primacy.)

Immediate failure indicators for this pattern:

  • the current planning result cannot say whether one choice result already exists,
  • the current text cannot distinguish route description, call plan, and executed call work,
  • the budget being burned is still only probing-before-choice budget rather than enactment or tool-call budget, or
  • the next admissible output is still undefined as one enactment-facing plan, one CheckpointReturn, or one neighbouring-pattern exit.

If the question under repair is still which fixed option should survive now, apply C.11. If it is still pool policy over several still-live candidate lines, apply C.19. If it is already public selected-set publication, apply G.5.

Problem

We need a tool-agnostic way to (i) identify admissible route descriptions, (ii) compose one call work plan that cites them, (iii) allocate an explore/exploit share, (iv) enforce budget & harm gates, and (v) replan on signals—without baking domain-specific heuristics into the core and without collapsing U.MethodDescription, U.WorkPlan, and U.Work into one object.

Forces

ForceTension
General methods vs. bespoke local heuristicsScalable, model-centric search ↔ short-term wins of bespoke scripts (guarded by Bitter-Lesson Preference).
Assurance vs. AutonomyF-G-R gates & CL penalties ↔ system latitude to sequence calls and learn online.
Exploration vs. DeliveryExploration share for illumination ↔ delivery SLAs and cost ceilings (E/E-LOG policy).
Route vs. plan vs. executionU.MethodDescriptionU.WorkPlanU.Work ↔ service promises (U.PromiseContent).

Solution — Signature & Realization

Types (aliases). ATC.CallRouteDescriptionU.MethodDescription with accessSpec for one tool service or callable route; ATC.CallPlanU.WorkPlan specialised for intended tool-call work; it cites one or more ATC.CallRouteDescription editions plus planned order, budget ceilings, stop or replan triggers, and next move; ATC.CallGraph ≡ Evidence/Provenance graph over a U.Work ledger; ATC.Policy references U.EmitterPolicyRef (E/E-LOG) and local call gates including BLP tolerances (alpha, delta).

Roles. A System in AgentialRole prepares or revises one CallPlan that cites one or more CallRouteDescription editions. Upon enactment, a Performer executes Work (calls), and Observers record Observations with acceptance checks. Route descriptions stay design-time; the call plan stays schedule-of-intent; actual call work stays run-time. (A.15 strict distinction.)

Operators (Gamma_agential; CAL, conceptual):

  1. Gamma_agential.eligible(tool, TaskSignature, K_ctx) -> {true|false, notes} Eligibility gate based on capability fit, policy allow-list or deny-list, and context K (including safety constraints).

  2. Gamma_agential.enumerate(TaskSignature, K_ctx) -> CandidateSet<ATC.CallRouteDescription> Returns admissible callable route descriptions. It MAY delegate to NQD-CAL for heterogeneous route families and MUST apply the current E/E-LOG lens (objectives & telemetry) to tag candidates.

  3. Gamma_agential.plan(Objective, CandidateSet, Budget, ATC.Policy) -> ATC.CallPlan Produces one call plan that cites the selected route descriptions, declares one planned budget envelope (compute, cost, time, risk), one intended call order, and one stop or replan policy. Internal route logic remains in the cited method descriptions; the plan is a U.WorkPlan that cites method descriptions, not a method description and not yet work.

  4. Gamma_agential.execute(ATC.CallPlan) -> {ATC.CallGraph, Observations} Executes with hard gates (budget, risk, constraint-fit) and logs provenance suitable for B.3 assurance reporting (design-time and run-time separated).

  5. Gamma_agential.replan(Signals, ATC.CallPlan, BudgetPrime) -> ATC.CallPlanPrime Triggered by sentinel breaches, assurance drops, or policy events; preserves editioned policy, cited route descriptions, and context.

  6. Gamma_agential.score(Route or PlanAlternative) -> <ValueProxies, Cost, Risk, FGR_floor> Computes selection signals without illegal scalarisation across mixed scales; uses Pareto comparison under the C.19 E/E-LOG lens and leaves final dominance to declared policies.

Bounded scout/probe cycle for unfamiliar task families

When the choice result is already fixed enough that enactment planning is admissible under C.24, but the route across heterogeneous or unfamiliar callable approaches is still uncertain, the system may spend a bounded scout/probe budget before committed rollout and return one checkpoint package that compares the tested routes.

If additional probing could still change which option survives the current OptionSet, the budget is still C.11-side epistemic budget and the question reroutes upstream. If choice result is already fixed and the uncertainty is only about route or rollout shape, the budget is now enactment budget and the checkpoint belongs in C.24.

That CheckpointReturn should state the declared utility objective and current TaskFamily, the route descriptions or candidate approaches tested, the evidence on each route, the burned and residual actual budget, the recommended next action, and the commit trigger named by value that would justify leaving probe state.

A successful probe does not by itself justify a larger burn or a committed rollout. C.24 carries the CheckpointReturn record and call-plan semantics for this probe loop; A.15 carries the DesignRunTag split and E.16 carries the budget partition plus guard and ledger enforcement. Low-human-overlap approaches remain sound only while they stay tied to the declared utility objective, budget boundaries, and evidence locus explicitly.

Bridge to neighboring patterns. ProbeBudget belongs to C.11 while it means epistemic budget for further probing before choice. C.24 carries budgets once they are enactment, tool-call, or rollout budgets. If the question is still which option survives now, apply C.11; if it is now pool policy over several still-live candidate lines, apply C.19; if it is selector-facing publication of the selected result, apply G.5.

Explicit enactment result. A conformant C.24 pass should therefore leave either one enactment-facing CallPlan that states the current objective, the cited route descriptions or planned call order, the planned budget envelope, the stop or replan condition, and the next move, or one CheckpointReturn that states the current objective or task family, the burned and residual actual budget, the evidence locus, the commit trigger, and the recommended next action.

Unfinished-state rule. A C.24 result remains unfinished when it cannot say whether execution should continue now, pause at one checkpoint, or reroute, when it confuses route description with plan or plan with executed work, or when it does not state which budget is planned versus already burned and what event would stop or replan the current route.

Normative Laws (ATC-Laws).

  • ATC-1 (Model-the-Call, not the App). A tool call is one Work instance that enacts a referenced MethodDescription promised by a Service; plans schedule intended calls and cite route descriptions but are neither the route descriptions themselves nor the calls. (A.15.)
  • ATC-2 (Bitter-Lesson Preference). When two admissible choices are within delta (assurance) and alpha (budget), prefer the more general, scale-benefiting method whose slope vector Pareto-dominates under the declared E/E-LOG objectives; any override MUST record a BLP-waiver with expiry. (E.2; precedence governed by E.3.)
  • ATC-3 (Budget & Harm Gates). Plans SHALL declare ceilings on compute, cost, wall-time, and risk; execution MUST abort or replan on breach. Actual burned or residual budget belongs in CheckpointReturn, CallGraph, or other work-side reporting, not inside the CallPlan field set.
  • ATC-4 (Explore-Share Discipline). Plans MUST declare explore_share; defaults inherit from E/E-LOG profiles. Informative defaults: 0 for safety-critical or deterministic tasks; approx 0.2-0.4 for ambiguous tasks with heterogeneous tool families. Promotion of illumination telemetry into dominance requires explicit policy.
  • ATC-5 (Provenance & Replay). Every call MUST emit a CallGraph with: Service id, cited MethodDescription edition, inputs and outputs (redacted per privacy), CallPlan ref, EmitterPolicyRef, and budget deltas. (NQD/E/E provenance fields apply when used.)
  • ATC-6 (Assurance-First Decisions). Selection MUST respect B.3: WLNK minima on F/R (weakest-link floors), CL penalties on integration, and no chimera scores across design-time and run-time scopes. Publish <F,G,R> for the typed claim this plan is admissible under K,S.
  • ATC-7 (Notation/Vendor Independence). Core pattern text MUST NOT encode vendor-specific tokens; bindings occur in Context via Bridges/Profiles. (Lexical guard-rails.)

Planning under budget must consume the same declared doctrine

Causal action-use spec for call plans

When a tool-call plan selects observation, intervention, counterfactual-rung evidence collection, counterfactual policy conditioning, or off-policy causal evaluation work, the CallPlan carries an optional causal action-use spec and cites C.28 for the causal-use authority.

Optional CallPlan.causalActionUseSpec?:

CallPlan.causalActionUseSpec? {
  causalUseQuestionRef?: U.CausalUseQuestion
  targetCausalityLadderRung: CausalityLadderRung
  causalUseClaimKind: CausalUseClaimKind
  naturalBehaviorPolicyRef?: NaturalBehaviorPolicyRef
  evaluationPolicyRef?: EvaluationPolicyRef
  causalEvidenceSupportBasis?: CausalEvidenceSupportBasis
  causalInterventionSpecRef?
  counterfactualConditioningRef?
  counterfactualSamplingRealizabilityProfileRef?
  causalUseEvidenceDesignRef?
  offPolicyCausalEvaluationProfileRef?
  causalUseSupportRecordRef?: CausalUseSupportRecordRef
  causalUseSupportVerdict?: CausalUseSupportVerdict
  supportedUse: CausalUseSupportStatement
  unsupportedUse: CausalUseUnsupportedStatement
}

The causal action-use tail may be omitted only when the call plan does not reach CausalUseActivation: it is not using the call sequence as causal support, not choosing between observation/intervention/counterfactual-policy regimes, and not publishing the result as causal evidence. If the plan says the call will prove, estimate, improve, prevent, or counterfactually establish an outcome, the support tail is present or the wording is downgraded.

What changes in practice: a call plan that probes, intervenes, samples, simulates, or evaluates a policy for a causal purpose must state CausalUseClaimKind and the causal regime of the planned action before execution evidence is treated as support for a causal-use claim.

What this does not authorize: [C.24](/generated/patterns/C.24) does not estimate effects, prove identification, certify fairness, or turn simulation output into realized counterfactual-rung evidence; it governs admissible call planning and redirects causal-use support to [C.28](/generated/patterns/C.28).

  • Planning should reuse the declared source set, decision lens, probe budget, and stopping condition rather than creating one planning-only choice semantics.
  • Budgeted sequencing may mix exploitation and exploration, but the declared source set and the declared reason for the next probe must stay recoverable.
  • Use planning language such as probe next, hold as archive, apply [G.5](/generated/patterns/G.5) for shortlist publication, or stop for now only when the relevant lens-side reason is stated directly.
  • explore_share, backstop_confidence, probe budgets, and replan triggers are planning harmonization terms for that same declared choice doctrine.
  • They may regulate sequence and stopping; they do not redefine Front, Archive, Shortlist, or SelectionSlot.
  • If the next planned move is one public Shortlist or RankedShortlist, [C.24](/generated/patterns/C.24) should name that as a neighbouring-pattern exit to [G.5](/generated/patterns/G.5), not emit the selector artifact itself.

Policy profile and BLP precedence

ATC-Policy fields (conceptual). { backstop_confidence, explore_share, risk_bound, cost_ceiling, time_ceiling, tie_breakers, novelty_quota?, wild_bet_quota?, stop_conditions, BLP_delta_alpha, BLP_delta_delta } - realised by referencing an E/E-LOG EmitterPolicy and adding Bitter-Lesson-Preference clauses. Defaults inherit from C.19; any deviation is editioned.

BLP precedence. In conflicts with tactics that hard-code narrow scripts, the Bitter-Lesson Preference applies subject to E.3/E.5 precedence. Where scripts encode safety-critical gating or regulatory compliance, scripts prevail unless the governing context publishes the override rationale, expiry, measured hazard avoided, and planned re-evaluation window.

Didactic quick card

Agentic Call Plan (public field set). Objective - Context(K) - RouteRefsInOrder[edition-pinned] - BudgetEnvelope{time_budget, compute_budget, cost_budget, risk_limit} - PolicyRef - Explore-share - StopConditions - ReplanConditions - BLP tolerances - BLP waiver (if any) - Assurance<F,G,R|K,S> - Provenance ids

Explicit enactment outputs and closure rule

A finished C.24 pass should publish one enactment result rather than one vague statement that the system now has a plan.

Two output shapes are admissible here:

  • one enactment-facing CallPlan; or
  • one bounded CheckpointReturn when probing is still the admissible next move inside enactment planning.

A CallPlan should state at least these fields:

  • current objective;
  • cited route descriptions or planned call order;
  • active policy or planning state;
  • planned budget envelope or reserved budget;
  • stop or replan condition;
  • next move if the current plan is accepted now.

A CheckpointReturn should state at least these fields:

  • current task family or objective;
  • candidate routes tested so far;
  • evidence on those routes;
  • burned and residual actual budget;
  • recommended next action;
  • explicit commit trigger.

A compact result may therefore look like:

CallPlan(
  objective = answer_question_Q,
  policyRef = ee_policy_v1,
  routeRefsInOrder = [search_route_v3, retrieve_route_v1, synthesize_route_v2, code_check_route_v1],
  plannedBudgetEnvelope = {time<=60_minutes, compute<=x1, cost<=y1, risk<=r1},
  stopOrReplan = low_R_or_cost_ceiling,
  nextMove = enact_now
)

or:

CheckpointReturn(
  taskFamily = unfamiliar_lab_protocol,
  testedRoutes = [route_A, route_B],
  burnedBudget = 2_runs,
  residualBudget = 1_run,
  recommendedNextAction = probe_route_B_once_more,
  commitTrigger = route_B_clears_assurance_floor_L1
)

Close as one enactment-facing CallPlan when the choice result is already fixed enough that execution order, gating, and replanning are now the call-planning question. Close as one CheckpointReturn when bounded scout/probe work is still admissible inside enactment planning. Return to the neighbouring pattern when the result has actually fallen back into local choice, pool policy, or selector-facing publication.

If the result still does not state what should execute now, what budget is planned or already burned, and what event stops or replans the route, it is still unfinished [C.24](/generated/patterns/C.24) work.

Worked closure slice

Two short contrasts keep the closure law practical.

Known route, execution should begin now. When the objective and route are already fixed enough, C.24 should close as one enactment-facing call plan:

CallPlan(
  objective = produce_patch_and_verify,
  routeRefsInOrder = [inspect_repo_route, edit_candidate_route, run_targeted_tests_route],
  plannedBudgetEnvelope = {time<=45_minutes, compute<=x2, cost<=y2, risk<=r2},
  stopOrReplan = targeted_tests_fail_twice,
  nextMove = enact_now
)

Unfamiliar route, one bounded scout pass still admissible. When the route is still uncertain inside enactment planning, [C.24](/generated/patterns/C.24) should close as one CheckpointReturn:

CheckpointReturn(
  taskFamily = unfamiliar_ci_failure,
  testedRoutes = [log_trace_route, minimal_repro_route],
  burnedBudget = 1_probe_cycle,
  residualBudget = 2_probe_cycles,
  recommendedNextAction = run_minimal_repro_once_more,
  commitTrigger = repro_is_stable_and_assurance_floor_L1_holds
)

The practical distinction is simple: if route order and budgeted execution are already the call-planning question, emit one CallPlan; if bounded scout work is still the call-planning question inside planning, emit one CheckpointReturn.

  1. Research-assistance system in agential role. Task: answer a novel technical question. Candidate tools: retrieval, structured web search, code runner, table or plot generator. Plan: cite route descriptions for search, retrieve, synthesize, and code_check; declare explore_share approx 0.4; replan on sentinel low_R. The admissible structure here is one declared budget envelope, one explicit route order, and one visible replan trigger.

  2. Program-repair system in agential role. Task: propose a patch against a failing test suite. Candidate tools: repo introspection, static analyzer, unit runner. Plan: keep repo-introspection, patch-application, and targeted-test route descriptions distinct; use scout quota across patch families before committed rollout.

  3. Lab-automation system in agential role. Task: adjust a wet-lab protocol under drift. Candidate tools: planner, pipetting controller, spectrometer, Bayesian optimizer. Plan: a bounded probe or pilot can inform the route, but committed rollout waits for the declared commit trigger and assurance floor.

Bias-Annotation

Lexical firewall and notation independence apply; no vendor tokens; mixed-scale characteristics are never averaged; route descriptions remain distinct from U.WorkPlan, and both remain distinct from executed U.Work; a successful probe remains distinct from committed rollout until the commit trigger is satisfied.

Conformance Checklist

  1. CC-ATC-1 - Declared separation. ATC.CallRouteDescription is a MethodDescription; ATC.CallPlan is a U.WorkPlan that cites route descriptions; execution is Work; acceptance is via U.PromiseContent. No method-side route logic or actual burn is smuggled into the U.WorkPlan field set.
  2. CC-ATC-2 - Budgets on record. Time budget, compute budget, cost ceiling, and risk limit exist ex ante; stop conditions are listed.
  3. CC-ATC-3 - E/E policy. EmitterPolicyRef (or equivalent) and explore_share are editioned and logged.
  4. CC-ATC-4 - Assurance tuple. Publish the typed claim Plan admissible under K,S with <F,G,R> and CL penalties traceable in the CallGraph SCR. Design-time and run-time never merged.
  5. CC-ATC-5 - BLP waiver discipline. Any heuristic override against a general method includes expiry and re-evaluation date.
  6. CC-ATC-6 - Provenance minimum. Record {PromiseContentRef, CallPlanRef, MethodDesc.edition, EmitterPolicyRef, DescriptorMapRef? (if NQD), DistanceDefRef? (if NQD), TimeWindow, Seeds?, Dedup?}.
  7. CC-ATC-7 - Notation independence. No vendor tokens in conceptual text; bindings via Bridges or Profiles only.
  8. CC-ATC-8 - BLP tolerances declared. alpha/delta tolerances are present in ATC.Policy or referenced via the active E/E-LOG profile.
  9. CC-ATC-9 - CheckpointReturn for bounded specialization. When one route still uses scout/probe discipline on a new task family, it SHALL publish one CheckpointReturn with candidate routes, evidence, burned/residual actual budget, next action, and commit trigger; a successful probe alone never counts as committed rollout.
  10. CC-ATC-10 - Recoverable enactment closure. When C.24 returns one enactment-facing call plan or one CheckpointReturn, the CallPlan SHALL state current objective, route refs in order, planned budget envelope, stop or replan condition, and next move, while CheckpointReturn SHALL state burned/residual actual budget plus next action and commit trigger.
  11. CC-ATC-11 - Neighboring-pattern boundary. If the question under repair is still fixed-option choice, pool policy over several live lines, or selector-facing publication, C.24 SHALL apply C.11, C.19, or G.5 rather than restating those patterns.
  12. CC-ATC-12 - Role discipline. User-facing prose and emitted artifacts SHALL speak about systems in agential roles or equivalent typed performers, not one generic agent head, when that generic head would blur the holder kind.
  13. CC-ATC-13 - Causal action-use spec. If one CallPlan selects observation, intervention, counterfactual-rung evidence collection, counterfactual policy conditioning, or off-policy causal evaluation for a causal purpose, it SHALL carry CallPlan.causalActionUseSpec? with targetCausalityLadderRung, causalUseClaimKind: CausalUseClaimKind, supported use, unsupported use, and a C.28 causal-use support reference rather than letting call-planning vocabulary certify the causal claim.

Common Anti-Patterns and How to Avoid Them

  • Treating route description as plan. Avoid by keeping callable logic in ATC.CallRouteDescription and keeping ATC.CallPlan as one U.WorkPlan that cites it.
  • Treating planning as execution. Avoid by publishing actual burn only through CheckpointReturn, Work, and CallGraph, not inside the CallPlan field set.
  • Burning enactment budget while the question under repair is still upstream choice or pool policy. Avoid by rerouting unresolved fixed-option choice to C.11 and unresolved live-pool governance to C.19 before building one call plan.
  • Counting a successful probe as committed rollout. Avoid by publishing one CheckpointReturn with a visible commit trigger instead of smuggling rollout through a positive scout result.
  • Hiding stop conditions or replan triggers. Avoid by making them part of the public CallPlan field set rather than one private implementer intuition.

Consequences

  • tool use under systems in agential roles becomes inspectable as one admissible plan, not one opaque sequence of calls
  • downstream work receives one explicit enactment record with objective, route refs, budget envelope, stop conditions, and next move
  • the cost is stricter discipline around route-description versus plan versus work separation, explicit budgets, and visible policy state before execution begins

Rationale

C.24 exists because tool-use systems fail in a distinctive way: they can look adaptive while actually hiding route choice, budget burn, stop conditions, and replan logic inside one opaque execution chain. A separate planning calculus is therefore necessary so that tool use remains auditable, replayable, and governable before the first irreversible call is made.

Source-use role/currentness for this rationale: these rows are current-practice pressure and BLP-neighbour alignment, not a standalone SoTA-Echoing table. A current tool-use or agentic-loop source becomes load-bearing only when it changes one CallPlan, CheckpointReturn, budget, stop or replan condition, BLP waiver, or relation row.

  • Contemporary tool-use systems in agential roles work best when planning, feedback, and replanning stay explicit rather than collapsing into one brittle script. The practical implication is to publish one U.WorkPlan that cites route descriptions and carries stop or replan triggers before execution.
  • Post-2015 search, optimization, and agentic systems also show that bounded probing is useful but dangerous when it silently becomes commitment. The safeguard here is the explicit CheckpointReturn plus visible commit trigger and one explicit split between planned budget envelope and burned actual budget.
  • Scaling-first practice favors general, learnable methods over fragile hand-tuned tactics when assurance and cost remain comparable. The practical implication is not blind optimism but disciplined BLP: when a narrow heuristic wins, record the waiver, expiry, and re-evaluation window.

Relations

C.27 temporal-claim relation.

  • C.27 may flag: a tool-use plan claiming that tool use changes debugging, learning, search, repair, rollout, narrowing, uncertainty reduction, stabilization, or stop/replan rate.

  • This pattern keeps: call planning, tool-use sequence, budget, stop/replan, and work trace.

  • Non-admissible use: tool-call count, more context, or faster narrowing is effort evidence or input evidence at most; it is not task-success, reasoning-quality, evidence-quality, repair-success, cost, or validity-window evidence by itself.

  • Exit: a speed-up claim names task outcome, evaluation harness, repair-success evidence locus when claimed, cost or budget condition, validity window, stop or replan condition, and non-admissible use as a benchmark claim; C.24 remains the tool-use pattern.

Builds on: A.15 Role-Method-Work alignment (planning vs execution vs service), B.3 Trust and Assurance (F-G-R with CL), C.5 Resrc-CAL, C.18 NQD-CAL (candidate generation and declared set results), and C.19 E/E-LOG (policies). Coordinates with C.28 when a call plan is used to observe, intervene, collect counterfactual-rung evidence, condition a counterfactual policy, or evaluate a policy for causal-use support. Coordinates with E.23 when a repeated quality-improvement loop is enacted through tool-using agents: C.24 carries call plans, checkpoint returns, tool-call budgets, stop or replan conditions, and the separation among CallRouteDescription, call plan, and executed work; it does not restate the E.23 loop method, BLP comparison and cost discipline, or pattern-quality or DRR-adequacy object-under-improvement evaluations. Constrains: any U.PromiseContent used as a tool MUST expose acceptance conditions and observation hooks sufficient for B.3 reporting. Enables: human-facing Working-Model publication forms with policy and assurance disclosures while keeping design-time and run-time separated.

C.24:End

Q-Bundle: Authoring "-ilities" as Structured Quality Bundles

Type: Definitional (D) Status: Stable Normativity: Normative unless marked informative

Plain-name. Quality-bundle normal form.

Builds on. A.2.6 (USM scope algebra), A.6.1 U.Mechanism, C.16 MM-CHR, A.18 CSLC, B.3 Trust & Assurance Calculus.

Coordinates with. C.17-C.19 for quality-related measurement families, C.16.P when characteristic/scale/score wording is not yet recoverable, A.15 for method, work-plan, or work-occurrence gating, and C.16.Q for quality/evaluative-characterization wording before the endpoint is one explicit characteristic, Q-Bundle, objective, or another governing pattern.

Problem frame

Engineering quality language repeatedly drifts into one of two invalid simplifications: either every -ility is treated as one scalar characteristic, or every engineering-quality statement is left as loose evaluative prose. A conforming engineering corpus therefore needs a uniform discipline that keeps admissible measurements, scope declarations, mechanisms, statuses, and evidence visibly separated without inventing a new kernel ontology.

Problem

Without a normal form for engineering quality families:

  1. Composite families are scalarized illegally. Terms such as resilience, security, or maintainability are treated as if one number exhausted them.
  2. Scope is confused with measurement. A claim's ClaimScope / WorkScope is spoken of as if it were a magnitude rather than a USM set-valued applicability object.
  3. Mechanism and status are mistaken for evidence or metrics. Presence of redundancy, certification, or audit controls is described as if it were itself a measurement value.
  4. Guards become unstable. Admission checks silently mix scope coverage, numerical thresholds, mechanism presence, and evidence freshness in one phrase.
  5. Evaluative routing remains underspecified. After C.16.Q repairs a bare quality term, or C.16.P repairs characteristic, scale, score, metric, or proxy wording inside that term, the admissible endpoint is unclear unless FPF distinguishes single-CHR cases from bundle-shaped quality families.

Forces

ForceTension
Simplicity vs category hygieneAuthors want one convenient quality label; the framework must still keep CHR, USM, mechanism, and status roles distinct.
Comparability vs local applicabilityMeasures should compare legally across contexts, while scope remains context-local and set-valued.
Thin ontology vs practical authoringThe pattern should regularize quality authoring without creating a new heavy kernel family for every -ility.
Endpoint clarity vs expressive breadthSome quality terms really are one characteristic; others are bundles. The endpoint rule must cover both without ambiguity.

Solution - Q-Bundle normal form

C.25 defines a lightweight authoring normal form for engineering quality families. A publisher facing a quality term first decides whether the intended endpoint is:

  • one admissible CHR characteristic, or
  • one structured quality bundle whose measurable slots, scope slots, mechanisms, statuses, and evidence remain explicit.

Endpoint split

Use a single U.Characteristic when the quality claim is genuinely one measurable aspect with one declared scale and ordinary CHR legality.

Use a Q-Bundle when the quality family depends on more than one of the following:

  • one or more measurable characteristics,
  • a declared claim/work scope,
  • mechanism or status requirements,
  • qualification windows,
  • evidence anchors that are not reducible to one scalar.

Q-Bundle shape

Q-Bundle := <Name, Carrier, ClaimScope?, WorkScope?, Measures[CHR], QualificationWindow?, Mechanisms?, Status?, Evidence?>

The pattern adds no new Kernel kind for these slots. It reuses existing kinds and keeps them in one disciplined authoring structure.

Field roles

  • Name. The engineering quality family label, such as Availability, Resilience, or Security.
  • Carrier. The bearer of the quality claim: typically U.System, U.PromiseContent, or U.Episteme.
  • ClaimScope / WorkScope. USM sets over U.ContextSlice describing where the claim holds or where the capability can deliver. These are set-valued scope objects, not characteristics.
  • Measures[CHR]. One or more admissible CHR characteristics, each bound to one declared scale.
  • QualificationWindow. The temporal policy under which the quality claim is judged.
  • Mechanisms / Status. References to U.Mechanism realizations, control presences, certification states, or similar gating structures. They are not measurements.
  • Evidence. Anchors that justify the measures, mechanisms, or scope claims.

Guard reading

A conforming quality guard typically has the conceptual form:

Scope covers TargetSlice AND Measures meet thresholds AND QualificationWindow is valid AND required Mechanisms/Status are present

This keeps coverage, thresholding, and admissibility in separate typed slots instead of hiding them inside one quality adjective.

Archetypal Grounding

Tell. A quality family is not automatically one metric. Sometimes it is one characteristic; often it is a structured bundle whose measurable, scope, and mechanism slots must remain explicit.

Show (Availability). Availability may be authored as one CHR-centric bundle with AvailabilityRatio[%] as the principal measure, a declared service/time scope, and explicit redundancy mechanisms. The measure is scalar; the scope is not.

Show (Resilience / Security). Resilience or security usually requires more than one measure, plus scenario scope, mechanism references, and qualification windows. Treating either as one scalar "quality score" erases the bundle structure that the claim actually needs.

Bias-Annotation

The pattern biases authors toward explicit decomposition. That bias is intentional. It is better to publish a visibly structured quality bundle than to gain short-term convenience by collapsing scope, measures, and mechanisms into one overloaded quality label.

Conformance Checklist

  • CC-C.25-1 If an engineering quality claim is intended as one measurement characteristic, the publisher SHALL bind it to one named U.Characteristic with one declared scale.
  • CC-C.25-2 If the claim requires multiple measures, scope slots, mechanism slots, status slots, or qualification windows, the publisher SHALL use a Q-Bundle rather than an undeclared scalar surrogate.
  • CC-C.25-3 ClaimScope and WorkScope SHALL remain USM set-valued scope objects; they MUST NOT be treated as ordinal or numeric quality levels.
  • CC-C.25-4 Mechanism or status slots MUST NOT be conflated with Measures[CHR].
  • CC-C.25-5 Any scalar comparison or thresholding inside a Q-Bundle SHALL apply only to declared CHR measures, not to scope slots.
  • CC-C.25-6 Cross-context penalties and bridge losses SHALL route to R per B.3 / F.9; they MUST NOT silently alter the type of the bundle's F, scope, or CHR type authority.

Common Anti-Patterns and How to Avoid Them

Anti-patternWhat it looks likeHow FPF prevents it
One-number -ilityResilience = 82 with no declaration of what is being measured and what scope/scenario is intended.CC-C.25-2 requires a Q-Bundle when the family is composite.
Scope as metricThe claim treats wider applicability as a higher quality value rather than as a larger USM set.CC-C.25-3 keeps scope set-valued and non-CHR.
Mechanism equals qualityPresence of a mechanism or certificate is reported as if it were the measurement itself.CC-C.25-4 keeps mechanism/status slots distinct from measures.
Collapsed guard proseOne sentence mixes coverage, thresholds, windows, and mechanisms without typed separation.C.25 rewrites the claim into explicit slots and typed guard factors.

Consequences

BenefitTrade-off / Mitigation
Category hygiene. Scope, measurement, mechanism, and status no longer collapse into one term.Slightly heavier authoring structure; mitigation: only composite cases need the full bundle.
Portable comparison. CHR measures compare legally, while scope remains governed by USM set algebra.Authors must declare scales and scope explicitly.
Cleaner gating. Method/work guards can read the same structure without hidden semantics.Requires discipline in separating guard factors.
Better endpoint classification. C.16.Q can terminate in either one characteristic or one Q-Bundle with a clear endpoint pattern.Requires a first-pass endpoint decision during authoring.

Rationale

Engineering quality language is useful precisely because it groups recurring concerns under memorable family labels. The same grouping becomes dangerous when those labels are mistaken for one universal metric. C.25 preserves the family labels but forces the underlying structure to stay typed and visible.

SoTA-Echoing

Contemporary engineering quality practice routinely mixes service-level measures, capability windows, scenario envelopes, mechanism presence, certification state, and evidence traces. C.25 adopts that practical richness but refuses the common shortcut of compressing the whole family into one undefined score.

Relations

E.21 specialises the Q-Bundle normal form for FPF pattern-quality claims. C.25 remains the general endpoint for engineering quality families; E.21 is the endpoint governing pattern when the quality claim evaluates one FPF pattern version as action-guiding FPF text.

C.27 temporal-claim relation.

  • C.27 may flag: a quality-family statement where agility, resilience, adaptability, recovery, or robustness depends on braking, redirection, stabilization, recovery rate, or rhythm under effort.

  • This pattern keeps: quality-family bundle structure, scope, mechanism/status slots, evidence, qualification window, and failure mode.

  • Non-admissible use: temporal adequacy is not quality adequacy; speed, recovery, or rhythm becomes quality content only when C.25 declares the quality family, scope, mechanism/status slots, evidence, and failure mode.

  • Exit: use C.27 to state the dynamic slot only when it changes admissible use; do not make every quality bundle carry dynamic slots.

  • Builds on: A.2.6 for scope algebra, A.6.1 for mechanism references, and C.16 / A.18 for CHR legality.

  • Coordinates with: C.2.2a, A.16.0, B.3 for assurance penalties, A.15 for gate use, C.16.P for unresolved characteristic, scale, score, metric, or proxy wording inside a quality-family statement, C.16.Q for overloaded quality or evaluative-characterization wording, C.17, C.18, and C.19 for adjacent quality-family measures, and F.9 / F.9.1 when cross-context bundle comparison or bridge stance annotation is required.

  • Constrains: engineering quality authoring whenever a quality term would otherwise drift between single-CHR and composite-bundle readings.

Endpoint role in evaluative classification

Within language-state trajectories and their endpoint docks, C.25 is the system-side endpoint pattern for engineering quality families after overloaded quality wording has been repaired by C.16.Q and any hidden characteristic, scale, score, metric, or proxy wording has been repaired by C.16.P. qualityTermAscription(...) may remain a transitional repair record, but it is not the universal resting place when the admissible endpoint is a single Characteristic, a Q-Bundle, or an explicit objective-oriented quality bundle.

Decision Test: Single Characteristic or Bundle?

The most common authoring failure is not in the bundle syntax itself; it is in choosing the wrong endpoint shape. The quickest useful test is to ask what would make the quality claim false.

Use one U.Characteristic when

A quality claim should terminate in one admissible CHR characteristic only when all of the following hold together:

  • one measurable aspect is actually doing the evaluative work,
  • one declared scale is enough to compare relevant cases,
  • the bearer and scope are already clear without introducing extra quality slots,
  • mechanism or status presence is not itself part of the core quality head,
  • and downstream gates can read the claim without needing a bundle decomposition.

Examples include a narrowly declared AvailabilityRatio[%], a specific latency percentile, or one response-time threshold under one fixed window.

Use a Q-Bundle when

A quality claim belongs in C.25 when one family label is standing over several distinct typed concerns, for example:

  • several measures are needed together,
  • scenario or claim scope is load-bearing,
  • mechanism presence or certification state constrains admissibility,
  • qualification windows alter the reading materially,
  • or one scalar head would hide which part of the family is actually failing.

The bundle is not a fallback for laziness. It is the explicit authoring form for claims whose truth conditions are already composite.

Borderline cases

Some quality families contain both a bundle-shaped form and a narrow single-characteristic form. For example, a service team may use:

  • one CHR characteristic for a very narrow uptime commitment, and
  • one Q-Bundle for the broader service-availability family that includes scope, windows, failover mechanisms, and evidence.

This is legitimate as long as the text states clearly which head is currently in play. The single-characteristic form does not replace the broader family; it selects one evaluative slice of it.

Slot Interaction Law

The practical payoff of C.25 is not just that it names the slots. It also stabilizes how those slots interact.

Scope and measure remain orthogonal

ClaimScope and WorkScope answer where or under what contextual slice the quality claim holds. Measures[CHR] answer how a measurable aspect behaves. A broader scope is not a larger measurement value; a narrower scope is not a penalty value. Scope is governed by set inclusion and coverage, not by scalar order.

Mechanism and status are gating slots

Mechanisms and statuses may be load-bearing for admissibility, but they do not become measurements merely because they matter. A redundancy mechanism may be required for claiming a resilience bundle, and a certification status may be required for external publication, yet neither slot is itself the Measures[CHR] head.

This matters because many quality arguments fail by turning mechanism presence into an implicit hidden score.

Qualification windows are not decorative

A quality claim that depends on rolling windows, observation periods, maintenance intervals, or disruption horizons must publish that temporal qualifier explicitly. If the truth of the quality claim changes when the window changes, then the window is part of the declared bundle record rather than optional commentary.

Report-only summary proxies

A publisher may compute a report-only summary proxy for convenience, for example a compact quality summary proxy value or an oversight-facing composite score. Such a proxy is admissible only if:

  • it is explicitly declared as a report-only proxy,
  • the underlying bundle slots remain visible,
  • and no norm, gate, or bridge silently substitutes the proxy for the bundle itself.

This prevents a convenience summary from becoming a covert replacement for the typed quality claim.

Worked Quality Families

Availability family

A narrow service commitment may use AvailabilityRatio[%] as one characteristic. A broader availability family usually still needs a bundle because the claim depends on:

  • declared service and time scope,
  • observation and qualification window,
  • one or more mechanism slots such as failover or redundancy,
  • and evidence tying the measurement to declared observation conditions.

The bundle form makes it possible to distinguish "the measurement fell short" from "the measurement is fine but the declared mechanism prerequisite was absent".

Resilience family

Resilience is almost never one scalar. It commonly binds together:

  • disruption scenario scope,
  • restoration-related measures such as MTTR, RTO, or RPO,
  • recovery mechanisms and preparedness states,
  • and scenario-specific evidence about drills, restorations, or incident traces.

Trying to compress this into a single resilience value usually destroys the difference between fast recovery in one scenario and structural fragility in another.

Security family

Security claims routinely combine:

  • trust-zone or attack-class scope,
  • measurable characteristics such as patch latency, control coverage, or response interval,
  • control-set and certification slots,
  • and evidence from audit, observation, or incident review.

C.25 therefore treats broad security-family claims as bundle-shaped unless the claim has already been narrowed to one admissible CHR characteristic.

Maintainability and evolvability

Maintainability or evolvability claims often drift into pure rhetoric. In C.25, they become usable only when the publisher separates:

  • the declared scope of systems or change classes,
  • the measurable slots (for example change lead time, defect reintroduction rate, restoration interval, review load),
  • the enabling mechanisms (modularity rules, test harnesses, interface discipline),
  • and the window or evidence conditions under which those measures were observed.

This is exactly the kind of quality family that looks scalar in speech but turns composite once the claim is made explicit.

Authoring and Review Guidance

For authors

Authors should begin with the question: what is the actual head of this quality claim? If the truthful answer is "several measures plus scope plus mechanism constraints," start with a bundle and narrow only if a later slice genuinely deserves one CHR head.

A useful authoring order is:

  1. name the family label,
  2. identify the bearer,
  3. publish scope,
  4. publish measures,
  5. add mechanism/status slots,
  6. publish qualification window,
  7. bind evidence,
  8. and only then consider whether a report-only summary proxy is needed.

For assessors

A checking reader should ask:

  • whether the chosen endpoint shape is admissible,
  • whether any scope slot has been smuggled into scalar language,
  • whether mechanism presence has been mistaken for a metric,
  • whether the window is truly optional or actually load-bearing,
  • and whether any summary proxy is trying to replace the underlying bundle.

In practice, most defects are visible as soon as the checking reader asks what exactly one reported number stands for.

For gate designers and assurance leads

Gate designers should resist writing guards against vague family labels such as resilience must be high. A conforming gate should instead name the relevant bundle slots:

  • coverage over the target slice,
  • threshold satisfaction on declared measures,
  • qualification-window validity,
  • and any required mechanism or status slots.

This keeps the gate auditable and prevents later disputes about what the family label was supposed to mean.

Migration and Boundary Notes

Migration from bare quality requirements

Legacy phrases such as quality requirement, security requirement, or availability requirement should not survive as bare heads when the underlying endpoint is actually a characteristic or bundle. The migration rule is:

  • choose the endpoint shape first,
  • then bind the requirement or commitment to that explicit head.

C.16.Q may still be the entry repair for overloaded quality wording, and C.16.P may repair characteristic, scale, score, metric, or proxy wording inside the same statement; C.25 is the resting place only after the engineering quality family has been made explicit.

Boundary to assurance penalties

Cross-context transport, bridge loss, or plane mismatch do not change whether the endpoint is one characteristic or one bundle. Those effects route to R and its penalties. C.25 therefore should not be used to hide assurance degradation inside the quality-family ontology.

Boundary to publication convenience

A report, summary publication, or executive summary may expose only one slice of a Q-Bundle, but the underlying authoring structure remains the bundle. Publication convenience is not a reason to collapse the ontology at the source.

Serviceability and supportability

Serviceability, supportability, and adjacent family labels often look simple in prose but become composite as soon as operational use is declared. An admissible bundle for this family may need:

  • support-scope slices,
  • measured restoration or service intervals,
  • mechanism slots for support mechanisms, access discipline, or replacement procedures,
  • and evidence from service traces or support records.

The lesson is the same as elsewhere in C.25: once the truth of the family claim depends on several typed contributors, the bundle should stay explicit.

Boundary to description-side and selector-side evaluation

C.25 is for engineering quality families whose bearer is a system-side, promise-side, or explicit quality-bearing artifact. It does not automatically cover:

  • viewpoint-fit or grounded architecture adequacy claims, which may belong in viewpoint or evaluative-ascription patterns,
  • or selector/objective heads where quality means use-value under a search or portfolio frame.

This boundary matters because the same word quality appears across those zones. C.16.Q repairs overloaded quality wording, C.16.P repairs characteristic, scale, score, metric, or proxy wording when that is the hidden object, and the resting endpoint depends on what is actually being evaluated.

Bundle Decomposition and Comparison Law

Local decomposition rule

A family label may remain stable while its internal slots differ materially across contexts. Conforming comparison therefore starts by aligning the bundle decomposition: scope slots with scope slots, measure slots with measure slots, mechanism/status slots with their own kinds, and evidence/window slots with their own kinds. Comparing one bundle's measure directly to another bundle's mechanism claim is a category error even if both sit under the same family label.

Narrow slice versus whole family

A context may admissibly extract one narrow slice from a broader Q-Bundle and publish that slice as a single CHR characteristic, but the publication should say that the slice is only one member of the broader family. What is not admissible is to report the slice as though it exhausted the entire family claim.

Cross-context family comparison

Cross-context comparison of quality families should proceed through explicit bundle alignment and, where needed, F.9 bridge discipline on the relevant heads or slots. The bundle ontology stays in C.25; bridge loss, translation-relation adequacy, and cross-context penalties remain outside the bundle itself.

Gate, Proxy, and Reporting Discipline

Report-only summary proxy

A context may publish a summary proxy for reporting convenience, but the proxy remains secondary to the Q-Bundle. The proxy should state what it summarizes and what it leaves out. No report-only proxy may replace the bundle in norms, gates, or endpoint ontology.

Gate binding rule

When a gate uses a quality family, the gate should bind to explicit bundle slots: declared scope, specific measures, qualification window, and any required mechanism or status slots. Gate authors should not rely on the family label alone, because labels invite different local decompositions.

Roll-up caution

A summary publication or review may aggregate several bundle instances, but the roll-up must remain visibly downstream from the underlying bundle structure. If the roll-up begins to drive local engineering decisions directly, the governing bundle slots should be surfaced again rather than hiding them behind one summary score.

Review Matrix and Migration Tests

A checking reader can test a Q-Bundle with five questions:

  1. Is the endpoint shape admissible? One characteristic where one characteristic is live, one bundle where several typed contributors are load-bearing.
  2. Are scope and mechanism slots kept distinct from measures?
  3. Is any summary number trying to replace the bundle?
  4. Would a gate still be auditable if the family label were removed?
  5. If the claim crosses contexts, is bridge work kept in F.9 rather than hidden inside the family bundle?

Migration from legacy family prose should therefore recover bundle shape first, then choose whether any narrow slice deserves a separate CHR publication.

Viability-envelope, quantum-like, and temporal-claim relation note

Use C.25 when the question under repair is a quality bundle, "-ility" decomposition, proxy metric, trade-off, gate, or report. A viability claim should not become quantum-like merely because it involves uncertainty, feedback, several qualities, or changing operating conditions; a temporal claim should not become a Q-Bundle merely because the working phrase mentions speed, cadence, rhythm, or recovery.

Practical reading:

  1. Decide whether the quality claim is one admissible Characteristic or a Q-Bundle.
  2. If it is a bundle, name bearer, scope, measures, qualification window, mechanisms/status, and evidence.
  3. Ask whether the claim is really viability-envelope work: protected promise/function, viable region/bounds, several variables, disturbance, sensors/probes, actuators, boundary conditions, adaptation cost, and failure mode.
  4. If one proxy or bundle is enough, stay in C.25.
  5. If the envelope reading depends on a probe, sensor, frame, export, action, coarsening, or boundary interaction that changes what can be said admissibly, the remaining viability-envelope question belongs with C.26.3.
  6. If the sentence is an intervention-sensitive temporal claim about rate-change under effort, window, resistance, or cadence, inspect C.27 for the smallest honest temporal-claim adequacy card before using the quality label for action.
  7. State viable region/bounds, trade-off, admissible use, non-admissible use, and failure mode before viability language is used for action.

Minimum viability-envelope note:

FieldRequired content
BearerSystem, service, organization, team, model, process, or role configuration whose viability is at stake
Protected promise / functionThe promise, function, use, operating regime, or stakeholder value the envelope protects
VariablesWhich qualities, constraints, resources, risks, or state descriptors define the envelope
Viable region / boundsWhat counts as inside, near edge, degraded, or outside the envelope for this use
Disturbance classWhat perturbation, demand shift, environment change, probe, or boundary condition stresses the envelope
ActuatorsWhat work, design move, policy, boundary change, sensor change, or resource change can move the bearer
Trade-off / lossWhat gets worse, hidden, coarsened, delayed, or made more expensive
Admissible useWhich action, decision, relation, or triage use the envelope reading can carry
Non-admissible useWhich release, audit, assurance, or universal quality claim requiring additional support it does not support
Failure modeWhat it means to leave the envelope or to mistake one proxy for the envelope

Useful outputs:

  • a Q-Bundle when the issue is quality decomposition;
  • a C.26.3 envelope-regulation note when probes/actuators/boundary conditions change the admissible viability reading;
  • a C.27 temporal-claim adequacy card when rate-change, effort, window, resistance, or cadence changes the admissible use;
  • no QL wording when ordinary quality-bundle, proxy, feedback, or control tuning carries the work.

C.25:End

Quantum-Like Modeling Lens

Type: Architectural pattern Status: Stable Normativity: Normative unless explicitly marked informative

Problem frame

FPF already has local patterns for decisions, boundaries, bridges, work, measurement, search, and quality bundles. Some real architecture cases still break when those patterns are applied as if every read, question, dashboard, workshop, bridge, or simplified representation were a passive view of a stable state.

Use this pattern when the ordinary FPF pattern remains active but misses one extra representational issue: the act of probing, framing, exporting, comparing, or coarsening changes what can admissibly be inferred from the represented state. The useful move is small. Add a quantum-like mathematical lens only where it tells the user how to avoid a concrete representational mistake.

This pattern is not a physics claim. In FPF, quantum-like names a detached mathematical and representational lens, comparable in role to probability, calculus, optimization, or state-space modeling. It is cheap as a QL-lite note and expensive only when the claim becomes reusable law, assurance evidence, empirical superiority, formal reconstruction, or ontology.

Unifying principle: use QL to cheapen the first correct move, not to make the first mention more expensive.

Working viewValue
Primary readerArchitect, method author, steward, or manager deciding whether QL wording improves a concrete FPF representation.
Primary EntityOfConcernA local use of quantum-like mathematical language in pattern prose or work guidance.
Admissible moveAdmit, select another applicable pattern body, narrow, or escalate the QL wording by ordinary FPF pattern, QL cue, payoff, minimal admissible output, and local stop.
Outside workPhysical quantum claims, general ontology, ordinary uncertainty/complexity, ordinary DDD locality, ordinary compression, and search/regime generation.
What changes in practiceThe writer stops asking "does quantum-like help here?" and asks "what representational mistake does this lens prevent here?"

What this lens buys in practice:

QL supportPractical gain
Probe-aware designDesign a workshop, dashboard, API read, survey, readiness check, or metric publication as a state-shaping interaction when it is not only a readout.
Comparison-frame disciplineNotice earlier that two options, scores, or judgments cannot be compared in one frame without a bridge, coupling, or declared joint-comparison route.
Export humilityStop false cross-context substitution quickly: a carried value, report, or label may not export the same state for the intended use.
Low-recoverability distributed-state readingTalk about team, organization, market, or service-mesh behavior without inventing a group mind and without reducing the state to one report.
Envelope-first viabilityMove from "which single metric wins?" to a viability envelope with variables, sensors, actuators, costs, and failure modes.
Admissible coarsening useUse a cheaper state representation when it helps, while keeping source, loss, admissible use, non-admissible use, and reopen condition visible.

Plain glosses:

  • quantum-like: a detached mathematical / representational lens, not a claim about what the target is made of.
  • probe: an operation that both produces an output and may change the represented state or admissible use of the output.
  • frame: a probe frame, measurement frame, comparison frame, or model frame. If the text means FPF semantic context, say U.BoundedContext or bounded context explicitly.
  • state: the represented condition relevant to the current decision, not a generic new U.State kind.
  • state update: a typed update claim. When load-bearing, say whether the update is a system change, work change, epistemic reading update, carrier update, emitted-output update, formal model update, or update-law change; do not let one phrase carry all of them.
  • context: not a shorthand for frame. Use it only in explicit FPF terms such as U.BoundedContext, bounded context, or cross-context bridge.
  • export: a carried representation whose use may lose timing, coordination, role, use conditions, confidence, or relation structure.
  • coarsening: an intentionally cheaper state representation with declared loss and reopen conditions.

Phrase hygiene:

Risky phraseBetter FPF phrase
Dashboard changed the state.Dashboard publication or use changed work behavior or evidence conditions.
Metric acted as observer.Measurement/publication regime functioned as a probe interaction.
Organization knows.Coordinated work traces support a low-recoverability state reading over a declared collective bearer.
Market is entangled with product team.Ordinary market, feedback, negotiation, and organizational-coupling routes fail; local reads or exports are not admissibly comparable or reusable without declaring the probe, frame, update, or export relation.
Boundary collapsed after workshop.Workshop work selected or created a local boundary reading for this decision window.
State cannot be copied.No faithful-enough export supports the intended cross-context use.
Same metric in two contexts.Same-named result under different measurement or comparison frames.
Quantum-like service health.Viability-envelope reading affected by probe, export, or coarsening cue.

Example style:

StyleExample
BadThe team's quantum-like distributed state collapsed after the readiness dashboard observation.
BetterThe readiness dashboard was not a passive read: its publication changed team behavior, so the dashboard result cannot be used alone as pre-publication readiness evidence.
BestApply C.16 to ordinary metric issues and B.3 to release assurance. Retain C.26.1 only for the residual false passive-read issue: dashboard publication changed readiness behavior in window W. Decision diff: do not use the dashboard as sole release evidence; add independent work traces and record non-admissible use.

Informative bilingual translation note:

EnglishPrefer in Russian / bilingual useRisk
probeprobe / пробное воздействие / считывающее взаимодействие"измерение" is too narrow; "зонд" sounds too physical.
state readingчтение состояния / state-reading claim"состояние" without reading sounds ontological.
frameрамка сравнения / probe frame / model frame"контекст" can collide with bounded context.
instrumentinstrument-like operation / операция-инструмент"прибор" sounds too physical.
distributed statedistributed-state reading"распределённое состояние" sounds like a new object.
faithful-enough exportдостаточно верный перенос для заявленного use"копия" suggests an impossible-copy ideal.

Problem

Without this pattern, teams make five recurring mistakes.

They treat a probe as a neutral read when the probe changes later answers or behavior. They combine two posterior-looking outputs as if both came from one shared sample space. They export a team state, dashboard value, or context-map result as if it were a faithful-enough export for the intended use. They compress a large state representation for speed and then reuse the shortcut outside its admissible-use scope. They let words such as quantum, entanglement, collapse, or field import ontology that the model never earned.

The result is not merely loose wording. The team may approve a release from a dashboard whose publication and operational use changed the work it was supposed to report, average incompatible risk estimates, copy a local decision into another bounded context after the bridge lost the live coordination, or claim a speed gain because the representation was low-bit, linear, symbolic, or compressed without naming the loss.

Forces

ForceTension
Ordinary FPF patterns firstC.11, A.6, F.9, A.15, C.25, C.16, A.10, B.3, C.18, C.19, and A.19 already do real work. QL wording must add only the remaining state, probe, or export cue.
Lightweight use vs claims requiring additional evidenceA local diagnostic note should be cheap; reusable guidance, assurance, physical claims, or superiority claims need heavier evidence and explicit neighboring-pattern selection.
Useful math vs misleading vocabularyQuantum-like formalisms help with order, contextual probability, incompatible probes, instruments, and open information systems; popular quantum words easily overclaim.
Representation cost vs representation lossA cheaper state representation may be the right engineering move, but only if the source, shortcut, loss, admissible use, and reopen condition stay visible.
Recognition vs assuranceWorking readers need fast entry; the assurance section needs enough typed fields to prevent pattern-role theft, impossible-copy overread, and hidden ontology.

Solution

Start with the ordinary FPF pattern. Add this lens only when ordinary wording would falsely treat a probe, question, metric, dashboard, API read, workshop, bridge, comparison frame, or coarsened representation as passive, stable, jointly comparable, or faithfully exportable. The main entry question for the whole cluster is: "What should the user do with this lens so that the representational mistake does not arise here?"

Action path:

  1. Name the ordinary FPF pattern that already carries the baseline question.
  2. Name the concrete representational mistake: passive read, shared comparison frame, false faithful-enough export claim for the intended use, exact-state shortcut, or unsupported coarsened representation.
  3. Test the positive QL cue and the negative activation list.
  4. Fill the QL-lite card if the cue survives.
  5. Emit one practical result: use ordinary pattern only, add QL-lite note, select one C.26 child pattern as the applicable pattern body, add evidence and assurance, or drop the QL wording.
  6. Escalate only when the claim becomes reusable, assurance-bearing, formal, empirical-superiority-bearing, or ontology-bearing.

C.26 ordinary output: produce one of these, then stop or select the neighboring applicable pattern body:

  • no C.26 pattern selection because the ordinary FPF pattern carries the case;
  • QL-lite note with the minimum sufficient field set;
  • use the ordinary pattern that carries the question under repair;
  • escalation to evidence, assurance, or formal-model work when the claim’s evidence or authority demand requires it.

Keep the entry cost proportional to the use. A QL situation does not begin with a full record.

Working viewUse it whenOrdinary output
Recognition noteThe reader only needs to see that an ordinary FPF pattern plus a QL cue may prevent a representational mistake.Five-field QL-lite note, local stop, and next action.
Decision-bearing recordThe QL reading changes a boundary, bridge, work, measurement, viability, or representation decision.Typed fields for carrier, window, rival, loss, minimal admissible output, admissible use, non-admissible use, and neighboring-pattern handoff.
Assurance recordThe claim becomes reusable law, audit and evidence support, release-facing support, empirical-superiority claim, formal reconstruction, or ontology-bearing claim.Evidence graph, measurement relation or assurance relation, source-support role, rival-model comparison, and explicit escalation outside QL-lite.

Do not make the decision-bearing or assurance record the ordinary entry cost. The everyday pattern move is a small recognition note plus a bounded action.

Affordability by working-reader situation:

Working-reader situationUse
Practitioner or architectThree-to-five-field recognition note plus decision diff.
FPF pattern authorFull card, examples, neighboring-pattern selection, and local anti-cases.
Checking readerPattern-application check plus false-positive and false-negative tests.
Assurance or audit readerFull evidence record with B.3, A.10, and C.16 integration.
Research or formalization readerM3 or M4 formal model, rival models, and empirical or theoretical support.

Do not require a practitioner or architect to produce a researcher-level record when the claim is only recognition or local-working support condition.

Checking discipline:

Checking failureRepair
"QL word appeared, escalate to assurance."Ask what claim and evidence demand are actually being made.
"This sounds metaphorical, remove it."Ask what representational mistake the wording prevents.
"Use ordinary FPF only."Name the ordinary FPF pattern that carries the residual claim.
"No quantum-like unless mathematically formalized."Allow QL-lite when it prevents local false reading and no formal claim is made.
"Everything with feedback is QL."Apply C.16, C.25, or A.15 first to ordinary feedback, control, and metric-gaming cases.

Cluster maxim: quantum-like wording does not raise assurance load by default. Assurance load rises only when the claim itself is reused, contested, evidence-bearing, release-facing, high-impact, comparative, formal, or ontology-bearing.

Pattern-local-note dependency rule: when an existing FPF pattern cites C.26 or a C.26.* child, the pattern's ordinary action guidance and conformance text remain primary. The citation means only: if a residual QL cue remains after the ordinary FPF pattern has carried its part, use this lens for that residue. It does not make every citing-pattern case depend on the full C.26 record or on every child-pattern semantic.

QL boundary selection:

Gate questionApplicable FPF pattern
Is this ordinary boundary, interface, API, or protocol ambiguity?A.6 and boundary/interface patterns.
Is this ordinary bridge, export, substitution, or loss across contexts?F.9 / F.9.1.
Is this ordinary measurement, metric gaming, scale, coordinate, or noise?C.16.
Is this ordinary evidence, provenance, method, or carrier issue?A.10 and, when assurance-bearing, B.3.
Is this ordinary work, routine, incentive, alignment, or authority issue?A.15 and neighboring work/authority patterns.
Is this ordinary quality-bundle, viability, feedback, or dynamics tuning?C.25, U.Dynamics, and measurement or work patterns.
Is this ordinary representation transduction or controlled coarsening?A.6.3.RT, A.6.3.CSC, and ordinary representation patterns.
Does residual false passive read, false shared frame, false faithful export, unsupported state reading, or QL-specific coarsening remain?Use C.26 or the relevant C.26.* child with the minimum sufficient field set.

The default output is a QL-lite card:

FieldQuestion
Ordinary FPF patternWhich FPF pattern already carries the baseline question?
QL cue or formal cueWhich order effect, frame effect, incompatible probe structure, response-replicability tension, measurement-changing-state, no faithful-enough export under the declared probe, frame, or use, bridge loss or export loss, mutual interaction whose local reads and exports are no longer admissibly comparable or reusable without declaring the probe, frame, or update relation, open-information-system update whose update rule, probe frame, or export admissibility is part of the modeling condition, or state-representation coarsening effect changes the admissible reading?
Representational payoffWhat mistake does the lens prevent, or what cheaper representation does it support?
Minimal admissible outputWhat may be concluded or done now?
Decision diffWhat would be done incorrectly under the ordinary false reading, and what changes after QL repair?
Local stop or neighboring-pattern handoffWhich use is non-admissible under this card, and which neighboring FPF pattern governs that use?

Decision diff examples:

False readingQL repairDecision diff
Dashboard passively shows release readiness.Dashboard publication changes readiness behavior.Do not use dashboard alone as release evidence; add independent work traces or redesign metric publication.
Workshop discovered the boundary.Workshop also created the boundary meaning.Do not export workshop result as timeless domain fact; record window, participants, carriers, and unresolved rivals.
Service is healthy because latency is green.Viability envelope is degraded by support load and promise failure.Add envelope variables and actuators; do not greenlight based on latency alone.
Summary preserves architecture state.Summary is a coarsened shortcut with declared loss.Use for orientation only; return to source for release or design lock.

Minimum viable QL-lite note:

Ordinary patterns: C.16 + A.15.
Mistake prevented: dashboard result would be read as passive release-readiness evidence.
Probe effect: publication changed team behavior during W.
Decision diff: do not use dashboard alone for release; add independent work traces.
Stop: not a reusable QL model, not assurance evidence, not physical quantum claim.

This is enough for QLP-0 / QLP-1 ordinary working use unless the claim is reused, externalized, contested, assurance-facing, comparative, formal, or ontology-bearing.

Use the [C.11](/generated/patterns/C.11) mini-output discipline across the cluster: finish with one next move, not with an interesting label.

Mini-outputCluster meaning
Use / choose nowThe low-recoverability reading is enough for the declared local action or decision.
Probe againOne named probe, order/frame test, measurement, source check, or bridge check could still change the result.
RerouteThe question under repair belongs to another FPF pattern rather than QL-lite.
No QL wordingOrdinary uncertainty, measurement, work, bridge, quality, or search patterns carry the case.

Retire QL when the residual cue disappears. If [A.6](/generated/patterns/A.6), [F.9](/generated/patterns/F.9), [C.16](/generated/patterns/C.16), [A.10](/generated/patterns/A.10), [B.3](/generated/patterns/B.3), [A.15](/generated/patterns/A.15), [C.25](/generated/patterns/C.25), [A.6.3.CSC](/generated/patterns/A.6.3.CSC), [A.6.3.RT](/generated/patterns/A.6.3.RT), or another ordinary FPF pattern now carries the claim without a false passive read, false shared frame, false faithful export, unsupported distributed-state reading, or QL-specific coarsening residue, remove QL wording from the active working note or pattern prose.

Use the lens only after the activation test survives both sides. QL remains active only when the ordinary FPF pattern cannot admissibly treat the output as a passive read, a shared-frame comparison, a faithful-enough export, or a use-scope-preserving state representation. Bridge loss, feedback, coupling, openness, compression, and coarsening are not QL cues unless they change the admissible state, probe, frame, or export reading for the current use. C.26 carries the full negative activation catalog; child and citing patterns should repeat only the local non-trigger that is frequent enough to matter for that pattern.

Canonical cue grammar:

Cue familyQL only if
Probe / order / frameThe operation changes the admissible reading of the output, comparison, or represented state.
Export or bridgeThe export is not faithful enough for the intended use, and ordinary bridge and loss discipline does not fully carry the remaining export/use issue.
Distributed-state readingCoordinated behavior, trace pattern, or work result supports a low-recoverability state reading no single carrier faithfully exports, after ordinary rivals are checked.
Viability envelopeProbe, sensor, actuator, export, boundary condition, or coarsening changes the admissible viability reading.
CoarseningThe reduced-detail state representation depends on a QL cue plus declared loss, admissible use, non-admissible downstream use, and reopen trigger; ordinary compression or abstraction alone is not enough.
Positive activation pressureNegative activation test
------
Load-bearing order effect, frame effect, incompatible probe structure, response-replicability tension, measurement-changing-state, no faithful-enough export under the declared probe, frame, or use, bridge export of the state that is not faithful enough for the current use, mutual interaction where neither side's output can be used as a faithful-enough local export of the joint state under the intended decision frame after ordinary feedback relations are tried, or state-representation coarsening whose admissible use changes because of a declared QL cue.No QL activation from discreteness, tokenization, low-bit quantization, stochasticity, ordinary uncertainty, nonlinearity, complexity, ordinary coupling, ordinary feedback, emergence, tacit knowledge, ordinary openness, ordinary compression, ordinary coarsening, ordinary DDD locality, ordinary API boundary, ordinary bridge loss, ordinary feedback control, or impressive quantum-like vocabulary alone.

Practical payoff in ordinary prose:

  • "the metric reported readiness" becomes "the metric publication or measurement regime functioned as a probe interaction that changed readiness behavior";
  • "two risk scores disagree" becomes "the two scores may come from non-shared comparison frames with no declared admissible joint comparison route";
  • "the workshop discovered the split" becomes "the workshop was a probe whose order and framing changed alignment and local meaning";
  • "the team knows" becomes "coordinated work evidences a low-recoverability distributed-state reading with carriers, window, and export loss";
  • "this smaller model is enough" becomes "this coarsened state representation carries only its declared admissible-use scope and reopen condition".

Inherited QL boundary

Invariant QL-NQ: within FPF, quantum-like is a detached mathematical and representational modeling lens. It may use quantum-theory-derived structures such as contextual probability, Hilbert-like state spaces, non-Boolean logic, instruments, operator-like update, order effects, open-system descriptions, or incompatible probes.

Quantum-like does not assert physical quantum substrate, microscopic quantum process, qubits, quantum computation, physical entanglement, nonlocal causality, literal collapse, mystical observer effects, social substance, or collective mind. A physical-quantum claim is a different claim and needs separate physical or empirical support outside this pattern cluster.

Child patterns inherit QL-NQ. They should not restate the global boundary as local guidance unless they are repairing a specific confused phrase.

Pattern selector

Causal-use exit before QL retention

Before retaining QL-lite, QL-NQ, or a quantum-like framing for a claim being made, check whether the actual question is intervention, counterfactual comparison, causal effect, causal fairness, causal policy, off-policy causal evaluation, or realizability of counterfactual-rung data. If so, redirect the claim/question to C.28 before any quantum-like retention.

CC-C26-CAUSAL-EXIT:
If the question under repair is intervention, counterfactual comparison,
causal effect, causal fairness, causal policy, or realizability of counterfactual-rung data,
redirect the claim/question to C.28 before retaining QL-lite or QL-NQ.

What changes in practice: "the model is quantum-like" cannot be used to skip causality-ladder rung declaration, causal identification, causal evidence support basis, or counterfactual sampling realizability.

What this does not authorize: [C.26](/generated/patterns/C.26) does not become a causal-use pattern and does not treat counterfactual material as a quantum-like subcase; it keeps quantum-like modeling discipline and sends causal-use support to [C.28](/generated/patterns/C.28).

Use this as a diagnostic sequence before retaining QL wording. DDD, microservice domain analysis, and ordinary boundary/bridge patterns stay first for bounded contexts, service cuts, integration points, and exported meaning; QL is retained only when a workshop, probe, export, or frame changes what can admissibly be inferred.

  1. Measurement, metric, scale, method, evidence, or assurance load goes first to measurement and evidence patterns: [C.16](/generated/patterns/C.16), [A.10](/generated/patterns/A.10), or [B.3](/generated/patterns/B.3).
  2. Bridge, translation, publication, rendering, or exported-loss question goes first to bridge and publication patterns: [F.9](/generated/patterns/F.9), [E.17](/generated/patterns/E.17), or [E.17.EFP](/generated/patterns/E.17.EFP).
  3. Causal intervention, command, work enactment, role alignment, or routine question goes first to work and authority patterns: [A.15](/generated/patterns/A.15) and the relevant neighboring pattern.
  4. Boundary/interface wording, service-interface typing, bridge endpoint, relation precision, or lexeme-collision question goes first to boundary and language patterns: [A.6](/generated/patterns/A.6), [A.6.B](/generated/patterns/A.6.B), [A.6.P](/generated/patterns/A.6.P), [A.7](/generated/patterns/A.7), [E.10](/generated/patterns/E.10), or [F.18](/generated/patterns/F.18).
  5. Quality, viability, feedback, or control-tuning question goes first to quality, dynamics, and measurement patterns: [C.25](/generated/patterns/C.25), U.Dynamics, and [C.16](/generated/patterns/C.16).
  6. Suspect option menu, unknown alternative, local plateau, basin movement, or candidate-generation question goes first to search and regime patterns: [B.5.2](/generated/patterns/B.5.2), [C.18](/generated/patterns/C.18), [C.19](/generated/patterns/C.19), or [A.19](/generated/patterns/A.19).
  7. Retain QL only for the remaining declared state, probe, export, frame, open-information-system, or coarsening cue.

C.26 does not choose among options, generate missing alternatives, or settle [C.11](/generated/patterns/C.11) decision quality. It can mark that the available readings sit in non-shared comparison frames or lack a declared admissible joint comparison route; the choice/search output still belongs to [C.11](/generated/patterns/C.11), [B.5.2](/generated/patterns/B.5.2), [C.18](/generated/patterns/C.18), [C.19](/generated/patterns/C.19), or [A.19](/generated/patterns/A.19).

If the question under repair is mainly...First FPF patternAdd QL only when...
Choice, comparison, or question order[C.11](/generated/patterns/C.11)incompatible probes, order effects, non-shared comparison frames, or no declared admissible joint comparison route change the choice-state reading.
Boundary interaction or interface reading[A.6](/generated/patterns/A.6), [A.6.B](/generated/patterns/A.6.B), [A.6.P](/generated/patterns/A.6.P)the probe or interaction changes the represented state, export validity, or viability decision.
Cross-context bridge or publication export[F.9](/generated/patterns/F.9), [E.17](/generated/patterns/E.17), [E.17.EFP](/generated/patterns/E.17.EFP)the exported state is not faithful under the current probe and bridge conditions.
Work enactment or coordinated behavior[A.15](/generated/patterns/A.15), with [A.10](/generated/patterns/A.10) / [B.3](/generated/patterns/B.3) for evidencecoordinated work evidences a low-recoverability distributed-state reading not faithfully exportable as one representation.
Measurement, metric, score, or dashboard[C.16](/generated/patterns/C.16), [A.10](/generated/patterns/A.10), [B.3](/generated/patterns/B.3)the measurement regime, publication act, or operational use functions as a probe interaction that updates the represented state.
Viability or quality bundle[C.25](/generated/patterns/C.25), U.Dynamics, [A.6](/generated/patterns/A.6), [A.15](/generated/patterns/A.15)envelope regulation depends on probe, boundary condition, actuator, export, or coarsened state representation.
Candidate generation or option-menu suspicion[B.5.2](/generated/patterns/B.5.2), [C.18](/generated/patterns/C.18), [C.19](/generated/patterns/C.19), [A.19](/generated/patterns/A.19)QL wording only marks that the current frame may be suspect; search patterns generate alternatives.
Representation shortcutCSC, RT, ordinary abstraction, representation learning, POMDP, search-space pruningthe shortcut depends on contextual probability, incompatible probes, instrument-like update, open-information-system update rule, probe-frame, or export-admissibility cue, or lossy state export.

Escalation by evidence or authority demand

Claim-use classUseRequired basis
Ordinary FPF patternQL is not needed.Use the ordinary FPF pattern plainly.
QL-lite noteLocal diagnosis, model note, or worked recognition.Fill the five-field card.
Reusable pattern proseA pattern, example, or neighboring note will repeat the move.Add typed state, probe, or export fields, source support, and local anti-cases.
Decision or assurance useThe claim affects boundary, release, audit, evidence, or work decision.Add rival explanations, evidence-use class, loss notes, and explicit neighboring-pattern selection.
Ontology or physical claimA physical substrate, new ontology, or empirical superiority is asserted.This pattern does not support the claim; use a separate physical or empirical support outside this pattern cluster.
For QL claims that carry decision, assurance, ontology, physical-substrate, or empirical-superiority use, compare rival model families before retaining QL as load-bearing. Failure of a simple Bayesian or passive-read model is not yet evidence for QL necessity; it is evidence for trying richer classical, causal, performative, instrument, active-sensing, or representation-abstraction rivals before QL carries the claim:
Rival familyUse firstKeep QL active only when
Classical Bayesian, nonparametric Bayesian, or ordinary probabilistic updateC.11, measurement and evidence patterns, and model-expansion patternsincompatible sample spaces, contextual probability, order-sensitive query structure, or failure of ordinary total-probability composition remains active.
Causal intervention or ordinary world-state change modelA.15, boundary patterns, and evidence patternsthe intervention is also being used as a read, export, comparison, or optimization of the state it changes.
Performative prediction, strategic response, or dashboard-induced behaviorC.16, A.10, B.3, C.26.1, and viability/work patternsinstrument-like state update, incompatible probes, or non-faithful state export remains after the ordinary behavior account is written.
POMDP, active sensing, active inference, or experimental designA.3, C.16, U.Dynamics, and action-cost patternsthe formal claim also involves incompatible probe frames, contextual probability, or state-representation loss.
State abstraction, representation learning, surrogate modeling, sketching, or ordinary compressionA.6.3.CSC, A.6.3.RT, A.19, F.9, and ordinary representation patternsthe shortcut depends on contextual, instrument-like, open-information-system update/probe/export-admissibility, or incompatible-probe structure rather than ordinary abstraction engineering.
Causal abstraction or approximate causal abstractionUse first when the shortcut claims to preserve intervention, explanation, manipulation, or cross-scale structure.contextual probability, incompatible probes, instrument-like update, open-information-system update rule/probe-frame/export-admissibility, or lossy state export remains after the causal-abstraction mapping between source-scale and target-scale states and interventions is stated.

Math reveal sequence:

Mathematical-formality classUseForm
M0 - no mathEveryday FPF use.Plain-language QL-lite note: false passive read, output, admissible use, and stop.
M1 - structural sketchA reader needs to see why ordinary comparison or export fails.Diagram or table: probes, frames, carriers, export loss, unsupported comparison.
M2 - toy formalizationPattern example, education, or contested architecture claim.Small finite-state, matrix, or instrument-like toy model, explicitly non-authoritative.
M3 - decision-bearing formal modelReusable guidance or high-impact decision.Declared assumptions, rival models, validation/evidence, and failure conditions.
M4 - formal assurance / research claimQLP-3 assurance or reusable-law claim.Full formal reconstruction, baseline, proof/data, source constraints, and limitations.

Most C.26 use should stay at M0 or M1.

Evidence-use class is escalation by consequence, not an admission gate. QLP-0 or QLP-1 is the ordinary entry class for quick QL-lite use; QLP-2 / QLP-3 appears only when the claim is reused, contested, decision-bearing, assurance-facing, high-impact, or made part of reusable pattern action guidance or conformance text.

Evidence-use class scales by use:

LevelUseRequired content
QLP-0 recognitionExample, teaching case, or local recognition prompt.Claim, example, ordinary FPF pattern, QL cue, and local stop.
QLP-1 local working useLocal architecture discussion, triage, or provisional design reasoning.QLP-0 content plus evidence carrier, time window, uncertainty/confidence statement, and stop/reroute condition.
QLP-2 decision-bearing useBoundary decision, bridge/export use, viability move, work claim, or representation shortcut changes what the team should do.QLP-1 content plus rival explanations, export/loss note when live, minimal admissible output, selected applicable pattern body, admissible use, and non-admissible use.
QLP-3 assurance or reusable guidance useThe claim is used for assurance, audit, durable pattern action guidance or conformance text, reusable relation/name/measure, or high-stakes decision support.QLP-2 content plus A.10 and B.3 assurance result, C.16 template if measured, documented bridge and loss path, source-support role, and explicit local stop or inherited-boundary note.

Recognition case matrix

CaseFirst applicable pattern bodyQL cue to testLocal stop
Domain workshop changes the splitA.1.1, F.9, C.26.1The workshop is both evidence and intervention; question order or facilitation frame changes split recommendation, team alignment, and local meaning.Do not replace DDD with QL; keep bounded-context law and bridge fields active.
Same label across bounded contextsF.9, A.6.PAPI extraction or team alignment changes operational state, or export loses the relation that matters.Same label is not same entity; ordinary bridge may be enough.
Organization acts from a latent decisionA.15, A.10, B.3, C.26.2Coordinated role-work, records, commitments, traces, and routines evidence a low-recoverability state no participant faithfully reports.Do not infer a group mind or timeless culture.
Survey, dashboard, policy, or API read of cultureC.16, A.10, F.9, C.26.1, C.26.2The probe may change the state it evidences, and the export may lose load-bearing structure.Treat the output as carrier/probe, not as the state itself.
Service boundary under loadC.25, A.6, A.15, C.26.3Viability depends on changing caching, throttling, routing, staffing, protocol, bridge, or context split.Do not reduce viability to one green metric.
Moving body or sensor to see the missing faceactive/embodied inference routes, C.26:4.5 state-representation coarsening cardThe system spends energy, time, risk, attention, or coordination to obtain a discriminating observation.Do not call ordinary sensing or active inference quantum-like without a QL cue.
Glass memory / hysteresisC.26.1, C.26.3, U.DynamicsPrior state constrains current response; state history or retained trace changes admissible reading.Do not force dynamics variables unless load-bearing.
Cell-like service situationservice, boundary, work, viability patterns firstCell-like criteria may clarify boundary, controlled exchange, protected invariants, repair, state-continuity, and resource analogue.Retain analogy only when it changes a decision beyond ordinary service-facet language.
Suspect option menuB.5.2, C.18, C.19, A.19Current options may be products of the current measurement frame.QL only marks suspicion; search patterns generate alternatives.

State-representation coarsening card

This card discipline is active when a fuller state representation is too detailed, unstable, unavailable, or expensive for the current bounded decision and a reduced-detail state representation is useful only under a declared QL cue. It is not a standalone speed pattern, not a standalone coarsening pattern, and not a new state-representation kind.

C.26 does not carry ordinary coarsening. A.6.3.CSC carries controlled coarsened rendering; A.6.3.RT carries same-selected-entity representation-scheme transition; A.19, U.Dynamics, modeling patterns, and ordinary abstraction patterns carry ordinary state abstraction. C.26 carries only the residual QL cue plus the loss/use boundary for this shortcut.

Question-to-pattern map:

Main questionFirst FPF pattern or relation
Coarsened rendering of source episteme or source publication for narrower useA.6.3.CSC
Same-selected-entity representation-scheme or reasoning-medium transitionA.6.3.RT
Cross-context equivalence, substitution, projection, export, or lossF.9 / F.9.1
Measurement coordinate, scale, score, result, or dashboard readingC.16
Evidence carrier, provenance, method, support, or time windowA.10
Assurance claim, release support, audit, readiness, or compliance useB.3
Search-space pruning, option generation, or missing alternativesC.18, C.19, A.19
Residual QL state, probe, frame, export, or coarsening cue after those patterns actC.26

Start with this coarsening mini-card:

Mini-entryQuestion
SourceWhich fuller state representation, trace set, model, measurement scheme, or dynamics account loses distinctions in the shortcut?
ShortcutWhich smaller representation is being used instead, and for which bounded decision or action class?
LossWhich precision, distinction, uncertainty, comparability, traceability, or relation structure is lost?
Admissible useWhich bounded decision, probe, comparison, time-window reading, or action class remains admissible for this reduced-detail state representation?
Reopen triggerWhich dispute, drift, failure, threshold crossing, bridge demand, or decision change sends the team back to the source-bearing episteme or source publication?

For the representation shortcut itself, fill this coarsening card:

FieldQuestion
Source representationWhich fuller model, state space, trace set, measurement scheme, probability model, dynamics model, or representation loses distinctions in the shortcut?
Coarsened representationWhich typed, symbolic, finite, operator-like, Hilbert-like, rough-set, low-bit, or source-loss-affected representation is used instead?
Shortcut mechanismWhich projection, typed-state reduction, finite-dimensional representation, operator-like update, rough-set approximation, state aggregation, compression, or linearization is doing the representational work?
Shortcut purposeWhich bounded decision, probe, comparison, time-window reading, or action class needs the reduced-detail state representation?
What is lostWhich precision, distinction, uncertainty, compatibility, traceability, causal detail, or cross-context relation is lost?
Loss budgetHow much loss is accepted for this decision, probe, comparison, route, or time window?
Admissible useFor which decisions, probes, comparisons, candidate-route selections, or time windows does the shortcut preserve the required distinctions?
Non-admissible useFor which claims, audits, bridges, comparisons, future actions, or high-stakes decisions does the shortcut lack the required distinctions, source support, or recoverability?
Ordinary routes still activeWhich ordinary abstraction, causal abstraction / approximate causal abstraction, state aggregation, representation learning, POMDP simplification, heuristic compression, CSC, RT, or low-bit implementation route remains sufficient if the QL cue is absent?
Evidence / formal sourceWhich model, trace, experiment, source, or formal argument supports the shortcut rather than merely naming it quantum-like?
Reopen triggerWhich dispute, drift, threshold crossing, failure, audit, bridge demand, or decision change requires returning to the source representation or ordinary FPF pattern?

If the text claims that the shortcut is faster, cheaper, more compressed, more linear, more stable, or more tractable, add this claim declaration. The claim is separate from the coarsening card: the card controls the reduced-detail state representation; the declaration controls the performance or tractability assertion.

Declaration fieldQuestion
Baseline representation and costWhat ordinary model or route is too expensive, and by which resource: time, memory, measurement, coordination, latency, energy, risk, attention, cognitive load, privacy, or social cost?
New representationWhich changed representation creates the claimed gain?
MechanismWhich compression, linearization, operator-state update, reduced information-state encoding, shortcut, or approximation mechanism creates the gain?
Claimed gainWhat exactly becomes faster, cheaper, more stable, smaller, or more tractable?
Loss / error budgetWhich precision, expressivity, compatibility, comparability, evidence-support class, traceability, or future-use loss is accepted for the intended use?
Admissible useFor which decisions, probes, comparisons, candidate-route selections, time windows, or action classes does the declared gain meet the required threshold?
Non-admissible useFor which claims, audits, bridges, comparisons, future actions, or high-stakes decisions does the declared gain fail the required threshold?
Ordinary alternativesWhich ordinary compression, approximation, abstraction, feature-engineering, active-inference, search, POMDP, or low-bit route was tried or remains sufficient?
Evidence / formal sourceWhich source, model, trace, worked case, benchmark, or formal analogy supports the claimed mechanism?
Reopen triggerWhich dispute, drift, threshold crossing, failure, audit, bridge demand, or decision change requires returning to the source representation or ordinary FPF pattern?

No speed, compression, linearity, or tractability claim follows merely from the words linear, operator, quantum-like, quantized, tokenized, low-bit, finite-dimensional, compressed, or symbolic.

If the shortcut carries a transition-speed, stabilization, or control claim, add the optional dynamics card:

Dynamics fieldQuestion
Rate / accelerationWhich transition, inference, recovery, sensing, routing, or stabilization rate matters?
InertiaWhat makes the represented state, work routine, boundary condition, or model slow to change?
Damping / resistanceWhat absorbs, slows, filters, or resists the transition?
Effort or actuator capacityWhich action, probe, resource, or authority relation can change the transition fast enough?
EvidenceWhich trace, model, experiment, or operational observation supports the dynamic reading?

Archetypal Grounding

Tell: A reliability dashboard says "Ready" after a new readiness metric is published. Before publication, teams treated incidents as local triage. After publication, they change priorities to satisfy the metric, while unmeasured recovery work gets delayed.

Show, System side: the delivery system, teams, dashboard, incident-handling cycle, and release decision form one operational situation. The dashboard is not only a window; it is part of the work ecology because it changes attention, escalation, and behavior.

Show, Episteme side: the QL-lite card says the ordinary FPF patterns are C.16, A.10, B.3, and C.25. The QL cue is an instrument-like metric publication that changes readiness behavior. The minimal admissible output is "treat the dashboard as probe-coupled evidence, not release proof." The local stop is release approval without fuller evidence.

Second grounding: a large state-space model is too expensive for triage, so the team uses four typed operational states. That shortcut is admissible only if the source model, state reduction, loss, admissible use, and reopen trigger remain explicit. The shortcut helps choose a work response; it does not prove the four states are the full system.

Bias-Annotation

This pattern intentionally biases authors toward ordinary FPF patterns before QL vocabulary. That bias prevents prestige use of the word quantum-like and keeps the mathematical lens useful rather than theatrical.

It also biases authors toward minimal admissible outputs. In ordinary use, the right result is often "apply the neighboring FPF pattern", "do not merge these comparison frames", "mark this dashboard as an instrument", or "return to the source representation if the shortcut fails", not a new doctrine about the target system.

The pattern may under-admit some mathematically valid QL models when the author cannot explain the practical payoff. That is acceptable for FPF pattern prose: a model that cannot say what it buys the working reader is not ready for Core-facing law.

Conformance Checklist

IDCheck
CC-C26.1The text names the ordinary FPF pattern before admitting QL wording.
CC-C26.2The text states the QL cue as a probe, order, frame, export, comparison, open-information-system update/probe/export-admissibility, or coarsening effect, not as vague complexity.
CC-C26.3The text states a practical representational payoff.
CC-C26.4The text states the minimal admissible output.
CC-C26.5The text states a local stop or neighboring-pattern handoff.
CC-C26.6The text inherits QL-NQ and does not repeat global physical-quantum exclusions as local guidance.
CC-C26.7If a representation shortcut is used, the coarsening card names source, shortcut, loss, admissible use, non-admissible use, and reopen trigger.
CC-C26.8A speed, compression, linearity, or tractability claim declaration names baseline representation and cost, changed representation, mechanism, claimed gain, loss budget or error budget, ordinary alternatives, evidence source or formal source, and reopen trigger.
CC-C26.9If the claim becomes reusable, assurance-bearing, measurement-like, relation-minting, high-stakes, or superiority-claiming, the text escalates beyond QL-lite.
CC-C26.10The text does not mint U.Probe, generic U.State, U.DistributedState, U.Lens, a new boundary kind, or a social-substance kind.
CC-C26.11A cold reader can tell what changes in practice in the first minute.
CC-C26-CAUSAL-EXITIf the question under repair is intervention, counterfactual comparison, causal effect, causal fairness, causal policy, off-policy causal evaluation, or realizability of counterfactual-rung data, the text redirects the claim/question to C.28 before retaining QL-lite or QL-NQ.

Common Anti-Patterns and How to Avoid Them

Anti-patternSymptomRepair
Quantum-like as prestige wordThe case is only complex, uncertain, nonlinear, discrete, or hard to measure.Use ordinary FPF patterns. Admit QL only with a declared cue and payoff.
Precautionary suppressionQL wording is rejected because it is unusual, while no ordinary FPF pattern has carried the residual false passive read, false export, false comparison frame, unsupported distributed-state reading, or single-metric viability mistake.Name the ordinary FPF pattern that carries the residual claim. If no such pattern can be named, allow QL-lite at recognition or local-working support condition.
Physical overreadThe text sounds as if organizations, services, or teams are physically quantum systems.Cite inherited QL-NQ; rewrite the claim as mathematical or representational.
Passive dashboardA metric or score is used as a neutral fact after its publication or operational use changed behavior.Use measurement and evidence patterns and, if needed, C.26.1.
Faithful-copy exportA survey, report, API response, or context map is treated as the live state itself.Use bridge/export loss, C.26.2, or ordinary publication patterns.
Speed or compression sloganA shortcut is called fast, cheaper, linear, low-bit, symbolic, or compressed without a declared claim.Write the speed, compression, or linearity claim declaration: baseline representation and cost, changed representation, mechanism, claimed gain, loss budget or error budget, ordinary alternatives, evidence source or formal source, and reopen trigger. Keep the coarsening card only for the representation shortcut itself.
Hidden search problemThe option menu is frame-bound, but the text tries to solve it by naming QL.Use QL only as a suspicion cue; apply search patterns to generation and regime movement.
Cell-like service jumpA service is called cell-like because it has a boundary or internal state.Unpack service facets first: boundary, controlled exchange, internal state, health maintenance, adaptive behavior, coupling protocol, resource-metabolism analogue, protected invariants, repair, and state-continuity. Retain the analogy only when it changes a boundary, viability, repair and state-continuity, or resource-exchange decision.

Near-miss taxonomy:

Near missWhy not QL by itself
Feedback loopOrdinary dynamics/control unless admissible reading, export, or comparison is affected.
Metric gamingOrdinary metric/incentive problem unless measurement publication changes the state reading.
UncertaintyOrdinary epistemic uncertainty unless context, probe, or frame changes variable identity or comparison law.
ComplexityOrdinary complexity unless shortcut, export, or probe issue remains.
CompressionA.6.3.CSC, A.6.3.RT, modeling, or implementation pattern first; QL only for state-representation residue.
DDD bounded contextA.6 / F.9 first; QL only if workshop, probe, or export changes state reading.
Low-bit or quantized implementationEngineering representation first; not QL because it is "quantized".
Collective behaviorA.15, distributed cognition, routines, and evidence patterns first; QL only for low-recoverability state-reading residue.

Cluster conformance scenarios

Use these as quick applicability tests. A good C.26 use leaves one practical output, not just a clever label.

ScenarioExpected routeAvoidExpected output
Dashboard readiness improves because teams optimize the displayed metric.C.16 / A.15 first; C.26.1 only if the output is reused as a passive readiness read after state-shaping publication.Treating the dashboard value as release evidence by itself.Redesign metric publication or add independent work traces before release use.
Workshop "discovers" a boundary but also creates alignment and local meaning.A.6 / A.15 first; C.26.1 for false pre-probe discovery reading.Exporting the workshop result as a timeless domain fact.Record window, participants, carriers, unresolved rivals, and bridge/export limits.
API read warms cache and changes downstream timing.Interface semantics, A.6, and C.16 first; C.26.1 if the read result is reused as passive state export.Saying the API read simply copied state.Mark the read as non-neutral for that timing window or redesign the read path.
Two service health reports use different measurement frames.C.16 / F.9 first; C.26 only if no admissible shared comparison frame remains.Averaging the scores as one posterior-looking value.Name the frame difference and either build an admissible comparison route or stop comparison.
Team survey says "aligned", but incident behavior contradicts it.A.10 / A.15 / B.3 first; C.26.2 if coordinated work traces support a low-recoverability distributed-state reading.Treating survey output as the team state.State a low-recoverability carrier/window-bound reading and the rival explanations.
Market "expects" a feature because many actors change behavior.Declare bearer/traces; ordinary market, incentive, and evidence explanation first; C.26.2 only for residual low-recoverability state reading.Inventing a market mind.Name actor traces, window, rivals, and the least-supported behavior-based reading.
Latency is green while support load and customer promise degrade.C.25 / C.16 first; C.26.3 if viability reading is probe/export/frame/coarsening-distorted.Calling one green metric viability.Add envelope variables, actuators, costs, and failure mode.
Summary compresses an architecture decision for executives.A.6.3.CSC first; no QL unless a state-representation shortcut has QL residue.Treating the summary as full architecture state.Use for orientation only; return to source for release or design lock.
Diagram translates the same system into graph form.A.6.3.RT first; no QL unless incompatible representation, probe, or export cue remains.Calling any diagram a QL state model.Declare representation-scheme change, reasoning-medium change, and source tether.
Low-bit model approximates expensive simulation.Modeling, approximation, compression, or implementation pattern first; QL only if the shortcut claim depends on QL state, probe, or frame admissibility.Treating low-bit or linear form as QL activation.Name baseline, shortcut, loss budget or error budget, ordinary alternatives, and reopen trigger.
Assurance load is raised only because the word "quantum-like" appears.Keep QL-lite unless decision, release, audit, reusable-law, comparative, formal, or ontology-bearing claim exists.Escalating because of vocabulary alone.Keep recognition or local-working support condition, or retire QL if ordinary patterns now carry the residue.
Author claims QL is faster or better than a classical method.Require baseline, metric, mechanism, evidence or formal argument, loss/use declaration, ordinary alternatives, and reopen trigger.Accepting superiority rhetoric.Either write the claim declaration or remove the speed/superiority claim.

QL can also generate better design options:

ProblemQL-inspired design option
Dashboard changes behavior destructively.Delay publication, split private/public metrics, add independent sampling, or publish confidence/loss boundaries.
Workshop creates alignment but masquerades as discovery.Record pre-workshop hypotheses, post-workshop commitments, and created boundary meaning separately.
API read disturbs state.Add non-mutating read, shadow read, sampling window, idempotence declaration, or separate observation channel.
Metrics in two contexts are not comparable.Build a bridge/coupling record or stop comparison.
Summary is overused as source.Add admissible-use label and return-to-source trigger.
Viability scalar hides damage.Build envelope variables and actuators; add a failure-mode sensor.

AI and LLM work-cycle route examples

LLM-mediated work cycles often create the same representational mistakes C.26 repairs: false passive read, false faithful summary, false shared comparison frame, and shortcut without loss/use declaration. This does not make LLMs quantum-like.

AI caseRoute
LLM summary of an architecture recordA.6.3.CSC, A.6.3.RT, and A.10 first; C.26 coarsening only if a state-representation shortcut is being overused.
Prompted model evaluation changes model or prompt behaviorC.16 / B.3 first; C.26.1 only if the eval output is treated as a passive model-state read.
Agent work cycle "discovers" requirementsA.15 / A.10 / A.6 first; C.26.1 only if the interaction created the requirement framing.
Synthetic personas "represent market state"A.10 / B.3 first; C.26.2 only if a low-recoverability state-reading claim is carefully bounded with non-admissible use visible.

Consequences

This pattern gives FPF a single place to define QL-lite and the inherited non-quantum boundary. That reduces repeated disclaimers in child patterns and makes ordinary use lighter.

Cluster success criteria:

CriterionGood indicator
Fewer false passive readsDashboards, workshops, API reads, and reports are less often treated as neutral state copies.
Fewer invalid comparisonsSame-named metrics from different contexts are not silently compared.
Better bridge recordsF.9 records more often include admissible export use and non-admissible export use.
Better release/evidence disciplineB.3 / A.10 are invoked only when the claim’s evidence or authority demand requires them.
Less metaphorical leakageFewer field, collapse, entanglement, and group mind phrases appear in normative text.
Faster local notesPractitioners can write QL-lite notes without full audit cards.
More retirementsQL wording is removed when ordinary FPF patterns carry the claim.

The best outcome may be fewer but better QL mentions.

Do not retrofit QL into existing FPF examples merely because they involve measurement, context, service boundaries, feedback, coarsening, or distributed work. Patch only examples where a named false passive read, false shared frame, false faithful export, low-recoverability distributed-state reading, or QL-specific coarsening residue changes the decision.

The cost is authoring discipline. A writer must name the ordinary FPF pattern, the actual QL cue, and the local stop. That is more work than saying "context matters", but it prevents the most expensive mistake: treating a changed, thinned, or frame-bound representation as if it were a full state.

The state-representation coarsening card makes speed and tractability claims more honest. It lets teams use cheaper state descriptions while keeping loss and reopen conditions visible.

Rationale

The cluster stays small on purpose. A single giant "Quantum-Like Architecture" pattern would hide distinct modeling concerns. Scattering the lens across local pattern bodies would repeat the same definition and boundary notes. This modeling-lens pattern lets the common lens live once while child patterns carry their own primary EntityOfConcern and admissible move.

The key rule is simple: quantum-like is not quantum. Once that is typed, FPF can use the math lens normally. The lens earns its keep when it prevents a passive-read, one-space comparison, faithful-copy, or exact-state shortcut.

Evidence is not prestige. Literature supports the modeling move; local evidence supports the local state, export, or probe claim. A source anchor can justify why order effects, contextual probability, instrument-like readings, or open-system modeling are legitimate modeling patterns. It does not prove that this dashboard changed this team's state, that this workshop changed a boundary, or that this export lost the live coordination. That proof or evidence still belongs under A.10, C.16, A.15, B.3, and the ordinary pattern for the local claim.

SoTA-Echoing

Pattern claimPractice sourcePattern implication
Mathematical objects can be transferred as modeling lenses without claiming the target domain is made of the source-domain stuff.Wigner on mathematical usefulness, Jaynes on probability as logic of science, and Khrennikov on quantum formalism outside physics.Treat QL as a math-lens transfer card: explain the useful structure first, then state the inherited boundary.
Quantum-like is a mathematical or representational modeling lens, not a physical claim about the modeled system.Basieva, Khrennikov, and Ozawa on quantum-like modeling in biology with open-system and instrument language.Keep QL-NQ as non-entailment, not as the main claim; use detached mathematical modeling where state, probe, or export cue is real.
Linear quantum-like representation can make selected information-state processing more tractable if the representation and loss profile are declared.Basieva-Khrennikov-Ozawa linearity / speed-up / stability arguments and finite-dimensional matrix-calculus discussions.Support the state-representation coarsening card discipline; block blanket "quantum-like is faster" claims unless baseline cost, shortcut, loss, and reopen trigger are named.
Quantum probability is useful where inference is contextual, previous judgments change state, or possibilities interfere, but QL is not automatically the only formal route.Quantum cognition work, quantum-instrument work, and process-theory cautions about classical instrument alternatives.Use QL-lite as useful abstract modeling, not as proof of non-classical necessity.
DDD, microservice, active-inference, and measurement practice already supply ordinary FPF patterns.DDD and microservice domain analysis, active-inference measurement-as-action work, performative prediction, metric-induced behavior.Keep ordinary FPF patterns first; add QL only for the remaining state, probe, export, frame, or coarsening cue.

Selected operational source anchors

This section is intentionally short. It carries operational anchors for using the pattern, not an expanded bibliography.

ClaimSource familyPractical implication
Mathematical formalisms can be transferred as modeling lenses without claiming the target domain is made of the source-domain stuff.Wigner on mathematical usefulness, Jaynes on probability as logic, and Khrennikov's quantum-like modeling line.Treat QL as a math-lens transfer: name the useful structure, the ordinary FPF pattern, and the local stop before any claim requiring additional evidence or authority.
Quantum-like open-system and instrument formalisms can model state and probe interaction without physical quantum ontology.Basieva, Khrennikov, and Ozawa and arXiv, plus Khrennikov on open systems.Keep QL-NQ central and use QL only where probe, instrument, open-information-system update rule, probe frame, export admissibility, or state export cue changes the admissible reading.
Question order, contextual judgment, and instrument-like operations are practical cues, but not automatic proof that QL is necessary.Quantum instruments for question-order effects, Quantum Cognition, and process-theory non-exclusivity.Use QL-lite when order/frame/probe effects change the result; keep classical instrument, Bayesian, causal, and ordinary measurement rivals live.
Same-content-looking measurements under different probe or measurement frames should not be silently treated as the same random variable or as jointly distributed.Contextuality-by-Default.Use QL when the frame changes variable identity, joint availability, or admissible comparison; otherwise keep the ordinary measurement, bridge, or bounded-context pattern.
Viability and active sensing often mix reading and acting, but ordinary control and measurement patterns remain primary.Free-energy and quantum-cognition link, physiological regulation and FEP, active inference behavior, and smart-building active inference.For viability cases, name sensors, probes, actuators, and envelope variables first; retain QL only for remaining probe, frame, export, or coarsening cue.
Boundaries and contexts are already disciplined by ordinary architecture and DDD practice.Computational boundary of a self, Markov blankets of life, Azure domain analysis, and DDD 2025 SLR.Apply ordinary FPF patterns first to boundary, interface, bounded-context, bridge, and microservice questions; add QL only where the interaction changes the state or export being read.
Low-bit, tokenized, compressed, geometric, or neural representations may be useful shortcuts without being QL activation.1-bit LLMs, implicit continuity in language models, emergent quantumness in neural networks, and covariant gradient descent.Keep implementation substrate, geometry, compression, and representation shortcuts in ordinary FPF patterns unless a declared QL cue changes the admissible use.
Unknown alternatives and regime movement are search/generation problems, not QL claim authority.Open-endedness and quality-diversity through AI feedback.Use QL only to mark a suspect frame; apply search or regime patterns to generation of alternatives.

Relations

C.28 causal-use relation.

  • C.28 governs causal-use question, causality-ladder rung, causal estimand, identification, counterfactual sampling realizability, causal evidence support basis, causal-use verdict, causal fairness, causal policy, and causal method parity.
  • This pattern keeps residual quantum-like probe, frame, order, export, or coarsening discipline after ordinary causal-use explanation has been tried.
  • Non-admissible use: intervention, causal effect, causal fairness, causal policy, counterfactual comparison, causal method parity, or counterfactual-rung-data realizability do not activate quantum-like modeling by themselves.
  • Exit: when the question under repair is causal, cite C.28 before retaining QL-lite or QL-NQ.

C.27 temporal-claim relation.

  • C.27 may flag: ordinary state/rate/rate-change, effort-window, rhythm, braking, coasting, or intervention-timing claims before any quantum-like cue is considered.

  • This pattern keeps: residual quantum-like probe, frame, order, export, or coarsening discipline.

  • Non-admissible use: discreteness, finite differences, typed states, state-space reduction, tokenization, dashboards, probes, measurement plans, speed words, rhythm words, or Dyn2 words do not activate quantum-like modeling by themselves.

  • Exit: use C.27 and ordinary FPF patterns first; use C.26 only where residual probe, frame, order, export, or coarsening cue remains after those relations are named.

  • Builds on: E.8, E.9, C.11, C.16, C.25, A.6, A.6.P, F.9, A.15, A.10, B.3, A.3, C.18, C.19, A.19.

  • Constrains: QL wording in C.26.1, C.26.2, and C.26.3.

  • Carries: state-representation coarsening as a card inside C.26:4.5, not as a separate pattern.

  • Does not cover: physical quantum claims, a generic probe ontology, a generic state ontology, a service/cell pattern, or a field-like synchronization pattern.

  • Name boundary: Quantum-Like Modeling Lens is a pattern label for a modeling lens and modeling discipline, not U.Lens, not QuantumLikeArchitecture, not Quantum Substrate, not Quantum Ontology, and not a universal architecture doctrine.

C.29 mathematical-lens use relation

C.26 is a C.29-compatible specialization for quantum-like modeling. It carries a pre-filled adequacy profile for QL work: preserved structure includes order, probe, and contextual-probability effects when supported; lost structure includes physical quantum ontology; the canonical stop condition remains QL-NQ. A QL-lite note does not inherit a blank full MathLensUse.FullCard. A full C.29-compatible profile is needed only when the QL claim is decision-bearing, reusable, publication-bearing, assurance-bearing, bridge-bearing, or formal-model-bearing.

C.26:End

Probe-Coupled Boundary Interaction

Type: Architectural pattern Status: Stable Normativity: Normative unless explicitly marked informative

Problem frame

Use this pattern when a boundary read, meeting, metric, API read, dashboard, workshop, survey, split, bridge, or message is being used as if it merely revealed or transferred state, but the probe or interaction changes the represented state enough to alter the architecture decision.

This is the main everyday entry into the QL cluster. It is useful because many teams already know how to talk about boundaries, interfaces, metrics, and workshops. The missing move is to notice when the act of reading or crossing the boundary participates in the state being read.

Working surfaceValue
Primary readerArchitect, platform lead, domain modeler, or manager judging a boundary read, workshop, dashboard, metric, API read, or bridge result.
Boundary interaction under concernA boundary interaction being used as evidence, export, comparison, or decision input.
Boundary-interaction decision moveReplace false passive-read wording or unjustified lossless boundary-to-decision inference with a probe-coupled boundary decision and reroute where needed.
Outside workOrdinary message passing, ordinary causal intervention, ordinary API semantics, bridge loss alone, and generic relation-token minting.
What changes in practiceThe team records what the probe changed before using its output as architecture evidence.

Plain glosses:

  • passive read: treating a workshop, metric, dashboard, API read, survey, or message as if it only reports state.
  • probe-coupled: the read/export/intervention participates in the represented state enough to change the lawful decision.
  • coupling channel: the concrete workshop, metric, message, API, dashboard, meeting, bridge, or event stream through which the effect travels.
  • export loss: what the carried output cannot faithfully carry into another context or decision.

Problem

Architecture work often treats boundary interactions as passive. A dashboard "shows readiness". A workshop "discovers the context map". An API read "returns state". A meeting "collects alignment". A message "transfers a decision".

Sometimes that is good enough. Sometimes it is false for the current decision. Publishing the dashboard changes readiness behavior. Running the workshop changes alignment and local meaning. Reading the API changes timing assumptions. Sending the message changes trust, escalation, or error handling. Splitting the service changes the viability envelope that the split was meant to optimize.

When the false passive reading survives, the team may keep the wrong boundary, trust the wrong export, combine incomparable outputs, or redesign the system around an artifact that partly created what it reports.

Forces

ForceTension
Boundary discipline vs probe sensitivityA.6 and F.9 already govern boundaries and bridges; this pattern adds only the state-changing or export-changing probe relation.
Intervention vs readoutMany actions change the world ordinarily. QL is active only when the action is being used as a read, export, comparison, or optimization of the state it changes.
Lean use vs evidence-support classA working team needs a small card; release, audit, or measurement claims need evidence and measurement-governing patterns or records.
Coupling words vs relation tokensWords such as coupling, interaction, and export are plain explanatory wording until A.6.P / F.18 ratifies a reusable relation token.

Solution

Before accepting a passive read or unjustified lossless-transfer reading, ask whether the probe or interaction changed what the output may admissibly mean.

C.26.1 is active only when the interaction both participates in the represented state and its output is being used as evidence, export, comparison input, or decision input as if it were passive. Mere behavior change, ordinary feedback, or ordinary influence is not enough.

A probe-coupled interaction may be useful and intentionally state-shaping. The repair is not to avoid it; the repair is to stop using its output as if it were a neutral pre-probe read.

Start with this recognition note:

Mini-entryQuestion
Ordinary governing patternWhich ordinary FPF pattern already carries the baseline boundary, bridge, measurement, work, or viability question?
False passive readWhich reading would be false: "the dashboard, workshop, API read, survey, message, or bridge just reports state"?
Probe effectWhat changed because of the probe, intervention, export, order, frame, or boundary crossing?
Practical changeWhat does the team do differently now: mark probe-coupled, redesign the probe, order, or frame, rewrite bridge or export, add evidence, or apply a neighboring FPF pattern?
Stop or neighboring-pattern handoffWhich use is unsupported by this note, and which FPF pattern carries that use?

Use the fuller decision-bearing record below when the boundary result will be reused, contested, used as evidence, or used to change an architecture decision.

Full decision-bearing record:

FieldQuestion
BoundaryWhich boundary, role relation, authority relation, context bridge, service interface, team boundary, or system edge is crossed or queried?
Probe or interactionWhich workshop, dashboard, API read, metric, meeting, survey, message, event stream, or other typed probe lane is active?
QL cue or formal cueWhich instrument-like update, order sensitivity or frame sensitivity, incompatible-probe structure, no faithful-enough export under the declared probe, frame, or use, or mutual interaction whose local reads and exports are no longer admissibly comparable or reusable without declaring the probe, frame, or update relation makes ordinary passive-read wording false?
False passive readingWhat discovery, neutral observation, one-way transfer, or unjustified lossless-message reading would be false?
Pre-probe hypothesisWhat did the team think the boundary state, alignment, readiness, context cut, or export validity was before the probe?
Observed or inferred post-probe stateWhat changed, stabilized, became visible, became non-exportable, or lost admissible use because of the probe or interaction?
Update class, if load-bearingIs the update a system change, work change, epistemic reading update, carrier update, emitted-output update, formal model update, or update-law change?
State-change evidenceWhich traces, changed decisions, changed labels, changed priorities, behavior shifts, timing changes, or export failures support the state-change reading?
Uncertainty / confidence postureWhat remains inferred, approximate, disputed, probe-dependent, or not yet distinguishable?
State history / memory, if load-bearingState this only when path dependence, order effect, hysteresis, or retained trace changes the current lawful reading.
DecisionWhat changes now: mark probe-coupled, redesign probe, order, or frame, add evidence, rewrite bridge or export, split, merge, orchestrate differently, or apply a neighboring FPF pattern?
Decoupling / redesign optionCan the probe, order, frame, bridge, metric, dashboard, API read, or boundary interaction be redesigned so the needed output is less state-changing or more faithfully exportable?

Activation boundary

This pattern is active only when the interaction both participates in the represented state and its output is being used as evidence, export, comparison input, or decision input as if it were passive. A passive-read, unjustified lossless-transfer, one-way-message, or ordinary-bridge treatment must be materially false for the current decision.

Ordinary influence is not enough. A meeting that changes attention is ordinary work unless the meeting output is later used as a passive reading of alignment. An API call that is a mutating operation by its interface semantics is ordinary service/API semantics unless the call result is used as a neutral state export. A feature flag that changes behavior is ordinary intervention unless the flag readout is being used as evidence of the state it changes.

Performative prediction is also an important ordinary rival. If a prediction, score, or metric changes behavior because people act on it, but no incompatible probe frame, order-sensitive reading, contextual-probability cue, or instrument-like state/export support load remains, try performative-prediction analysis and the ordinary C.16, A.10, and B.3 patterns first. Keep C.26.1 only for the residual probe admissibility question.

Finish conditions

The pattern emits one of these results:

ResultMeaning
Keep boundary, mark probe-coupledThe boundary remains, but the read/export is no longer treated as passive.
Redesign probe/order/frameThe workshop, dashboard, API read, survey, metric, or question order changes to reduce distortion.
Redesign bridge/exportThe bridge/export gains loss notes, use scope, confidence, and return-to-source path.
Split/merge/orchestrate differentlyBoundary structure changes because the interaction changes the phenomenon.
Apply F.9Only bridge and loss remains live.
Apply C.16The probe is really a standard measurement with declared scale, method, evidence, and result.
Apply A.15The hard part is work enactment rather than probe-coupled reading.
Apply C.25Viability-envelope regulation is primary.

Probe-coupled context-cut worked use slice

This worked use slice is not a standalone pattern. It tests DDD and bounded-context work when the context cut is not only discovered but also changes meaning, coordination, export validity, or viability.

Ask: was the bounded-context cut merely discovered, or did the workshop, dashboard, API extraction, bridge, split, merge, or orchestration change alignment, ownership, vocabulary, export validity, or viability?

Slice fieldExample content
CaseA product organization considers splitting payment handling out of a checkout bounded context after repeated payment-failure incidents.
Ordinary DDD findingCheckout and Payment use different local meanings for Order.status, PaymentFailure, and Retryable; an ordinary F.9 bridge is needed.
Probe / interventionThe event-storming workshop starts from payment-failure dashboards and asks teams to place incidents by owner, customer impact, and recovery path.
Post-probe readingProduct, Support, and Payment start treating payment failure as a customer-risk gate, not only a technical retry condition.
EvidenceIncident labels are reclassified, escalation changes, backlog priority changes, and the dashboard query is rewritten.
Export lossCopying PaymentFailure = customer risk into both contexts loses the difference between retryable technical failure, promise breach, and support escalation trigger.
Decision outputKeep the split, mark the workshop result as probe-coupled, add F.9 loss notes, and add a payment-risk escalation promise to the boundary design.

Boundary interaction under concern and operational sequence

The boundary interaction under concern is a boundary interaction used as evidence, export, comparison input, or architecture decision input. The interaction may be a meeting, question sequence, dashboard, metric, API read, survey, workshop, event stream, canary, test harness, service split, bridge, message, or management review. The pattern is active only when that interaction participates in the represented state enough that passive-read wording or unjustified lossless boundary-to-decision inference would change the decision.

The pattern governs one move: convert an apparently passive boundary read into a typed probe-coupled boundary decision. That decision says what the interaction read, what it changed, what the output can support, what it cannot support, and which neighboring FPF pattern takes over if the question is really bridge, measurement, evidence, work, decision, or viability.

Action path:

  1. Name the boundary or relation being crossed.
  2. Name the probe lane, including the concrete artifact or work act that produced the output.
  3. State the false passive reading: what the team would have assumed if the probe were only a window.
  4. State the pre-probe hypothesis and the observed or inferred post-probe state.
  5. State the evidence carriers and uncertainty posture.
  6. State the export loss, memory, order effect, or frame effect that makes the output not faithful enough for the declared use.
  7. Choose the finish result: keep boundary with probe note, redesign probe, order, or frame, redesign bridge or export, change the split, merge, or orchestration, or apply a neighboring FPF pattern.

Required output: produce a probe-coupled interaction reading, a corrected use of the output, and, when it would reduce the problem, a redesign or decoupling move for the probe, order, frame, bridge, metric, dashboard, API read, or boundary interaction.

This sequence is deliberately small. It is the boundary analogue of the C.11 local choice pass: the pattern should end with a usable result, not with a richer vocabulary label.

Well-formed probe-coupled boundary state

A probe-coupled boundary decision is usable only when the record states all of the following:

  • the boundary, context bridge, service interface, team boundary, role relation, authority relation, or system edge involved;
  • the probe lane and output carrier;
  • the state reading before the interaction and the state reading after the interaction;
  • the state-change evidence, including traces, changed labels, changed priorities, changed timings, changed routines, changed bridge fields, or changed downstream decisions;
  • the local stop condition: which use the output does not support without another pattern;
  • the neighboring FPF pattern that would carry the other claim.

The record is unfinished when any of these remains true:

  • the output is named, but the operation that produced it is hidden;
  • the operation is named, but the state that changed is not named;
  • the state changed, but the decision that changes because of that fact is not named;
  • the bridge/export loss is stated only as a vague warning rather than as a concrete non-admissible use;
  • the same interaction is alternately treated as evidence, command, measurement, and bridge without role split.

The minimal admissible output is often enough: "this dashboard value is probe-coupled evidence for readiness behavior under window W"; "this workshop work changed alignment and therefore the workshop note cannot be treated as passive discovery"; "this API read is a non-neutral observation under these interface semantics"; "this context cut needs both F.9 bridge loss and C.26.1 probe-coupling treatment."

Probe, observable, output, and carrier split

Do not identify the thing being asked with the method that asks it, the output that appears, or the output carrier.

RoleBoundary-facing question
Observable or output dimensionWhat readiness, status, alignment, failure, response, risk, split, promise, or boundary condition is being read?
Probe methodWhich dashboard, API read, workshop order, survey, canary, incident review, event stream, or meeting format acts on the situation?
Measurement / interaction schemeWhat timing, threshold, sampling rule, question order, aggregation, publication path, or access path shapes the output?
Output or result recordWhat score, label, context map, API response, survey answer, incident class, readiness status, or bridge field was emitted?
State updateWhat behavior, alignment, meaning, trust, priority, escalation, or timing changed because of the probe?
Evidence carrierWhich log, dashboard export, meeting note, trace, decision record, ticket history, context map, or API result carries the output?

This split prevents a common mistake: "the dashboard says ready" hides at least four objects. The dashboard definition, the displayed result, the behavior it changes, and the readiness decision are distinct.

Reroute and disambiguation guide

Use this guide when a draft says that a boundary, system, team, or service is "coupled", "aligned", "interacting", "measured", "exported", "synchronized", or "read".

Trigger surfaceFirst questionIf yesIf no
"The dashboard shows readiness."Did publishing or using the dashboard change readiness behavior, escalation, staffing, or release posture?Use C.26.1; state probe, update, evidence, and admissible use.Use C.16, A.10, B.3, or ordinary reporting.
"The workshop discovered the boundary."Did question order, framing, participants, or artifacts change local meaning, ownership, trust, or viability?Use C.26.1 with this context-cut worked use slice; add F.9 if bridge/export loss is live.Use ordinary DDD / F.9 bounded-context work.
"The API read returns state."Is the read path state-changing under interface semantics, timing, cache, consistency, or downstream behavior?Use C.26.1 if the result is later treated as a passive read.Use ordinary API semantics, measurement, or data freshness.
"The message transferred the decision."Did the message change authority, trust, escalation, timing, or local meaning enough that copy or transfer is false?Use C.26.1 and apply the relevant work or authority pattern to commitments or authority.Use publication, bridge, or work enactment patterns.
"The split improved viability."Did the split/probe alter the viability envelope being evaluated?Coordinate with C.26.3.Use ordinary boundary, quality-bundle, or architecture patterns.

When relation wording is load-bearing, do not mint a relation token here. Keep the sentence as local explanatory prose or apply A.6.P or F.18 to reusable relation work.

Positive examples and near misses

CaseSupported C.26.1 useNear miss and neighboring-pattern handoff
Readiness dashboardThe readiness score changes team behavior: teams stop surfacing borderline failures because the dashboard is watched by release management. The score is probe-coupled evidence, not a passive readiness copy.If the dashboard only reports a well-defined measure with no behavior-changing or frame-changing effect, use C.16 plus evidence patterns.
API consistency checkA "read" through a cache warms entries and changes later latency, so the readout changes the performance state later used in the decision.If the call is simply a mutating operation by interface semantics, use ordinary API/work semantics and say so plainly.
Survey orderAsking "who owns incidents?" before "which context owns payment failure?" changes the resulting context map and escalation plan.If different answers merely reveal unresolved meanings, use F.9 / A.6.P first.
Event-storming workshopThe workshop produces a map and also changes team alignment, local vocabulary, and backlog priority.If it only documents known differences, use ordinary DDD and bridge fields.
Service splitSplitting Checkout and Payment changes recovery paths and support load, so the split is part of the phenomenon being evaluated.If the split only reduces deployment coupling with no probe/export effect, use ordinary boundary and quality patterns.
Incident metricPublishing "cache failover is the primary risk" shifts attention, staffing, and reproduction work.If the metric is only a report of already-carried evidence, use A.10 / B.3.

The positive examples are intentionally ordinary. QL value here is not exotic formalism; it is noticing that a read, metric, workshop, or interface often participates in the state it later claims to report.

Evidence posture for probe-coupled claims

Use the least-committing evidence posture that still supports the intended use.

Evidence postureAdmissible useTypical carriers
QLP-0 recognitionFlag a likely probe-coupled situation for local discussion.Meeting note, dashboard screenshot, issue comment, context-map draft.
QLP-1 local working useChange a local probe/order/frame, bridge note, or boundary decision in a team setting.Before/after labels, changed tickets, changed dashboard query, changed escalation path, changed architecture note.
QLP-2 decision-bearing / reusable usePublish as a repeatable FPF example or organization guideline, or use the reading in a local decision with consequence.Multiple cases, comparison with ordinary routes, named uncertainty, near-miss cases.
QLP-3 assurance or reusable-law useUse in release, audit, contractual, reusable-law, or high-impact decision support.Evidence graph, measurement method, assurance tuple, traceable source references, rival explanation comparison.

Do not make QLP-3 the ordinary entry cost. Most practical C.26.1 use lives at QLP-0 or QLP-1, with escalation only when the output is reused or carries higher consequence.

Archetypal Grounding

Tell: A team runs a service-boundary workshop after a series of incidents. The first map says "Payments is separate from Checkout". A week later, incident triage and backlog priorities have changed because the workshop reframed payment failure as a customer-promise risk.

Show, System side: the teams, services, dashboards, event stream, workshop format, and escalation routine are part of the boundary situation. The workshop is not only a carrier of information; it changes alignment and future work.

Show, Episteme side: the minimal evidence-bound claim is not "the workshop discovered the true topology." It is "the workshop work functioned as a probe lane that changed the represented boundary state and exposed export loss across Checkout and Payment." The next admissible move is a boundary or probe decision plus F.9 bridge notes.

Bias-Annotation

This pattern biases authors against passive-reading convenience. That bias is useful when dashboards, workshops, surveys, and API reads are treated as if they carry state without changing it.

The pattern also biases authors against overusing QL. It keeps ordinary intervention, ordinary message passing, ordinary bridge loss, ordinary API semantics, and ordinary work enactment with their existing FPF patterns when no probe-coupled reading remains.

Conformance Checklist

IDCheck
CC-C26.1.1The boundary, role relation, authority relation, bridge, split, or queried system edge is named.
CC-C26.1.2The active probe or interaction lane is typed as work, method, measurement, speech act, interaction channel, evidence carrier, bridge/export act, or API/service operation; any quantum-instrument wording is recorded only as a modeling analogy unless formalized elsewhere.
CC-C26.1.3Observable, probe method, measurement scheme or interaction scheme, emitted output or result record, update class, and evidence carrier are separated when they carry the claim.
CC-C26.1.4The QL cue or formal cue is named, or the case is handled without QL wording.
CC-C26.1.5The false passive reading or unjustified lossless-transfer reading is stated.
CC-C26.1.6The pre-probe hypothesis and observed/inferred post-probe state are stated without fake precision.
CC-C26.1.7State-change evidence and uncertainty/confidence posture are stated.
CC-C26.1.8State history, memory, path dependence, or order/frame sensitivity is stated when load-bearing.
CC-C26.1.9The state change, export loss, or viability change caused by the probe/interaction is stated.
CC-C26.1.10The output is one of the pattern finish conditions.
CC-C26.1.11The decoupling, probe-redesign, order-redesign, frame-redesign, bridge-redesign, or boundary-redesign option is stated when it could reduce the problem.
CC-C26.1.12The local evidence posture is stated when the claim is reused, contested, or higher consequence.
CC-C26.1.13Ordinary intervention, bridge, work, measurement, and viability routes are tried before QL wording is retained.
CC-C26.1.14Coupling or interaction wording is not minted as a reusable relation token without A.6.P / F.18.
CC-C26.1.15The pattern inherits QL-NQ from C.26 instead of restating the inherited boundary as local law.

Common Anti-Patterns and How to Avoid Them

Anti-patternSymptomRepair
Every interaction is QLAny message, meeting, or API call is called probe-coupled.Require a false passive-read, export, comparison, or optimization use.
Causal action mistaken for probeA deployment or command changes the world, and QL is invoked.Use intervention or work-governing patterns unless the action is being used as a readout of the state it changes.
Bridge loss aloneExport loses local meaning, but no state-changing probe is live.Use F.9 with loss notes.
Context-word driftcontext means probe frame in one sentence and U.BoundedContext in the next.Use U.BoundedContext only for semantic context; otherwise say probe frame, model frame, or measurement setup.
Relation token leakagecoupledBy(...) appears as if already ratified.Keep it as local drafting form or apply A.6.P and F.18.

Consequences

This pattern makes boundary decisions more honest. It turns "the workshop showed the split" into "the workshop both showed and changed the split-relevant state." It turns "the dashboard says ready" into "the dashboard is probe-coupled evidence with a limited decision use."

The cost is that some familiar artifacts lose false authority. Dashboards, workshops, surveys, API reads, and messages remain useful, but they no longer get to pretend they are always neutral windows.

Rationale

The pattern exists because boundary work is where the QL lens becomes practically visible fastest. Teams already experience dashboard effects, workshop effects, order effects, and bridge loss. The pattern gives those experiences a lightweight, typed, ordinary-pattern-compatible form.

The pattern is not a generic interaction theory. It is a boundary/probe repair for cases where passive read or unjustified lossless-transfer reading is materially false.

SoTA-Echoing

Pattern claimPractice sourcePattern implicationAdoption stance
A probe or instrument can produce both an output and a state update; the output alone does not specify the operation.Quantum-instrument modeling of question order, response replicability, and QQ-equality.Ask what operation produced both output and update before treating dashboards, API reads, workshops, surveys, or metrics as passive reads.Adapt the instrument/update lesson; do not import a full organization ontology.
Contextual judgment and order effects are common enough to be a practical modeling cue.Quantum Cognition.Treat question order, workshop order, and dashboard framing as possible state-shaping operations when they change the decision.Adopt as a recognition cue with critical limits.
Classical instrument models may explain some sequential-decision data, so QL is useful but not uniquely necessary by default.Quantum-like Cognition in Process Theories: An Analysis.Keep rival routes visible; QL remains a modeling lens, not a necessity claim.Use as non-exclusivity discipline.
A prediction, score, or metric can change the target distribution because people act on it, without requiring a QL probe reading.Performative Prediction.Move dashboard-induced or score-induced behavior to performative-prediction and ordinary measurement, intervention, or work patterns unless a residual incompatible-probe, order, contextual-probability, or instrument-like export support load remains.Adopt as a classical rival path that sharpens when C.26.1 is actually useful.
Boundaries can be modeled by what a system can measure, model, and affect, while mathematical boundary descriptions are not new worldly substances.The Computational Boundary of a Self and The Markov blankets of life.Make the boundary/probe relation explicit without reifying the boundary or coupling phrase.Adapt for boundary-function discipline.
Bounded-context and microservice practice already governs ordinary domain cuts and integration points.Use domain analysis to model microservices and DDD in software development: a 2025 SLR.Use C.26.1 only when the cut, workshop, bridge, dashboard, API extraction, split, or merge changes represented boundary state or export validity.Use DDD as baseline; add C.26.1 only for the probe-coupled support load.

Worked-use-slice discipline from these rows:

  • start from the ordinary FPF pattern before QL wording;
  • show the concrete operation that produced the output;
  • show the state update or export loss that changes the decision;
  • keep relation tokens local unless A.6.P / F.18 gives them a reusable declaration;
  • keep source-formalism language as modeling support, not as pattern-body ontology.

Relations

  • Builds on: C.26, A.6, A.6.B, A.6.P, F.9, A.15, C.16, A.10, B.3, C.25, A.1.1.
  • Coordinates with: C.26.2 when coordinated work evidences a non-exportable distributed state; C.26.3 when the boundary interaction changes a viability envelope.
  • Carries: a worked use slice inside C.26.1:4.3, not a standalone pattern or relation token.
  • Does not mint: U.Probe, a new boundary kind, or reusable relation predicates.
  • Name posture: Probe-Coupled Boundary Interaction names a boundary and probe relation, not Entangled Boundary, CoupledBy(...), Interaction Field, State-Changing Communication, or a reusable relation token. Relation wording remains local until A.6.P and F.18 ratify it.

C.26.1:End

Enacted Distributed State Evidence

Type: Architectural pattern Status: Stable Normativity: Normative unless explicitly marked informative

Problem frame

Use this pattern when coordinated work, behavior, or trace patterns give evidence that a team, organization, service mesh, market, or other collective system is acting from a state that no single participant report, survey, policy sentence, dashboard, or API export faithfully carries.

The pattern supports only a minimal evidence-bound claim. It lets an author say that coordinated work, behavior, or trace patterns are consistent with a distributed-state reading during a declared window, while keeping the claim tied to carriers, probes, rival explanations, and export loss.

Working surfaceValue
Primary readerArchitect, incident lead, organizational analyst, or manager judging whether coordinated work, behavior, or trace patterns evidence a minimal collective-state reading.
Evidence-bound state readingAn evidence-bound state reading over a declared collective U.System.
Minimal state-reading moveInfer only the minimal carrier-bound and window-bound state claim, name rivals, and state export and probe limits.
Outside workGroup-mind ontology, survey-as-state, timeless culture claims, ordinary routine claims, and formal measurement not governed by C.16.
What changes in practiceThe team can use coordinated work, behavior, or trace patterns as evidence without pretending one report faithfully exports the whole state.

Plain glosses:

  • collective bearer: the declared team, organization, service mesh, market slice, or other U.System whose coordinated work, behavior, or trace pattern is being read.
  • coordinated work or behavior: role-work, service behavior, market participant traces, routine, commitment, artifact use, or coordinated action.
  • distributed-state reading: a minimal evidence-bound interpretation of coordinated work or behavior, not a new hidden group entity.
  • carrier: a log, trace, artifact, commitment, routine, dashboard, report, API response, or document that grounds but does not equal the state.
  • faithful-enough export: a representation good enough for the current decision; when it is not faithful enough, state what was lost and why.

Problem

Teams often need to talk about latent alignment, readiness, market posture, service-mesh behavior, or an enacted "we already decided" before one explicit representation exists. Without a pattern, they oscillate between two bad options.

One option is magic language: "the organization knows", "the culture decided", "the market wants", or "the service mesh understands". The other option is false reduction: a survey answer, policy sentence, dashboard, or report is treated as the whole state.

Both fail. Coordinated behavior may evidence a real working state, but it does not automatically identify a durable mind, internal representation, causal mechanism, or faithful-enough export for the intended use.

Forces

ForceTension
Work evidence vs explicit reportCoordinated work may provide more direct evidence than any one report, but the report is often the only portable carrier.
Minimal evidence-bound claim vs useful claimThe pattern must say something useful without claiming group mind or durable hidden ontology.
Evidence vs measurementSome cases have formal measures; many have traces, commitments, routines, and artifacts instead.
Export need vs export lossThe state often must be summarized for a decision, but the summary may lose the coordination that matters.
Primary source family vs QL lensDistributed cognition, team cognition, routines, and socio-technical evidence are primary; QL enters only when probe, frame, or export effects are load-bearing.

Solution

Model the claim as evidence-bound U.Episteme over a declared collective U.System. Do not make the distributed state a bearer-independent thing. Do not treat a survey, dashboard, report, or API response as the state itself.

If the bearer is a market slice or service mesh, declare whether it is a collective U.System, delivery system, trace population, or evidence set. Do not infer systemhood from coordinated-looking traces alone.

The primary evidence family is coordinated work, service behavior, market participant traces, distributed cognition, routine dynamics, team cognition, work traces, and socio-technical evidence. QL enters only when probe, frame, export, incompatible read, or carrier/export structure that is not faithful enough for the declared use changes the admissible state reading.

The canonical EDSE move is to separate the factorable part from the coordination residue before making the minimal state reading:

  1. state what ordinary routines, policies, incentives, shared stimuli, dashboard-following, or copied artifacts explain;
  2. state what the carriers show;
  3. state what residue remains as a minimal state reading;
  4. state what action this residue supports.

Start with this recognition note:

Mini-entryQuestion
Collective bearerWhose coordinated work or behavior is being read: which team, organization, service mesh, market slice, or other declared collective system?
Carriers / windowWhich traces, artifacts, work results, commitments, dashboards, API responses, or records ground the reading, and during which window?
Minimal state readingWhat is the minimal state reading supported by the coordinated work or behavior, or by the trace pattern?
RivalWhich ordinary rival explanation remains live: policy, routine, shared stimulus, dashboard-following, copied artifact, or propagation effect?
Practical changeWhat can be done now without exceeding the evidence: adjust communication, triage, routing, planning, probe design, or return to a fuller evidence record?

Use the fuller EDSE record below when the reading will change coordination, be reused, be contested, support evidence, or leave the immediate local discussion.

Full EDSE record:

FieldQuestion
Collective bearerWhich declared collective U.System is being described?
Observed coordinated work, behavior, and trace patternWhich role-work, service behavior, market participant traces, routine, commitment, artifact use, or coordinated action is observed?
State readingWhich minimal state reading is consistent with the work?
QL cue or formal cue if retained after ordinary work, evidence, or routine explanationWhich probe, export loss, incompatible frame, compound-system decomposition, or no faithful-enough export under the declared probe, frame, and use makes ordinary work and evidence wording insufficient after ordinary explanations have been tried?
Evidence carriersWhich logs, traces, records, commitments, artifacts, dashboards, API responses, or documents ground the reading?
Probe or measurement approximationWhich survey, dashboard, API read, interview, trace query, metric, or publication approximates the state, and how may that probe change, thin, or frame the state reading?
Attempted export and faithful-enough criterionWhat export was attempted, and what would count as faithful enough for the current decision?
Loss cause and higher-fidelity exportWhy is the current export not faithful enough, and could a more discriminating probe, bridge, representation, or time window produce a higher-fidelity export?
Time windowDuring which window does the claim hold?
Persistence postureIs the reading momentary, recurring, stabilized for the incident/release/window, or expected to persist under stated conditions?
Decay and refresh conditionWhat would make the reading expire, refresh, lose support, or need a new probe?
Reprobe costWhat does it cost in time, risk, disruption, attention, coordination, privacy, or evidence quality to check again?
Rival explanation not ruled outWhich ordinary explanation remains possible?
Minimal supported claimWhat may be said without exceeding the evidence, carrier set, time window, or export limit?
Supported action or useWhich planning, communication, incident, routing, bridge, evidence, or decision move may now be taken without exceeding the claim?

Minimal claim principle

Preferred wording stays close to observed work:

  • "During window W, the incident-response organization acted consistently with a rollback-readiness posture, evidenced by release timing, escalation criteria, and shared trace use."
  • "The service mesh exhibited a coordinated throttling regime under policy P, evidenced by route changes and saturation traces."
  • "Market traces support an expectation-shift claim under probe Q, with media amplification still a rival explanation."

Avoid wording that asserts a heavier claim, such as "the organization decided", "the market knows", or "the team has a distributed mind", unless another FPF pattern and evidence requirement independently support it.

Finish conditions

This pattern emits one of these results:

ResultMeaning
Minimal evidence-bound state assertionState the collective bearer, observed coordinated work, behavior, or trace pattern, carriers, time window, confidence posture or assurance posture, rivals, and export limit.
Export-loss repairKeep the state reading minimal and add a bridge or publication note about what the attempted report, survey, API response, dashboard, or policy sentence lost.
Probe-coupled neighboring-pattern handoffApply C.26.1 when the survey work, dashboard publication or use, interview, API operation, or publication act changed the state being evidenced.
Measurement or evidence neighboring-pattern handoffApply C.16, A.10, or B.3 when the main support requirement is scale, method, evidence, assurance, or audit posture.
Work or authority neighboring-pattern handoffApply A.15 or the relevant authority or work pattern when a command, routine, incentive, or playbook explains the coordination without remaining export or probe support requirement.
No EDSE claimDrop the distributed-state wording when the carriers, window, rivals, or minimal admissible output cannot be stated.

Rival explanation rule

Before using this pattern, name the principal ordinary rivals:

RivalRepair
Policy, command, coercion, or management pressureUse work-claim or authority-claim patterns unless export or probe loss remains live.
Shared incentive or common external stimulusKeep the claim as parallel response if that explains the coordination.
Routine, habit, script, or playbookState the routine; avoid current-state wording that requires additional evidence.
Dashboard-following, metric gaming, or social desirabilityUse C.26.1 and evidence patterns for probe-caused change.
Copied artifact, template, policy sentence, or API responseUse F.9, E.17 publication, or bridge loss before EDSE.
Diffusion, contagion, media amplification, or signalingUse the appropriate propagation or evidence pattern and keep only the remaining work-enacted state claim.

Export-loss discipline

The phrase "not faithfully exportable under current probe and bridge conditions" is supported only when the text says:

  • what export was attempted;
  • what would have counted as faithful enough for the current decision;
  • what state, coordination, evidence path, timing, role alignment, option structure, survivor relation, or use limit was lost;
  • whether the loss comes from bridge, measurement, representation, audience, timing, state change, or another cause;
  • whether a more discriminating probe, bridge, representation, or time window could produce a higher-fidelity export.

Compound-state decomposition card

When the distributed-state reading is load-bearing, state the decomposition explicitly. Its practical purpose is the canonical EDSE move: ordinary rivals first, carriers second, coordination residue third, admissible use or action invitation fourth.

FieldQuestion
Whole systemWhich collective U.System is being read, and under what boundary?
SubsystemsWhich teams, roles, services, markets, routines, artifacts, or work lanes are locally readable?
Local state readingsWhat can be said about each part without inventing a shared inner representation?
Correlation or coordination evidenceWhich traces, timing, work transfers, commitments, artifact uses, or role-work alignments show coordination?
Factorable partWhich part of the behavior is explained by policy, routine, shared stimulus, incentive, dashboard following, or copied artifact?
Coordination residueWhat remains as a minimal distributed-state reading after the ordinary rival explanations are named?
Minimal supported claimWhat evidence-bound claim survives for the declared time window and carrier set?
Supported action or useWhich planning, communication, incident, routing, bridge, evidence, or decision move may now be taken without exceeding that minimal claim?

Evidence-bound state reading and claim floor

The evidence-bound state reading is an evidence-bound U.Episteme reading over coordinated work, behavior, or trace patterns by a declared collective U.System. The pattern does not govern an inner group entity, a culture substance, a market mind, a hidden service intelligence, or a reusable kernel state kind.

The minimal state-reading move is to turn coordinated work, behavior, or trace patterns into the minimal useful state reading while keeping the reading bound to:

  • the collective bearer and its boundary;
  • the observed work and evidence carriers;
  • the time window and persistence support;
  • the probe or export conditions;
  • the ordinary rival explanations;
  • the current export loss and higher-fidelity export possibility;
  • the next neighboring FPF pattern if a claim requiring additional evidence is needed.

This pattern is useful because many real work states are enacted before they are articulable. A team may behave as if a release freeze exists before any single person states it cleanly. A service mesh may exhibit one routing posture before any one dashboard carries the whole situation. A market may shift expectations before any one survey faithfully exports the shift. The pattern lets FPF say that much, and no more, without pretending that one carrier is the state.

Operational evidence sequence

Action path:

  1. Name the collective bearer as a declared U.System boundary, not a bare social label.
  2. Name the coordinated work, behavior, or trace pattern being read through A.15: actions, routines, commitments, role-work, service behavior, market participant traces, artifacts, or timing.
  3. Name the evidence carriers through A.10 so the reading is inspectable.
  4. State the time window, persistence support, decay/refresh condition, reprobe cost, and ordinary rival explanations.
  5. Name the candidate state reading only as a minimal evidence-bound U.Episteme reading.
  6. State the attempted export and what it lost.
  7. State the minimal supported claim, the supported action or use it carries now, and the other uses that remain unsupported by this reading.
  8. Add B.3 assurance only when consequence level, audit, release, or accountability use demands it.

Required output: produce a minimal evidence-bound distributed-state reading, the time window that bounds it, the live rival explanations, and the supported bounded action or use that follows from that reading.

The pass is complete only when the resulting sentence can survive without magical collective wording. A good output sounds like:

During incident window W, the incident-response organization acted consistently with rollback-readiness posture P, evidenced by deployment queue changes, escalation messages, rollback artifacts, and support-routing changes; this reading is not faithfully exported by survey S because S loses timing, role-work, and trace linkage.

That sentence is narrower than "the organization decided", but it is much more useful. It supports adjusting incident communication and release-triage posture during window W; it does not support a durable culture claim or release-readiness assurance claim.

Well-formed EDSE record

A usable EDSE record has this shape:

EnactedDistributedStateEvidence(
  collectiveBearer = ...,
  boundary = ...,
  observedCoordinatedWork = ...,
  evidenceCarriers = ...,
  probeOrExport = ...,
  timeWindow = ...,
  persistenceSupport = ...,
  ordinaryRivals = ...,
  factorablePart = ...,
  coordinationResidue = ...,
  exportLoss = ...,
  minimalSupportedClaim = ...,
  boundedActionSupported = ...,
  unsupportedUse = ...
)

The syntax is illustrative. The content is not optional when the state reading is used for a decision.

Well-formedness constraints:

  • collectiveBearer is a declared collective system, not a metaphorical subject.
  • evidenceCarriers are inspectable publication units, traces, records, commitments, logs, or work-result records.
  • timeWindow bounds the claim; persistence beyond that window needs its own support.
  • ordinaryRivals include at least the principal policy, incentive, routine, shared stimulus, dashboard-following, copied-artifact, or social-desirability explanation that could explain the same coordination.
  • minimalSupportedClaim states only what survives after rivals and export loss are named.
  • unsupportedUse names the neighboring claim or use that the current claim does not carry without applying the neighboring FPF pattern governing that claim that governs that claim.

Carrier, probe, report, and state split

The pattern keeps four objects separate:

ObjectRole in the claim
Enacted workWhat people, services, routines, artifacts, or market participants actually did in coordination.
Evidence carrierThe log, trace, ticket, meeting note, deployment record, dashboard export, report, API response, or policy text that makes some part of the work inspectable.
Probe / approximationThe survey, dashboard query, interview, trace query, report request, metric, or publication act that frames the state reading.
Distributed-state readingThe minimal U.Episteme claim inferred from coordinated work or behavior under carriers, window, rivals, and export limits.

A survey can be an evidence carrier and a probe. It is not the distributed state. A policy can be a carrier or a routine explanation. It is not automatically evidence that everyone shares one state. A dashboard can be a carrier, a probe, and a behavior-changing instrument. It is not automatically faithful enough for the intended use.

Case bank and near misses

CaseSupported C.26.2 readingNear miss or neighboring-pattern handoff
Incident release freezeTeams stop releases, prepare rollback evidence, redirect support work, and change escalation before a written decision appears.If a manager issued a clear command and the work merely followed it, use work and authority patterns with evidence, not EDSE.
Service-mesh throttling regimeRoute changes, saturation traces, retry patterns, and on-call routines show a coordinated throttling state under policy P.If one controller rule fully explains the behavior, state the rule and use ordinary system/dynamics evidence.
Market expectation shiftPricing, support inquiries, partner messages, and risk notes move together after a public signal.If media amplification or common stimulus explains the movement, keep only that propagation/evidence claim.
Team "already decided" postureBacklog changes, review comments, and role assignments show that the team is acting under an unstated decision.If the claim is only a vibe or a few statements, do not use EDSE; gather carriers or keep it as informal observation.
Survey of cultureSurvey answers conflict, but work traces show a stable escalation habit.Treat the survey as a probe and possible export loss; do not make it the state itself.
Dashboard-following organizationTeams coordinate around the public metric after the metric becomes visible.Apply C.26.1 for probe-caused change; EDSE may carry only the residual coordinated-state reading.

Evidence posture and confidence

EDSE claims become useful when the text says how much consequence the evidence can carry.

Evidence postureAdmissible useAdditional support requirement
QLP-0 recognitionFlag a possible enacted state for discussion or triage.Name bearer, work, carriers, and time window.
QLP-1 local working useAdjust local planning, incident response, or communication.Add rivals, export loss, persistence, and reprobe condition.
QLP-2 decision-bearing / reusable usePublish as a repeatable example or internal practice, or let the reading change a bounded decision.Add case comparison, near misses, and evidence-carrier discipline.
QLP-3 assurance or reusable-law useUse for release, audit, legal, accountability, reusable-law, or high-impact allocation.Apply A.10, B.3, C.16, and the relevant authority or work patterns.

For QLP-0 or low-consequence QLP-1, do not force persistence, decay, or reprobe-cost fields when the claim is explicitly momentary and the bounded action is local. Name the bearer, carriers, window, minimal reading, rival, practical change, and local stop; add the fuller temporal fields only when reuse, contest, or consequence makes them load-bearing.

The ordinary EDSE claim is minimal but actionable. It says: "this coordinated work or behavior supports this bounded reading for this use." It does not say: "the collective has one hidden durable state that a report can copy."

Archetypal Grounding

Tell: During an incident, several teams independently stop non-critical releases, reroute support, and prepare rollback evidence before any single manager issues a written decision. Later, a survey asks whether "we had decided to freeze release", and answers conflict.

Show, System side: the collective bearer is the incident-response organization during a declared incident window. Its carriers include deployment logs, meeting records, escalation messages, rollback preparation, support routing, and release queue changes.

Show, Episteme side: the supported claim is minimal. The organization acted consistently with a release-freeze readiness posture during window W. The claim does not say every participant knew the same proposition or that the coordination exists apart from the declared evidence carriers. A management directive, playbook, or dashboard effect remains a rival unless evidence narrows it.

Bias-Annotation

This pattern biases authors toward minimal evidence-bound claims and explicit evidence. That may feel conservative, but it makes distributed-state language usable without magic.

It also biases authors to keep primary grounding in distributed cognition, team cognition, organizational routines, socio-technical work, and evidence practice. The QL lens is secondary and only becomes active when probing, exporting, or comparing the state changes or loses load-bearing structure.

Conformance Checklist

IDCheck
CC-C26.2.1The collective bearer is a declared U.System or collective system, not a bare group label.
CC-C26.2.2Observed coordinated work, behavior, and trace pattern is named.
CC-C26.2.3Evidence carriers and time window are named.
CC-C26.2.4The QL cue / formal cue is named if QL wording is retained.
CC-C26.2.5Persistence class, decay or refresh condition, and reprobe cost are named when the claim is not momentary.
CC-C26.2.6The minimal supported claim is stated.
CC-C26.2.7At least one substantive ordinary rival explanation is named.
CC-C26.2.8The compound-state decomposition separates whole system, subsystems, local readings, factorable part, and coordination residue when the distributed-state reading is load-bearing.
CC-C26.2.9Any survey, dashboard, report, API response, or policy sentence is typed as representation, carrier, or export, not as the distributed state itself.
CC-C26.2.10Probe / measurement approximation, attempted export, faithful-enough criterion, loss cause, and higher-fidelity export possibility are stated when export or measurement carries the claim.
CC-C26.2.11Export loss is stated when the claim depends on export that is not faithful enough for the declared use.
CC-C26.2.12The evidence posture is stated when the claim is reused, contested, or higher consequence.
CC-C26.2.13Formal measurement uses C.16; evidence and assurance use A.10 or B.3; bridge loss uses F.9.
CC-C26.2.14The pattern inherits QL-NQ from C.26 and does not mint U.DistributedState.

Common Anti-Patterns and How to Avoid Them

Anti-patternSymptomRepair
Group mind claimThe text says the team, market, service, or organization knows or wants something.Rewrite as an evidence-bound state reading over a collective bearer during a window.
Survey-as-stateA survey answer is treated as the distributed state.Treat the survey as probe result, emitted output, or evidence carrier and ask what it lost or changed.
Tacit skill overreachA tacit skill or team vibe is called distributed state.Require coordinated work, carriers, time window, and rival explanations.
Routine mistaken for stateA playbook explains the action, but the text claims latent alignment.Name the routine and keep the claim requiring additional evidence out.
Timeless cultureA momentary observation becomes a durable culture claim.State window, persistence support, decay, and reprobe condition.

Consequences

This pattern lets FPF discuss enacted collective states without mysticism. It gives authors a disciplined way to use traces, routines, coordinated work, and export loss in one minimal claim.

The cost is that many attractive claims become narrower. That is the point. Minimal evidence-bound claims are often more useful than confident but ungrounded stories.

Rationale

Existing FPF patterns can carry parts of the support requirement, but no single ordinary pattern makes the combined minimal distributed-state claim easy to write. A.15 carries work, A.10 and B.3 carry evidence and assurance, F.9 carries export loss, and C.16 carries formal measurement. C.26.2 coordinates those neighboring-pattern applications for the specific case where coordinated work evidences a non-articulated state.

SoTA-Echoing

Pattern claimPractice sourcePattern implicationAdoption stance
Coordinated work can evidence state-like organization without reducing that state to one participant report.Representing distributed cognition in socio-technical systems, team cognition, shared mental models, transactive memory, organizational routine dynamics resources, work traces, and socio-technical systems.Make these the primary grounding; infer only minimal evidence-bound state readings from carriers, traces, and work.Adapt as primary non-QL grounding.
Probe/export conditions can change or thin the state reading.Quantum-like modeling in biology with open quantum systems and instruments / arXiv and Open Systems, Quantum Probability, and Logic for Quantum-like Modeling in Biology, Cognition, and Decision-Making.Activate QL only when probing, formalizing, exporting, or bridging changes or loses load-bearing structure.Adapt as secondary modeling support.
Contextual judgment and previous judgments can alter the state being reported.Quantum Cognition.Treat surveys, interviews, reports, and dashboards as possible probes of enacted state, not faithful copies by default.Use as probe/export caution with ordinary evidence routes.
Some sequential data can be carried by classical instrument models.Quantum-like Cognition in Process Theories: An Analysis.Keep non-necessity visible: EDSE is a useful FPF evidence pattern, not proof that only QL formalism works.Use as rival-model discipline.
Carrier plurality is normal in operational evidence.Observability, incident-management, audit, work-trace, and assurance practice.Use logs, traces, dashboards, meeting records, commitments, artifacts, and operational changes as carriers, not as faithful copies of the whole state.Adopt through A.10 / B.3 routes.

Worked-slice discipline from these rows:

  • ground the claim in coordinated work before QL vocabulary appears;
  • state the evidence carriers and time window before stating the state reading;
  • name rivals before retaining a distributed-state claim;
  • treat survey/report/dashboard outputs as carriers or probes, not as the state;
  • escalate to measurement, evidence, assurance, or authority patterns when the use requires measurement, evidence, assurance, or authority support.

Relations

  • Builds on: C.26, A.15, A.10, B.3, F.9, C.16, E.17.EFP, C.11.
  • Coordinates with: C.26.1 when the probe changes the state being evidenced; C.26.3 when the coordinated state is part of viability-envelope regulation.
  • Does not mint: U.DistributedState, a bearer-independent group entity, or a durable state beyond declared evidence and time window.
  • Name posture: Enacted Distributed State Evidence names an evidence-bound U.Episteme reading over work carriers, not Distributed Mind, Collective Consciousness, Social Field, or Organization Knows.

C.26.2:End

Viability-Envelope Boundary Regulation

Type: Architectural pattern Status: Stable Normativity: Normative unless explicitly marked informative

Problem frame

Use this pattern when architecture work is maintaining, recovering, or changing viable operating ranges across boundaries. The working problem is not "optimize one metric"; it is "keep a bundle of characteristics inside a viable region while disturbances, probes, actuators, boundary conditions, and operating regimes change."

Most envelope work covered by this pattern is ordinary control, quality, SRE, causal, or work discipline, not QL. FEP, allostasis, and active inference are source analogies for envelope discipline, sensor and action coupling, and partial observability; ordinary control, SRE, quality-bundle, causal, and work patterns remain primary unless probe, order, export, or coarsening cue remains load-bearing after ordinary viability, quality, dynamics, measurement, boundary, and work patterns have carried their part.

Working cardValue
Primary readerArchitect, platform lead, reliability lead, product manager, or operations lead preserving viability under changing conditions.
Primary EntityOfConcernA viability-envelope claim or plan over a declared viability bearer, with protected promise/function named separately.
Admissible moveName the bearer, envelope variables, disturbance, sensors/probes, actuators, boundary condition, adaptation cost, and failure mode.
Outside workOne-metric quality tuning, generic control theory, biological proof, full FEP doctrine, and ordinary feedback without an envelope/boundary claim.
What changes in practiceThe team stops treating one dashboard value as viability and designs the actual envelope-regulation move.

Plain glosses:

  • viability bearer: the U.System, collective system, delivery system, role configuration, organism-as-system, or explicitly modelled market slice whose viable range is being regulated.
  • protected promise / function: the U.PromiseContent, stakeholder value, function, operating regime, commitment payload, or delivery promise the bearer is trying to keep viable.
  • service situation: an A.6.8 facet-binding lens that identifies access point, delivery system, provider principal, promise content, commitment, delivery work, and evidence; it is not itself a new root bearer unless the relevant system facet is declared.
  • viability envelope: the region where the bearer can still keep the relevant promise or function, across several dimensions.
  • envelope variable: one characteristic that must stay within bounds, such as latency, reliability, support load, compliance exposure, safety margin, energy, or operator attention.
  • actuator: a work move that can change the situation, such as cache policy, throttle, staffing, routing, bridge rewrite, protocol, access, escalation, or measurement design.
  • allostasis: preserving function by changing settings, environment, boundary condition, actuation, or operating regime when circumstances change.

Problem

Teams often collapse viability into one dashboard value or fixed target. They optimize latency and damage operator load. They improve availability and increase compliance exposure. They preserve one metric while exhausting the team, hiding risk, or making recovery slower.

A second failure is passive sensing. A metric, probe, dashboard, alert, or health check is treated as a neutral window into viability, even when it changes behavior, hides unmeasured dimensions, or becomes an actuator through Goodhart effects.

A third failure is static stability. Teams say "keep the system stable" as if stability always means holding one internal variable fixed. In real architecture work, preserving viability may require changing environment, access, staffing, caching, throttling, routing, protocol, context split, or measurement design.

Forces

ForceTension
Bundle vs scalarViability usually concerns a bundle, but dashboards often expose one or two proxies.
Stability vs changeThe system may preserve function by changing internal settings, external environment, boundary conditions, or operating regime.
Sensing vs actuationMeasurements may be sensors, probes, or actuators, depending on how they change behavior.
Ordinary control vs QL lensC.25, U.Dynamics, A.6, A.15, and C.16 remain primary patterns; QL enters only for probe, frame, export, or coarsening cue.
Light use vs dynamics detailRate, inertia, damping, actuator latency, and effort matter only when load-bearing.

Solution

Use C.25 / U.Dynamics alone for ordinary envelope work. Use C.26.3 only when the viability-envelope reading is distorted or constrained by probe, frame, export, coarsening, or incompatible representation cue. Otherwise use ordinary viability, quality-bundle, dynamics, measurement, boundary, and work patterns.

Start with this recognition note:

Mini-entryQuestion
Viability bearerWhich U.System, collective system, delivery system, role configuration, organism-as-system, or explicitly declared bearer is being kept viable?
Protected promise / functionWhich U.PromiseContent, stakeholder value, function, operating regime, commitment payload, or delivery promise is protected?
Envelope variablesWhich two to five variables matter, rather than one comfort scalar?
DisturbanceWhat pushes the bearer outside the envelope?
Sensor / probe / actuatorWhat reads the situation, and what can actually change it?
Trade-off / failureWhat gets worse, what cost is paid, and what failure would show the envelope move did not work?

Use the fuller envelope-regulation record below when the viability reading will change a metric, actuator, boundary, staffing, routing, promise, or evidence decision.

Full envelope-regulation record:

FieldQuestion
Viability bearerWhich U.System, collective system, delivery system, role configuration, organism-as-system, or explicitly declared bearer is being kept viable?
Protected promise / functionWhich U.PromiseContent, stakeholder value, function, operating regime, commitment payload, or delivery promise is protected?
Service situation facets, if usedWhich A.6.8 facets are involved: access point, delivery system, provider principal, promise content, commitment, delivery work, and evidence?
Envelope variablesWhich characteristics or quality-bundle dimensions define viability?
Viable region / boundsWhat counts as inside, near edge, degraded, or outside the envelope for this use?
QL cue or formal cue if retainedWhich probe, order, export, coarsening, incompatible-frame, open-information-system update law, probe-frame relation, export admissibility, or measurement-changing-state cue remains after ordinary viability patterns are active?
DisturbanceWhat pushes the bearer outside the envelope?
Sensors / probesWhich metric, dashboard, alert, health check, review, trace query, observation setup, or probe reads the envelope, and can it change behavior or hide unmeasured dimensions?
Available actuatorsWhat work, method, boundary action, staffing change, cache, throttle, bridge, access, protocol, or routine can change the situation?
Boundary condition preserved / changedWhich access, ownership, context, interface, promise, or environment condition matters?
Trade-off conditionWhich envelope dimension is protected, relaxed, delayed, made more expensive, or deliberately held constant?
Adaptation costWhat is spent, delayed, damaged, risked, or made harder by the adaptation?
Failure modeWhat breakdown, drift, unsafe persistence, or loss of viability shows that the move failed?

Homeostasis and allostasis reading

Homeostasis means keeping a parameter or bundle inside viable bounds. Allostasis means preserving functioning by changing internal settings, external environment, boundary conditions, actuation, or operating regime when circumstances change.

Do not say that all architecture is homeostasis. Say that some architecture decisions are viability-envelope decisions.

Finish conditions

This pattern emits one of these results:

ResultMeaning
Envelope-regulation claimState bearer, protected promise/function, envelope variables, viable region/bounds, disturbance, sensors/probes, actuators, boundary condition, trade-off condition, authority, latency, adaptation cost, and failure mode.
Actuator redesignChange cache, throttle, routing, staffing, protocol, access, bridge, escalation, measurement, or context split because the existing actuator cannot keep the envelope viable.
Measurement/probe redesignRedesign a dashboard, alert, health check, readiness score, or review process because it distorts the envelope it reports.
Ordinary neighboring-pattern applicationUse C.25, C.16, A.6, A.15, U.Dynamics, C.18, C.19, or A.19 when the QL cue is not load-bearing.
No envelope claimDrop the viability-envelope wording when bearer, protected promise/function, viable region/bounds, disturbance, actuators, adaptation cost, and failure mode cannot be stated.

Metric-induced distortion

Treat sensors, probes, dashboards, alerts, and metrics as possible participants in the viability relation, not as neutral windows by default.

Anti-patternWhat goes wrongRepair
Metric-as-envelopeA proxy is treated as the whole envelope.Recover bearer, protected promise, full envelope, unmeasured dimensions, and admissible use.
Goodharted viabilityActors optimize measured slots while damaging unmeasured survivor relations or future adaptability.Route probe-caused behavior through C.26.1; add evidence for unmeasured envelope dimensions.
Actuator overfitAn action preserves one parameter while pushing another cost, latency, boundary relation, or promise outside bounds.Add trade-off condition, actuator authority, latency, adaptation cost, and failure mode.

Conditional dynamics detail

When rate, acceleration, second-order change, inertia, damping, resistance, effort, or actuator strength is load-bearing, state:

  • what rate or acceleration matters;
  • what slows or speeds the change;
  • whether the rate of change itself is changing, rebounding, overshooting, or damping out;
  • which inertia is useful and which is harmful;
  • which actuator can actually change the envelope fast enough;
  • which evidence shows the dynamic state.

If those variables are not load-bearing, do not force dynamics machinery into the case. The short recognition note or the full envelope-regulation record is enough.

Primary EntityOfConcern and operational sequence

The primary EntityOfConcern is a viability-envelope claim or plan. It is not a generic quality score, not a control-theory survey, and not a biological analogy. The claim says that some bearer can keep a promise, function, or operating regime viable only if a set of variables remains inside a usable region under declared disturbances, probes, sensors, actuators, boundary conditions, and adaptation costs.

The first useful move is to turn a one-scalar stability story into an inspectable envelope-regulation decision.

Action path:

  1. Name the viability bearer and the promise or function being preserved; if service or market language is used, declare whether the bearer is a collective U.System, delivery system, trace population, evidence set, or relevant A.6.8 facet-binding before treating the situation as a bearer.
  2. Name the envelope variables and the viable range or qualitative boundary for each.
  3. Name the disturbance or regime change.
  4. Name sensors/probes and say whether they only report, also frame, or also change behavior.
  5. Name available actuators and who or what can enact them in time.
  6. State the boundary condition being preserved or changed.
  7. State the trade-off condition and adaptation cost.
  8. State the failure mode and re-probe/destabilization condition.
  9. Add dynamics detail only if rate, inertia, damping, latency, resistance, or acceleration changes the decision.

Ordinary output: produce a viability-envelope record with envelope variables and viable region, a disturbance/sensor/actuator map, and a trade-off, adaptation, and failure condition that tells the practitioner what changes in the work.

The output should tell a practitioner what changes in the work: redesign the metric, change cache policy, adjust staffing, reroute traffic, split or merge a context, add a bridge note, change an escalation promise, or drop the envelope claim.

Viability envelope record

A usable envelope record is a pattern-local writing card, not a constructor. Use the fields below when envelope regulation is load-bearing:

bearer: ...
protected promise or function: ...
envelope variables: ...
viable region: ...
disturbance: ...
sensors or probes: ...
available actuators: ...
actuator authority and latency: ...
boundary condition: ...
trade-off condition: ...
adaptation cost: ...
failure mode: ...
re-probe or destabilization condition: ...

The record is not U.ViabilityEnvelopeRegulation, not a new kernel kind, and not a universal architecture constructor. It is a pattern-local normal form for writing envelope work clearly.

Well-formedness constraints:

  • the bearer is a declared U.System, collective system, delivery system, role configuration, organism-as-system, explicitly modelled market slice, or other explicitly bounded bearer of viability;
  • service-situation language identifies its [A.6.8](/generated/patterns/A.6.8) facets rather than treating the situation label as a root bearer by itself;
  • at least two envelope dimensions are visible when the claim says "viability" rather than one ordinary metric;
  • at least one actuator is named when the text proposes regulation rather than only diagnosis;
  • the actuator has an authority and latency story, otherwise the recommendation is only a wish;
  • the adaptation cost is named, because allostasis hides cost when phrased as "stability through change";
  • the failure mode is named, because viability is otherwise indistinguishable from optimism.

Sensor, probe, actuator, and metric split

Do not let one dashboard value stand for the whole envelope.

RoleViability-facing question
Envelope variableWhich quality, resource, promise, risk, or operating dimension is inside/outside viable range?
SensorWhich metric, alert, trace, health check, survey, review, or observation reports part of the envelope?
ProbeWhich measurement setup, dashboard, readiness check, review, experiment, or incident query may change behavior or expose hidden dimensions?
ActuatorWhich cache, throttle, routing rule, staffing change, protocol, escalation, access change, bridge rewrite, or context split can change the envelope?
Boundary conditionWhich access, ownership, context, interface, promise, environment, or information constraint shapes the envelope?
Adaptation costWhich latency, risk, effort, attention, support load, compliance exposure, energy, trust, or future flexibility is spent?

A metric value or dashboard carrier is not an actuator by itself. A measurement regime, publication act, alerting workflow, or governance routine may function as an actuator when the system responds through work: routing changes, escalation changes, staffing changes, cache policy changes, access changes, or boundary changes. An actuator can damage another envelope variable while repairing the one that triggered the work.

Homeostasis, allostasis, and architecture work

Homeostatic wording is useful when the work preserves one variable or bundle inside a stable range. Allostatic wording is useful when the work preserves function by changing settings, boundary conditions, environment, access, staffing, routing, protocol, cache policy, or operating regime.

Use the minimal reading that carries the case:

ReadingUse whenPractical output
Scalar quality repairOne characteristic or Q-bundle dimension is enough.Apply C.25, measurement patterns, or evidence patterns as appropriate.
Homeostatic envelopeThe target is to keep a bundle inside a stable range under disturbance.State variables, range, disturbance, sensor, actuator, and failure mode.
Allostatic envelopeFunction is preserved by changing settings, boundary, environment, access, work routine, or operating regime.State what changes, why function is preserved, and what cost moves elsewhere.
Probe-coupled viabilityThe measurement, dashboard, review, or readiness check changes the envelope it reports.Coordinate with C.26.1.
Enacted viability stateCoordinated work evidences the envelope state better than one report.Coordinate with C.26.2.

Do not call every adaptation allostasis. The term earns its place only when stability-through-change is the useful architecture reading.

Case bank and near misses

CaseSupported C.26.3 readingNear miss / reroute
Checkout cache under spikeCache aggressiveness preserves latency but increases stale payment-failure status and support load.If only cache latency is at issue, use ordinary performance and quality-bundle patterns.
Smart-building energy controlEnergy, comfort, privacy, occupancy, and abrupt weather changes form one envelope with sensors and actuators.If the case only tunes one thermostat setting, use ordinary control/measurement language.
Incident staffingAdding responders preserves recovery time but increases coordination overhead and error risk.If staffing is merely a work allocation issue, use A.15 / planning patterns.
Compliance exposureA fast remediation path lowers outage time but increases evidence gaps and audit risk.If audit evidence is primary, apply A.10 or B.3; keep C.26.3 only for envelope trade-off.
Service boundary splitSplitting a service reduces deployment coupling but increases bridge loss and operational support transfer cost.If the issue is only semantic bridge loss, use F.9; if the split changes the envelope, use C.26.3.
Body-temperature analogyFunction may be preserved by clothing, room air, activity, or exposure, not only internal heat production.Use only as explanatory analogy; do not make biology the proof for software.

Source-to-pattern translation

Allostasis, active inference, FEP, Markov blankets, and computational-boundary sources are useful here only after translation into FPF architecture terms:

Source-side termFPF-facing translation
HomeostasisKeep one parameter or bundle inside viable bounds.
AllostasisPreserve function by changing settings, environment, boundary condition, actuation, or operating regime.
Active inference / perception as actionMeasurement, sensor placement, and action have cost and can change later state estimates.
Markov blanket / computational boundaryBoundary as a statistical or functional separation for measure/model/act; not a new substance.
Criticality / metastabilityStability may be regime-bounded and fluctuation-bearing, not one final fixed point.
Expected free energy / precision controlInformation gathering, action, and confidence have cost; use only when those costs change the architecture decision.

This translation keeps the pattern practical for architects. The reader should be able to move from a source line to an action: change a metric, change a probe, change an actuator, change a boundary condition, state a trade-off, or reroute.

Archetypal Grounding

Tell: A platform team tries to preserve checkout latency during a traffic spike. The first move is to increase cache aggressiveness. Latency improves, but support load rises because stale payment-failure status causes confused customer contacts.

Show, System side: the viability bearer is the checkout/payment service situation. Envelope variables include latency, payment correctness, support load, customer-promise reliability, and operator attention. Actuators include cache policy, retry policy, routing, dashboard query, escalation promises, and context bridge changes.

Show, Episteme side: the supported claim is not "latency is the viability state." It is an envelope-regulation claim: latency was preserved by an actuator that damaged another envelope dimension. The repair is to state the trade-off, adaptation cost, actuator authority, and failure mode.

Bias-Annotation

This pattern biases authors against scalar comfort. That bias prevents "green dashboard" from replacing viability.

It also biases authors toward actionable architecture work. The pattern asks who or what can actually change the boundary, access, protocol, staffing, cache, throttle, bridge, or measurement setup, and how quickly that action can matter.

The pattern may feel too broad if it is applied to every quality concern. It is not for every quality concern. Use C.25 alone when one quality bundle or metric can be handled without envelope, disturbance, boundary condition, actuator, adaptation cost, or viability failure mode.

Conformance Checklist

IDCheck
CC-C26.3.1The viability bearer is named.
CC-C26.3.2The protected promise or function is named.
CC-C26.3.3Envelope variables or quality-bundle dimensions and the viable region / bounds are named.
CC-C26.3.4Disturbance class and scenario/window are named.
CC-C26.3.5Sensors/probes and their possible behavior-changing or dimension-hiding effects are named when measurement carries the envelope claim.
CC-C26.3.6Available actuators and actuator authority/latency are named.
CC-C26.3.7Boundary condition, trade-off condition, and adaptation cost are stated.
CC-C26.3.8Failure mode and re-probe/destabilization condition are stated.
CC-C26.3.9Metrics or dashboards are not treated as the envelope itself.
CC-C26.3.10The QL cue / formal cue is named if QL wording is retained.
CC-C26.3.11QL wording appears only when probe, order, export, coarsening, or incompatible frame interaction remains load-bearing.
CC-C26.3.12Rate/inertia/damping/effort and second-order dynamics variables appear only when load-bearing.
CC-C26.3.13Homeostasis, allostasis, active inference, and Markov-boundary wording are translated into FPF-facing architecture terms before they carry the claim.
CC-C26.3.14The pattern does not mint ViabilityParameter, HomeostasisOntology, or a new control ontology.

Common Anti-Patterns and How to Avoid Them

Anti-patternSymptomRepair
One metric as viabilityAvailability, latency, or score stands for the whole envelope.Add the bearer, protected promise, other dimensions, and failure mode.
Fixed setpoint thinkingStability means one variable must never move.Ask whether allostasis preserves function by changing settings, environment, boundary, or regime.
Passive sensor assumptionA dashboard is treated as neutral even after it changes behavior.Use C.26.1 and evidence patterns.
Actuator without authorityThe text recommends a change no one can enact in time.State actuator authority and latency.
Biological proof jumpHomeostasis or FEP language is used as proof for software or organizations.Treat it as modeling discipline and apply existing FPF patterns to claims.

Consequences

This pattern helps architects see stability-through-change. It supports decisions such as throttling, staffing, routing, protocol redesign, context split/merge, cache changes, measurement redesign, and escalation changes as envelope-regulation moves.

The cost is that simple metric stories become less simple. That is acceptable when the metric story hides the actual viability relation.

Rationale

Ordinary quality-bundle work does not always show boundary conditions, actuators, disturbances, adaptation cost, and failure modes together. C.26.3 coordinates those elements while preserving ordinary FPF patterns.

The QL lens is secondary. It matters when the way viability is probed, exported, or coarsened changes the state reading or admissible use of the representation.

SoTA-Echoing

Pattern claimPractice sourcePattern implicationAdoption stance
Viability maintenance is not fixed-value homeostasis only; stability can be relational, variational, dynamic, allostatic, metastable, and resilient.Conceptual foundations of physiological regulation incorporating the free energy principle and self-organized criticality.Use viability envelopes and stability-through-change; reject one-scalar optimization and "all architecture is homeostasis."Adapt as architecture-facing envelope discipline.
Action and perception are coupled under partial observability and cost.Active inference as a theory of sentient behavior.Treat sensors, probes, dashboards, and actuators as part of the envelope relation when they change behavior or viability.Adapt for measurement-as-action and planning cost.
Active-inference engineering already appears in energy/building control under privacy, partial observability, evolving conditions, and abrupt changes.Active Inference for Energy Control and Planning in Smart Buildings and Communities.Use engineering examples cautiously: they show the kind of control problem, not settled FPF doctrine.Use as emerging engineering anchor.
Boundaries can be statistical/computational descriptions of what a system can measure, model, and affect.The Computational Boundary of a Self and The Markov blankets of life.Name boundary conditions and information constraints without reifying a boundary substance.Adapt with map-territory caution.
Excess Bayesian / active-embodied inference shows the cost of moving sensor, body, instrument, or access point to obtain a discriminating observation.Connecting the free energy principle with quantum cognition.Treat probe placement, access placement, and observation cost as part of viability-envelope work when they change the decision.Adapt for probe/action cost, not as a replacement for ordinary Bayesian or active-inference routes.
Platform and software engineering already treats many quality concerns as trade-off bundles.Reliability, incident, platform, compliance, energy, support, operator-load practice, and Google SRE SLO / error-budget practice, coordinated with C.25.Make the quality bundle explicit and state actuator authority, latency, adaptation cost, and failure mode.Adopt through FPF quality-bundle routes.

Worked-slice discipline from these rows:

  • state the envelope before importing source terminology;
  • translate source terms into selected structures, ArchitectureOf@Context relations, architecture descriptions, structural views, or named C.30 subcases;
  • keep sensors, probes, actuators, and metrics distinct;
  • state adaptation cost and failure mode;
  • apply ordinary quality and measurement patterns to one-scalar quality concerns.

Relations

C.27 temporal-claim relation.

  • C.27 may flag: braking, throttling, cadence, recovery, or stabilization moves in claims such as slow rollout protecting support capacity, request throttling preventing collapse, or cadence change preserving attention/team health.

  • This pattern keeps: viability bearer, protected promise/function, viable region, disturbance, sensor/probe/action split, adaptation cost, and failure mode.

  • Non-admissible use: stabilization wording is not a viability envelope, and C.27 is not the pattern for all stability-through-change claims.

  • Exit: if the claim being made is only better quality, healthier team, or more resilient service without a declared viability envelope, use C.25, E.13, or the relevant quality/proxy/value pattern rather than C.26.3 or a C.27 profile.

  • Builds on: C.26, C.25, U.Dynamics, A.6, A.15, C.16, A.10, B.3, A.3, A.19, C.18, C.19.

  • Coordinates with: C.26.1 when sensors, probes, dashboards, or metrics change represented state; C.26.2 when coordinated work evidences the envelope state.

  • Does not replace: ordinary quality-bundle patterns, generic control theory, full FEP doctrine, or biological homeostasis claims outside FPF bridge and loss discipline.

  • Name boundary: Viability-Envelope Boundary Regulation names architecture work over a viability envelope and boundary/action conditions, not Homeostasis Pattern, Allostasis Doctrine, Control Ontology, Quality Optimization Pattern, or Viability Substance.

C.26.3:End

Type: Architectural (A) Status: Stable Normativity: Normative unless marked informative

Plain-name. Temporal claim adequacy.

Primary EntityOfConcern. C.27 concerns authored temporal claims: descriptions in prose, plans, benchmark lines, dashboards, method notes, promises, or explanations that treat state, rate, rhythm, recovery, braking, coasting, redirection, stabilization, or rate-change as sufficient for some use.

Described-system, description, and carrier discipline. The described system, work, practice, method, service, or benchmark is not the C.27 record. A Dyn2TemporalClaimAdequacyCard or Dyn2TemporalClaimProfile is an authored description of temporal-claim adequacy. A document, table, page, report, or card may carry that description; it is not the temporal claim, not the dynamic system, and not the work trace.

Use-context and evidence/assumption discipline. When this pattern says supportedUse, it means the decision, plan, diagnosis, comparison, publication, promise, assurance-facing relation, or other practical use that this C.27 record named by value can carry given its dynClaimPosture, evidence path, model or planning assumption, source-use reference when that source use is being made , windows, resistance or cost statement, and reopen condition. unsupportedUse means one nearby downstream claim, effect, or use that this record named by value does not carry. These fields do not create permission; they state the pragmatic reach of the authored temporal-claim description.

Bare "support" should not do hidden ontology work in C.27. Use supportedUse and unsupportedUse only for the pragmatic reach of a temporal-claim record; use an evidence path, model assumption, source-use reference, or planning assumption for the reason a reading is credible; use RouteRef or a named FPF pattern relation when an existing FPF pattern governs the other question.

Boundary-crossing claim use. The object remains an authored temporal claim. What changes is the use context: the claim is used as citable evidence, assumption, source-use reference, or pattern-relation input outside the immediate local discussion, published, benchmarked, promised, assured, made durable rationale, repeated in a reusable method description, used in a gate/public dashboard/Part G pack, or carried across context or scale. Casual reuse in a neighboring chat is not enough by itself. Boundary-crossing use is what can require a Dyn2TemporalClaimProfile.

Use this pattern when a claim about speed, rhythm, throughput, recovery, convergence, rollout, adoption, braking, coasting, redirection, or stabilization is used to change action and therefore needs effort, window, resistance, evidence path or assumption relation, supported-use, unsupported-use, and reopen discipline.

Do not use this pattern when the temporal wording is ordinary prose, a state reading or snapshot, a rate reading or trend reading whose measurement construction is enough, a formal U.Dynamics model, an actual work trace, a benchmark harness, a service promise, a quality judgement, or a residual quantum-like probe case without an intervention-sensitive temporal claim.

C.27 in 60 seconds. Use C.27 only if:

  1. temporal wording is used to justify action, comparison, budget, gate, promise, assurance, or an explicit relation to another FPF pattern;
  2. the difference between state, rate, and rate-change changes admissible use;
  3. the text can name at least target, intervention, window, resistance or cost, evidence path or assumption relation, supported use, and unsupported use or reopen trigger.

Otherwise stop at ordinary prose, a Dyn0 state reading, a Dyn1 rate reading or trend reading, C.16.P when characteristic, scale, score, metric, or proxy wording is hidden, C.16 measurement discipline when the measurement construction is already recoverable, C.16.Q or C.25 when overloaded quality wording or a quality-family endpoint is the issue under repair, U.Dynamics model discipline, or the existing FPF pattern that governs the other question.

For local diagnosis or planning, C.27 usually ends with one Dyn2TemporalClaimAdequacyCard. Plain references are enough while the use stays local. A local card should normally fit in 5-9 short lines; if it does not, clarify the claim, narrow it, or cite the existing FPF pattern that governs the other question. RouteRef, C16RouteRef, G9ParityPlanRef, and similar references appear only when the use is FPF-governed beyond the local note.

Quick refusals. "Backlog is 120" is Dyn0; no C.27 record. "Backlog fell 20/week" is Dyn1, with C.16 if the measure is FPF-governed; no C.27 record unless a rate-change use appears. "This section accelerates orientation" is ordinary prose unless the PublicationUnit carries that acceleration claim as method-effectiveness evidence.

Dyn2 is not maturity. Dyn2 classifies the use made of an authored temporal claim, not the system, team, method, or service being described. Higher DynOrder is not better; it only says what the authored temporal claim treats as sufficient for supported use.

Local refresh boundary. A local card carries only a reopen, downgrade, or pattern-reference condition. G.11, B.3.4, and assurance refresh discipline become relevant only when the temporal claim is public, Part G-facing, assurance-facing, or otherwise durable beyond local planning/diagnosis.

Problem frame

Causal-use boundary

C.27 can say that a temporal claim is dynamic, intervention-sensitive, rate-sensitive, inertia-sensitive, braking-sensitive, coasting-sensitive, or rhythm-sensitive. When the temporal claim already depends on causal-use question, causalInterventionSpecRef, comparator/counterfactual, estimand, assignment or intervention window, causal follow-up window, outcome measure, causalAssumptionSetRef, rivalCauseSetRef, identification strategy, counterfactual-sampling realizability claim, CausalUseEvidenceDesignRecord, supported causal use, or unsupported causal use, cite C.28 as the governing causal-use source.

What changes in practice: a sentence such as "this effort changes adoption speed" may remain a Dyn2 temporal claim, but "this intervention causes adoption speed to improve" must also declare its C.28 causal-use class and causal-use support.

What this does not authorize: C.27 does not estimate causal effects, certify counterfactual comparisons, or judge counterfactual sampling realizability; it keeps temporal claim adequacy, rate-change, effort, inertia, rhythm, braking, coasting, and intervention-sensitive temporal wording.

FPF already has established constructs and patterns for time, work, resources, measurement, CharacteristicSpace, dynamics laws, planning, publication, and quantum-like probe and frame issues. What is missing is a cheap claim-adequacy lens for authored temporal claims when a state/rate reading is used as if it supplied the evidence path, assumption, or pattern relation for a rate-change, rhythm-change, regime-change, braking, coasting, redirection, recovery, or stabilization claim.

The first-minute working situation is simple: a manager, method author, researcher, operator, or agentic-tool planner says that something should speed up, slow down, converge faster, recover sooner, sustain rhythm, improve throughput, accelerate learning, brake risk, or redirect effort. FPF should help the reader ask whether the claim is only a state reading, only a rate/trajectory reading, or an intervention-sensitive claim about changing a rate under effort, resistance, rhythm, feedback, constraint, or cost.

What goes wrong if missed: the text measures or names a rate and then behaves as if it knows how to change that rate. This produces speed-only management, benchmark theater, hidden promises, causal overclaim, effort-free acceleration, rhythm-as-vibe, and false QL relevance.

The intended FPF gain is not "add physics metaphors". The gain is a compact thinking-and-action discipline for cases where speed talk hides effort, timing, resistance, evidence, scale, reversibility, and admissible use.

Anti-case: if a phrase uses speed or rhythm only as ordinary explanatory prose, or if a state/rate reading is enough for the use, C.27 should be easy not to use.

Use C.27 because it gives a working reader a useful pause before acting on speed talk. The intended use is not to formalize every temporal sentence. The intended use is to stop a small set of expensive mistakes:

  • a rate is measured and then treated as if the intervention mechanism is known;
  • visible throughput improves while hidden queues, rework, quality loss, or burnout worsen;
  • a past slope is treated as a future control model;
  • a local rate-change is projected across scale without aggregation relation or evidence;
  • rhythm or cadence is used as a vibe label with no bearer, timing reference, window, proxy/evidence, or supported use;
  • a planning note becomes a C.28-governed causal-use claim, benchmark result, service promise, or assurance claim;
  • quantum-like modeling is treated as relevant merely because the text contains discreteness, types, probes, tokens, or state-space wording.

The positive reader use compact is short:

  1. If the statement is only a state reading, use the ordinary state/evidence relation.
  2. If the statement is only a rate or trajectory reading, use measurement and sampling-window discipline.
  3. If the statement claims that effort, policy, input, rhythm, constraint, or resistance changes the rate, use the least-committing C.27 record that changes admissible use.
  4. If the claim crosses the local working boundary into comparison, benchmark, publication, gate, assurance, public promise, durable rationale, reusable method, formal/control/prediction use, or cross-context transfer, strengthen the C.27 record and name the existing patterns that carry the specialist claim questions. Local decision-use can often remain a Dyn2TemporalClaimAdequacyCard.

This is the central anti-bureaucracy invariant: no C.27 record unless the Dyn0, Dyn1, and Dyn2 distinction changes interpretation, decision-use, evidence path, resource allocation, benchmark reading, supported use, or reopen trigger.

Dyn2-Affordability: a correct C.27 use leaves less work behind than the ambiguity would have caused. If applying C.27 creates more work than the temporal distinction changes, exit.

At the point of use, the C.27 question is concrete. Before adding a C.27 record, recover:

  • what rate, rhythm, trajectory, regime, or stability claim is in play;
  • whether the text is reading state, reading rate, or claiming rate-change;
  • what effort, input, policy, method, intervention actor/role assignment, or resource envelope is supposed to change the temporal behavior;
  • what resists, delays, stores momentum, introduces lag, or makes reversal costly;
  • what evidence, trace, assumption, model, or diagnostic judgement supplies the reason for the reading;
  • what use the claim can carry and what downstream claim, effect, or use remains unsupported;
  • when the simplified reading should reopen, downgrade, or cite the fuller FPF pattern that governs the other question.

The pattern buys practical action, not a vocabulary test. A person can explain the check as: "A trend is not yet an intervention model; show the effort, window, resistance, use, and reopen condition, or keep the claim narrower."

Some useful temporal observations arrive before they are claim-ready:

  • the team may not only be slow; it may be unable to brake;
  • the problem may not be throughput but rhythm mismatch;
  • a metric may improve while operational-support load accumulates;
  • "the process sped up" may hide orders, invoices, shipments, support tickets, PRs, tests, and deployments moving through different paths and interaction windows;
  • more tool calls may accelerate activity traces without accelerating reasoning or repair.

These are temporal-claim adequacy cues, not C.27 records. C.27 should preserve their cue-only disposition. When the reader suspects a hidden Dyn2 claim question but cannot yet state target, intervention, window, resistance/cost evidence or assumption, evidence or assumption, and supported use, the correct output is a partly-said material cue held through A.16, A.16.1, B.4.1, or B.5.2.0, with possible later C.27 record.

The cue may become a Dyn2TemporalClaimAdequacyCard only when a rate-change, rhythm-change, braking, coasting, recovery, stabilization, or intervention claim becomes explicit enough to name the card minimum. If the question under repair is not temporal-claim adequacy, use the pattern that carries that question: C.16 for measurement, C.26 for residual QL cue, E.17.AUD for publication-unit stability, or viability/assurance patterns when the observation has insufficient evidence, witness, or currentness support for staying inside a viability or assurance boundary.

Problem

C.27 governs the adequacy of intervention-sensitive temporal claims.

C.27 does not govern:

  • transition laws or reusable dynamics models, which A.3.3 U.Dynamics carries;
  • state-space or coordinate construction, which A.19 and C.16 carry;
  • measurement legality, evidence construction, provenance, assurance claim, or evidence decay, which C.16, A.10, B.3, B.3.4, and G.6 carry as applicable;
  • work actuals and resource burn, which U.Work and Gamma_work carry;
  • planning structures and authorized work, which U.WorkPlan, U.MethodDescription, C.24, and relevant planning patterns carry;
  • autonomy-budget declarations, guard checks, ledgers, depletion, pause/resume, or freedom-of-action governance, which E.16 carries;
  • state-change or evolution loops and language-state movement, which A.4, B.4, A.16, and B.4.1 carry;
  • C.28-governed causal-use claim, which C.28 carries, or evaluation/evidence claim, which the relevant evaluation/evidence patterns carry;
  • metric proxy/value substitution, which E.13 carries;
  • service promises, agreement text, SLA-like statements, release gates, public commitments, and service-acceptance bindings, which A.2.3, A.2.8, A.2.9, A.6.C, F.12, and assurance patterns carry;
  • benchmark harnesses, which G.9 carries;
  • dashboard time-series, telemetry pins, path/slice publication, pack shipping, discipline-health slots, and refresh orchestration, which C.21, G.12, G.6, G.10, and G.11 carry;
  • selector publication roles, which G.5 carries only when a concrete selector-publication case consumes a dynamic benchmark result;
  • quantum-like probe, frame, export, or coarsening residues, which C.26 carries;
  • publication roles, MVPK faces, primary EntityOfConcern values of related FPF patterns, or Kernel U.* kinds.

Dynamic-order labels are pattern-local claim classifications, not FPF kinds. C.27 does not mint U.Force, U.Mass, U.Acceleration, U.Rhythm, U.Practice, or U.SecondOrderProcess.

FPF gains a compact discipline for claims that otherwise hide behind words such as speed, agility, throughput, adoption, rhythm, velocity, convergence, debugging speed, service recovery, faster improvement, acceleration, braking, redirection, or cadence.

The main failure to prevent is:

A text measures or names a rate and then behaves as if it knows how to change that rate.

C.27 should make three distinctions cheap:

  • Dyn0: state or snapshot reading;
  • Dyn1: rate, trend, trajectory, flow, throughput, tempo, or cadence reading;
  • Dyn2: intervention-sensitive temporal reading: rate-change, regime transition, braking, redirection, coasting, pause, stabilization, rhythm fit, effort profile, resistance, inertia, policy effect, feedback, uncertainty, or constraint handling.

C.27 protects against the managerial speed cult. Faster is not the default value. Braking, pausing, stabilizing, redirecting, coasting, delaying, widening before narrowing, or slowing rollout can be the correct C.27 outcome.

Local temporal-value boundary:

C.27 can classify the temporal move. It does not decide that acceleration, braking, stabilization, coasting, recovery, convergence, or release speed is valuable. The FPF patterns for value alignment, assurance, promise, ethics, safety, legal, or proxy/audit concerns carry value, utility, constraint fit, harm, promise impact, and proxy distortion.

This boundary applies to claims such as "faster onboarding is better", "more throughput is better", "faster convergence is better", or "rapid release is our goal". C.27 may make the temporal claim adequate enough to inspect, but it does not turn speed into value by default.

These are claim-relation boundary tests, not keyword exclusions. C.27 may still supply a short temporal-claim note when the state/rate/rate-change/rhythm/regime reading changes admissible use. The named neighbouring pattern then carries the non-C.27 question. If the temporal distinction does not change admissible use, exit C.27 completely.

Do not make C.27 the governing pattern when:

  • the text only reports a state or snapshot and no rate/use distinction changes interpretation;
  • the text only reports a rate, trend, throughput, cadence, or trajectory and no intervention-sensitive rate-change claim is made;
  • a word such as speed, rhythm, acceleration, agility, or inertia is only a teaching metaphor or casual Plain wording;
  • the issue under repair is publication-unit stability: one overloaded local head, drifting publication-unit primary entity of concern, bounded comparison, explanation faithfulness, or approval/action wording should use E.17.AUD, E.17.ID.CR, E.17.EFP, or the pattern that governs the downstream claim, effect, or use before C.27;
  • the question under repair is whether a measure is legal, comparable, or interpretable: C.16 carries measurement construction, with C.27 only citing the temporal C.27 relation if the measure supplies evidence for an intervention-sensitive claim;
  • the question under repair is a transition law, simulation, prediction, or control model: A.3.3 U.Dynamics and formal/evidence patterns carry the formal dynamics, with C.27 only naming the admissible-use limit of the authored claim;
  • the question under repair is work/resource actuals: U.Work and Gamma_work carry the evidence, with C.27 only using it as effort evidence or planning assumption for a Dyn2 claim;
  • the question under repair is scaling-law or elasticity adequacy: C.18.1 carries scale variables, scale window, scale probes, and scale-elasticity value, with C.27 only naming the temporal-claim adequacy question if scale change is used as the scale-variable relation for rate-change, learning, recovery, throughput, or stabilization;
  • the question under repair is a work plan, call plan, method description, or authorized intervention actor/role assignment: the planning pattern carries the plan, with C.27 only active when the plan's admissible use depends on rate-change, recovery, stabilization, or braking;
  • the question under repair is task-family specialization: C.22.1 carries adaptation signature fields, with C.27 only naming the temporal-claim question when learning or adaptation speed changes admissible use;
  • the question under repair is preserving a viability envelope under disturbance, adaptation cost, latency, operational-support load, or boundary regulation: C.26.3 carries the envelope claim, with C.27 only naming the temporal move if braking, throttling, cadence change, recovery timing, or stabilization changes supported use;
  • the question under repair is causal attribution: C.28 carries causal-use claim, and evaluation/evidence patterns carry non-causal evaluation/evidence claims; C.27 may mark the temporal claim's causal use as unsupported until that C.28 relation is satisfied;
  • the question under repair is a benchmark, budget, promise, service boundary, SLA-like statement, public commitment, assurance, or release gate: the relevant benchmark, boundary, promise, service, assurance, or planning pattern carries that claim/use, with C.27 only naming the temporal claim that the other pattern inspects;
  • the question under repair is residual quantum-like probe, frame, export, or coarsening cue: C.26 carries it only after ordinary dynamics, work, measurement, benchmark, proxy, and assurance patterns have carried their parts.

Overlap example: "Adding review capacity for two sprints will double backlog reduction rate and justify a budget increase" is not solved by C.27 alone. C.27 types the Dyn2 temporal-claim question; the planning pattern carries planned effort, C.16 carries the rate/rate-change measure, the budget/planning pattern carries approval, and C.28 carries any causal-use claim. The short temporal-claim note is a Dyn2TemporalClaimAdequacyCard: it prevents those patterns from missing the hidden rate-change question, but it does not replace them.

C.27 does not introduce:

  • literal Newtonian or physical ontology for organizations, practices, services, dances, learning, or work cycles;
  • physical quantum ontology or quantum-like superiority;
  • mandatory ODE/PDE/calculus formalism for all temporal claims;
  • new Kernel types for force, mass, acceleration, rhythm, or practice;
  • a new publication role, separate pattern, law sheet, or MVPK face;
  • default C.27 profiling for every temporal word;
  • thin C.27 echo records when a local C.27 card or profile can cite the FPF FPF pattern that governs the other question.

Forces

The source article contributes three practical ideas that should survive into C.27 prose.

First, the useful question is an effort-profile question, not a derivative-word question. In management, learning, tool-use, incident response, practice transfer, dance, and service operations, the relevant change is often a profile of effort over windows: impulse, scheduled push, feedback policy, adaptive regime, brake, pause, coast, or redirect. C.27 should preserve effort over time, not just a scalar acceleration label.

Second, rhythm is interval-structured. A rhythm claim needs a timing reference, bearer, window, evidence proxy or observation relation, and admissible use. "Rhythm" as mood or vibe is not enough; it must be possible to recover whose rhythm, across which intervals, by which observation or proxy, and for which decision. Coupling, phase, synchronization, or entrainment-like wording is only needed when the claim depends on a relation between bearers.

Third, useful formalization improves replicable practice code. C.27 should help make a practice transferable by recording effort windows, rhythm timing references, bearer, resistance proxy, evidence path or assumption, and reopen condition. It should not force equations merely because the source analogy used dynamics language.

Borrowed-frame translation:

Borrowed ideaC.27 use
State, rate, and rate-change distinctionAdopted as Dyn0, Dyn1, and Dyn2 claim-reading discipline.
Effort windows, acceleration, braking, redirection, coasting, recovery, and stabilizationAdopted as the central temporal-claim adequacy question, with acceleration bias explicitly rejected.
Time-scale plurality: spot, episode, sprint, life-cycle time scale, learning-cycle, technoevolution, lifetime, or domain-local time scaleAdapted as an optional temporal-scale boundary declaration for boundary-crossing rhythm use, practice, learning, life-cycle time scale, or evolution claims; not mandatory for ordinary local cards.
Speed as result of effort, input, and resistance rather than explanation of its own future changeAdopted as the rate-as-cause-of-rate-change anti-pattern: observed speed does not by itself explain how to change speed.
Rhythm as interval-structured effort/rate-change patternAdopted with bearer, timing reference, window, evidence/proxy relation, admissible use, and cross-bearer coupling only when a named cross-bearer relation is live.
Dance/practice style as replicable temporal codeAdapted as replicable practice-description relation: if a training rhythm, review cadence, learning routine, or practice style is meant for boundary-crossing use, name what rhythm/effort pattern is transmitted, which bearer carries it, which timing-reference/window makes it reproducible, and what error accumulates if only static poses or rate words are transmitted.
Typed/discretized compact dynamic representationA.19, C.16, and C.26 carry it only when the representation, measurement, or residual QL cue is live.
Quantum-like or active-inference superiority claimNot adopted in C.27; C.26 carries the residual probe, frame, order, export, or coarsening claim after ordinary C.27, C.16, work, benchmark, and proxy pattern relations are named.
Universal search for force/mass analogues everywhereRejected as literal ontology; physical words may remain Plain diagnostic cues, but C.27 mints no U.Force, U.Mass, U.Acceleration, U.Rhythm, U.Practice, or U.SecondOrderProcess.
Design alternativeC.27 outcome
------
Do nothingInsufficient
Add examples onlyInsufficient
Put the whole question in A.3.3 U.DynamicsWrong primary EntityOfConcern
Put the whole question in C.16Wrong primary EntityOfConcern
Put the whole question in C.24Too narrow
Put the whole question in C.26Wrong residual QL relation
Add new Kernel types such as U.Force, U.Mass, U.Acceleration, U.Rhythm, U.Practice, or U.SecondOrderProcessWrong ontology
Create a new publication role or separate pattern for C.27 cardsWrong object kind
Use C.27 with explicit references to the FPF patterns that govern the other questionsChosen C.27 shape
Duplicate C.27 claim-adequacy content across every related patternToo broad

Solution

Use the least-committing dynamic-order output that changes the admissible use. Dyn0 and Dyn1 are readings in ordinary prose, not C.27 record classes; C.27 records start only when a Dyn2TemporalClaimAdequacyCard or Dyn2TemporalClaimProfile for boundary-crossing claim use is needed.

LevelUser-visible moveStop condition
SkipLeave as ordinary prosetemporal wording does not change claim/use
Dyn0 readingstate reading or snapshot onlysnapshot is enough
Dyn1 readingrate, trend, or trajectory only, or C.16-compatible measure when FPF-governedno intervention-sensitive claim
Dyn2TemporalClaimAdequacyCardone-screen Dyn2TemporalClaimAdequacyCardlocal plan, diagnostic, rhythm, effort, or intervention clarity is enough
Dyn2TemporalClaimProfileDyn2TemporalClaimProfile with active profile blocks onlythe authored temporal claim is used beyond the local working context, is published, benchmarked, promised, assured, made durable rationale, repeated in a reusable method description, used in a gate/public dashboard/Part G pack, or carried across context/scale
Formal-model relationC.27 states the temporal-claim question and cites the pattern that carries the formal claimreusable law, simulation, prediction, control, calibrated model, or assurance-bearing comparison is claimed

A Dyn2 classification is not evidence that a U.Dynamics model exists. It is only evidence that the authored claim is using temporal change in a way that may need a dynamics pattern relation if a downstream claim, effect, or use is claimed.

Normativity follows boundary-crossing use:

  • normative when the claim carries decision, gate, budget, benchmark, publication, assurance, public promise, or reusable method;
  • advisory when the claim is exploratory, abductive, or early planning;
  • informative when the pattern teaches examples, vocabulary, or anti-patterns.

This is the ordinary first-minute reader-facing form and the main visible C.27 record for ordinary C.27 use. It remains referenced to an authored claim rather than becoming a free-standing consulting card.

Dyn2TemporalClaimAdequacyCard

claimText / claimRef:
  What sentence, claim, plan line, benchmark line, or promise-like wording is being read?

target:
  What rate, rhythm, regime, recovery, trajectory, or stability reading is being changed?

move:
  accelerate | decelerate | brake | redirect | coast | pause |
  stabilize | recover | sustain | widen | narrow | domain-local

intervention:
  What effort, input, policy, method, resource, tool-use change, or action is supposed to change it?

window:
  Over what claim, sampling, effort, rhythm, or validity window?

resistanceOrCost:
  What resists, delays, stores momentum, creates residue, or makes the change costly?

evidenceTraceModelOrAssumption:
  What evidence path, trace, measurement, work evidence, model assumption,
  planning assumption, diagnostic judgement, or named neighbouring-pattern
  reference is being used for this temporal-claim reading?

supportedUse:
  What decision, plan, diagnosis, comparison, or pattern relation can this record carry?

unsupportedUse / reopen:
  What downstream claim, effect, or use is unsupported, and what would reopen, downgrade, or add a pattern reference to this claim?

Window default: for a local card, one window line may stand for claim, sampling, effort, rhythm, and validity when the distinction does not change admissible use. Split windows only when evidence is sampled over a different interval than the claim, effort or intervention occurs over a different interval than the outcome, benchmark baseline/adaptation/follow-up windows differ, the rhythm timing reference/window differs from the measurement window, or validity/refresh depends on a separate freshness window.

Do not add a compact basis/status field to a local card. If boundary-crossing use appears, name the actual evidence path, trace, measurement relation, model assumption, planning assumption, benchmark reference, [C.28](/generated/patterns/C.28) causal-use route, promise pattern, or assurance pattern that carries the added claim. That named neighbour relation helps choose the matching dynClaimPosture; the local card itself does not strengthen the claim.

claimText and claimRef keep C.27 tethered to the PublicationUnit or claim-bearing U.EpistemePublication that carries the temporal claim. target separates the bearer/reading from the intervention, so "we accelerate the team" gets repaired into a rate/rhythm/trajectory question. move protects against acceleration bias: braking, pausing, stabilization, recovery, coasting, widening, and narrowing are also Dyn2 moves when they change admissible use.

If the author cannot answer these in short lines, the correct repair is usually to clarify the claim, not to escalate immediately to a full Dyn2TemporalClaimProfile.

Compact C.27 rhythm-claim discipline:

dyn2RhythmClaimBlock? / Dyn2TemporalClaimAdequacyCard fields:
  rhythmBearerRef : whose or what rhythm?
  rhythmTimingReference : beat | cadence | cycle | sprint | epoch | release train | attention window | domain-local timing reference
  rhythmWindowRef : over what interval?
  instrumentProxyOrEvidenceRef? : trace | proxy | observation | measurement reference
  supportedUse : what decision or reading this record can carry
  couplingMode? : only when cross-bearer synchronization, phase relation, dependency, coordination, or entrainment-like practice relation is claimed
  validityWindowRef? : only when the rhythm reading is used beyond the immediate working window

Cadence as observed interval rate may be Dyn1. Rhythm becomes Dyn2 only when interval structure, effort pattern, coordination, recovery, stabilization, or intervention-sensitive use changes admissible use.

This discipline keeps rhythm connected to a dynamic claim. A plain "release cadence" or "workshop rhythm" does not need phase or entrainment language unless the admissible use depends on a relation between bearers. If the rhythm wording does not change a rate, intervention, recovery, coordination, or admissible-use reading, it should remain ordinary prose rather than make C.27 relevant.

Compact C.27 coasting-claim discipline:

dyn2CoastingClaimBlock? / Dyn2TemporalClaimAdequacyCard fields:
  coastingClaim : movement, stability, adoption, quality change, queue drain, operational-support load, or practice persistence continues after effort changes or stops
  coastingBasis : habit | automation | stored work | queue pressure | learned capability | commitment momentum | social norm | physical inertia | unknown
  coastingWindowRef : over what interval after effort changes or stops?
  supportedUse : what decision, plan, diagnosis, comparison, or local practice reading this record can carry
  unsupportedUse : what downstream claim, effect, or use this coasting reading does not support
  reopenTrigger : what change, decay, stall, reversal, hidden cost, or new evidence reopens the claim

Coasting becomes a full Dyn2TemporalClaimProfile block only when a promise, gate, assurance, benchmark, cross-scale transfer, or public comparison depends on continued movement or stability after effort changes or stops. Local cases such as adoption continuing after incentives stop, quality degrading after acceleration stops, operational-support load continuing after rollout, a trained practice persisting after training, or a queue draining after intervention ends usually need only the card fields above.

Coasting/debt fork:

  • Use dyn2CoastingClaimBlock? when supported use depends on continued movement, stability, adoption, queue drain, practice persistence, or operational-support load after effort changes or stops.
  • Use dyn2DebtHysteresisBlock? when supported use depends on residue, reversibility, hidden cost, delayed damage, repayment, braking, or recovery plan.
  • If both are live, coasting describes continued motion or stability; debt and hysteresis describe what remains and how costly reversal or recovery is.

Rare boundary-crossing escalation. Use the Dyn2TemporalClaimProfile only for authored temporal claims used beyond the local working context. It is a pattern-local authored temporal-claim adequacy record, not a model of the dynamic system itself, not a publication role, not a Part G record, not an MVPK face, and not the default C.27 record.

Read the profile-block menu only when boundary-crossing use is already live. The list below is a pattern-relation menu, not a form. The absence of an inactive block is normal; it is not a missing field.

The shape is a header plus present profile blocks. The header carries the minimum boundary-crossing claim-use classification. Each block should be read from its applicability sentence first, and a block appears only when supportedUse relies on that claim relation. These blocks are not fields of one universal dynamic object; they are different evidence descriptions and pattern relations made relevant by supported use.

Profile-block closure rule: every present block is either defined by C.27, a pattern-reference-only block that cites the existing FPF pattern carrying the other question and adds no new C.27 object, or absent from activeBlocks. A block name is not a new EntityOfConcern.

Active-block naming rule: read each activeBlocks name by one of three statuses. localAdequacyBlock means C.27 states local adequacy fields for an authored temporal claim. patternReferenceOnly means C.27 states only the temporal move/window/supported-use boundary and cites the FPF pattern that carries the other question. relationOnly means the concern appears in relations or examples but not as an active block. dyn2PromiseBoundaryRoute?, dyn2HighStakesTemporalMoveRoute?, and dyn2PolicyTransferRoute? are pattern-reference-only by default; dyn2PolicyTransferRoute? is folded into dyn2ControlPolicyRoute? when behavior-policy/evaluation-policy transfer is FPF-governed.

Dyn2TemporalClaimProfile {
  header:
    claimRef
    entityOfConcernRef
    temporalBearerRef?
    profileCarrierRef?
    dynClaimPosture
    dynOrder
    baseCharacteristicRef?
    claimWindowRef
    supportedUse
    unsupportedUse
    reopenTrigger

  activeBlocks:
    c16RateMeasurementRouteRef? // if rate/rate-change measurement evidence is FPF-governed
    dyn2EffortWorkBlock? // if effort, resource, work, intervention actor, or authority basis is FPF-governed
    dyn2ResistanceInertiaBlock? // if resistance, delay, residue, reversibility, or cost is FPF-governed
    dyn2RhythmClaimBlock? // if rhythm or cadence changes admissible use
    dyn2CoastingClaimBlock? // if boundary-crossing use depends on continued movement or stability after effort changes or stops
    dyn2CausalUseRoute? // if rate-change or intervention is used as a causal-use basis
    dyn2BenchmarkParityBlock? // if comparison/benchmark depends on rate, rate-change, rhythm, recovery, or intervention effect
    dyn2MetricTargetEffectBlock? // if metric publication or target use changes temporal behavior or admissible use
    dyn2ObjectCentricTraceBlock? // if work-cycle or service-process evidence depends on object-centric or multi-bearer traces
    dyn2ScaleVariableClaimBlock? // if changing a resource or scale variable is claimed to change rate, learning, recovery, or throughput
    dyn2TaskFamilyAdaptationRoute? // if learning/adaptation-rate claim depends on a declared task-family specialization signature
    dyn2ControlPolicyRoute? // if control, feedback, policy update, adaptive regime, or MPC/RL-style evaluation basis is FPF-governed
    dyn2PolicyTransferRoute? // pattern-reference-only alias inside dyn2ControlPolicyRoute? when behavior-policy/evaluation-policy transfer is FPF-governed
    dyn2CrossScaleTransferBlock? // if dynamic claim transfers across bearer, level, scale, or aggregate
    dyn2ViabilityEnvelopeRoute? // if rate-change, braking, rhythm, or stabilization is used to keep a viability envelope inside usable bounds
    dyn2DebtHysteresisBlock? // if admissible use relies on sustained acceleration, braking, recovery, stabilization, or residue after effort changes
    dyn2PromiseBoundaryRoute? // pattern-reference-only when promise, SLA/SLO, gate, assurance, or public commitment is live
    dyn2HighStakesTemporalMoveRoute? // pattern-reference-only when high-stakes acceleration, braking, redirection, or rollout is live
    dyn2QLResidualRoute? // if residual probe, frame, order, export, or coarsening cue remains after ordinary FPF pattern relations
}

Absence of an inactive block is normal. It is not a missing field. A block becomes active only when the admissible use relies on it; otherwise the Dyn2TemporalClaimProfile should stay smaller or downgrade to a Dyn2TemporalClaimAdequacyCard, Dyn1 reading, or ordinary prose.

Pattern-reference-only blocks:

  • dyn2PolicyTransferRoute? is handled inside dyn2ControlPolicyRoute? when behavior-policy/evaluation-policy or off-policy transfer is FPF-governed. C.27 names behaviorPolicyRef, proposedPolicyRef, offPolicyRisk, and the evaluation/control pattern relation; it does not create a separate policy-transfer pattern.
  • dyn2PromiseBoundaryRoute? states only the temporal move, window, supported use, unsupported downstream claim, effect, or use, and references to the patterns that carry promise, commitment, instituting speech act, service acceptance, contract unpacking, and assurance: [A.2.3](/generated/patterns/A.2.3), [A.2.8](/generated/patterns/A.2.8), [A.2.9](/generated/patterns/A.2.9), [A.6.C](/generated/patterns/A.6.C), [F.12](/generated/patterns/F.12), and assurance patterns.
  • dyn2HighStakesTemporalMoveRoute? states only the high-stakes temporal move, window, unsupported downstream claim, effect, or use, and reference to the pattern that carries the harm, quality, safety, ethics, legal, financial, operational-support, or human-wellbeing question.

Header discipline: for a Dyn2TemporalClaimProfile for boundary-crossing claim use, claimRef, entityOfConcernRef, dynClaimPosture, dynOrder, claimWindowRef, supportedUse, unsupportedUse, and reopenTrigger are mandatory. temporalBearerRef is present when the temporal bearer differs from the EntityOfConcern or is otherwise FPF-governed. profileCarrierRef is present when publication or evidence needs the authored carrier named. baseCharacteristicRef is mandatory only when measurement, comparison, or C.16 relation is FPF-governed; for a Plain diagnostic claim it may remain a local phrase in the target line.

Window split rule: one local window is enough only when the claim window, sampling window, effort/intervention window, validity window, baseline window, and follow-up window are the same for the admissible use. Split them when the evidence is sampled over a different interval than the claim, effort is applied before or after the measured change, a comparison needs a baseline, an outcome is observed after exposure, or the claim remains valid only for a shorter period than the historical trace. If the split is unknown and the admissible use depends on it, downgrade the use or add the relevant window reference before relying on the temporal claim.

C.16 rate-measurement relation: when rate or rate-change is FPF-governed, C.27 cites the C.16 measurement relation. C.27 does not define measurement legality.

c16RateMeasurementRouteRef? {
  baseCharacteristicRef
  stateMeasureRef?
  rateMeasureRef?
  rateChangeReadingMeasureRef?
  DHCMethodRef?
  samplingWindowRef
  scaleUnitPolarityRef?
  evidenceStubRefs?
  stabilityOrNoiseEvidenceOrAssumption?
  C16RouteRef
}

C.27 effort/work block: when a rate-change claim depends on effort, resource, method, intervention actor, or role-assignment capacity, C.27 separates planned effort, method description, resource envelope, actual work trace, and authority relation, proposed-work plan, hypothetical-use note, and U.Capability reference when live. It does not turn work evidence into a dynamics law.

dyn2EffortWorkBlock? {
  causalInterventionSpecRef?
  plannedEffortRef?        // WorkPlan / MethodDescription / resource envelope
  actualEffortTraceRef?    // U.Work / Gamma_work evidence
  effortWindowRef?
  interventionActorRef? {
    actorOrRoleAssignmentRef
    authorityRelationRef?
    proposedWorkPlanRef?
    hypotheticalUseNote?
    actorCapabilityRef?
  }
  resourceEnvelopeRef?
  A15RouteRef?
}

interventionActorRef means the actor, role assignment, tool, system, policy rule, or human/work arrangement claimed to apply the intervention, plus an authority relation, proposed-work plan, hypothetical-use note, and U.Capability reference when live. If a planning claim says "add review capacity", C.27 should make visible whether there is a role assignment, work plan, authority relation, or U.Capability reference that can carry the intervention claim, while leaving role, method, work-plan, and work-occurrence alignment to A.15 and work patterns.

C.27 resistance/inertia block: dyn2ResistanceInertiaBlock? is present when admissible use depends on what resists, delays, stores momentum, creates residue, or makes the change costly. This is core C.27 content because it prevents effort-free acceleration claims. The Dyn2TemporalClaimAdequacyCard asks the question locally; the Dyn2TemporalClaimProfile uses a separate active profile block only when that answer matters beyond the local working context.

dyn2ResistanceInertiaBlock? {
  resistanceOrInertiaProxy
  resistanceProxyFamily
  resistanceProxyEvidenceOrAssumption:
    qualitativeJudgement | measurementRef | modelAssumptionRef |
    planningAssumption | unknown
  evidenceRef?
  unsupportedUse?
}

resistanceProxyEvidenceOrAssumption = unknown is an acceptable C.27 result. Unknown resistance need not block a local diagnostic Dyn2TemporalClaimAdequacyCard, but it should block durable acceleration, causal, benchmark, promise-like, or assurance use until the relevant evidence path, measurement relation, model assumption, or carrying pattern reference is supplied.

C.27 control/policy relation: dyn2ControlPolicyRoute? is present only when dynClaimPosture is controlModel, policyRule, adaptive, a feedback-bearing planningModel, or an explicit C.24/C.19/evaluation relation. This relation says that the authored temporal claim has crossed into control/policy model or policy-evaluation use. It does not make C.27 an MPC, reinforcement-learning, or policy-evaluation pattern.

dyn2ControlPolicyRoute? {
  interventionRegime
  controlHorizon?
  closedLoopUpdate?
  behaviorPolicyRef?
  proposedPolicyRef?
  offPolicyRisk?
  stopRule?
  controlPolicyRouteRef -> U.Dynamics / C.19 / C.24 / evaluation pattern
}

C.27 causal-use relation: dyn2CausalUseRoute? is present only when the authored temporal claim uses a rate-change, intervention, effort, workshop, policy, or practice change as a causal-use basis. Core rule: C.27 can say a claim is Dyn2 and intervention-sensitive; C.27 cannot turn that basis into a [C.28](/generated/patterns/C.28)-governed causal-use claim. The fields below are [C.28](/generated/patterns/C.28) refs consumed by C.27, not [C.27](/generated/patterns/C.27)-defined causal aliases.

dyn2CausalUseRoute? {
  causalInterventionSpecRef
  comparatorOrCounterfactualRef
  timeZeroOrAssignmentWindow
  followUpWindowRef
  outcomeMeasureRef
  estimandRef?
  causalAssumptionSetRef?
  rivalCauseSetRef?
  causalIdentificationProfileRef?
  causalUseEvidenceDesignRef?
  offPolicyCausalEvaluationProfileRef?
  supportedCausalUse
  unsupportedCausalUse
}

C.27 dynamic benchmark requirement: dyn2BenchmarkParityBlock? is present only when a comparison or benchmark depends on rate, rate-change, recovery speed, rhythm improvement, intervention effect, effort budget, or dynamic outcome. Content rule: C.27 declares the dynamic claim question of the benchmark; [G.9](/generated/patterns/G.9) carries parity.

dyn2BenchmarkParityBlock? {
  comparedClaimRefs
  dynOrderCompared: Dyn1 | Dyn2
  baselineWindowRef
  adaptationOrInterventionWindowRef?
  budgetOrEffortParityRef?
  rateOrRateChangeReadingMeasureRef?
  G9ParityPlanRef
  G9ParityReportRef?
}

C.27 metric-target effect block: dyn2MetricTargetEffectBlock? is present only when metric publication, target use, incentive use, dashboard use, gate use, or public comparison changes temporal behavior or admissible use. C.16 carries the measure; E.13, assurance, or governance patterns carry proxy/utility distortion; C.26 is relevant only if residual probe, frame, order, or export cue remains.

dyn2MetricTargetEffectBlock? {
  publishedOrTargetedMeasureRef
  targetOrIncentiveUse
  dashboardGatePromiseOrBudgetUse?
  behaviorChangeRisk
  temporalWorkChangeVsMeasurementChangeNote
  C16RouteRef?
  E13ProxyAuditRef?
  C26RouteRef? // only if residual probe, frame, order, or export cue remains
}

C.27 object-centric trace block: dyn2ObjectCentricTraceBlock? is present only when a work-cycle/process rate claim depends on several object bearers, event traces, interactions, or aggregation basis rather than one scalar speed label. C.27 records why scalar throughput is insufficient; object-centric process mining or local process evidence carries the detailed log discipline.

dyn2ObjectCentricTraceBlock? {
  bearerKind: single-object | multi-object | aggregate | proxy
  objectTypeRefs
  eventTraceRef
  interactionOrCouplingNote?
  convergenceDivergenceRisk?
  aggregationRoute?
  supportedUse
  unsupportedUse
}

C.27 cross-scale transfer field: dyn2CrossScaleTransferBlock? is present only when a dynamic claim transfers rate, rate-change, rhythm, recovery, acceleration, braking, or agility from one bearer/level/aggregate to another. Aggregate rate-change and local rate-change are different readings unless aggregation basis and bearer continuity are declared.

dyn2CrossScaleTransferBlock? {
  sourceBearerRef
  targetBearerRef
  aggregationRoute?
  mixShiftRisk?
  crossScaleTransferUseBoundary
}

C.27 scale-variable claim block: dyn2ScaleVariableClaimBlock? is present only when the authored temporal claim says that changing a resource or scale variable changes rate, improvement, learning, recovery, throughput, or stabilization. This is not the same as cross-scale transfer: scale-variable claim asks which variable is changed and over what scale window; cross-scale transfer asks whether a dynamic reading is carried across bearer, level, or aggregate. C.18.1 carries scale variables, scale windows, scale probes, and scale-elasticity value; C.27 records only that the scale change is being used as the basis for a temporal-claim reading.

dyn2ScaleVariableClaimBlock? {
  scaleVariableRef
  scaleWindowRef?
  scaleElasticityValue: rising | knee | flat | declining | unknown
  C18_1RouteRef?
  G9ParityPlanRef?
}

C.27 task-family adaptation relation: dyn2TaskFamilyAdaptationRoute? is present only when the temporal claim says that a holder, dyad, team, specialist portfolio, method, or agent reaches usable specialization faster on one declared TaskFamilyRef or TaskSignature. C.22.1 carries the task-family adaptation signature. C.27 records only the learning/adaptation-rate question and the admissible use that made it relevant.

dyn2TaskFamilyAdaptationRoute? {
  TaskFamilyRef?
  TaskSignature?
  thresholdOrUsableSpecializationRef?
  timeToThresholdRef?
  budgetToThresholdRef?
  C22_1RouteRef
}

C.27 viability-envelope relation: dyn2ViabilityEnvelopeRoute? is present only when a temporal claim says braking, slowing rollout, throttling, cadence change, recovery timing, adaptation cost, operational-support load, or stabilization keeps a viability bearer inside usable bounds. C.27 may type the temporal move and its window. C.26.3 carries the viability-envelope claim: protected promise or function, viable bounds, disturbance, sensor/probe/action split, adaptation cost, and failure mode. Do not make C.27 the pattern for all "stability through change" claims.

dyn2ViabilityEnvelopeRoute? {
  viabilityBearerRef?
  protectedPromiseOrFunctionRef?
  temporalMoveRef?
  C26_3RouteRef
}

C.27 residual QL relation: dyn2QLResidualRoute? is present only when ordinary FPF patterns have already carried the temporal-claim, measurement, work, benchmark, value/proxy, scale, adaptation, viability, promise, or evidence basis and a residual probe, frame, order, export, or coarsening cue still changes the admissible reading. C.26 carries the residual QL reading. C.27 only records that the authored temporal claim has a residual QL relation; this block stays hidden by default when no such residue exists.

dyn2QLResidualRoute? {
  residualQLCue?
  residualQLRouteRef?
  ordinaryRouteBasisRef?
  C26RouteRef
}

C.27 debt/hysteresis block: dyn2DebtHysteresisBlock? is present only when admissible use depends on sustained acceleration, braking, recovery, stabilization, domain residue after effort changes, or a public promise/gate/assurance/high-stakes decision about rate-change. Unknown reversibility is allowed, but it bounds supported use.

dyn2DebtHysteresisBlock? {
  debtKind?
  debtWindowRef?
  evidenceRef?
  reversibilityClaim: reversible | costlyToReverse | irreversibleWithinWindow | unknown
  hysteresisOrResidue?
  repaymentOrBrakePlan?
  debtHysteresisRouteRef -> planning / assurance / quality / wellbeing / safety pattern
}

These C.27 dynamic-claim profile-block field definitions are boundary-crossing material for Dyn2TemporalClaimProfile and for higher-stakes authored temporal claims used beyond the local working context. They are not the default C.27 user interface, not a data model, and not a universal C.27 dynamic-claim field list that every user must fill.

C.27 uses physical words only as Plain analogies. Tech prose uses effort, input, and work references rather than force; resistance/inertia proxies rather than mass; rate-change readings rather than acceleration as a new kind; and rhythm bearer/timing-reference/window rather than U.Rhythm.

Each field-definition item either carries a small local C.27 temporal-claim adequacy value or points back to the existing FPF pattern that governs the referenced object. A field name is not a pattern. Metric, process, service, practice, policy, harm, operational-support, and envelope wording does not create a free C.27 slot. It must resolve to a local C.27 value, an existing FPF kind and reference, or a governing-pattern relation; otherwise it remains Plain example language.

Field/questionDefinitionKind discipline
claimText / claimRefThe sentence, claim, plan line, benchmark line, or promise-like wording being read.References C.27 to an authored claim/source; not a free-standing consulting card.
targetThe temporal reading whose adequacy is in question: rate, cadence, flow, convergence, recovery, narrowing, widening, stabilization, regime, or trajectory.Local description plus baseCharacteristicRef or measurement relation when FPF-governed.
moveThe temporal move: accelerate, decelerate, brake, redirect, coast, pause, stabilize, recover, sustain, widen, narrow, or domain-local.Prevents acceleration-only bias; braking, pausing, recovery, and coasting can be positive Dyn2 moves.
effort, input, policy, method, or interventionThe planned or claimed source of rate-change. It may be work, method change, policy rule, resource input, tool-use change, or control action.References planning, work, method, policy, or control patterns; it is not stored as a new force object.
windowThe time interval over which the claim is made, effort is applied, rate is sampled, rhythm is observed, or validity is asserted.Use a time/window reference appropriate to the pattern; do not collapse all windows into U.Dynamics.timeBase.
resistance, delay, momentum, or costThe reason rate-change is not free or immediate: constraint, lag, habit, queue pressure, coordination cost, technical debt, operational-support load, friction, or domain-local resistance proxy.Domain-local proxy, not literal mass; evidence or assumption should be named when the authored temporal claim is used beyond the local working context.
evidence, trace, model, assumption, or diagnostic judgementThe evidence path, trace, measurement, work evidence, model assumption, planning assumption, diagnostic judgement, or named neighbouring-pattern reference being used for this temporal-claim reading.Cites C.16, work/evidence, causal, benchmark, promise, or assurance patterns when a downstream claim, effect, or use is claimed; do not compress these into a generic basis field.
supported decision or useThe practical use that this Dyn2TemporalClaimAdequacyCard can carry: orientation, plan choice, budget, benchmark, gate, replan, publication, or local diagnosis.Must stay within the named evidence path, model/planning assumption or neighbouring-pattern relation, and dynClaimPosture.
unsupported downstream claim, effect, or useA nearby use that this Dyn2TemporalClaimAdequacyCard cannot carry, such as [C.28](/generated/patterns/C.28)-governed causal-use claim, release approval, public promise, cross-context transfer, benchmark superiority, or service guarantee.Prevents laundering a light Dyn2TemporalClaimAdequacyCard into a heavier temporal-claim record.
reopen, downgrade, or pattern-reference conditionA condition that requires revisiting the Dyn2TemporalClaimAdequacyCard, downgrading to Dyn0 or Dyn1, escalating to a profile or formal pattern, or citing another pattern.This is an evolvability trigger, not a status note.
rhythmBearerRefThe entity, practice, work cycle, service, learner, body part, system component, or other named bearer whose rhythm is described.Must resolve to a named FPF kind and reference or explicitly remain Plain example language; C.27 does not mint a new rhythm kind.
rhythmTimingReferenceThe temporal reference for a rhythm claim: beat, cadence, cycle, sprint, epoch, release train, attention window, or domain-local timing reference.It is a timing reference for interpretation, not U.Rhythm.
rhythmWindowRefThe time window across which rhythm is asserted or measured.Separate from claim, sampling, effort, and validity windows when they differ.
instrumentProxyOrEvidenceRefThe measurement or observation proxy used for rhythm, such as tapping task, cadence log, work trace, event sequence, survey, sensor, or domain evidence reference.Uses C.16 and evidence discipline when FPF-governed.
couplingModeHow rhythm in one bearer or signal is related to another: synchronization, phase relation, dependency, coordination, entrainment-like practice relation, or domain-local coupling.Active only when cross-bearer relation is claimed; otherwise ordinary cadence does not need coupling language.
validityWindowRefThe period or condition under which the rhythm reading is valid.Prevents stale rhythm claims from boundary-crossing indefinitely.

dynClaimPosture discipline: in Dyn2TemporalClaimProfile, dynClaimPosture is a pattern-relation declaration, not a maturity scale. A diagnosticReading does not mature into a causalClaim by adding fields; [C.28](/generated/patterns/C.28) carries causal-use questions and records. A planningModel does not become promiseBoundaryUse by publication; promise, boundary, commitment, service, or assurance patterns carry promise-like claim use. Changing dynClaimPosture may change the governing relation, pattern, evidence path, model/planning assumption, or assurance-facing relation. No C.27 field completion upgrades dynClaimPosture; a higher-stakes dynClaimPosture is a relation change.

FieldDefinitionKind discipline
claimRefThe authored claim, sentence, plan line, benchmark line, or promise-like wording that the profile for boundary-crossing claim use describes.Mandatory; references the profile to authored temporal-claim content.
entityOfConcernRefThe entity, work object, system, practice, service, method, or other EntityOfConcern whose temporal claim is being described.Reference to the EntityOfConcern through its named FPF kind and reference; not the Dyn2TemporalClaimProfile itself.
temporalBearerRefThe object that bears the rate, rhythm, regime, trajectory, or rate-change. It may differ from the EntityOfConcern in aggregate or proxy cases.Use only when bearer distinction matters; avoid loose carrierOrSubject.
profileCarrierRefThe document, card, profile, report, benchmark record, or other authored carrier that contains the Dyn2 claim record.Carrier of the description, not the dynamic system.
dynClaimPostureThe pattern-local claim-use class of the dynamic temporal claim: assumption, conjecture, observed trace, diagnostic reading, planning model, control model, calibrated model, causal claim, benchmark claim, assurance claim, or promise-like claim. This is not a maturity sequence: a causal claim is differently governed from a diagnostic reading, and a promise-like claim is differently governed from a benchmark. Changing dynClaimPosture may change the governing relation, pattern, evidence path, model/planning assumption, or assurance pattern.Reading a dynamic temporal claim as carrying a different dynClaimPosture is a relation change; use the FPF pattern that governs the target claim, effect, or use.
dynOrderPattern-local classification: Dyn0, Dyn1, or Dyn2.Classification of a claim, not a Kernel kind.
baseCharacteristicRefThe characteristic whose state/rate/rate-change is being discussed.Mandatory only when measurement, comparison, or C.16 relation is FPF-governed; otherwise the target line may carry a local Plain phrase.
stateMeasureRefMeasurement reference for a state reading or snapshot.C.16-compatible when used as evidence or comparison.
rateMeasureRefMeasurement reference for rate, tempo, throughput, cadence, flow, trend, or trajectory.C.16-compatible and separate from state measure when FPF-governed.
rateChangeReadingMeasureRefMeasurement reference used as evidence for an acceleration, deceleration, braking, redirection, stabilization, hazard-change, queue-pressure-change, or other rate-change reading.C.16-compatible; this is evidence for a reading, not a new primitive acceleration measure.
publishedOrTargetedMeasureRefThe measure being used as reading, dashboard signal, target, gate, incentive, budget input, or public comparison.C.16 carries measurement legality and comparability; target/proxy use belongs outside C.27 when FPF-governed.
targetOrIncentiveUseHow the metric is used as a target, incentive, optimization proxy, management signal, or behavior-shaping prompt.E.13, assurance, or governance patterns carry proxy/utility distortion.
dashboardGatePromiseOrBudgetUseWhether the metric appears in a dashboard, gate, promise, budget, review, or public comparison.Names boundary/assurance pattern relations when those uses are being made.
behaviorChangeRiskHow publication, target pressure, incentive, or gate use may change behavior.C.27 records temporal intervention risk; causal-use claim still needs [C.28](/generated/patterns/C.28) causal-use relation.
temporalWorkChangeVsMeasurementChangeNoteSplit between real work/process rate change, measurement/probe effect, gaming/selection effect, and causal effect if claimed.Prevents metric improvement from being read as system improvement.
C16RouteRefRoute/reference for admissible measurement construction, comparability, and evidence.C.27 cites it; C.27 does not define metric legality.
E13ProxyAuditRefRoute/reference for proxy-metric distortion, pragmatic utility, or value/proxy divergence.Keeps metric-as-target work out of C.27 when the dynamic temporal claim is not live.
C26RouteRefReference for residual probe, frame, order, export, or coarsening cue.Only present after ordinary C.27, C.16, and E.13 pattern relations leave a residual quantum-like cue.
residualQLCueThe cue that a remaining probe, frame, order, export, coarsening, or similar representational condition may change the admissible reading after ordinary FPF patterns have carried their parts.Plain cue; vocabulary alone does not make QL relevant.
residualQLRouteRefThe specific residual QL cue, if any, that still matters to supported use after ordinary temporal, measurement, work, benchmark, value/proxy, scale, adaptation, viability, promise, or evidence pattern relations are named.C.26 carries the QL discipline; C.27 only records the pattern-reference need.
ordinaryRouteBasisRefReference or short basis showing which ordinary FPF pattern relation already carries the non-QL relation.Prevents QL from stealing measurement, work, value, benchmark, scale, adaptation, viability, or promise work.
DHCMethodRefReference to the declared method for constructing or interpreting the characteristic/measure.Existing C.16 relation; not a new measurement primitive.
scaleVariableRefThe resource or scale variable whose change is claimed to change rate, improvement, learning, recovery, throughput, or stabilization: review capacity, tool-call budget, token budget, sprint count, data volume, model capacity, parallelism, freedom of action, or domain-local scale variable.Resolves through [C.18.1](/generated/patterns/C.18.1) or through the named FPF kind and reference that carries the resource or scale variable; not a new force or effort kind.
scaleWindowRefThe scale range or window over which the scale-variable claim is asserted.C.18.1 carries scale-window discipline; G.9 carries parity when compared.
scaleElasticityValueQualitative C.18.1 value for the scale claim: rising, knee, flat, declining, or unknown.Not a numeric scaling law and not proof that more scale is better; C.18.1 carries the scale-variable claim.
C18_1RouteRefRoute/reference for C.18.1 scaling-law lens adequacy when a scale-variable or elasticity claim is live.C.27 cites it; C.27 does not define scaling-law discipline.
TaskFamilyRefThe declared task family whose time-to-usable-specialization or adaptation speed is being discussed.C.22.1 carries the task-family adaptation signature; C.27 only states the temporal-claim question.
TaskSignatureThe declared task signature or specialization signature used by C.22.1.Not a C.27 kind; used only to prevent generic learning-speed talk.
thresholdOrUsableSpecializationRefThe threshold, criterion, or usable-specialization target that makes "adapted faster" inspectable.Keeps adaptation-speed claims from becoming vague improvement claims.
timeToThresholdRefThe time window or time-to-threshold reference for reaching the declared adaptation target.C.27 may type the temporal-claim question; C.22.1 carries adaptation-signature meaning.
budgetToThresholdRefThe effort, resource, exposure, or budget reference needed to reach the declared adaptation target.Routes budget/exposure detail through C.22.1 and work/resource patterns when FPF-governed.
C22_1RouteRefRoute/reference for C.22.1 task-family adaptation signature reference.Mandatory when dyn2TaskFamilyAdaptationRoute? is active.
viabilityBearerRefThe system, collective system, delivery system, role configuration, organism-as-system, service situation, or declared bearer whose viability is being discussed.C.26.3 carries viability-envelope discipline; C.27 only names the temporal move when live.
protectedPromiseOrFunctionRefThe promise, function, or operating regime that the viability envelope is meant to preserve.Uses C.26.3 and promise, boundary, or service patterns when FPF-governed.
C26_3RouteRefRoute/reference for C.26.3 viability-envelope boundary regulation when temporal change is used to preserve viable bounds.Mandatory when dyn2ViabilityEnvelopeRoute? is active; C.27 does not define viability envelopes.
timeBaseTime basis of an underlying dynamics model, if a model is live.Do not use it as a catch-all for every claim/sampling/effort/rhythm window.
claimWindowRefThe time window over which the Dyn2 claim is asserted.Separate from evidence and effort windows when needed.
samplingWindowRefThe time window over which state/rate/rate-change evidence is sampled.Required for noisy derivative-like readings used in claims requiring additional evidence.
effortWindowRefThe time window over which planned or actual effort or input is applied.Applies planning and work patterns.
rhythmWindowRefThe window over which rhythm/cadence/phase relation is asserted.Uses rhythm-bearing note discipline; not U.Rhythm.
temporalScaleDeclarationOptional declaration of the time scale that carries the authored temporal claim used beyond the local working context: spot, episode, sprint, life-cycle time scale, learning-cycle, technoevolution, lifetime, or domain-local.Use only when scale changes the claim's admissible use, bearer, evidence, or reopen condition; it is not a new temporal kind.
validityWindowRefThe period or condition over which the Dyn2TemporalClaimProfile remains valid.Carries the refresh/reopen basis.
rateChangeIntentThe intended temporal move: accelerate, decelerate, brake, redirect, coast, pause, stabilize, widen, narrow, recover, sustain, or domain-local move.Avoids acceleration-only bias.
interventionRegimeThe intervention pattern: impulse, scheduled, feedback, adaptive, exploratory, or policy rule.Uses planning, control, or policy patterns when formal.
controlHorizonThe horizon over which a control-style intervention is evaluated or adjusted.Only live for dyn2ControlPolicyRoute? claims.
closedLoopUpdateThe feedback/update rule by which later observations change the intervention.Uses control or model patterns when reusable or formal.
behaviorPolicyRefThe source policy, regime, or practice that produced the evidence being reused.Only live when policy/regime evidence is used as the basis for another policy or adaptive claim.
proposedPolicyRefThe proposed or evaluation policy, regime, rollout, or intervention rule being argued for.Separate from behaviorPolicyRef; otherwise off-policy transfer is hidden.
offPolicyRiskRisk that evidence from one policy/regime does not carry another policy/regime use.Uses sequential decision or evaluation discipline.
stopRuleCondition for stopping, braking, pausing, replanning, or exiting the intervention.Carries affordability and harm-control basis.
controlPolicyRouteRefThe FPF pattern relation used when the claim needs formal dynamics, search/policy health, agentic action, or evaluation basis: U.Dynamics, C.19, C.24, or an evaluation pattern.C.27 records the crossing; the referenced pattern carries the required control or policy discipline.
plannedEffortRefReference to planned effort in WorkPlan, MethodDescription, resource envelope, or planning pattern.Ex ante plan, not actual burn.
actualEffortTraceRefReference to observed work/resource/time burn or trace.Cites U.Work / Gamma_work, not U.Dynamics.
inputCharacteristicRefsCharacteristics treated as inputs to a dynamics or intervention claim.Existing characteristic/model discipline.
effortProfileMapping from time window to effort or input condition.Pattern-local description of effort timing; not a new law.
interventionActorRefThe actor, role assignment, tool, system, policy rule, or work arrangement claimed to apply the intervention.Resolves through A.15, planning, role, method, work, or agentic-action patterns; not a new physical-mechanism kind.
authorityRelationRefAuthority relation or gate/decision record that carries an authorization claim for the intervention actor/role, when authorization is claimed.Absence bounds admissible use rather than creating proof of executable work. Proposed and hypothetical intervention uses need proposedWorkPlanRef or hypotheticalUseNote, not a fake authority field.
proposedWorkPlanRefWork-plan reference when the intervention is proposed but not authorized or performed.Planning claim, not actual U.Work.
hypotheticalUseNoteShort note when the intervention actor/role is hypothetical or unknown.Blocks executable-work and authority overread.
actorCapabilityRefU.Capability reference for the actor/tool/system only when an actual capability claim is live.If no U.Capability is live, use role, method, work-plan, or work-occurrence references instead of capability wording.
resistanceOrInertiaProxyDomain-local reason that changing the rate is hard, delayed, sticky, or costly.Proxy with explicit evidence, measurement, model assumption, planning assumption, or unknown marker; not literal mass.
resistanceProxyFamilyPattern-local grouping of resistance/inertia proxy: lag, queue, habit, constraint, coordination cost, technical debt, operational-support load, physical inertia, or domain-local family.Not a U.Kind; Plain/Tech mapping must stay explicit.
resistanceProxyEvidenceOrAssumptionQualitative judgement, measurement reference, model assumption reference, planning assumption, or unknown marker for the resistance/inertia proxy.Prevents assumptions from being treated as evidence paths or measurement relations.
evidenceRefEvidence reference that supplies the basis for a field.Uses evidence patterns.
interventionConstraintRefsResource, safety, service, legal, ethical, quality, or domain constraints that bound the intervention.These constraints are not governed by C.27; C.27 records that they are active.
resourceEnvelopeRefResource boundary for the intervention.Planning/resource pattern.
safetyEnvelopeRefSafety boundary for the intervention.Assurance/safety pattern.
serviceEnvelopeRefService boundary or operational envelope.Service/promise/boundary pattern.
legalOrEthicalEnvelopeRefLegal, ethical, or compliance boundary.Legal/ethics/assurance pattern.
qualityEnvelopeRefQuality boundary affected by acceleration, braking, or rate-change.Quality pattern such as C.25 where applicable.
uncertaintyClaimDeclared uncertainty around model, measurement, evidence path, stability, or transfer.May force downgrade or a higher evidence relation.
C28CausalUseRouteRefReference to the [C.28](/generated/patterns/C.28) causal-use question and records when a Dyn2 temporal claim is being used causally.C.27 does not supply a [C.28](/generated/patterns/C.28)-governed causal-use claim by itself; use dyn2CausalUseRoute? only when causal use is live.
causalInterventionSpecRefThe intervention, effort, workshop, policy, regime, practice change, or other action being treated as causal.C.27 may name it; [C.28](/generated/patterns/C.28) carries the causal intervention spec, estimand, assumptions, identification, realizability, and evidence design, and supported causal-use judgement.
comparatorOrCounterfactualRefComparator, contrast case, counterfactual, control group, prior regime, or declared absence of one.Required when causal reading is live; otherwise the claim remains planning/diagnostic.
timeZeroOrAssignmentWindowThe start, assignment, exposure, or intervention window for the causal reading.Keeps before/after slope claims from hiding timing ambiguity.
followUpWindowRefThe outcome observation window after intervention/exposure.Separate from claim, sampling, effort, rhythm, and validity windows when they differ.
outcomeMeasureRefThe measured outcome whose change is being causally read.Uses C.16 and evidence discipline when FPF-governed.
estimandRefThe U.CausalEstimand being estimated when causal-use basis is claimed.Defined by [C.28](/generated/patterns/C.28); C.27 only cites it when a temporal claim is used causally.
causalAssumptionSetRefAssumptions under which the causal/model/evaluation claim holds.Uses [C.28](/generated/patterns/C.28); not hidden inside C.27 shorthand.
rivalCauseSetRefAlternative causes that could explain observed rate-change.Uses [C.28](/generated/patterns/C.28); required when causal reading is live.
causalIdentificationProfileRefIdentification strategy, graph proof, calculus proof, data-regime basis, or bound used for the causal claim.Delegates to [C.28](/generated/patterns/C.28); absent identification limits supported causal use.
causalUseEvidenceDesignRefExperiment, quasi-experiment, target-trial emulation, counterfactual sampling, simulation validation, or other causal evidence-design reference.Uses [C.28](/generated/patterns/C.28); absent design limits supported causal use.
offPolicyCausalEvaluationProfileRefOff-policy/sequential/adaptive policy evaluation route when rate-change or policy-improvement wording depends on logged behavior or replay.Uses [C.28](/generated/patterns/C.28); C.27 does not own off-policy causal evaluation.
supportedCausalUseThe causal conclusion or decision use carried by the [C.28](/generated/patterns/C.28) causal-use relation.Must stay within the declared design, assumptions, outcome evidence, and uncertainty.
unsupportedCausalUseCausal conclusion, action, or assurance claim not carried by the [C.28](/generated/patterns/C.28) causal-use relation.Prevents C.27 temporal adequacy from laundering into causal-use claim.
comparedClaimRefsClaims, methods, variants, practices, agents, or regimes being compared by dynamic outcome.[G.9](/generated/patterns/G.9) carries parity; C.27 names the dynamic claim question of the comparison.
dynOrderComparedWhether the comparison is Dyn1 rate or trend comparison, or Dyn2 intervention-sensitive rate-change comparison.Prevents rate comparison from being laundered into intervention superiority.
baselineWindowRefBaseline or starting window used by the comparison.Must not be mixed silently across compared claims.
adaptationOrInterventionWindowRefWindow in which adaptation, effort, intervention, rollout, training, or practice change occurs.Optional; required when Dyn2 comparison depends on intervention timing.
budgetOrEffortParityRefBudget, effort, resource, or work-parity reference needed for fair dynamic comparison.Uses [G.9](/generated/patterns/G.9), work, and resource patterns when FPF-governed.
rateOrRateChangeReadingMeasureRefMeasurement reference used as evidence for compared rate, recovery, rhythm, throughput, or rate-change reading.Uses C.16 measurement discipline.
G9ParityPlanRef[G.9](/generated/patterns/G.9) parity plan reference for baseline, freshness, comparator, bridge, and evidence pins.Mandatory when benchmark parity is FPF-governed.
G9ParityReportRefOptional [G.9](/generated/patterns/G.9) parity report reference carrying outcomes/evidence.Needed for published or benchmark used beyond the local working context result.
evidenceBranchesDecomposition of evidence by state, rate, rate-change, effort, resistance, rhythm, or causal effect.Shows which branches are evidence and which remain assumptions.
stateEvidenceRefsEvidence for state reading or snapshot.Evidence relation or C.16 relation.
rateEvidenceRefsEvidence for rate, trend, or trajectory reading.Evidence relation or C.16 relation.
rateChangeEvidenceRefsEvidence for rate-change/intervention-sensitive reading.Evidence/C.16 relation.
effortEvidenceRefsEvidence for planned or actual effort.Planning/work relation.
resistanceEvidenceRefsEvidence for resistance/inertia proxy.Domain evidence relation.
rhythmEvidenceRefsEvidence for rhythm/cadence/coupling.Rhythm proxy/evidence relation.
causalEvidenceRefsEvidence for causal attribution.[C.28](/generated/patterns/C.28) causal-use relation.
dyn2CrossScaleTransferBlockDeclared relation when a Dyn2 temporal claim moves across levels, bearers, or aggregation.Unsupported unless aggregation basis, bearer continuity, and mix-shift risk are addressed.
sourceBearerRefBearer where evidence or claim originates.Existing object reference.
targetBearerRefTarget bearer for boundary-crossing use.Existing object reference.
aggregationRouteRule or evidence path by which local/aggregate readings are related.Uses aggregation, model, or evidence pattern.
mixShiftRiskRisk that composition changes explain the apparent rate-change.Must be named before cross-scale transfer.
crossScaleTransferUseBoundaryWhether cross-scale transfer is carried by declared bearer continuity and aggregation relation, remains unsupported, or is unknown.Prevents aggregate acceleration laundering.
accelerationDebtConsequence or residue created by sustained acceleration, braking, recovery, stabilization, or redirection: rework, operational-support load, quality loss, burnout, risk, hidden queue, or coordination cost.Use only when admissible use relies on sustained acceleration/braking/recovery/stabilization or when the domain can retain residue after effort changes or stops.
debtKindKind of debt or residue.Domain-local, with evidence if FPF-governed.
debtWindowRefWindow over which debt appears or must be repaid.Separate from effort and claim windows when needed.
reversibilityClaimWhether the dynamic change is reversible, costly to reverse, irreversible within window, or unknown.unknown is allowed; it bounds supported use instead of forcing theory-building.
reversibilityNoteShort explanation of why reversibility has that claim value.Captures hysteresis and residue only when FPF-governed.
hysteresisOrResidueWhat remains after effort changes or stops.Domain-local description requiring evidence when FPF-governed.
repaymentOrBrakePlanPlan to repay debt, brake, recover, or stabilize.Planning/assurance pattern if FPF-governed.
debtHysteresisRouteRefRoute/reference for planning, assurance, quality, wellbeing, or safety relation when debt/hysteresis is FPF-governed.C.27 records the temporal-claim question; referenced patterns carry the required discipline.
brakeOrRecoveryPlanPlan for braking, recovery, stabilization, or rollback.Planning/assurance pattern when FPF-governed.
supportedUseThe uses this C.27 temporal-claim record can carry.Must match dynClaimPosture and the named evidence path, model assumption, planning assumption, or neighbouring-pattern relation.
unsupportedUseNearby uses this note/profile does not support.Prevents hidden escalation.
reopenTriggerCondition that requires refresh, downgrade, a stronger evidence path or measurement/model relation, or reference to another pattern.Evolvability trigger for the claim.

C.27 has a small core. Specialized cases are C.27 dynamic-claim relations or optional profile blocks for authored temporal claims used beyond the local working context; they are not mandatory rules for every C.27 use.

These entries are not a general relation list. They apply only after an authored temporal claim already has C.27 relevance because it changes admissible use. Each entry names the neighbouring FPF pattern to inspect when that C.27-typed dynamic claim also depends on one non-C.27 question. If the text has no state, rate, rate-change, rhythm, regime, recovery, stabilization, transfer, or intervention relation that changes admissible use, no entry here applies.

Dynamic-claim relationC.27 relation and next FPF pattern
Formal dynamicsReusable law, simulation, prediction, control, or calibrated dynamics is carried by [A.3.3](/generated/patterns/A.3.3) U.Dynamics, [C.16](/generated/patterns/C.16), work evidence, [G.9](/generated/patterns/G.9), and assurance patterns.
C.16 rate measurement relationRate and rate-change readings used as evidence, benchmark, gate, control, or C.27 profile use include c16RateMeasurementRouteRef?; C.27 cites C16RouteRef and does not define measurement legality.
C.27 effort/work blockdyn2EffortWorkBlock? separates planned effort, method description, resource envelope, actual U.Work trace or Gamma_work aggregation trace, effort window, intervention actor/role assignment, authority relation, proposed-work plan, hypothetical-use note, and U.Capability reference when live; A.15 and work patterns carry role, method, work-plan, and work-occurrence alignment.
C.27 resistance/inertia blockdyn2ResistanceInertiaBlock? names resistance proxy family, the evidence path, measurement relation, model assumption, planning assumption, or unknown result for that proxy, and unsupported downstream claim, effect, or use; resistanceProxyEvidenceOrAssumption = unknown may carry local diagnostic use but blocks durable acceleration, causal, benchmark, promise-like, or assurance use.
C.27 rhythm claim blockdyn2RhythmClaimBlock? names bearer, timing reference, window, proxy/evidence, and admissible use; coupling, phase, synchronization, or entrainment-like details appear only when the supported use depends on a relation between bearers.
C.27 causal-use relationdyn2CausalUseRoute? is present only when a rate-change/intervention claim is used as a causal-use basis; it requires causalInterventionSpecRef, contrast/counterfactual, timing, outcome, assumptions, rival causes, supported causal use, unsupported causal use, and [C.28](/generated/patterns/C.28) causal-use relation.
C.27 dynamic benchmark requirementdyn2BenchmarkParityBlock? declares the rate/rate-change/rhythm/recovery/intervention-effect requirement of a comparison; it is a benchmark input declaration, not a benchmark harness. [G.9](/generated/patterns/G.9) carries baseline, freshness, comparator, bridge, parity plan, and parity report discipline.
C.27 metric-as-target blockdyn2MetricTargetEffectBlock? splits metric-as-measure, metric-as-target or incentive, metric publication as temporal intervention, and residual probe, frame, or export cue; C.16 carries measurement, E.13 or an assurance pattern carries proxy distortion, and C.26 applies only after ordinary FPF pattern relations leave residual QL cue.
C.27 cross-scale transfer fielddyn2CrossScaleTransferBlock? keeps local and aggregate dynamic readings separate; cross-scale use needs source bearer, target bearer, aggregation relation, bearer continuity, mix-shift risk, and explicit crossScaleTransferUseBoundary.
Object-centric dynamic traceWorkflow/process rate claims need bearer, object/event trace, interaction, and convergence/divergence discipline rather than one generic process-speed label.
Method composition or emergent work cycleIf the claim being made is about how method parts compose, how an adaptive work cycle becomes a capability, or how repeated practice changes shape, C.27 handles only the temporal adequacy of the rate, rhythm, recovery, stabilization, or rate-change claim. [B.1.5](/generated/patterns/B.1.5) carries order-sensitive method composition and work enactment; [B.2.4](/generated/patterns/B.2.4) carries meta-functional transition and capability-emergence questions.
State-change or evolution loop and language-state movementIf the claim being made is that a system, episteme, method, cue, branch, or language-state relation evolved, reopened, stabilized, operationalized, retired, or moved through a named state-change sequence, C.27 handles only the temporal adequacy of any speed/rhythm/recovery/stabilization claim. [A.4](/generated/patterns/A.4) / [B.4](/generated/patterns/B.4) carry temporal duality and canonical evolution loops; [A.16](/generated/patterns/A.16) / [B.4.1](/generated/patterns/B.4.1) carry language-state move and cue-stabilization discipline.
C.27 scale-variable claim blockdyn2ScaleVariableClaimBlock? is present only when changing review capacity, tool calls, tokens, sprints, data, model capacity, parallelism, freedom of action, or another declared scale variable is used as the basis for a rate-change, learning, recovery, throughput, or stabilization claim; C.18.1 carries scale variables, scale windows, scale probes, and scale-elasticity value.
Autonomy-budget or freedom-of-action claimIf freedom of action, action tokens, decision tokens, guard cadence, depletion, pause/resume, or autonomy-gated work is used as the basis for a rate-change or stabilization claim, C.27 states the temporal claim only. [E.16](/generated/patterns/E.16) carries autonomy budgets, guard checks, ledger evidence, depletion behavior, and override speech acts.
C.27 viability-envelope relationdyn2ViabilityEnvelopeRoute? is present only when braking, throttling, rollout speed, cadence change, recovery timing, adaptation cost, or stabilization is used to keep a declared viability bearer inside usable bounds; C.26.3 carries viability-envelope boundary regulation.
Publication-unit stability around temporal wordingWhen a paragraph, note, working section, comparison, explanation, or decision-facing text mixes method-description, repeated-practice, service-boundary, rhythm, capability-claim, improvement, benchmark, and promise wording so that the publication-unit primary entity of concern or active claim question is unstable, use E.17.AUD, E.17.ID.CR, or the relevant publication-unit pattern first. C.27 is active only when a temporal-claim adequacy question remains after that stabilization.
C.27 control/policy relationdyn2ControlPolicyRoute? is present only for controlModel, policyRule, adaptive, feedback-bearing planningModel, or explicit C.24/C.19/evaluation relations; C.27 records the crossing and names the pattern that carries formal control/MPC/RL/policy evaluation.
Dynamic policy transferPattern-reference-only inside dyn2ControlPolicyRoute?: sequential decision/evaluation discipline carries behavior-policy/evaluation-policy and off-policy transfer claims rather than default C.27 fields.
Explore/exploitC.19 carries policy health for search, convergence, narrowing, widening, and switching-rate claims.
Creative or open-ended search speedClaims about faster novelty, illumination, archive growth, frontier coverage, candidate generation, or candidate-set improvement use C.17 for novelty/value measures, C.18 for open-ended search calculus, and C.19 for pool policy; C.27 only names the temporal adequacy question when speed or change affects admissible use.
Task-family adaptation speedIf the claim concerns acquiring usable specialization on one declared TaskFamilyRef or TaskSignature, C.27 types the learning/adaptation-rate question and C.22.1 carries threshold target, time-to-threshold, budget-to-threshold, prior exposure, transfer, retention, downside, and corridor-entry evidence.
C.27 debt/hysteresis blockdyn2DebtHysteresisBlock? is present only when admissible use depends on sustained acceleration, braking, recovery, stabilization, residue after effort changes, or high-stakes/promise/gate use; unknown reversibility is allowed but bounds supported use.
Promise / boundary / service acceptance[A.2.3](/generated/patterns/A.2.3), [A.2.8](/generated/patterns/A.2.8), [A.2.9](/generated/patterns/A.2.9), [A.6.C](/generated/patterns/A.6.C), [F.12](/generated/patterns/F.12), and assurance patterns carry service promises, SLA-like statements, agreement-language expectations, release gates, public commitments, boundary obligations, and service-acceptance bindings.
Evidence/provenance pathIf a C.27 card/profile cites traces, assumptions, work evidence, evidence carriers, PathId, PathSlice, validity window, or evidence decay, C.27 states the temporal reading that needs an evidence basis. [A.10](/generated/patterns/A.10) / [G.6](/generated/patterns/G.6) carry evidence graph referring, provenance references, citable path/slice discipline, and SCR/RSCR-visible evidence bindings; [B.3](/generated/patterns/B.3) / [B.3.4](/generated/patterns/B.3.4) carry assurance claim and evidence decay / epistemic debt.
Dashboard telemetry, pack shipping, or refresh useIf a dashboard, time-series, telemetry pin, RSCR trigger, shipped pack, discipline-health slot, or dashboard slice is used as evidence for improvement, decay, recovery, stabilization, or rate-change, C.27 names the temporal-claim adequacy question. [C.21](/generated/patterns/C.21) carries discipline-health slot meaning; [G.12](/generated/patterns/G.12) carries DHC series/row/slice and telemetry-pin publication; [G.10](/generated/patterns/G.10) carries pack shipping; [G.11](/generated/patterns/G.11) carries refresh/decay orchestration; [G.6](/generated/patterns/G.6) carries path/slice evidence visibility.
Transduction gate or flow useIf a C.27-typed temporal claim is used as a GateCheckRef input, GateDecisionRationale, LaunchGate condition, PathSlice refresh trigger, crossing condition, or published flow condition, C.27 states only the temporal-claim adequacy question. [E.18](/generated/patterns/E.18) / [A.20](/generated/patterns/A.20) / [A.21](/generated/patterns/A.21) carry the transduction graph, OperationalGate(profile), ConstraintValidity, GateFit, DecisionLog, PathSlice, SquareLaw, Gamma_time, and crossing pins.
Derivative noiseNoisy rate-change readings used for comparison, benchmark, gate, or control need sampling window and stability/noise class, or downgrade.
CoastingCoasting needs a basis when continued movement or stability after effort changes or stops carries the claim.
High-stakes temporal movePattern-reference-only relation: high-stakes acceleration, braking, or redirection claims name the temporal move, window, and unsupported use and cite the harm, resource, quality envelope, assurance, ethics, legal, safety, financial, or human-wellbeing pattern that governs the other question.
C.26 residual relationC.27 does not add QL relation. If a Dyn2 claim also depends on probe, frame, order, export, or coarsening residue that ordinary FPF patterns cannot carry, C.26 carries the residue after ordinary C.27, C.24, C.16, G.9, and E.13 pattern relations are named.
No new publication roleDyn2TemporalClaimAdequacyCard and Dyn2TemporalClaimProfile are pattern-local records/cards, not new Part G publication roles, MVPK faces, primary EntityOfConcern values of related FPF patterns, or Kernel types.
Use-triggered lintUseful lint requires temporal-improvement wording plus decision, comparison, budget, benchmark, gate, promise, publication, assurance, or intervention-plan use.

Plain words may remain didactic. Tech prose must name the FPF pattern that carries the FPF-governed question. Problem frames, Forces, and worked examples may use speed, force, inertia, acceleration, rhythm, cadence, agility, or process-speed language when it helps recognition. Field definitions, conformance requirements, and governing-pattern relations should use the Tech readings below. Minted C.27-local labels must carry the dynamic claim question in the label: use Dyn2, Temporal, RateChange, Rhythm, Inertia, CrossScale, MetricTarget, ControlPolicy, or another explicit dynamic qualifier. A generic head such as Profile, Card, Process, Service, Practice, Policy, Harm, OperationalSupport, or Envelope is not enough by itself. Ordinary prose may use those words only as Plain examples or after resolving the actual FPF kind and reference or governing pattern.

Plain wordingFPF-safe Tech reading
speedrate, throughput, tempo, or trajectory reading with C.16 basis when FPF-governed
accelerationrate-change, regime transition, policy effect, or finite-difference reading
effort / forceplanned effort, input characteristic, intervention actor/role assignment, actual work/resource trace, or resource envelope
mass / inertiadomain-local resistance or inertia proxy: lag, switching cost, coordination cost, queue pressure, habit persistence, physical inertia, or constraint
rhythm / cadenceinterval-structured bearer/timing-reference/window/evidence relation; coupling only for cross-bearer claims
agilitybraking, redirection, acceleration, stabilization, recovery, and constraint handling
process sped upfirst resolve the bearer as system, work, method description, service promise/boundary, or event-log view; then add the C.27 temporal-claim question only if rate-change use is live
more calls / more contextagentic action whose target rate must be named, not automatic acceleration

Avoid as Tech tokens unless already governed by the named pattern: carrierOrSubject, D2DynamicsProfile, Metric, Axis, Dimension, Process, Practice, Service, generic card names, Profile, ProcessBearer, PolicyEvaluation, HarmEnvelope, force, mass, acceleration, and rhythm.

Prefer: DynOrder, Dyn2TemporalClaimAdequacyCard, Dyn2TemporalClaimProfile, entityOfConcernRef, temporalBearerRef, profileCarrierRef, baseCharacteristicRef, MeasureRef, DHCMethodRef, claimWindowRef, samplingWindowRef, effortWindowRef, rhythmWindowRef, plannedEffortRef, actualEffortTraceRef, inputCharacteristicRefs, interventionActorRef, authorityRelationRef, proposedWorkPlanRef, hypotheticalUseNote, actorCapabilityRef, resistanceOrInertiaProxy, resistanceProxyEvidenceOrAssumption, dyn2MetricTargetEffectBlock?, dyn2ObjectCentricTraceBlock?, dyn2CrossScaleTransferBlock?, dyn2HighStakesTemporalMoveRoute?, supportedUse, unsupportedUse, and reopenTrigger.

The dynamic-order labels are values of a claim classification, not kinds of things. Dyn0, Dyn1, and Dyn2 classify what a temporal claim treats as sufficient for its use. They do not become U.Dyn0, U.Dyn1, U.Dyn2, U.Acceleration, U.Rhythm, U.Practice, U.Force, or U.SecondOrderProcess.

Kind-locality rule: DynOrder, Dyn0, Dyn1, Dyn2, Dyn2TemporalClaimAdequacyCard, and Dyn2TemporalClaimProfile name readings or records of authored temporal claims. They do not classify the primary EntityOfConcern itself unless an existing FPF pattern separately types that object. "Team throughput accelerated" may receive a Dyn2 claim reading; the team does not become a Dyn2System, throughput does not become U.Acceleration, and the card/profile does not become a dynamics law.

Dyn2TemporalClaimProfile is a pattern-local episteme record about the adequacy of a temporal claim. It is not U.Dynamics, U.Work, U.WorkPlan, U.MethodDescription, U.Measure, or CharacteristicSpace. If materialized as a document, card, table, or file, that material is a carrier of the Dyn2TemporalClaimProfile content, not the actual work, process, law, practice, or system being discussed.

A.7 EntityOfConcern/Description-episteme/publication-carrier split: Dyn2TemporalClaimAdequacyCard and Dyn2TemporalClaimProfile are authored descriptions of temporal-claim adequacy. They are not the dynamic system, not the work trace, not the measure, not the service promise, not the intervention actor/role, not the dynamics law, and not identical to the document/card/page that carries them.

The object split is:

ObjectMeaning
entityOfConcernRefthe entity/work and method/system/practice-like EntityOfConcern the claim discusses, resolved through existing FPF kinds where FPF-governed
temporalBearerRefthe object whose state, rate, rhythm, or regime is being read
profileCarrierRefoptional card/file/page carrier of the Dyn2TemporalClaimProfile content, only when publication/evidence needs it
plannedEffortRefplan/method/resource-envelope basis for intended effort
actualEffortTraceRefU.Work or Gamma_work basis for actual burn
dynamicsModelRefU.Dynamics basis when a law/model of change is claimed

Loose words require resolution in Tech prose. A process may be a method recipe, dated work run, transition law, event-log view, or service situation. A practice may be method description plus work traces. A service claim may involve system, promise content, delivery work, boundary semantics, or assurance. C.27 should not use these as untyped substitutes for named FPF kinds/references.

Copy-paste authoring forms (informative). These forms make C.27 cheap enough to use without jumping straight to a full profile.

Dyn0 or Dyn1 exit:

C.27 exit: this is a Dyn1 rate reading only.
No intervention-sensitive temporal claim is used here.
Measurement relation: <C16RouteRef or N/A>.

Local Dyn2 card:

C.27 card:
claim:
target:
move:
intervention:
window:
resistance/cost:
evidenceOrAssumption:
supportedUse:
unsupportedUse/reopen:

Boundary-crossing profile header:

C.27 profile header:
claimRef:
entityOfConcernRef:
temporalBearerRef?:
dynClaimPosture:
dynOrder:
claimWindowRef:
supportedUse:
unsupportedUse:
reopenTrigger:
activeBlocks:

AI-assisted drafting rule (informative). An AI-assisted draft may propose that C.27 is relevant, but a profile appears only after the admissible use and the boundary-crossing reason are named. First classify the prose as ordinary prose, Dyn0, Dyn1, Dyn2 card, or profile/pattern relation. The draft does not infer: more tool calls means better reasoning; faster narrowing means better search; higher throughput means better quality; metric improvement means system improvement; or trend means intervention model.

Archetypal Grounding

Read these cases before the fuller field definitions. They show admissible stopping points for ordinary work:

  • no C.27 record for ordinary state, metaphor, or unsupported broad-use language;
  • Dyn1 or C.16 when the issue under repair is only measured rate;
  • Dyn2TemporalClaimAdequacyCard when a local temporal intervention, rhythm, braking, coasting, or tool-use rate-change claim needs a bounded evidence path, model assumption, planning assumption, or neighbouring-pattern relation;
  • Dyn2TemporalClaimProfile or a named FPF pattern relation only when the authored temporal claim is used beyond the local working context, benchmarks, promises, assures, becomes causal, crosses scale, or carries decision-use that affects gate, release, assurance, benchmark, or work-plan use.

Example breadth (informative). C.27 appears across several work domains, not only project-velocity prose.

DomainExampleWhy C.27 cares
Software operationsIncident recovery became faster after a playbook.Promise, viability, and service-boundary risk can hide inside a recovery-speed claim.
Team work cycleBacklog reduction under added reviewers.Effort, window, resistance, and hidden work must be named.
AI agentMore tool calls speed debugging.Tool-call count is effort evidence or input evidence, not reasoning-quality evidence.
BenchmarkMethod A improves faster than Method B.Dynamic comparison needs G.9 parity, not only C.27 prose.
Metric targetVelocity target improves velocity.Metric-as-measure, target pressure, work change, proxy distortion, and residual probe cue stay distinct.
SearchFaster shortlist.Faster narrowing can damage exploration health and frontier coverage.
LearningTime-to-threshold on one task family.C.22.1 carries task-family adaptation signature.
Rhythm/practiceDaily drills stabilize review rhythm.Rhythm needs bearer, timing reference, window, basis/proxy, and admissible use.
ScaleMore tokens, data, or reviewers improve rate.C.18.1 carries scale variable and scale-elasticity value.
Cross-scaleTeam throughput becomes organization agility.Aggregation basis, bearer continuity, and mix shift must be visible.
ViabilitySlow rollout protects support capacity.Braking can be the adequate temporal move; slowing down is a supported envelope-regulation outcome when acceleration would damage recovery, support load, or promise reliability.
QL negativeDashboard or probe wording appears.C.26 is relevant only for residual probe, frame, export, or coarsening cue after ordinary pattern relations.
Teaching caseExampleExpected classification
---------
Snapshot"Backlog is 120 items today."Dyn0; no C.27 record unless use changes.
Trend"Backlog fell by 20 items/week."Dyn1 with C.16 measurement basis if FPF-governed.
Intervention"Adding review capacity for two sprints will double backlog reduction rate."Dyn2TemporalClaimAdequacyCard; full Dyn2TemporalClaimProfile usually overkill unless the authored temporal claim is used beyond local pilot or plan use.
Benchmark or publication"Method A improves faster than Method B and should be published as superior."Dyn2TemporalClaimProfile or pattern reference is justified: G.9 benchmark parity, C.16 measurement, possible C.28 causal-use relation, and C.27 dynamic-claim relation declaration.
Dynamic anti-leaderboard"Both methods reached the same final score, so they are equivalent."Not enough if adaptation window, effort parity, hidden rework, validity window, or recovery profile differs; G.9 carries parity and C.27 names the temporal parity question.
Agentic tool-use"More tool calls will speed debugging."C.24 plus Dyn2TemporalClaimAdequacyCard; tool-call count is effort evidence or input evidence, not task-success, evidence-quality, repair-success, or cost evidence, so the claim names task outcome, evaluation harness, stop or replan condition, validity window, and non-admissible use as a benchmark claim.
Scale trap"Doubling reviewers, data, or model capacity will double improvement rate."C.18.1 carries scale variable, scale window, probes, and scale-elasticity value; C.27 is live only if the scale claim is used as a rate-change basis, and linear temporal improvement remains unsupported without evidence.
Rhythm / practice"Daily drills stabilize training rhythm."Dyn2TemporalClaimAdequacyCard with rhythm bearer, timing reference, window, basis/proxy, and admissible use; coupling only if the claim depends on synchronization between bearers.
False positive"This chapter accelerates reader orientation."Usually ordinary prose; no C.27 record unless used as a claim about method effectiveness.
Causal trap"Velocity rose after the workshop, so the workshop caused it."C.27 marks the temporal-claim question only; C.28 causal-use relation and evidence relation are required before causal use.
Cross-scale trap"Team throughput accelerated, so every service improved."dyn2CrossScaleTransferBlock? is unsupported without source bearer, target bearer, aggregation relation, bearer continuity, mix-shift risk, and crossScaleTransferUseBoundary.
Braking"Slow rollout protects support capacity."Dyn2TemporalClaimAdequacyCard or Dyn2TemporalClaimProfile depending on supported decision; the move may be a correct protection of viability, not a failure to accelerate.

Additional dynamic near-misses:

CaseExampleExpected classification
Coasting"Adoption continues after incentives stop."Dyn2TemporalClaimAdequacyCard with coasting basis and reopen trigger.
High-stakes temporal move"We can cut review time in half for this regulated release."Pattern-reference-only dyn2HighStakesTemporalMoveRoute? plus assurance/legal/quality relation, or claim downgraded.
Premature convergence"The search process is better because we reached a shortlist faster."C.19 relation; distinguish faster narrowing from healthy search.
Metric target"Velocity improved after becoming the quarterly target."dyn2MetricTargetEffectBlock? only if target publication changes temporal behavior and admissible use; C.16 carries measurement, E.13 or proxy audit carries utility distortion, and C.26 applies only for residual probe, frame, or export cue.
Scale-variable fantasy"More data, model capacity, reviewers, tokens, or parallelism will improve twice as fast."C.18.1 carries scale variables, scale windows, scale probes, and scale-elasticity value; C.27 only names the temporal claim when the scale variable is used as the basis for rate-change, learning, recovery, throughput, or stabilization.
Off-policy transfer"The old rollout policy improved recovery, so the new rollout policy will too."dyn2ControlPolicyRoute? must name behaviorPolicyRef, proposedPolicyRef, offPolicyRisk, and evaluation/control relation; one observed slope under policy A does not carry policy B.
Object-centric process trace"The process sped up" while orders, invoices, shipments, and support tickets move through different paths.dyn2ObjectCentricTraceBlock? recovers object types, event trace, interactions, aggregation basis, and unsupported whole work-cycle truth; one scalar throughput line is not enough.
Harmful acceleration and viability"Faster rollout improved release velocity while support load and recovery time degraded."C.27 names acceleration, braking, throttling, recovery timing, and unsupported downstream claim, effect, or use; C.26.3, C.25, assurance, safety, legal, ethics, or wellbeing patterns carry the envelope or harm claim.

These slices show what C.27 changes in use. They are action examples, not extra forms to fill.

Operations / backlog acceleration:

Claim:
Adding two triage engineers for two sprints will double backlog reduction rate.

C.27 reading:
Dyn2, because a rate-change is tied to a planned intervention.

Minimum useful note:
- rate being changed: backlog reduction per week;
- effort or input: two triage engineers assigned through a WorkPlan for two sprints;
- effort window: sprint N and N+1;
- resistance proxy: review queue coordination cost and domain ramp-up;
- evidence/assumption relation: planning assumption plus prior work trace if available;
- supported use: staffing discussion and local plan choice;
- unsupported use: `C.28`-governed causal-use claim with estimand and identification relation, long-term capacity model, benchmark superiority;
- reopen trigger: queue mix shift, triage saturation, quality loss, or no
  measured reduction after the first sprint.

The value is not that every backlog sentence gets a profile. The value is that a decision-bearing acceleration claim cannot hide effort, window, resistance, and unsupported downstream claim, effect, or use.

Learning / practice transfer:

Claim:
Daily 20-minute drills stabilize the learner's problem-solving rhythm.

C.27 reading:
Dyn2 only if the claim is used to select, compare, publish, or justify the
practice. Otherwise it may remain didactic.

Minimum useful note:
- rhythm bearer: learner practice session;
- rhythm timing reference: daily drill window and task cycle;
- rhythm proxy/evidence: task completion cadence, error pattern, recall delay,
  or observed practice trace;
- effort profile: short scheduled effort repeated across days;
- resistance proxy: fatigue, attention drift, task novelty, or habit formation;
- supported use: local practice design;
- unsupported use: general proof that the method improves all learning;
- reopen trigger: retention falls, task family changes, or rhythm proxy stops
  matching actual performance.

This carries the source article's replicable-practice idea: the useful formal payload is an effort/rhythm/window description that can be copied and checked, not a forced equation.

Rhythm/practice style vignette:

Claim:
A training note says "this practice rhythm improves retention", or a dance note
says "this style keeps swing content".

C.27 reading:
Dyn2 only when the rhythm/style claim is used to teach, replicate, compare,
judge, benchmark, or promise a practice outcome. Otherwise it may remain
ordinary explanatory prose.

Minimum useful questions:
- rhythm of what bearer: learner, team, body movement, practice session,
  release cycle, or other named FPF kind and reference?
- referenced to what beat, cycle, release train, attention window, task cycle, or
  domain-local interval?
- what effort or rate-change pattern occurs in which intervals?
- what evidence path, measurement relation, instrument proxy, or model/planning assumption supplies that reading?
- what use is carried: teaching orientation, replication, judging, benchmark,
  or promise?

This keeps the article's useful dance/practice insight: style distinction may depend on effort and rate-change patterns over rhythm intervals, not only on static poses, single trajectories, mood words, or a general rhythm theory.

Rhythm / embodied or team coordination:

Claim:
The team's release rhythm became smoother after moving review earlier in the
cycle.

C.27 reading:
Dyn2 when this carries a method-change, staffing-decision, or benchmark use.

Minimum useful note:
- rhythm bearer: team release cycle, not the repository file or dashboard;
- rhythm timing reference: release cycle and review window;
- intervention regime: scheduled shift of review earlier in the cycle;
- instrument proxy: event log, review queue cadence, rework trace, or survey
  only if its resistance-proxy evidence path, measurement relation, model assumption, planning assumption, or explicit unknown result is stated;
- resistance proxy: transfer delay, queue pressure, coordination lag;
- supported use: local method adjustment;
- unsupported use: proof of organizational agility or service promise;
- reopen trigger: work mix changes, release train changes, or hidden rework
  appears.

The important correction is that rhythm has a bearer and proxy. It is not a decorative label for good mood or smoothness.

Agentic tool-use / AI work cycle:

Claim:
More tool calls will speed debugging.

C.27 reading:
Dyn2 only if the extra calls are used as an intervention claim, not merely as a
local tactic.

Minimum useful note:
- rate being changed: bug localization, evidence confirmation, repair
  iteration, uncertainty reduction, or rollout stabilization;
- effort or input: extra tool calls, broader search, or deeper context retrieval;
- intervention actor: agent, tool runner, or human operator capable of making the calls;
- resistance proxy: noisy output, context overload, search branching, cost, or
  stale evidence;
- outcome/evaluation basis: task success, repair success, evidence quality,
  cost, and validity window if the claim is benchmark-facing;
- stop/replan trigger: no new evidence, conflicting evidence, timeout, rising
  cost, expired validity window, or growing false-positive load;
- unsupported use: "more calls means better reasoning", "faster narrowing is
  always better", or "tool-call count proves benchmark superiority."

This keeps C.24 useful without turning tool-use quantity into a proxy for thinking quality.

Benchmark / faster improvement:

Claim:
Method A improves faster than Method B.

C.27 reading:
`G.9` governs benchmark parity; `dyn2BenchmarkParityBlock?` types the dynamic
outcome and records unsupported benchmark use.

Minimum useful note:
- compared claims: Method A and Method B;
- dynamic order: Dyn1 if only rates are compared, Dyn2 if interventions,
  effort budgets, or rate-change are compared;
- comparable windows: baseline, sampling, claim, validity, and adaptation or
  effort windows;
- comparable effort: planned budget and actual effort trace if relevant;
- G.9 parity: `G9ParityPlanRef` for baseline/freshness/comparator/bridge pins,
  and `G9ParityReportRef?` if a published or reused report exists;
- hidden costs: rework, operational-support load, quality loss, burnout, or debt;
- supported use: benchmark interpretation under stated parity;
- unsupported use: causal superiority, universal method superiority, or release
  gate unless another FPF pattern governs that claim.

This prevents "faster" from hiding unequal effort, unequal windows, or unequal measurement templates.

Service / boundary promise:

Claim:
We recover incidents faster after the new playbook.

C.27 reading:
Dyn2 if the playbook is claimed to change recovery rate. If the statement is
used outside the local working context, as an SLA-like expectation, or as readiness evidence, C.27 only
types the temporal-claim question.

Minimum useful note:
- rate being changed: detection-to-mitigation or mitigation-to-recovery time;
- effort or input: playbook, staffing, automation, triage method, or escalation
  policy;
- resistance proxy: incident mix, dependency lag, tool latency, coordination
  bottleneck;
- receiving relation: diagnostic evidence path, benchmark input, causal-use route, assurance claim, or promise-like boundary pattern;
- supported use: local incident-response improvement claim;
- unsupported use: formal guarantee, audit closure, release gate, or causal
  proof unless the relevant boundary/evidence and assurance pattern carries it.

The key point is that C.27 does not become a hidden promise pattern. It prevents temporal claims from silently widening into promises.

Aggregate or cross-scale transfer:

Claim:
Team throughput accelerated, so the organization became more agile.

C.27 reading:
`dyn2CrossScaleTransferBlock?` is live; local team rate-change and organization
agility are different dynamic readings unless aggregation basis and bearer
continuity are declared.

Minimum useful note:
- source bearer: team work cycle and its measured throughput;
- target bearer: organization, portfolio, service family, or ecosystem;
- aggregation basis: how local rate-change maps upward;
- bearer continuity: whether the same work, service, value stream, or population
  remains comparable;
- mix-shift risk: easier work, hidden queues, reassigned work, changed scope, or
  invisible rework;
- crossScaleTransferUseBoundary: local-only, supported-transfer, unsupported-transfer, or unknown;
- supported use: local team improvement if evidence supports it;
- unsupported use: organization-level agility claim unless aggregation and
  quality-bundle relations are present.

This protects multi-scale FPF reasoning: a rate-change does not transfer across levels merely because the same speed word appears at each level.

Goodhart / performative metric:

Claim:
Velocity improved after it became the quarterly target.

C.27 reading:
`dyn2MetricTargetEffectBlock?` may be live if metric publication or target use is a
temporal intervention. The central distinction is measurement, target or incentive,
real process change, and residual probe, frame, or export cue.

Minimum useful note:
- metric measure: the published velocity/throughput reading, with C.16 relation if
  measurement legality or comparability is FPF-governed;
- target or incentive use: quarterly target, gate, dashboard, budget signal, or
  public comparison;
- possible behavior change: smaller tickets, hidden work, quality reduction,
  postponed rework, selection of easier tasks;


- process-vs-measurement split: measurement/probe effect, real work change,
  gaming/selection effect, causal effect if claimed;
- E.13 or proxy relation: proxy distortion or utility distortion if velocity diverges from the
  actual work objective;
- C.26 relation: only if residual probe, frame, order, or export cue remains after
  C.27, C.16, and E.13 pattern relations;
- supported use: diagnostic investigation or metric design review;
- unsupported use: proof that the underlying work system improved.

This is the practical bridge between C.27, C.16, C.26, and evidence patterns.

Bias-Annotation

Use C.27 only where it improves FPF as a first-practical entry and pattern relation pattern for temporal-claim adequacy. It is not enough for C.27 to be a correct dynamic-claim schema. The useful result is that a cold reader can notice when a state/rate reading is being used as a rate-change, rhythm-change, intervention, braking, coasting, recovery, stabilization, benchmark, promise, or assurance claim; choose the least-committing admissible next output; and stop or cite the carrying pattern without making C.27 absorb that pattern's governed concern.

The missing-question content belongs here only where it strengthens three practical abilities:

  • how a reader finds C.27 from ordinary working language such as speed up, slow down, recover, stabilize, sustain cadence, improve faster, change direction, or reduce risk faster;
  • how source ideas become FPF-facing guidance without turning physical or dynamic metaphors into new ontology: adopted, adapted, carried by another FPF pattern, or rejected as literal dynamics ontology;
  • how C.27 keeps higher-demand claim relations with existing FPF patterns instead of becoming a general pattern for measurement, dynamics law, work, search, benchmarks, promises, assurance, viability, publication-unit stability, or QL.

Additional detail is useful only when it improves one of those three abilities or clarifies a stopping condition. More fields, case notes, or pattern-relation prose is rejected when they only make C.27 harder to refuse, harder to stop, or easier to misread as a general theory of change.

Gov. C.27 reduces hidden decision-claim inflation: local diagnosis, planning basis, benchmark use, public promise, and assurance use remain different claim uses.

Arch. C.27 is biased against stealing work from neighbouring patterns. It types authored temporal-claim adequacy question while measurement, formal dynamics, work, search, benchmark, promise, causality, quality, value, viability, scale, adaptation, and QL relations remain with the patterns that govern those concerns.

Onto/Epist. C.27 is biased toward described system, description, and carrier separation and toward explicit temporal-claim-use classification. It treats Dyn0, Dyn1, and Dyn2 as readings of authored temporal claims, not as kinds of systems.

Prag/Did. C.27 is biased toward cheap stopping, card-first use, and teaching through cases before field machinery. The first lesson is: a trend is not yet an intervention model.

Conformance Checklist

Use these requirements to judge whether a C.27 record or C.27-facing paragraph is sufficiently supported for the use it is making. Ordinary local use can stay small.

RequirementC.27 content
ApplicabilityA C.27 record exists only when the temporal distinction changes supported use, governing-pattern relation, evidence path, model/planning assumption, or decision interpretation.
DynOrderThe body distinguishes state reading, rate reading, and intervention-sensitive rate-change, rhythm, or regime reading.
Minimal outputThe output is the minimal one that changes use: no C.27 record, Dyn0 reading, Dyn1 reading, Dyn2TemporalClaimAdequacyCard, Dyn2TemporalClaimProfile, or formal-model relation.
Card minimumA Dyn2TemporalClaimAdequacyCard names target, move, intervention, window, resistance or cost, evidence path, model/planning assumption or neighbouring-pattern relation, supported use, unsupported downstream claim, effect, or use, and reopen or pattern-reference condition.
Boundary-crossing profileDyn2TemporalClaimProfile appears only when the authored temporal claim is used beyond the local working context into benchmark, publication, assurance, promise-like, gate, reusable method, cross-context, cross-scale, or formal/control use.
Governing-pattern relationC.27 does not carry measurement, transition law, Work actuals, planning, C.28-governed causal-use claim, benchmark parity, promise or boundary claim, assurance, or QL residue.
Neighboring-pattern-use blockIf supported use relies on measurement, causal attribution, benchmark parity, control/policy, cross-scale transfer, debt/hysteresis, promise, high-stakes temporal move, or QL residue, the corresponding governing-pattern relation or present profile block is named.
Profile-block closureEvery present block is defined by C.27, pattern-reference-only, or absent from activeBlocks; a block name is not a new EntityOfConcern.
Pattern-relation economyAdd a C.27 relation note to another pattern only when that pattern has a concrete boundary reason to inspect temporal-claim adequacy; otherwise a C.27 card or profile cites the FPF pattern that governs the other question instead of creating a thin duplicate temporal record.
ExitIf no downstream claim, effect, or use changes, the claim remains ordinary prose, Dyn0 reading, Dyn1 reading, C.16 measurement, U.Dynamics, or another governing pattern.

Value and harm boundary. A temporally adequate claim is not automatically a valuable claim. A valuable claim is not automatically temporally adequate. If value, harm, safety, legal, ethics, quality, or promise impact is FPF-governed, C.27 states only the temporal move, window, supported use, unsupported downstream claim, effect, or use, and pattern relation. The value, harm, safety, legal, ethics, quality, or promise pattern governs the other question.

Conceptual lint classes (informative). These labels describe cheap inspection faults, not a required tool.

LintFailureRepair
C27-KEYWORD-OVERREACHA speed/rhythm word creates a profile without a supported-use change.Downgrade to ordinary prose, Dyn0, or Dyn1.
C27-MISSING-CARD-MINIMUMDyn2 card lacks target, move, intervention, window, resistance or cost, evidence path, model/planning assumption or neighbouring-pattern relation, supported use, or reopen condition.Complete the card or downgrade.
C27-PROFILE-WITHOUT-BOUNDARY-USEA profile is used for a local note.Downgrade to a local card.
C27-PATTERN-RELATION-THEFTC.27 carries measurement, dynamics-law, work, benchmark, promise, or QL content.Keep that content with the FPF pattern that governs the other question.
C27-DYNORDER-AS-KINDTeams, systems, services, or methods become Dyn2 objects.Repair to an authored-claim reading.
C27-CAUSAL-LAUNDERINGRate changed after effort, therefore effort caused it.Add C.28 causal-use relation or mark causal use unsupported.
C27-METRIC-TARGET-CONFLATIONMetric improved, therefore the system improved.Split measure, target pressure, work change, proxy distortion, and residual probe cue.
C27-PROMISE-LAUNDERINGPlanning temporal claim becomes SLA, service guarantee, or commitment.Keep promise/boundary/service content with the patterns that carry it.

Common failure modes after adoption (informative).

Failure modeCorrection
Profile inflationEvery temporal phrase gets a profile; keep profile use for boundary-crossing claim use.
Pattern-relation theftC.27 carries measurement, work, promise, benchmark, or QL; return the other question to the FPF pattern that governs it.
Card launderingA local card is cited as C.28-governed causal-use claim, benchmark result, release approval, or service promise; mark that use unsupported.
DynOrder reificationA team or system becomes "Dyn2"; keep DynOrder as a reading of authored temporal claims.
Relation-note inflationEvery nearby pattern gets a C.27 note just in case; add a note only when the pattern must inspect temporal-claim adequacy directly.

Common Anti-Patterns and How to Avoid Them

C.27 starts with the anti-patterns most likely to make a working reader misuse a state/rate reading as a Dyn2 temporal claim. Less frequent traps belong in the extended bank and should not become a first-screen checklist.

Core anti-patternWhat it looks likeRepair
Rate -> intervention laundering"We measured throughput, therefore we know how to accelerate it."Ask whether the claim is Dyn0 state, Dyn1 rate, or Dyn2 rate-change under effort/resistance/window; add only the least-committing C.27 record that changes admissible use.
Effort-free acceleration"Velocity will double" with no effort, input, intervention actor/role, resistance proxy, window, evidence, or supported use.Add a Dyn2TemporalClaimAdequacyCard or downgrade to Dyn1 measurement.
Past slope as control modelA historical trend is treated as a future intervention law.Separate observed Dyn1 trend from Dyn2 intervention claim and formal-model relation.
C.27 as C.28-governed causal-use claimRate changed after effort, therefore effort caused it.Keep it as a planning assumption or diagnostic reading, or include dyn2CausalUseRoute? with causalInterventionSpecRef, contrast/counterfactual, timing, outcome, assumptions, rival causes, supported causal use and unsupported causal use, and C.28 causal-use relation.
Rhythm as decorationRhythm names vibe/cadence with no bearer, timing reference, window, proxy, evidence, or supported use.Name bearer, timing reference, window, instrument/evidence proxy, and supported use; add coupling/phase/entrainment only when the claim depends on a cross-bearer relation.
Metric-accelerated theaterThe measured rate improves after becoming a target while hidden work worsens.Separate real work-rate change, measurement/probe effect, gaming risk, and temporal intervention effect.
Aggregate acceleration launderingLocal speed or aggregate speed is laundered across levels.Separate local bearer, aggregate bearer, mix shift, aggregation relation, and crossScaleTransferUseBoundary.
Acceleration biasFaster is treated as better by default.Make braking, pause, stabilization, redirection, coasting, and slower rollout legitimate outcomes.

Use the negative cases to make non-use easy. They are not profile triggers.

Negative caseCorrect C.27 outcome
"This section accelerates orientation."No C.27 record unless the PublicationUnit carries that acceleration claim as the basis for a decision, promise, intervention, or comparison.
"The chart shows throughput rising."Dyn1; C.16 only if the measurement construction is FPF-governed. No C.27 record unless a rate-change intervention claim appears.
"The team has a strong rhythm."No C.27 record unless rhythm carries a decision-use; then name bearer, timing reference, window, evidence proxy, and admissible use.
"We use a dashboard of velocity."C.16/E.13/C.26.1 when the issue under repair is measurement, proxy distortion, or probe/publication effect; C.27 only when the dashboard is claimed to change a temporal outcome.
"The model is dynamic."U.Dynamics when a state-space or transition law is being described; no C.27 record unless authored prose makes a rate-change adequacy claim.
"The agent used more calls."C.24/work-trace relation; C.27 only when more calls are claimed to change debugging, search, learning, recovery, or stabilization rate.
"The process is agile."A.6.P/local-head restoration first when "agile" is overloaded; C.27 only when braking, redirection, or rate-change question is live.

Use the extended anti-patterns only when the live temporal claim actually raises that trap.

Extended anti-patternWhat it looks likeRepair
Keyword-triggered bureaucracyAny speed, rhythm, agility, throughput, velocity, accelerate, or slow-down word forces a profile.Use supported-use relevance, not keyword matching.
Derivative label without templateAcceleration, velocity, momentum, or cadence number lacks base characteristic, unit, scale, sampling window, method, and evidence.Use C.16 measurement construction.
Rhythm bearer mismatchEvidence from one bearer/window is applied to another.Add bridge/evidence relation or mark transfer unsupported.
Effort window hidden in plan prosePlan says "push harder" without WorkPlan, method, resource envelope, or actual burn evidence relation.Attach planned effort to planning patterns and actual burn to work patterns.
Dynamics law as work logWork trace or telemetry is treated as the law of change.Keep U.Dynamics separate from U.Work evidence.
Agility as cornering speed"Change direction fast" hides braking and redirection cost.Name braking, redirection cost, intervention constraints, evidence, and admissible use.
Premature convergence by accelerationFaster narrowing collapses diversity, novelty, or frontier coverage.Use C.17, C.18, and C.19 as applicable and distinguish exploitation speed from healthy search.
Dyn2 profile as hidden promiseA planning note becomes a service guarantee, SLA-like statement, or public commitment.Separate planning basis from promise content and boundary obligation.
Noisy acceleration worshipSmall variation is overread as meaningful rate-change.Widen sampling, add uncertainty, downgrade, or collect higher-quality or more directly relevant evidence.
Tool-call acceleration theaterMore calls or more context are treated as faster reasoning.Name the target rate-change and stop/replan trigger.
Harmful accelerationWork is accelerated while safety, ethics, legality, operational-support load, or human wellbeing becomes worse.Use pattern-reference-only dyn2HighStakesTemporalMoveRoute? to name the high-stakes temporal move, window, and unsupported use and cite the assurance, ethics, legal, safety, quality, or wellbeing pattern that governs the other question.
Coasting claim without basisContinued motion after effort stops is treated as free evidence of success.Name coasting basis: habit, automation, stored work, learned capability, social norm, commitment momentum, physical inertia, queue pressure, or unknown.
Reversibility fantasyEffort is removed and the system is assumed to return cleanly.Include dyn2DebtHysteresisBlock? only when supported use depends on residue/reversibility; record unknown if needed and bound supported use, with brake/recovery relation when FPF-governed.

Consequences

C.27 should make FPF better at planning and reviewing dynamic claims while keeping ordinary state and rate claims cheap. Its main cost is one more C-pattern and several neighbour notes in existing FPF patterns. The mitigation is the central affordability rule: C.27 must be easier not to use than to misuse.

C.27 claims decay over time. Refresh or reopen when: Refresh demand stays proportional:

Local C.27 card:
  has reopenTrigger only.

Boundary-crossing C.27 profile:
  has validityWindowRef and evidence valid_until when FPF-governed.

Part G / benchmark / SoTA / public method claim:
  C.27 reopenTrigger feeds G.11 refresh orchestration;
  C.27 does not become a refresh ledger.
  • sampling window, cadence, or time base changes;
  • effort envelope or resource budget changes;
  • intervention actor/role capacity, authority, or availability changes;
  • inertia/resistance proxy changes: new tooling, team, queue topology, domain, work mix, constraints, or service environment;
  • metric becomes a target, incentive, gate, dashboard, or public comparison;
  • cross-scale transfer is attempted;
  • outcome reverses, overshoots, oscillates, or becomes unstable;
  • hidden queues, rework, burnout, quality loss, operational-support load, safety load, or coordination debt appear;
  • rhythm bearer, timing reference, window, proxy, or coupling changes;
  • claim use changes from assumption/diagnostic to benchmark, assurance, causal, promise-like, publication, or formal model use;
  • the claim is reused outside its original validity window or domain;
  • a coasting, braking, or recovery claim continues after effort changes or stops.

Local Dyn2TemporalClaimAdequacyCards normally need only a reopen, downgrade, or pattern-reference condition. Dyn2TemporalClaimProfiles for boundary-crossing claim use should cite validityWindowRef or evidence valid_until when the claim carries a benchmark, gate, assurance, promise-like use, reusable method, publication, or formal-model relation. If rate-change evidence decays, freshness and epistemic-debt handling belongs with B.3.4 or G.11 rather than becoming a C.27 freshness calculus.

When a Dyn2 benchmark, task-family adaptation claim, public method claim, selector-facing claim, SoTA-bearing publication claim, or other Part G publication carries a temporal-claim record, C.27 reopenTrigger is not enough by itself. C.27 states the temporal-claim question and its validity/reopen condition; G.9 carries benchmark parity when comparison is being made; G.11 carries refresh orchestration such as refresh queue, refresh plan, refresh report, deprecation notice, or edition bump when evidence, comparator editions, method editions, claim windows, or validity windows drift.

Rationale

The source material is most relevant where it replaces the question "what is the speed?" with "what effort profile, over which windows, changes speed, rhythm, direction, or stability under resistance and cost?" The C.27 keeps that practical move while rejecting physics ontology, mandatory calculus, false QL relevance, and default full-profile bureaucracy.

C.27 acts in FPF as a small modern correction for one recurring failure: working texts observe or name a rate and then behave as if they know how to change that rate. The pattern brings FPF up to modern practice only in the following shape:

  • the state/rate/rate-change distinction remains the cheap recognition gain;
  • control, policy evaluation, causal inference, process mining, benchmarking, rhythm, and high-stakes temporal-move cases appear as present profile blocks;
  • quantum-like residual cases appear only as C.26 relations, not as C.27 claim-adequacy content blocks or fields of one universal dynamic object;
  • control fields stay absent by default and appear only for control-style use;
  • behavior-policy versus evaluation-policy discipline is visible when off-policy or sequential-policy transfer is claimed;
  • causal claims carry intervention contrast, time zero, follow-up, outcome, assumptions, and identification/evaluation relation rather than C.27 shorthand;
  • performative and Goodhart cases separate metric-as-measure, metric-as-target, and metric-as-intervention;
  • work-cycle/process claims name bearer, object/event trace, interaction, and convergence/divergence rather than one generic process-speed label;
  • dynamic benchmarks use C.27 to type the temporal-claim question while G.9 carries parity;
  • rhythm claims stay bearer+timing-reference+window+evidence/proxy relation+supported-use by default, with entrainment or coupling claims with cross-bearer evidence commitments only when the claim needs them;
  • quantum-like use stays out of C.27 unless a residual probe/order/frame/export cue remains after ordinary C.27, C.24, C.16, G.9, and E.13 pattern relations;
  • full Dyn2TemporalClaimProfiles remain rare, and the pattern improves action quality more than it increases paperwork.

One-line SoTA formulation for C.27: it makes intervention-sensitive temporal claims explicit - policy, effort, window, resistance, feedback, evidence, bearer, and supported use - while refusing to treat every speed/rhythm phrase as control theory, C.28-governed causal-use claim, benchmark superiority, or quantum-like modeling.

SoTA-Echoing

C.27 should be shaped by current modeling practice without becoming a survey paper. The C.27 SoTA claim is: C.27 is intervention-sensitive temporal claim adequacy with explicit evidence relation and temporal-claim-use classification, not literal second derivative everywhere and not universal control theory.

Source binding used by this section:

Source lineC.27 useSource adoption/adaptation/rejection decision
D2-SRC-1 - the source article on state, first-derivative dynamics, second-derivative dynamics, effort intervals, and rhythm practice.Sets the working question: are we only reading speed/rhythm, or claiming that effort over time changes speed/rhythm?Adopt the question shift and dance/practice usability examples; adapt physical vocabulary into authored temporal-claim adequacy; reject new Kernel force, mass, acceleration, or rhythm kinds.
D2-SRC-2 - learning-based MPC and engineering MPC practice.Disciplines control-style temporal claims with horizon, constraints, uncertainty, feedback update, and stability only when control language is live.Adapt into optional dyn2ControlPolicyRoute?; reject making every Dyn2 card a control model.
D2-SRC-3 - safe RL, off-policy evaluation, conservative/offline RL, and dynamic treatment-regime practice.Disciplines policy/regime transfer, policy-overlap, unsafe exploration, behavior policy, evaluation policy, and repeated intervention timing.Adapt into dyn2ControlPolicyRoute? when a policy/regime claim is live; reject policy-transfer evidence basis from one observed slope alone.
D2-SRC-4 - causal inference for intervention effects.Separates planning/diagnostic Dyn2 claims from causal effect claims.Adopt causal question, comparator/counterfactual, estimand, timing, outcome, assumptions, rival causes, and evidence-design discipline for dyn2CausalUseRoute?; reject C.28 causal-use claim completion inside C.27 itself.
D2-SRC-5 - performative prediction and Goodhart variants.Shows that metric publication, target use, incentives, or gates may change behavior rather than merely report it.Adapt into dyn2MetricTargetEffectBlock?; C.16 carries measurement, E.13 or an assurance pattern carries proxy distortion, and C.26 carries residual probe, frame, or export cues; reject a generic Goodhart catch-all.
D2-SRC-6 - object-centric process mining and object-centric event logs.Shows why scalar throughput often hides multiple object bearers, event traces, interactions, and aggregation risks.Adapt into dyn2ObjectCentricTraceBlock? and object-centric trace requirements; reject one scalar rate as whole work-cycle truth when multi-object interaction is live.
D2-SRC-7 - active inference / active sensing practice.Reminds C.27 that measurement can be action, while ordinary FPF pattern relations remain primary.Adapt as a local relation test for measurement, state-space, planning, evidence, control, causal, or process-log basis; reject automatic QL relevance from planned measurement or typed states.
D2-SRC-8 - rhythm, beat synchronization, groove, entrainment, and compliant-system timing work.Disciplines rhythm claims with bearer, timing reference, window, proxy/evidence, and admissible use; coupling/phase/entrainment appear only for cross-bearer claims with explicit coupling, phase, or entrainment commitments.Adapt into rhythm fields on Dyn2TemporalClaimAdequacyCard; reject a standalone U.Rhythm kind or decorative rhythm vocabulary.

SoTA lesson -> FPF obligation map:

Modern lessonC.27 obligationPattern that governs the other question
MPC/control practice separates horizon, constraints, uncertainty, and feedback update.Name control horizon/update only when the temporal claim is control-style.A.3.3 U.Dynamics, C.16, C.19/C.24, evidence and assurance patterns.
OPE/safe RL separates behavior policy, evaluation policy, policy overlap, and unsafe-exploration risk.Do not transfer evidence from policy A to policy B without behavior-policy, evaluation-policy, and offPolicyRisk.dyn2ControlPolicyRoute? plus evaluation/control relations.
Causal inference separates intervention timing, comparator/counterfactual, estimand, follow-up, assumptions, and rival causes.Keep planning/diagnostic Dyn2 distinct from C.28-governed causal-use claim.C.28 and evidence patterns.
Performative prediction and Goodhart variants show that published targets can change behavior.Split metric-as-measure, target or incentive use, temporal intervention, and proxy distortion.C.16, E.13 or an assurance pattern, C.26 only for residual probe or frame cue.
Object-centric process mining shows scalar throughput can hide multi-object interaction.Recover object types, event trace, interaction note, and aggregation basis when process speed is FPF-governed.Local process evidence/OCPM discipline plus C.27 object-centric trace block.
Rhythm research treats rhythm as bearer/timing-reference/window/proxy/coupling-if-live.Keep cadence/rhythm claims tied to bearer, timing reference, evidence, supported use, and optional coupling only when cross-bearer relation matters.C.27 rhythm card plus C.16/evidence when measured.
Scaling-law practice separates scale variable, scale window, probe, and elasticity.Do not infer linear improvement from more data, tokens, calls, reviewers, or capacity.C.18.1 and G.9 when compared.
Benchmark practice needs parity pins, baselines, freshness, budgets, and comparator editions.Do not read faster improvement as benchmark superiority without parity plan/report.G.9.

Source id references:

Control and MPC. Control-style claims need horizon, constraints, uncertainty, feedback update, and stability only when control language is live. A local Dyn2TemporalClaimAdequacyCard can say "we plan to brake rollout for two weeks to protect operational-support capacity" without becoming MPC. If the claim is not control-style, do not fill control fields. A control claim used beyond the local working context needs the neighboring governing-pattern relation.

C.27 control/policy relation: dyn2ControlPolicyRoute? is present only when dynClaimPosture is controlModel, policyRule, adaptive, a feedback-bearing planningModel, or an explicit C.24/C.19/evaluation relation. The block says that the temporal claim has crossed into control/policy claim-use; it does not make C.27 an MPC, reinforcement-learning, or policy-evaluation pattern.

Sequential decision and reinforcement-learning practice. Many real rate-change claims are policy/regime claims, not one-shot effort claims. Policy-transfer control/policy details live inside dyn2ControlPolicyRoute?, not in the default Dyn2TemporalClaimAdequacyCard. When live, the block should recover behavior policy, evaluation policy, overlap note, uncertainty or bound reference, unsafe-exploration note, and pattern reference to C.19, C.24, U.Dynamics, or the evaluation pattern. This matters for adaptive rollouts, agentic tool-use, clinical-like treatment regimes, and repeated operational interventions.

Causal inference. C.27 is not a C.28 causal-use claim pattern. Effort plus observed rate-change may carry a planning or diagnostic reading, but a causal attribution needs a separate C.28 causal-use relation. When dyn2CausalUseRoute? is present, it should name the causal question, intervention reference, comparator or counterfactual, estimand, time-zero or assignment window, follow-up window, outcome measure, assumptions, rival causes, identification strategy or evidence design when available, supported causal use, and unsupported causal use.

Core rule: C.27 can say a claim is Dyn2 and intervention-sensitive. C.27 cannot turn that basis into a C.28-governed causal-use claim with estimand, identification, realizability, evidence design, and supported-use judgment. Dyn2 can describe an intervention-sensitive temporal-claim question; it does not estimate causal effect unless dyn2CausalUseRoute? is active and C.28 causal-use discipline carries the causal question.

Performative prediction, Goodhart, and metric-induced behavior. When a metric becomes a target, dashboard, incentive, gate, or public comparison, it may change behavior. C.27 should branch the case instead of becoming a Goodhart pattern.

C.27:4 - Solution defines the dyn2MetricTargetEffectBlock? fields; this section explains why metric publication and target use must be split from measurement legality, proxy distortion, and residual probe or frame cue.

Content split:

  • C.16 carries metric-as-measure;
  • E.13, assurance, or governance patterns carry metric-as-target, incentive, proxy, utility distortion, or optimization target;
  • metric publication as temporal intervention may make C.27 relevant;
  • C.26 carries metric/probe changes to the admissible state reading only if residual probe, frame, order, or export cue remains after ordinary C.27, C.16, and E.13 pattern relations are named.

This keeps Goodhart from becoming a catch-all warning and keeps C.27 focused on the dynamic effect of metric publication or metric-target use.

Process mining and object-centric process mining. Scalar throughput is often a thin view. Some dynamic claims need trace topology, multiple object bearers, interaction notes, and evidence about how queues, tickets, incidents, customers, orders, services, engineers, deployments, or review windows interact. When this question is live, C.27:4 - Solution defines the dyn2ObjectCentricTraceBlock? fields. This section explains why multi-object trace requirements should be named instead of pretending that one scalar throughput rate says enough.

Active sensing and active inference. Measurement may be an action rather than a passive read, but that is still usually ordinary FPF pattern relations: measurement, state-space, planning, evidence, control, causal, or process-log basis. QL is not made relevant by typing, discreteness, state reduction, tokenization, or planned measurement. C.27 may notice dynamic or probe pressure, but it must not promote active inference, quantum cognition, or QL mathematics unless C.26 remains relevant after ordinary-pattern exit tests.

Rhythm and embodied dynamics. Load-bearing rhythm claims need bearer, timing reference, window, basis, and admissible use. Coupling, phase relation, entrainment-like relation, perturbation response, tempo drift, or synchronization evidence are downstream claim, effect, or use fields only when the claim depends on coordination between bearers. This preserves the useful dance/practice analogy without minting a rhythm ontology.

C.27 is a middle recognition-and-relation lens, not a general dynamic-theory pattern. It notices when a claim has moved from state/rate reading to intervention-sensitive temporal adequacy, then keeps higher-demand claim relations with the existing FPF pattern that carries them:

Claim question noticed by C.27Existing FPF pattern relation
admissible measurement or comparable rate/rate-change readingC.16
transition law, reusable dynamics model, prediction, simulation, or control modelA.3.3 U.Dynamics plus evidence and assurance patterns
actual work/effort trace or resource burnU.Work / Gamma_work
scale-variable or elasticity claimC.18.1 scaling-law lens
search policy, exploration/exploitation, premature narrowing, convergence healthC.19
agentic tool-use planning or tool-call rate-changeC.24 call-planning discipline
task-family learning/adaptation speed or time-to-usable specializationC.22.1 task-family adaptation signature
viability-envelope temporal regulationC.26.3 viability-envelope boundary regulation
reproducible dynamic benchmark or faster-improvement comparisonG.9
causal-use claim or effect estimateC.28 and evidence patterns
promise, SLA/SLO, gate, public commitment, release claimpromise, boundary, service, and assurance patterns
residual probe, frame, export, coarsening, or order-effect cueC.26

The following lines connect common failures to C.27 action, not to a literature catalog:

Popular failureModern correctionC.27 action
Past slope is treated as a future control law.Control/policy claims need horizon, update rule, constraints, and evidence/model relation.If local, make a Dyn2TemporalClaimAdequacyCard; if reusable/control-bearing, include dyn2ControlPolicyRoute? and cite U.Dynamics, C.16, and assurance patterns as the patterns governing the other question.
Data from one policy/regime is used to justify another.OPE/RL practice asks behavior policy, evaluation policy, policy-overlap, uncertainty, and unsafe-exploration risk.Keep ordinary Dyn2TemporalClaimAdequacyCard cheap; include dyn2ControlPolicyRoute? only when policy transfer is FPF-governed.
One effort impulse is treated as the whole dynamic regime.Dynamic-treatment/regime practice treats some interventions as sequences of decision rules.Record policy/regime only in active block; do not make every Dyn2 a policy model.
Rate changed after effort, so effort caused it.Causal inference needs contrast/counterfactual, estimand, timing, outcome, assumptions, rival causes, and design.Keep it as a planning assumption or diagnostic reading, or include dyn2CausalUseRoute?; C.28 causal-use discipline carries the causal-use claim.
Metric improves after publication, so process improved.Performative or Goodhart cases split measurement, target use, incentive use, proxy distortion, temporal intervention, and residual probe, frame, or export effects.Include dyn2MetricTargetEffectBlock? only for temporal intervention and supported-use change; C.16 carries measurement, E.13 or an assurance pattern carries proxy distortion, and C.26 carries residual probe, frame, or export cue.
Scalar throughput is read as whole work-cycle truth.OCPM/process mining separates object bearers, event traces, interactions, and aggregation.Include dyn2ObjectCentricTraceBlock? / dyn2CrossScaleTransferBlock? only when scalar rate is insufficient.
Measurement-as-action triggers QL too early.Active sensing may matter, but ordinary FPF pattern relations come first.Keep C.27 ordinary; treat QL as C.26 content only after ordinary-pattern exits.
Rhythm is decorative cadence/vibe.Rhythm work needs bearer, timing reference, window, basis/proxy, and admissible use; coupling belongs only in downstream claim, effect, or use fields.Use Dyn2TemporalClaimAdequacyCard; include coupling, phase, or entrainment only when the claim depends on cross-bearer relation.

Relations

C.27 is the pattern for authored temporal-claim adequacy. It asks whether a claim about speed, rhythm, throughput, recovery, convergence, rollout, adoption, braking, coasting, redirection, or stabilization is sufficiently supported for the use being made of it. It does not become the pattern for the described system, work, measurement, benchmark, promise, quality bundle, or formal dynamics model.

When a temporal claim also touches another FPF concern, use the FPF pattern that governs that concern and let C.27 state only the temporal-claim adequacy question.

Related FPF pattern or disciplineUse C.27 forKeep in that pattern or discipline
C.27 itselfFirst-use entry and exit rule; Dyn0, Dyn1, and Dyn2 distinction; least-demand admissible output sequence; Dyn2TemporalClaimAdequacyCard; Dyn2TemporalClaimProfile for boundary-crossing claim use; anti-patterns; refresh and reopen triggers.Nothing outside C.27 is needed when the claim remains only a local temporal-claim adequacy question.
C.16.P / C.16Use C.16.P when rate, measure, metric, score, proxy, or base-characteristic wording is not yet recoverable; use C.16 when the measurement relation is already explicit and the temporal question remains live.Characteristic, scale, score, unit, comparability, measurement construction, evidence, sampling window, and admissible metric use. C.27 only names the temporal-claim adequacy question.
C.26Keeping ordinary dynamics, measurement, work-effort, rhythm, braking, coasting, and intervention-timing questions outside QL before any residual QL cue is considered.Residual probe, frame, order, export, or coarsening cue after ordinary C.27, C.16, work, benchmark, and proxy pattern relations.
A.3.3 U.DynamicsDeciding that an authored temporal claim is being used with enough commitment to need a reusable transition-law, simulation, prediction, formal model, or calibrated control relation.State space, transition law, observation/model constraints, validity discipline, simulation, prediction, and calibrated control model semantics.
A.19 and C.16 togetherShowing that derivative-like wording needs base characteristic, scale/unit, time base or sampling window, construction method, evidence, and admissible use.Characteristic-space legality and measurement construction. C.27 does not create a parallel coordinate system.
B.1.4 and B.1.6Preventing temporal slices, phase names, work logs, resource burn, or effort traces from being read as acceleration or transition laws.Temporal-slice composition, phase composition, work/resource aggregation, and actual work evidence.
B.1.5 and B.2.4Naming the temporal-claim adequacy question only when method composition, work enactment, adaptive work cycle, or capability-emergence prose also claims faster/slower improvement, recovery, stabilization, braking, or rhythm change.Order-sensitive method composition, work enactment, adaptive work cycle, and meta-functional transition. C.27 does not become a method-composition or emergence pattern.
A.4 / B.4 / A.16 / B.4.1Naming a temporal-claim adequacy question inside state-change, evolution-loop, cue-stabilization, reopen, operationalize, retire, or language-state movement prose.Temporal duality, canonical evolution loops, language-state move legality, and observe-notice-stabilize relation discipline. C.27 does not become a life-cycle time scale or language-state movement pattern.
C.24Tool-use plans whose tool-call sequence is claimed to change debugging speed, repair rate, learning rate, candidate discovery, evidence confirmation, bug localization, rollout stabilization, or uncertainty reduction.Call planning, tool-use sequence, and work trace. More calls or more context are not dynamic improvement by themselves.
C.17 and C.18Naming the temporal-claim adequacy question only when a creativity, novelty, open-ended search, archive-growth, illumination, or candidate-generation claim also claims faster/slower improvement, coverage, discovery, or convergence.Creativity characteristics, novelty/value measurement, NQD generation/update/illumination/select-front calculus, archive semantics, and provenance pins.
C.19Convergence, narrowing, widening, exploration, exploitation, or search-speed question when that temporal reading changes supported use.Pool-policy result and explore/exploit governance.
C.18.1A scale-variable change used as the basis for rate-change, learning, recovery, throughput, or stabilization.Scale variables, scale windows, scale probes, scale-elasticity value, and scaling-law adequacy.
C.22.1Learning or adaptation-rate question for a declared TaskFamilyRef or TaskSignature.Task-family adaptation signature, threshold target, prior exposure, transfer, retention, and corridor-entry evidence.
C.26.3Braking, throttling, cadence change, recovery timing, adaptation cost, or stabilization as a temporal move inside a viability-envelope claim.Viability bearer, protected promise/function, viable region, disturbance, sensor/probe/action split, adaptation cost, and failure mode.
E.13Naming when a temporal metric, proxy, or dashboard trend is being treated as practical value or target.Pragmatic utility, value alignment, proxy audit, and Goodhart repair. C.27 does not decide value adequacy.
E.16Naming the temporal-claim adequacy question when autonomy budgets, guard cadence, ledger evidence, depletion, override, or freedom-of-action language is used as the basis for acceleration, braking, recovery, or stabilization.Autonomy budget declaration, guard checks, autonomy ledger, depletion behavior, pause/resume speech acts, and scale policy under autonomy.
A.10 / B.3 / B.3.4 / G.6Naming which temporal reading needs an evidence path, provenance path, assurance claim, freshness window, decay note, or reopen condition.Evidence graph referring, evidence carriers, provenance references, assurance claims, evidence decay / epistemic debt, and citable path/slice discipline.
G.9Dynamic benchmark requirement: rate-change, rhythm change, recovery speed, intervention effect, effort budget, or dynamic outcome.Baseline, freshness, comparator, bridge discipline, parity plan, parity report, and reproducible benchmark publication.
C.25Dynamic quality-family slot when agility, resilience, adaptability, recovery, or robustness depends on braking, redirection, stabilization, recovery rate, or rhythm under effort.Quality-family bundle structure, scope, measures, mechanisms, evidence, and endpoint discipline.
G.5Only the selector-publication case where a selector report consumes a dynamic benchmark result.Method-family registry use and selector publication. C.27 does not add a default G.5 object.
A.2.3 / A.2.8 / A.2.9 / A.6.C / F.12 and assurance patternsPromise-like or boundary-facing temporal claims: release speed, recovery guarantee, SLA/SLO-like cadence, public commitment, gate, service acceptance, or assurance use.Promise content, commitments, instituting speech acts, contract unpacking, service acceptance binding, assurance claims, and release/gate evidence.
E.18 E.TGA / A.20 / A.21Naming the C.27 temporal-claim adequacy question when a flow, gate, crossing, PathSlice, LaunchGate, or published decision uses that temporal claim.The TGA carcass: U.Transfer, OperationalGate(profile), GateCheck publication shape, ConstraintValidity, GateFit, DecisionLog, PathSlice/sentinel refresh, Gamma_time pins, SquareLaw, and crossing visibility.
C.21 / G.10 or G.11 / G.12Naming the temporal claim when a discipline-health value, shipped pack, dashboard time-series, telemetry pin, RSCR trigger, refresh plan, refresh report, or dashboard slice is read as evidence for improvement, decay, recovery, stabilization, or rate-change.Discipline-health slot meaning, SoTA pack shipping, DHC series/row/slice construction, telemetry-pin publication, refresh/decay orchestration, and RSCR trigger discipline.
C.28A rate-change, intervention, effort, workshop, policy, or practice change is used as a causal-use basis.Causal-use question, C.28 causal-use class, causal intervention spec, contrast/counterfactual, estimand, timing, outcome, assumptions, rival causes, identification strategy, realizability claim, evidence design, supported causal use, and unsupported causal use.

Use pattern references before expanding a C.27 record. When measurement, transition law, work evidence, planning, benchmark parity, C.28 causal-use claim, promise content, assurance claim, quality, viability, or residual QL discipline governs the other question, the C.27 record cites that pattern and keeps only the temporal-claim adequacy question.

When a temporal claim touches neighbouring work, keep these boundaries:

  1. Fields in a C.27 card do not imply new Kernel kinds.
  2. State space, measurement, transition law, work, planning, benchmark, causality, promise, service, quality-bundle, publication, and QL questions stay with the FPF pattern that governs each question.
  3. The EntityOfConcern, temporal bearer, profile content, and profile carrier remain distinct.
  4. If the text says process, work cycle, practice, service, method, system, or rhythm, the real bearer is named through a named FPF kind and reference rather than treated as one generic moving thing.
  5. Derivative-like readings remain C.16-compliant.
  6. Full Dyn2TemporalClaimProfiles remain rare and justified rather than default.
  7. At least one golden case exits or downgrades from Dyn2 correctly.
  8. Braking, pause, stabilization, redirection, and coasting are first-class temporal moves rather than failures to accelerate.
  9. QL relevance stays inactive unless ordinary pattern relations leave residual probe, frame, export, or coarsening cue.
  10. Causal, benchmark, promise-like, and assurance claims cite the governing pattern relation that carries the claim rather than relying on an ordinary Dyn2TemporalClaimAdequacyCard.

At use time, the concrete relation is enough: name the temporal-claim adequacy question, name the pattern that governs the other question, state the unsupported downstream claim, effect, or use, and choose the minimal C.27 output or the pattern relation that carries the other claim.

This informative matrix states the neighbouring-question boundaries. Ordinary C.27 use does not fill it as a separate form.

Existing FPF discipline / dynamic collision themeC.27 relationCollision riskBoundary
A.7 strict distinctionC.27 records are authored descriptions of temporal-claim adequacy.Card/profile content is confused with the EntityOfConcern, work, dynamics law, or carrier.Keep EntityOfConcern, temporal-claim description, and carrier distinct in C.27 and in any neighboring C.27 relation text.
E.10 / F.5 / F.8 naming disciplineC.27 uses local labels and Plain/Tech mapping.Dyn2, rhythm, force, inertia, speed, or acceleration become new FPF kinds.Use pattern-local dynamic-claim labels; introduce no new U.* kind and no pattern-number-prefixed term.
A.3.3 U.DynamicsC.27 types the authored temporal-claim adequacy question before a formal-model relation is needed.C.27 steals transition law, simulation, prediction, or reusable control model work.Keep formal laws, simulations, predictions, and calibrated control models with U.Dynamics and evidence and assurance patterns.
A.19 CharacteristicSpaceC.27 may point to base characteristic, state reading, rate reading, or rate-change reading.C.27 informally creates derivative coordinates or spaces.Use A.19 and C.16 for characteristic-space and measure construction when the reading is FPF-governed.
C.16 MM-CHRC.27 cites measures, rate readings, rate-change readings, and evidence.C.27 invents measurement legality or comparability.C.16 carries measurement construction; C.27 only names the temporal-claim question and cites the measurement relation.
A.15 / U.Work / WorkPlan / MethodDescriptionC.27 relates effort timing, intervention, resource envelope, and work trace to a temporal claim.C.27 stores actual work, assigns plan authority, or treats planned effort as performed work.Planning/method description carries planned effort; work evidence carries actuals; C.27 records only the temporal-claim adequacy question.
B.1.5 / B.2.4C.27 can type the temporal adequacy question when method-composition or capability-emergence prose also claims rate, rhythm, recovery, stabilization, braking, or redirection.C.27 becomes a method-composition, work-enactment, or emergence pattern.B.1.5 carries order-sensitive method composition and work enactment; B.2.4 carries meta-functional transition.
A.4 / B.4 / A.16 / B.4.1C.27 can type the temporal adequacy question inside state-change, evolution-loop, cue-stabilization, reopen, operationalize, retire, or language-state movement prose.C.27 becomes a state-change, evolution-loop, language-state movement, or cue-stabilization pattern.Those patterns carry state-change or evolution-loop and language-state movement; C.27 only states the temporal claim and its supportedUse and unsupportedUse fields.
C.18.1C.27 can type temporal-claim question when a scale-variable change is used as the basis for rate-change, learning, recovery, throughput, or stabilization.C.27 becomes a scaling-law or elasticity pattern.C.18.1 carries scale variables, scale windows, scale probes, and scale-elasticity value; C.27 only states temporal-claim adequacy.
C.17 / C.18C.27 can type the temporal adequacy question inside creativity, novelty, open-ended search, archive-growth, illumination, or candidate-generation prose.C.27 becomes a creativity, novelty, or NQD-calculus pattern.C.17 carries creativity characteristics and novelty/value measurement; C.18 carries NQD generation, archive, illumination, and selection calculus.
C.19C.27 can type convergence, narrowing, exploration, exploitation, or search-speed question.C.27 becomes a pool-policy result pattern.C.19 carries pool-policy result; C.27 only states temporal-claim question when speed or change affects admissible use.
C.24C.27 can flag tool-use acceleration, repair-rate, learning-rate, or stabilization claims.C.24 is asked to carry C.27 fields whenever tool-use prose mentions speed.Use a C.27 card/profile reference first; add local C.24 fields only if repeated concrete cases show that C.24 itself must inspect the temporal-claim question.
C.22.1C.27 can type learning/adaptation-rate question for one declared TaskFamilyRef or TaskSignature.C.27 becomes a generic learning-speed or specialization pattern.C.22.1 carries the task-family adaptation signature; C.27 only states the temporal-claim question when it changes supported use.
C.26.3C.27 can type braking, throttling, cadence, recovery, or stabilization claim inside a viability-envelope claim.C.27 becomes a viability-envelope or stability-through-change pattern.C.26.3 carries the viability-envelope record; C.27 only states the temporal move and pattern relation.
E.13C.27 can flag a temporal metric, proxy, dashboard trend, or target-effect reading.C.27 becomes value-alignment or proxy-audit law.E.13 carries pragmatic utility, value alignment, and proxy audit; C.27 only states the temporal claim.
E.16C.27 can flag temporal adequacy inside autonomy-budget, guard-cadence, depletion, pause/resume, or freedom-of-action language.C.27 becomes autonomy governance or guard-budget law.E.16 carries autonomy budget declarations, guard checks, autonomy ledger, depletion behavior, and override speech acts.
G.9C.27 can flag dynamic benchmark parity requirement.C.27 becomes the benchmark parity harness.G.9 carries baseline, freshness, comparator, bridge, parity plan, and parity report discipline; C.27 names only the dynamic claim question.
A.10 / B.3 / B.3.4 / G.6C.27 can name evidence path, provenance path, freshness/decay condition, and reopen condition for a temporal claim.C.27 becomes evidence graph, assurance, decay, or provenance law.A.10, B.3, B.3.4, and G.6 carry those evidence/provenance/assurance questions; C.27 only names the temporal reading that needs them.
C.21 / G.10 / G.11 / G.12C.27 can flag the temporal claim inside discipline-health values, pack shipping, dashboard telemetry, refresh triggers, RSCR inputs, or dashboard slices.C.27 becomes discipline-health characterization, SoTA pack shipping, dashboard, or refresh orchestration.C.21 carries discipline-health slot meaning; G.10 carries pack shipping; G.12 carries dashboard time-series and telemetry-pin publication; G.11 carries refresh/decay orchestration.
C.26C.27 carries ordinary temporal adequacy before QL is considered.Dyn2 vocabulary escalates into quantum-like modeling.C.26 applies only for residual probe, frame, order, export, or coarsening cue after ordinary C.27, C.16, work, benchmark, and proxy pattern relations.
A.2.3 / A.2.8 / A.2.9 / A.6.C / F.12 and assurance patternsC.27 may flag promise-like, boundary-facing, or service-acceptance temporal claims.C.27 becomes an SLA, commitment, instituting speech-act, boundary-semantics, service-acceptance, or assurance pattern.Those patterns carry promise content, commitment, speech act, contract unpacking, service acceptance, and assurance; C.27 only states the temporal claim and its supportedUse and unsupportedUse fields.

Core discipline: C.27 does not name new objects in the world. It names when an authored temporal claim has started to need intervention-sensitive temporal adequacy, then keeps each higher-demand claim relation with the FPF pattern that already governs that concern.

Practitioner-readable problem:

A trend is not yet an intervention model. Use C.27 when a claim about speed, rhythm, throughput, recovery, convergence, rollout, or adoption is used to change action and therefore needs effort, window, resistance, evidence path or assumption relation, and reopen discipline.

One-minute working script:

When a text says something should get faster, slower, recover, stabilize, or keep rhythm, first ask: are we only reading a state, only reading a rate, or claiming that an intervention changes the rate, rhythm, recovery, or stabilization? If it is only state or rate, stop. If it is an intervention claim, write the smallest Dyn2TemporalClaimAdequacyCard: what changes, by what effort, in what window, against what resistance or cost, with what evidence path or assumption relation, for what admissible use, and what downstream claim, effect, or use is not carried by the temporal-claim record. Only boundary-crossing claims need a Dyn2TemporalClaimProfile. Formal laws, measurements, work, C.28 causal-use claim, benchmarks, promises, assurance, viability envelopes, scale-variable claims, adaptation signatures, and QL residues stay with the existing FPF patterns that govern those concerns.

C.27 also carries an early non-improvement boundary:

C.27 is not a temporal theory of everything. It is the smallest useful repair for one recurring authored-claim failure: rate talk pretending to know rate-change.

C.27 does not present itself as improving all temporal reasoning, all process modeling, all practice description, all rhythm theory, all control/RL/causal inference, all performance management, all QL or active-inference modeling, all scaling claims, or all adaptation claims. It improves one narrow working failure: it prevents state/rate readings from being laundered into intervention-sensitive temporal claims without effort, window, resistance, evidence/assumption relation, and supportedUse and unsupportedUse field discipline.

The first C.27 record should be the one-screen Dyn2TemporalClaimAdequacyCard, not a full Dyn2TemporalClaimProfile. The Dyn2TemporalClaimProfile is a boundary-crossing claim-use C.27 record. Existing formal patterns carry formal models; a C.27 record cites them when the other question is live instead of copying C.27 theory into another pattern relation.

The durable bottom line is:

C.27 improves FPF only if it improves first-practical entry and pattern relation: it notices state/rate-to-rate-change laundering, produces the least-committing admissible next output, and keeps every higher-demand claim relation with the existing FPF pattern that governs that concern.

It should help FPF users act more carefully with speed, rhythm, effort, inertia, braking, coasting, and redirection claims. It does not make FPF carry mathematical theater, physics ontology, false QL relevance, or a hidden compliance backpack.

C.29 mathematical-lens use relation

C.29 may state that a mathematical lens supports a prediction, distinction, obstruction, diagnostic boundary, or validation boundary. If the claim-bearing text is about forecast, rate, trajectory, rhythm, recovery, convergence, stabilization, speed, temporal window, or rate-change as sufficient for a use, C.27 supplies the temporal-claim adequacy record or states that the temporal concern is not live. Formal transition-law, prediction, or control-model semantics stay with A.3.3 plus evidence and assurance loci where those uses are live.

C.27:End

CausalUse-CAL: Causal-Use Questions, Causality-Ladder Rungs, Identification and Realizability

Type: Calculus (C) Status: Stable Normativity: Normative unless explicitly marked informative

Plain-name. Causal-use calculus.

Intent. Govern live causal questions and decision-bearing causal use: improvement, intervention effect, causal fairness, counterfactual comparison, causal policy optimality, realized counterfactual-rung evidence, identified counterfactual estimate, or simulation-only counterfactual output.

Primary EntityOfConcern. A causal-use question or claim together with the causal-use basis and follow-on records needed to use it admissibly: causality-ladder rung, estimand or contrast, evidence basis, identification status, counterfactual sampling realizability status, supported use, unsupported use, and next move.

Not a physical ontology. C.28 governs how FPF authors, reviewers, and operators use causal models, evidence, and counterfactual reasoning in records, policy claims, fairness claims, method comparisons, and work plans. It does not define physical causality in general and does not replace local domain science.

Use This When

Use C.28 when a claim is being used causally:

  • "method A improves result";
  • "users who received intervention X had better outcomes";
  • "this practice is fair";
  • "the agent chose optimally";
  • "the model simulates what would have happened";
  • "the system can collect counterfactual data";
  • "this benchmark shows a causal method is better";
  • "this policy should be deployed because it would have changed the outcome".

Use C.28 especially when the claim must distinguish:

  • observed association;
  • intervention or action effect;
  • counterfactual comparison;
  • direct counterfactual-rung data collection;
  • identified counterfactual estimate;
  • simulation-only counterfactual output;
  • causal policy class;
  • causal fairness use;
  • causality-ladder parity in method comparison.

Not this pattern when. If no causal use is claimed, keep the work in the neighboring pattern: C.16 for measurement, C.27 for temporal trend or rate-change adequacy, B.3 for assurance result, A.10 for evidence graph reference, G.9 for ordinary parity, C.11 for local choice, C.19 for pool policy, C.24 for call planning, or C.26 for a surviving quantum-like modeling cue after ordinary causal explanations have been tried.

Activation boundary. C.28 activates at CausalUseActivation: causal wording changes what the claim makes admissible for publication, choice, deployment, assurance, audit, benchmark, or support treatment. The trigger is admissible downstream use, not the presence of a causal-looking word. If the wording is only exploratory prose and no causal use governed by C.28 is made, rewrite to association, trend, measurement, or simulation-only wording and stop.

Exploratory causal-looking prose is not a CausalUseActivation by itself. A note may say that a relation is plausible, worth probing, or suggested by traces and still remain in C.16, C.27, A.10, C.11, C.19, C.24, G.5, or G.9 until the text makes a causal use governed by C.28 admissible. The moment the text makes publication, choice, deployment, assurance, audit, benchmark, or support treatment depend on causal support, C.28 governs the causal-use boundary.

What Goes Wrong If Missed

A causal-looking phrase backed only by association, proxy, simulation-only, or rhetorical support gets promoted into a causal use that requires a named C.28 support basis and verdict.

Correlation becomes intervention effect. Interventional proxy becomes counterfactual fairness. A simulation becomes realized counterfactual-rung evidence. A benchmark compares methods across different causality-ladder rungs and still publishes one scalar superiority claim. An agentic policy is called optimal without saying whether it is a natural behavior policy, an interventional policy, or a counterfactual policy.

The practical error is laundering: the reader sees causal language but cannot recover what rung, estimand, evidence basis, and supported use are actually admissible.

What This Buys

C.28 gives FPF one cheap first stop for causal use.

The first useful result is not a heavy record. It is one small causal-use triage that says whether causal use is present, which causality-ladder rung is being used, what comparator or counterfactual is in play, what causal evidence-use class supports it, and what the next move is.

Durable cards and profiles appear only when the claim needs them. The pattern buys explicit causal discipline without turning every causal word into a paperwork exercise.

First-Minute Questions

C.28 in 60 seconds is the operational entry into CausalUseTriageRecord:

  1. Detect whether the claim reaches CausalUseActivation: it changes what publication, choice, deployment, assurance, audit, benchmark, or support treatment is admissible.
  2. Stop with nextMove.cheapStop if the claim only reports association, trend, description, measurement, or simulation-only output.
  3. If causal use is live, fill targetCausalityLadderRung, comparatorOrCounterfactualRef, and causalEvidenceUseClass.
  4. Fill supportedUse: CausalUseSupportStatement and unsupportedUse: CausalUseUnsupportedStatement as one action pair.
  5. Fill nextMove: CausalUseNextMove: choose cheapStop or escalate only when the claim is decision-bearing, publication-bearing, assurance-bearing, fairness-bearing, benchmark-bearing, or reusable.

First Output

The first output is a CausalUseTriageRecord:

CausalUseTriageRecord:
  causalUse: yes | no | unclear
  targetCausalityLadderRung?: CausalityLadderRung
  comparatorOrCounterfactualRef?
  causalEvidenceUseClass: CausalEvidenceUseTriageValue
  supportedUse?: CausalUseSupportStatement
  unsupportedUse?: CausalUseUnsupportedStatement
  nextMove: CausalUseNextMove
CausalUseNextMove:
  cheapStop:
    stopNoCausalUse |
    publishAssociationOnly |
    rewriteAsTrendOrAssociation |
    keepSimulationOnlyModelUse |
    downgradeCausalWording |
    abstainFromCausalUse |
    rerouteToNeighborPattern
  escalateOnlyIfLoadBearing:
    openLocalCausalUseQuestionCard |
    openDurableCausalUseQuestionCard |
    buildCausalIdentificationProfile |
    buildCounterfactualSamplingRealizabilityProfile |
    planCausalUseEvidenceDesign |
    openCausalFairnessUseAuditCard |
    openCausalMethodRungParityRecord
CausalEvidenceUseTriageValue =
  observationalAssociationSupportBasis |
  interventionalActionSupportBasis |
  realizedCounterfactualSampleSupportBasis |
  identifiedCounterfactualEstimateSupportBasis |
  simulationOnlyCounterfactualOutputBasis |
  missing

cheapStop values are terminal or downgrade actions. They close the local causal-use question for now by saying what narrower use remains admissible, which neighboring pattern governs the remaining non-causal question, or that causal use is declined. escalateOnlyIfLoadBearing values are record-opening actions. They are admissible only when the supported-use and unsupported-use boundary cannot safely carry the reader's next action by itself.

If this first output cannot be written honestly, the causal-use claim is not ready.

CausalUseSupportStatement is one concrete causal-use action the current support makes admissible, such as publish association-only wording, use a bounded interventional estimate for a named decision, deploy only under a named policy constraint, run a fairness audit under a named causal estimand, or compare methods only inside one declared causality-ladder rung. It is not a confidence label, graph name, method name, or generic "evidence exists" phrase.

CausalUseUnsupportedStatement is the matching concrete causal-use action the current support does not make admissible, such as intervention-effect wording, realized counterfactual sample wording, causal fairness certification, causal policy optimality, cross-rung benchmark superiority, or release/deployment use. The supported and unsupported statements travel as a pair so the reader can act without inferring the boundary from prose tone.

The triage record may be the final causal-use carrier. Triage lines are enough when they block the overclaim and tell the reader what narrower use remains admissible. Do not open a local card merely because the word "cause", "effect", or "counterfactual" appears.

The triage causalEvidenceUseClass field is the first-pass alias for CausalEvidenceSupportBasis | missing. If a claim escalates beyond triage, the value must dock to CausalEvidenceSupportBasis; missing becomes unsupportedUse, CausalUseSupportVerdict = unsupported, or abstain.

Problem Frame

FPF already has dedicated neighboring patterns for measurement, evidence, assurance, temporal claims, decisions, exploration, call planning, fairness, method dispatch, parity, and quantum-like modeling. None of those neighbors should become the general authority for causal use.

C.28 exists because causal use cuts across those neighbors. The same sentence can be:

  • a measurement description handled by C.16;
  • a temporal trend handled by C.27;
  • an assurance claim handled by B.3;
  • an evidence graph reference handled by A.10;
  • a decision record handled by C.11;
  • a pool-policy record handled by C.19;
  • a call-planning record handled by C.24;
  • a fairness audit handled by D.5;
  • a parity report handled by G.9;
  • a quantum-like residual handled by C.26;
  • or a causal-use claim governed here.

The first pattern task is therefore not to classify wording for its own sake. It is to recover the live causal question, the target causality-ladder rung, the support basis currently available, and the cheapest truthful next move. Sometimes that move is to downgrade the claim to association, temporal change, metric-only fairness, or simulation-only use. Sometimes it is to open identification, realizability, evidence-design, fairness, policy-evaluation, or benchmark-parity work. C.28 exists to keep those moves distinct and to stop teams from acting as if an identification, realizability, or intervention-support basis had already been earned.

Problem

Causal language is easy to overclaim because ordinary prose hides the difference between association, action, counterfactual comparison, realized counterfactual sample, identified estimate, and simulation.

Three collapses are especially dangerous:

  1. Rung collapse. Observational association, interventional action/effect, and counterfactual comparison are treated as one causality-ladder rung.
  2. Support collapse. Observed data, experimental data, direct counterfactual-rung samples, identified estimates, and simulations are treated as one evidence basis.
  3. Use collapse. A result that supports one use, such as association reporting, is reused for another use, such as causal fairness, policy optimality, or method superiority.

C.28 prevents those collapses by making rung, support, and use explicit before claims requiring higher causal support are admitted.

Forces

ForceTension
Causal safety vs cognitive affordabilityFPF must block causal laundering without forcing every causal word into a full causal dossier.
Rung clarity vs ordinary languageOrdinary language says "improves", "causes", "fair", or "would have"; FPF must recover whether that means association, intervention, or counterfactual comparison.
Identification vs realizabilityA counterfactual estimand may be identifiable from other data but not directly sampleable, or directly sampleable under action constraints but not generally available.
Graph/formalism precision vs reader usabilitySCM, DAG, ADMG, SWIG, SCM twin network, AMWN, and counterfactual graphical model names matter, but they must not bury the first practical move.
Domain plurality vs one FPF patternSCM/PCH, potential outcomes, target-trial emulation, causal ML, transportability, causal representation learning, causal RL, and causal fairness must all remain recognizable without making C.28 a one-school vocabulary.
Neighbor fit vs authority creepNeighbor patterns need causal-use hooks, but they must not redefine causal-use question, rung, estimand, identification, or realizability.

Solution

Use a three-level causal-use escalation:

  1. Start with CausalUseTriageRecord.
  2. Escalate to LocalCausalUseQuestionCard or DurableCausalUseQuestionCard only when the claimed use needs a reusable causal-use record.
  3. Add profiles or specialized records only when the claim triggers that exact need: identification, realizability, evidence design, fairness, policy evaluation, transportability, estimation validity, causal-variable representation, or parity.

The default move is cheap. The heavy move is triggered.

Record or profile kindOrdinary sizeTrigger
CausalUseTriageRecordone short record; usually 5-8 lines covering activation, rung, comparator/counterfactual, causal evidence-use class, supported use and unsupported use pair, and next moveany live causal wording or suspected causal laundering
LocalCausalUseQuestionCardone small card; usually one causal-use question, one rung, optional comparator/estimand, one support basis, one supported use and unsupported use pair, and one next movethe team needs a reusable local record but not a publication/release/fairness/benchmark/assurance object
DurableCausalUseQuestionCardone durable card with causal-use kind, estimand, timing/outcome when needed, assumptions, rival causes, support basis, supported use and unsupported use pair, next move, and reopen/exit conditionthe claim is decision-bearing, publication-bearing, fairness-bearing, benchmark-bearing, assurance-bearing, or reusable
heavy profile or specialized recordonly the fields needed for the named triggered question or work item; absent fields remain absent rather than becoming implied dossier requirementsidentification, realizability, target-trial emulation, parameter estimation, transportability, off-policy evaluation, causal representation, evidence design, fairness audit, or causal parity is materially needed

Causal-use governance and consumer carry-through boundary

C.28 governs causal-use objects and causal-use support roles. Neighbor patterns keep their local authority and consume only the causal-use pieces they need: measurement, evidence path, assurance, fairness, decision, exploration, call-planning, dispatch, parity, and refresh records do not become causal-use governing patterns by carrying C.28 fields.

Object or decisionC.28 governsNeighbor may carryNeighbor must not do
Causal-use kind and rungCausalUseClaimKind, CausalityLadderRung, causal-use question, comparator/counterfactual, estimand, supported use, unsupported usecausalUseSpec?, causalActionUseSpec?, method dispatch spec, parity record, fairness audit cardInfer causal-use kind from local vocabulary alone or publish a higher CausalityLadderRung without C.28 support
Causal evidence support basisCausalEvidenceSupportBasis and its five valuesEvidence path refs in A.10, evidence-role specializations in A.2.4, consumer fields in B.3, C.19, D.5, G.5, and G.9Mint another support-basis value set, add assumption-only/no-support values, or let simulation-only output become realized evidence by name
Identification and realizabilityCausalIdentificationProfile, CounterfactualSamplingRealizabilityProfile, their verdicts, and supported use and unsupported useEvidence, assurance, decision, exploration, call-planning, fairness, dispatch, and parity refs to those profilesTreat identification as direct sampling, or treat direct-sampling infeasibility as absence of all possible causal support
Graph and calculus namingCausalGraphRepresentationKind, GraphSeparationCriterionKind, CausalInferenceCalculusKind, StructuralCausalModel, CausalDiagramRefNamed graph refs and calculus refs when the neighbor records the causal-use support basis and cited formalismUse generic graph prose where a graph formalism or calculus is load-bearing
Assurance consequenceCausalUseSupportVerdict as causal-use action grammarB.3 degrade/block/abstain consequences for F-G-R/CL assuranceLet assurance prose certify causal identification, realizability, or fairness
Fairness, policy, and parity specializationCausal-use question/rung/estimand/support basis/support verdict for fairness, policy, and causal method comparisonD.5 ethical/fairness audit card, C.11 choice result, C.19 pool policy, C.24 call plan, G.5 method dispatch spec, G.9 parity report with local refs to consumed C.28 supportCollapse metric disparity, policy replay, method dispatch, or benchmark score into a causal-use verdict

A neighbor may quote the C.28 values it consumes for by-value readability. Quoting the values does not transfer governing authority. A neighbor pattern governs only its local record and must cite C.28 when the causal-use question or causal-support basis is live.

Compact crosswalk:

Field or decision slotQuestion answeredTypical valuesDo not confuse with
CausalityLadderRungWhat kind of causal question or use is being claimed?observational association, interventional action, counterfactual comparisonthe evidence source or the method family
CausalEvidenceSupportBasisWhat support basis value is being used for that causal use?observational association, interventional action, realized counterfactual sample, identified counterfactual estimate, simulation-only outputthe rung itself, a raw evidence-role name, or a no-support verdict
supportedUse / unsupportedUseWhat may the reader do next, and what must they not do?CausalUseSupportStatement, CausalUseUnsupportedStatementa confidence score, a graph name, a method name, or a neighboring governing pattern

Rung-support-use examples:

RungSupport basisSupported useUnsupported use
observationalAssociationRungobservationalAssociationSupportBasisassociation report, descriptive risk comparison, probe selectionintervention-effect claim, causal fairness certification, policy optimality
interventionalActionRunginterventionalActionSupportBasisdeclared action-effect use inside assignment, follow-up, and outcome limitscounterfactual sample claim, cross-population policy claim without transportability
counterfactualComparisonRungidentifiedCounterfactualEstimateSupportBasisidentified or bounded counterfactual estimate under assumptions and profile refsrealized sample wording or assumption-free counterfactual certainty
counterfactualComparisonRungsimulationOnlyCounterfactualOutputBasisbounded model-supported simulation userealized counterfactual sample evidence, intervention-effect evidence

Causality-Ladder Rung

CausalityLadderRung is a controlled value set:

CausalityLadderRung =
  observationalAssociationRung |
  interventionalActionRung |
  counterfactualComparisonRung
  • observationalAssociationRung means passive observation, natural behavior, association, or seeing-only case.
  • interventionalActionRung means do(x), intervention, action setting, experiment, policy change, or action-effect case.
  • counterfactualComparisonRung means counter-to-fact comparison, unit-history-conditioned comparison, potential-outcome contrast, or counterfactual-imagination case.

A higher causal-use rung is not supported by lower-rung data unless a CausalIdentificationProfile, CounterfactualSamplingRealizabilityProfile, or bounded-use statement says exactly what is supported and what is not.

Causal-Use Claim Kind

CausalUseClaimKind is the controlled value set for the local causal-use claim being made:

CausalUseClaimKind =
  causalEffectClaim |
  counterfactualComparisonClaim |
  causalFairnessClaim |
  causalPolicyClaim |
  causalBenchmarkParityClaim |
  causalEvidenceSupportClaim |
  causalAssuranceSupportClaim
  • causalEffectClaim means a result is used as an effect, improvement, harm, or intervention/outcome claim.
  • counterfactualComparisonClaim means a counter-to-fact, potential-outcome, or unit-history-conditioned comparison is being used.
  • causalFairnessClaim means fairness is claimed through a causal path, intervention, counterfactual, or causal estimand rather than only a metric.
  • causalPolicyClaim means a policy, action rule, exploration rule, or agentic strategy is claimed as causally preferable.
  • causalBenchmarkParityClaim means causal methods are compared for parity, superiority, or benchmark consumption.
  • causalEvidenceSupportClaim means an evidence path is being used as causal-use support.
  • causalAssuranceSupportClaim means an assurance tuple or support verdict is being used for a causal-use claim.

Simulation-only causal use stays inside the existing claim-kind set. simulationOnlyCounterfactualOutputBasis is a support/use value, not a new CausalUseClaimKind. Use the relevant claim kind, usually counterfactualComparisonClaim, causalPolicyClaim, causalBenchmarkParityClaim, or causalEvidenceSupportClaim, and set CausalEvidenceSupportBasis = simulationOnlyCounterfactualOutputBasis with bounded model-supported use and unsupported use. Bounded model-supported simulation use does not become realized counterfactual sample evidence or intervention-effect evidence. Do not mint a separate simulation-only claim kind merely to avoid naming the support basis value.

Encoding rule: choose the causal-use claim kind by the question being answered, then choose simulationOnlyCounterfactualOutputBasis as the support basis and write CausalUseSupportStatement / CausalUseUnsupportedStatement for the bounded simulation use.

Causal-Use Cards

Use a local card when the claim needs a small working record:

LocalCausalUseQuestionCard:
  causalUseQuestionRef: U.CausalUseQuestion
  targetCausalityLadderRung: CausalityLadderRung
  causalUseClaimKind?: CausalUseClaimKind
  comparatorOrCounterfactualRef?
  estimandRef?
  causalEvidenceSupportBasis: CausalEvidenceSupportBasis
  supportedUse: CausalUseSupportStatement
  unsupportedUse: CausalUseUnsupportedStatement
  nextMove: CausalUseNextMove

Use a durable card when the claim is decision-bearing, publication-bearing, fairness-bearing, benchmark-bearing, assurance-bearing, or reusable:

DurableCausalUseQuestionCard:
  causalUseQuestionRef: U.CausalUseQuestion
  targetCausalityLadderRung: CausalityLadderRung
  causalUseClaimKind: CausalUseClaimKind
  causalInterventionSpecRef?
  comparatorOrCounterfactualRef?
  estimandRef: U.CausalEstimand
  potentialOutcomeContrastRef?
  targetTrialProtocolRef?
  assignmentOrInterventionWindowRef?
  causalFollowUpWindowRef?
  outcomeMeasureRef?
  causalAssumptionSetRef
  rivalCauseSetRef?
  causalEvidenceSupportBasis: CausalEvidenceSupportBasis
  causalIdentificationProfileRef?
  counterfactualSamplingRealizabilityProfileRef?
  causalParameterEstimationProfileRef?
  causalTransportabilityProfileRef?
  causalVariableRepresentationRef?
  falsificationOrNegativeControlRef?
  sensitivityAnalysisRef?
  rivalCauseStressTestRef?
  supportedUse: CausalUseSupportStatement
  unsupportedUse: CausalUseUnsupportedStatement
  nextMove: CausalUseNextMove
  reopenOrExitCondition

The durable card is not the default. It is the record used when a causal note without the required [C.28](/generated/patterns/C.28) support basis would be unsafe.

Causal Evidence Support Basis

CausalEvidenceSupportBasis is a controlled value set:

CausalEvidenceSupportBasis =
  observationalAssociationSupportBasis |
  interventionalActionSupportBasis |
  realizedCounterfactualSampleSupportBasis |
  identifiedCounterfactualEstimateSupportBasis |
  simulationOnlyCounterfactualOutputBasis

This is the [C.28](/generated/patterns/C.28)-governed value set for causal evidence support basis. causalAssumptionOnlySupport and noCausalEvidenceSupport are not values of CausalEvidenceSupportBasis: assumption-only support condition belongs in causalAssumptionSetRef plus supported use and unsupported use; no-support basis value belongs in CausalUseSupportVerdict, unsupportedUse, or abstain.

Simulation-only output never becomes realized counterfactual-rung evidence by name alone. It may support model-based use only when assumptions, validation, and supported use and unsupported use are declared.

realizedCounterfactualSampleSupportBasis does not mean observing two incompatible outcomes for the same unit in one realized world. It means physically obtaining samples from the declared target counterfactual distribution under the profile's constraints.

CausalEvidenceSupportBasis names a support basis value. It is distinct from an evidence source, an [A.2.4](/generated/patterns/A.2.4) evidence role, and an [A.10](/generated/patterns/A.10) evidence path. Some support bases are direct empirical support-basis classes, such as observational or interventional support. Other support bases are inferential support-basis classes, such as identified counterfactual estimate support. Do not read this value set as only a raw evidence-source kind.

realizedCounterfactualSampleSupportBasis does not mean observing two incompatible outcomes for the same unit in one realized world. It means physically obtaining samples from the declared target counterfactual distribution under the profile's physical, ethical, operational, unit-history, and graph constraints.

Identification Profile

CausalIdentificationProfile answers whether a causal or counterfactual estimand can be expressed from available data plus assumptions, graph representation, and inferential calculus.

CausalIdentificationProfile:
  causalUseQuestionRef: U.CausalUseQuestion
  estimandRef: U.CausalEstimand
  targetCausalityLadderRung: CausalityLadderRung
  sourceCausalEvidenceSupportBasis?: CausalEvidenceSupportBasis
  structuralCausalModelRef?: StructuralCausalModelRef
  causalDiagramRef?: CausalDiagramRef
  causalGraphRepresentationKind?: CausalGraphRepresentationKind
  graphSeparationCriterionKind?: GraphSeparationCriterionKind
  causalInferenceCalculusKind?: CausalInferenceCalculusKind
  causalAssumptionSetRef
  availableDataRegimeSetRef: AvailableCausalDataRegimeSetRef
  realizedCounterfactualDataRefs?: RealizedCounterfactualDataRefSet
  counterfactualDataIdentificationMethodRef?: CounterfactualDataIdentificationMethodRef
  counterfactualDataBoundRef?: CounterfactualDataBoundRef
  causalBoundOrPartialIdentificationRef?
  falsificationOrNegativeControlRef?
  sensitivityAnalysisRef?
  rivalCauseStressTestRef?
  verdict: identified | nonidentified | bounded | unknown
  supportedUse
  unsupportedUse

Identification is inferential support. It is not direct physical sampling.

Realized counterfactual data may change an identification route, tighten a bound, or change which assumptions are still needed. When it does, the profile names the data refs, identification method, and bound ref that changed the result. It does not erase the distinction between identification and direct sampling; the profile must still state what is identified, bounded, unknown, or not identified.

Counterfactual Sampling Realizability Profile

CounterfactualSamplingRealizabilityProfile answers whether samples from a counterfactual-comparison target distribution can be physically obtained through admissible actions under physical, ethical, operational, unit-history, and graph constraints.

CounterfactualSamplingRealizabilityProfile:
  causalUseQuestionRef: U.CausalUseQuestion
  targetCounterfactualDistributionRef
  targetCausalityLadderRung: counterfactualComparisonRung
  structuralCausalModelRef?: StructuralCausalModelRef
  causalDiagramRef?: CausalDiagramRef
  causalGraphRepresentationKind?: CausalGraphRepresentationKind
  graphSeparationCriterionKind?: GraphSeparationCriterionKind
  causalInferenceCalculusKind?: CausalInferenceCalculusKind
  graphChildInterventionConstraintRef?
  sameUnitConflictCheck
  ancestorRegimeConflictCheck
  physicalConstraintSetRef
  ethicalConstraintSetRef
  operationalConstraintSetRef
  unitHistoryAvailabilityRef?
  counterfactualSamplingActionSetRef
  counterfactualRandomizationCapabilityRef?
  counterfactualSamplingWorkPlanRef?
  verdict: realizable | nonrealizable | bounded | unknown
  supportedUse
  unsupportedUse

Realizability is operational. It asks what work can be done, by which system, with which action primitives, under which constraints.

Applied Causal-Inference Profiles

Target-trial and potential-outcomes claims use TargetTrialProtocolRecord and U.PotentialOutcomeContrast when the causal-use claim is an applied intervention-effect claim.

TargetTrialProtocolRecord:
  causalUseQuestionRef: U.CausalUseQuestion
  targetPopulationRef?
  eligibilityCriteriaRef?
  treatmentStrategySetRef
  treatmentAssignmentProcedureRef?
  timeZeroAlignmentRef?
  causalFollowUpWindowRef
  outcomeMeasureRef
  potentialOutcomeContrastRef?
  estimandRef: U.CausalEstimand
  causalAnalysisPlanRef?

Target-trial emulation from observational data adds a mapping/reporting record. TargetTrialEmulationMappingRecord records the fit between the protocol and the observed data; TargetTrialProtocolRecord alone does not state emulation adequacy.

TargetTrialEmulationMappingRecord:
  targetTrialProtocolRef: TargetTrialProtocolRecord
  observationalDataSourceRef: ObservationalDataSourceRef
  eligibilityMappingRef: TargetTrialEligibilityMappingRef
  treatmentStrategyMappingRef: TargetTrialTreatmentStrategyMappingRef
  assignmentOrTimeZeroMappingRef: TargetTrialAssignmentOrTimeZeroMappingRef
  followUpMappingRef: TargetTrialFollowUpMappingRef
  outcomeMappingRef: TargetTrialOutcomeMappingRef
  emulationGapRef?: TargetTrialEmulationGapRef
  residualConfoundingAssessmentRef?: ResidualConfoundingAssessmentRef
  sensitivityOrAdditionalAnalysisRef?: TargetTrialSensitivityOrAdditionalAnalysisRef
  supportedEmulationUse: CausalUseSupportStatement
  unsupportedEmulationUse: CausalUseUnsupportedStatement

Numerical causal estimates use CausalParameterEstimationProfile when estimation validity is live:

CausalParameterEstimationProfile:
  estimandRef: U.CausalEstimand
  causalIdentificationProfileRef?
  estimatorRef
  nuisanceModelSetRef?
  orthogonalScoreRef?
  crossFittingPlanRef?
  positivityOrOverlapCheckRef?
  sensitivityAnalysisRef?
  uncertaintyIntervalRef?
  supportedEstimateUse
  unsupportedEstimateUse

Transported support uses CausalTransportabilityProfile:

CausalTransportabilityProfile:
  causalUseQuestionRef: U.CausalUseQuestion
  sourcePopulationRef
  targetPopulationRef
  sourceContextRef?
  targetContextRef?
  selectionDiagramRef?
  domainShiftAssumptionSetRef?
  transportFormulaOrBridgeRef?
  supportedTransportUse
  unsupportedTransportUse

Off-policy causal evaluation uses OffPolicyCausalEvaluationProfile when a policy is evaluated from data generated by another behavior or logging policy:

OffPolicyCausalEvaluationProfile:
  evaluationPolicyRef
  behaviorPolicyRef
  causalUseQuestionRef: U.CausalUseQuestion
  sequentialHorizonRef?: SequentialPolicyHorizonRef
  adaptivePolicyClassRef?: AdaptivePolicyClassRef
  unitHistoryConditioningRef?: UnitHistoryConditioningRef
  confoundingAssumptionSetRef?
  supportOrOverlapCheckRef?
  policyTransportabilityRef?: CausalPolicyTransportabilityRef
  offPolicyEstimatorRef?
  uncertaintyIntervalRef?
  supportedPolicyUse
  unsupportedPolicyUse

Causal representation learning uses CausalVariableRepresentationRecord when abstract causal variables are learned, selected, abstracted, or represented from fine-grained observations rather than given by the domain:

CausalVariableRepresentationRecord:
  causalUseQuestionRef?: U.CausalUseQuestion
  structuralCausalModelRef?: StructuralCausalModelRef
  causalVariableSetRef
  representationSourceRef
  abstractionOrSelectionMethodRef?
  interventionValidityRef?: CausalRepresentationInterventionValidityRef
  mechanismInvarianceRef?: CausalRepresentationMechanismInvarianceRef
  abstractionFidelityRef?: CausalRepresentationAbstractionFidelityRef
  counterfactualQueryPreservationRef?: CausalRepresentationCounterfactualQueryPreservationRef
  representationShiftRef?: CausalRepresentationShiftOrOODRef
  validationRef?
  supportedCausalVariableUse
  unsupportedCausalVariableUse

Causal Graph Representation Names

Use names that causal inference specialists can recognize:

CausalGraphRepresentationKind =
  causalDirectedAcyclicGraphRepresentation |
  acyclicDirectedMixedGraphRepresentation |
  singleWorldInterventionGraphRepresentation |
  structuralCausalModelTwinNetworkRepresentation |
  ancestralMultiWorldNetworkRepresentation |
  counterfactualGraphicalModelRepresentation

When graph separation or graphical calculus is part of the causal-use support, use controlled values rather than open prose:

GraphSeparationCriterionKind =
  dSeparationCriterion |
  mSeparationCriterion |
  singleWorldInterventionGraphSeparationCriterion |
  ancestralMultiWorldNetworkSeparationCriterion |
  counterfactualGraphSeparationCriterion

CausalInferenceCalculusKind =
  doCalculus |
  ctfCalculus |
  potentialOutcomeCalculus |
  gFormulaCalculus

CausalGraphRepresentationKind, GraphSeparationCriterionKind, and CausalInferenceCalculusKind are formal-support classification values, not minted model objects. They classify the formal support form being used for causal support. Concrete ...Ref fields point to actual models, diagrams, proof objects, assumptions, or epistemes and must be present when that formal support form is load-bearing. For example, StructuralCausalModelRef cites a concrete SCM object, while structuralCausalModelTwinNetworkRepresentation classifies a representation form.

StructuralCausalModel is the causal model kind with endogenous variables, exogenous variables, structural assignments, and intervention semantics. structuralCausalModelTwinNetworkRepresentation means the SCM twin-network representation used in counterfactual reasoning with shared exogenous variables. It is not a deep-learning twin network.

Acronyms such as SCM, DAG, ADMG, SWIG, and AMWN may appear as source/plain labels and bridge notes. FPF Tech values expand the source name when expansion reduces alias risk.

Causal Use Evidence Design

Use CausalUseEvidenceDesignRecord when the causal-use claim needs evidence planning, evidence graph support, experiment or quasi-experiment design, counterfactual randomization, mixed-design accountability, or simulation validation.

CausalUseEvidenceDesignRecord:
  causalUseQuestionRef: U.CausalUseQuestion
  targetCausalityLadderRung: CausalityLadderRung
  estimandRef?
  causalInterventionSpecRef?
  targetTrialProtocolRef?
  potentialOutcomeContrastRef?
  causalIdentificationProfileRef?
  causalParameterEstimationProfileRef?
  counterfactualSamplingRealizabilityProfileRef?
  causalTransportabilityProfileRef?
  causalVariableRepresentationRef?
  causalEvidenceSupportBasis: CausalEvidenceSupportBasis
  causalEvidenceWorkRefs?
  causalEvidenceRoleRefs?
  causalEvidenceMethodRef?
  causalEvidenceWorkPlanRef?
  structuralCausalModelRef?
  causalDiagramRef?
  causalGraphRepresentationKind?: CausalGraphRepresentationKind
  graphSeparationCriterionKind?: GraphSeparationCriterionKind
  causalInferenceCalculusKind?: CausalInferenceCalculusKind
  counterfactualGraphicalModelClassRef?
  causalAssumptionSetRef
  counterfactualModelAssumptionSetRef?
  simulationValidationRef?
  falsificationOrNegativeControlRef?
  sensitivityAnalysisRef?
  rivalCauseStressTestRef?
  decisionThresholdAffected?: yes | no | unclear
  causalEvidenceDecisionImpactRef?: CausalEvidenceDecisionImpactRef
  evidenceValueOrProbeWorthinessRef?: EvidenceValueOrProbeWorthinessRef
  causalEvidenceCostRiskRef?: CausalEvidenceCostRiskRef
  supportedUse
  unsupportedUse

This record does not replace [A.10](/generated/patterns/A.10) or [B.3](/generated/patterns/B.3). It gives them causal-use structure.

Higher-requirement causal evidence is worth planning only when it can change a choice, deployment decision, fairness consequence, assurance consequence, or benchmark conclusion enough to justify its cost, risk, and delay. If additional support would not change the next action, keep the narrower supported use explicit and stop.

Verdicts

CausalUseSupportVerdict is the action grammar:

  • supported means proceed only under the named supported use.
  • bounded means proceed only inside the named limit and record causalBoundedUseReason.
  • unsupported means downgrade the claim or remove causal use.
  • abstain means no causal-use conclusion and records causalAbstainReason.

No verdict is allowed to silently widen the claim beyond its evidence support basis.

Causal Action Policy Class

Use CausalActionPolicyClass when a decision, exploration policy, call plan, or agentic strategy depends on causal rung:

CausalActionPolicyClass =
  naturalBehaviorPolicy |
  interventionalPolicy |
  counterfactualPolicy
  • naturalBehaviorPolicy follows observed or natural behavior.
  • interventionalPolicy chooses an action or do(x).
  • counterfactualPolicy acts conditioned on natural action, unit history, or counterfactual response.

This distinction matters for [C.11](/generated/patterns/C.11), [C.19](/generated/patterns/C.19), and [C.24](/generated/patterns/C.24); it does not make those patterns the authority for causal evidence, identification, or realizability.

CausalActionPolicyClass is a classification value for policy-use class: natural behavior, interventional action, counterfactual policy, mixed policy, or unknown policy. It is not the policy object, not U.Policy, not [C.19](/generated/patterns/C.19) pool policy, and not the executable policy used by an agent.

Local U.* Docking

U.CausalUseQuestion names the question whose answer would make a causal use admissible: association use, intervention-effect use, counterfactual-comparison use, causal fairness use, causal policy use, causal evidence support use, causal assurance use, or causal parity use. It governs the question-to-use relation, not the evidence path, estimator, policy object, graph object, or local neighbor pattern.

U.CausalEstimand names the target quantity, contrast, distribution, or functional answer shape for a U.CausalUseQuestion. It binds the question to what would have to be estimated, identified, sampled, bounded, or emulated. It is not the estimator, not the observed metric, not the graph, not the policy object, and not the support verdict.

The card/profile family docks to those heads this way: triage decides whether a U.CausalUseQuestion is live; local and durable cards stabilize the question, U.CausalEstimand, and supported use and unsupported use boundary; profiles and specialized records state what support basis, formal support form, operational work, assumptions, and admissible use the question-estimand pair can carry.

Local name cards:

NameKindPlain senseMust not mean
U.CausalUseQuestionquestion object for causal-use admissibilitythe question-to-use object stabilized by triage/local/durable cards before a claim is used causallya whole research project, evidence path, graph, estimator, policy object, or neighboring-pattern application
U.CausalEstimandtarget causal quantity, contrast, distribution, or functionalthe answer-shape object linked to a U.CausalUseQuestion before estimation, identification, sampling, bounding, or emulation is judgedestimator, metric reading, support verdict, policy object, or causal graph

Lexical tripwires:

PhraseUse instead when load-bearing
"causal evidence"name CausalEvidenceSupportBasis, A.10 evidence path refs, CausalUseSupportRecordRef, and CausalUseSupportStatement / CausalUseUnsupportedStatement
"counterfactual data"distinguish realized counterfactual data refs, realizedCounterfactualSampleSupportBasis, identifiedCounterfactualEstimateSupportBasis, and simulationOnlyCounterfactualOutputBasis
"policy optimality"name causalPolicyClaim, CausalActionPolicyClass, OffPolicyCausalEvaluationProfile, CausalUseSupportStatement, and unsupported unqualified optimality
"fairness evidence"distinguish metric/evaluation fairness from causalFairnessClaim with rung, estimand, support basis, support record and verdict, and supported fairness use and unsupported fairness use
"method improves"name whether the claim is association, intervention effect, counterfactual comparison, or parity result, then name rung, support basis, and supported use and unsupported use
"what would have happened"name counterfactual comparison support, realized counterfactual sample support, identified estimate support, or simulation-only bounded model use

Neighbor Routing Table

If the issue under repair is...Use...C.28 role
measured value, score, scale, indicator, or metric definitionC.16Only active when the measure is used causally.
temporal trend, rate, acceleration, inertia, or rhythm wordingC.27Active when temporal wording is used as causal effect or intervention evidence.
evidence graph reference or provenanceA.10Carries evidence/provenance path and C.28 support-basis refs, not causal-use support authority.
assurance level, degrade, abstain, or trust or assurance resultB.3Consumes C.28 support verdicts and applies assurance consequences.
local decision among optionsC.11Provides causal action-policy hooks when value/regret/optimality depends on causal rung.
exploration/exploitation over live poolsC.19Provides causal data-collection or causal policy-learning hooks when live.
tool/call/enactment planC.24Provides optional causal action use spec when the call selects observation, intervention, counterfactual-rung evidence collection, or counterfactual policy conditioning.
bias and fairness auditD.5Provides causal fairness rung and supported fairness use.
method dispatch or selector-facing registryG.5Provides causal method/policy class declarations when causal methods are compared.
benchmark or method parityG.9Provides causal method rung parity.
quantum-like modeling cueC.26Receives only the residual QL cue after causal-use explanation has been tried.

Non-Goals

C.28 does not:

  • define physical causation or decide what causation is in the modeled world;
  • choose one causal school, such as SCM/PCH, potential outcomes, target-trial emulation, transportability, causal ML, causal RL, or causal fairness, for all FPF use;
  • certify a DAG, SCM, SWIG, AMWN, or other graph as true or sufficient causal support by naming it;
  • replace local domain science, domain intervention definitions, outcome definitions, or substantive rival-cause knowledge;
  • replace C.16 measurement and metrics characterization, including metric construction, calibration, and non-causal score interpretation;
  • replace A.10 evidence graph referring, provenance paths, evidence-role carriers, or evidence graph path discipline;
  • replace B.3 trust and assurance calculus, assurance tuples, F-G-R/CL consequences, or assurance publication use;
  • replace D.5 bias audit and ethical assurance, causal-fairness audit responsibility, or human/group-impact review;
  • replace G.9 parity benchmark harness, causal-rung parity screen, or benchmark report structure;
  • replace C.11 choice, C.19 exploration/exploitation policy, or C.24 call-planning patterns; it only supplies causal-use support boundaries consumed by those patterns.

Cheap Downgrade Library

Use a downgrade sentence when a narrower admissible use is enough:

Each sentence below is an admissible cheapStop wording. It closes the causal-use question for the named insufficient-support case unless the author keeps a publish, choose, deploy, assure, audit, benchmark, or support-treatment use that commits the text beyond the cheapStop boundary alive.

CaseAdmissible downgrade wording
association-only case"Observed association only; supported use = association report; unsupported use = intervention-effect claim."
temporal-change-only case"Temporal change or trend is recorded; supported use = temporal/rate description; unsupported use = causal-effect claim until a causal-use support basis is named."
simulation-only case"Simulation-only counterfactual output; supported use = bounded model-supported exploration or explanation; unsupported use = realized counterfactual sample evidence or intervention-effect claim."
metric-only fairness case"Metric disparity or metric improvement is recorded; supported use = metric-level fairness or disparity report; unsupported use = causal fairness claim without a causal rung, estimand, support basis, and supported fairness use."
logged-policy bounded case"Logged-policy evidence supports only the declared behavior-policy and evaluation-policy regime; supported use = bounded off-policy evaluation under named overlap/transportability limits; unsupported use = unqualified optimal-policy claim."
cross-rung benchmark case"Methods answer different causal rungs or support bases; supported use = publish bridge and loss, degraded parity, or abstain; unsupported use = one scalar causal winner."

CausalUseBureaucracySniffTest

CausalUseBureaucracySniffTest keeps a causal-use carrier only when it changes the admissible next action or blocks a concrete overclaim. Keep the causal-use record only when at least one answer is "yes":

QuestionIf no
Did the record change the next action?Remove fields until only the action-changing line remains.
Did it block a concrete causal overclaim by naming the causal use governed by C.28 as unsupported?Use association, trend, simulation-only, or metric-only wording and stop.
Did it support one concrete decision, evidence-work, fairness, assurance, benchmark-parity, or deployment move by changing supportedUse or unsupportedUse?Keep the neighboring pattern and do not open a durable causal-use object.
Was there a cheaper nextMove.cheapStop that preserved the same admissible use boundary?Use the cheaper stop.
Is the problem only the word "causal" or "counterfactual", rather than an admissible causal use?Repair wording locally or apply the neighboring language or authoring pattern.

PublicationUnit Stability Relation

When the live problem is only local wording pressure inside one PublicationUnit, local lexical-head repair under E.17.AUD.LHR, whole-unit primary entity-of-concern stabilization under E.17.AUD.OOTD, relational precision restoration, explanation faithfulness, or conservative retextualization, apply the governing publication-side FPF pattern rather than C.28. C.28 opens at CausalUseActivation, when the wording makes publication, choice, deployment, assurance, audit, fairness, policy, or benchmark use depend on causal support.

Causal-Laundering Golden Cases

CaseExpected C.28 output
Association laundering: "users who received X improved, so X works."rung = observationalAssociationRung; support basis = observationalAssociationSupportBasis; supported use = association report; unsupported use = intervention-effect claim.
Intervention overclaim: "we changed X once, so the policy will work everywhere."rung = interventionalActionRung; support basis = interventionalActionSupportBasis inside assignment, context, follow-up, and transportability limits; unsupported use = cross-population or unbounded policy claim.
Simulation laundering: "the simulator shows what would have happened."claim kind = relevant existing CausalUseClaimKind; support basis = simulationOnlyCounterfactualOutputBasis; supported use = bounded model-supported use; unsupported use = realized counterfactual sample or intervention-effect evidence.
Metric-only fairness laundering: "fairness improved because the metric improved."supported use = metric-level fairness/disparity report; unsupported use = causal fairness claim unless causalFairnessClaim, rung, estimand, support basis, and supported fairness use are declared.
Policy replay overclaim: "logged replay says this policy is optimal."claim kind = causalPolicyClaim; support basis = off-policy causal evaluation with behavior-policy refs and evaluation-policy refs and overlap checks and support checks; supported use = bounded policy evaluation; unsupported use = unqualified optimality.
Cross-rung benchmark: "method A beats method B as a causal method."claim kind = causalBenchmarkParityClaim; use G.9 CausalRungParityScreen; supported use = within-rung parity or declared bridge and loss; unsupported use = one scalar causal winner when rungs/support bases differ.
Temporal-cause wording: "after launch, recovery got faster, so launch caused resilience."supported use = C.27 temporal/rate adequacy; unsupported use = causal-effect claim until C.28 names intervention timing, outcome window, assumptions, rival causes, and support basis.
QL escape: "ordinary probability is hard here, so the effect is quantum-like."supported use = causal-use triage and ordinary-neighbor explanation first; unsupported use = bypassing C.28 with quantum-like vocabulary; C.26 is retained only for residual quantum-like probe, frame, order, export, or coarsening issue.
Target-trial name-drop: "we emulate a trial, so the effect is identified."supported use = target-trial claim only with protocol plus emulation mapping, data source, assignment and time-zero, follow-up and outcome mapping, residual confounding, and sensitivity analysis and additional analysis; unsupported use = identification claim by target-trial label alone.
Realized-counterfactual-data claim: "we observed both outcomes for the same unit."supported use = samples from the declared target counterfactual distribution under the realizability profile's constraints; unsupported use = same-world incompatible-outcome wording for one unit.

Archetypal Grounding

Tell. A causal-use claim is a promise about what a reader may do with a result. The claim is safe only when the rung, contrast, support basis, and allowed use are named.

Show (System). A product team observes that users who received an intervention had better outcomes. C.28 first records an observational association unless the team can name an interventional-action design, target trial protocol, identification profile, or evidence design that supports intervention-effect use. If the team only has observational association, the next move is to publish association or build evidence, not to claim causal improvement.

Show (Episteme). A fairness report says one model is fair because a metric improved after a policy change. C.28 asks whether the fairness claim is associative, interventional, or counterfactual. If it is interventional-action-rung only, it cannot be published as counterfactual fairness without identification or realizability support.

Show (Policy). A team wants to deploy a causal policy learned from logged behavior data. C.28 records causalPolicyClaim, interventionalActionRung or counterfactualComparisonRung as appropriate, CausalActionPolicyClass, OffPolicyCausalEvaluationProfile, support/overlap checks, uncertainty, supported policy use, and unsupported policy use. If the behavior policy cannot support the target policy, the admissible output is bounded use or abstain rather than "the policy is optimal".

Show (Causal RL). An online learner uses behavior-policy logs and counterfactual data-fusion to choose a treatment, ranking, or action policy. C.28 records the natural behavior policy, evaluation policy, CausalActionPolicyClass, target rung, confounding/support assumptions, OffPolicyCausalEvaluationProfile, uncertainty, supported policy use, and unsupported policy use. The learner may publish bounded causal policy support only for the declared regime; it must not turn replay reward, exploration success, or counterfactual strategy output into an unqualified optimal-action claim.

Show (Evidence Work). A lab can physically run a counterfactual-rung sampling procedure by assigning compatible action regimes to matched units under ethical and operational constraints. C.28 separates CounterfactualSamplingRealizabilityProfile from CausalIdentificationProfile: the realized sampling work becomes U.Work with evidence carriers and guards, while identification remains the inferential route from assumptions, graph, calculus, and available data.

Show (Simulation-Only). A simulator produces "what would have happened" traces for a rollout decision. C.28 can allow useful model-supported use without calling the traces realized counterfactual-rung evidence: the record uses simulationOnlyCounterfactualOutputBasis, names counterfactualModelAssumptionSetRef, simulationValidationRef, supported simulation use, and unsupported use. The output may support rehearsal, sensitivity exploration, or model-based explanation inside declared limits; it does not support direct counterfactual sample wording or intervention-effect publication by vocabulary alone.

Show (Benchmark). A benchmark compares one observational predictor, one intervention optimizer, and one counterfactual strategy. C.28 does not ban the comparison, but it requires CausalMethodRungParityRecord through G.9: if rung, estimandRef, interventional-action basis, support basis, consumed C.28 support record and verdict, transportability, follow-up window, and estimation-validity basis are not comparable, the benchmark publishes bridge and loss relation, degraded use, or abstain instead of one superiority claim.

Bias-Annotation

C.28 is mainly a causal-discipline and anti-overclaim pattern for decision-bearing causal use. One part of that work is catching language laundering, but the larger job is to keep causal reasoning, evidence design, realizability, policy evaluation, fairness use, and benchmark parity from silently borrowing a C.28 support basis, support verdict, or admissible-use value they do not actually have.

Common biases:

  • Causal prestige bias. A result sounds more important when phrased causally, so under-supported evidence gets overused.
  • Simulation laundering. A simulated counterfactual is treated as observed or realized counterfactual-rung evidence.
  • Metric proxy bias. A fairness or performance proxy is treated as a causal result without rung and estimand.
  • Benchmark scalarization bias. A method comparison collapses different causal rungs, estimands, or transport assumptions into one score.
  • Graph sufficiency bias. A named graph is treated as enough without assumptions, data regime, calculus, and admissible use.

The repair is not to ban causal language. The repair is to recover the live causal question, choose the least-committing admissible causal use supported by the available evidence, and then either downgrade, bound, design a causal-evidence plan with the required C.28 support basis, open identification or realizability work, or abstain.

Conformance Checklist

CheckRequirement
CC-C28-0 Triage-only useFor triage-only use, causality-ladder rung is named or causal use is declined, supported use and unsupported use is named, and a causal-use claim beyond triage is not implied.
CC-C28-1 Causality-ladder rung declarationEvery causal-use claim declares its target causality-ladder rung: observational association question, interventional action/effect question, or counterfactual comparison question.
CC-C28-2 Durable causal estimand disciplineEvery durable interventional/counterfactual-rung causal-use claim names causal-use question, comparator or counterfactual, estimand, assignment or intervention window, follow-up window, outcome measure, assumptions, rival causes, and supported use and unsupported use.
CC-C28-3 No unsupported causality-ladder climbA claim at interventional-action or counterfactual-comparison rung is not supported only by lower-rung causality-ladder data unless CausalIdentificationProfile, CounterfactualSamplingRealizabilityProfile, or bounded-use treatment is cited.
CC-C28-4 Realizability is not identificationCausalIdentificationProfile and CounterfactualSamplingRealizabilityProfile remain distinct. One supports inference from other data; the other supports direct sampling through feasible physical actions.
CC-C28-5 Counterfactual data collection is workAny realized counterfactual-rung-data procedure is represented as U.Work enacted by U.System under RoleAssignment, with MethodDescription, WorkPlan, evidence carriers, and physical, ethical, and operational guards.
CC-C28-6 Verdicts are action grammarsupported, bounded, unsupported, and abstain each change what the reader may do next.
CC-C28-7 No durable-card defaultEscalate from triage to local card to durable card and profiles only when the claimed use triggers the durable causal-use object.
CC-C28-8 Heavy causal-use object payoffEvery selected heavy field or check changes a reader action, blocks a specific overclaim, or supports a concrete evidence and assurance/fairness/parity decision.
CC-C28-9 Semantic-authority splitC.28 governs causal-use value sets, identification profiles and realizability profiles, graph naming and calculus naming, and support verdicts; neighbors may consume or quote them but must not define competing causal-use value sets.
CC-C28-10 Simulation-only bounded useSimulation-only output may support bounded model-supported use, but it never becomes interventional evidence or realized counterfactual sample evidence by vocabulary, validation, or role relabeling alone.
CC-C28-11 Decision-economics of evidenceA causal-evidence plan for deployment, assurance, audit, benchmark, policy, fairness, or support-treatment use names the decision threshold, evidence value or probe-worthiness, and cost/risk condition when escalation is not already mandatory by safety, release, or assurance constraints.

Common Anti-Patterns and How to Avoid Them

Anti-patternSymptomRepair
Fill-all-cards defaultEvery mention of "cause", "effect", or "counterfactual" triggers a durable dossier.Start with CausalUseTriageRecord; escalate only when the claimed use requires it.
Causal certification theaterEvery field is filled, but no reader action, evidence design, downgrade, or unsupported use changes.Remove fields or downgrade their claim-use until each remaining field changes a decision or blocks an overclaim.
Association as intervention"Users who received intervention X did better" is published as effect of X without action/assignment support.Publish association or build identification/evidence design.
Interventional proxy as counterfactual fairnessA policy-change metric is called counterfactual fairness.Declare interventional-action rung unless counterfactual estimand plus identification or realizability is present.
Simulation as realized counterfactual sampleModel output is described as realized counterfactual-rung support without direct sampling or validation.Use simulationOnlyCounterfactualOutputBasis and name supported model use and unsupported model use.
Graph-only causalityA DAG or SCM diagram is treated as sufficient support.Add assumptions, data regime, graph representation kind, calculus, and admissible use.
Cross-rung benchmarkMethods are compared as peers while one answers association, another intervention, and another counterfactual comparison.Use CausalMethodRungParityRecord and degrade or abstain when parity is absent.
QL escapeCausal confusion is rebranded as quantum-like because ordinary probability feels hard.Use C.26 only after causal-use explanation and ordinary FPF neighbors have done their work.

Consequences

C.28 makes causal use slower only when the claim commitment, consequence risk, or evidence demand warrants it. Cheap causal triage remains cheap.

Positive consequences:

  • Causal claims become inspectable by rung, support basis, and admissible use.
  • Counterfactual sampling realizability becomes operational rather than merely philosophical.
  • Identification and realizability no longer collapse.
  • Fairness, policy, and benchmark claims stop borrowing causal force beyond what their evidence supports.
  • Neighbor patterns receive narrow causal hooks without becoming general causal authorities.

Costs:

  • Authors must learn a small causal vocabulary.
  • Some attractive claims will be downgraded to association, bounded use, simulation-only, or abstain.
  • Higher-rung claims need more evidence, assumptions, or work-plan detail.

The cost is intended. It is cheaper than publishing an unsupported causal use.

Rationale

FPF needs this pattern because causal language changes what a reader may do.

Temporal language can say that something changed. Measurement language can say that a score is higher. Assurance language can say that evidence has more or less support. None of those alone says that an action caused a result, that a counterfactual comparison is supported, or that a causal policy should be deployed.

C.28 therefore uses a semantic-authority split:

  • C.28 governs causal-use question, rung, estimand, identification, realizability, causal evidence support basis, and causal-use verdict.
  • Neighbor patterns keep their own authority and cite C.28 only when causal use is live.
  • C.26 receives a causal exit: intervention, causal effect, causal fairness, causal policy, and counterfactual-rung-data realizability are ordinary causal-use questions before they are quantum-like modeling questions.

The pattern is not Pearl-only. SCM/PCH provides the rung discipline, but potential outcomes, target-trial emulation, causal ML estimation, transportability, causal representation learning, causal RL, and causal fairness all change the fields that FPF must preserve.

SoTA-Echoing

SoTA claimPractice implicationSource anchorsFPF adoption
Causal reasoning separates seeing, doing, and imagining.A claim must declare CausalityLadderRung before support is judged.Pearl/SCM/PCH: On Pearl's Hierarchy and the Foundations of Causal Inference.Adopted as observationalAssociationRung, interventionalActionRung, counterfactualComparisonRung.
Lower-rung data generally underdetermines higher-rung questions.No unsupported causality-ladder climb.Pearl causal hierarchy and identification tradition: On Pearl's Hierarchy and the Foundations of Causal Inference.Adopted as CC-C28-3.
Counterfactual sampling realizability is operational and partial.Some counterfactual-rung distributions can be directly sampled; some cannot; some are bounded.Raghavan and Bareinboim: Counterfactual Sampling Realizability, technical report.Adopted as CounterfactualSamplingRealizabilityProfile.
Counterfactual randomization is U.Work over an SCM with action primitives.Realized counterfactual-rung data collection needs U.Work, action primitives, graph constraints, and guards.Forney, Bareinboim, Pearl: Counterfactual Randomization.Adopted as CC-C28-5 and evidence-design fields.
Counterfactual data can change what is identifiable or bounded.Identification profiles must make realized counterfactual data, identification methods, and bound changes explicit rather than treating all data regimes as one scalar source.Raghavan and Bareinboim: Counterfactual Sampling Realizability; Forney, Bareinboim, Pearl: Counterfactual Randomization.Adopted as availableDataRegimeSetRef, realizedCounterfactualDataRefs, counterfactualDataIdentificationMethodRef, and counterfactualDataBoundRef.
Counterfactual graphical models require named graph forms and calculus.Graph form, separation criterion, and calculus must be visible for counterfactual support.Yang and Bareinboim: A Hierarchy of Graphical Models for Counterfactual Inferences; Correa and Bareinboim: Counterfactual Graphical Models.Adopted as CausalGraphRepresentationKind, GraphSeparationCriterionKind, and CausalInferenceCalculusKind; doCalculus and ctfCalculus are controlled calculus values, not free-form hooks.
Potential outcomes and target-trial emulation operationalize intervention-effect claims.Applied intervention claims need target population, eligibility, treatment strategies, assignment/time-zero, follow-up, outcome, contrast, estimand, and analysis plan.Rubin: Estimating Causal Effects of Treatments; Hernan/Wang/Leaf: Target Trial Emulation.Adopted as U.PotentialOutcomeContrast and TargetTrialProtocolRecord.
Target-trial emulation from observational data needs mapping and reporting, not only protocol naming.Eligibility, strategies, assignment and time-zero, follow-up, outcomes, residual confounding, and sensitivity analyses and additional analyses must be mapped from observational data to the target trial.Hernan/Wang/Leaf: Target Trial Emulation.Adopted as TargetTrialEmulationMappingRecord.
Causal ML estimation is not the same as identification or prediction.Estimator, nuisance models, orthogonal score, cross-fitting, overlap/positivity, sensitivity, and uncertainty must be visible when estimation validity is claimed.Chernozhukov et al.: Double/debiased machine learning for treatment and structural parameters.Adopted as CausalParameterEstimationProfile.
Causal support may not transport across populations or domains without assumptions.Source and target populations/contexts, selection diagrams, domain-shift assumptions, and transport formula/bridge must be named.Pearl and Bareinboim: Transportability of Causal and Statistical Relations.Adopted as CausalTransportabilityProfile.
AI causal work often cannot assume causal variables are already given.Learned or selected causal variables need a representation record.Scholkopf et al.: Toward Causal Representation Learning.Adopted as CausalVariableRepresentationRecord.
Causal representation support depends on intervention validity, invariance, abstraction fidelity, query preservation, and shift handling.A learned representation must not silently become a causal variable for every query or domain.Scholkopf et al.: Toward Causal Representation Learning.Adopted as causal representation validation hooks in CausalVariableRepresentationRecord.
Sequential causal games and causal RL make counterfactuality policy-relevant.Natural behavior, interventional, and counterfactual policies, sequential horizons, adaptive policies, unit-history conditioning, and transportability must be distinguished.Maiti and Bareinboim: Sequential Causal Games; Bareinboim/Forney/Pearl: Bandits with Unobserved Confounders; Forney/Pearl/Bareinboim: Counterfactual Data-Fusion for Online Reinforcement Learners.Adopted as CausalActionPolicyClass and OffPolicyCausalEvaluationProfile hooks.
Causal fairness is not only metric choice.Fairness claims must declare causal rung, path/estimand where live, and supported fairness use.Plecko and Bareinboim: Fairness-Accuracy Trade-Offs: A Causal Perspective.Adopted through D.5 relation and CausalFairnessUseAuditCard.

Relations

  • C.16 governs measurement and metrics. C.28 activates only when a measurement is used causally.
  • C.27 governs temporal claim adequacy. C.28 activates when temporal change is used as causal effect, intervention evidence, or counterfactual comparison.
  • A.10 governs evidence graph referring. C.28 supplies causal evidence support basis and causal-use support refs for evidence paths.
  • A.2.4 governs evidence roles. C.28 requires the evidence-role distinctions that keep simulationOnlyCounterfactualOutputBasis, identifiedCounterfactualEstimateSupportBasis, interventional evidence, and realizedCounterfactualSampleSupportBasis from being confused.
  • A.6 / A.6.B / A.6.C govern boundary, deontic, promise, commitment, utterance, contract-language, and L/A/D/E-classified claim language. C.28 supplies only causal-use support when mixed boundary sentences claim causal effect or counterfactual support.
  • A.15 governs role, method, plan, and work alignment. C.28 supplies the causal-use semantics for intervention assignment, target-trial emulation, counterfactual sampling work, and causal evidence collection.
  • B.3 governs trust and assurance. C.28 supplies the causal-use verdict that B.3 can degrade, bound, or abstain over.
  • C.11 governs decision theory. C.28 supplies causal-use question and causal action-policy class when value, utility, regret, or optimality depends on causal rung.
  • C.19 governs explore/exploit pool policy. C.28 supplies causal rung and policy/regime fields when exploration collects causal data or learns causal policy.
  • C.24 governs agentic tool use and call planning. C.28 supplies causalActionUseSpec when calls select observation, intervention, counterfactual-rung evidence collection, or counterfactual policy conditioning.
  • D.5 governs bias audit and ethical assurance. C.28 supplies causal fairness rung, estimand, support, and supported fairness use.
  • G.5 governs method dispatch and MethodFamily registry. C.28 supplies causal method or policy class declarations when method dispatch compares causal methods.
  • G.9 governs parity and benchmarks. C.28 supplies causal method rung parity.
  • G.11 governs refresh orchestration. C.28 supplies causal-use support records whose realizability, identification, fairness, representation, off-policy, target-trial, and simulation-validation shifts can trigger refresh.
  • C.26 governs quantum-like modeling. C.28 is a required causal exit before QL retention when the question under repair is intervention, causal effect, causal fairness, causal policy, counterfactual comparison, or counterfactual-rung-data realizability.

C.29 mathematical-lens use relation

C.29 may document that a mathematical mapping appears abstraction-like, quotient-like, coarse-graining-like, simulation-like, or macro-model-like. It does not decide causal-use support. When the supported use includes intervention, policy, counterfactual, causal explanation, or causal decision, apply C.28; otherwise record CausalUseDisposition = noCausalUseClaim or causalUseBlocked.

C.28:End

Mathematical Lens Use

Type: Architectural pattern Status: Stable Normativity: Normative unless explicitly marked informative

Plain-name. Mathematical lens use.

Primary EntityOfConcern. C.29 concerns a declared mathematical-lens use for a stated phenomenon, EntityOfConcern, relation, claim, or structure-bearing situation. The use names the mathematical object, formalism, learned representation, simulation object, local formal role, or mathematical family; the mapping mode; the preserved structure; the lost structure; the visible payoff or obstruction; the admissible use; the non-admissible use; and the stop condition. FPF-governed wording, pattern examples, method notes, review records, PublicationUnits, decision-facing text, comparison-facing text, bridge-facing text, and assurance-input text can contain or cite that use, but they are not the primary EntityOfConcern of C.29.

Slot discipline. C.29 uses CandidateMathObject for the mathematical object, formalism, learned representation, simulation object, local formal role, or family in a declared mathematical-lens-use relation. U.Signature(profile=FormalSubstrate) in A.6.0 is a different relation position: it declares vocabulary, laws, imports, and applicability for a formal substrate. A.6.1 governs mechanism import or realization when that formal substrate is used in a mechanism; E.18.1 governs P2W transduction when accepted problem-side material needs that formal declaration for later work. The same mathematical object may appear in several of these positions, but the governing pattern is selected by relation position and claim being made, not by the word substrate.

Output boundary. C.29 outputs are lens-use notes, one-line entries, mini-cards, full cards, and neighboring-pattern notes. They state which declared mathematical-lens use is admissible, what remains blocked, and which neighboring FPF pattern governs any non-lens claim being made. Project approval, work, evidence, assurance, decision, or release use must be recorded through the governing pattern for that use.

No new U.* from C.29 local lens-use outputs. MathLensUse.OneLine, MathLensUse.MiniCard, MathLensUse.FullCard, MathLensUse.Card@Context, MathLensUseOutputRef, and CC-C29-* are C.29-local instruments. They do not mint U.MathLens, U.MathLensUseRecord, LensKind, MathLensUseCompliance, or a durable record family. Durable names, kinds, or records require explicit FPF admission through F.18, C.3, F.8, and E.9.

First-use card

Use this card before the full card. It is enough for the first use pass unless publication, bridge, assurance input, benchmark, model selection, prediction, formal pattern claim, or repeated cross-case use is being made.

First questionRequired answer before claim-bearing lens use
Is the mathematical phrase changing the next admissible move, or only helping recognition?If no move changes, keep ordinary prose or write NoMathLensUseNeededNote.
What phenomenon is being seen through the lens?Name TargetPhenomenon in problem-owning language.
What concrete mathematical object, formal role, learned representation, simulation object, or local formalism is being used?Name CandidateMathObject; broad family names are prompts only.
What structure is preserved?Name PreservedStructure.
What structure is lost or deliberately ignored?Name LostStructure; empty loss needs equivalence or isomorphism justification.
What tempting inference does this lens not license?Name StopCondition; no stop condition means no admissible C.29 result.

Start with the useful lens decision: choose, apply, bound, replace, or remove a mathematical lens when the mathematical structure changes explanation, decision, prediction, comparison, publication, bridge, assurance input, reusable transfer, or the next admissible repair. If no next admissible move changes, keep ordinary prose or write NoMathLensUseNeededNote. If state, transition, measurement, causal use, bridge semantics, temporal adequacy, assurance, selector, benchmark, or release is the claim being made, apply the governing FPF pattern and keep C.29 to the mathematical-lens use part.

Problem frame

FPF already uses mathematical structures in several local patterns. A.6.P asks for stable mathematical substrate during relation precision restoration; A.3.3 governs dynamics; A.19 governs characteristic spaces and structural overlays; C.18.1 and C.19.1 govern scale-law and Bitter-Lesson claims; C.26 contains the separation of a quantum-like lens from physical quantum ontology; F.9 governs cross-context bridges and loss.

The positive need is as important as the guard. In working projects, first-principles mathematical thinking starts from the smallest declared structure that can make a next move derivable, inspectable, or honestly blocked. A queue can expose waiting and bottlenecks, a state space can expose variables and transitions, a graph can expose dependencies, a metric-space distance or topology can expose comparability limits, a symmetry can expose invariants, a variational principle or constrained optimization functional can expose an extremal condition, admissible variation space, boundary condition, conservation link, or trade-off, an information or probability measure can expose uncertainty, a resource bound can expose realizability limits, and an obstruction can expose where a transfer or simplification stops.

The missing FPF rule is general but narrow: when FPF-governed wording, a pattern example, method note, review record, PublicationUnit, or neighboring-pattern note uses or plausibly needs a mathematical object, formalism, or family for explanation, decision, prediction, comparison, publication, bridge, assurance input, or reusable application, the C.29 application records the useful first-principles modeling structure and its boundary. It names the candidate mathematical object or family, what structure is preserved, what structure is lost, what invariant, admissible distinction, obstruction, diagnostic boundary, or constructive limit becomes visible, which LensUseAdmissibilityValue value is declared for that use, and where the mathematical-lens use stops.

A C.29 application is justified when a mathematical object is used for explanation, decision, prediction, comparison, publication, bridge, assurance input, or reusable transfer, or when a stable working problem is under-lensed and a cheap candidate lens could expose useful structure for the next move. Mathematical appearance alone is not enough.

The first move is not a full-card demand. It is a first-principles entry decision: choose the smallest mathematical structure that changes the next admissible move, keep ordinary prose when no mathematical structure changes the move, or apply the governing FPF pattern when the claim being made is outside the declared lens use. The result records what the lens preserves, what it loses, what it makes visible, what remains blocked, and where the use stops.

Selected compact formulation:

A useful mathematical lens is compression with invariants and declared losses.

This compact line is retained as a Plain-register orientation, not as a substitute for the card. It keeps the useful metaphor of a lens: a mathematical object can make a hidden structure visible, but only by carrying some structure and dropping other structure. The first practitioner questions are: what survives the transfer, what is lost, what can now be done, and where does the lens stop?

First-minute working situation

A practitioner applying FPF faces a working situation where ordinary prose can hide useful structure, or where a mathematical phrase is already doing work:

  • waiting, backlog, bottleneck, or throughput can call for a queue or flow lens;
  • state change, stabilization, control pressure, or forecast can call for state-space or dynamics vocabulary;
  • dependency, interface, composition, or transfer failure can call for graph, hypergraph, category, operad, or compositional vocabulary;
  • similarity, distribution shift, population movement, or shape change can call for metric-space distance, topology, embedding, or optimal-transport vocabulary;
  • scale transition, coarse behavior, universality, knee, or scaling pressure can call for coarse-graining, RG, or scaling-law vocabulary;
  • probe effects, order effects, context effects, or incompatible frames can call for quantum-like or contextual-probability vocabulary.

The useful first-minute intuition is not “hunt for overclaim.” It is “find the structure that would improve the next move, then name the limits.” A vivid phrase can remain when the C.29 output records what the lens makes visible, what it does not license, and which governing pattern governs any causal, evidence, bridge, dynamics, scale, measurement, assurance, or release claim.

Without a general lens-use discipline, the reader cannot tell whether the phrase is a bounded structure-preserving representation, an analogy-only prompt, an unsupported ontology import, a local domain model, or prestige language.

Minimum scenario and anti-case set

Positive scenario. A production line is represented as a queueing network. The lens preserves flow, bottlenecks, service rates, and waiting times; it loses human meaning, contractual obligations, rare failure modes, and causal interventions not represented by the network; the stop condition says that the queueing lens is admissible for throughput and latency reasoning, not a full organizational ontology.

Anti-case. “The organization is a quantum system” is written without a candidate mathematical object, probe distinction or readout distinction, preserved structure, lost structure, LensUseAdmissibilityValue, or stop condition. The C.29 result is either a downgrade to local metaphor or a repaired use through C.29 and, where relevant, C.26.

Under-lensed anti-case. “The work stream has dynamics” or “this portfolio is a network” is used for a diagnosis that affects prediction, comparison, repair, or stop conditions, but no mathematical object changes what can be predicted, compared, diagnosed, repaired, or stopped. The repair is to choose a cheap candidate lens that exposes useful structure, or keep the sentence as ordinary prose.

False-positive scenario. A Markov kernel appears inside accepted local reliability modeling. If no contested lens-transfer, publication, assurance, bridge, or reusable explanation claim is being made, the claim stays under A.3.3 and does not require a C.29 output.

Intended FPF use-value

C.29 gives a cheap use path before any full card or boundary table. Its first job is to help the working reader introduce, choose, repair, bound, or decline a mathematical lens by selecting the cheapest honest output: no C.29 output, a candidate note, a one-line repair, a mini-card, a full card when high-reliance use requires it, or a neighboring-pattern note when the claim being made is outside declared mathematical-lens use. Use it only when the mathematical lens affects a claim or next move; ordinary local math and decorative prose stay outside C.29. A successful C.29 result makes useful mathematical compression available to FPF as a disciplined modeling move while reducing ontology smuggling, prestige vocabulary, loss-free transfer, causal laundering, bridge duplication, evidence laundering, and assurance laundering.

Problem

Accepted FPF mathematical-lens use criteria are distributed and local:

  • A.6.P governs relation precision restoration, but not every mathematical-object transfer.
  • A.3.3 governs state, transition, observation, validity, constraints, and calibration for dynamics, but not all mathematical representation choices.
  • A.19 governs characteristic spaces, structural overlays, comparability, normalization, and bridge-aware state comparison, but not the adequacy of all mathematical lenses.
  • C.18.1 and C.19.1 govern scale-law and BLP claims, but not non-scale mathematical lenses.
  • C.26 is the local precedent for mathematical-lens detachment, but only for quantum-like modeling.
  • F.9 governs cross-context semantic bridges, but does not decide whether a mathematical object, formalism, or learned representation is adequate inside one context or as a domain-transferring lens.

There are two symmetric failure modes.

The first failure mode is mathematical under-lensing: a working situation needs a mathematical lens that changes prediction, comparison, diagnosis, repair, or stop conditions, but the record contains only ordinary prose, familiar school math, or a broad family name such as graph, field, space, score, trend, dynamics, or quantum-like without a useful invariant, obstruction, state variable, mapping, scale behavior, rival lens, or action-changing payoff.

The second failure mode is mathematical overread:

a mathematical phrase begins as a helpful representation and then silently becomes ontology, evidence, causality, comparability, assurance, or admissibility.

Forces

ForceTension
Compression vs truthfulnessA useful mathematical lens compresses many cases by pairing compression with declared losses.
Plural mathematical foundations vs FPF simplicityThe intended gain is access to modern plural foundations and applied mathematics, with each selected lens tied to a stated use, declared loss, and neighboring-pattern application.
SoTA openness vs metaphysical safetyVanchurin-like and Sandberg-like material enters as current lens prompts, not final ontology.
General pattern vs local precisionC.29 stays non-duplicative with A.6.P, F.9, C.26, C.28, A.3.3, and A.19; its contribution is coordination around declared mathematical-lens use.
Didactic usability vs formal rigorThe first user needs one small card; expert use needs lens mapping mode, invariant claims, loss, LensUseAdmissibilityValue, rival lenses, and stop conditions.
Evocative metaphor vs ontology guard“Lens,” “structure survives transfer,” and “where the lens stops” help readers think, while fields named by value recover FPF claim-bearing use or admissibility.
Transfer reach vs domain validityCategory, RG, variational, quantum-like, and learning lenses are useful because they travel; that same transfer reach makes misuse easy.

Solution and selected answer

Selected answer in one paragraph

C.29 — Mathematical Lens Use is the general FPF discipline for mathematical lenses used in explanation, decision, prediction, publication, comparison, assurance input, bridge, or reusable transfer. It handles two first-use cases, with the positive case first: an under-lensed situation where the next admissible move can benefit from a cheap first candidate lens; and an existing candidate lens proposed for application, repair, bounding, replacement, or rejection. Its job is to help the reader introduce, choose, apply, limit, replace, or remove a mathematical lens so that a useful admissible next move survives. A mathematical lens is admissible for a declared use when it compresses a phenomenon by preserving declared structure, exposing useful invariants, and producing lens-admissible predictions, distinctions, obstructions, or diagnostic boundaries inside a bounded context. It is inadmissible for an undeclared or unadmissible use when it imports source-domain ontology, hides loss under metaphor, treats source prestige as evidence, or licenses claims outside its declared scale, context, validation, bridge, causal, or assurance boundary.

C.29 does not mint MathLens, U.MathLens, LensKind, or any universal FPF lens object. In this pattern, “mathematical lens” names a declared use of a mathematical object, formalism, learned representation, simulation object, or mathematical family under declared mapping, preserved structure and lost structure, LensUseAdmissibilityValue, admissible use, and stop condition; the target phenomenon and any claim outside that declared lens use keep their own FPF kinds.

Admission guard: C.29 governs mathematical-lens use claims. It does not mint mathematical-lens kinds, and it does not govern or create the EntityOfConcern named by a neighboring claim-bearing episteme, Bridge, evidence path, causal-use relation, assurance score, measurement construction, dynamics semantics, decision record, work record, explanation rendering, comparative review unit, representation transition, coarsened rendering, selector, benchmark, or scale audit. Its outputs are local lens-use outputs unless a separate FPF naming and admission decision makes one durable.

Mathematical Lens Use Principle

Mathematical Lens Use Principle. A mathematical lens is admissible for a declared use when it compresses a phenomenon by preserving declared structure, exposing useful invariants, and producing lens-admissible predictions, distinctions, obstructions, or diagnostic boundaries inside a bounded context. It is inadmissible for an undeclared or unadmissible use when it imports source-domain ontology, hides loss under metaphor, treats source prestige as evidence, or licenses claims outside its declared scale, context, validation, bridge, causal, or assurance boundary.

Compact plain form:

A useful mathematical lens is compression with invariants and declared losses.

Register policy: Tech exactness below, Plain metaphor above. Plain phrases such as “structures that survive transfer,” “what the lens makes visible,” and “where the lens stops” are admissible as recognition aids. When a sentence makes an FPF-kind, relation, evidence, admissibility, causal, assurance, bridge, gate, work, decision, or pattern-application commitment, the corresponding C.29 output recovers the fields named by value and governing patterns.

Zero and first-principles compatibility note: E.1 and E.2 govern the mission and pillar authority. C.29 serves them by making mathematical first-principles lens use inspectable for one declared use: candidate mathematical object, preserved structure, lost structure, visible payoff, admissible move, neighboring-pattern boundary, and stop condition. It does not replace pillar authority, neighboring governing patterns, ordinary FPF reasoning, or E.9 design-rationale basis for normative changes.

Mathematics is not a prerequisite for FPF use. Ordinary prose is valid when no mathematical structure changes the next admissible move. C.29 earns its place only when a mathematical object, formalism, learned representation, simulation object, or mathematical family changes explanation, decision, prediction, comparison, publication, bridge, assurance input, reusable transfer, or the next admissible repair.

Plain and Tech bridge:

Plain reader questionTech recovery
What structure helps?CandidateMathObject or CandidateLensFamily in a LensCandidateNote.
How does it represent the phenomenon?LensMappingMode.
What survives?PreservedStructure.
What disappears or is deliberately ignored?LostStructure.
Why trust this use?LensUseAdmissibilityValue, validation overlay when validation use is being claimed, and governing evidence and assurance patterns when their claims are being made.
What can the reader now do?AdmissibleNextMove or admissibleUse.
What remains blocked?StopCondition and nonAdmissibleUse.

State, scale, and dynamics trigger: if the lens use names state, transition, forecast, rate, temporal window, scale window, observation, measurement, comparison, score, strong wording or weak wording, or causal implication, the cheapest honest output either names the minimal relevant field or names the governing FPF pattern. If characteristic, scale, coordinate, score, metric, indicator, or comparison wording is itself hidden, use C.16.P before relying on C.29; if a valid measurement relation is already recoverable, measurement construction and direct comparability stay with C.16. State and transition semantics stay with A.3.3; characteristic spaces and overlays stay with A.19; temporal-use adequacy stays with C.27; scale-law and general method-scale preference claims stay with C.18.1 and C.19.1; architecture scale-preference claims stay with C.31.ASAP; causal-use question and verdict stay with C.28.

Mathematicalization Utility Principle

A mathematical lens is worth introducing only when it changes the working reader's next admissible move by making at least one first-principles modeling structure visible:

  • a declared signature, structure, state variable, transition, or observation map;
  • a symmetry, invariant, conservation-like constraint, equivalence, or composition rule;
  • a local-global relation, boundary relation, scale variable, coarse-graining rule, scale window, or correspondence condition;
  • a variational principle, action, energy, free-energy, loss, or value functional, Euler-Lagrange or stationarity condition, constrained optimization target, dual view, objective vector, or resource trade-off;
  • an uncertainty, probability, information, typicality, approximation, sensitivity, or validation boundary;
  • an algorithmic, constructive, resource, realizability, implementation, or adversarial limit;
  • a bottleneck, obstruction, impossibility, consistency boundary, or failed transfer in the candidate-model space;
  • a rival-lens distinction that changes model choice;
  • a causal, intervention, or counterfactual preservation question governed by C.28;
  • a bridge or export loss governed by F.9;
  • a measurement or comparability condition governed by C.16.

If no next admissible move changes, keep the text as ordinary prose, downgrade it to a didactic metaphor, or return NoMathLensUseNeededNote. A lens that merely makes prose more impressive is not a successful C.29 result.

First-principles lens-family use

C.29 admits first-principles use only when the principle family changes what the working reader can derive, inspect, compare, observe, or honestly block. The family name is never enough. Each row below is a discovery and recovery discipline: it tells the reader what must be named before claim-bearing mathematical-lens use is admissible.

First-principles familyUse when the working problem asksRequired C.29 recoveryStop or neighboring-pattern application
Boundary, exterior derivative, Stokes-like local-to-global relationHow local increments, flows, sources, interfaces, or balances compose into a global claim.Name the domain, boundary, field, form, or flow, derivative, divergence, or curl-like operator, boundary condition, and what is conserved, sourced, or lost at the boundary.Does not make all boundary language one mechanism; measurement, evidence, and bridge claims are governed by C.16, A.10, or F.9.
Cohomology, closed relation and relation named by value split, topological obstructionWhy a local rule cannot be made global, or why a transfer or composition is blocked.Name the cycle or cocycle-like object, equivalence class or obstruction, local closure condition, failed exactness witness or failed global witness, and the blocked claim.Useful obstruction is a LostStructure or StopCondition; it is not a causal explanation without C.28 and evidence.
Symmetry, invariance, equivariance, Noether-like conservationWhich transformations leave the relevant claim unchanged, or which conservation-like quantity follows from an invariance.Name the transformation family, action on the described variables, invariant or conserved quantity, assumptions, and distinctions intentionally lost.Does not transfer physical conservation, coordinate-free truth, or causal mechanism without domain evidence path and dynamics semantics.
Variational principle, action, energy, free-energy, loss, or value functional, Legendre or convex dualityWhether a behavior, representation, design, or trade-off follows from stationarity, extremum, dual variables, or potential transformation.Name the functional, admissible variation space, constraints, boundary conditions, stationarity or extremum condition, dual transform, and what the dual view makes visible.Does not imply the target literally optimizes that functional unless A.3.3, A.10, or C.28 governs the dynamics semantics, evidence path, or causal use.
RG, coarse-graining, fixed point, basin, universalityWhy different microdescriptions can share one macropattern, or when a scale claim stops.Name the scale variable, scale window, coarse-graining rule, fixed point or attractor, basin condition or regularity condition, invariant or exponent, and lost microstructure.Scale-law adequacy and general method scale-preference claims are governed by C.18.1 and C.19.1; architecture scale-preference claims are governed by C.31.ASAP; no micro-mechanism identity is licensed.
Diagonal, self-reference, fixed-point theorem, no-go familyWhether a universal evaluator, complete language, self-model, closure rule, or governance rule is blocked by self-application.Name the encoding, evaluator or self-map, diagonal or fixed-point construction, universal claim being tested, and the impossibility or closure boundary named by value.Does not prove every recursive-looking case is a no-go theorem; assurance or governance claims are governed by B.3, E.19, or the local domain pattern.
Composition, category, operad, optic, semiring or limit transformWhether composition, interface, view, transformation, or algebraic law is the useful preserved structure.Name objects, morphisms or relations, composition law, identity or interface condition, preserved algebraic law, failed transfer, and any limit transform such as classical or tropical or Fourier-Laplace or Legendre.Bridge semantics and substitution safety are governed by F.9; C.29 only records the declared lens use and its loss.
Probability, information, observation, acquisitionWhich uncertainty, information, typicality, readout, or next observation changes the next admissible move.Name the random variables or distributions, utility or information criterion, observation or probe design variable, model assumptions, estimation method, validation boundary, and robustness note.Measurement, evidence, experiment planning, causal-use verdicts, and assurance stay with C.16, A.10, C.28, A.15, and B.3.
Bounded-observer structural information, MDL, epiplexity, compression, or description-recoverability lensWhether a bounded observer can recover enough selected structure from an architecture description, relation trace, generated graph, reusable-structure accounting result, or other source episteme to change the next admissible move.Name the source episteme or trace, observer boundary, candidate information measure or coding scheme, mapping mode, preserved selected structure, lost structure, visible payoff, observation or postulate boundary, and source-return condition.Does not make epiplexity or compression an architecture characteristic, quality score, selector result, evidence path, assurance result, OOD guarantee, or causal proof. Architecture, structural-view, reuse-accounting, measurement, evidence, assurance, and bridge claims are governed by C.30, C.30.ASV, C.30.AD, C.31, C.31.RSA, C.16, A.10, B.3, or F.9 when those claims are being made.

This table is normative as a recovery guide, not as a mandatory taxonomy. A local project may name a closer family, but it must recover the same claim-bearing structure: CandidateMathObject or candidate family, preserved structure, lost structure, visible payoff, use-admissibility value, and stop condition.

P2W and formal-declaration boundary: when one of these families is used in a P2W transduction from accepted problem-side material into later work, C.29 still records only the declared mathematical-lens use. A declared formal relation can make mathematical-to-mathematical exactness or near-sameness visible; it does not by itself declare a FormalSubstrate signature, PrincipleFrame, mechanism, observation-bound world claim, evidence path, causal-use relation, Bridge-admissible use, or work. Use A.6.0 for the U.Signature(profile=FormalSubstrate) declaration, A.6.1 when mechanism import or realization is being claimed, and E.18.1 when accepted problem-side material needs a formal declaration for later FPF use.

Bounded-observer structural-information lens

Use this subcase when a mathematical lens estimates, compresses, codes, compares, or otherwise exposes how much selected structure a bounded observer can recover from a description, relation trace, generated graph, model, or reusable-structure accounting result. Typical examples include MDL-like two-part codes, epiplexity-style extracted-structure estimates, compression-complexity comparisons, and information-functionals over relation graphs. The EntityOfConcern remains the declared mathematical-lens use, not the architecture, not the description, and not the observer.

Minimum record:

MathLensUse.StructuralInformationLensUse@Context:
  TargetPhenomenon:
  SourceEpistemeOrTraceRef:
  BoundedObserverRef or observerBoundary:
  CandidateMathObject:
  LensMappingMode:
  PreservedStructure:
  LostStructure:
  VisiblePayoff:
  ObservationBoundary?:
  PostulateBoundary?:
  SourceReturnCondition?:
  LensUseAdmissibilityValue:
  admissibleUse:
  nonAdmissibleUse:
  StopCondition:

When the target is a physical, organizational, or project-world situation, the record must say whether the structural-information claim is observational, postulated, simulated, or only a description-local compression. When the lens is used in architecturing, [C.30](/generated/patterns/C.30) governs architecture as EntityOfConcern, [C.30.ASV](/generated/patterns/C.30.ASV) governs structural-view adequacy, [C.30.AD](/generated/patterns/C.30.AD) governs architecture descriptions, and [C.31](/generated/patterns/C.31) or [C.31.RSA](/generated/patterns/C.31.RSA) governs modularity or reusable-structure accounting. [C.29](/generated/patterns/C.29) records only the declared lens use: what recoverable structure the mathematical lens makes visible, what it loses, and where that use stops.

Architecture-local lens descriptions

Architecture work may use C.29-local descriptions for graph, flow, control, structural-information, RG or coarse-graining, and multilevel-learning or frustration lenses. These names are C.29 output descriptions, not architecture ontology, not proof, and not durable FPF kinds by themselves.

Local C.29 descriptionCandidate mathematical objectVisible payoffStop condition
MLU.Description@ArchitectureGraphDSMtyped graph, hypergraph, DSM, DMM, or MDM matrixdependencies, clusters, change propagation, and bottlenecksnot evidence of semantic interface correctness, compositional quality, or architecture decision by itself
MLU.Description@TGAFlowStructuretransduction graph with morphism nodes and U.Transfer edgesflow topology, crossings, and path slices without hidden scalarizationnot work occurrence, gate decision, or evidence by itself
MLU.Description@ArchitectureLCAlayered control stack or multi-rate control modelplanner, regulator, plant, observer, feedback timing, and externality separationnot stability or causal-use relation without dynamics, evidence, and C.28
MLU.Description@EpiplexityStructuralInformationbounded-observer structural information or two-part codelearnable reusable structure versus residual or unmodeled structurenot utility, assurance, OOD guarantee, or causal proof
MLU.Description@RGArchitecturescale map over architecture descriptions, fixed-point or basin metaphor, or declared coarse-graining mapscale-stability of an architecture vector and exploding exceptionsnot literal physical RG unless domain theory warrants it
MLU.Description@MultilevelLearningFrustrationmultilevel learning over structurally renormalizable descriptions, frustrated optimization landscape, or variational residual modelresidual-reducing architecture moves across declared scopes or levelsnot proof that the project literally optimizes one global function

MLU.Description@RGArchitecture applies only when the use names a declared aggregation scope, scale variable or scale window, coarse-graining rule, preserved structure, lost structure, source-return condition, and the overread named by value that the lens does not license. If the claim becomes a scale-preference claim, C.31.ASAP governs the architecture preference side; C.29 keeps only the declared mathematical-lens use.

Minimum RG architecture description:

MLU.Description@RGArchitecture:
  TargetPhenomenon:
  CandidateMathObject:
  LensMappingMode:
  ScaleWindow?:
  CoarseGrainingRule?:
  PreservedStructure:
  LostStructure:
  VisiblePayoff:
  SourceReturnCondition?:
  admissibleUse:
  nonAdmissibleUse:
  AdmissibleNextMove:
  StopCondition:

For architecture work, a common RG-shaped candidate object is:

A_l = (Holons_l, FunctionalRelations_l, FlowRelations_l, ControlRelations_l,
       ModuleRelations_l, InterfaceSpecificationRefs_l, DependencyEdges_l,
       WorkMethodRefs_l, EvidencePackageRefs_l, QualifierRefs_l)

R_l : A_l -> A_{l+1}

The index _l is a declared aggregation-scope index inside this C.29 lens, not a generic level, tier, layer, or ladder. Each use names the aggregation scope, the coarse-graining rule, the lost structure, and the source-return condition.

MLU.Description@MultilevelLearningFrustration applies only when the use names declared holon levels or declared scopes, a mapping between them, conflicting constraints or residuals, preserved structure, lost structure, and the nearest neighboring FPF pattern for any measurement, causal, evidence, assurance, work, selected-set, or decision claim.

Minimum multilevel-learning and frustration description:

MLU.Description@MultilevelLearningFrustration:
  TargetPhenomenon:
  CandidateMathObject:
  LensMappingMode:
  PreservedStructure:
  LostStructure:
  VisiblePayoff:
  admissibleUse:
  nonAdmissibleUse:
  AdmissibleNextMove:
  SourceReturnCondition?:
  StopCondition:

Admissible use: triage, explanation, candidate generation, rival-lens comparison, scale-window reasoning, source-return triggers, and architecture-decision rationale only when the neighboring pattern governs any non-C.29 claim. Non-admissible use: no proof that the project literally optimizes one global function, no causal proof, no assurance score, no claim that complexity necessarily grows, and no replacement for [C.11](/generated/patterns/C.11), [C.28](/generated/patterns/C.28), [B.3](/generated/patterns/B.3), [C.16](/generated/patterns/C.16), [G.5](/generated/patterns/G.5), or stakeholder and ethics patterns.

Use boundary

This boundary prevents C.29 from being over-applied.

Use C.29 when a mathematical object, formalism, learned representation, simulation object, or mathematical family is used as a lens for explanation, decision, prediction, publication, comparison, assurance input, bridge, or reusable transfer over a physical, organizational, epistemic, social, computational, scientific, or methodological phenomenon, or when a phenomenon, decision, explanation, comparison, model-selection, diagnosis, or method-choice problem is stable enough that the first useful move is to choose a cheap candidate lens that makes relevant structure visible.

Do not use C.29 as the governing pattern when:

  • the mathematics is ordinary local domain theory already governed by a domain pattern;
  • the phrase is a purely didactic analogy that is not reused for decisions, evidence, assurance, publication, bridge, comparison, or transfer;
  • the question under repair is causal-use question, causal-use justification, or verdict, which is governed by C.28;
  • the question under repair is measurement construction, scale legality, direct comparability, or evidence-stub adequacy, which is governed by C.16;
  • the question under repair is cross-context meaning or substitution safety, which is governed by F.9;
  • the question under repair is dynamics semantics without a separate lens-transfer claim, which is governed by A.3.3;
  • the question under repair is a CharacteristicSpace overlay with no domain-transfer, prediction, assurance, publication, or reusable explanation claim, which stays under A.19.
  • the use under repair is a ChoiceResult, local choice record, selected-set publication, selected method, U.WorkPlan, performed U.Work, work-result record, or work-relevant source restoration; those claims stay with C.11, G.5 or G.9, A.15, A.15.1, or A.15.4 as appropriate.
  • the use under repair is an explanation-facing rendering, bounded comparative review unit, same-EntityOfConcern representation-scheme transition, or controlled semantic coarsening; those claims stay with E.17.EFP, E.17.ID.CR, A.6.3.RT, or A.6.3.CSC, with C.29 fields carrying only mathematical-lens use when the mathematical lens affects the stated admissible use.
  • the claim being made is about forecast, rate, trajectory, rhythm, recovery, convergence, stabilization, speed, temporal window, or rate-change as sufficient for use; temporal-claim adequacy stays with C.27.

This boundary keeps mathematical-lens use from becoming a shadow record for neighboring work.

Lexical rule: use structure-preserving representation rather than structure-preserving identification in discoverability-bearing prose, unless equivalence or identity is explicitly the declared LensMappingMode.

Action path before the full card

Begin with action guidance, not with the full card.

First action choices: keep ordinary prose, introduce a cheap candidate lens, name the CandidateMathObject or formal role that fits the stated use more directly, add visible payoff, add loss, choose the principal rival lens, add validation regime, narrow an existing claim, downgrade an overclaim, or apply the governing FPF pattern to any non-lens claim being made.

Memory hook: a successful C.29 application can raise or lower the mathematical claim-bearing use. It can introduce a first candidate lens, keep ordinary domain prose, remove a mathematical lens, repair relation wording through A.6.P, declare a CharacteristicSpace through A.19, use C.16 for measurement and comparability, apply F.9 for bridge semantics, ask the C.28 causal-use question, restore work or source responsibility through A.15, or apply C.27 for temporal-use adequacy.

No-lens cheap path: name the ProblemStructureCue, choose the cheapest candidate lens family that makes it visible, test whether that lens changes the next admissible move, and if no move changes, keep ordinary prose or collect more observations before using mathematical-lens wording.

First neighboring-pattern map:

Claim-bearing questionGovern there firstC.29 remainder
relation substrate, relation kind, or structure-preserving relation wordingA.6.P and local relation patternsmathematical-lens use only if a mathematical object changes the stated use
state variables, transition law, observation map, constraints, or calibrationA.3.3 and A.19preserved structure and lost structure and lens stop condition
measurement construction, scale, unit, polarity, or comparabilityC.16lens-use admissibility value for measurement-dependent use
scale law, universality, knee, exponent, general method-scale preference, or architecture scale preferenceC.18.1 or C.19.1 for scale-law and general method BLP claims; C.31.ASAP for architecture scale-preference claims over a declared alternative set, scale variable, and scale windowscale-bounded mathematical-lens use
cross-context meaning, substitution, or Bridge-admissible useF.9mathematical structure used inside the bridge claim
causal, intervention, policy, or counterfactual useC.28whether the lens preserves, approximates, or blocks causal-use structure
evidence, provenance, source currentness, assurance, release, selector, or benchmark useA.10, B.3, or relevant G.* patterndeclared mathematical-lens use as one input only

Math-apparatus boundary: C.29 coordinates the declared mathematical-lens use across relation substrate, state spaces and characteristic spaces, measurement, dynamics, scale, bridge, causal, evidence, assurance, selector, and benchmark patterns. It does not replace any one of them.

  1. Find the claim-bearing phrase. Mark the mathematical phrase named by value that affects explanation, decision, prediction, comparison, publication, bridge, assurance-input, or reusable transfer.
  2. Choose the smallest output class that preserves honesty. The output-class decision happens before any full-card fields.
  3. Name the concrete mathematical object or structure. Family labels such as category theory, field, graph, quantum, RG, or geometry are entry prompts, not adequate CandidateMathObject values for the stated use by themselves.
  4. State the lens mapping mode. Use the least committing honest C.29-local lens mapping mode: analogy-only prompt, representation, empirical fit, simulation, quotient, abstraction, coarse-graining, embedding, homomorphism, isomorphism, functor-like transfer, cross-context lens-transfer candidate, or accepted local theory. If cross-context meaning, substitution, CL, sense cells, or Bridge-admissible use is being claimed, F.9 governs that claim; the C.29 fields record only mathematical-lens use for the declared transfer.
  5. State preserved structure and lost structure. This is the central repair move.
  6. State what becomes visible. Name the invariant, obstruction, fixed point, symmetry, conservation law, diagnostic boundary, lens-admissible distinction, model-selection consequence, or other payoff.
  7. State the admissible use and blocked use. Say what is now admissible, what remains blocked, and which governing FPF pattern governs any claim being made outside the declared lens use.
  8. If the claim does not pass, repair rather than merely fail. Downgrade, narrow, switch to a principal rival lens, add LensUseAdmissibilityValue or validation regime, split any non-lens claim to its governing FPF pattern, or remove the mathematical phrase from claim-bearing use.

Application output classes:

Output classOutputUse conditionRequired content
NoMathLensUseNeededNoMathLensUseNeededNote or ordinary Plain orientationMathematical language is local, didactic, or accepted local theory and is not used for transfer, decision, evidence, assurance, publication, bridge, comparison, or reusable explanation.State why no C.29 output is needed; no card.
LensCandidateNoteMathLensUse.LensCandidateNoteA problem whose next move can depend on a mathematical lens is stable enough for a first candidate lens, but no adequate mathematical object has been named yet.TargetPhenomenon, ProblemStructureCue, CandidateLensFamily, optional CandidateMathObject?, WhyThisLensCouldHelp, ExpectedVisiblePayoff, ObservableOrControllableCue?, AdmissibleNextMove, OrdinaryRivalOrFallback, StopCondition, NextMathLensUseOutput.
OneLineMathLensUse.OneLineAn under-specified phrase affects explanation, decision, prediction, comparison, publication, bridge, assurance input, or reusable transfer and needs repair before reuse.TargetPhenomenon, CandidateMathObject, LensMappingMode, PreservedStructure, LostStructure, VisiblePayoff, AdmissibleNextMove, optional ObservationOrReadoutNeeded?, OrdinaryRivalOrFallback, StopCondition.
MiniCardMathLensUse.MiniCardThe lens is admissible for a reusable explanation, local decision, comparison, or method-selection claim.OneLine content plus InvariantsExposed, LensUseAdmissibilityValue, admissibleUse, nonAdmissibleUse, principal rival, and RivalLensRelation? when another mathematical lens changes the admissible move.
FullCardMathLensUse.FullCardPublication, bridge, assurance input, benchmark, model selection, prediction, formal pattern claim, or repeated cross-case use is being made.Full MathLensUse.Card@Context plus any conditional overlays.
NeighborGoverningPatternNoteNeighborGoverningPatternNoteThe claim being made is causal use, bridge or substitution, measurement construction, scale legality, direct comparability, evidence-stub adequacy, dynamics semantics, temporal adequacy, decision result, selected method, work plan, performed work, evidence trust, assurance, explanation rendering, comparative review, representation transition, coarsening, scale law, release, selector, or benchmark.Name the governing FPF pattern and apply C.28, F.9, C.16, A.3.3, C.27, C.11, A.15, A.15.1, A.15.4, A.10, B.3, E.17.EFP, E.17.ID.CR, A.6.3.RT, A.6.3.CSC, C.18.1, C.19.1, or a relevant G pattern. The C.29 application keeps only the declared lens-use result.

Micro-template examples:

Architecture and P2W first-use slice:

MathLensUse.LensCandidateNote@ArchitectureP2W := {
  TargetPhenomenon: cooling-fixture deformation problem accepted as a problem-side distinction,
  ProblemStructureCue: heat-flow balance, boundary condition, interface reference plane, and deformation residual change the next architecture or method-choice question,
  CandidateLensFamily: boundary and variational heat-flow lens,
  CandidateMathObject?: temperature field with boundary-condition relation and optional energy functional,
  WhyThisLensCouldHelp: the lens can expose whether the useful distinction is a preserved heat-flow invariant, a boundary-condition mismatch, or a deformation factor outside the model,
  ExpectedVisiblePayoff: decide whether the next honest output is a C.29 one-line lens use, an A.6.0 FormalSubstrate signature declaration, or an E.18.1 P2W transduction use of the accepted problem-side distinction,
  ObservableOrControllableCue?: boundary temperatures, heat-flow observations, reference-plane assignment, deformation readout,
  AdmissibleNextMove: write `MathLensUse.OneLine` only after mapping, preserved structure, lost structure, and stop condition are nameable; apply `A.6.0` only when `U.Signature(profile=FormalSubstrate)` must be declared; apply `E.18.1` only when the accepted problem-side distinction must be used in later FPF work,
  OrdinaryRivalOrFallback: ordinary deformation narrative plus local measurement note,
  StopCondition: no method is selected, no work plan is created, no evidence-strength claim is made, and no causal-use verdict or assurance claim follows from this C.29 note,
  NextMathLensUseOutput: MathLensUse.OneLine or NeighborGoverningPatternNote
}

This filled slice is a C.29 first-use output. It does not declare the formal signature, perform the P2W transduction by itself, select the method, or create work. Those claims are governed by [A.6.0](/generated/patterns/A.6.0), [E.18.1](/generated/patterns/E.18.1), [A.15](/generated/patterns/A.15), [A.15.1](/generated/patterns/A.15.1), [A.15.4](/generated/patterns/A.15.4), [A.10](/generated/patterns/A.10), [C.28](/generated/patterns/C.28), or [B.3](/generated/patterns/B.3) when those claims are being made.

MathLensUse.LensCandidateNote example := {
  TargetPhenomenon: slow Product-X team flow,
  ProblemStructureCue: waiting and work-in-progress look more important than individual task difficulty,
  CandidateLensFamily: queue or flow lens,
  CandidateMathObject?: single-server or multi-server queue candidate,
  WhyThisLensCouldHelp: arrivals, service time, WIP, and waiting time could expose the bottleneck,
  ExpectedVisiblePayoff: decide whether delay is arrival-rate, service-rate, batching, or WIP-boundary pressure,
  ObservableOrControllableCue?: arrivals, service time, wait time, WIP limit,
  AdmissibleNextMove: observe the variables before claiming queue adequacy,
  OrdinaryRivalOrFallback: ordinary process narrative without queue assumptions,
  StopCondition: no claim about motivation, obligation, blame, or full team ontology,
  NextMathLensUseOutput: NoMathLensUseNeededNote or MathLensUse.OneLine after observation
}
MathLensUse.OneLine example := {
  TargetPhenomenon: Product-X backlog delay,
  CandidateMathObject: queue model over arrivals, service time, waiting time, and work in progress,
  LensMappingMode: representation,
  PreservedStructure: flow, bottleneck candidates, wait, WIP, service-rate pressure,
  LostStructure: motivation, priority politics, contractual duties, skill learning, quality of work,
  VisiblePayoff: identify whether delay is arrival-rate, service-rate, batching, or WIP-boundary problem,
  AdmissibleNextMove: observe arrivals, service, wait, and WIP; test one local WIP-limit or batching hypothesis,
  ObservationOrReadoutNeeded?: service-time and wait-time observations,
  OrdinaryRivalOrFallback: process narrative without queue assumptions,
  StopCondition: do not infer team obligation, motivation, blame, or organizational ontology
}
MathLensUse.MiniCard example := {
  TargetPhenomenon: production-line throughput and latency,
  CandidateMathObject: queueing network with stated stations and service-rate assumptions,
  LensMappingMode: representation,
  PreservedStructure: flow, bottlenecks, service rates, waiting times,
  LostStructure: human meaning, contractual obligations, rare failure modes, causal interventions not represented by the network,
  InvariantsExposed: bottleneck station and queue-length sensitivity under stated assumptions,
  LensUseAdmissibilityValue: accepted local theory plus local observations,
  admissibleUse: throughput and latency reasoning inside the declared line model,
  nonAdmissibleUse: motivation, duty, causal intervention, full organization ontology, or release assurance,
  PrincipalRivalLens?: direct empirical dashboard readout,
  RivalLensRelation?: complementary,
  StopCondition: no inference about motivation, obligation, rare-event causality, or full organizational ontology
}
MathLensUse.OneLine := {
  TargetPhenomenon,
  CandidateMathObject,
  LensMappingMode,
  PreservedStructure,
  LostStructure,
  VisiblePayoff,
  AdmissibleNextMove,
  ObservationOrReadoutNeeded?,
  OrdinaryRivalOrFallback,
  StopCondition
}

For MathLensUse.OneLine, VisiblePayoff says what the lens makes visible, such as a bottleneck, invariant, obstruction, incompatibility, loss boundary, or diagnostic split. AdmissibleNextMove says the now-admissible user move, such as compute a local quantity, compare only inside a declared structure, run a validation slice, apply a neighboring pattern, keep the phrase as local metaphor, or remove the phrase from claim-affecting use. ObservationOrReadoutNeeded? names the missing observable, readout, assignment, outcome, validation slice, or scale point needed before the repaired line makes the stated move admissible. OrdinaryRivalOrFallback says what the reader would use without this mathematical lens: ordinary prose, accepted local domain theory, direct measurement, a causal model, a queueing model instead of a quantum-like metaphor, an [A.19](/generated/patterns/A.19) space declaration instead of [C.29](/generated/patterns/C.29), or an [F.9](/generated/patterns/F.9) bridge instead of category-like wording. If two mathematical lenses already change the next move at this cheap-output class, add one ordinary-language note about the disagreement and use MathLensUse.MiniCard or MathLensUse.FullCard before claiming a reusable rival-lens relation.

MathLensUse.LensCandidateNote := {
  TargetPhenomenon,
  ProblemStructureCue,
  CandidateLensFamily,
  CandidateMathObject?,
  WhyThisLensCouldHelp,
  ExpectedVisiblePayoff,
  ObservableOrControllableCue?,
  AdmissibleNextMove,
  OrdinaryRivalOrFallback,
  StopCondition,
  NextMathLensUseOutput
}

MathLensUse.LensCandidateNote is not evidence, assurance, a bridge, a decision record, a selector result, a literature survey, or a full lens-use card. It is a cheap first-candidate lens selection note. Its successful next outputs are NoMathLensUseNeededNote, MathLensUse.OneLine, or a named neighboring governing-pattern note.

Name guard for this note: ProblemStructureCue is a recognition cue, not a FPF signature; CandidateLensFamily is a family prompt, not a kind; AdmissibleNextMove is action guidance, not a work record; NextMathLensUseOutput is the next C.29 output class, not a new record family.

Do not use MathLensUse.OneLine with an empty CandidateMathObject. If the candidate object has not yet been named, use MathLensUse.LensCandidateNote first, keep ordinary prose, or write a NeighborGoverningPatternNote when a non-lens claim is being made.

Cheap stop: if the mathematical phrase does not affect any claim beyond orientation, do not use the full card. If the first honest output is NoMathLensUseNeededNote, that is a successful [C.29](/generated/patterns/C.29) result, not an underfilled card.

Output set and use-rights

After applying C.29, the output is one of these:

OutputMeaning
NoMathLensUseNeededNoteOrdinary local math or didactic metaphor; no transfer, decision, evidence, assurance, publication, bridge, comparison, or reusable-explanation use.
MathLensUse.LensCandidateNoteCheap first-candidate note for an under-lensed problem whose next move can depend on a mathematical lens; not evidence and not a full lens-use card.
MathLensUse.OneLineTarget, mathematical object, lens mapping mode, preserved structure, lost structure, visible payoff, admissible next move, optional observation or readout needed, ordinary rival or fallback, and stop condition.
MathLensUse.MiniCardOne-line plus invariant or payoff, LensUseAdmissibilityValue, admissible use, non-admissible use, and rival-lens relation when disagreement changes the next move.
MathLensUse.FullCardFull card for publication, bridge, assurance input, model selection, benchmark, prediction, or reusable explanation.
NeighborGoverningPatternNoteA named neighboring FPF pattern governs the causal, bridge, evidence, scale, dynamics, temporal, decision, work, explanation, comparison, representation, measurement, or assurance claim being made; the C.29 application records only the declared lens-use result.

Positive warning: a successful C.29 output makes the mathematical lens honest for its declared use. Any empirical truth, causal-use, bridge, assurance, release, decision, or benchmark claim still needs its governing FPF pattern.

LensMappingMode, LensUseAdmissibilityValue, and admissible use are separate fields.

Lens-use aspectQuestion it answersWhere it is recorded
Mapping constructionHow does the mathematical object represent, abstract, embed, quotient, simulate, learn, or transfer the phenomenon?LensMappingMode, PreservedStructure, LostStructure, and any ScaleWindow? or CoarseGrainingRule?.
Use-admissibility valueWhat limited lens-use value is declared for this use?LensUseAdmissibilityValue, validation overlay when validation use is being claimed, and neighboring evidence or assurance patterns when their claims are being made.
Admissible useWhat can the working reader now do, and what remains blocked?admissibleUse, nonAdmissibleUse, AdmissibleNextMove, StopCondition, and named governing FPF patterns.

LensMappingMode names construction, not permission. Typical local values include representation, abstraction, quotient, coarse-graining, embedding, homomorphism, isomorphism, functor-like transfer, simulation, and learned or fitted representation. A broad family name such as graph, field, category, geometry, quantum-like, variational, or Bayesian is only a prompt until the concrete construction and preserved structure and lost structure are named.

LensUseAdmissibilityValue grants only limited use-rights:

LensUseAdmissibilityValue valueAllowed useBlocked use
analogy-only promptorientation, hypothesis generation, recognition cuedecision, assurance, causal claim, or publication as established model
diagnosticOnlyfinding a candidate obstruction, bottleneck, mismatch, missing state variable, or rival-lens splitprediction, decision, causal use, bridge substitution, assurance, or ontology without the neighboring-pattern result named by value
formal derivation inside accepted theorylocal explanation or theorem-backed transfer when assumptions holdempirical claim without observation or evidence
simulationcandidate model and scenario explorationreal-world causal or predictive reliance without validation
empirical fitlocal prediction inside validation regimeout-of-regime generalization and causal use
accepted domain theorylocal domain model usecross-context ontology import
SoTA-echo candidatestructured exploration and lens-use testingaccepted FPF law, assurance, release, or foundation claim
mechanized proofformal property under assumptionsreal-world adequacy unless assumptions, bridge, and evidence hold

Admissible use is not inferred from elegance, familiarity, source prestige, or mapping type. It is stated in admissibleUse, nonAdmissibleUse, and StopCondition. Any empirical truth, causal-use, bridge, assurance, release, decision, or benchmark claim remains a separate neighboring-pattern claim.

From lens to local action

Local action change from a mathematical lens is limited to these cases unless a neighboring pattern governs the needed non-C.29 use:

  1. observe or measure a newly named variable or relation;
  2. compare only under a declared structure and loss boundary;
  3. diagnose a bottleneck, obstruction, mismatch, invariant, or failed transfer;
  4. choose or reject a principal rival lens for this local use;
  5. narrow, downgrade, or block a tempting overread;
  6. apply the governing FPF pattern when a claim being made exceeds the declared lens use.

Each item closes either as a local C.29 output or as a named neighboring-pattern application. If the needed result is a work plan, choice result, selector output, benchmark, or evidence record, publish that neighboring result in its governing pattern rather than from this list.

No-lens entry: choosing a first candidate lens

Use this when the next admissible move can benefit from a mathematical lens but no adequate mathematical object has been named. The output is MathLensUse.LensCandidateNote, not MathLensUse.OneLine and not a full card. State the ProblemStructureCue, choose one cheap CandidateLensFamily, say what it could make visible, name the ObservableOrControllableCue? when available, state the AdmissibleNextMove, compare it with the OrdinaryRivalOrFallback, and stop if no action changes. If the cue is still pre-articulation and no stable ProblemStructureCue can be named, do not mathematize it; preserve cue plurality through C.2.LS, A.16, A.16.1, B.4.1, B.5.2.0, or the relevant language-state pattern before applying C.29.

Candidate guidance rows are examples for first recognition. Use the row that fits the working cue, or state a closer local cue using the same fields.

ProblemStructureCueCheap CandidateLensFamilyFirst admissible move and stop
waiting, backlog, bottleneck, or throughputqueue or flow networkObserve arrivals, work in progress, service time, wait time, and bottleneck candidate; do not infer obligation, motivation, or managerial authority from the queueing lens alone.
state change, trajectory, stabilization, or control pressurestate-space, dynamics, Markov, ODE, or control lensName state, transition law, observation map, and validity window; return dynamics semantics to A.3.3 and temporal-use claims to C.27 when those claims are being made.
dependency, interface, composition, or transfer failuregraph, hypergraph, category, operad, or compositional lensExpose edges, edge meaning, slots, interfaces, composition law, and failed transfer; use F.9 when cross-context meaning or substitution is being claimed.
local-to-global boundary relation, conservation across a boundary, or source balance or sink balanceStokes-like, exterior-derivative, divergence, flux, or boundary-operator lensName the domain, boundary, local rule, boundary condition, and conserved or sourced quantity; do not infer mechanism, evidence, or bridge safety without the relevant governing pattern.
local rule that cannot become a global solution, or a transfer blocked by topologycohomology, closed relation, relation named by value, obstruction, or failed-extension lensName the local closure condition, global witness that fails, obstruction class or equivalent diagnostic boundary, and the blocked claim.
comparison, similarity, distribution shift, population movement, or shape changemetric-space distance, topology, embedding, or optimal-transport lensDeclare what distance, neighborhood, order, embedding, coupling, or transport cost preserves and what it loses; use C.16 for comparability and measurement construction when those claims are being made.
scale transition, coarse behavior, universality, knee, fixed point, or basin-of-attraction cuecoarse-graining, RG, fixed-point, or scaling-law lensName scale variable, scale window, coarse-graining rule, fixed point or attractor, basin condition or regularity condition, and invariants; use C.18.1 for scale-law adequacy, C.19.1 when general method scale-preference or BLP preference is being claimed, and C.31.ASAP when an architecture scale-preference claim is being made.
invariance under transformations, coordinate changes, or conservation-like claimsymmetry, group action, Noether-like, invariant, or equivariant representationIdentify the transformations, invariant or conserved quantity, assumptions, distinctions preserved, and coordinate details lost; do not import physical conservation without evidence.
extremal behavior, trade-off, dual view, potential, or cost relation or resource relationvariational, Lagrangian or Hamiltonian, action, energy, or free-energy, Legendre, convex-duality, or constrained-optimization lensName the functional, variation space, constraints, boundary conditions, stationarity or extremum condition, dual transform, and what the dual view makes visible.
self-reference, universal evaluator, complete-language claim, closure paradox, or impossible total methoddiagonal, fixed-point theorem, no-go, or self-application lensName the encoding, evaluator or self-map, diagonal move, universal claim tested, and closure or impossibility boundary named by value; do not turn every loop into a no-go theorem.
uncertainty, information value, missing observation, active probe, or next sample choiceprobabilistic, information-theoretic, BED, OED, active-learning, or Bayesian-optimization lensName the variables or distributions, utility or information criterion, design variable, acquisition candidate, model assumptions, estimation method, validation boundary, and robustness note.
intervention, policy effect, or counterfactual questionSCM, causal graph, or causal abstraction lensName the causal object, intervention or assignment, outcome readout, and whether counterfactual structure is preserved, approximated, or not claimed; keep causal-use question and verdict with C.28.
learned scientific representation, latent state, surrogate solver, or operator viewneural operator, latent representation, surrogate solver, or world-model lensAdd the observation map, data or training regime, validation slice, generalization claim, uncertainty or approximation note, and stop condition.
probe effects, order effects, context effects, incompatible frames, or measurement-as-interventionquantum-like or contextual-probability lensUse C.26 for quantum-like adequacy when order effects, probe effects, or context effects are actually being made; block physical quantum ontology unless separate physics evidence is supplied.

MathLensUse.LensCandidateNote is local first-candidate guidance. It does not replace G.2 SoTA synthesis, tradition mapping, or broad lens-family review. Use G.2 when the work being done is tradition-scale source synthesis; use C.29 when the local need is to choose one cheap candidate lens that changes the next admissible move. The cheap observation and control check does not apply C.16 or A.10 by default; it only asks what the user can observe, read out, assign, vary, or validate now. Measurement construction, evidence strength, intervention-use claim, or validation is still governed by the governing pattern when that claim is being made.

First honest C.29 entry cases

For E.11-style first-entry recognition, distinguish the working entry case before choosing an output:

First honest entry caseWhat the working reader metFirst C.29 answer
Pre-articulation cueSomething feels structurally wrong, but it is not yet a claim and no stable ProblemStructureCue can be named.Do not impose a mathematical lens. Use C.2.LS, A.16, A.16.1, B.4.1, B.5.2.0, or the relevant language-state pattern first; apply C.29 only when the problem structure is stable enough.
No lens or under-lensed problemA problem situation is stable enough for mathematical help, but no CandidateMathObject has been named.Use MathLensUse.LensCandidateNote: ProblemStructureCue -> CandidateLensFamily -> AdmissibleNextMove.
Under-specified lensA phrase such as field-like, graph-like, or quantum-like appears, but no object, mapping, preservation, or loss is stated.Write MathLensUse.OneLine or downgrade to ordinary prose.
Useful lens with overreadThe lens is useful, but the text turns it into ontology, evidence, causality, assurance, bridge, or release authority.Use MathLensUse.MiniCard or MathLensUse.FullCard and name blocked use plus neighboring governing pattern.
Ordinary local mathA Markov kernel, ODE, graph data structure, or accepted domain theory appears inside its local domain use.Return NoMathLensUseNeededNote and stay with the local pattern.
Wrong first patternThe reader reaches for C.26, F.9, C.28, C.16, or A.3.3 before knowing whether mathematical-lens use is being made, or reaches for C.29 when a neighbor already governs.Name the first governing pattern and state what C.29 contributes, if anything.

False-positive bank and entry stops

Do not use a C.29 output for these non-use cases unless a separate lens-transfer, publication, assurance, bridge, comparison, or reusable-explanation claim is being made:

  • ordinary ODE inside accepted physics or local engineering model;
  • Markov kernel inside accepted stochastic dynamics;
  • graph used as a local data structure;
  • metric-space distance, topology, order, product, subspace, or embedding declared inside A.19 CharacteristicSpace with no domain-transfer claim;
  • category-theoretic proof internal to a domain where that formalism is the local theory;
  • one-off pedagogical metaphor not reused for decision, evidence, assurance, publication, bridge, comparison, or transfer.

False-negative bank: use C.29 even when no polished mathematical buzzword appears if the working problem has a structure that changes an admissible next move and ordinary prose is currently hiding it.

False-negative situationWhy C.29 appliesCheap move
“Something is off, but we cannot yet say whether it is flow, priority, meaning, or evidence.”The cue is not stable enough for ProblemStructureCue.Stay in language-state work first; do not make C.29 create a mathematical lens from an unstable cue.
“We have many tasks waiting, but cannot see where flow slows.”Queue or flow structure can expose bottleneck and WIP boundary.Use MathLensUse.LensCandidateNote for queue or flow; estimate arrivals, service, waiting, and bottleneck.
“This comparison feels important, but distance is unclear.”Metric-space distance, topology, embedding, or transport adequacy is being claimed.Name what comparison preserves and loses before using the comparison.
“We transfer a structure between contexts because it looks the same.”Mathematical-lens use and bridge loss are being claimed.Name preserved structure and lost structure and use F.9 when cross-context meaning or substitution is being claimed.
“A latent space is used as a scientific explanation.”Learned-lens overread is being made.Name observation map, validation slice, generalization boundary, and stop causal or ontology overread.
“The method scales because the mathematics is elegant.”Scale-law adequacy or BLP preference claim is being made.Name scale variable or scale window; use C.18.1 for scale-law adequacy, C.19.1 for general method scale-preference or BLP preference, and C.31.ASAP for architecture scale preference.

Entry guidance states when C.29 is the first governing pattern and when another pattern is first:

Entry situationFirst governing patternTempting wrong first pattern
mathematical-lens use inside a phrase such as "market is a field"C.29C.26, F.9, or A.3.3 before declared lens use is checked
explanation-facing rendering that uses a mathematical lensE.17.EFP; C.29 only for the mathematical-lens use part when that lens affects explanation useC.29 as the first pattern for every explanation
bounded comparative review unit with a mathematical comparison constructionE.17.ID.CR; C.29 only for declared lens use or rival-lens relationC.29 as the comparison or adjudication record
same-EntityOfConcern representation-scheme transitionA.6.3.RT; C.29 only if the transition imports a contested or use-affecting mathematical lensC.29 for every table, diagram, geometry, or notation shift
coarsened rendering useful only under narrower admissible use and source-bearing reopenA.6.3.CSC; C.29 only if the coarsening depends on mathematical abstraction or coarse-grainingC.29 as source-bearing return or bridge relation
within-context representation adequacyC.29F.9 when no cross-context meaning claim is being made
quantum-like dashboard or probe-order claimC.26 plus C.29 compatibilityphysical quantum ontology
graph state spaceA.19 or A.3.3 unless lens transfer is explicitC.29 for every graph word
category bridge across contextsF.9 plus C.29 lens-use relationduplicate bridge semantics inside C.29
prediction, rate, trajectory, recovery, convergence, or rhythm claimC.27 when temporal adequacy is being claimed; C.29 only for declared lens usetreating a mathematical prediction cue as enough for temporal-use adequacy
decorative scale languageno C.18.1 or C.19.1 unless scale behavior is being claimedscale-law review for every scale word

Admissible entry stops are: no C.29 output needed, MathLensUse.OneLine used, or a neighboring governing pattern applied.

Governing-pattern boundary table

A C.29 application uses this governing-pattern discipline so mathematical-lens use stays in the C.29 discipline rather than becoming a second authority over neighboring claims.

Positive claim kind:

A C.29 application gives a pattern-local adequacy discipline for claims that use a mathematical object, formalism, learned representation, simulation object, or mathematical family as a mathematical lens for a stated use. The application asks for candidate mathematical object, lens mapping mode, preserved and lost structure, visible invariant or distinction, LensUseAdmissibilityValue or validation regime, admissible use, non-admissible use, and stop condition.

Boundary application rule: when the claim being made is a choice result, work plan, evidence path, assurance tuple, explanation rendering, comparative review unit, representation shift, temporal claim, bridge, causal-use claim, measurement claim, scale-law claim, selector, or benchmark, the NeighborGoverningPatternNote names the governing FPF pattern and project-side record. A C.29 application can contribute a lens-admissible prediction, distinction, obstruction, diagnostic boundary, or rival-lens note that the governing record can cite; it does not create that neighboring record.

Object or claim being madeGoverning FPF patternC.29 contribution
mathematical-lens useC.29Names the C.29 discipline: candidate mathematical object, lens mapping mode, preserved structure and lost structure, invariant or distinction, LensUseAdmissibilityValue, admissible use, non-admissible use, and stop condition.
durable reusable names beyond pattern-local fieldsF.18Cite when MathLensUse names become durable beyond C.29-local use.
broad wording and epistemic precision restorationE.10, C.2.PObey head-kind, register, and epistemic precision-restoration discipline.
relation precision, arity, polarity, and slot structureA.6.P, A.6.5Apply only if relation substrate becomes representation affecting the stated use.
object, description, and carrier distinctionA.7Do not identify the phenomenon directly with the mathematical object.
dynamics state space and transition lawA.3.3Assess imported or contested lens use; do not govern dynamics semantics.
CharacteristicSpace, slots, topology, order, and metric-space distance overlaysA.19Apply only when an overlay becomes a domain-transferring or publication-bearing lens.
ChoiceResult, local choice record, selected-set publication, option-selection claim, or selector or benchmark resultC.11; G.5 or G.9 when selected-set or benchmark publication use is being madeCan contribute a lens-admissible prediction, distinction, obstruction, diagnostic boundary, or rival-lens note for the decision or selector record.
selected method, method-family selection, U.WorkPlan, performed U.Work, work-result record, or work-relevant source restorationA.15, A.15.1, A.15.4Can contribute method-relevant lens use; method, plan, performed-work, and source-restoration records stay with the A.15 family.
evidence path, source currentness, provenance, evidence carrier, or model card or datasheet used as evidenceA.10States LensUseAdmissibilityValue only; evidence paths and provenance remain A.10 matters.
assurance, readiness, reliability, release confidence, safety, trust, or engineering justificationB.3 plus relevant G patterns when the corresponding claim is being madeTreats declared lens use as possible input only; mathematical elegance does not raise assurance.
measurement construction, scale, unit, or comparability, or evidence-stub adequacyC.16States measurement-dependent LensUseAdmissibilityValue only; measurement construction, scale, unit, or polarity, direct comparability, and evidence-stub adequacy stay with C.16.
explanation-facing rendering or generated explanation useE.17.EFPStates mathematical-lens use for the mathematical explanation used inside the rendering; explanation-use discipline stays with E.17.EFP.
bounded comparative review unitE.17.ID.CRStates declared lens use for a mathematical comparison construction or rival lens when that construction affects the comparative review use.
same-EntityOfConcern representation-scheme transitionA.6.3.RTApplies only if the representation shift imports a contested or use-affecting mathematical lens.
coarsened rendering with narrower admissible use and source-bearing reopenA.6.3.CSCApplies only if the coarsening depends on mathematical abstraction, quotienting, or coarse-graining.
cross-context meaning, bridge kind, direction, CL, loss, and substitutionF.9Reference Bridge; do not duplicate Bridge Card semantics.
causal-use question or verdictC.28Block causal overread or cite a C.28 application or support record.
forecast, rate, trajectory, rhythm, recovery, convergence, stabilization, temporal window, or rate-change used as sufficient for a useC.27Can state a prediction-relevant or distinction-relevant mathematical-lens use; temporal-claim adequacy stays with C.27.
scale-law and Bitter-Lesson preference claimsC.18.1, C.19.1, C.31.ASAPCite scale-window, scale-law, BLP, or architecture scale-preference evidence when scale behavior, general method scale preference, or architecture scale preference is being claimed.
quantum-like modelingC.26Treat C.26 as C.29-compatible specialization, not as full-card inheritance for every QL-lite note.
selectors, benchmarks, parity, SoTA packs, and model-selection publicationsG.5, G.9, G.2, G.10Selector or benchmark records govern publication and evaluation; a MathLensUse.* card can contribute declared lens use for a selector or benchmark input only.

MathLensUse.Card@Context shape

MathLensUse.Card@Context is a pattern-local card in C.29. It is not U.MathLensUseCard, U.LensUseRecord, or any universal U.* kind.

Namespace note: MathLensUse.Card@Context, MathLensUseOutputRef, MathLensUse.OneLine, MathLensUse.MiniCard, MathLensUse.FullCard, and CC-C29-* are C.29-local instruments unless they cite existing FPF kinds or refs. MathLensUseOutputRef references the applicable C.29 output for the stated use; it is not a demand for MathLensUse.FullCard. Do not mint generic suffixes such as SystemMathLensUse, MathLensUseQuality, or MathLensUseCompliance. Durable cross-pattern MathLensUse.* names, records, or refs require explicit minting or reuse plus naming, kind, and design-rationale decisions through F.8, F.18, C.3, and E.9; otherwise they remain pattern-local labels.

Read MathLensUse.Card@Context through three aspects:

AspectFields or refsBoundary
Mathematical object in lens-use positionCandidateMathObject, LensMappingMode, PreservedStructure, LostStructure, InvariantsExposedNames the representation used by C.29; does not identify the phenomenon with the mathematical object and does not replace an A.6.0 FormalSubstrate signature.
Use-admissibility and validationLensUseAdmissibilityValue, ValidationUseOverlayRef?, LearnedLensOverlayRef?, failure case, uncertainty or approximation noteStates the use-admissibility value for this lens use; does not create an evidence path, benchmark result, assurance, or release confidence.
FPF use and boundariesadmissibleUse, nonAdmissibleUse, StopCondition, BridgeRefSet?, CausalUseDisposition?, AssuranceUseDisposition?, ExportPolicyRef?States what the reader may do and which governing FPF patterns govern claims being made.

Validity boundary: mathematical validity of the object under its assumptions is not the same as representational adequacy to the phenomenon; representational adequacy is not empirical validation for a use; empirical validation is not a causal-use verdict; a causal-use verdict is not assurance, release confidence, decision sufficiency, or benchmark superiority.

MathLensUse.FullCard base fields:
MathLensUse.Card@Context := {
  TargetPhenomenon,
  entityOfConcernRef?,
  BoundedContext,
  CandidateMathObject,
  LensMappingMode,
  PreservedStructure,
  LostStructure,
  InvariantsExposed,
  LensAdmissiblePredictionOrDistinction?,
  LensUseAdmissibilityValue,
  admissibleUse,
  nonAdmissibleUse,
  StopCondition
}

Conditional fields apply only when the corresponding neighboring claim, claim-bearing use, or publication use is being made:

MathLensUse.FullCard conditional fields := {
  DynamicsRef?,
  TransitionLawRef?,
  ObservationMapRef?,
  ScaleWindow?,
  CoarseGrainingRule?,
  SourceReturnCondition?,
  PublicationUseClassification?,
  PrincipalRivalLens?,
  RivalLensSet?,
  RivalLensRelation?,
  ValidationUseOverlayRef?,
  LearnedLensOverlayRef?,
  BridgeRefSet?,
  CausalUseDisposition?,
  AssuranceUseDisposition?,
  ExportPolicyRef?
}

Plain card gloss. A useful mathematical lens says: what phenomenon is being seen, through which mathematical object, by what mapping, what survives, what is lost, what becomes visible, what use-admissibility value and validation boundary make this use admissible, the now-admissible user move, the blocked user inference, and where the lens stops.

Conditional overlays

The base card stays light. These overlays are used only when their corresponding use is being made. Ordinary C.29 use does not fill this block; it escalates here only when the claim is already publication-facing, assurance-input, benchmark, bridge, model-selection, prediction, scientific or model, learned-lens, or causal-use facing.

MathLensUse.ValidationUseOverlay@Context :=

  ClaimUse,
  ValidationRegime,
  EvaluationSlice,
  ApproximationOrUncertaintyNote,
  KnownFailureCaseOrCounterexample,
  SensitivityOrRobustnessNote?,
  DomainOfApplicability,
  OutputChangeCondition?

Use the validation overlay when the lens is used for prediction, publication, assurance input, benchmark use, model selection, or scientific claim or model claim. LensUseAdmissibilityValue alone is then insufficient. Keep the neighboring notions separate: verification is proof or formal checking under stated assumptions; validation is fit for a declared use and regime; calibration aligns model parameters or readouts with observations; explanation states why the lens makes a distinction intelligible. The C.29 output does not let any one of these four labels silently stand in for the others.

MathLensUse.LearnedLensOverlay@Context :=

  DataOrTrainingRegime,
  ObservationMapRef,
  GeneralizationClaim,
  DiscretizationOrResolutionPolicy?,
  ValidationRegime,
  ApproximationOrUncertaintyNote,
  StopCondition

Use the learned-lens overlay when the mathematical object is fitted, learned, latent, simulation-trained, data-derived, a neural operator, a surrogate solver, an embedding, or a world-model representation.

Learned-lens stop variants are named explicitly when they are tempting:

Tempting overreadStop condition form
out-of-distribution generalizationno generalization outside the declared validation regime
causal mechanismno causal mechanism claim without [C.28](/generated/patterns/C.28) and evidence path
latent dimension ontologylatent coordinate or factor is not an entity kind without separate ontology and evidence
unobserved-variable recoveryno recovery of hidden variables beyond the declared observation map and validation slice
benchmark superiorityno benchmark or selector superiority outside the declared evaluation slice and relevant G.* record
assurance or release useno assurance, release, or reliability use without [A.10](/generated/patterns/A.10), [B.3](/generated/patterns/B.3), and relevant G-pattern result
MathLensUse.CausalAbstractionCheck@Context :=

  LensMappingMode,
  InterventionStructureStatus ∈ {preserved, approximated, notClaimed},
  CounterfactualUseStatus ∈ {preserved, approximated, notClaimed},
  C28ApplicationRef?

This is not a first-class causal abstraction card. It is a lightweight check: when LensMappingMode is abstraction, quotient, coarse-graining, macro-model, or simulation, and admissibleUse would include intervention, policy, counterfactual, or causal explanation, apply [C.28](/generated/patterns/C.28) for causal-use question and verdict.

Repair decision table

Failed or missing itemRequired repair
no CandidateMathObjectIf the problem still needs a mathematical lens for the next move, first name the ProblemStructureCue and write a MathLensUse.LensCandidateNote with the cheapest candidate lens family and admissible next move; downgrade to ordinary prose or remove the mathematical claim only when no candidate lens changes action.
no LensMappingModeChoose a lens mapping mode or downgrade to analogy-only prompt.
no PreservedStructureRemove the claim-bearing mathematical phrase.
no LostStructureAdd a loss note, downgrade, or justify an equivalence or isomorphism claim through the governing pattern.
no invariant, obstruction, distinction, or payoffKeep the phrase as didactic recognition cue or orientation-only.
no LensAdmissiblePredictionOrDistinction where decision, prediction, or model selection is being claimedBlock decision or assurance use; downgrade to analogy-only if no admissible consequence is named.
evidence is analogy-onlyBlock decision, publication-as-established-model, assurance, release, and causal use unless evidence path, validation regime, causal-use relation, or assurance result is supplied by its governing pattern.
no LensUseAdmissibilityValueBlock decision, publication, assurance, benchmark, and release use.
causal, intervention, policy, or counterfactual overreadApply C.28 or block causal use.
cross-context meaning, export, or substitution overreadApply F.9 or block export and substitution.
scale, universality, knee, exponent, or scale-advantage claimApply C.18.1 or C.19.1, or keep the lens local and bounded by stop condition.
assurance or release useApply A.10, B.3, or relevant G patterns, or block assurance use.
StopCondition is genericName the most tempting nearby overread the lens does not license.

Field meanings

FieldMeaning selected for C.29Boundary guard
TargetPhenomenonPlain entry prompt naming the phenomenon or situation to be understood.Not a U.Kind, not a EntityOfConcern slot, and not a publication-lane item.
entityOfConcernRef?EntityOfConcern reference named by value when the lens appears inside a claim-bearing episteme, PublicationUnit, benchmark, bridge, or assurance-bearing statement.Required only when the lens appears in a claim-bearing episteme, PublicationUnit, benchmark, bridge, or assurance-bearing statement.
BoundedContextContext in which the lens is claimed to work.Cross-context use cites F.9.
CandidateMathObjectConcrete mathematical object, structure, formal role, learned representation, or local formalism.Broad family labels are prompts until narrowed.
LensMappingModeC.29-local lens mapping mode.Stays separate from F.9 BridgeKind, A.6.P RelationKind, C.3 kind, and domain relation kinds; cross-context transfer uses F.9 when bridge semantics are being claimed.
PreservedStructureStructure preserved by the lens in the declared use.No preserved structure means the mathematical phrase cannot justify the stated use.
LostStructureStructure the lens drops, abstracts away, or does not preserve.Empty loss requires explicit equivalence or isomorphism justification through the governing pattern.
InvariantsExposedInvariant, obstruction, fixed point, symmetry, conservation law, diagnostic boundary, or other payoff.If no payoff is visible, downgrade to recognition cue.
ObservableOrControllableCue?Cheap cue naming what can be observed, read out, assigned, varied, or validated before a candidate lens can change action. Examples include arrivals, work in progress, service time, wait time, edge meaning, intervention assignment, outcome readout, observation map, validation slice, scale variable, or scale point.Not a measurement construction, evidence record, causal-use result, or validation verdict. Apply C.16, A.10, C.28, or A.3.3 when those claim types are being made.
ObservationOrReadoutNeeded?Optional one-line note naming the observable, readout, assignment, outcome, validation slice, or scale point still needed before the stated admissible move is justified.If this missing item makes a measurement, evidence, causal, dynamics, or validation claim being made, that claim is governed by the neighboring pattern governing that claim.
LensAdmissiblePredictionOrDistinction?Required when prediction, decision, method selection, model selection, or publication-as-model is being claimed.Not required for orientation-only use.
DynamicsRef?, TransitionLawRef?References to A.3.3-owned dynamics when dynamics semantics are being claimed.C.29 does not own dynamics.
ObservationMapRef?Probe, readout, or observation map when observation makes the lens admissible for the declared use.Required when learned or measurement-dependent lens use is being made.
ScaleWindow?, CoarseGrainingRule?Scale range and coarse-graining or compression rule when scale behavior, macro description or effective description, universality, coarse behavior, latent compression, or renormalized description is being claimed.C.18.1 and C.19.1 govern scale-law and BLP evidence; the C.29 output states only how the lens remains adequate inside the declared window.
SourceReturnCondition?Condition under which the reader must return from the compressed or coarse description to the source-side variables, observations, cases, or mechanisms.Required only when abstraction, coarse-graining, compression, latent representation, or macro-modeling drops source-side distinctions that could matter to the stated use.
PublicationUseClassification?Optional note for publication-facing use: orientationOnly, explanationFacing, comparisonInput, decisionInputCandidate, benchmarkInput, assuranceInputCandidate, or reusableModelPublication.Does not publish, release, benchmark, assure, or decide anything by itself; the governing publication, benchmark, evidence, decision, and assurance patterns still govern those claims.
OutputChangeCondition?Condition under which this C.29 output must be narrowed, demoted, replaced, retired from claim-bearing use, or handed to a neighboring FPF pattern.Not a process log or standing state-family record; it states a result boundary for the lens use being made.
OrdinaryRivalOrFallbackOrdinary prose, accepted local theory, direct measurement, or simpler neighboring-pattern application the reader would use without this lens.Required for cheap outputs; prevents prestige bias before broad rival review.
PrincipalRivalLens?Default ordinary or most relevant rival lens.Preferred over a broad literature survey.
RivalLensSet?Broader comparison set only when publication, selection, or claim-bearing comparison is being made.Not a G.5 selector, benchmark harness, or parity result.
RivalLensRelation?Declared relation between the lens in this use and the principal rival or rival set being compared. Allowed local relation values include ordinaryFallback, complementary, sameUseLowerCost, morePreservedStructureHigherCost, lowerErrorOnDeclaredEvaluationCriterion, clearerExplanationForDeclaredReader, bridgeNeedsF9, causalUseNeedsC28, differentScaleWindow, differentLossProfile, incomparableForCurrentUse, blockedByStopCondition, and unresolved. Examples: a queueing lens and a causal lens can be complementary for different moves; a latent manifold and a causal graph can conflict when latent axes are read causally; an RG-like lens and a micro-dynamics lens can have different scale windows.Names disagreement only; a C.29 output is not a winning-lens choice, literature review, selector result, benchmark result, or parity result. Any superiority claim names the evaluation criterion, reader, cost, scale window, or governing pattern that makes the comparison admissible.
LensUseAdmissibilityValueLocal finite lens-use admissibility field.Not evidence, an EvidenceGraph, a PathId, or an assurance score.
BridgeRefSet?Reference to F.9 Bridge material when context crossing is being claimed.Bridge semantics stay with F.9.
CausalUseDisposition?One of noCausalUseClaim, causalUseBlocked, C28ApplicationRef, or C28SupportRecordRef.No causal-reference shortcut; no causal verdict from C.29.
AssuranceUseDisposition?One of noAssuranceUseClaim, assuranceUseBlocked, evidenceInputOnly, A10Ref, or B3ApplicationRef.No assurance verdict from mathematical elegance.
admissibleUseAdmissible use of the lens in this C.29 application.Matches evidence and validation regime.
nonAdmissibleUseTempting neighboring use that is blocked or governed by another governing pattern.Names the neighboring pattern when that neighboring claim is being made.
StopConditionMost tempting nearby claim the lens does not license.Main anti-overread output; not boilerplate.
ExportPolicyRef?Governed reuse or export policy when publication or downstream reuse is being claimed.Not required for local orientation or mini-card use.

Neighboring-pattern boundaries

Neighboring patterns remain necessary and are not displaced. A retained neighboring-pattern application note answers the working question for the neighboring pattern being used: what does the reader do with the mathematical lens now? State the neighboring-pattern trigger and the first admissible move for that neighboring pattern. If a note only repeats that C.29 does not replace a neighbor, keep that boundary in the C.29 governing-pattern table instead of copying generic boundary prose into the neighboring pattern:

  • A.6.P handles relation precision restoration.
  • A.3.3 handles dynamics semantics.
  • A.19 handles characteristic spaces, overlays, normalization, and comparability.
  • F.9 handles cross-context semantics and Bridge loss.
  • C.18.1 and C.19.1 handle scale-law and BLP claims.
  • C.26 handles one specific quantum-like lens family.
  • C.28 handles causal-use admissibility.
  • A.10 and B.3 handle evidence and assurance.
  • C.11, A.15, A.15.1, and A.15.4 handle choice results, method and work separation, work plans, performed work, and work-relevant source restoration.
  • E.17.EFP, E.17.ID.CR, A.6.3.RT, and A.6.3.CSC handle explanation-facing renderings, bounded comparative review units, same-EntityOfConcern representation-scheme transitions, and controlled semantic coarsening.
  • C.27 handles temporal-claim adequacy.

Use the C.29 discipline when the question under repair is: Is this mathematical lens adequate for this declared use, and where does it stop?

Naming, ontology, and epistemic precision-restoration account

Name

Name: C.29 — Mathematical Lens Use.

Local namespace: MathLensUse = Mathematical Lens Use. No prior temporary code is reused; the pattern-local card and reference namespace uses MathLensUse; checklist IDs use CC-C29-*.

The stable name is Mathematical Lens Use because C.29 governs a declared use and its admissibility boundary, not strength on an unnamed scale. Plain prose can still say that a useful mathematical lens compresses many cases while preserving declared distinctions; claim-bearing use is recovered through CandidateMathObject, LensMappingMode, PreservedStructure, LostStructure, LensUseAdmissibilityValue, and StopCondition.

C.29-local naming guard

MathLensUse.* instruments are C.29-local unless separately admitted. They are not U.* kinds, not durable FPF record families, and not substitutes for U.Kind, KindSignature, KindBridge, BridgeCard, EvidenceGraph, ChoiceResult, U.WorkPlan, U.Work, or assurance records.

Do not mint LensKind, MathLensKind, MathLensUseQuality, MathLensUseCompliance, or MathLensUseRecord from C.29 use.

When one C.29 application needs a mathematical-lens name to become reusable outside that application, use F.18 local-first naming; when it quantifies over a class of described entities, use C.3 Kind-CAL; when it creates or reuses a durable concept or record family, use F.8 minting or reuse and E.9 design-rationale discipline.

Tempting wrong names rejected

Tempting nameReason rejected
Mathematical Ontology PrincipleSmuggles the metaphysical claim C.29 rejects.
Single-Foundation Math StanceWould collapse plural lens families into one foundation claim; C.29 instead tests each selected family by declared mapping, local use, and recoverable loss.
Math Metaphor AdequacyToo narrow and too vague; the selected answer is structure-preserving representation, not mere metaphor.
Quantum-Like GeneralizationMisplaces the general pattern under one special lens.
Category-Theoretic Bridge PatternOver-privileges category theory; C.29 is broader.

Ontology guard selected for FPF

A physical, organizational, or epistemic phenomenon is not directly identified with a mathematical object; it is represented through a mathematical object by an explicitly declared mapping that preserves some structures and loses others.

C.2.P recoveries applied

Earlier wording riskRecovered wording in C.29
source or targetUse source-basis document, Basis used, entityOfConcernRef, governing FPF pattern, BridgeRefSet, or pattern reference named by value as appropriate.
raw source intake as evidenceRecovered as source-basis text, not authority. Selected content is integrated through C.29:13a, C.29:13, and the field rows and checklist rows for its claim being made.
structure-preserving identificationRewritten to structure-preserving representation or mapping unless direct equivalence is explicitly the LensMappingMode.
Source compound fields that merge dynamics reference and transition-law referenceRewritten as separate DynamicsRef? and TransitionLawRef? fields.
Procedure-like pattern-control languageRewritten as pattern application, Disposition, BridgeRefSet, C28ApplicationRef, or C28SupportRecordRef only when that neighboring-pattern application or support record is being used.
ExportPolicySplit into admissibleUse, nonAdmissibleUse, and optional ExportPolicyRef?.
free strength qualifierReplace with named adequacy fields, evidence path, scale construction, comparability construction, use-admissibility value, and stop-condition wording.
model, lens, math as prestige headsRecovered as CandidateMathObject, LensMappingMode, PreservedStructure, LostStructure, and LensUseAdmissibilityValue.
Causal or assurance implicationsRecovered as CausalUseDisposition? and AssuranceUseDisposition?, with C.28, A.10, B.3, and G-patterns as neighboring governors.

Rationale

Why this improves FPF

The selected first-principles position in C.29 is operational, not metaphysical. It treats first-principles mathematical thinking as local construction discipline: declare the smallest structure, rule, invariant, resource condition, observation, or consistency boundary from which the next move follows or is blocked. In that sense, a C.29 application puts mathematical construction before adequacy control: the reader can introduce a queue, graph, state space, measure, topology, algebraic structure, variational quantity, simulation object, or learned representation when that structure improves the work, and then record the mapping, preserved structure, lost structure, use-admissibility value, and stop condition.

First-principles mathematical structures can come from several families without turning any one family into an FPF-wide foundation: signatures, logics, axioms, type or abstraction distinctions, symmetries, invariants, compositional structure, local-global relations, scale relations, boundary conditions, variational principles, action, energy, free-energy, loss, or value functionals, constrained optimization structure, probability, information, typicality, algorithmic construction, resource bounds, implementation constraints, consistency boundaries, causal or intervention-preservation questions, operator or function-space mappings, and admissible observation maps. Each use still needs declared mapping, preserved structure, lost structure, validation regime or use-admissibility value, and stop condition.

This fits FPF because FPF already commits to state explicitness, bounded contexts, evidence and assurance, cross-context bridges, open-ended evolution, SoTA alignment, notational independence, and avoidance of ornamental formalism.

C.29 makes an existing discipline explicit: when FPF uses a CandidateMathObject, local formalism, learned representation, simulation object, or mathematical family as a mathematical lens for a stated use, the C.29 application declares what that use preserves, what it loses, what it makes visible, which rival lenses still change the next admissible move, and where its admissible use stops.

The compact Plain line remains useful because it points to a real heuristic: good mathematical lenses are not decoration; they are compact ways of seeing structures that survive transfer. The Plain line stays readable, while the card and checklist record the FPF commitments named by value.

Alternatives rejected

AlternativeWhy rejected
Keep only local math-lens hooksLeaves no general conformance pattern; C.26-style guardrails do not transfer to non-QL lenses.
Add only a paragraph to A.6.POverloads relational precision restoration with general modeling adequacy.
Add only a paragraph to F.9Bridge discipline is about cross-context semantics; C.29 also governs within-context mathematical representation.
Treat Vanchurin as a new FPF foundationToo speculative and ontology-bearing; selected source-use disposition is candidate-lens stress test only.
Treat Sandberg thread as a foundations listUseful recognition cue, but not a proof source, closed taxonomy, or FPF law.
Require a fixed list of permitted lens familiesWould make first repair depend on list membership instead of declared structure, loss, and admissible use.
Make mechanized proof mandatory for every C.29 outputToo narrow. Mechanized proof can be one LensUseAdmissibilityValue value, but adequacy can also rest on accepted domain theory, formal derivation, simulation, or empirical fit.

Pillar impact analysis

PillarImpact
P‑1 Cognitive ElegancePositive: first-principles structure becomes visible without ornamental formalism; one lens-use card replaces many prestige metaphors while example rows stay subordinate to declared fields and admissible use.
P‑2 Didactic PrimacyPositive: first-minute use starts with the useful question "what structure changes the next move?", then Plain wording remains backed by recoverable Tech fields.
P-3 Scalable FormalityPositive: admits maturation from ordinary cue to candidate lens, one-line repair, formal derivation, validation regime, or evidence-backed domain theory.
P‑4 Open‑Ended KernelPositive if placed in Part C, not Kernel; avoids making any mathematical family or foundation a kernel axiom.
P‑5 FPF LayeringPositive: C.29 becomes a modular parent pattern or coordinator for specific mathematical lenses while neighboring patterns keep their own authority.
P‑6 Lexical StratificationPositive: separates Plain "lens" from technical CandidateMathObject, LensMappingMode, PreservedStructure, LostStructure, StopCondition, and evidence fields.
P‑7 Pragmatic UtilityPositive if every mathematical-lens use result changes an admissible prediction, distinction, obstruction, model choice, diagnostic boundary, or stop condition.
P‑8 Cross‑Scale ConsistencyPositive: scale windows, coarse-graining, local-global relations, composition, dynamics, symmetry, and boundary conditions become declared rather than assumed.
P-9 State ExplicitnessPositive: state, observation, dynamics, measurement, use-admissibility value, and stop-condition fields cite A.3.3, A.19, C.16, and A.10 when those claims are being made.
P‑10 Open‑Ended EvolutionPositive: new lens families and first-principles modeling structures can be added without destabilizing Core.
P‑11 SoTA AlignmentPositive: admits current mathematical modeling, applied category theory, scientific machine learning, causal abstraction, learning-dynamics research, and plural foundations without over-adopting them.

Principle-taxonomy balance

PillarC.29 effect
GovNew mathematical-lens use norms require E.9 design-rationale discipline and SoTA discipline when they alter FPF norms.
ArchWrong governing-pattern assignment is blocked; C.29 coordinates but does not replace neighboring patterns.
ontology and episteme distinctionRepresentation, mapping, preservation, loss, and LensUseAdmissibilityValue are explicit.
PragA useful lens produces a useful prediction, distinction, obstruction, or stop condition; otherwise it remains didactic prose.
DidThe card gives a small first-use check while experts can inspect field meanings named by value.

Consequences and validation harness

BenefitCost or handling
FPF gains a general discipline for mathematical lens use while mathematical lenses stay tied to declared structure, declared loss, and admissible use.Adds one new pattern; neighboring-pattern applications govern evidence, causal, bridge, assurance, work, decision, publication, and admission uses.
Existing specialized lenses such as C.26 become easier to explain as special cases.C.26 needs only relation wording, not a rewrite of its core.
Authors get a small checklist before using terms such as field, quantum, category, RG, manifold, graph, or information geometry.Some quick analogies will be downgraded to local prose; this is intended.
Vanchurin-like speculative work can enter as candidate-lens stress tests.Requires strict Adapt-not-Adopt marking.
Cross-domain transfer becomes auditable through preserved structure and lost structure and stop conditions.More upfront statement effort; reduces downstream epistemic precision repair.
C.29 can stay readable rather than becoming a dry ontology form.Requires a Plain and Tech discipline: Plain metaphors can guide recognition, but Tech fields govern claim-bearing uses.

Validation harness for Stable admission and material refresh

For Stable admission or material refresh of C.29, run a small C.29 validation harness. The harness is not a benchmark mandate and not a tool requirement. It is a repeatable admission check that the pattern yields correct first outputs, avoids false positives, preserves neighboring-pattern writing boundaries, and keeps the first useful move visible.

This subsection governs steward-side validation, not the ordinary C.29 user path. A working user applies the action path and chooses the cheapest honest output; they do not run the harness merely to decide between ordinary prose, MathLensUse.OneLine, MathLensUse.MiniCard, or NeighborGoverningPatternNote.

C.29 output-change conditions:

New conditionRequired result
validation slice fails, degrades, or no longer matches the stated regimeChange LensUseAdmissibilityValue to the admissible value, update the failure case, narrow the admissible use, or block prediction-facing use.
a principal rival lens changes the next admissible moveAdd PrincipalRivalLens? and RivalLensRelation?, or replace the lens for that use.
the lens becomes decision-facing, publication-facing, assurance-input, benchmark, model-selection, prediction, or repeated cross-case claim inputUse MathLensUse.FullCard and the applicable overlay or governing FPF pattern.
source-use role becomes outdated, contradicted, or demoted to background onlyChange the SourceUseRole, update the use-admissibility value, or retire the lens from claim-bearing use.
bridge, causal, measurement, scale, temporal, evidence, assurance, selector, or benchmark claim is being madeName the governing neighboring pattern and keep C.29 to the declared lens-use part.
abstraction, compression, coarse-graining, or latent representation drops a distinction now needed for the declared useAdd SourceReturnCondition?, narrow the use, or block the compressed-lens claim.

Smallest source-return and output-change conditions:

ConditionRequired result
a source-basis document or source-basis family changes the lens family, validation boundary, limitation, or stated use used by this C.29 outputUpdate SourceUseRole, LensUseAdmissibilityValue, and OutputChangeCondition?; narrow, replace, or retire claim-bearing use when the new basis no longer fits the declared use.
a later source supersedes or contradicts the source-use decision that made the lens admissibleMark the source-use decision as superseded or contradicted for that use, then select a new source-use role, lower the output class, or block claim-bearing use.
a neighboring governing pattern changes the use-rights for measurement, evidence, causal use, assurance, Bridge semantics, scale law, selector, benchmark, decision, or workKeep C.29 only for the declared lens-use part and apply the changed governing pattern to the neighboring claim before the C.29 output is reused.
the same lens family starts carrying validation, causal-use, evidence, assurance, selector, benchmark, release, or work claimAdd the governing-pattern application, or narrow the C.29 result to lens-admissible prediction, distinction, obstruction, diagnostic boundary, or stop condition only.
preserved structure or lost structure can no longer be replayed from the source-side variables, observations, cases, mechanism, or epistemeAdd SourceReturnCondition?, restate PreservedStructure and LostStructure, lower the output class, or block the compressed-lens claim.

AI-assisted thin-echo result rule:

Thin echo or query shapeRequired result
field-like, quantum-like, category-like, manifold, entropy, RG, graph, embedding, or another mathematical prestige head appears aloneDo not answer from the family label. First name the use under repair or state that no C.29 use is being made.
claim being made is causal, measurement, bridge, evidence, temporal, work, assurance, selector, or benchmark-facingName the governing FPF pattern before any C.29 output.
C.29 still applies after the governing-pattern checkReturn at least CandidateMathObject, PreservedStructure, LostStructure, AdmissibleNextMove, and StopCondition, or downgrade to LensCandidateNote or NoMathLensUseNeededNote.

C.29 edge-case boundary results:

Edge caseRequired result
mechanized proof of a model propertyState assumptions and proven property; empirical evidence or assurance use stays with A.10, B.3, or relevant G patterns.
simulation-calibrated lensScenario exploration is allowed; prediction, decision, or counterfactual reliance needs validation and the neighboring-pattern result named by value.
latent-space visualizationUse learned-lens overlay and stop latent ontology, causal mechanism, or unobserved-variable recovery unless separately governed by the neighboring pattern governing that claim.
isomorphism or equivalence claim named by valueJustify the relation named by value or downgrade LensMappingMode.
multi-lens compositionName the principal lens and neighboring notes; avoid one giant full card that mixes queue, graph, causal, temporal, and assurance authority.
lens becomes accepted domain theoryKeep local domain theory with the domain pattern; durable FPF naming or kind change needs F.18, C.3, F.8, and E.9.
mathematical notation shift onlyUse A.6.3.RT unless mathematical-lens use changes the declared use.
coarsened explanationUse A.6.3.CSC for source-bearing return, narrowed use, and coarsened rendering; cite C.29 only for abstraction adequacy.

Harness shape:

FieldMeaning
CaseIdStable case id.
InputPhraseThe phrase or claim a cold user might write.
ExpectedFirstPatternC.29, a neighboring pattern, or no C.29 output needed.
ExpectedMathLensUseOutputClassNoMathLensUseNeeded, OneLine, MiniCard, FullCard, or NeighborGoverningPatternNote.
RequiredFieldsMinimal fields or overlays required.
NeighborPatternRefsNeighboring governing patterns named by value when their claims are being made.
ExpectedRepairDowngrade, narrow, add loss, add validation, choose rival lens, or apply neighbor.
ExpectedStopConditionMost tempting nearby overread blocked.
ExpectedNonUseDecisionPresent only for false-positive cases.

Minimum harness cases:

CaseExpected result
“organization is quantum”C.26 plus C.29 compatibility only if order or probe effects are being claimed; otherwise downgrade to metaphor; physical quantum ontology blocked.
Markov kernel in accepted local reliability modelA.3.3; no full MathLensUse.FullCard unless lens-transfer, publication, assurance, bridge, or reusable explanation is being claimed.
category-like research fieldC.29 mini-card and possibly F.9; semantic truth and evidence strength explicitly lost.
RG-like scale lawC.29 plus C.18.1; scale window and coarse-graining rule required.
Vanchurin-style universe-as-learningcandidate lens only; not accepted physics; stop condition blocks ontology.
queueing production linepositive mini-card; throughput and latency reasoning admitted; motivation, obligation, and full organization ontology blocked.
team backlog behaves like a queuemini-card admits waiting and bottleneck reasoning; motivation and duty claims blocked.
same graph formalism in two contextsF.9 governs Bridge semantics; C.29 governs declared lens use.
latent manifold or neural operator as scientific modellearned-lens overlay requires observation map, training regime or validation regime, generalization claim, uncertainty note, and stop condition.

Reader-fit checks for admission or material refresh:

ReaderRequired result
engineer-managerCan decide local metaphor, one-line, or mini-card without using the full card by default.
researcherCan state preserved structure, lost structure, and stop condition without turning the pattern into a philosophy-of-mathematics essay.
FPF stewardCan identify the governing pattern for causal, evidence, bridge, scale, measurement, dynamics, temporal, decision, work, explanation, comparison, representation, or assurance claim before accepting a C.29 claim.
SoTA authorCan mark a source as adopt, adapt, reject, or candidate stress test without laundering speculative work into accepted FPF law.
AI-assisted readerRecovers C.29 or the neighboring governing pattern from the query, and does not answer from a thin echo such as field-like, quantum-like, or category-like alone.

Archetypal grounding

ArchetypeCandidate lensPreservationLossOutput and stop condition
Production line as queueing networkQueueing networkflow, service rates, bottlenecks, waiting timehuman motivation, contractual duties, rare events not modeledMathLensUse.MiniCard; admits throughput and latency reasoning, not full organizational ontology.
Team backlog as queueQueueing lenswork arrival, work in progress, service time, waiting timeobligation, motivation, priority legitimacy, skill learningMathLensUse.OneLine or mini-card; admits bottleneck reasoning, not moral or managerial authority.
Manager sees slow throughput but has no lensQueue or flow candidate notepossible arrivals, work in progress, service bottleneck, waiting timemotivation, duty, priority legitimacy, full team ontologyStart with MathLensUse.LensCandidateNote; use MathLensUse.OneLine or mini-card only after the candidate queue or flow lens changes the next admissible inspection.
Measurement comparison as declared distance or scoring choiceMetric-space distance, embedding, or scoring-function lenscomparability, distance, proximity, clustering, threshold structureevidence strength, causal mechanism, value judgmentMathLensUse.OneLine or mini-card; admits comparison design and sensitivity checks, not truth or priority by itself.
Stabilizing system as state-space dynamicsState-space or transition lensstate variables, transition relation, attractor, control handle when the neighboring relation is named by valueunobserved motivation, obligation, causal mechanism beyond the modelMathLensUse.OneLine or mini-card; admits state inspection or transition inspection, not full dynamics ontology.
Research field as citation graph or category-like networkGraph or categorical structureadjacency, composition, interface, failed transfer, citation or transformation patternssemantic truth, evidence strength, social meaningFirst inspect adjacency, composition, interface, or failed transfer; MathLensUse.MiniCard plus F.9 when contexts cross; never substitute graph proximity for truth or evidence.
Quantum-like dashboardQuantum-like probe and order lensorder effects, probe effects, incompatible frames when actually presentphysical quantum ontologyC.26 with C.29-compatible stop condition QL-NQ; not a full-card cost for QL-lite notes.
RG-like scale-law claimCoarse-graining or fixed-point lensscale variable, coarse-graining rule, invariants across scalesmicro-mechanism identity and universal validityC.29 plus C.18.1 or C.19.1; stops outside scale window.
Learned operator as scientific lensLearned operator, latent space, surrogate solvertrained input-output structure, resolution behavior when validatedcausal mechanism, out-of-domain generalization, unobserved variablesLearned-lens overlay; validation regime and stop condition required.

Worked micro-cases by failure mode:

Failure modeReader seesC.29 repair
No-lens repair"Throughput is slow, but we have no model."Start with a queue or flow MathLensUse.LensCandidateNote; observe arrivals, work in progress, service time, wait time, and bottleneck candidate before using MathLensUse.OneLine or mini-card.
Under-specified-lens repair"The market is a field."Write MathLensUse.OneLine only if the candidate mathematical object, mapping, preserved structure, lost structure, payoff, and stop condition can be stated; otherwise remove the phrase or keep it as ordinary metaphor.
Overread repair"The latent manifold explains reality."Use the learned-lens overlay, name observation map and validation slice, and stop causal or ontology overread unless a governing pattern governs it.
Wrong-neighbor repair"The same graph appears in two contexts, so the meanings are the same."Apply F.9 for Bridge semantics; keep C.29 only for mathematical-lens use.
Local-math non-useAccepted Markov kernel inside local dynamics.Stay in A.3.3; return NoMathLensUseNeededNote if useful; do not use C.29 merely because local mathematics appears.
Speculative SoTA stressVanchurin-style universe-as-learning.Treat as candidate-lens stress, not accepted physics, foundation, assurance, or release input.

Vanchurin-style universe-as-learning is not an ordinary first grounding archetype. Keep it in the validation harness and SoTA use as a candidate stress test: it can teach overclaim control and adapt-not-adopt discipline, but it does not ground accepted physics, assurance, quantitative law, or routine lens use.

Bias annotation

Bias riskC.29 correction
Mathematical prestige biasRequire CandidateMathObject, LensMappingMode, PreservedStructure, LostStructure, LensUseAdmissibilityValue, and StopCondition.
Physics envyPhysical source-domain ontology does not transfer without separate proof or evidence and governing pattern.
Category-theory monocultureUse category-theoretic material only when composition, interfaces, views, transformations, or transport structure matters to the stated use; otherwise choose the local lens family that exposes the working cue.
Speculation launderingVanchurin enters as candidate lens or SoTA-echo, not accepted fact.
Over-formalizationLow-consequence analogy can remain local prose; reusable or decision-bearing lens needs a MathLensUse.* card.
Dry ontology driftKeep Plain explanations where they improve recognition, but recover claim-bearing commitments through fields named by value or a named neighboring pattern.
Scale blindnessRequire ScaleWindow?; coordinate scale claims with C.18.1 or C.19.1.
Causal launderingIf the lens licenses causal claims, apply C.28; MathLensUse cannot supply causal use by itself.
Assurance launderingMathematical elegance does not raise R; evidence and assurance use apply A.10, B.3, and relevant G patterns.
Pattern-as-actor wordingA pattern is described as writing, deciding, raising assurance, authorizing work, or creating project records; repair it through claim-bearing text, project-side records, governing FPF patterns, and governing-pattern application, because patterns supply discipline, not agency.

Conformance checklist

C.29 checklist verifies the action path without replacing the Solution. Candidate-lens guidance belongs in C.29:4.4.3 or worked grounding, not in this checklist; the checklist verifies only that the cheapest honest output and next admissible move remain visible.

IDRequirementPurpose
CC-C29-0 Use conditionUse C.29 only when a mathematical object, formalism, family, learned representation, or simulation object is used for explanation, decision, prediction, publication, comparison, assurance input, bridge, or reusable transfer.Keeps local analogies lightweight.
CC-C29-1 Output class selected before full cardSelect no-C.29-output-needed, one-line, mini-card, full-card, or NeighborGoverningPatternNote output before presenting full-card fields.Prevents card-before-problem bureaucracy.
CC-C29-2 Named mathematical objectA mathematical phrase affecting explanation, decision, prediction, publication, comparison, assurance input, bridge, or reusable transfer names a concrete CandidateMathObject, not a prestige family label.Blocks prestige vocabulary.
CC-C29-2a Intervention preservationIf LensMappingMode is abstraction, quotient, coarse-graining, macro-model, or simulation and causal use is being claimed, state whether intervention and counterfactual structure is preserved, approximated, or not claimed, then apply C.28 for causal-use question and verdict.Prevents causal abstraction laundering.
CC-C29-3 Lens mapping modeState the C.29-local lens mapping mode and do not use it as F.9 BridgeKind, A.6.P RelationKind, or domain ontology. If bridge semantics are being claimed, apply F.9.Prevents hidden bridge, relation-kind, or ontology conversions.
CC-C29-4 Preserved structureState what structure the lens preserves.Makes transfer testable.
CC-C29-5 Lost structureState what does not transfer; if nothing is lost, justify an equivalence or isomorphism claim through the governing pattern.Prevents map-territory collapse.
CC-C29-6 Invariants exposedName invariants, obstructions, fixed points, symmetries, conservation laws, dualities, distinctions, or diagnostic boundaries.Makes the lens usefulness visible.
CC-C29-6a First-principles family recoveryWhen a first-principles lens-family row from C.29:4.2b is used for claim-bearing lens use, recover the concrete CandidateMathObject or candidate family, preserved structure, lost structure, visible payoff, use-admissibility value, and stop condition or neighboring-pattern application for that family.Prevents family names such as boundary, cohomology, symmetry, variational, RG, diagonal, composition, probability, information, or structural-information compression from replacing actual MathLensUse recovery.
CC-C29-6b Bounded-observer structural-information lensWhen MDL, epiplexity, compression, graph information, or description-recoverability changes the next move, recover TargetPhenomenon, source episteme or trace, bounded observer, candidate measure or code, mapping mode, preserved and lost selected structure, visible payoff, observation or postulate boundary, source-return condition, use-admissibility value, and stop condition.Prevents C.29 from turning recoverable-structure estimates into architecture ontology, quality, selector, evidence, assurance, OOD, or causal claims.
CC-C29-6c Architecture-local lens descriptionsWhen MLU.Description@RGArchitecture, MLU.Description@MultilevelLearningFrustration, or another architecture-local lens description is used for claim-bearing lens use, recover declared scope or scale window, candidate mathematical object, mapping mode, preserved structure, lost structure, source-return condition, admissible next move, and stop condition; apply the neighboring patterns governing those claims to architecture, scale-preference, measurement, evidence, assurance, selected-set, and decision claims.Prevents architecture lens descriptions from becoming architecture ontology, RG proof, global-optimizer proof, scale preference, evidence, assurance, selector, or decision authority.
CC-C29-7 Lens-admissible prediction or distinctionWhen decision, prediction, model selection, or publication-as-model is being claimed, state at least one lens-admissible prediction, distinction, obstruction, or diagnostic boundary, or downgrade to analogy-only prompt.Prevents decorative formalism.
CC-C29-8 State, observation, and evidence separationIf state, observation, probe, readout, or evidence is being claimed, apply A.3.3, A.19, C.16, or A.10 as needed.Prevents passive-read and dashboard mistakes.
CC-C29-8a Neighboring claim distributionIf the output being made is a choice result, method or work record, evidence path, assurance claim, explanation rendering, comparative review unit, representation shift, coarsened rendering, temporal claim, selector, benchmark, or publication-facing use, name the governing FPF pattern and project-side record.Prevents C.29 from absorbing neighboring claims.
CC-C29-9 Scale windowIf scale, universality, knees, exponents, or coarse-graining are being claimed, declare the scale range and coordinate with C.18.1 and C.19.1.Prevents universalization.
CC-C29-9a Temporal use boundaryIf the claim being made is about forecast, rate, trajectory, rhythm, recovery, convergence, stabilization, speed, temporal window, or rate-change as sufficient for a use, cite C.27 or state that temporal adequacy is not being claimed.Prevents mathematical prediction cues from replacing temporal-claim adequacy.
CC-C29-10 Rival lens disciplineUse a principal rival or default ordinary lens by default; require a broader rival set only for selection, publication, or claim-bearing comparison. When a rival relation is being claimed, name the declared relation value and any evaluation criterion, cost, reader, scale window, or neighboring pattern that makes the comparison admissible.Prevents unnecessary literature-review work and unnamed lens-superiority claims.
CC-C29-10a Validation regimeIf the lens is used for prediction, publication, assurance input, benchmark, model selection, or scientific claim or model claim, add validation regime, evaluation slice, uncertainty or approximation note, failure case, domain of applicability, and output-change condition when needed.Keeps prediction-bearing and model-bearing uses SoTA-aligned.
CC-C29-10b Source-use roleIf a source changes C.29 admissible use, name its SourceUseRole; do not let source prestige silently become evidence, causal-use verdict, bridge semantics, assurance, release, selector, benchmark, or accepted law.Separates the source-use role from source-use disposition.
CC-C29-10c Source-currentness and return conditionIf source material, source-basis family, source-use decision, or a neighboring governing pattern changes the use-rights for this lens output, state SourceReturnCondition? or OutputChangeCondition? and narrow, demote, replace, retire, or block the claim-bearing use.Keeps SoTA currentness and neighboring-pattern currentness tied to the admissible C.29 output rather than to source prestige or process evidence.
CC-C29-11 LensUseAdmissibilityValueLabel LensUseAdmissibilityValue as analogy-only prompt, diagnosticOnly, formal derivation, simulation, empirical fit, accepted domain theory, SoTA-echo candidate, or mechanized proof, with matching use-rights.Prevents evidence laundering.
CC-C29-12 No ontology smugglingDo not import source-domain ontology without separate proof or evidence and governing pattern.Protects FPF from metaphysical collapse.
CC-C29-13 Stop conditionState the most tempting nearby claim the lens does not license.Makes misuse locally visible.
CC-C29-14 Bridge disciplineCross-context mathematical transfer cites F.9; Bridge and C.29 fields agree without duplicate writing.Keeps semantics bounded.
CC-C29-15 Causal-use disciplineCausal-use claims apply C.28; C.29 cannot make causal use admissible by itself.Blocks causal laundering.
CC-C29-16 Assurance disciplineAssurance, release, reliability, and engineering-justification claims apply A.10, B.3, and relevant G patterns.Prevents elegance from raising assurance directly.
CC-C29-17 C.2.P recoveryBroad heads, source wording or target wording, mapping wording, pattern-application wording, and Plain metaphors are recovered to FPF kinds named by value, fields, neighboring patterns, or explicit non-transfer dispositions.Keeps the pattern from minting parallel ontology.
CC-C29-18 Plain and Tech balanceA Plain sentence can remain when it aids recognition; if it makes ontology, evidence, causal, assurance, bridge, gate, work, decision, or admissibility commitment, that commitment is recovered through the Tech fields or neighboring pattern.Preserves didactic usefulness without shadow semantics.
CC-C29-19 Non-use and false-positive bankThe pattern includes non-use examples for ordinary local domain equations, local graph data structures, A.19 overlays, local category proofs, and one-off metaphors.Prevents C.29-everywhere.
CC-C29-20 Repair matrixFailed checks map to repair outputs: downgrade, narrow, add loss, add evidence, choose rival lens, apply neighbor, or block overread.Keeps C.29 as a repair pattern.
CC-C29-21 Validation harnessStable admission requires the small harness cases in §8.1 or an admitted equivalent validation record.Makes repeated validation admission visible.

Common anti-patterns

Anti-patternWhat it looks likeRepair
Map-territory collapse“The organization is a quantum system.”“A quantum-like lens models order, probe, or contextual-probability effects; no physical quantum ontology is licensed.”
Prestige substitution“Use category theory” without naming objects, morphisms, functors, preservation, or loss.Name the categorical structure, preserved composition or interface, and failed transfer.
Family-name as objectfield, graph, category, RG, or quantum appears as if the family name were enough.Name the concrete object, structure, formal role, or downgrade to Plain recognition.
C.29-everywhereEvery measurement template, score, graph, kernel, ODE, equation, or local formal object is treated as requiring C.29.Require lens-transfer, publication, assurance, bridge, comparison, or reusable-explanation use.
Card-before-problemThe author fills fields before stating the working phrase and first repair.Begin with the phrase, stated use, output class, and first repair output.
Local-theory over-escalationAccepted local dynamics or domain equations are treated as needing C.29 by default.Keep them under the local domain pattern or A.3.3 unless a separate lens-transfer claim, publication use, assurance input, bridge, comparison, or reusable-explanation use is being made.
False exactnessEquivalence, isomorphism, or representation is declared by value when only analogy, fit, or simulation exists.Downgrade LensMappingMode or justify the declared relation named by value through the governing pattern.
RG-as-vibe“Everything is coarse-graining” with no scale window, coarse-graining rule, or fixed point.Declare scale variable, coarse-graining rule, invariants, and rival micro-models.
Elegant-math overrideA specialized or elegant mathematical lens is selected over a more general or scale-amenable alternative because of elegance or prestige while a general method scale-preference claim or architecture scale-preference claim is being made.Use BLP scale-audit when a general method scale-preference claim is being made; use C.31.ASAP when an architecture scale-preference claim is being made; otherwise mark the lens as local and bounded by C.29 stop condition.
Familiar math misses needed structureA graph, linear trend, average, two-characteristic chart, or score is used because it is familiar while the working problem needs uncertainty, topology, dynamics, causal structure, scale law, distribution geometry, or operator view.Name the working problem cue; choose a lens family that exposes the missing structure, or keep the simple math as local orientation only and block transfer, decision, evidence, assurance, publication, bridge, comparison, or reusable-explanation use.
Vanchurin over-adoption“FPF now says physics is learning.”Mark as candidate lens; retain open questions and evidence limits.
Invariant-free metaphor“Market is a field” with no invariant, transition law, observation map, or LensUseAdmissibilityValue.Downgrade to local metaphor or build a MathLensUse.OneLine or mini-card.
Loss-free bridgeMathematical structure is exported across contexts without F.9, loss notes, counter-example, or admissible use.Use F.9 Bridge plus MathLensUse LostStructure and StopCondition.
Duplicate bridge writingC.29 repeats sense cells, CL, substitution scope, and Bridge-admissible use.Let F.9 write Bridge semantics; cite Bridge from the C.29 output.
LensMappingMode as BridgeKindA local LensMappingMode value is used to skip F.9.Do not define a bridge-valued LensMappingMode; use a local transfer class only for declared lens use and apply F.9 to cross-context meaning, substitution, CL, sense cells, or Bridge-admissible use.
Causal launderingLens fit is treated as proof of intervention effect.Apply C.28 and evidence design, or block causal use.
Assurance launderingElegant formalism is treated as release confidence.Use A.10 and B.3; C.29 can be evidence input only when LensUseAdmissibilityValue and validation regime are declared.
LensUseAdmissibilityValue launderingSoTA-echo candidate sounds like authority.Restrict to exploration or lens-use tests unless validation and neighboring evidence patterns govern prediction, decision, causal use, bridge substitution, assurance, or ontology.
RivalLensSet as literature reviewThe C.29 application produces a survey instead of naming the rival lens being compared.Use PrincipalRivalLens? by default; add RivalLensRelation? when disagreement changes the next move; broaden to RivalLensSet? only when publication, selection, or claim-bearing comparison is being made.
StopCondition boilerplateThe card says “does not prove everything.”State the most tempting nearby overread the lens does not license.
Neighbor absorptionC.29 repeats F.9, C.28, A.3.3, A.19, C.11, A.15, A.10, B.3, C.16, C.27, E.17.EFP, E.17.ID.CR, A.6.3.RT, A.6.3.CSC, or assurance semantics.Apply the governing-pattern table and cite the neighboring pattern.
Plain metaphor carrying law“What survives transfer” becomes an unstated Tech claim.Recover the commitment through C.2.P fields or keep it as ordinary Plain recognition only.
C.29 local-kind inflationMathLensUse.Card is treated as a universal U.* object or durable FPF record.Keep it pattern-local; durable cross-pattern records require explicit minting or reuse, naming, kind, and design-rationale decision through F.8, F.18, C.3, and E.9.

SoTA-echoing account

SoTA source use for C.29 is accepted only when it changes action guidance. A citation that only decorates the file does not establish C.29 use.

C.29 separates source-use roles from source-use disposition. Adopt, Adapt, Reject, and candidate-stress-test disposition say what FPF does with the source; SourceUseRole says what work the source may perform inside a C.29 application.

SourceUseRoleAdmissible C.29 useBlocked C.29 use
recognitionCueHelp the reader notice an invariant, obstruction, symmetry, duality, state variable, scale cue, or comparison cue.Supply evidence, truth, ontology, causal-use verdict, assurance, or release confidence.
candidateLensPromptSuggest a first candidate lens family or mathematical object to test against the problem cue being repaired.Require a lens before the candidate changes the next move.
adequacyControlSourceDiscipline preserved structure, lost structure, stop condition, validation regime, or neighboring-pattern application.Replace the C.29 fields or the neighboring governing pattern.
validationBoundarySourceConstrain the declared validation regime, evaluation slice, uncertainty, failure case, or domain of applicability.Become an evidence path, assurance claim, benchmark result, or release confidence by source prestige alone.
acceptedDomainTheoryPermit local use inside a domain where the theory is already the governing local formalism.License cross-context ontology import or broader transfer without F.9, evidence, and stop condition.
proofUnderAssumptionsJustify a formal property under stated assumptions.Prove real-world adequacy unless assumptions, observations, bridge, and evidence path are also present.
negativeExampleExpose failure, obstruction, non-transfer, counterexample, or stop condition.Act as a proof that the rival or source family is globally unusable.
rivalLensSourceName a principal rival lens or relation that changes the admissible move being made.Become a literature review, selector result, or benchmark result.
sourceIdentityLocatorPreserve source identity by value when a source is being cited or traced.Carry substantive adequacy by itself.
historicalBackgroundOnlyExplain lineage or terminology without carrying admissible use being claimed.Carry present-day prediction, decision, bridge, causal, assurance, or admission use.
SoTA lineSelected action-guidance effectDisposition
---------
Applied category theory and compositionalityUse category-theoretic material for composition, interfaces, views, transformations, and transport discipline. Require named structure, preserved composition or interface, lost structure, and failed transfer.Adapt. Useful for composition and interface questions when those structures matter to the stated use.
Obstructions to compositionalityTreat failures and obstructions as first-class LostStructure and StopCondition material.Adapt. A lens can be useful because it names where transfer fails.
Plural foundations of mathematicsAllow multiple structural families with local adequacy, declared mapping, and declared loss.Adopt. Source-use role: plural-foundations source-use decision.
Geometric deep learning, invariance, and equivarianceUse symmetry, group action, invariance, and equivariant representation as lens-discovery cues when generic feature lists hide the relevant sameness under transformations. Ask which transformations are admissible, which distinctions are preserved, and which coordinate details can be lost.Adapt as lens-discovery source. Not evidence for domain law, causal mechanism, or coordinate-free truth.
Optimal transport and distribution geometryUse transport plans, couplings, Wasserstein-like geometry, and declared movement cost as lens-discovery cues for population, distribution, shape, shift, or allocation questions. Ask what moves, under which cost, and what structure or mass is lost.Adapt as lens-discovery source. Not evidence for causality, fairness, mechanism, or policy effect.
Model reporting and responsible modeling practiceIntended use, evaluation conditions, limitations, validation regime, failure cases, uncertainty, and domain of applicability become C.29 validation fields for prediction, publication, assurance-input, benchmark, model-selection, and scientific or model uses.Adapt. Turns reporting practice into fields and repair moves.
Causal and approximate causal abstractionWhen abstraction, quotient, coarse-graining, simulation, or macro-modeling is being claimed, ask whether intervention and counterfactual structure is preserved, approximated, or not claimed; use C.28 for causal-use question and verdict. Approximate abstraction is a source-backed lens-use note, not a softened causal-use grant.Adapt. No C.29 output is causal authority.
Causal representation learningUse causal-representation work as a discovery guard for latent variables, learned factors, interventions, assignments, and invariance across environments. If a latent lens is being read causally, keep causal-use question and verdict with C.28.Adapt as lens-discovery source. Blocks “latent means causal”; does not make representation learning a causal verdict.
Scientific machine learning as hybrid first-principles and data-driven modelingTreat first-principles structures as plural and domain-bound: conservation laws, constitutive relations, boundary conditions, symmetries, known dynamics, numerical stability, uncertainty, and data-driven approximation can each discipline a lens. Require the C.29 user to name the concrete structure and validation boundary rather than saying "science says so."Adapt. Reinforces the first-principles position without making any one SciML family the FPF foundation.
Variational principles and constrained extremaUse action, energy, free-energy, loss, value, entropy, or resource functionals as first-principles lenses only when the admissible variation space, constraints, boundary conditions, stationarity or extremum condition, conserved or dual quantities, and neighboring dynamics applications and evidence applications are named.Adapt as first-principles lens-discovery source. Does not imply the target literally optimizes the declared functional; dynamics, evidence, causal-use, and assurance claims are governed by neighboring patterns.
Physics-informed ML and learned scientific representationsUse physics-informed losses, governing equations, neural operators, surrogate solvers, and learned representations only with observation map, training or simulation regime, resolution or discretization policy, generalization claim, validation slice, uncertainty or approximation note, and stop condition.Adapt. Contributes learned-lens overlay fields; does not license out-of-regime solver replacement, causal mechanism, or unobserved-state truth.
Scientific and physics foundation modelsTreat foundation-model claims in scientific domains as learned-lens stress tests: broad pretraining, in-context dynamics inference, zero-shot or transfer claims, and cross-domain simulation all require declared training regime, task family, validation regime, uncertainty, failure cases, and output-change condition.Adapt as SoTA pressure. A foundation-model result can suggest a candidate lens or benchmark question; it is not accepted FPF law and not a universal first-principles source.
Koopman, operator-theoretic dynamics, and system identificationUse observables, operator representations, dynamic-mode decomposition, and sparse identification as discovery cues for nonlinear dynamics. Name the state, observable or readout, forecast or control use being tested, and the governing dynamics or temporal-use pattern.Adapt as lens-discovery source. Does not prove a real mechanism, dynamics semantics, evidence, or temporal-use adequacy.
Probabilistic programming, Bayesian workflow, and model criticismUse priors, likelihood assumptions, posterior predictive checks, prior-data conflict, model mismatch, and uncertainty as lens-use cues. Ask what the probabilistic lens makes visible, what assumptions it imports, and where prediction or explanation stops.Adapt as lens-discovery and criticism source. Not a truth verdict, evidence verdict, or assurance result by itself.
Modern Bayesian experimental design, OED, active sensing, and adaptive samplingUse modern BED and OED, expected-information-gain estimation, acquisition-function, active-learning, Bayesian-optimization, and robustness results to ask which observation, probe, assignment, fidelity, or sample would change the lens's next admissible move. Require declared utility, design variable, model assumptions, computational tractability, model-misspecification or robustness note, and validation boundary before using the result for prediction, decision, experiment planning, evidence, causal-use verdict, or assurance.Adapt as current lens-discovery source. Not a measurement construction, evidence record, causal-use result, experiment plan, or assurance claim by itself.
Uncertainty, approximation, sensitivity, and robustness practicePrediction or scientific or model use requires approximation or uncertainty note, known failure or counterexample, and domain of applicability.Adapt. Prevents empirical-fit overread.
Vanchurin 2026Use as structure-dense candidate lens and overclaim stress-test: learning dynamics, coarse-graining, effective geometry, gauge, metric-tensor, or distance language, variational or thermodynamic optimality.Adapt, not adopt. Not central SoTA authority and not accepted physics.
Sandberg structural-sameness examplesUse as recognition examples for invariants, obstructions, dualities, fixed points, symmetries, and conservation-like structures.Adopt as recognition cue and examples, not proof authority.

Sandberg Thread and Structural Sameness Examples

Adopt the Sandberg thread as a recognition cue, with two distinct source roles retained: the original X post is the source identity locator, while the Axis of Ordinary Math section is the checked text carrier used here.

The source-basis examples are not a proof source and not an exhaustive taxonomy. They are a checked example carrier for InvariantsExposed: generalized Stokes and boundary-exterior derivative duality; de Rham, cohomology, and topological obstruction; CLT as RG or fixed-point viewpoint; Lawvere-style diagonal family; Noether and symmetry-conservation; and Legendre, potential-duality, and tropical-limit family.

Plain register: the thread illustrates mathematical compression that makes hidden structure visible. Tech register: every FPF use still needs CandidateMathObject, LensMappingMode, PreservedStructure, LostStructure, LensUseAdmissibilityValue, and StopCondition.

Do not adopt the thread as a proof source, peer-reviewed taxonomy, or authority for all mathematical details.

Vanchurin 2026 as candidate lens

Adopt and adapt the following as a candidate lens family:

learning dynamics → coarse-graining → effective geometry → gauge fields, metric-tensor fields, or distance-like structure → variational or thermodynamic optimality

Use this source as the case for why FPF needs a lens-use card: the source discusses many mathematical structures, but its claims are broad and speculative. The candidate-lens stress-test value comes through trainable variables, local update rules, Legendre transforms, thermodynamic potentials, gauge-field, metric-tensor-field, and distance-language claims, memory and processing trade-offs, and RG-like re-optimization of compressed representations.

The Plain lesson is “this is a useful candidate lens, not a new FPF cosmology.” Selected lens use:

Adoption stance: Adapt, not Adopt.

Adapt:

  • learning dynamics as a general language of change,
  • resource constraints as a possible source of effective laws,
  • coarse-graining as a mechanism for simple macrodescriptions,
  • thermodynamic or variational potentials as links between cost, memory, processing, and geometry,
  • RG-like re-optimization as a scale-transition discipline.

Do not adopt as FPF norm:

  • “the universe really is a neural network,”
  • “physics has already been proven from learning,”
  • “quantum, GR, or gauge theory reduce to a learning rule or learning dynamics” as established fact.

Known limitations from the checked source-use disposition remain material for mathematical-lens use: non-Abelian gauge fields are not treated as a landed FPF result; thermodynamic RG flow is not treated as a quantitative FPF law; quantitative predictions require explicit learning-algorithm specification.

Plural foundations source-use decision

Adopt the plural-foundations source-use decision: several structural families can be reusable across domains, and their adequacy depends on declared mapping, local use, mutual interpretability, and recoverable loss.

Source-use role: Rodin supplies source material for the positive decision that several structurally useful families recur across domains. C.29 records this as local adequacy discipline: select the family that fits the declared use, state the mapping, and publish recoverable loss.

Rodin/P2W micro-slice:

MathLensUse.OneLine@RodinP2W:
  TargetPhenomenon: accepted problem-side distinction that may need later formal declaration
  CandidateMathObject: one selected formal structure or structural family
  LensMappingMode: exact formal equivalence, interpretation, homomorphism, or near-sameness candidate
  PreservedStructure: the invariant, composition law, obstruction, boundary relation, or formal relation that survives the lens use
  LostStructure: world-facing detail, measurement condition, causal condition, bridge loss, or implementation detail not preserved by the formal relation
  VisiblePayoff: the reader can decide whether a formal declaration is needed before mechanism, method, or work reasoning
  AdmissibleNextMove: apply `A.6.0` if a `U.Signature(profile=FormalSubstrate)` declaration is needed; apply `E.18.1` if accepted problem-side material must be used through P2W in later FPF work
  StopCondition: mathematical-to-mathematical exactness or near-sameness does not prove observation-bound world adequacy, causal use, evidence strength, Bridge-admissible use, or work readiness

Read the slice by relation position. [C.29](/generated/patterns/C.29) records preserved and lost structure for the mathematical-lens use. [A.6.0](/generated/patterns/A.6.0) declares vocabulary, laws, imports, and applicability when the formal substrate must be written as a signature. [E.18.1](/generated/patterns/E.18.1) governs P2W transduction of the accepted problem-side distinction into the next admissible FPF use. If the claim becomes measurement, evidence, causal use, Bridge semantics, mechanism realization, or work, apply [C.16](/generated/patterns/C.16), [A.10](/generated/patterns/A.10), [C.28](/generated/patterns/C.28), [F.9](/generated/patterns/F.9), [A.6.1](/generated/patterns/A.6.1), or [A.15](/generated/patterns/A.15) to that claim being made.

Applied category theory

Adopt applied category theory as one major organizer for cross-domain transfer, especially composition, interfaces, views, transformations, and bridges. Retain the concrete source-basis examples: databases, electric circuits, and dynamical systems as application families; adjoint functors, enriched categories, and toposes as categorical structures that organize transfer.

In C.29, category-theoretic material is used through the same local adequacy fields as any other lens: stated use, named structure, preserved composition or interface, lost structure, failed transfer, and neighboring-pattern applications. It is especially useful when composition, interfaces, views, transformations, or bridges matter to the admissible move.

Obstructions to compositionality

Adapt the obstructions and failures-of-compositionality perspective into LostStructure and StopCondition: a lens can be useful precisely because it exposes where transfer fails, not only where it succeeds. In Plain language, a good lens does not only say “this travels”; it also names the boundary where transfer stops.

Source locators and source-basis guard

SoTA materials are not nameless background. Decision grounds and governing inheritance remain recoverable by value, and SoTA rows shape action guidance rather than decorate the file. The source locators and the source-use role of each external source are retained here.

Source and governing basis

Basis idBasis itemWhat it contributesUse in C.29
FPF-CORE-2026Current FPF Core Specification, especially E.9, E.10, C.2.P, A.6.P, A.3.3, A.19, A.10, A.15, A.15.1, A.15.4, B.3, C.11, C.16, C.18.1, C.19.1, C.26, C.27, C.28, E.17.EFP, E.17.ID.CR, A.6.3.RT, A.6.3.CSC, F.9, G.5, G.9.Governs C.29 adequacy, lexical precision repair, epistemic precision repair, pattern placement, bridge discipline, decision boundaries, work boundaries, evidence boundaries, assurance boundaries, explanation boundaries, comparison boundaries, representation boundaries, state boundaries, measurement boundaries, dynamics boundaries, temporal boundaries, causal-use boundary, and evidence and assurance escalation.Governing inheritance. C.29 applications satisfy E.9 and phrase-local episteme material, publication material, and source-use material through C.2.P.
SAND-THREAD-MATH-LINKS-2026-05-12Accessible mirror of Sandberg thread, lines headed “Math,” linking to the original X post.Recognition examples of structural sameness: generalized Stokes, CLT as RG or fixed-point interpretation, Lawvere-style diagonal family, Noether, Legendre transforms.Adopt as recognition cue and examples, not proof authority. Direct X content was not treated as a formal source.
VAN-GEOM-LEARNING-2025/2026Vitaly Vanchurin, Geometric Learning Dynamics, arXiv:2504.14728 v3, last revised 2026-03-14 and accepted for publication in Biological Cybernetics.Candidate lens family: geometric learning dynamics over the relation between metric tensor, noise covariance, and learning regime; useful as a replayable source for metric-tensor, noise-covariance, and learning-dynamics lens selection.Adapt, not adopt. Use as SoTA-echo candidate lens or stress test for CandidateMathObject, LensMappingMode, preserved structure and lost structure, validation boundary, and stop condition; do not accept the physical or biological interpretation as FPF law.
RODIN-2023Andrei Rodin, One Mathematic(s) or Many? Foundations of Mathematics in Today's Mathematical Practice, arXiv:2301.08131.Contributes plural-foundations source material and mutual-interpretability caution.Adopt as source material for multiple structural families checked through local adequacy, declared mapping, and recoverable loss.
FONG-SPIVAK-2018/2019Brendan Fong and David I. Spivak, Seven Sketches in Compositionality and An Invitation to Applied Category Theory, arXiv:1803.05316 and book publication context.Contributes applied category theory as one useful family for composition, interfaces, views, transformations, and bridges.Adopt and adapt for examples and transport discipline when those structures matter to the stated use.
GDL-BRONSTEIN-2021Bronstein et al., Geometric Deep Learning: Grids, Groups, Graphs, Geodesics, and Gauges, arXiv:2104.13478.Contributes lens-discovery cues through symmetry, invariance, equivariance, group action, geometric structure, and graph structure.Adapt as discovery source. Helps find a candidate lens; does not supply domain evidence, causal mechanism, or validation by itself.
PEYRE-CUTURI-2019Gabriel Peyré and Marco Cuturi, Computational Optimal Transport, arXiv:1803.00567 and Foundations and Trends in Machine Learning publication context.Contributes distribution-geometry discovery cues through transport plans, couplings, Wasserstein-like distances, movement cost, and shape or population shift.Adapt as discovery source. Helps formulate comparison and movement questions; does not supply causal, fairness, mechanism, or policy-effect evidence by itself.
PUCA-ETAL-2023Puca, Hadzihasanovic, Genovese, Coecke, Obstructions to Compositionality, arXiv:2307.14461.Contributes source material for making failures and obstructions to compositional transfer explicit.Adapt into LostStructure, StopCondition, and checks that not every transfer preserves the needed structure.
MODEL-REPORTING-2018/2021Mitchell et al., Model Cards for Model Reporting; Gebru et al., Datasheets for Datasets.Contributes intended-use, evaluation-condition, limitation, dataset-context, and out-of-scope-use declarations for model and data-bearing lenses.Adapt. Use for admissibleUse, nonAdmissibleUse, validation regime, limitation notes, and domain-of-applicability fields; do not treat documentation presence as evidence or assurance by itself.
CAUSAL-ABSTRACTION-2017/2019Rubenstein et al., Causal Consistency of Structural Equation Models; Beckers and Halpern, Abstracting Causal Models.Contributes the question of whether abstraction, quotient, macro-model, or coarse-graining preserves intervention and counterfactual structure.Adapt. Feeds MathLensUse.CausalAbstractionCheck; causal-use question and verdict still belongs to C.28.
APPROX-CAUSAL-ABSTRACTION-2019/2020Beckers, Eberhardt, and Halpern, Approximate Causal Abstraction and Approximate Causal Abstractions, arXiv:1906.11583 and PMLR 2020.Contributes the distinction between approximate and exact micro-to-macro causal abstraction, including discrepancy between micro-model and macro-model causal descriptions and uncertainty in probabilistic causal models.Adapt. Justifies the approximated value in MathLensUse.CausalAbstractionCheck; causal-use question and verdict still belongs to C.28.
CAUSAL-ABSTRACTION-JMLR-2025Causal Abstraction: A Theoretical Foundation for Mechanistic Interpretability, JMLR 2025.Contributes generalized mechanism transformation, graded faithfulness, and abstraction checks for learned systems, including where representation mappings become too flexible to license explanation or causal use.Adapt. Strengthens the abstraction-preservation question; causal-use question and verdict still belongs to C.28.
SCHOLKOPF-ETAL-2021Scholkopf et al., Towards Causal Representation Learning, Proceedings of the IEEE 2021, arXiv:2102.11107.Contributes distinctions among learned latent representations, causal variables, interventions, assignments, environment invariance, and causal-use claims.Adapt as discovery source. Helps detect when C.28 applies; does not make a latent representation causal by itself.
SCIML-NEURAL-OPERATORS-2019/2021Raissi, Perdikaris, and Karniadakis on PINNs; Karniadakis et al. on physics-informed machine learning; Lu et al. on DeepONet; Li et al. on Fourier neural operators.Contributes learned-lens obligations: observation map, data or training regime, discretization or resolution policy, generalization claim, validation regime, uncertainty, and stop condition.Adapt. Use as source material for the lightweight learned-lens overlay; do not promote a full SciML specialization or assume out-of-domain generalization.
SCIML-DIETRICH-SCHILDERS-2025Dietrich and Schilders, Scientific machine learning, Mathematische Semesterberichte 2025, DOI 10.1007/s00591-025-00399-4.Contributes the hybrid first-principles and data-driven framing: conservation laws, constitutive relations, boundary conditions, physical consistency, operator learning, probabilistic approaches, uncertainty, robustness, and validation limits.Adapt. Reinforces plural first-principles discipline and validation boundaries; does not make SciML a universal FPF foundation.
PIML-SURVEY-2025When physics meets machine learning: a survey of physics-informed machine learning, Machine Learning for Computational Science and Engineering 2025, DOI 10.1007/s44379-025-00016-0.Contributes physics-informed learning as integration of prior physics knowledge with data-driven models for data efficiency, generalization, and plausibility, including Lagrangian or Hamiltonian mechanics, energy conservation, physics-informed losses, and physics-informed optimization as current first-principles lens families.Adapt. Strengthens the learned-lens and variational-principle use; does not make physics-informed wording sufficient evidence or assurance.
NEURAL-OPERATORS-NRP-2024Neural operators for accelerating scientific simulations and design, Nature Reviews Physics 2024, DOI 10.1038/s42254-024-00712-5.Contributes neural operators as learned mappings between functions over continuous domains, often constrained by physics and domain structure, with generalization and validation boundaries.Adapt. Contributes operator lens discovery and function-space lens discovery and validation-regime prompts; does not license out-of-regime solver replacement.
PHYSICS-FOUNDATION-MODEL-2025Towards a Physics Foundation Model, arXiv:2509.13805.Contributes SoTA pressure around broad pretraining, in-context dynamics inference, cross-domain simulation, zero-shot transfer, and long-horizon prediction.Adapt as candidate and stress-test. Does not make a foundation model accepted physics, causal-use verdict, assurance, or a universal first-principles source.
KOOPMAN-SINDY-DMD-2016Brunton, Proctor, and Kutz, Discovering governing equations from data by sparse identification of nonlinear dynamical systems; Kutz et al., Dynamic Mode Decomposition: Data-Driven Modeling of Complex Systems.Contributes operator and system-identification discovery cues through observables, dynamic-mode decomposition, sparse identification, forecast use, and control-oriented representation.Adapt as discovery source. Does not make the identified operator a real mechanism or validate temporal-use claims by itself.
BAYES-WORKFLOW-PPL-2018/2020van de Meent et al., An Introduction to Probabilistic Programming; Gelman et al., Bayesian Workflow.Contributes probabilistic-model discovery and criticism cues through priors, likelihood assumptions, posterior predictive checks, prior-data conflict, model mismatch, uncertainty, and iterative model revision.Adapt as discovery and criticism source. Does not make posterior fit truth, evidence, or assurance by itself.
MODERN-BED-2023/2024Rainforth, Foster, Ivanova, and Bickford Smith, Modern Bayesian Experimental Design, arXiv:2302.14545; accepted/published in Statistical Science context.Contributes current BED as utility-driven and computationally constrained, with recent methods for tractable expected information gain, sequential or adaptive design, and practical deployment limits.Adapt as current discovery source. Does not make C.29 a measurement-construction, evidence, causal-use, or experiment-planning pattern.
MODERN-OED-2024/2026Huan, Jagalur, and Marzouk, Optimal experimental design: Formulations and computations, Acta Numerica 2024; arXiv:2407.16212 v2 2026.Contributes broad current OED framing: design variables, utility criteria, computational methods, sequential design, complex models, and prediction-oriented data acquisition.Adapt as current discovery source. C.29 may ask what data acquisition would make the lens usable, but neighboring patterns govern experiments, evidence, causal-use verdict, and work planning.
BO-AL-ADAPTIVE-SAMPLING-2024Di Fiore, Nardelli, and Mainini, Active Learning and Bayesian Optimization: A Unified Perspective to Learn with a Goal, Archives of Computational Methods in Engineering 2024, DOI 10.1007/s11831-024-10064-z.Contributes active learning, Bayesian optimization, and adaptive sampling as goal-driven acquisition schemes, not as generic "collect more data" advice.Adapt as current discovery source. Use only for the candidate observation, probe, or acquisition move; do not import selector, evidence, or assurance authority.
EIG-DENSITY-APPROX-2024/2026Li, Baptista, and Marzouk, Expected information gain estimation via density approximations: Sample allocation and dimension reduction, arXiv:2411.08390 v3 2026.Contributes current computational caution: EIG estimation itself can require density approximation, sample-allocation, and dimension-reduction choices before it is usable.Adapt as computational-tractability source. A claimed information-gain lens needs estimation and approximation fields when the computation is required for the declared lens use.
ROBUST-GBOED-2025Barlas, Sloman, and Kaski, Robust Experimental Design via Generalised Bayesian Inference, arXiv:2511.07671.Contributes robustness prompts for model misspecification, outliers, and incorrect noise assumptions through generalized Bayesian OED or Gibbs Bayesian OED and Gibbs expected information gain.Adapt as robustness source. If model misspecification is plausible, the C.29 output records the robustness note; it does not turn robustness into evidence or assurance by itself.
VVUQ-UQ-PREDICTION-2010/2012/2007Oberkampf and Roy, Verification and Validation in Scientific Computing; National Research Council, Assessing the Reliability of Complex Models; Gneiting and Raftery, Strictly Proper Scoring Rules, Prediction, and Estimation.Contributes validation, uncertainty, prediction scoring, calibration caution, sensitivity or robustness notes, and domain-of-applicability boundaries.Adapt. Prediction, publication-as-model, benchmark, model-selection, or assurance-input uses need validation or uncertainty fields; source prestige does not supply those fields.
Source-basis idLocator(s)Recoverability and use in C.29
SAND-THREAD-X-2026-05-12Original X post locator: https://x.com/anderssandberg/status/2053757849918939364Source identity locator. Keep the X link because the source being mirrored matters. Do not rely on direct X content as proof text unless the post content is actually retrievable in the checking environment.
SAND-THREAD-MATH-LINKS-2026-05-12Accessible mirror or quotation carrier: https://axisofordinary.substack.com/p/links-for-2026-05-12, section headed Math, linking to the X post above.Checked source-text carrier. Supplies the recognition examples: generalized Stokes and boundary-exterior derivative duality; de Rham, cohomology, and topological obstruction; CLT as RG viewpoint or fixed-point viewpoint; Lawvere-style diagonal family; Noether and symmetry-conservation; Legendre, duality, and tropical-limit family.
VAN-GEOM-LEARNING-2025/2026https://arxiv.org/abs/2504.14728; arXiv v3 revised 2026-03-14; accepted in Biological CyberneticsCandidate-lens source. Supplies a replayable geometric-learning-dynamics source for metric tensor, noise covariance, learning-regime, and validation-boundary questions. Use as SoTA-echo stress test for lens selection and stop condition; do not use as accepted physics, biological mechanism, evidence, assurance, or FPF law.
RODIN-2023https://arxiv.org/abs/2301.08131Plural-foundations source. Contributes multiple interpretable mathematical foundations or families checked through local adequacy, declared mapping, and recoverable loss.
FONG-SPIVAK-2018/2019https://arxiv.org/abs/1803.05316; Cambridge page: https://www.cambridge.org/core/books/an-invitation-to-applied-category-theory/D4C5E5C2B019B2F9B8CE9A4E9E84D6BCApplied-category-theory source. Contributes category theory as one useful organizer for composition, interfaces, views, transformations, and bridges when those structures matter to the stated use.
GDL-BRONSTEIN-2021https://arxiv.org/abs/2104.13478Geometric-deep-learning discovery source. Contributes symmetry, invariance, equivariance, group action, graph structure, and geometric structure cues for candidate-lens discovery; not evidence that a domain law, causal mechanism, or validation claim holds.
PEYRE-CUTURI-2019https://arxiv.org/abs/1803.00567Optimal-transport discovery source. Contributes transport plans, couplings, Wasserstein-like geometry, costed movement, and distribution, population, shape, shift, or allocation comparison; not causal, fairness, mechanism, or policy-effect evidence by itself.
PUCA-ETAL-2023https://arxiv.org/abs/2307.14461Obstruction source. Contributes source material for making failures of transfer explicit; feeds LostStructure, StopCondition, and the rule that not every functor-like transfer preserves the needed structure.
MODEL-CARDS-2018/2019https://arxiv.org/abs/1810.03993Model-reporting source. Supplies intended-use, evaluation-slice, limitation, and out-of-scope-use structure for model-bearing lenses; does not make reported model use admissible by itself.
DATASHEETS-2018/2021https://arxiv.org/abs/1803.09010; CACM page: https://cacm.acm.org/research/datasheets-for-datasets/Dataset-documentation source. Supplies provenance, composition, collection, recommended use, and limitation prompts when a lens depends on data or dataset-derived representation.
CAUSAL-CONSISTENCY-2017https://arxiv.org/abs/1707.00819Causal-abstraction source. Supports checking whether SEM descriptions at different granularities agree about intervention effects; feeds the intervention-preservation question without giving C.29 causal authority.
CAUSAL-ABSTRACTION-2019https://arxiv.org/abs/1812.03789; AAAI page: https://ojs.aaai.org/index.php/AAAI/article/view/4117Causal-abstraction source. Supports distinguishing transformations, abstractions, and named abstraction classes; used only to require explicit C.28 application when causal use is being claimed.
APPROX-CAUSAL-ABSTRACTION-2019/2020https://arxiv.org/abs/1906.11583; PMLR page: https://proceedings.mlr.press/v115/beckers20a.htmlApproximate causal-abstraction source. Contributes approximated intervention and counterfactual preservation value in the lightweight causal-abstraction check; does not let C.29 decide causal-use question and verdict without C.28.
CAUSAL-ABSTRACTION-JMLR-2025https://jmlr.org/beta/papers/v26/23-0058.htmlCurrent causal-abstraction source. Contributes generalized mechanism-transformation and graded-faithfulness checks for learned systems; keeps causal-use question and verdict with C.28.
SCHOLKOPF-ETAL-2021https://arxiv.org/abs/2102.11107; DOI 10.1109/JPROC.2021.3058954Causal-representation discovery source. Contributes the question whether a learned latent representation has intervention, assignment, outcome, and environment-invariance evidence path before causal use; causal-use question and verdict are governed by C.28 when causal use is being claimed.
PINN-2019DOI 10.1016/j.jcp.2018.10.045Physics-informed ML source. Contributes validation, training-regime, governing-equation, and inverse-problem and forward-problem distinctions for learned mathematical lenses.
PIML-2021DOI 10.1038/s42254-021-00314-5Physics-informed machine-learning survey source. Contributes physics-informed learning as a broad learned-lens family requiring problem, prior-knowledge, validation, and uncertainty boundaries.
DEEPONET-2021DOI 10.1038/s42256-021-00302-5Neural-operator source. Contributes operator-learning as a learned mathematical lens over function spaces; requires training domain, observation map, generalization claim, and stop condition.
FNO-2020/2021https://arxiv.org/abs/2010.08895Neural-operator source. Contributes resolution and PDE-family generalization checks; does not license out-of-regime solver replacement without validation.
SCIML-DIETRICH-SCHILDERS-2025DOI 10.1007/s00591-025-00399-4; https://link.springer.com/article/10.1007/s00591-025-00399-4Current SciML survey source. Contributes hybrid first-principles and data-driven framing, physical consistency, operator learning, probabilistic approaches, uncertainty, robustness, and validation limits.
PIML-SURVEY-2025DOI 10.1007/s44379-025-00016-0; https://link.springer.com/article/10.1007/s44379-025-00016-0Current physics-informed ML survey source. Contributes prior-physics integration as data-efficiency, generalization, and plausibility cues; not evidence or assurance by itself.
NEURAL-OPERATORS-NRP-2024DOI 10.1038/s42254-024-00712-5; https://www.nature.com/articles/s42254-024-00712-5Neural-operator review source. Contributes function-space lens obligations and operator lens obligations, physics constraints and domain constraints, and validation boundaries for scientific simulation and design.
PHYSICS-FOUNDATION-MODEL-2025https://arxiv.org/abs/2509.13805Physics-foundation-model candidate source. Contributes candidate and stress-test handling of broad scientific foundation-model claims; does not make those claims accepted FPF law.
KOOPMAN-SINDY-DMD-2016SINDy DOI 10.1073/pnas.1517384113; DMD DOI 10.1137/1.9781611974508Operator-dynamics and system-identification discovery source. Contributes observable, dynamic-mode-decomposition, or sparse-identification lens choices for nonlinear dynamics; dynamics semantics, evidence, and temporal-use adequacy still require A.3.3, A.10, or C.27 when those claims are being made.
BAYES-WORKFLOW-PPL-2018/2020Probabilistic programming arXiv https://arxiv.org/abs/1809.10756; Bayesian Workflow arXiv https://arxiv.org/abs/2011.01808Probabilistic-model discovery and criticism source. Contributes prior, likelihood, posterior predictive, prior-data conflict, model mismatch, uncertainty, and revision cues; does not make probabilistic fit a truth, evidence, or assurance result by itself.
MODERN-BED-2023/2024https://arxiv.org/abs/2302.14545; DOI 10.48550/arXiv.2302.14545Modern Bayesian experimental design source. Contributes current BED as utility-driven and computationally constrained, with tractable EIG, sequential/adaptive design, and deployment limits; neighboring patterns still govern measurement construction, evidence, causal-use verdict, and work planning.
MODERN-OED-2024/2026https://arxiv.org/abs/2407.16212; Cambridge Core DOI 10.1017/S0962492924000023Modern optimal experimental design source. Contributes broad OED formulations and computations for complex models; C.29 uses it only to ask what acquisition would make a candidate lens usable.
BO-AL-ADAPTIVE-SAMPLING-2024DOI 10.1007/s11831-024-10064-z; https://link.springer.com/article/10.1007/s11831-024-10064-zAdaptive-sampling source. Supports goal-driven acquisition and the BO and active-learning relation; does not create selector, evidence, or assurance authority.
EIG-DENSITY-APPROX-2024/2026https://arxiv.org/abs/2411.08390; DOI 10.48550/arXiv.2411.08390EIG computation source. Supports density-approximation, sample-allocation, and dimension-reduction caution for expected-information-gain claims.
ROBUST-GBOED-2025https://arxiv.org/abs/2511.07671; DOI 10.48550/arXiv.2511.07671Robust experimental-design source. Supports generalized-Bayesian robustness for model misspecification, outliers, and incorrect noise assumptions.
OBERKAMPF-ROY-2010Cambridge page: https://www.cambridge.org/core/books/verification-and-validation-in-scientific-computing/contents/9399D588DE8B3D49E392CF0436D5A67DVerification-and-validation source. Supports separation of verification, validation, uncertainty, calibration, and prediction-use boundaries.
NRC-VVUQ-2012DOI 10.17226/13395; https://nap.nationalacademies.org/catalog/13395/assessing-the-reliability-of-complex-models-mathematical-and-statistical-foundationsVVUQ source. Supports uncertainty quantification and reliability limits for complex model use.
GNEITING-RAFTERY-2007DOI 10.1198/016214506000001437Prediction-scoring source. Supports proper scoring and prediction-evaluation fields when a lens claims predictive use.

Source-use boundary notes

  1. VAN-GEOM-LEARNING-2025/2026 is a replayable candidate-lens source for geometric learning dynamics. Its useful FPF contribution is the metric-tensor, noise-covariance, and learning-dynamics lens family and the stress it puts on CandidateMathObject, LensMappingMode, preserved and lost structure, validation boundary, and stop condition.
  2. Vanchurin-style physical or biological interpretations remain source-side claims unless a local C.29 output and neighboring evidence, causal-use, validation, or assurance pattern make the use admissible. C.29 does not promote those interpretations to FPF law.
  3. SAND-THREAD-MATH-LINKS-2026-05-12 is a recognition cue, not a mathematical proof source or FPF law.
  4. CLT-as-RG or fixed-point wording is retained only as a structural modeling viewpoint. A safe formulation is: under the usual normalization, the Gaussian is an attractive fixed point for finite-variance distributions; other stable laws are other fixed points under suitable normalization.
  5. The intake correction from direct identification to structure-preserving representation is selected and becomes a central ontology guard.

Informative taxonomy seed

Use this recognition menu only to identify a possible lens family and likely neighboring-pattern applications. After selecting a row, state the local C.29 fields that make the lens adequate or stop the use.

Lens familyWhat it catchesFPF useCommon stop conditionLikely neighboring patterns
Boundary, Stokes, and cohomologyBoundary operators, exterior-derivative or divergence-like local-to-global relations, flows, closed relation and relation named by value splits, and topological obstructions.Use when local rules, interfaces, flows, or balances must be related to a global claim or blocked global extension.Does not license all boundary phenomena as the same physical mechanism; evidence, measurement, and bridges remain neighboring work.F.9, A.19, C.16, A.10
Obstruction-first and failed-transfer lensImpossibility, incompatibility, failed composition, blocked transfer, missing invariant, or diagnostic boundary.Use when the useful mathematical result marks where a transfer, comparison, model, or simplification stops.Does not make the rival claim true or the failure cause known without the neighboring-pattern result named by value.F.9, A.6.P, A.10, E.19
Symmetry, invariance, equivariance, and NoetherGroup actions, invariants, equivariant representations, conservation-like constraints, and geometric-deep-learning regularities.If the problem depends on sameness under transformations or a conservation-like claim, ask which transformations are admissible, what remains invariant, and which distinctions are lost.Does not transfer physical conservation law, causal mechanism, or coordinate-free truth without domain evidence.A.10, C.16, A.19, domain pattern
Variational, action, optimization, and LegendreAction, energy, free-energy, loss, value, entropy, or resource functionals; stationarity, extrema, dual variables, potentials, and Legendre or convex duality.Use when the useful lens is an extremal condition, admissible variation space, boundary condition, dual view, or trade-off.Does not imply the target literally optimizes unless dynamics and evidence path it.A.3.3, C.28, A.10
Diagonal, self-reference, and no-goSelf-application, universal evaluators, closure limits, diagonal constructions, and impossibility boundaries.Use when the payoff is to block a tempting universal claim or expose a closure boundary.Does not prove every recursive-looking case is a diagonal or no-go case.B.3, E.19, local domain pattern
RG, coarse-graining, fixed point, and universalityWhy different micromodels yield one macropattern; fixed points, basins, scale windows, universality classes, or stable-law-like alternatives.Use for scale transitions, abstraction, domain compression, and macropattern claims that require a declared scale variable and coarse-graining rule.Does not assert micro-mechanism identity or universal validity outside ScaleWindow.C.18.1, C.19.1, A.3.3
Category, compositionality, optics, and semiring-limitComposition, interfaces, views, transformations, algebraic laws, limit transforms, and cases where changing algebra changes what is preserved.Multi-view architecture, bridges, system composition, and classical or tropical or Fourier-Laplace or Legendre-style transform cues.Does not imply all target objects are categories or that every functor-like transfer preserves the needed structure.F.9, A.6.P, A.19
Information geometry and learning dynamicsUpdate, curvature, optimization trajectory.Adaptive systems, learning agents, epistemic dynamics.Does not license “everything is learning” ontology.A.3.3, A.10, C.28
Optimal transport and distribution geometryTransport plans, Wasserstein-like geometry, couplings, costed movement between distributions, populations, shapes, or allocations.Use when the question is how one distribution, population, shape, or allocation can move toward another under declared costs and losses.Does not license causality, fairness, mechanism, or policy effect by itself.C.16, A.10, C.28, D.5
Operator learning, SciML, and latent representationsLearned function-to-function operators, neural operators, surrogate solvers, embeddings, and world-model representations.Use when the first useful lens is an operator over functions, states, or fields; name the observation map, training or simulation regime, validation slice, and generalization boundary.Does not license out-of-domain solver replacement, causal mechanism, or unobserved state truth without validation and the neighboring-pattern result named by value.A.10, C.16, A.3.3, C.28
Koopman and operator-theoretic dynamicsObservables or coordinates where nonlinear dynamics can be represented by an operator, often approximately linear.Use when nonlinear dynamics need a tractable forecast, control, or diagnostic representation; name the observable or readout and the forecast or control use being tested.Does not prove a real linear mechanism or temporal-use adequacy; dynamics semantics, evidence, and temporal claims stay with A.3.3, A.10, and C.27.A.3.3, A.10, C.27
Causal representation and causal abstractionCausal graphs, SCMs, causal representation learning, micro-to-macro mappings, quotient models, and intervention-preservation questions.If the user asks what to change to get an effect, test causal graph, SCM, or causal abstraction as the candidate lens, not correlation graph or latent manifold by default.C.29 can state declared lens use only; causal-use question and verdict, intervention claims, and counterfactual reliance stay with C.28.C.28, A.10, A.3.3
Quantum-like and contextual probabilityProbe effects, incompatible frames, order effects.Dashboards, workshops, surveys, measurement-as-intervention.Quantum-like is not physical quantum unless separate physics evidence is supplied.C.26, C.16, F.9

Relations

  • Builds on: A.1.1, A.6.P, A.3.3, A.19, A.10, A.15, B.3, C.16.P, C.16, E.17.EFP, E.17.ID.CR, A.6.3.RT, A.6.3.CSC, F.9.

  • Constrained by: E.8, E.10, C.2.P, E.19.

  • Decision basis: E.9 design-rationale discipline and the source-basis rows in C.29:13a.

  • Contributes to: E.2 pillar-impact analysis when a pillar argument relies on mathematical first-principles structure; only declared mathematical-lens use is in scope, with no amendment to pillar content, priority, or constitutional authority.

  • Coordinates with: A.6.0, A.6.1, E.18.1, C.11, A.15.1, A.15.4, C.18.1, C.19.1, C.26, C.27, C.28, C.31.ASAP, G.5, G.9, G.2, G.10.

  • Specialization relation: C.26 is selected as a C.29-compatible specialization for quantum-like modeling, with affordability qualifications.

  • Neighboring claims stay with their governing patterns. Use F.9 for bridges; C.28 for causal use; A.3.3 for dynamics semantics; A.19 and C.16 for characteristic-space and measurement construction; A.10 and B.3 for evidence and assurance; C.11, A.15, A.15.1, and A.15.4 for decision, method, and work records; E.17.* for explanation and comparative-review publication use; A.6.3.RT and A.6.3.CSC for representation transition and coarsening; C.27, C.18.1, C.19.1, and C.31.ASAP for temporal, scale-law, method scale-preference, and architecture scale-preference claims; and Part G for selector and benchmark work. C.29 records only the declared mathematical-lens use and the governing-pattern boundary for the claim being made.

C.29:End

Grounded Architecture and Selected-Structure Adequacy

Type: Architectural pattern Status: Stable Normativity: Normative unless explicitly marked informative

Problem frame

Use this pattern when architecture talk is doing more than naming modules, diagrams, documents, tool outputs, or a general engineering topic. Apply C.30 when the question under repair is what architecture claim is being described, what selected structures carry it, what artifact role the text or model being inspected has, and what the next admissible architecture move is.

The ordinary first output is intentionally small:

ArchitectureQuestionCard@Project:
  describedHolonRef:
  boundedContextRef:
  architectureConcernCue:
  claimReadinessClass:
    preClaimCue | problemCardReady | architectureClaimReady | nonArchitectureClaimReady
  plainPromptLabel?:
  selectedStructureKindRefs: FinSet(ArchitectureStructureKindRef)
  collapseCue:
  firstArchitectureMove:
  ordinaryNotThisPatternBoundary:
  governingPatternApplicationRefs:

Use ArchitectureConcernCue only to recognize the architecture problem family that chooses the first structure kind and architecture move:

ArchitectureConcernCue:
  changeLocalization | substitutionOrReplacement | flowBottleneck |
  controlOrRateMismatch | dataCustodyOrStateResidence |
  physicalSeparationOrPlacement | evidenceReuseOrAssuranceReuse |
  scaleWindowOrCoarseningLoss | runtimeFailureMode |
  crossScopeResidual | descriptionViewLoss | otherDeclared

Typical architecture problem cues:

changeLocalizationFailure
substitutionFailure
crossViewMismatch
flowBottleneckOrHiddenCrossing
controlRateOrRecoveredControlLayerMismatch
dataCustodyOrStateResidenceUnclear
placementOrJurisdictionMismatch
evidenceReuseFailure
sourceReturnNeeded
crossScopeResidual
generatedViewLoss

Use the cue only to choose the first architecture move: described holon, bounded context, one candidate structure kind, artifact role, and one admissible next move. If those fields cannot yet be named, keep the material as a concern cue or ProblemCard@Context-style issue rather than promoting it to ArchitectureOf@Context by wording alone. ISO 42010-style concern language may remain as lineage or project wording, but C.30 recovers the FPF representation fields as architectureConcernCue, governingArchitectureConcernRefs?, or architectureConcernNotes?.

ArchitectureQuestionCard@Project is a project-side triage aid for choosing one architecture move. Quality scores, risk ratings, proof, evidence, assurance, gate, decision, release, or publication-authority claims are governed by their FPF patterns when they are being made.

Use this when:

  • a practitioner says "architecture" and needs to know whether the claim being made is about a holon, selected structure, architecture description, view, carrier, decision, work, evidence, assurance, or mathematical lens;
  • downgrade an artifact to publication, diagram, carrier, source relation, or generated relation graph when it is not a Description or view;
  • name the selected architecture-relevant structure and the next architecture move before writing a full architecture-description record;
  • state a minimal architecture structural view only when it changes the next move;
  • keep architecture-description machinery conditional instead of making every architecture discussion a multi-view description exercise;
  • state NoMathLensUseNeeded when no mathematical lens changes the next architecture move;
  • apply C.29 when a formal substrate, preserved and lost structure, or mathematical-lens use is being claimed.

Use a conditional ArchitectureDescription@Context bridge only when durable architecture-description use is being made: cross-team reuse, regulated or safety use, reusable design, comparison, source or lens reuse, or another named full-mode architecture-description use. Ordinary use stops at ArchitectureQuestionCard@Project when it makes one next architecture move clear. If the architecture description itself becomes the EntityOfConcern under repair, use [C.30.AD](/generated/patterns/C.30.AD).

What goes wrong if C.30 is missed: architecture collapses into a document, a module diagram, a workflow graph, a mathematical lens, a benchmark, a maturity score, or a decision record. Then the practitioner cannot see which holon is described, which structures matter, what the first architecture move is, which source or lens relation is being relied on, and which non-architecture claim must be governed elsewhere.

What C.30 buys in practice: a practitioner can separate architecture claim, selected structure, architecture description, view, publication, source relation, and non-architecture claim kind, then choose one small next architecture move.

Not this pattern when the EntityOfConcern under repair is only a general selected structure, a full architecture description, an architecture structural view, a TGA flow relation, an LCA/control view, a mathematical-lens use, measurement, evidence, assurance, gate, work, decision, or publication. Use [A.22](/generated/patterns/A.22), [C.30.AD](/generated/patterns/C.30.AD), [C.30.ASV](/generated/patterns/C.30.ASV), C.30.TGA-FLOW-REL, [C.30.LCA](/generated/patterns/C.30.LCA), [C.29](/generated/patterns/C.29), [C.16](/generated/patterns/C.16), [A.10](/generated/patterns/A.10), [G.6](/generated/patterns/G.6), [B.3](/generated/patterns/B.3), [A.20](/generated/patterns/A.20), [A.21](/generated/patterns/A.21), [A.15](/generated/patterns/A.15), [C.11](/generated/patterns/C.11), or [E.17](/generated/patterns/E.17) respectively, and keep C.30 only for the architecture-claim portion if that portion is being claimed.

Thin precision-restoration pointer: if the issue under repair is still whether architecture, architecture description, structural view, module diagram, model, artifact, functional architecture, or a source label such as layer, level, tier, stack, block, expert, cache, router, or gate names an architecture claim, description, view, carrier, source, structure, or non-architecture governing-pattern application, use [C.30.P](/generated/patterns/C.30.P) and [C.30.STRAT](/generated/patterns/C.30.STRAT) as triggered before applying C.30 to the recovered architecture portion. Keep the trigger tables in those patterns; C.30 is applied only after ArchitectureOf@Context, selected architecture-relevant structure, conditional ArchitectureDescription@Context bridge use, [C.30.AD](/generated/patterns/C.30.AD) application, or the non-architecture application named by value is recoverable.

Problem

Engineering teams use "architecture" for several different things:

  • the selected structure of a holon;
  • a diagram, model, table, dashboard, generated relation graph, or document;
  • a module layout;
  • a TGA graph or flow description;
  • a functional, control, information, deployment, logical, or physical structure view;
  • an ADR-like publication;
  • a project-side claim carried by another governing FPF pattern.

These uses are all useful in ordinary engineering speech, but they cannot carry the same FPF claim. The core distinction is the one already used across FPF: the architecture-relevant selected structure, the architecture claim over that structure, the Description episteme or view of that claim, the publication of that description or view, and the project decision about changing architecture are different records.

The first-minute practitioner can ask: Are we choosing an architecture, or just naming a module layout? Which structure is being described: function, flow, control, module structure, interface relation, work, role relation, enactor structure, evidence relation, assurance relation, information structure, data structure, placement structure, deployment structure, scale structure, or declared logical structure? What artifact are we looking at: architecture claim, description, view, carrier, publication, decision, source relation, or mathematical lens?

How can FPF describe architecture without:

  • creating U.Architecture as a new root kind;
  • treating a description, view, diagram, graph, ADR, dashboard, or generated relation graph as the architecture;
  • reducing architecture to module structure or interface relation;
  • letting TGA, LCA, C.29 lenses, quality language, evidence, assurance, gates, work, or decisions silently become architecture ontology;
  • making architecture descriptions so heavy that ordinary practitioners cannot get a first useful move.

Forces

ForceTension
Everyday architecture speech vs FPF kind precisionEngineers need familiar phrases such as functional architecture, physical architecture, and control architecture; FPF-governed use recovers described holon, bounded context, selected structure, structure kind, artifact role, and admissible use.
Architecture claim vs architecture descriptionA useful architecture description can be mistaken for the architecture claim or for the selected structure.
Multi-view adequacy vs module reductionArchitecture includes functional, flow, control, module structure, interface relation, work, role relation, evidence relation, information structure, placement structure, scale, and declared logical structures; module diagrams are only one structure kind.
Small first move vs full recordThe practitioner often needs one architecture question card, not a complete architecture description record set.
SoTA architecture-description discipline vs tool lock-inISO 42010-style view, viewpoint, and correspondence discipline is useful, and FPF adapts it to holons, epistemes, views, publications, source return, and governing-pattern applications.
Structure source relation vs overreadA structure, graph, lens, measurement, or model can supply a source relation for an architecture description without proving evidence, assurance, causality, gate passage, or release.

Solution

C.30 starts from one architecture move over one described holon in one bounded context: recover the ArchitectureOf@Context claim record when it is being claimed, selected structures, structure kind refs, artifact role, and first admissible architecture move. Use a conditional architecture-description bridge when durable, reusable, multi-view, regulated, comparison, or reliance-bearing description is being made. If ArchitectureQuestionCard@Project gives one usable next move, stop there.

In C.30, the EntityOfConcern for this use is the architecture claim, one of its selected structures, or the relation record or claim record named by value for the architecture use being made. The description is not the architecture itself, and description hygiene is not the center of C.30.

Architecture-description material in C.30 is deliberately minimal. C.30 itself is not the full architecture-description mechanism. It binds ArchitectureDescription@Context to ArchitectureOf@Context, selected structures, structural views, correspondence, source return, and admissible use only when durable description use is being made. C.30.AD carries the full architecture-description EntityOfConcern: multi-view description sets, viewpoint-based views, correspondences, source return, freshness, specification use, and publication boundary over ArchitectureOf@Context. Generic Description, view, viewpoint, publication-face, and carrier machinery still remains in A.7, E.17.0, E.17.1, E.17.2, and E.17. C.30.ASV carries the selected-structure-kind-to-view relation; C.30.TGA-FLOW-REL, C.30.LCA, and other named subpatterns carry named structure relations.

C.30 does not mint U.Architecture and does not redefine U.Viewpoint. It specializes A.22 structure records and U.MultiViewDescribing only for architecture descriptions whose DescriptionContext EntityOfConcernRef is the ArchitectureOf@Context claim record for a holon, while preserving the EntityOfConcern and Description-episteme and specification-use distinction between architecture and its descriptions.

C.30 governs grounded architecture adequacy for one ArchitectureOf@Context claim record over selected U.Structure references for one described holon in one bounded context. It governs ArchitectureOf@Context, ArchitectureQuestionCard@Project, selected architecture-relevant structures, architecture structure-kind recovery, artifact-role recovery, first architecture-question assignment, characteristic assignment, small boundary notes, and the thin ArchitectureDescription@Context bridge when durable description use is being made. It does not mint U.Architecture and does not govern all architecture structure-kind views; C.30.ASV governs architecture structural views, and C.30.AD governs the full architecture-description mechanism. Generic guards about publication, permission, promise, evidence sufficiency, gate passage, work authority, decision authority, or release authority stay in the publication-use boundary or in governing patterns.

Architecture claim record

ArchitectureOf@Context ::= {
  describedHolonRef: U.HolonRef,
  boundedContextRef: U.BoundedContextRef,
  structureRefs: FinSet(U.StructureRef),
  structureKindRefs: FinSet(ArchitectureStructureKindRef),
  architectureConcernCue?,
  governingArchitectureConcernRefs?,
  architectureConcernNotes?,
  structuralRelationRecordRefs?,
  admissibleUse,
  nonAdmissibleUse
}

ArchitectureOf@Context is a project-side architecture claim record over selected structures. It is not the selected structure itself, not a Description episteme, not a view, not a diagram, not a publication face, not a decision, and not a new root U.* kind.

ArchitectureOf@ContextRef is admissible as a DescriptionContext.EntityOfConcernRef for architecture Description epistemes and views. The holon whose architecture is claimed remains ArchitectureOf@Context.describedHolonRef; it is not the DescriptionContext EntityOfConcernRef for those architecture descriptions unless a separate direct holon description is opened.

EntityOfConcern bridge. In C.30, the primary EntityOfConcern is the ArchitectureOf@Context claim record, one of its selected structures, or an neighboring relation record or claim record selected by the use under repair. Selected architecture structure is dependent, non-agentive, and claim-bearing through episteme or view records, but it is not a second EntityOfConcern family beside EntityOfConcern. Publication faces, forms, units, carriers, and renderings publish descriptions or views; they do not become the architecture claim or the selected structure.

Conditional architecture-description bridge

C.30 does not define a second local ArchitectureDescription@Context record shape. The canonical ArchitectureDescription@Context record is governed by C.30.AD:4.1. C.30 admits only a thin bridge to that record when durable architecture-description use changes the first architecture move.

The minimum bridge recoverable in C.30 is:

C30ArchitectureDescriptionBridge minimum:
  architectureClaimRef: ArchitectureOf@ContextRef
  selectedStructureRefs or structureKindRefs:
  architectureStructuralViewRefs? only when a structural view is being used
  admissibleUse:
  nonAdmissibleUse:
  correspondenceRefs or sourceReturnCondition? when reuse, cross-view use, or source return is needed
  freshnessCueRefs? when currentness bounds the admissible use

This bridge does not mint another ArchitectureDescription@Context definition, does not add local fields to the canonical record, and does not collect non-architecture claim kinds as architecture-description ontology. It lets the C.30 reader say why a description matters for the next architecture move, then applies [C.30.AD](/generated/patterns/C.30.AD) whenever the architecture description itself becomes the EntityOfConcern under repair or the full mechanism is needed: multi-view composition, correspondence, source return, freshness, specification-use boundary, publication-use boundary, or reusable architecture-description use.

An architecture-description freshness cue is also canonical in C.30.AD:4.4. C.30 may point to that cue only to bound the admissible use of the first architecture move; the cue is not evidence sufficiency and not assurance.

Publication-use boundary

This subsection is the C.30 publication-use boundary. It says what an architecture description or its publication does not carry by itself, while the subject Solution stays about architecture claim, described holon, selected structures, structural views, and the next architecture move. If a guard concerns permission, promise, prescription, evidence sufficiency, assurance, decision, gate passage, work authority, release, or authority-source claim, keep it here, in C.30.AD, or in the description or publication pattern governing that claim rather than expanding C.30's thin bridge.

ArchitectureDescriptionPublication@Project ::= {
  sourceEpistemeRef | sourceViewRef,
  publicationViewpointRef?,
  publicationScopeId,
  boundedContextRef,
  mvpkFaceRef,
  carrierRef,
  sourcePinSetRef,
  audience,
  admissiblePublicationUse,
  nonAdmissiblePublicationUse
}

ArchitectureDescriptionPublication@Project is subordinate to E.17 and MVPK machinery. It publishes one source episteme or episteme-lane view reference. publicationViewpointRef? names the publication-side viewpoint only when MVPK needs one; it is not an architecture viewpoint and not a TEVB viewpoint. mvpkFaceRef is a publication-lane face reference, not an alternative source episteme, source view, or source relation. Publication does not add architecture claims, evidence sufficiency, gate decision state, work authority, assurance, decision authority, or release permission.

Model cards, system cards, and evaluation harness reports enter C.30 through the same publication boundary or source-relation boundary. They may describe a model, deployed AI system, architecture claim, evaluation harness, or policy, but they do not by themselves establish architecture adequacy, safety proof, release authority, or gate passage.

ModelCardOrSystemCardBoundaryNote@Project ::= {
  sourcePublicationRef,
  entityOfConcernRef,
  entityOfConcernKind:
    model | deployedAISystem | architectureClaim |
    evaluationHarness | policy | otherDeclared,
  architectureStructureKindRefs?,
  intendedUseScope,
  evaluationScopeAndKnownLoss?,
  deploymentContextMismatch?,
  evidenceOrAssuranceGoverningPatternRef?,
  nonAdmissibleUse:
    notArchitectureAdequacy | notSafetyProof |
    notReleaseAuthorityByPublicationAlone
}

If the card or harness is used beyond transparency, recover the architecture structure kind being used first and then apply [A.10](/generated/patterns/A.10), [G.6](/generated/patterns/G.6), [B.3](/generated/patterns/B.3), [A.20](/generated/patterns/A.20), [A.21](/generated/patterns/A.21), [C.16](/generated/patterns/C.16), [C.28](/generated/patterns/C.28), or [C.11](/generated/patterns/C.11) for the non-architecture claim kind.

Architecture name formation

The word architecture is shorthand only after the described holon, bounded context, selected structures, structure kind, and artifact role are recoverable. Without those qualifiers, it is a recovery trigger, not a stable FPF term.

ArchitectureNameFormationRule:

If a text says "<X> architecture", then the FPF-governed use is conforming only with:
  describedHolonRef,
  boundedContextRef,
  structureKindRef = <X>StructureKind or declared local relation,
  structureRefs,
  ArchitectureStructuralViewRefs if this is a description or view claim,
  admissibleUse,
  nonAdmissibleUse.

If <X> is not a declared structure kind, the phrase is plain recognition wording only.
PhraseRequired recovery
functional architecturestructureKindRef = FunctionalStructure; functions, effects, capabilities, and functional dependencies named as structure content; transductions and flow paths are assigned to FlowTransductionStructure or C.30.TGA-FLOW-REL.
modular architecturestructureKindRef = ModuleInterfaceStructure; module relation records, interface specifications, substitutability rule, and change policy. Full module-and-interface repair applies the module-and-interface repair pattern when that claim kind is being made.
logical architecturestructureKindRef = DeclaredLogicalStructure; local definition says whether logical means information relation, functional relation, runtime relation, responsibility relation, allocation relation, or another relation class.
physical architecturestructureKindRef in {MaterialSpatialStructure, PlacementDeploymentStructure} or a locally declared physical structure kind.
control architecturestructureKindRef = ControlStructure; an LCA record may describe the control structure, but proof claims are assigned to dynamics, temporal, causal, evidence, safety, or assurance patterns as triggered.
information architecturestructureKindRef = InformationDataStructure; state bearer and residence, schema refs, semantic refs, persistence locus, provenance relation, custody relation, and source-return conditions.
security architecturestructureKindRef = SecurityTrustBoundaryStructure; recover protected asset or effect, trust boundary, adversarial path, authority or privilege relation, secure-default or hardening boundary, and evidence, assurance, or gate governing patterns when those claim kinds are being made.

Architecture characteristic assignment

C.30 uses three bearers before any quality, fitness, measure, metric, score, modularity, or ility wording carries an architecture-adequacy claim. Those words are triggers for bearer recovery, not stable architecture adequacy by themselves.

ArchitectureCharacteristicAssignment:

A. SystemQualityAffectedByArchitecture
   Bearer: described U.Holon, named product holon, or named system holon
   Governing pattern: C.25 Q-Bundle or C.16
   Examples: maintainability, evolvability, resilience, availability, safety, observability

B. ArchitectureStructuralCharacteristic
   Bearer: `ArchitectureOf@Context` claim, architecture structural view, declared structural relation or constraint, module relation, or interface relation
      Governing pattern: selected from C.16, A.17-A.19, C.25, or the characteristic-space or Q-bundle pattern governing the characteristic claim
   Examples: coupling, cohesion, interface alphabet, substitutability, hidden coupling, reusable-structure share

C. ArchitectureAdequacyBearer
   Bearer: one selected architecture adequacy bearer: `ArchitectureOf@Context`, selected architecture-relevant structure, `ArchitectureDescription@Context` when durable description use is being made, architecture structural view, or correspondence model
   Governing pattern: selected from C.30 for grounded architecture and selected-structure adequacy, E.17 for publication-face and view discipline, C.16.Q for quality-term precision, or C.16 for measurement and characterization
   Examples: viewpoint coverage, correspondence adequacy, source-return adequacy, description modularity

C.30 keeps only a thin bridge from structural characteristics to Q-Bundle relevance. If the claim says architecture causes an outcome improvement, assign the causal-use claim to [C.28](/generated/patterns/C.28) before causal use. If a structural characteristic is used as a mechanism, constraint, predictor, proxy, evidence relation, or causal hypothesis for a Q-Bundle slot, start with ArchitectureStructuralCharacteristicQBundleRelationLine rather than a formula such as low coupling = maintainability; assign measurement, modularity scoring, reusable-structure share or accounting, bespoke-residue accounting, evidence sufficiency, assurance, gate, causal proof, and scale audit to their governing patterns.

ArchitectureStructuralCharacteristicQBundleRelationLine is the only ordinary first-contact relation shape C.30 introduces for this case. Do not add a second generic characteristic relation record in C.30. Use the line when the useful move is to show why one structural characteristic may matter without opening the full relation record. Do not use this line as a measurement record, modularity score, evidence sufficiency statement, assurance verdict, or causal proof:

ArchitectureStructuralCharacteristicQBundleRelationLine ::= {
  architectureClaimRef: ArchitectureOf@ContextRef,
  architectureStructuralViewRef?: ArchitectureStructuralView@ContextRef,
  structuralCharacteristicCueOrRef,
  affectedQBundleSlotRef,
  qBundleRelationKind:
    structuralCharacteristicRelevantToQBundleSlot |
    structuralCharacteristicConstrainsQBundleSlot |
    structuralCharacteristicPredictsQBundleSlot |
    structuralCharacteristicProxiesQBundleSlot |
    structuralCharacteristicCausalHypothesisForQBundleSlot |
    structuralCharacteristicEvidencePathForQBundleSlot,
  relationGroundingKind:
    modelBased | empirical | causalModelBased | expertJudgement |
    sourceLineageOnly | SoTAActionLineage | reportOnly,
  evidenceOrCausalGoverningPatternRef?,
  nonAdmissibleUse
}

Minimal structural-characteristic relation-line examples:

Structure kindStructural characteristic cue or relationAffected Q-Bundle slotRelation grounding noteNon-admissible use
ModuleInterfaceStructureStable interface specification plus substitution policy.Evolvability or replaceability.Replacement without global retesting.Open label as substitutability proof.
PlacementDeploymentStructureController placed near plant or edge-node locality.Latency, resilience, or jurisdictional compliance.Reduced communication delay and bounded data custody.Placement diagram as performance or legal proof.
InformationDataStructureState bearer, residence, provenance, and custody boundary.Observability, privacy, or auditability.Recoverable state lineage and bounded custody.Data schema as evidence sufficiency.
MaterialSpatialStructurePhysical separation, adjacency, or energy path.Safety, maintainability, or energy efficiency.Isolation, accessibility, or loss reduction.Geometry as safety proof.
ControlStructureObserver-controller-plant loop with rate envelope.Stability, controllability, or safety.Feedback and bounded actuation relation.Control diagram as proof.
FlowTransductionStructurePath crossing, bottleneck, buffer boundary, or waiting-line boundary.Latency, throughput, or resilience.Recoverable path, crossing, capacity, and valuation relation.Flow graph as performance or causal proof.
SecurityTrustBoundaryStructureTrust boundary, privilege path, or untrusted-input crossing.Security, abuse resistance, or privacy.Reduced exposed authority and bounded trust crossing.Risk color or compliance label as security proof.
EvidenceAssuranceStructureEvidence package reused across variants.Assurance maintainability or release readiness.Explicit affected-structure and source-return boundary.Evidence-structure view as assurance verdict.
WorkMethodStructureMethod description, work plan, or work enactment relation with explicit exception path.Operability, auditability, or maintainability.Bounded repeatability and recoverable exception handling.Work-method diagram as work authority or evidence sufficiency.

ArchitectureCharacteristicQBundleRelationRecord is a triggered full-mode record, not the ordinary first-contact shape. Use the full record only when publication, comparison, causal use, evidence reliance, assurance, gate, decision, or reusable cross-case relation reliance is being claimed and the thin line cannot keep the relation inspectable, reusable, or bounded. This preserves the protection against causal or quality overread without turning C.30 into a measurement-first pattern.

Relation kinds in this record are C.30-local relation tokens. They must remain recoverable as A.6.P-style relation specifications: polarity, participant slots, qualifiers, witness expectations, admissible semantic change classes, and bridge or loss boundary where those boundary conditions are being claimed. ISO/IEC 25010-like quality models may be used as quality vocabulary or comparison lineage for product qualities such as reliability, security, maintainability, usability, efficiency, compatibility, or portability. C.30 does not inherit them as architecture theory. Architecture relates to qualities through Q-Bundle slots, mechanism slots, relation class or admissible-use value, evidence or causal governing patterns, or report-only use.

ArchitectureCharacteristicQBundleRelationRecord ::= {
  architectureClaimRef: ArchitectureOf@Context,
  architectureStructuralViewRef?,
  architectureDescriptionRef?,
  structuralCHRRefs,
  affectedQBundleRefs,
  relationKind:
    structuralCharacteristicRelevantToQBundleSlot |
    structuralCharacteristicConstrainsQBundleSlot |
    structuralCharacteristicPredictsQBundleSlot |
    structuralCharacteristicProxiesQBundleSlot |
    structuralCharacteristicCausalHypothesisForQBundleSlot |
    structuralCharacteristicEvidencePathForQBundleSlot,
  participantSlots:
    structuralCharacteristicRef,
    qBundleSlotRef,
    architectureClaimRef,
    scopeOrScaleWindow?,
    viewpointRef?,
  qualifiers?,
  witnessExpectations?,
  relationGroundingKind:
    modelBased | empirical | expertJudgement |
    sourceLineageOnly | SoTAActionLineage | causalModelBased | reportOnly,
  bridgeOrLossBoundary?,
  admissibleUse,
  nonAdmissibleUse,
  evidenceOrCausalGoverningPatternRef?
}

Relation to structural views

C.30.ASV governs ArchitectureStructuralView@Context. C.30 governs the ArchitectureOf@Context claim and, only when durable description use is being made, how its thin ArchitectureDescription@Context bridge uses structural views, with hidden or lost structure, correspondence, source or reliance relation, and source-return boundaries recoverable when those boundaries affect action. C.30.AD governs the full architecture-description mechanism.

A diagram, model, table, TGA graph, LCA diagram, C.29 lens output, ADR, dashboard, generated explanation, or other publication face may carry an architecture description or an architecture structural view. It does not become the architecture, and it does not become a conforming view only because it looks like a view.

Use AffectedArchitectureStructureNote when the next architecture move needs to name affected structures or view losses without using an architecture decision, ADR, gate, evidence, assurance, or release record:

AffectedArchitectureStructureNote:
  architectureClaimRef:
  affectedStructureKindRefs:
  affectedStructureRefs?:
  affectedArchitectureStructuralViewRefs?:
  acceptedOrSuspectedViewLoss?:
  sourceReturnCondition?:
  nextAdmissibleMove:

This note only names affected architecture structure for the next move. Decision, ADR, gate-passage, evidence-sufficiency, and release-authority claims apply the patterns governing those claims.

Minimal boundary notes

Use these notes when a common architecture phrase is close to a governing pattern but the full governing-pattern application is not yet needed for an asserted claim.

Use the thinnest relation form that preserves the next architecture move. Use fuller relation governing the asserted use records only when the relation being used cannot be inspected, used, compared, refreshed, or bounded without it. Typical thin forms are ArchitectureMathLensUseBoundary before C.29 Mini or Full, AffectedArchitectureStructureNote before an architecture decision record, and ArchitectureStructuralCharacteristicQBundleRelationLine before full measurement records, causal records, or evidence records.

InterfaceSignatureBoundaryNote ::= {
  phraseOrArtifactRef,
  apparentClaim:
    interface | signature | port | endpoint | connector | link |
    API | protocol | E.18 transduction relation | TGA path | mechanism reference,
  recoveredKind,
  governingPatternApplicationRefs,
  admissibleUse,
  nonAdmissibleUse
}

ModuleRelationBoundaryNote ::= {
  phraseOrArtifactRef,
  apparentClaim:
    module | component | package | platform | open architecture |
    recoveredModuleInterfaceSourceLabel |
    typed control-structure relation,
  moduleInterfaceRepairClaimLive?: yes | no,
  openOrPlatformClaimLive?: yes | no,
  exactModuleInterfaceRelationRefs?,
  variationPointRef?,
  substitutabilityPolicyRef?,
  interfaceConformanceEvidencePatternRef?,
  changePathRef?,
  consumerMigrationBoundary?,
  versionOrUpdateChannelRef?,
  secureDefaultOrHardeningBoundary?,
  governingPatternApplicationRefs,
  admissibleUse,
  nonAdmissibleUse
}

These notes are not substitutes for the module named by value-and-interface repair pattern, interface specifications, signature records, conformance evidence, or module-and-interface repair. An open or platform label is not substitutability proof, security proof, scale proof, assurance, or universal maturity evidence. A source label such as layer, stack, block, expert, cache, router, or gate enters this note only after [C.30.STRAT](/generated/patterns/C.30.STRAT) recovers a module-interface or adjacent architecture-relevant item. It becomes architecture-relevant only through local structure, interface, variation, substitution, migration, update, and hardening boundaries. Relation-heavy wording inside these notes remains a Plain cue until an module relation reference named by value, interface relation ref, relation governing the asserted use record, or governing FPF pattern application is named. The note keeps first use honest until the non-architecture claim kind named by value is being made.

Architecture mathematical-lens boundary

Architecture descriptions may use C.29 lenses, but the lens does not become architecture ontology.

ArchitectureMathLensUseBoundary:
  noMLUNeeded?: yes | no
  lensOneLine?:
    lensRef,
    structureClaimRef,
    preservedStructure,
    lostStructure,
    lensRelationKind,
    stopCondition,
    governingPatternApplicationRefs?

Use the one-line boundary only when it is enough to keep the lens from being overread. Use a C.29 Mini or Full card when the lens choice, preserved structure, lost structure, relation class or admissible-use value, or stop condition changes the architecture move.

Lens use by architecture problem:

Architecture problemCandidate mathematical lensPreserved structureTypical loss or stop
Hidden dependency or modularity.Typed graph, DSM, or hypergraph.Dependency, coupling, or clustering.Semantics, interface law, evidence, and work remain outside unless bridged.
Flow bottleneck.TGA, network flow, or queueing.Path, crossing, valuation, and capacity.Purpose, proof, causality, and safety remain non-architecture claims.
Control-rate mismatch.LCA, hybrid systems, assumption-guarantee relations, or control relations.Feedback roles and scale or rate relations.Stability proof and safety proof remain outside the lens.
Cross-scope residual.Coarse-graining or renormalization-group-style lens.Preserved and lost structure across scale.Utility, causal-use claims, and selector authority remain outside unless separately grounded.
Extracted structure from traces.Epiplexity or MDL-style bounded-observer lens.Learnable structural regularity.Task relevance, assurance, and causal proof remain non-architecture claims.
Physical separation or spatial arrangement.Topology, geometry, or spatial graph lens.Adjacency, containment, separation, reachability, energy path, or material path.Safety proof, accessibility, legal acceptance, and causal-use claims remain outside unless separately grounded.
Composition relation.Category, open-systems, or compositional lens.Interface, composition, and coherence.Domain semantics remain outside unless bridged.

This table is not a C.29 replacement and does not make mathematics mandatory. It helps the practitioner see when a lens may add a useful architecture move; C.29 still carries lens-use result, preserved structure, lost structure, relation class or admissible-use value, and stop condition when those description or view uses are being made.

Epiplexity-like use remains a C.29 bounded-observer structural-information lens. It may help recover learnable structure from traces, but it is not an architecture quality, task relevance proof, causal proof, assurance, or selector authority.

Boundary and repair table

Tempting collapseC.30 repair
Bare architecture as free-floating selected claimRecover ArchitectureOf@Context, describedHolonRef, boundedContextRef, selected structureRefs, selected structureKindRef, artifact role, admissibleUse, and nonAdmissibleUse.
Architecture description as architectureKeep ArchitectureDescription@Context as Description episteme or specification-use case over ArchitectureOf@Context.
Diagram, model, table, dashboard, or generated relation graph as architectureTreat it as carrier, publication, description, view, source relation, or source-finding aid only when that relation is explicit.
Module diagram as all architectureUse C.30.ASV to recover structure kind; module structure and interface relation are only one structure family.
TGA graph as architectureUse E.18 for graph, path, and crossing records and C.30.TGA-FLOW-REL for architecture-flow description.
LCA diagram or control diagram as proofUse C.30.LCA for control-structure view; assign dynamics, temporal, causal, evidence, gate, safety, and assurance claims to their governing patterns.
Mathematical lens as architecture ontologyUse C.29; cite MathLensUseOutputRef only through an ArchitectureMathLensUseBoundary or C.29 lens record and state stop condition.
ADR as architecture decisionUse the project-side architecture decision pattern when a decision claim is being made; ADR is a publication form, not the decision.
Quality, score, or measurement term as architecture adequacyRecover the bearer through ArchitectureCharacteristicAssignment; assign the claim being made to C.25, C.16, A.17-A.19, the characteristic-space or Q-bundle pattern governing the characteristic claim, or C.30 grounded architecture, selected-structure, or conditional description-use scope.
Architecture record as evidence, assurance, gate, work, or releaseAssign evidence, assurance, gate, work, or release claims to A.10, G.6, B.3, A.20, A.21, A.15, or the release locus named by value when a release claim is being made.
Architecture as agent, worker, controller, gate, or proofRecover the mechanism, control relation, role and enactor relation, gate, work, evidence, or assurance carrier that actually bears enforce, decide, optimize, adapt, prove, or guarantee wording; keep ArchitectureOf@Context as a selected-structure claim, not an acting entity.

Worked slices

"We have the architecture in this diagram." The diagram is a carrier or publication face unless it explicitly carries an ArchitectureDescription@Context or ArchitectureStructuralView@Context.

ArchitectureQuestionCard@Project:
describedHolonRef: payment system
boundedContextRef: checkout platform context
architectureConcernCue: unclear dependency between payment orchestration and fraud scoring
plainPromptLabel: "architecture in this diagram"
selectedStructureKindRefs: FunctionalStructure, ModuleInterfaceStructure, FlowTransductionStructure
collapseCue: diagram is being treated as architecture itself
firstArchitectureMove: downgrade the diagram to a publication face and create a minimal architecture structural-view note
ordinaryNotThisPatternBoundary: no evidence, assurance, gate, or decision claim yet
governingPatternApplicationRefs: C.30.ASV

"Low coupling gives maintainability." C.30 does not allow that formula to carry the claim by itself. The ordinary repair starts with the thin relation line:

ArchitectureStructuralCharacteristicQBundleRelationLine:
  architectureClaimRef: ArchitectureOf@ContextRef
  structuralCharacteristicCueOrRef: coupling under module relation or interface relation
  affectedQBundleSlotRef: maintainability Q-Bundle slot
  qBundleRelationKind: structuralCharacteristicRelevantToQBundleSlot
  relationGroundingKind: sourceLineageOnly | SoTAActionLineage | modelBased, as actually grounded
  evidenceOrCausalGoverningPatternRef?: one selected governing pattern reference: C.28, B.3, A.10, or G.6 when evidence sufficiency, causal-use, assurance, or safety-case claim is being made
  nonAdmissibleUse: causal proof or assurance by slogan

Use ArchitectureCharacteristicQBundleRelationRecord only when publication, comparison, causal use, evidence reliance, assurance, gate, decision, or reusable cross-case relation reliance needs the fuller record. The useful move is to decide whether a structural characteristic has a bounded relation to a maintainability slot, not to accept the slogan as architecture truth.

"We replaced the neural-network block, so the architecture improved." Treat block first as a source label and apply [C.30.STRAT](/generated/patterns/C.30.STRAT) unless the changed item is already recovered. The phrase is admissible architecture recognition only after the changed structure kind, flow or transduction relation, module or interface claim kind, preserved and lost structure, changed characteristic, source relation, and decision or evidence governing patterns are named. A block label, benchmark result, ablation, pruning mask, or distillation result is not an architecture decision, evidence sufficiency, gate passage, assurance, or architecture adequacy by itself.

Archetypal Grounding

Tell-Show-Show rowGrounding
TellA project team says "architecture" while looking at a diagram, model, generated relation graph, ADR, or module list. C.30 asks what holon is being described, what structure is selected, what artifact role the source material has, and what architecture move remains admissible.
Show: U.SystemA payment system, plant, vehicle, product platform, AI-agent system, or neural-network model has selected structures: function, flow, control, module structure, interface relation, information structure, placement structure, scale structure, work structure, evidence relation, or declared logical structure. The architecture claim is over selected structures of that holon; the publication is not the holon and not the architecture claim.
Show: U.EpistemeAn architecture description, model, view, generated relation graph, ADR-like note, safety-case view, or dashboard is an episteme or view publication. It can describe an architecture claim or serve as a source relation for it, but it does not become the architecture, evidence sufficiency, gate result, assurance case, or project decision.

Bias-Annotation

Lenses tested: Arch, Onto, Epist, Prag, Did, Gov. Scope: FPF architecture-description use over holons.

Bias riskMitigation
Module-diagram biasKeep module structure and interface relation as one structure family among several; use C.30.ASV and the module-and-interface repair pattern when a module or interface claim is being made.
Tool-model biasTreat notation, tool model, generated relation graph, diagram, and dashboard as description, specification-use, or publication artifacts unless a declared governing relation gives the artifact a more specific role.
Check-only biasThe first output is an architecture question card plus action palette, not a checklist that only detects mistakes.
Assurance or gate biasArchitecture descriptions do not certify safety, evidence sufficiency, release, or gate passage; assign those claims to the governing patterns.
Didactic-thinning riskSemantic repair preserves why the distinction matters: the pattern begins with the practitioner situation, payoff, stop condition, and first move.

This checklist verifies the preceding guidance after the practitioner has chosen the selected move; it is not a required project control form and not a substitute for the card, note, view, relation, or repair move above.

Conformance Checklist

IDRequirementFailed-check repair
CC-C30-1 Grounded architecture name.An FPF-governed architecture claim names the described holon, bounded context, selected structures, structure kinds, artifact role, admissible use, and non-admissible use.Rewrite the phrase through ArchitectureQuestionCard@Project or demote it to Plain recognition wording.
CC-C30-2 No U.Architecture.The pattern use does not mint or rely on a root U.Architecture.Use ArchitectureOf@Context over selected A.22 structures, or assign the claim to another existing kind.
CC-C30-3 EntityOfConcern and Description-episteme boundary plus specification-use separation.Architecture claim, structure, description, view, publication face, carrier, decision, evidence, and work stay distinct.Downgrade the artifact or carrier to its description, specification-use, or publication role and name the claim or non-architecture claim kind separately.
CC-C30-4 ArchitectureOf record.Architecture descriptions and views point through ArchitectureOf@Context; the described holon is recovered through architectureClaimRef.describedHolonRef.Add ArchitectureOf@Context or split direct holon description from architecture-claim description.
CC-C30-5 DescriptionContext reuse.ArchitectureDescription@Context reuses DescriptionContext and existing DescriptionContext machinery; it does not redefine viewpoint or publication ontology.Replace local fields with imported DescriptionContext fields, apply C.30.AD when the full architecture-description mechanism is being used, or assign the publication or view claim to E.17, A.6.3, or E.17.0.
CC-C30-6 Small output before heavy record.Ordinary use may stop at ArchitectureQuestionCard@Project when one next architecture move and governing-pattern application is clear.Remove needless full-record expansion or explain which full-mode trigger is present.
CC-C30-7 Structure-kind boundary.Structural-view claims apply C.30.ASV; module, function, flow, control, work, evidence, scale, and decision claims do not collapse into C.30.Name the structure kind, state the structural view if needed, or assign the claim to the governing pattern.
CC-C30-8 Characteristic assignment.Quality, measure, score, metric, modularity, and ility wording recovers its bearer and governing pattern before use.Add ArchitectureCharacteristicAssignment, or narrow the sentence to ordinary non-FPF-governed recognition.
CC-C30-9 Non-architecture claim kind.Evidence, assurance, causal, gate, work, decision, publication-authority, mathematical-lens, measurement, and release claims are assigned to their governing patterns.Name the governing FPF pattern and the claim kind being made; do not add fields to C.30 to absorb it.
CC-C30-10 Useful action.The repaired wording leaves a surviving admissible action: name the architecture claim, downgrade an artifact, state an architecture structural view, add a source or reliance relation, return to source, or apply the FPF pattern that governs the claim kind being made.Restore that action, or classify the phrase as reduced-use cue, quote-only wording, blocked transfer, or incomplete rewrite.

Common Anti-Patterns and How to Avoid Them

Anti-patternSymptomRepair
Architecture-as-documentThe document, diagram, table, generated relation graph, or dashboard is called the architecture.Recover carrier, publication, description, or view relation and name ArchitectureOf@Context only when selected structure is being claimed.
Publication-unit architecture driftOne publication unit mixes architecture description, evidence claim, gate decision state, decision note, and work authority under one architecture heading.Name the source architecture description or view, keep the publication face subordinate to E.17 and MVPK, and assign evidence, gate, decision, and work claims to the patterns governing those claims. Architecture remains the selected-structure claim, not the publication heading.
Module-diagram takeoverArchitecture is reduced to module structure or interface relation.Recover structure kind and use C.30.ASV; assign full module repair to the module-and-interface repair pattern when that claim kind is being made.
Tool-model lock-inA notation or tool model becomes the source of architecture truth.Recover FPF architecture claim, structures, views, correspondence, and source-return condition.
Evidence launderingA published architecture description is used as evidence sufficiency.Assign the evidence-path relation or evidence claim to A.10 or G.6; C.30 keeps only the architecture claim, selected-structure, and conditional architecture-description-use boundary; evidence-path relation stays with the evidence pattern.
Assurance or safety overreadArchitecture description or LCA diagram is used as assurance or safety case.Assign the claim being made to B.3, A.10, G.6, C.30.LCA, or the safety-case or gate pattern governing the claim when that claim kind is being made.
Risk color as architecture decisionA red, yellow, or green risk cell, risk matrix, or maturity score decides the architecture move or resource-allocation priority.Recover the structure kind under consideration, affected scope, loss, hazard, or threat path, source relation or grounding relation, characteristic scale, comparator, and gate pattern; architecture adequacy, evidence sufficiency, causal proof, assurance proof, resource-allocation reason, and gate-passage claims stay with their governing patterns.
Causal sloganArchitecture property is said to cause a quality without a declared relation grounding.Start with ArchitectureStructuralCharacteristicQBundleRelationLine; apply C.28, evidence-path, causal-use, or assurance pattern, or use ArchitectureCharacteristicQBundleRelationRecord only when evidence sufficiency, causal-use, assurance, or full relation-record use is being claimed.
Architecture-operation overreadReplacing a block, module, layer, protocol, cache, memory path, or flow relation is treated as improvement by label alone.Apply C.30.STRAT to source labels, then recover changed structure kind, preserved structure, lost structure, source relation, affected characteristic, and decision or evidence governing pattern.
Sterile compliance rewriteThe text becomes well typed but no longer helps the practitioner act.Restore ArchitectureQuestionCard@Project, a concrete next architecture move, or a named governing-pattern application.

Consequences

BenefitCost or trade-off
Architecture claims become separable from diagrams, publications, generated relation graphs, ADRs, module lists, and decisions.A conforming use names described holon, context, selected structure, and artifact role when the use has FPF-governed use.
The pattern enables first-principles architecture reasoning without forcing full measurement, synthesis, assurance, or decision machinery.Some familiar architecture phrases become triggers for quick recovery rather than accepted claims.
Functional, flow, control, module structure, interface relation, information structure, placement structure, scale structure, work structure, evidence relation, and declared logical structures can coexist without one structure kind swallowing the rest.Structural-view adequacy is governed by C.30.ASV, so practitioners may need an explicit view application.
C.29, E.18, LCA, module-and-interface repair, evidence, assurance, and gate patterns can supply source or reliance relations for architecture work without becoming architecture ontology.Governing pattern applications are named by value whenever a source or reliance relation is used beyond C.30 architecture claim, selected-structure, or conditional description-use scope.

Rationale

Architecture is most useful in FPF when it stays close to selected structure over a holon and far away from document-as-architecture, graph-as-architecture, model-as-architecture, and decision-as-architecture collapses. The ArchitectureOf@Context record gives the selected structure a project-side claim handle without minting U.Architecture.

C.30 and C.30.ASV establish an FPF architecture kernel: architecture as selected EntityOfConcern structure for a described holon, with Description epistemes and structural views, structure-kind discipline, correspondence and source-return boundaries, and characteristic-relation applications. They do not by themselves provide full measurement, synthesis, decision, causal proof, safety proof, or assurance.

The small first card is deliberate. Architecture discussions often need one immediate move: name the holon, choose the structure kind under consideration, downgrade an artifact, assign an evidence or assurance claim to its governing pattern, or stop. A full architecture description is useful only when durable publication, cross-team use, comparison, regulated use, source reuse, or reliance-relation reuse is being made.

The DescriptionContext structure also preserves plurality. The same architecture claim may have several descriptions and views; several publications may render one description; several source records may be source relations for a view with different validation boundaries. C.30 keeps those variants usable without turning any one carrier into the architecture.

SoTA-Echoing

Practice or source lineC.30 adoptionAction consequenceBoundary
ISO/IEC/IEEE 42010:2022 view, viewpoint, concern, and correspondence disciplineAdopt view, viewpoint, and correspondence discipline for architecture descriptions.Ask for architecture claim, DescriptionContext, viewpoint or correspondence relation, and next architecture move before notation-specific records.Reject tool, notation, or method-description lock-in; FPF holon, episteme, view, and publication split stays governing.
OMG SysML v2 and current MBSE traceability and model-consistency practiceAdapt model-view consistency and traceability as source-return and relation pressure when architecture description or traceability wording has FPF-governed use.Use correspondence, source pins, description-reliance relations, and source-return conditions.Reject model-as-architecture overread and tool dependence.
SEI views-and-beyond lineage plus current multi-view practiceKeep module, component-and-connector, runtime interaction, allocation, and placement as separate view pressures.Do not reduce architecture to module structure or interface relation; assign structural-view claims to C.30.ASV.Older view taxonomies are lineage and comparison lineage, not a second FPF ontology.
arXiv:2603.00601 code-space architecture relation-graph work and related code-agent architecture probing benchmarksAdapt partial-observability probing, typed edge rules, component-boundary rules, invariant-field semantics, uncertainty or unexplored-region reporting, and probe-as-intervention warning.A generated code relation graph can supply a source relation for an architecture description or structural view only with claim, source, uncertainty, relation semantics, and source return.Do not mint U.CodeSpace; do not treat probe or benchmark output as architecture adequacy, evidence sufficiency, assurance, or release.
Holon-architecture law-like constraint set from the architecture sourceAdopt Conway mirroring, Amdahl, queueing, requisite-variety, information-hiding, effective-interface, abstraction-leakage, proxy-pressure, end-to-end, distributed-structure, and evolution-constraint sources only as architecture-relevant pressure and recognition cues.Use them to ask which selected structure, characteristic, correspondence, flow boundary, control boundary, or architecture move is being considered; then apply A.6.M, C.31, C.30.ASV, C.30.LCA, C.30.TGA-FLOW-REL, C.29, C.16, C.25, G.5, C.11, or the governing pattern.No law-like slogan is architecture adequacy, decision, evidence sufficiency, assurance, gate passage, or universal architecture ontology by itself.
GonzoML neural-network architecture corpus as source example for general architecture-operation languageAdopt practitioner architecture-operation language as general architecture material: structural substitution, relation retargeting, dataflow change, path-selection and gating, memory and cache placement, block and layer substitutions, MoE expert-selection, pruning, distillation, NAS, ablation, and compute, memory, and latency tradeoffs.Keep source labels as source labels through C.30.STRAT; after recovery, use the language for architecture-description and architecture-view recognition, TGA flow-structure source relation, module-and-interface repair, scale characterization, candidate move guidance, and decision-context fields.Neural-network labels, benchmarks, ablations, pruning masks, search outputs, or distillation success do not become FPF ontology, architecture decision, evidence sufficiency, gate passage, assurance, or architecture adequacy by themselves.
Platform-engineering, MOSA, and open-systems practiceAdapt open-interface, platform extension-rule, substitution-policy, and conformance-expectation pressure as local architecture boundary discipline.For an open-interface claim or platform claim, name the local structure, interface, variation point, substitution policy, conformance-evidence governing pattern, migration boundary, update channel, and hardening boundary that change action.Platform design depends on project, organization, time, and place; there is no universal platform maturity scale or open-label proof.
ADR and architecture-knowledge-management practiceAdopt decision-memory pressure only as a project-side decision concern governed outside C.30.Treat ADR-like material as publication or decision-description source relation until the architecture decision claim is being made.ADR is not the project decision itself and not a source of release authority.

Relations

Builds on: A.22, C.30.P, C.2.1, A.6.3, A.7, E.10.D2, E.17.0, E.17.1, E.17, E.17.2, A.6.P, F.18, E.10, and C.2.P.

Coordinates with: C.30.STRAT, C.30.ASV, A.6.F, C.30.TGA-FLOW-REL, C.30.LCA, C.30.ILC, E.18, C.29, C.16, C.25, C.28, A.10, G.6, B.3, A.20, A.21, A.15, C.11, E.17, and named governing patterns for architecture decision and candidate-set claims when those claim kinds are being made.

Neighboring claims stay with their governing patterns: A.22 for selected-structure EntityOfConcern, C.30.STRAT for stratification-wording and source-label repair, C.30.ASV for structural-view adequacy, E.TGA for graph, path, and crossing discipline, C.29 for mathematical-lens use, C.16 for characterization, C.25 for Q-Bundles, C.28 for causal use, A.10 and G.6 for evidence, B.3 for assurance, A.20 and A.21 for gate or release records, A.15 for work, C.11 for decisions, and E.17 for publication. C.30 governs the grounded architecture claim, selected structures, and the next admissible architecture move.

C.30:End

Architecture Description Adequacy

Type: Architectural pattern Status: Stable Normativity: Normative unless explicitly marked informative

Plain-name. Architecture-description adequacy.

Intent. Keep an architecture description useful without letting the description, view, diagram, publication, or tool publication face become the architecture itself.

Builds on. C.30, C.30.ASV, A.22, A.7, A.6.3, E.17.0, E.17.1, E.17.2, E.17, C.2.P, E.10, and E.10.ARCH.

Coordinates with. C.30.P, C.30.TGA-FLOW-REL, C.30.LCA, C.30.ILC, A.6.F, A.6.M, C.29, C.16, C.16.P, A.10, B.3, A.20, A.21, A.15, C.11, C.28, E.8, and F.18.

Use this when

Use this pattern when an architecture description is the EntityOfConcern under repair: a durable description, multi-view description set, architecture documentation set, model set, generated architecture relation graph, view set, or specification-use record over one ArchitectureOf@Context.

Use C.30.AD when the practitioner needs to know:

  • which ArchitectureOf@Context claim the description is about;
  • which selected structures or architecture structure kinds are described;
  • which views are used under which viewpoints;
  • which correspondences, source returns, freshness boundaries, or specification-use boundaries make the description usable;
  • what the description can guide and which uses are non-admissible.

What goes wrong if missed. A diagram, documentation set, generated relation graph, model card, ADR publication set, or architecture model starts acting as architecture, proof, gate, assurance, decision, work authority, or release permission by presentation alone.

What this buys. The practitioner can keep one architecture description inspectable across views, viewpoints, selected structures, correspondences, publications, source returns, and neighboring-pattern applications.

First useful move. Write one ArchitectureDescriptionUseCard@Project:

ArchitectureDescriptionUseCard@Project:
  architectureClaimRef:
  describedHolonRef:
  boundedContextRef:
  descriptionPurpose:
  selectedStructureRefs:
  structureKindRefs:
  viewpointRefs:
  architectureStructuralViewRefs:
  correspondenceRefs:
  sourceReturnCondition?:
  specificationUseBoundary?:
  admissibleUse:
  nonAdmissibleUse:
  firstExactNeighborPatternApplication?:

The use card is a controlled first-pass slice. It can close ordinary use only when it names one architecture claim, one usable description purpose, the selected structures or structure kinds being described, viewpoint refs being used, admissible use, non-admissible use, and one remaining architecture move or neighboring-pattern application. Expand to the fuller ArchitectureDescription@Context record when cross-view correspondence, reuse, source return, freshness, specification use, regulated use, comparison, or project-side authority use is being made.

Not this pattern when.

  • If the use under repair is a grounded architecture claim or one first architecture question, use [C.30](/generated/patterns/C.30).
  • If the use under repair is a selected structure or structural description outside architecture, use [A.22](/generated/patterns/A.22).
  • If the use under repair is one architecture structural view, use [C.30.ASV](/generated/patterns/C.30.ASV).
  • If architecture or structure wording is still ambiguous, use [C.30.P](/generated/patterns/C.30.P).
  • If the use under repair is only a publication face, carrier, report, dashboard, file, or source-current relation, use [C.2.P](/generated/patterns/C.2.P), [E.17](/generated/patterns/E.17), or the publication or source pattern governing the claim.
  • If the description is being used as evidence, assurance, gate passage, decision, work authority, causal-use claim, release permission, or mathematical-lens use, keep [C.30.AD](/generated/patterns/C.30.AD) only for the description boundary and apply the neighboring pattern governing that claim to the claim being made.

Problem frame

Architecture practice needs durable descriptions: multi-view documents, view models, generated relation graphs, TGA-flow views, LCA control sketches, module or interface diagrams, deployment views, model cards, system cards, and architecture decision description sets. These descriptions are useful because they let teams compare, reuse, refresh, inspect, and use architecture claims across viewpoint families and working concerns; A.15 role-enactor semantics apply only when a project role relation itself is being governed.

The difficulty is that the description is not the architecture. The same architecture can have several descriptions. The same description set can contain several views. Each view is written from one viewpoint or concern-framed practice and can hide, lose, coarsen, or emphasize different structure. A view can describe functional structure, flow or transduction structure, control structure, module or interface structure, placement structure, information custody, evidence-reuse relation, assurance relation, scale or coarsening relation, or another declared architecture-relevant structure.

The first-minute practitioner can ask:

  • What ArchitectureOf@Context is this description about?
  • Which selected structures or structure kinds does this view describe?
  • Which viewpoint makes this view useful?
  • What correspondence connects this view to the architecture claim and other views?
  • When does source return to a source episteme, source view, or neighboring pattern governing that claim become necessary?
  • What admissible architecture move remains after the description has been used?

Problem

How can FPF govern architecture descriptions without:

  • treating a description, model, view, diagram, graph, card, table, dashboard, file, publication, carrier, or rendering as the architecture itself;
  • treating all architecture documentation as one generic description with no selected-structure recovery;
  • losing the link between a viewpoint and the architecture structure kind being described;
  • letting one attractive view hide lost structure, stale source, or missing correspondence;
  • letting publication quality become evidence sufficiency, assurance, gate passage, decision authority, work completion, or release permission;
  • making ordinary architecture triage too heavy for a first useful architecture move.

Forces

ForceTension
Useful description vs architecture overreadA good description guides architecture work, but it is not the architecture, selected structure, decision, proof, or release authority.
Multi-view richness vs selected-structure recoverySeveral views can be needed, but each view names the architecture claim, viewpoint, selected structure or structure kind, and admissible use before it is relied on.
Viewpoint utility vs viewpoint-as-kind collapseViewpoints help a role or practice inspect an architecture; they do not themselves choose the structure kind unless C.30.ASV or an structure-view pattern references named by value that relation.
Reuse vs freshnessA reused architecture description needs source edition, structure edition, or source-return boundaries when its admissible use depends on currentness.
Specification-use vs publication formA description can be used as a specification, but specification use is a use boundary over a Description episteme or its publication form, not the architecture itself.
Thin C.30 bridge vs full description mechanismC.30 keeps the architecture move central; this pattern carries the heavier architecture-description mechanism when durable description use is being made.

Solution

Use ArchitectureDescription@Context when the EntityOfConcern under repair is the description episteme or specification-use record over one ArchitectureOf@Context. The described holon is recovered through ArchitectureOf@Context.describedHolonRef; the DescriptionContext.EntityOfConcernRef for the architecture description points to the architecture claim record.

C.30.AD does not mint U.Architecture, does not redefine U.Viewpoint, and does not replace generic Description, view, publication, or carrier machinery. It specializes those records for architecture descriptions whose views remain tied to selected architecture-relevant structures.

Architecture-description record

ArchitectureDescription@Context ::= {
  architectureDescriptionId: ArchitectureDescriptionId,
  architectureClaimRef: ArchitectureOf@ContextRef,
  descriptionContext: DescriptionContext(
    EntityOfConcernRef = architectureClaimRef,
    BoundedContextRef = ArchitectureOf@Context.boundedContextRef,
    ViewpointRef = primaryViewpointRef?
  ),
  describedHolonRef: U.HolonRef,
  selectedStructureRefs: FinSet(U.StructureRef),
  structureKindRefs: FinSet(ArchitectureStructureKindRef),
  architectureStructuralViewRefs: FinSet(ArchitectureStructuralViewRef),
  correspondenceRefs: FinSet(CorrespondenceRef),
  sourceEpistemeRefs?: FinSet(U.EpistemeRef),
  sourceViewRefs?: FinSet(U.ViewRef),
  sourceReturnCondition?,
  freshnessCueRefs?: FinSet(ArchitectureDescriptionFreshnessCueRef),
  specificationUseBoundary?,
  publicationUseBoundary?,
  admissibleUse,
  nonAdmissibleUse
}

describedHolonRef is a recoverable field copied from the referenced ArchitectureOf@Context; it is not the architecture description's DescriptionContext.EntityOfConcernRef.

Minimum conformance for the record:

  • architectureClaimRef names one ArchitectureOf@Context;
  • selectedStructureRefs or structureKindRefs name the architecture-relevant structures being described;
  • every architecture structural view names its viewpoint and selected structure or structure kind;
  • correspondenceRefs or a source-return condition is present when cross-view or source reuse is being made;
  • admissibleUse and nonAdmissibleUse say what the description can and cannot carry.

Traceable architecture multi-view description chain

A full architecture description is traceable only when the reader can recover the chain that makes a view useful without turning the view into the architecture. The chain is a trace obligation, not a prescribed method or work plan:

workingConcernRef
  or A15RoleEnactorFamilyRef when A.15 role-enactor semantics apply
-> viewpointRef
-> selectedStructureRef or structureKindRef
-> ArchitectureOf@ContextRef
-> ArchitectureStructuralView@ContextRef governed by C.30.ASV
-> ArchitectureDescription@ContextRef governed by C.30.AD
-> sourceEpistemeRef or sourceViewRef when source use is being made
-> PublicationUnitRef, publication face, or publication form only when published
-> correspondenceRef or sourceReturnCondition when cross-view or source reuse is being made
-> admissibleArchitectureMove or neighboring-pattern application

[E.17.0](/generated/patterns/E.17.0) carries the generic multi-view Description machinery. [C.30.ASV](/generated/patterns/C.30.ASV) carries the selected-structure-kind-to-view relation and view adequacy. [C.30.AD](/generated/patterns/C.30.AD) carries the architecture-specific composition and use boundary: which architecture claim the description is about, which structural views it uses, what correspondence or source return keeps the use honest, and which architecture move or neighboring pattern remains admissible.

If any link in the chain is absent, do not fill it with a documentation label. Either add the missing reference, reduce the admissible use, or return to the governing pattern that can recover the missing relation.

View membership, viewpoint, and structure-kind binding

Architecture descriptions can contain several ArchitectureStructuralView@Context records. Each such view remains governed by C.30.ASV; C.30.AD does not mint a second structural-view record and does not decide whether the view has the right structure kind, viewpoint, hidden or lost structure note, correspondence, or source return.

C.30.AD records only membership or use of an already recoverable architecture structural view inside one architecture description:

ArchitectureDescriptionViewMembership@Context ::= {
  architectureDescriptionRef: ArchitectureDescriptionRef,
  architectureStructuralViewRef: ArchitectureStructuralViewRef,
  architectureClaimRef: ArchitectureOf@ContextRef,
  membershipPurpose:
    orientation | comparison | implementationGuidance |
    assuranceInput | sourceReturn | declaredOther,
  correspondenceRefs?: FinSet(CorrespondenceRef),
  sourceReturnCondition?,
  admissibleUse:
  nonAdmissibleUse:
}

Use [C.30.ASV](/generated/patterns/C.30.ASV) when the question under repair is whether the view has the right structure kind, viewpoint, hidden or lost structure note, correspondence, or source return. Use [A.22](/generated/patterns/A.22) when the question under repair is structure as such. Use [C.30](/generated/patterns/C.30) when the question under repair is the grounded architecture claim. Use [C.30.AD](/generated/patterns/C.30.AD) only for the description's membership, composition, correspondence, source-return, freshness, specification-use, publication-use, or remaining-move boundary.

Common architecture-description views:

View useRequired FPF application
Function or functionality view[A.6.F](/generated/patterns/A.6.F) for function or functionality wording and [C.30.ASV](/generated/patterns/C.30.ASV) for the structural view.
Flow or transduction view[E.18](/generated/patterns/E.18) plus C.30.TGA-FLOW-REL when the TGA graph, path, crossing, or valuation is used by architecture.
Control or LCA view[C.30.LCA](/generated/patterns/C.30.LCA) when a control structure view is being used.
Module or interface view[A.6.M](/generated/patterns/A.6.M), signature or interface patterns, and [C.30.ASV](/generated/patterns/C.30.ASV) when module-interface structure is being used.
Mathematical-lens view[C.29](/generated/patterns/C.29) for lens-use result and preserved and lost structure; [C.30.AD](/generated/patterns/C.30.AD) only for the architecture-description use of the lens result.
Evidence or assurance reuse view[A.10](/generated/patterns/A.10), [B.3](/generated/patterns/B.3), or assurance or evidence pattern governing the claim for the non-architecture claim.
Architecture residual view[C.30.ILC](/generated/patterns/C.30.ILC) when the view is about a cross-scope or interlevel architecture residual. If the view uses conflict wording or frustration wording, C.30.AD records only membership, correspondence, and source return; C.30.ILC governs the residual.
Multilevel-learning or frustration mathematical-lens view[C.29](/generated/patterns/C.29) when the view contains a recoverable level mapping or scale mapping and preserved structure and lost structure; [C.30.AD](/generated/patterns/C.30.AD) records only the architecture-description use of that lens result.
Residual-reducing candidate or optimization view[G.5](/generated/patterns/G.5) for candidate sets and residual-reducing candidate moves; [C.11](/generated/patterns/C.11) for final local choice. C.30.AD records only description membership, correspondence, source return, freshness, publication use, or specification use.

Correspondence and source return

Architecture descriptions become risky when a reader cannot tell whether two views describe the same architecture claim, the same selected structure, related structures, or different entities of concern. Use correspondence records or source-return conditions when the description is reused across viewpoints, source editions, tool outputs, generated views, or regulated use.

ArchitectureDescriptionCorrespondence@Context ::= {
  architectureDescriptionRef:
  architectureClaimRef:
  fromViewRef:
  toViewRef:
  correspondenceKind:
    sameArchitectureClaim | sameSelectedStructure |
    refinement | abstraction | projection |
    sourceDerived | conflict | declaredOther,
  preservedStructureRefs?:
  lostStructureRefs?:
  sourceReturnCondition?:
  admissibleUse:
  nonAdmissibleUse:
}

Correspondence is not proof, assurance, or gate passage. It is a relation that lets a reader use more than one architecture view without silently changing the EntityOfConcern.

Freshness and currentness boundary

Use a freshness cue only when the architecture description's admissible use depends on source edition, structure edition, model version, deployment context, or external condition.

ArchitectureDescriptionFreshnessCue:
  sourceEditionRefs:
  structureEditionRefs?:
  modelOrToolEditionRefs?:
  knownRefreshTrigger:
    sourceChange | deploymentChange | interfaceChange |
    controlRateChange | modelEditionChange | evidenceDecay |
    toolApiChange | legalRegulatoryChange |
    incidentFinding | declaredOther | unknown,
  admissibleUseUntil?:
  sourceReturnCondition:

Freshness does not make the description evidence-sufficient. It only bounds the use of the description.

Specification-use and publication boundary

An architecture description can be used as a specification only when that use is declared. Specification use is not a new architecture kind; it is a use boundary over a Description episteme or its publication.

ArchitectureDescriptionSpecificationUse@Project ::= {
  architectureDescriptionRef:
  sourceEpistemeRef | sourceViewRef,
  publicationUnitRef?:
  governedUse:
    coordination | implementationGuidance | procurement |
    verificationPlanning | assuranceInput | releaseInput |
    declaredOther,
  exactNeighborPatternRef?:
  admissibleUse:
  nonAdmissibleUse:
}

If the specification use becomes evidence, assurance, gate, work, decision, causal-use, or release authority, apply the neighboring pattern governing that claim to that authority claim. The architecture description remains the description boundary, not the authority.

Publication forms, diagrams, model faces, files, cards, dashboards, and generated relation graphs remain publications, views, faces, carriers, source-current records, or renderings unless the source episteme and use boundary are explicit.

Neighboring-pattern applications

Question after the architecture-description boundary is clearFPF application
Grounded architecture claim, selected structures, first architecture moveC.30
Architecture or structure wording is still overloadedC.30.P
Architecture structural view or structure-kind and viewpoint relationC.30.ASV
Flow or transduction graph relation used by architectureC.30.TGA-FLOW-REL and E.18
Control structure viewC.30.LCA
Cross-scope or interlevel architecture residual, conflict, or frustration in the described holonC.30.ILC
Multilevel-learning or frustration mathematical-lens result with recoverable level mapping or scale mapping and preserved structure and lost structureC.29 with the admitted C.29-local lens output
Residual-reducing candidate architecture moves, candidate palette, candidate front, shortlist, selected set, or optimization over candidatesG.5 for candidate sets, C.11 for final local choice, and measurement or comparison patterns named by value when those claims are being made

| Generic description, view, viewpoint, publication, carrier, MVPK face | A.7, E.17.0, E.17.1, E.17.2, E.17, or C.2.P | | Function or functionality wording | A.6.F | | Module, interface, port, signature, or reusable structure relation | A.6.M, a signature or interface pattern named by value, C.31, or C.31.RSA | | Mathematical lens or preserved and lost mathematical structure | C.29 | | Characteristic, scale, coordinate, score, or quality claim | C.16.P, C.16, A.19, C.25, or quality pattern governing the claim | | Evidence, assurance, gate, work, decision, causal-use, release | A.10, B.3, A.20, A.21, A.15, C.11, C.28, release or admissibility pattern, or governing pattern |

Worked cases

CaseC.30.AD treatment
"The architecture is documented in this view set."The view set is an architecture description or publication set only if it names one ArchitectureOf@Context, selected structures, viewpoints, view refs, and admissible use. It is not the architecture itself.
A TGA graph is included in an architecture document.Use E.18 for graph, path, and crossing semantics and C.30.TGA-FLOW-REL when the graph is used by architecture. C.30.AD records only the architecture-description use and source-return boundary.
A model card claims deployment safety.Use C.30.AD only if the card describes an architecture claim or structure view. Safety assurance uses B.3; evidence uses A.10; release uses A.21.
A generated code-agent relation graph shows modules and calls.Treat the graph as a generated view or source publication. Recover observed, inferred, and unknown relations; use C.30.ASV or C.30.TGA-FLOW-REL only when an architecture structural view or flow relation is being used.
A multi-view description set has functional, deployment, control, and evidence-reuse views.Each view has an ArchitectureDescriptionViewMembership@Context line and a referenced C.30.ASV view record. Evidence-reuse claims do not stay inside C.30.AD.
A plant safety architecture description combines control, deployment, evidence, and operator-view material.C.30.AD records the architecture-description chain and correspondence among views. C.30.LCA governs the control view; A.10, G.6, or B.3 governs evidence or assurance; A.15 is used only if role-enactor semantics apply.
A product-line platform document reuses module-interface, variability, and deployment views across products.C.30.AD records which architecture claim and structural views the document uses, plus source-return conditions for product variation. A.6.M repairs module-interface relations; C.31.RSA accounts reusable structure or bespoke residue only after structure refs and accounting basis are declared.
A multi-view architecture description says local optimization at one declared holon level creates frustration in another.C.30.AD records the description membership, correspondence, and source-return boundary. C.30.ILC governs the residual; C.29 is used only if the description contains a recoverable level mapping or scale mapping with preserved structure and lost structure.
An architecture document compares residual-reducing candidate decompositions or optimization moves.C.30.AD records only the description or publication use of that comparison. Candidate sets and selected-set publication use G.5; final local choice uses C.11; measurement or comparison claims use their governing patterns.
A review note, dashboard, or generated report describes gaps in an architecture description rather than the architecture itself.The architecture description can be the EntityOfConcern for that second-description use; the second description is handled as a Description, view, source relation, publication face, review record, or evaluation record over that EoC. C.30.AD keeps the chain to the underlying ArchitectureOf@Context visible without treating the second description as the architecture, the residual, the decision, or the proof.

Conformance checklist

CheckRequirementRepair if failed
CC-C30AD-1 EntityOfConcern.The architecture description's DescriptionContext.EntityOfConcernRef points to one ArchitectureOf@Context claim record.Add architectureClaimRef or return to C.30 until the architecture claim is recoverable.
CC-C30AD-2 Described holon recovery.The described holon is recovered through ArchitectureOf@Context.describedHolonRef, not by replacing the description EntityOfConcern with the holon.Restore the strict description boundary and copy only the recoverable holon ref.
CC-C30AD-2a Traceable multi-view chain.The description use recovers the chain from working concern or A.15 role-enactor family being used through viewpoint, selected structure or structure kind, architecture claim, ASV view, architecture description, source or publication use when source or publication use is being made, correspondence when used or source return when needed, and remaining admissible architecture move.Add the missing reference, reduce the admissible use, or return to the governing pattern that can recover the missing relation.
CC-C30AD-3 Viewpoint and structure kind.Every architecture structural view names viewpoint and selected structure or structure kind.Use C.30.ASV before relying on the view.
CC-C30AD-4 Correspondence and source return.Cross-view, generated-view, source-derived, reused, regulated, or comparison use names correspondence or source-return condition.Add correspondence and source-return fields or reduce the admissible use.
CC-C30AD-5 Publication boundary.Publication face, carrier, diagram, dashboard, card, file, or rendering is not treated as architecture, decision, evidence, assurance, gate, work, or release authority.Assign publication or source use to C.2.P or E.17 and the non-architecture claim to the neighboring pattern governing that claim.
CC-C30AD-6 Specification-use boundary.Specification use is declared as use over a Description episteme or publication, with neighboring applications when it carries authority.Add ArchitectureDescriptionSpecificationUse@Project or demote to ordinary description.
CC-C30AD-7 Remaining admissible move.The repaired description still tells the practitioner what architecture move, view repair, source return, or neighboring-pattern application remains.Add the remaining move or reduce the text to source or publication use.

Common anti-patterns

Anti-patternSymptomRepair
Description-as-architectureA document, diagram, model, graph, view set, or card is said to be the architecture.Recover ArchitectureOf@Context and keep the artifact as description, view, publication, carrier, or source.
Viewpoint-as-structure-kindA stakeholder, role, concern, or viewpoint label is used as if it named the selected structure.Use C.30.ASV to recover structure kind and viewpoint separately.
Multi-view fogMany views are listed, but no one can tell which selected structures they describe or how they correspond.Add architecture claim ref, selected structure refs, viewpoint refs, correspondence refs, and source-return conditions.
Specification-as-authorityA specification-looking architecture description is used as work, gate, decision, assurance, evidence, or release authority.Declare specification use and apply the neighboring pattern governing that claim to the authority claim.
Freshness launderingA recently generated diagram is treated as adequate because it is current.Record source edition and refresh trigger; do not treat currentness as adequacy, evidence, or assurance.
Architecture-documentation takeoverThe pattern spends most of its practitioner guidance on diagrams, publications, and wording guards instead of architecture claim, selected structures, and views.Keep C.30 centered on architecture and use C.30.AD only when the description itself is the EntityOfConcern under repair.

SoTA-Echoing

Practice or source lineSource-use role and currentnessC.30.AD adoptionAction consequenceBoundary
ISO/IEC/IEEE 42010:2022 architecture-description practice separates architecture description, concern, viewpoint, view, model kind, correspondence, and conformance.Current international standard and reference source for architecture-description and viewpoint separation.Adopt the separation of architecture claim, description, viewpoint, view, correspondence, and conformance-to-use; translate it into FPF EntityOfConcern, DescriptionContext, view, publication, and neighboring-pattern applications.Disciplines C.30.AD:4.1, C.30.AD:4.1a, C.30.AD:4.2, CC-C30AD-1, CC-C30AD-3, and CC-C30AD-4: every architecture description names the architecture claim, selected structures, viewpoints and views, correspondence when used or source return when needed, and admissible use.ISO terminology does not override FPF ontology and does not turn a view or publication into architecture, proof, decision, or release authority.
Views-and-Beyond and related architecture documentation practice treats views as stakeholder-relevant projections over architecture.Mature reference and lineage source for view-based architecture documentation; not used as a mandatory current catalog.Adopt view usefulness while requiring structure-kind recovery through C.30.ASV and description membership through ArchitectureDescriptionViewMembership@Context.Disciplines C.30.AD:4.1a, C.30.AD:4.2, and the multi-view worked case: a view remains useful for a working concern without becoming the selected structure by label.No mandatory view catalog is imported, and view adequacy remains in C.30.ASV.
E.17.0 and MVPK publication machinery in current FPF.Current internal FPF governing machinery for multi-view Description epistemes, views, viewpoints, publication faces, and carrier separation.Reuse generic multi-view and publication machinery instead of minting architecture-local copies.Disciplines C.30.AD:4.1a, C.30.AD:4.5, CC-C30AD-5, and CC-C30AD-6: architecture description composition remains separate from publication form, carrier, face, and source-current relation.C.30.AD specializes architecture-description use; it does not replace E.17.0, E.17.1, E.17.2, E.17, or C.2.P.
C4, arc42, ADR, model-card, and system-card practice makes architecture communication practical.Current practitioner-source family for familiar architecture publication and documentation forms.Admit these as possible source publications, view publications, decision-description publications, transparency publications, or specification-use records.Disciplines C.30.AD:4.5, worked cases, and anti-patterns: practitioners can use familiar artifacts while keeping source, publication, description, architecture claim, and neighboring authority claims separate.Template, card, graph, or diagram quality is not architecture adequacy by itself.
Tool-generated architecture relation graphs and code-agent architecture probing expose useful but partial structure.Current emerging practice and source-intake pressure for generated relation views.Treat generated graphs as source-derived views with observed, inferred, and unknown relation boundaries.Disciplines C.30.AD:4.3, C.30.AD:5, and CC-C30AD-4: a generated view can guide structure recovery, source return, and next architecture moves.Generated relation coverage does not become proof, gate passage, safety assurance, or complete architecture.
  • C.30 governs grounded architecture and selected-structure adequacy.
  • C.30.P repairs overloaded architecture or structure wording before this pattern is used.
  • C.30.ASV governs architecture structural views and structure-kind and viewpoint separation.
  • C.30.TGA-FLOW-REL, C.30.LCA, and C.30.ILC govern architecture structure-relation subcases named by value.
  • A.7, E.17.0, E.17.1, E.17.2, and E.17 govern generic EntityOfConcern, Description, view, viewpoint, publication, and MVPK machinery.
  • C.2.P repairs source-current and publication or carrier relation-set overreads.

C.30.AD:End

Architecture and Structure Precision Restoration

Type: Architectural pattern Status: Stable Normativity: Normative unless explicitly marked informative

Plain-name. Architecture-structure wording repair.

Intent. Recover architecture or structure wording whose selected structure, architecture relation, architecture-description use, structural-view use, source-return relation, or named C.30 subcase is hidden before a reader applies A.22, C.30, C.30.ASV, or a named C.30.* pattern.

This pattern does not mint U.Architecture, does not fuse architecture and structure into one kind, and does not replace grounded architecture adequacy or structural-view adequacy. It repairs overloaded wording so the architecture, structure, description, view, publication, source, relation, characteristic, mathematical-lens, evidence, assurance, gate, work, decision, causal-use, release, or ordinary-prose use becomes recoverable by value.

Builds on. E.10, E.10.ARCH, A.22, C.30, C.30.ASV, C.2.P, A.6.P, A.6.F, C.29, C.16.P, C.16, C.25, E.17, and E.8.

Coordinates with. C.30.TGA-FLOW-REL, C.30.LCA, C.30.ILC, named C.30.* structure and view patterns, A.10, B.3, A.20, A.21, C.11, C.28, A.15, E.11, and work, release, and publication patterns governing those claims.

E.10.ARCH governing relation. When E.10 encounters architecture or structure wording whose selected structure, architecture relation, architecture-description use, structural-view use, source-return relation, source label, or neighboring claim is hidden, E.10.ARCH selects C.30.P only until the use under repair and governing pattern are recovered. C.30.P then stops applying; it does not become a registry of architecture topics or a substitute for A.22, C.30, C.30.AD, or named C.30.* patterns.

Use this when

Use this pattern when architecture or structure wording hides which use is being made and recoverable by value.

Typical triggers:

  • architecture, architecture description, architecture model, architecture diagram, architecture map, architecture dashboard, architecture score;
  • structure, structural view, structural model, module layout, component structure, interface structure, or stratification wording or source-label wording such as layer, level, tier, stack, ladder, rung, block, expert, cache, router, or gate that must go to C.30.STRAT before local architecture or structure assignment;
  • graph, flow, TGA graph, control sketch, LCA diagram, ADR, dashboard, benchmark, source, or view being treated as architecture or structure by wording alone;
  • a function, module, interface, signature, flow, control, quality, score, evidence, assurance, gate, work, decision, causal-use, or release claim being smuggled under architecture or structure wording.

What goes wrong if missed. A diagram becomes the architecture, a graph becomes proof, a view becomes the selected structure, a source document becomes an architecture decision, a score becomes architecture adequacy, or a function, module, or interface claim becomes architecture by default.

What this buys. The reader can recover the architecture or structure use under repair, block the overread, and move to the governing pattern: selected structure under A.22, grounded architecture claim or conditional architecture description under C.30, architecture structural view under C.30.ASV, stratification-wording repair and source-label repair under C.30.STRAT, TGA-flow relation under C.30.TGA-FLOW-REL, control-structure view under C.30.LCA, mathematical lens under C.29, characteristic and scale repair under C.16.P, or a project-side evidence, assurance, gate, work, decision, causal-use, release, or publication pattern.

First useful move. Ask which selected structure, architecture relation, architecture-description use, structural-view use, source-return relation, or neighboring claim the architecture or structure wording is actually naming, then either apply the architecture or structure pattern named by value directly or use one architecture-structure repair note to assign the claim elsewhere.

Not this pattern when.

  • If the use under repair is already a selected structure, use A.22 directly.
  • If the use under repair is already ArchitectureOf@Context, use C.30 directly. If the use under repair is the full ArchitectureDescription@Context mechanism, use C.30.AD; use C.30 only for the thin architecture-description bridge tied to one architecture move.
  • If the use under repair is already an architecture structural view, use C.30.ASV or a named C.30.* view pattern directly.
  • If the claim being made is evidence, assurance, gate, work, decision, causal-use, release, mathematical-lens use, characteristic and scale construction, quality characterization, source-use, or relation construction, use the governing pattern for that claim after any architecture or structure wording is demoted or assigned.

Problem frame

Working engineers often say "architecture" or "structure" while pointing at a useful artifact: a diagram, model, graph, table, dashboard, ADR, code-agent relation graph, neural-network architecture-operation diagram, benchmark result, or source document. Ordinary speech is acceptable; FPF-governed prose is not. If the artifact is named by a source label such as block, layer, expert, cache, router, or gate, use C.30.STRAT before assigning the recovered use locally.

The repair question is:

Which selected structure, architecture relation, architecture-description use, structural-view use, source-return relation, or neighboring claim does the wording name, and which FPF pattern governs that claim?

The architecture or structure use under repair may be:

  • selected structure under A.22;
  • an ArchitectureOf@Context claim under C.30, a thin architecture-description bridge under C.30, or the full architecture-description mechanism under C.30.AD;
  • an ArchitectureStructuralView@Context or named C.30.* subcase;
  • a publication, view, face, PublicationUnit, carrier, dashboard, ADR, source document, or source-return relation under C.2.P or E.17;
  • a relation construction under A.6.P;
  • a function or functionality-kind use under A.6.F;
  • a mathematical-lens use claim under C.29;
  • a characteristic, scale, score, coordinate, threshold, or quality-coordinate claim under C.16.P or C.16;
  • a Q-bundle or quality-characterization claim under C.16.Q, C.25, or E.21;
  • an evidence, assurance, gate, work, decision, causal-use, release, or method claim under its governing pattern;
  • ordinary prose with no FPF-governed use being made.

Problem

How can FPF repair architecture or structure wording without:

  • creating U.Architecture;

  • treating architecture and structure as one fused kind;

  • treating a description, view, diagram, graph, dashboard, source, ADR, model, or publication as the architecture itself;

  • assigning all function, flow, module-interface, signature, control, evidence, assurance, gate, decision, work, quality, mathematical-lens, or source claims to architecture;

  • duplicating first-stage repair lists inside A.22, C.30, C.30.ASV, and every named C.30.* subpattern?

Forces

ForceTension
Ordinary engineering speech vs FPF kind recoveryEngineers need compact words such as architecture, structure, model, view, graph, module, layer, block, expert, cache, router, and gate; FPF claims need recovered kind, relation, source-use relation, and admissible use. C.30.STRAT governs the stratification-wording family and source-label family before C.30.P assigns any architecture or structure portion.
Architecture description vs architecture itselfDescriptions and views are useful, but they can be overread as the selected structure or architecture claim.
Structure generality vs architecture specificityA.22 gives selected structure; C.30 governs grounded architecture adequacy over selected architecture-relevant structures and admits only the thin architecture-description bridge when durable description use is being made. C.30.AD governs the full architecture-description mechanism. The repair must not collapse them.
Small first move vs heavy recordMost wording cases need one repair note and a direct governing-pattern assignment, not a full architecture description.
Source and view usefulness vs project authorityA source, dashboard, graph, ADR, or view can guide architecture work without proving evidence, gate passage, decision authority, release permission, or work completion.
Cross-pattern consistency vs shadow registryArchitecture hosts should not carry duplicate trigger lists once C.30.P exists.

Solution

Repair architecture or structure wording by producing an architecture-structure repair note or an equivalent local rewrite.

Minimum fields:

ArchitectureOrStructureRepairNote:
  triggerSpan:
  boundedTextSpanOrPublicationUnit:
  encounteredFPFKindOrReference:
  candidateClaimUses:
  selectedClaimUse:
  sourcePublicationRelationSet?:
  relationClaimSlice?:
  functionOrFunctionalityClaim?:
  structureKindOrArchitectureQuestion?:
  characteristicOrQualityClaimSlice?:
  mathLensClaimSlice?:
  projectSideClaim?:
  governingPatternRef:
  repairedWordingOrDemotion:
  admissibleUse:
  nonAdmissibleUse:
  remainingReaderMove:
  disposition:

Use the note only when the repair must remain inspectable. A direct local rewrite is enough when one sentence clearly names the selected-structure claim being made, architecture relation, architecture-description use, structural-view use, source-return relation, or governing pattern.

Recovery sequence

  1. Capture the trigger. Copy the architecture or structure wording and the sentence that uses it.
  2. Recover the encountered FPF kind or reference. Decide whether the text points to a selected structure, architecture claim, description, view, diagram, graph, model, dashboard, ADR, source document, carrier, publication, stratification-wording case or source-label case for C.30.STRAT, function, module-interface relation, signature, flow, control, score, quality term, evidence, gate, work, decision, release, or ordinary prose.
  3. Recover source-publication relations before architecture assignment. If the wording relies on a source, publication, view, face, PublicationUnit, dashboard, ADR, file, carrier, or source-return relation, apply C.2.P for source-use, source-currentness, and publication relations before assigning the architecture or structure claim.
  4. Choose the governing pattern for the architecture or structure use.
    • selected structure -> A.22;
    • ArchitectureOf@Context, selected architecture-relevant structure, or thin conditional ArchitectureDescription@Context bridge use -> C.30;
    • full ArchitectureDescription@Context mechanism -> C.30.AD;
    • architecture structural view -> C.30.ASV;
    • TGA-flow relation -> C.30.TGA-FLOW-REL;
    • control-structure view -> C.30.LCA;
    • cross-scope conflict or frustration triage -> C.30.ILC;
    • stratification wording or source-label wording such as layer, level, tier, stack, ladder, rung, block, expert, cache, router, or gate -> C.30.STRAT before choosing the final governing pattern;
    • named C.30 subcase -> that subpattern.
  5. Assign non-architecture claims to their governing patterns. If the sentence uses architecture wording to carry relation, function or functionality, mathematical-lens, characteristic and scale, quality, evidence, assurance, gate, work, decision, causal-use, release, or method claim, apply the governing pattern for that claim and keep this pattern only for the architecture or structure wording repair.
  6. State admissible and non-admissible use. Say what the reader may do with the repaired wording and what non-admissible adjacent interpretation is blocked.
  7. Stop C.30.P after assignment. Stop after the governing pattern or ordinary-prose demotion is named.

Direct governing-pattern assignments

Recovered use, claim kind, or admissible-use boundaryGoverning pattern
selected structure, structural description, structure source-returnA.22
ArchitectureOf@Context, selected architecture-relevant structure, thin conditional ArchitectureDescription@Context bridge use, architecture question cardC.30
full ArchitectureDescription@Context mechanism, architecture-description multi-view set, architecture-description specification-use boundaryC.30.AD
architecture structural view, structure-kind view, hidden or lost structureC.30.ASV
TGA graph, flow relation, transduction-flow architecture relationC.30.TGA-FLOW-REL when an architecture-flow description claim is being made; otherwise E.18 or the TGA pattern governing the claim being made
control structure view, LCA sketch or control sketchC.30.LCA when an architecture control-structure view claim is being made
cross-scope conflict or frustration triageC.30.ILC when that question is being asked
source, publication, carrier, view, face, PublicationUnit, dashboard, ADR, documentation, source-returnC.2.P, E.17, E.17.0, or the publication/source-use pattern governing the claim
relation construction, basedness, source, base-dependence, evidence and relation-claim discrimination, endpoint compression, comparisonA.6.P or the A.6 specialization selected by the recovered claim
function, functional, functionality, effect, module, interface, or signature claimA.6.F, A.6.M, A.6 signature and slot pattern, or the retained module, interface, or signature specialization selected by the claim
stratification or source labels such as layer, level, tier, stack, ladder, rung, block, expert, cache, router, or gateC.30.STRAT; after recovery, use A.22, C.30, C.30.ASV, C.30.LCA, C.30.TGA-FLOW-REL, A.6.M, A.6.F, E.18, C.16.P, C.29, or the pattern governing the recovered claim
mathematical lens, mapping, model, similarity, preserved-structure and lost-structure as mathematical-lens useC.29
characteristic, scale, metric, score, indicator, threshold, architecture score, quality coordinateC.16.P, then C.16, A.19, C.25, E.21, or the pattern governing the claim
quality-term or evaluative characterizationC.16.Q, C.25, E.21, or the characterization pattern governing the claim
evidence, proof, validation, witnessA.10 or the evidence pattern governing the claim
assurance, engineering justification, safety caseB.3 or the assurance pattern governing the claim
gate, admissibility, release, approvalA.20, A.21, release or admissibility pattern, or the gate pattern governing the claim
work, method, implementation, operation, change executionA.15, A.15.4, U.Method, U.MethodDescription, or the work or method pattern governing the claim
decision, choice, trade-off resultC.11 or the decision pattern governing the claim
causal-use or intervention claimC.28

Refresh and reopen conditions

Reopen or narrow C.30.P when the FPF pattern-language ecology changes the first architecture or structure entry:

  • a named C.30.*, structural-view, TGA-flow, LCA or control, module-interface, mathematical-lens, characteristic, evidence, assurance, gate, work, decision, causal-use, release, or publication pattern now governs one row directly;
  • source-current architecture-description, view, model, decision-record, or architecture-documentation practice changes one adopted distinction in C.30.P:7;
  • README, ToC, E.11, retrieval, or local Problem-frame entry cues change the first practical entry for hidden architecture or structure wording;
  • a governing pattern starts copying first-stage architecture or structure trigger lists that belong here;
  • C.30.P begins to act as a registry of architecture topics rather than a wording-use repair pattern for hidden selected structure, architecture relation, architecture-description use, structural-view use, source-return relation, or named C.30 subcase.

The refresh action is to remove, narrow, or reassign the first-stage row. It is not to preserve old assignment wording as history.

Worked cases

WordingRepair
"The architecture is the diagram."The diagram is a publication, carrier, source cue, architecture description rendering, or structural view. It is not the architecture itself. Apply C.2.P if a a source-publication relation set is being made, then C.30 or C.30.ASV only if the architecture claim or structural view is recovered.
"ArchitectureOf@PlantOps is defined over structures S1 and S2 under context C."Direct C.30; no C.30.P unless another selected structure, architecture-description use, structural-view use, source-return relation, or named C.30 subcase remains hidden.
"This ADR changed the architecture."Recover whether the ADR is a publication, decision record, document with named source-use role, architecture-description update, work plan, or ordinary source. Use C.2.P, C.11, A.15, or C.30 when the corresponding claim kind is being made.
"The TGA graph proves the architecture is safe."TGA graph and architecture-flow relation are not proof or safety assurance. Use E.18 and C.30.TGA-FLOW-REL for flow relation, B.3 or evidence patterns for assurance, C.30 only for the grounded architecture claim or thin conditional architecture-description bridge, and C.30.AD when the full architecture-description mechanism is being used.
"The architecture score improved."Recover whether the sentence means grounded architecture adequacy, selected-structure characteristic and scale score, pattern-quality coordinate, Q-bundle, benchmark result, gate threshold, or ordinary comparison. Apply C.16.P before any score-based use.
"Functional architecture improved maintainability."Recover function or functionality use via A.6.F when hidden, then architecture structural view via C.30.ASV or quality or maintainability via C.16.P, C.16.Q, C.25, or quality pattern governing the claim.
"The module layer supports the architecture."Treat layer first as a source label and apply C.30.STRAT. Return to C.30.P only for the architecture or structure portion after recovery; return to A.6.M only if a module-interface relation is recovered, to C.30.LCA only if a control-layer relation is recovered, to C.2.P if this is a publication label or view label, to A.6.P if a basedness, source-use, evidence, or reliance relation is being made, or to ordinary source-label disposition.

Reduced SoTA row

Current architecture-description, model, view, and decision-record practice treats architecture as distinct from architecture descriptions, models, views, viewpoints, diagrams, and decision records. FPF adopts that line only where it changes action guidance: examples, non-use boundaries, governing-pattern assignments, source-return conditions, and conformance checks.

Practice sourceSource-use role and currentnessWhat C.30.P adopts or adaptsFPF import boundary
ISO/IEC/IEEE 42010:2022 on architecture descriptions, architecture viewpoints, model kinds, and conformance requirements.Current standard and reference source for architecture-description and viewpoint separation.Disciplines direct use of C.30 and C.30.ASV; blocks diagram-as-architecture, model-as-architecture, view-as-architecture, and publication-as-architecture overread; disciplines CC-C30P-2, CC-C30P-3, and CC-C30P-4.Does not import 42010 terminology as FPF ontology; FPF still uses A.22, C.30, C.30.ASV, and named C.30.* patterns.
SEI "Documenting Software Architectures: Views and Beyond" practice line.Current reference and lineage source for documenting views for stakeholder use.Disciplines the source, publication, and view split in worked cases and keeps view artifacts useful without making them the selected structure.Does not make "view" a generic proof or decision record.
C4 model current practice for developer-friendly architecture diagrams over context, container, component, and code views.Current practice anchor for diagram usefulness and diagram limits.Disciplines the diagram, block, component, module, and layer examples: a diagram can be an entry or view publication, and source labels are recovered through C.30.STRAT before architecture or structure assignment.Does not make C4 levels, blocks, layers, or containers FPF structure kinds or mandatory architecture views.
arc42 current architecture documentation template practice.Current practice and reference source for architecture communication, constraints, decisions, and cross-cutting concerns.Disciplines the distinction between documentation template sections, source publications, decisions, architecture claims, and conditional architecture-description use.Does not let a documentation section, template heading, or dashboard become architecture authority by label.
ADR and MADR architecture decision record practice.Current practice and lineage source for decision-record separation; current empirical ADR work may refine template choice, but does not replace FPF decision ontology.Disciplines the ADR worked case and the assignment to C.2.P, C.11, A.15, or C.30: an ADR may record or motivate a decision; it is not automatically the architecture decision, work execution, or architecture itself.Does not import ADR label as gate, release, proof, or FPF decision authority.

This row belongs in this pattern because it blocks diagram-as-architecture, graph-as-proof, view-as-structure-kind, publication-as-claim, and ADR-as-decision overreads. It does not import any external standard as FPF ontology.

Conformance checklist

CheckRequirement
CC-C30P-1The repair names the trigger span, encountered FPF kind or reference, selected use under repair, governing pattern, admissible use, non-admissible use, and remaining reader move.
CC-C30P-2A diagram, model, graph, dashboard, ADR, source, publication, view, face, PublicationUnit, file, carrier, or rendering is not treated as architecture or structure by appearance.
CC-C30P-3Direct A.22, C.30, C.30.ASV, or named C.30.* use applies the governing pattern directly when the selected-structure claim being made, architecture relation, architecture-description use, structural-view use, or named C.30 subcase is already recoverable.
CC-C30P-4Source-use, currentness, and publication-to-carrier relation recovery uses C.2.P before architecture or structure claim use when that relation set is being made.
CC-C30P-5Function-like, relation-like, mathematical-lens, characteristic and scale, quality, evidence, assurance, gate, work, decision, causal-use, release, and method claims are assigned to their governing patterns.
CC-C30P-6The repair does not mint U.Architecture, ArchitectureStructure, a generic architecture head, or mandatory architecture-repair record.
CC-C30P-7The subject architecture or structure pattern keeps its own invariant central and carries at most a thin pointer back to this pattern.
CC-C30P-8The repaired wording preserves one useful admissible reader move; type-correct but inert architecture wording is not recovered by value.

Common anti-patterns

Anti-patternSymptomRepair
Diagram-as-architectureA diagram, graph, dashboard, ADR, or generated view is said to be the architecture.Recover publication, carrier, view, or source role and then apply C.30 or C.30.ASV only if the architecture claim or structural-view claim is being made.
Architecture-as-proofArchitecture wording carries evidence, assurance, causal proof, gate passage, release permission, or decision authority.Apply A.10, B.3, C.28, A.20, A.21, C.11, release, or the pattern governing the claim being made.
Function-as-default-architectureAny function, interface, module behavior, or source label such as block is treated as architecture.Use C.30.STRAT for source-label recovery where needed, then A.6.F, C.30.ASV functional-structure, TGA-flow, A.6.M module-relation repair, or quality pattern governing the claim.
Score-as-architectureA score, metric, benchmark, or quality coordinate is used as architecture adequacy.Apply C.16.P and the measurement named by value, characteristic-space, Q-bundle, pattern-quality, gate, or benchmark pattern.
Viewpoint-as-structure-kindA viewpoint label is used as if it selected structure kind.Use C.30.ASV; recover structure kind and viewpoint separately.
Repair registry duplicationA.22, C.30, C.30.ASV, or a named C.30.* host copies architecture or structure first-stage repair lists.Keep the subject invariant there and use one thin pointer to C.30.P.
  • E.10 catches architecture or structure wording and selects this pattern only when the selected structure, architecture relation, architecture-description use, structural-view use, source-return relation, or named C.30 subcase is hidden.
  • E.10.ARCH defines the shared wording-use recovery order and applicability row.
  • A.22 governs selected structure and structural views as structure.
  • C.30 governs grounded ArchitectureOf@Context adequacy and thin conditional ArchitectureDescription@Context bridge use.
  • C.30.AD governs the full architecture-description mechanism when ArchitectureDescription@Context is the EntityOfConcern under repair.
  • C.30.ASV governs architecture structural views.
  • C.30.STRAT governs stratification wording or source-label wording before C.30.P assigns any recovered architecture or structure portion.
  • Named C.30.* patterns govern their own structure adequacy or view adequacy questions.
  • C.2.P recovers source, publication, view, face, PublicationUnit, carrier, and source-use disposition.
  • A.6.P repairs relation construction; A.6.F repairs function and functionality wording; A.6.M repairs module-relation and interface-specification wording.
  • C.16.P repairs characteristic-and-scale wording, and C.16.Q repairs quality-term or evaluative characterization wording before score or quality use.
  • C.29 governs mathematical-lens use and does not become architecture by analogy.

C.30.P:End

Stratification Wording Precision Restoration

Type: Architectural precision-restoration subpattern under C.30 Status: Stable Normativity: Normative unless explicitly marked informative

Plain-name. Stratification and architecture-operation source-label repair.

Intent. Recover source wording such as layer, level, tier, stack, ladder, rung, block, expert, cache, router, and gate by completing the E.10.ARCH recovery row for that wording use: semanticAreaBaseConcept, semanticAreaSenseFamily, selected ontologicalNeighborhood, primary EntityOfConcern kind, encountered FPF kind or reference, relation to the primary EntityOfConcern, recovered kind, relation, or claim-use, source-use disposition, governing pattern, admissible use, non-admissible use, and remaining reader move. No conforming C.30.STRAT use mints U.Layer, U.Level, U.Tier, U.Stack, U.Ladder, U.Rung, U.Block, U.Expert, U.Cache, or one universal U.Stratification.

Builds on. E.10, E.10.ARCH, E.8, F.18, C.30.P, A.22, and C.30.

Coordinates with. C.30.ASV, C.30.LCA, C.30.TGA-FLOW-REL, C.30.ILC, A.6.M, A.6.F, E.18, C.16.P, C.16, A.19.SPR, C.2.P, E.17, C.29, C.28, A.10, G.6, B.3, A.20, A.21, A.15, A.2, G.5, and C.11.

E.10.ARCH governing relation. When E.10 encounters a stratification or architecture-operation source label whose ontologicalNeighborhood, primary EntityOfConcern kind, recovered kind, relation, claim-use, source-use disposition, or governing pattern is hidden, E.10.ARCH selects C.30.STRAT only until those row fields are recovered or the wording is lowered to ordinary source label, quote-only wording, reduced-use cue, blocked use, or incomplete rewrite. C.30.STRAT then stops at the source-label repair row; the governing pattern carries any recovered non-source-label claim or relation.

Use this when

Use this pattern when stratification or architecture-operation wording is doing FPF-governed work but the selected ontologicalNeighborhood and governing pattern for the source-label use are not yet recoverable by value.

Typical source labels:

  • layer, level, tier, stack, ladder, rung;
  • block, expert, cache, router, gate when architecture-operation prose uses them as recognition labels before the FPF kind is known.

What goes wrong if missed. A source label starts acting as ontology. Layer may be taken as a holon level, control layer, publication layer, scale window, or module boundary without saying which ontological neighborhood is being used. Stack may become architecture by label. Block may become a module. Expert may become a role. Cache may become a memory relation or state. Router may become a decision policy. Gate may become a gate decision. None of those interpretations is admissible by word shape alone.

What this buys. The practitioner can keep useful source language while recovering the selected ontologicalNeighborhood and applying the governing pattern, instead of replacing the source label with another umbrella word.

First useful move. Treat the word as a sourceLabel and complete the recovery row: source label, bounded text, selected ontologicalNeighborhood, primary EntityOfConcern kind, relation to that EntityOfConcern, recovered kind, relation, or claim-use, governing pattern, admissible use, non-admissible use, and remaining reader move.

Not this pattern when. If the governing pattern is already recoverable by value, use it directly. Do not use C.30.STRAT merely because a familiar word appears. If the wording is only ordinary source prose with no FPF-governed use, keep ordinary prose or quote-only wording and stop.

Problem frame

Architecture and engineering sources use compact labels because they work in local practice. Neural-network architecture prose says block, expert, cache, or router. Control architecture says layer. Organizations say level or tier. Documentation says section, stack, or view. Mathematical and scale prose says level, resolution, or coarse-graining step.

Those labels are useful recognition cues, but FPF cannot rely on them as kinds. A label is not enough to know whether the next admissible move is module-relation repair, structure selection, functional-structure record, control-structure view, scale-window naming, source-publication return, or non-source-label claim assignment named by value.

The repair question is:

Which ontologicalNeighborhood does this source-label use belong to, and which governing pattern now governs the recovered kind, recovered relation, recovered claim-use, source-use disposition, or non-use disposition?

Problem

How can FPF keep common stratification and architecture-operation language without:

  • minting false root kinds for layer, level, tier, stack, ladder, rung, block, expert, cache, router, or gate;
  • making C.30 govern all structure-like wording;
  • making A.6.M or C.30.LCA carry a duplicate local trigger registry;
  • treating source labels as non-source-label FPF-governed claims by appearance;
  • removing useful source language before a remaining admissible reader move is recoverable?

Forces

ForceTension
Source-language usability vs ontologyPractitioners need compact local words; FPF needs selected ontologicalNeighborhood, relation named by value or claim-use, source-use disposition, and use boundary.
Pattern placement vs ontological neighborhoodThe placement is in the C.30 pattern nest because the recurring first confusion is architecture or structure wording, but recovered claims and relations are governed by the pattern named in C.30.STRAT:4.2.
Thin repair vs shadow registrySubject patterns need one pointer, not copied trigger lists.
Direct governing pattern vs detourIf the relation, function-like use, control use, scale use, publication use, evidence use, or decision use is already recovered by value, apply the governing pattern directly.
Didactic payoff vs sterile precisionThe repair is complete only when it leaves one useful move: governing-pattern application, local rewrite, source return, ordinary source label, or blocked use.

Solution

Produce a StratificationSourceLabelRepairNote or an equivalent local rewrite. The note records the recovered E.10.ARCH row fields for this source-label use. It is not itself the selected structure, relation, source publication, neighboring claim record, or governing-pattern result.

StratificationSourceLabelRepairNote:
  sourceLabel:
  boundedTextSpanOrPublicationUnit:
  localSentenceRole:
  encounteredSourceContext:
  semanticAreaBaseConcept:
  semanticAreaSenseFamily:
  selectedOntologicalNeighborhood:
  primaryEntityOfConcernKind:
  encounteredFPFKindOrReference:
  relationToPrimaryEntityOfConcern:
  recoveredKindRelationOrClaimUse:
  sourceUseDisposition:
  governingPatternRef:
  admissibleUse:
  nonAdmissibleUse:
  remainingReaderMove:
  disposition:
    governing-pattern-ref | local-rewrite | ordinary-source-label |
    quote-only | reduced-use-cue | blocked-use | incomplete-rewrite

Recovery sequence

  1. Bound the text and label. Name the sentence, table row, diagram label, publication unit, or source span; copy the source label; and state the local sentence role.
  2. Check cheap closure. If there is no FPF-governed use, keep ordinary prose or quote-only wording and stop. If one small local rewrite restores the intended non-FPF use, close locally under E.10.
  3. Recover candidate ontology. Recover candidate primary EntityOfConcern kinds, candidate encountered FPF kinds or references, relation candidates, claim-use candidates, source-use candidates, scope, time, viewpoint, and context facets. Include literal and intended candidates when metonymy or compression is plausible.
  4. Select the ontological neighborhood. Select the first applicable neighborhood by recovered relation, claim-use, source-use disposition, formal apparatus, or governing-pattern field set, not by the source label.
  5. State the apparatus that makes the repair checkable. Use relation slots, control roles and rate bands, module-interface fields, flow fields, transduction fields, characteristic and scale construction, publication relation set, source-use disposition, mathematical-lens fields, evidence path, assurance argument, gate record, work occurrence, decision record, causal-use record, or ordinary non-use disposition, with scope, time, viewpoint, and context facets only where the recovered claim or use needs them.
  6. Project back to wording. Produce the repaired wording, compact note, direct governing-pattern application, or non-use disposition. The replacement candidate is accepted only after it passes E.10.
  7. State use and move. State admissible use, non-admissible wider or adjacent use, and one remaining reader move. If no move remains, the disposition is reduced-use, quote-only, blocked use, or incomplete rewrite.

Ontological-neighborhood governing-pattern applications

Ontological neighborhood selected by recoveryCommon source labelsRequired recovery apparatusGoverning pattern application
Control-structure neighborhoodlayer, level, tier, sometimes gateControl role, control relation, rate band, bounded context, and, when a supervisor-subholon relation is being made, B.2.5 supervisor-subholon relation.C.30.LCA for control-structure view; B.2.5, dynamics, temporal, evidence, assurance, or gate patterns only when those claims are being made separately.
Selected-structure or structural-view neighborhoodlayer, level, stack, block, viewSelected structure, hidden structure, lost structure, preserved structure, structural-view selection, correspondence or source-return boundary, and ArchitectureOf@Context relation when that relation is being made.A.22, C.30, C.30.ASV, or named C.30 subpattern.
Module-interface and substitution neighborhoodblock, cache, router, expert, sometimes layer or stackModule boundary, interface specification, substitutability relation, variation point, conformance relation, or module-interface reliance boundary.A.6.M; not C.30.STRAT once the module-interface relation is recovered.
Function-like, flow, or transduction neighborhoodblock, expert, cache, router, gate, sometimes layerTransformation or effect claim, path-selection relation, graph node, graph path, graph crossing, transduction-flow relation, or flow valuation under E.18.A.6.F, E.18, or C.30.TGA-FLOW-REL.
Characteristic, scale, or mathematical-lens neighborhoodlevel, tier, ladder, rung, layer, stack, blockCharacteristic, scale, coordinate, value plus declared scoring method, comparison criterion or declared comparability relation, scale window, resolution, coarse-graining, preserved structure, lost structure, C.29 mathematical-lens result, and stop condition when the lens-use claim is being made.C.16.P, characterization pattern governing the claim, or C.29.
Episteme, publication, view, or source-use neighborhoodstack, layer, section, view, cache, gateDescription episteme, publication unit, publication face, publication form, carrier, source-currentness relation, source-use disposition, source-return condition, or publication label.C.2.P, E.17, or the publication or source-use pattern governing the claim.
State, currentness, temporal, or dynamics neighborhoodcache, stable, level, readiness, sometimes gateBearer kind, state frame, value set, validity window, currentness relation, dynamics claim, temporal claim, or reopen condition.A.19.SPR, A.3.3, C.27, or a state pattern or temporal pattern named by value.
Evidence, assurance, gate, work, decision, or causal-use neighborhoodgate, proof, safety, decision, work, effect, sometimes any source label used as authorityEvidence path, assurance argument, constraint-validity record, gate decision, work occurrence, decision record, causal-use record, and non-admissible overread.A.10, G.6, B.3, A.20, A.21, A.15, C.11, C.28, or neighboring pattern governing that claim.
Ordinary source-label non-useany source labelNo FPF-governed claim after context check; optional quote-only or reduced-use cue.No precision-restoration pattern application is needed; stop with ordinary wording, quote-only wording, or blocked use.

Same-sentence claim boundary

When one sentence uses a source label to carry another FPF-governed claim, do not repeat a local "not proof, not gate, not work" catalogue at every occurrence. Keep the source-label repair in C.30.STRAT and apply the governing pattern for each recovered non-source-label claim. C.30.STRAT:4.2 names the common choices; worked cases keep only local false positives that the source label itself makes tempting.

Source-label cue table

Source label familyRecovery discipline
layerDo not choose by the word. Test control-structure, selected-structure or structural-view, module-interface, scale or mathematical-lens, and publication or source-use neighborhoods.
levelTest holon-level or aggregation use only when declared by a governing pattern; otherwise test characteristic or scale, ordinal classification, organization scope, work scope, evidence scope, publication grouping, or ordinary source-label non-use.
tierTest deployment, service, organization, classification, aggregation, and publication neighborhoods. Deployment or service claims named by value are governed by their governing patterns rather than by tier as ontology.
stackTest signature or slot construction, relation set or relation chain, architecture or control arrangement, aggregation arrangement, virtualization arrangement, deployment arrangement, publication-section ordering, or ordinary source-label non-use. A stack is not architecture by itself.
ladder and rungTest ordinal or classification scale, declared maturity or readiness progression, C.28 causal-use ladder or rung, publication taxonomy, or ordinary source-label non-use. Do not use ladder wording for an undeclared progression scale.
blockTest module-interface or substitution, selected-structure or structural-view, function-like or flow, mathematical-lens or coarse-graining, evidence, causal-use, gate, and decision neighborhoods.
expertIn MoE-like prose, test submodel, subholon, specialized transformation, path-selection relation, candidate-selection relation, or actual role or enactment only when an A.2 or A.15 role or work claim is being made.
cacheTest module-interface, flow buffer or path, state or currentness, capacity characteristic, latency characteristic, memory characteristic, reuse characteristic, source-currentness, publication cache, temporal claim, or ordinary source-label non-use.
routerTest path selection, flow relation, transformation function or selection function, module-interface relation, candidate selection, decision, or actual role or work only when that claim is being made.
gateTest constraint-validity record or gate-decision record, gating function, path selection, flow relation, publication label, or ordinary source-label non-use. A source label gate is not gate passage.

Placement discipline

semanticAreaBaseConcept: stratification wording and architecture-operation source labels.

semanticArea: the Part-F semantic row-set used for layer, level, tier, stack, ladder, and rung plus architecture-operation labels such as block, expert, cache, router, and gate when they are used as source labels before the governing FPF pattern recovers their selected kind, relation, or publication-use boundary.

semanticAreaSenseFamily: source-label wording for stratification, ordering, aggregation, and architecture-operation recognition; not a topic label, pattern-placement claim, or pattern-nest grouping.

ontologicalNeighborhood: the applicability neighborhood selected by the recovery row, not a second ontology. The admissible neighborhoods are the rows in C.30.STRAT:4.2: control structure; selected structure or structural view; module-interface and substitution; function-like, flow, or transduction; characteristic, scale, or mathematical-lens use; episteme, publication, view, or source-use; state, currentness, temporal, or dynamics; evidence, assurance, gate, work, decision, or causal-use; and ordinary source-label non-use.

The pattern nest is C.30.* because the recurring first failure is architecture or structure wording in architecture-operation prose. That placement does not make C.30 the governing pattern for non-source-label claims named in C.30.STRAT:4.2. The selected ontologicalNeighborhood and governing-pattern row decide which pattern governs the case.

Worked cases

WordingRepair
The module layer is stable.Copy layer as source label. Test whether the selected neighborhood is module-interface, scale or comparison, publication or view, or state or temporal. Use A.6.M, C.16.P or C.29, C.2.P, A.19.SPR, A.3.3, or C.27 only after the neighborhood and apparatus are recovered.
The expert routes the token.In MoE prose, expert is not a human role by default. Test submodel or subholon, specialized transformation, path-selection relation, transduction-flow relation, candidate selection, or actual role or enactment. Use A.6.F, E.18, C.30.TGA-FLOW-REL, G.5, C.11, A.2, or A.15 only for the recovered neighborhood.
The cache proves the architecture scales.cache may belong to module-interface, flow buffer or path, state or currentness, characteristic, source-currentness, or temporal neighborhoods. Proves and scales are separate evidence, assurance, and scale or mathematical-lens claims. Use governing patterns for each recovered claim-use; do not let cache carry proof.
The LCA upper layer guarantees safety.Use C.30.STRAT only to recover whether layer belongs to the control-structure neighborhood. Then C.30.LCA records control roles, relations, rate band, and bounded context. Safety proof or assurance is governed by B.3, A.10 or G.6, dynamics, temporal, and gate patterns.
This gate selects the winning architecture.If gate is a neural-network gating function or router, use A.6.F or E.18; if it is a project gate decision, use A.20 or A.21; if it is candidate selection, use G.5 or C.11. The label alone decides none of these.

Filled repair note

StratificationSourceLabelRepairNote:
  sourceLabel: cache
  boundedTextSpanOrPublicationUnit: "The cache proves the architecture scales."
  localSentenceRole: architecture-operation source label plus separate proof and scale claims
  encounteredSourceContext: inference-service architecture prose where cache names a reusable state or buffer mechanism
  semanticAreaBaseConcept: stratification wording and architecture-operation source labels
  semanticAreaSenseFamily: cache/state/buffer/reuse source-label wording
  selectedOntologicalNeighborhood:
    cache label: state or currentness, module-interface, or flow-buffer neighborhood only after apparatus is recovered
    proves wording: evidence or assurance neighborhood only if an evidence path or assurance argument is present
    scales wording: characteristic, scale, architecture scale-preference, or mathematical-lens neighborhood only if those fields are present
  primaryEntityOfConcernKind: ArchitectureOf@ServiceContext with a cache-related selected structure or state-bearing module candidate
  encounteredFPFKindOrReference: source label only; no `U.Cache`, no proof record, and no scale claim by word shape
  relationToPrimaryEntityOfConcern: cache is a candidate architecture-relevant structure or state-bearing item; proof and scale are adjacent claim uses
  recoveredKindRelationOrClaimUse: split into cache-structure/state candidate, evidence or assurance overread, and scale or lens-use candidate
  sourceUseDisposition: keep `cache` as source label until the field set named by value is recoverable; lower `proves` if no evidence path is present
  governingPatternRef: `A.6.M`, `A.6.F`, `E.18`, `A.19.SPR`, or `A.3.3` for cache apparatus when recovered; `C.16.P`, `C.29`, or `C.31.ASAP` for scale or lens use when recovered; `A.10`, `B.3`, or `G.6` for evidence or assurance only when that claim is being made
  admissibleUse: use the sentence to start the field split and then cite only the recovered governing pattern results
  neighboringClaimBoundary: proof, assurance, scale-success, module-substitutability, and architecture-quality claims apply the governing pattern for the recovered claim being made
  remainingReaderMove: write the smallest governing-pattern result for the recovered scale, state, module-interface, flow, evidence, or assurance claim; otherwise keep ordinary source wording or quote-only wording
  disposition: local-rewrite plus governing-pattern-ref application for each recovered claim being made; blocked or reduced-use cue for the rest

A compact local rewrite can therefore say: The response cache is a candidate state-bearing architecture structure. Architecture scaling, mathematical-lens use, proof, and assurance claims are separate claims; apply [C.16.P](/generated/patterns/C.16.P), [C.29](/generated/patterns/C.29), [C.31.ASAP](/generated/patterns/C.31.ASAP), [A.10](/generated/patterns/A.10), [B.3](/generated/patterns/B.3), or [G.6](/generated/patterns/G.6) only when one of those claims is being made.

Lowering and reopen conditions

A StratificationSourceLabelRepairNote remains admissible only while its source span, selected ontologicalNeighborhood, governing pattern, and remaining reader move stay recoverable. Reopen or lower the repair when:

  • the source label starts carrying a new relation, characteristic, publication, evidence, assurance, gate, work, decision, causal-use, or mathematical-lens claim;
  • a direct governing pattern becomes recoverable and C.30.STRAT no longer buys action guidance;
  • the selected neighborhood was chosen by label similarity rather than by recovered apparatus;
  • the repair preserves kind recovery but leaves no useful admissible reader move;
  • E.10.ARCH changes the required recovery fields, C.30.P changes architecture-wording repair law, F.19 changes apparatus-vs-usability policy, or a more source-label realization pattern now governs a label family currently repaired here.

Lower the result to quote-only, reduced-use cue, blocked use, or incomplete rewrite when the governing pattern, admissible use, non-admissible use, or remaining move cannot be stated.

Archetypal Grounding

Template elementU.System illustrationU.Episteme illustration
Source-label cueA neural-network architecture source says that an expert block sits above a router layer.A source-publication note says that a cache layer keeps a diagram or view current.
Recovery resultExpert, block, router, and layer stay source labels until the repair recovers module-interface, function-like, path-selection, flow, or selected-structure apparatus.Cache and layer stay source labels until the repair recovers publication source-currentness, view, state or currentness, or ordinary non-use apparatus.
Admissible moveApply A.6.M, A.6.F, E.18, C.30.TGA-FLOW-REL, G.5, or C.11 only after the ontological neighborhood is recovered by value.Apply C.2.P, E.17, A.19.SPR, A.3.3, or C.27 only after the publication named by value, episteme, state, or temporal claim is recovered.

Bias-Annotation

Lenses tested: Arch, Onto and Epist, Prag, Did, and Gov. Scope: architecture and engineering source-label precision restoration, with non-architecture governing-pattern applications when recovery selects them.

This pattern intentionally biases away from lexical replacement and toward ontology-first recovery. The mitigation is the cheap-closure rule: ordinary source prose stays ordinary, quote-only wording stays quote-only, and already recovered cases skip C.30.STRAT.

Conformance checklist

IDCheck
CC-C30STRAT-1The source label is copied as a source label before any FPF kind is assigned.
CC-C30STRAT-2The repair names the source label, bounded text, selected ontologicalNeighborhood, primary EntityOfConcern kind, encountered FPF kind or reference, relation to the primary EntityOfConcern, recovered kind, relation, or claim-use, source-use disposition, governing pattern, admissible use, non-admissible use, and remaining reader move.
CC-C30STRAT-3No root kind or universal kind is minted for layer, level, tier, stack, ladder, rung, block, expert, cache, router, gate, or stratification.
CC-C30STRAT-4The selected ontologicalNeighborhood and governing-pattern row select the governing pattern; the source label does not select the pattern nest by itself.
CC-C30STRAT-5Already recovered cases use the governing pattern directly instead of detouring through this pattern.
CC-C30STRAT-6The repair distinguishes the neighborhoods in C.30.STRAT:4.2 when any of them are being used, and it does not compress several ontological neighborhoods being used into one word.
CC-C30STRAT-7Subject patterns use at most a thin pointer to this pattern and do not copy this trigger table.
CC-C30STRAT-8The result preserves one useful admissible reader move; if no move remains, the disposition is quote-only, reduced-use cue, blocked use, or incomplete rewrite rather than recovered by value.

Common Anti-Patterns and How to Avoid Them

Anti-patternSymptomRepair
Source label as ontologylayer, block, expert, cache, or gate is treated as a kind by label.Complete the StratificationSourceLabelRepairNote and select the governing pattern from the recovered neighborhood.
C.30 takeoverAny structure-like word is treated as governed by C.30 because it sounds architectural.Choose by selected ontologicalNeighborhood; non-source-label claims are governed by the patterns named in C.30.STRAT:4.2.
Local trigger fanoutA.6.M, C.30.LCA, C.31, or another subject pattern copies a growing label table.Keep one thin pointer to C.30.STRAT and keep the subject pattern to its own invariant.
Expert-as-role false positiveexpert in MoE prose becomes an A.2 role-enactor claim by word alone.Treat as source label for submodel, transformation, path selection, or candidate selection unless an A.2 or A.15 role or work claim is actually being made.
Gate-as-gate-decision false positiveA gating function, UI label, or source word becomes gate passage.Use A.20 or A.21 only for actual constraint-validity or gate-decision claims; otherwise use the function, flow, publication, or ordinary-label disposition named by value.

Consequences

BenefitTrade-off or mitigation
Source labels remain usable recognition cues without becoming root kinds.The reader pays one recovery-row cost only when FPF-governed use is being made; ordinary prose closes cheaply.
Subject patterns avoid copied trigger registries.Subject patterns need accurate thin pointers to C.30.STRAT and still keep their own invariants precise.
Source-label wording no longer captures non-source-label claims by sound.The repair may name several governing patterns when one sentence compresses several claims; the benefit is that each claim remains governed by its governing pattern.

Rationale

Stratification words are common because they compress local practice. That compression is useful at entry time and unsafe as ontology. FPF therefore keeps the word as a source label, recovers the ontologicalNeighborhood, and then uses the governing pattern for the recovered claim.

The pattern is placed under C.30 because architecture and structure prose is the recurring entry point. The placement does not make C.30 the governing pattern for every recovered case. If the recovery result is outside source-label repair, the governing pattern named in C.30.STRAT:4.2 carries the recovered claim content.

SoTA-Echoing

Reduced SoTA is sufficient for this precision-restoration pattern. The source practice being adopted is not a new external ontology; it is the observed architecture and engineering habit of using compact labels such as layer, level, tier, stack, block, expert, cache, router, and gate as local recognition language. FPF adapts that practice by keeping labels as source labels and requiring ontology-first recovery before they carry FPF-governed use.

Internal FPF current practice is the governing source here: E.10 supplies trigger handling, E.10.ARCH supplies the recovery architecture, C.30.P supplies architecture and structure wording repair, F.19 supplies apparatus-vs-usability discipline, and governing patterns carry recovered cases. The Solution, checklist, worked cases, and relations in this pattern change because that source-use disposition rejects lexical replacement and trigger-table fanout.

Currentness front. Recheck this pattern when E.10.ARCH changes the recovery row fields, C.30.P changes architecture or structure wording repair, F.19 changes apparatus policy, or a more source-label realization pattern now governs a label family currently repaired here. The smallest changed locus is the affected row field, Relations entry, worked case, or subject-pattern thin pointer; do not rebuild a local trigger registry.

Relations

  • E.10 catches the trigger and selects this pattern only when stratification or architecture-operation source-label recovery is needed.
  • E.10.ARCH supplies the recovery architecture, placement rule, and anti-fanout discipline.
  • C.30.P remains the broader architecture and structure wording repair. C.30.STRAT is the narrower stratification source-label realization when those labels recur with stable recovery apparatus.
  • A.6.M governs only recovered module-interface relation and interface-specification cases.
  • C.30.LCA governs only recovered control-structure view cases with control roles, relations, rate bands, control-layer labels, and bounded context.
  • C.31 and C.31.RSA govern only recovered characteristic, reusable-locus, bespoke-residue, accountingBasisRef, or report-only share cases.
  • C.2.P, E.17, A.6.F, E.18, C.30.TGA-FLOW-REL, C.16.P, A.19.SPR, C.29, C.28, A.10, G.6, B.3, A.20, A.21, A.15, A.2, G.5, and C.11 carry their recovered cases when the case is named by value.

Neighboring claims stay with their governing patterns: A.22 for selected-structure EntityOfConcern, C.30 for grounded architecture and selected-structure adequacy, C.30.P for architecture and structure precision restoration, C.30.ASV for structural-view adequacy, C.30.LCA for control-structure view adequacy, A.6.M for module-interface repair, A.6.F for function-use repair, E.18 for graph, path, crossing, and flow-valuation discipline, C.16 for characterization, C.29 for mathematical-lens use, C.2.P for source and publication relation repair, and the non-source-label governing patterns named in C.30.STRAT:4.2. C.30.STRAT governs stratification wording and architecture-operation source-label repair only.

C.30.STRAT:End

Architecture Structural View Adequacy (ASV)

Type: Architectural pattern Status: Stable Normativity: Normative unless explicitly marked informative

Problem frame

Use this pattern when an architecture discussion needs to say which selected structure is being viewed, not merely that there is a diagram, model, table, dashboard, ADR, generated relation graph, or generic "view".

The first useful move is ArchitectureStructureKindTriage@Project:

ArchitectureStructureKindTriage@Project:
architectureClaimRef?:
describedHolonRef?:
boundedContextRef?:

architecture concern cue:
suspected wrong collapse:
practitioner prompt label:
candidate structure kinds:
smallest useful structure-kind set:
primaryGoverningPatternApplicationRef:
admissibleArchitectureMove:
governingPatternApplicationRefs:
stop condition:

Ordinary minimum: name the architecture claim being made or selected structure, or the described holon and bounded context when the claim is not yet recoverable, the one structure kind or structure-kind set that changes action, one non-admissible overread, and the next admissible architecture move or stop. All other fields are conditional and may be not used.

Start with [C.30](/generated/patterns/C.30) when the architecture claim itself is unclear. Use C.30.ASV only when a view over selected architecture-relevant structure changes the next architecture move. Use the triage record when it names the structure kind under consideration and the next admissible architecture move. Use a full ArchitectureStructuralView@Context only when the view changes action, selected reliance relation, correspondence, source return, publication, comparison, or another governing-pattern use.

What goes wrong if C.30.ASV is missed: "architecture" silently means "module diagram"; a view becomes a publication face; a viewpoint becomes a structure kind; TEVB is stretched into a full architecture ontology; a Transduction Graph Architecture (TGA) graph, Layered Control Architecture (LCA) control sketch, code-agent relation graph, or neural-network block diagram becomes the architecture by appearance.

What C.30.ASV buys in practice: the practitioner can name the architecture claim, selected structures, structure kind, viewpoint, selected relation kinds, selected constraints, selected invariants, operation or dynamics descriptions being used, hidden or lost structure, correspondence, source or reliance relation, source-return condition, admissible use, and non-admissible use before relying on a view.

Not this pattern when the question under repair is only the general architecture claim, structure as such, or a TGA graph relation, path relation, or crossing relation. Use [C.30](/generated/patterns/C.30), [A.22](/generated/patterns/A.22), [E.18](/generated/patterns/E.18), or C.30.TGA-FLOW-REL as appropriate. If the view is used for another claim being made, use the governing pattern and keep C.30.ASV only to the view portion.

Thin precision-restoration pointer: if the issue under repair is still whether view, architecture view, architecture structural view, diagram, model, graph, layer, or functional architecture names a structural view, an architecture description, a publication face, a carrier, a source relation, or another governed claim or relation named by value, use [C.30.P](/generated/patterns/C.30.P) first. Do not copy the [C.30.P](/generated/patterns/C.30.P) trigger table here; apply C.30.ASV only after the architecture structural-view claim or non-ASV claim named by value is recoverable.

Problem

An architecture structural view is selected-structure triage for an ArchitectureOf@Context claim: which architecture-relevant structure is being viewed, which structure kind is under consideration, what relation, constraint, invariant, operation, dynamics description, hidden or lost structure, correspondence, source or reliance relation, and source-return condition changes the next architecture move. The view is represented as a Description episteme, including an episteme-lane U.View when the view claim is being made, only to record that selected-structure move. Publication faces, forms, units, carriers, and renderings may publish the view; they are not the view and do not become the selected structure.

Without this pattern:

  • a module-interface view is treated as all architecture;
  • a TGA graph or control diagram is treated as proof;
  • a structure kind is treated as a U.Viewpoint;
  • a TEVB viewpoint bundle is mutated to carry architecture-specific structure kinds;
  • a diagram, table, dashboard, generated relation graph, or ADR is treated as the view itself;
  • functional architecture is treated as a peer ontology rather than a structure-kind interpretation under C.30;
  • cross-view consistency is asserted by prose instead of correspondence records;
  • omitted structure is relied on in subsequent work without a source-return condition.

Forces

ForceTension
View usefulness vs view overreadViews make architecture discussable, but a useful artifact can be mistaken for the architecture claim, selected structure, publication, proof, or decision.
Structure kind vs viewpointA structure kind classifies selected structure; a viewpoint names a way of viewing. They often travel together but are not the same kind.
TEVB reuse vs TEVB mutationTEVB gives useful engineering viewpoints over holons; architecture needs more structure kinds without expanding the TEVB core by implication.
Small triage vs full view recordMany cases need only the structure kind under consideration and next move; full view records are justified only when they change action.
Multi-view correspondence vs single-view shortcutArchitecture work often needs relations among functional, flow, control, module, information, work, evidence, scale, and placement views; one favored diagram cannot carry all claims.
Hidden structure vs practical compressionA useful view omits something; omitted structure becomes a problem only when subsequent action relies on it.

Solution

Govern architecture structural views by first naming the selected architecture-relevant structure, structure kind, view construction, correspondence, hidden or lost structure, source or reliance relation, source-return condition, admissible use, and next architecture move. Use ArchitectureStructuralView@Context as the record form when that view must be durable, reusable, comparable, or reliance-bearing.

A conforming ArchitectureStructuralView@Context record is a Description or view over selected U.Structure references in one ArchitectureOf@Context claim record, under one declared ArchitectureStructureKindRef and one DescriptionContext.ViewpointRef. The description and view machinery makes the selected-structure move inspectable; it does not replace that move.

C.30.ASV is the selected-structure-kind-to-view relation pattern for architecture work. It explains how different selected structure kinds become views under declared viewpoints and concerns. It is not a complete architecture-description pattern; a durable ArchitectureDescription@Context composes one or more structural-view records through C.30 and E.17.0 only when description use is being made.

C.30.ASV does not extend the TEVB core viewpoint set by implication. It defines architecture structure kinds and architecture-specific structure-kind and view-record bindings. TEVB viewpoints are reused when the structure-kind view uses one of the TEVB core viewpoints; other structure-kind views use VF.ARCH.STRUCTURE, a declared local viewpoint bundle, a governing FPF pattern, or a source or reliance record.

Architecture structural view record

StructuralAspectDescription@Context describes one selected structural aspect under A.22. It is not an ArchitectureStructureKindRef by itself. ArchitectureStructuralView@Context is a C.30.ASV view over structures selected by ArchitectureOf@Context and typed by ArchitectureStructureKindRef.

ArchitectureStructuralView@Context ::= {
  viewId,
  architectureClaimRef: ArchitectureOf@ContextRef,
  descriptionContext: DescriptionContext(
    EntityOfConcernRef = selectedStructureEntityOfConcernRef,
    BoundedContextRef = ArchitectureOf@Context.boundedContextRef,
    ViewpointRef = viewpointRef
  ),
  selectedStructureEntityOfConcernRef: U.StructureRef | FinSet(U.StructureRef) (= structureRefs),
  viewpointRef: U.ViewpointRef (= descriptionContext.ViewpointRef),
  structureRefs: FinSet(U.StructureRef),
  structureKindRef: ArchitectureStructureKindRef,
  recordGoverningPatternRef,
  selectedRelationKinds,
  selectedConstraintRefs?,
  selectedInvariantRefs?,
  selectedOperationOrDynamicsDescriptionRefs?,
  viewConstruction:
    directDescription | projection | query | extraction |
    coarsening | correspondenceSlice | sourceReturnSlice,
  structuralAspectDescriptionRef?,
  hiddenOrLostStructure,
  structureKnowledgeState?:
    declared | observed | inferred | generated | simulated |
    extracted | hypothesized | unknownRegionPresent,
  correspondenceModelRefs?,
  sourceOrRelianceRelationRefs?,
  sourceReturnCondition?,
  admissibleUse,
  nonAdmissibleUse
}

DescriptionContext.EntityOfConcernRef names the selected structure or selected structure set represented by structureRefs. architectureClaimRef names the enclosing ArchitectureOf@Context claim, and the described holon and bounded context are recovered through that claim record.

EntityOfConcern discipline. C.30.ASV treats selected structure as the EntityOfConcern for this view use when the view concerns dependent, non-agentive organization rather than one publication artifact. This does not add a parallel EntityOfConcern head: DescriptionContext.EntityOfConcernRef, selectedStructureEntityOfConcernRef, and structureRefs must converge on the same selected structure or structure set, while architectureClaimRef remains the enclosing architecture-claim context. viewpointRef is a recovery label for descriptionContext.ViewpointRef, not a second independent viewpoint slot. If the implementation stores only DescriptionContext, the viewpoint remains recoverable there.

structureKnowledgeState? states how the selected structure is known when partial knowledge matters: declared, observed, inferred, generated, simulated, extracted, hypothesized, or with an unknown region present. Unknown or inferred structure may guide inspection or source return; it cannot by itself supply assurance, gate, release, causal proof, or architecture decision.

Architecture structure-kind classifier

ArchitectureStructureKindRef is a C.30-local DiscriminatorToken enumeration over architecture-relevant U.Structure references selected by ArchitectureOf@Context. It is not U.Kind, U.Viewpoint, U.ViewpointBundle, StructuralAspectDescription, StructuralView@Context, or a root U.* kind. ArchitectureStructuralView@Context uses structureKindRef to say which selected structure kind is being viewed.

ArchitectureStructureKindRef ::= one of {
  FunctionalStructure,
  FlowTransductionStructure,
  ControlStructure,
  ModuleInterfaceStructure,
  RuntimeInteractionStructure,
  PlacementDeploymentStructure,
  InformationDataStructure,
  SecurityTrustBoundaryStructure,
  ConstraintRequirementStructure,
  MaterialSpatialStructure,
  DeclaredLogicalStructure,

  WorkMethodStructure,
  RoleEnactorStructure,
  EvidenceAssuranceStructure,
  ScaleEvolutionStructure,
  OtherDeclaredStructureKind
}

The first group is the seed classifier set for ordinary architecture structural-view use. WorkMethodStructure, RoleEnactorStructure, EvidenceAssuranceStructure, and ScaleEvolutionStructure are neighbor-governed classifier values: ASV may use them to name the selected architecture-relevant structure, but their full semantics stay in the named work and method, role-enactor, evidence and assurance, scale, characterization, or mathematical-lens patterns. Do not enumerate structure kinds by default. Choose the smallest useful structure-kind set that changes the next architecture move. If no structure kind changes action, keep the phrase as ordinary recognition wording or a source note. This does not weaken kind discipline; it prevents ArchitectureStructureKindRef from becoming an audit checklist.

Inside C.30.ASV, OtherDeclaredStructureKind is always an architecture-structure-kind classifier value over U.Structure; it does not mint a general FPF root kind.

OtherDeclaredStructureKind is admissible only when the local text names:

  • declaredStructureKindName;
  • declaredStructureKindDefinition;
  • allowed relation families;
  • common false interpretations;
  • governing-pattern applications;
  • boundedContextRef.

Each structure kind needs a short definition, allowed relation families, common false interpretations, typical governing-pattern applications, and example architecture structural view records. This is not a new root-kind set; it is a controlled classifier set over U.Structure.

Small triage output

Use ArchitectureStructureKindTriage@Project before a full view record when the practitioner only needs to identify the structure kind under consideration and next architecture move.

ArchitectureStructureKindTriage@Project ::= {
  architectureClaimRef?: ArchitectureOf@ContextRef,
  describedHolonRef?: U.HolonRef,
  boundedContextRef?: U.BoundedContextRef,
  architectureConcernCue,
  suspectedWrongCollapse,
  plainPromptLabel,
  candidateStructureKindRefs: FinSet(ArchitectureStructureKindRef),
  smallestUsefulStructureKindRefs,
  structureKnowledgeState?,
  primaryGoverningPatternApplicationRef,
  temptingWrongPatternRefs?,
  admissibleArchitectureMove:
    inspect | split | relate | downgrade | assignNeighbor | stop |
    otherDeclared,
  candidateGenerationPatternApplication?: yes | no,
  governingPatternApplicationRefs,
  stopCondition
}

primaryGoverningPatternApplicationRef names the pattern that carries the next claim kind being made. candidateGenerationPatternApplication? marks that the next admissible move is candidate generation; candidate generation is not ASV work. temptingWrongPatternRefs? names tempting wrong first patterns when that repair is needed. None of these fields governs the triage record itself; C.30.ASV governs the triage record family. When architectureClaimRef is absent, describedHolonRef and boundedContextRef are required for triage. This pre-claim form does not create a new kind and does not publish an ArchitectureOf@Context claim by itself; it only lets the practitioner identify the structure kind under consideration before forming a full architecture claim. A full ArchitectureStructuralView@Context still requires architectureClaimRef; do not promote triage to a full view record until that architecture claim is available.

Practitioner prompt labels are first-entry cues, not ArchitectureStructureKindRef values. FPF-governed records use the Tech values below:

Functional -> FunctionalStructure
Flow -> FlowTransductionStructure
Control -> ControlStructure
Module -> ModuleInterfaceStructure
Method and work -> WorkMethodStructure
Role -> RoleEnactorStructure
Evidence -> EvidenceAssuranceStructure
Scale -> ScaleEvolutionStructure
Security -> SecurityTrustBoundaryStructure

Architecture viewpoint bundle and binding rows

Architecture structural views use VF.ARCH.STRUCTURE without turning structure kinds into viewpoints. The bundle is separate from VF.TEVB.ENG: it may import TEVB, but it does not expand the TEVB core engineering viewpoint set.

Declaration source: VF.ARCH.STRUCTURE is an E.17.1 and F.18 declared viewpoint bundle for architecture structural-view records. Its VP.Architecture* ids are viewpoint ids only. They do not add TEVB viewpoints, name structure kinds, define publication faces, or carry decision, evidence, gate, or assurance authority.

Structural-view publication-use boundary

This subsection is the C.30.ASV structural-view publication-use boundary. C.30.ASV governs architecture structural-view adequacy: selected architecture-relevant structure, structure kind, view construction, correspondence, hidden structure and lost structure, source return, and next architecture move. When a view, diagram, graph, card, benchmark, probe output, model publication, or architecture note is used for evidence sufficiency, safety assurance, gate passage, release permission, work record, or decision authority, apply the pattern governing that claim; keep only the structural-view record and the next architecture move in C.30.ASV.

VF.TEVB.ENG core stays:
  { VP.Functional, VP.Procedural, VP.RoleEnactor, VP.ModuleInterface }

TEVB is the small engineering viewpoint bundle over holons. The architecture problem is broader than TEVB, but the broader coverage is not solved by placing record sets inside a U.ViewpointBundle. The U.ViewpointBundle carries viewpoints; a separate architecture-local description binds structure kinds, view record sets, construction modes, correspondence obligations, and governing-pattern applications.

VF.ARCH.STRUCTURE : U.ViewpointBundle {
  viewFamilyId = VF.ARCH.STRUCTURE,
  imports = { VF.TEVB.ENG },
  EntityOfConcernClassSpec = {
    a : ArchitectureOf@Context |
    a.describedHolonRef and a.boundedContextRef are recoverable
  },
  viewpoints = {
    VP.ArchitectureStructure,
    VP.ArchitectureCorrespondence,
    VP.ArchitectureSourceReturn,
    VP.ArchitectureDecisionAffectedStructure
  }
}

ArchitectureStructureKindViewRecordBinding ::= {
  structureKindRef: ArchitectureStructureKindRef,
  allowableViewpointRefs: FinSet(U.ViewpointRef),
  viewRecordSetRef,
  allowedViewConstructionModes,
  requiredCorrespondenceRefs?,
  sourceReturnRequirement?,
  governingPatternApplicationRefs
}

viewRecordSetRef names the allowed Description-episteme or specification-use record set for one structure-kind binding. It is not a package grouping, not a U.ViewpointBundle, not a ViewFamilyId, and not a new TEVB viewpoint.

Initial architecture structure kinds and view records

The initial set is a seed for first architecture moves, not an atlas. Use the table to choose one structure kind under consideration and the governing-pattern application that carries any non-ASV claim kind.

Seed structure kindStructural viewMinimum record fields beyond common ASV fieldsFirst boundary
FunctionalStructureFunctionalStructureView@Contextfunction refs or effect refs, capability refs, dependency refs, allocation refsUse A.6.F, capability, work, or requirement patterns when those claims are being made.
FlowTransductionStructureFlowTransductionStructureView@ContexttransductionGraphRef, pathSliceRefs, crossingRefs, valuationRefsUse E.18 and C.30.TGA-FLOW-REL for graph, path, or crossing structure input; use C.28 for causal claims.
RuntimeInteractionStructureRuntimeInteractionStructureView@Contextruntime elements, connectors and protocols, event topology and message topology, failure boundaries and latency boundariesUse temporal, failure, evidence, or assurance patterns when runtime claims exceed structure.
ModuleInterfaceStructureModuleInterfaceStructureView@Contextmodule relation refs, interface specs, admissibility conditions, substitutability policy or change policyUse A.6.M module-relation repair and conformance evidence when those claims are being made.
PlacementDeploymentStructurePlacementDeploymentStructureView@Contextallocation-to-site refs or environment refs, network locality or physical locality, jurisdiction constraints or safety constraintsUse temporal, evidence, legal, regulatory, or safety patterns when claims of those non-placement kinds are being made.
InformationDataStructureInformationDataStructureView@Contextstate bearer and residence refs, schema refs, semantic refs, persistence locus, provenance relation, custody relation, source-return conditions, privacy constraintsUse evidence, privacy, or source-return patterns when those claims are being made.
SecurityTrustBoundaryStructureSecurityTrustBoundaryStructureView@Contextprotected asset or effect refs, trust boundary refs, untrusted input refs, privilege or authority refs, data-flow and control-flow refs, attack exposure refs, abuse or misuse path refs, secure-default or hardening boundary, supply-chain or update-channel refs, detection-response boundary refs when the corresponding claim is being madeGives a first security-architecture move before evidence, assurance, gate, risk-score, or compliance proof.
ControlStructureControlStructureView@Contextcontrol role refs, declared control-rate refs, observer, estimator, controller, planner, and supervisor relations, feedback refsUse C.30.LCA, dynamics, temporal, causal, evidence, and assurance patterns when those claims are being made.
ConstraintRequirementStructureConstraintRequirementStructureView@Contextrequirement refs, constraint refs, and invariant refs, affected structure refs, admissibility conditionsRequirements shape structures; requirement, gate, evidence, causal, or decision claims apply their governing patterns.
MaterialSpatialStructureMaterialSpatialStructureView@Contextgeometry, adjacency, containment, energy flow or material flow, safety separationPhysical separation is not safety proof; safety, evidence, dynamics, or causal claims apply their governing patterns.
DeclaredLogicalStructureLogicalStructureView@Contextlocal logical relation class, relation constraints, correspondence to functional structures, module structures, runtime structures, and data structuresCovers logical architecture without making logical a universal ontology token.

Externally governed classifier values remain admissible when they are the architecture-relevant structure under consideration, but C.30.ASV does not define their full record families:

Externally governed classifier valueASV useFull semantics and governing patterns
WorkMethodStructureMethod arrangement or work arrangement changes the architecture move.Use MethodDescription, WorkPlan, WorkEnactment, exception path, launch relation or gate relation, and A.15 governing patterns; do not turn a work-method diagram into work authority.
RoleEnactorStructureResponsibility or enactor allocation changes the architecture move.Use role, enactor, organization, work, and stakeholder patterns when those claim kinds are being made; do not treat an org chart as architecture truth.
EvidenceAssuranceStructureEvidence reuse or assurance arrangement changes affected structure or source return.Use A.10, G.6, or B.3 for evidence sufficiency or assurance verdict; ASV only names the structure and loss boundary.
ScaleEvolutionStructureScale window, replacement or change policy, trajectory reference, or coarse-graining changes the architecture move.Use C.29, C.16, temporal, source-return, or decision patterns for scale, characterization, or selection claims.
OtherDeclaredStructureKindA local structure kind is declared because none of the seed or externally governed values fits.Name definition, relation families, false interpretations, governing patterns, and context; do not mint a root kind by label alone.

Minimum useful seed examples:

Structure kindMinimal exampleFalse interpretationFirst governing pattern
FunctionalStructureCapability, effect, or transformation allocation.Purpose truth or requirement satisfaction.A.6.F, capability, work, or requirement pattern when that claim kind is being made.
FlowTransductionStructurePath, crossing, valuation, or transduction slice.Whole architecture or causal proof.E.18, C.30.TGA-FLOW-REL, C.29, or C.28 when a graph, path, crossing, mathematical-lens, or causal-use claim kind is being made.
ControlStructureController, observer, plant, feedback, or rate relation.Stability, safety, or assurance proof.C.30.LCA, temporal, dynamics, causal, evidence, or assurance pattern when that claim kind is being made.
ModuleInterfaceStructureModule relation, interface spec, or substitutability boundary.Module tree as all architecture.A.6.M module-relation repair, conformance evidence, or decision pattern when that claim kind is being made.
InformationDataStructureState bearer, residence, provenance, and custody.Database label.Evidence, privacy, or source-return pattern when that claim or reliance use is being made.
SecurityTrustBoundaryStructureTrust boundary, untrusted input, privilege path, or attack exposure.Security proof, risk score, or compliance label.Evidence, assurance, gate, C.24, C.16, C.25, or C.30.LCA when that security, evidence, assurance, gate, tool-use, measurement, quality, or control claim kind is being made.
MaterialSpatialStructureSeparation, adjacency, containment, or energy path or material path.Safety proof or geometry as architecture truth.Safety, evidence, dynamics, or causal pattern when that claim kind is being made.
DeclaredLogicalStructureLocal logical relation class with correspondence to other structures.Universal logical architecture ontology.Correspondence, function, module, runtime, data, or governing pattern when that relation is being claimed or a claim of that kind is being made.
Minimal SecurityTrustBoundaryStructureView@Context fields:
SecurityTrustBoundaryStructureView@Context ::= {
  architectureStructuralViewRef:
  protectedAssetOrEffectRefs:
  trustBoundaryRefs:
  untrustedInputRefs:
  privilegeOrAuthorityRefs:
  dataFlowOrControlFlowRefs:
  attackExposureRefs:
  abuseOrMisusePathRefs:
  secureDefaultOrHardeningBoundary:
  updateOrSupplyChainChannelRefs:
  detectionResponseBoundaryRefs?:
  governingPatternApplicationRefs:
    A.10 | G.6 | B.3 | C.28 | A.20 | A.21 |
    C.16 | C.25 | C.24 when tool authority or agentic tool-use is being claimed | C.30.LCA when a control relation is being claimed
  admissibleUse:
  neighboringClaimBoundary:
    compliance, risk-score, assurance, checklist-security, and zero-trust claims apply the evidence, assurance, risk, gate, or security pattern governing the claim being made
}

SecurityTrustBoundaryStructure carries adversarial-boundary interpretation: which protected assets or effects are under consideration, who or what is trusted, where untrusted input crosses, what authority or privilege is exposed, which adversarial paths and attack exposures matter, which data-flow or control-flow security boundaries matter, and where secure defaults, hardening, update or supply-chain channels, detection, or response boundaries change the next architecture move.

Apply evidence, assurance, gate, or compliance patterns only when the architecture move relies on evidence sufficiency, assurance verdict, gate passage, regulatory acceptance, or release authority. If the selected move is structural, first recover the structure: trust boundary, loss-control relation, control relation, evidence reuse structure, or affected structure or affected view.

Use a SafetyLossControlStructureNote when a safety-architecture concern first needs the architecture-side loss-control structure rather than a safety-case verdict:

SafetyLossControlStructureNote:
  lossOrHarm:
  hazardOrUnsafeState:
  unsafeControlActionOrMissingControl:
  controlledProcessOrPlantRef:
  controlConstraintRef:
  feedbackOrObservabilityBoundary:
  timingOrRateBoundary:
  operationalDesignScopeOrMisuseScope:
  foreseeableMisuseRefs?:
  architectureStructureKindRefs:
    ControlStructure | ConstraintRequirementStructure |
    SecurityTrustBoundaryStructure | InformationDataStructure |
    EvidenceAssuranceStructure
  governingPatternApplicationRefs:
    A.3.3 dynamics, C.27 temporal or rate,
    C.28 causal-use, A.10 or G.6 evidence,
    B.3 assurance, A.20 or A.21 gate
  nonAdmissibleUse:
    not safety proof, not safety-case verdict, not regulatory acceptance

The note gives a positive first architecture move: find the loss-control structure, controlled process or plant, constraint, foreseeable misuse, operational design scope, and action-relevant boundary. It does not replace evidence, assurance, gate, causal, dynamics, or temporal claims.

Functional structure view boundary

FunctionalStructureView@Context under C.30.ASV does not mint U.Function. A functional element is a description-side architecture element under VP.Functional unless separately grounded as U.Capability, U.Method, U.Work, U.Role, or another existing FPF kind.

FunctionalStructureView@Context ::= {
  architectureStructuralViewRef: ArchitectureStructuralView@ContextRef,
  functionOrEffectRefs?,
  capabilityRefs?,
  functionalDependencyRefs?,
  allocationRefs?,
  nonFunctionClaimNotes?,
  flowRelationRefs?,
  moduleInterfaceRelationRefs?,
  admissibleUse,
  nonAdmissibleUse
}

A transduction graph, path slice, crossing, or flow valuation is not a functional element. When a flow relation is being used, connect the functional view to FlowTransductionStructure through C.30.TGA-FLOW-REL. When module allocation is being claimed, connect the functional view to [A.6.M](/generated/patterns/A.6.M) module-relation repair rather than treating function and module as one kind.

Composability and quality compositionality are separate claims. If the view says parts can be assembled, keep that as a structure claim or use claim. If it says a quality of the whole follows from parts, assign the quality-composition claim to [C.25](/generated/patterns/C.25) and C.16-backed measurement or quality claim.

Composability:
  "A and B can be assembled under interface X."
  recoveredRelationOrRecordKind: ModuleAllocationRelation | InterfaceSpecification
Quality compositionality:
  "The assembled whole preserves safety, latency, or reliability."
  recoveredRelationOrRecordKind: QBundleSlot | structuralCharacteristicQBundleInputSlot | structuralCharacteristicCausalHypothesisForQBundleSlot | structuralCharacteristicEvidencePathForQBundleSlot
Non-admissible:
  successful assembly is not quality propagation

Compositional formalisms may express explicit composition structures and view relations and model relations. They do not make safety, latency, reliability, or another quality propagate automatically.

Correspondence and source return

Use correspondence records when the view relates functional, flow, control, module-interface, information, runtime, placement, work, evidence, scale, or logical structures. Do not assert cross-view consistency by prose alone.

Correspondence examples:

Source wordingRecover
"This function is implemented by that module."FunctionToModuleAllocationRef or the allocation or relation record named by value.
"This flow crosses that runtime boundary."FlowToRuntimeInteractionCorrespondence.
"This evidence covers the replacement."EvidenceReuseToAffectedStructure; assign sufficiency or verdict to A.10, G.6, or B.3.
"This requirement constrains that structure."RequirementToStructureConstraint or a constraint record named by value.
"This scale window changes the structure kind."ScaleWindowToStructureKindCorrespondence; assign scale-lens claims to C.29 when those claims are being made.

Use SourceReturnCondition when compression, extraction, coarsening, evidence reuse, ML evaluation, bounded exception, many-to-many allocation, publication, or decision claim hides a distinction needed for action, assurance, causal use, legal review, regulatory review, comparison, or reopening.

If viewConstruction is query, extraction, coarsening, correspondenceSlice, or sourceReturnSlice, and omitted structure changes action, assurance, causal use, legal or regulatory review, or subsequent decision reopening, SourceReturnCondition is needed.

When the view is used to name affected structures for a next move but no decision record is being used, use C.30 AffectedArchitectureStructureNote: affected structure kinds, affected structure refs when known, affected ASV refs, accepted or suspected view loss, source-return condition, and the next admissible move. The note is not an architecture decision, ADR, gate passage, evidence sufficiency, or release authority.

Use the thinnest source or reliance relation that preserves the next architecture move. Use fuller source, evidence, assurance, or claim-kind relation only when the source or reliance relation being used cannot be inspected, used, compared, refreshed, or bounded without it. A ControlStructureViewNote may precede full C.30.LCA use or proof-governing pattern applications when one control relation and its boundary are enough for the architecture move being made.

Treat source return as a user action, not only a metadata field:

SourceReturnAction:
  returnTo:
    sourceStructure | sourceEpisteme | sourceView | sourceTrace |
    sourceCorpus | sourceModel | sourceEvidence | sourcePublication
  because:
    hiddenRelation | lostConstraint | coarsenedScale |
    ambiguousExtraction | staleEdition | crossViewMismatch |
    legalOrRegulatoryUse | assuranceOrDecisionUse
  nextMove:
    inspect | split | downgradeUse | addCorrespondence |
    openNeighborPattern | stop

Do not make source return mandatory for ordinary local recognition when no hidden distinction is being used for action. Do not omit source return when a hidden distinction carries a selected reliance relation, assurance, legal, comparison, causal, gate, or decision commitment. The condition is needed only when the repaired text still relies on the hidden source-side distinction.

Model cards, system cards, and evaluation harness reports may publish or substantiate an architecture structural view only when the structural-view claim is recoverable. The view must name the relevant structure kind, such as RuntimeInteractionStructure, InformationDataStructure, SecurityTrustBoundaryStructure, EvidenceAssuranceStructure, ModuleInterfaceStructure, or another declared structure kind; it must also state intended-use scope, evaluation scope and known loss when evaluation is used, deployment-context mismatch when that mismatch is being claimed, and the evidence or assurance governing pattern when the publication is used beyond transparency. A card or harness is not architecture adequacy, safety proof, or release claim or gate claim by publication alone.

Worked slices

Runtime degradation. A team says, "The architecture is fine, but incidents happen when failover starts." The first architecture move is to recover runtime interaction, control relation, failover relation, placement, and evidence-assurance structures before turning a dashboard or deployment diagram into proof:

Runtime degradation slice:
  selected structure kinds:
    RuntimeInteractionStructure
    ControlStructure
    InformationDataStructure
    PlacementDeploymentStructure
    EvidenceAssuranceStructure
  first architecture move:
    recover runtime interaction topology, control relation or failover relation,
    state custody, placement relation, locality relation, evidence path, and observability relation
  nonAdmissibleUse:
    deployment diagram as runtime proof,
    observability dashboard as evidence sufficiency,
    green indicator value as gate authority or release authority

Use [C.24](/generated/patterns/C.24) only when tool-use, call planning, call graph, work execution, or budgeted agentic tool-use is the claim being made. Do not absorb those claims into architecture structure.

CPS or plant architecture. A plant drawing, P&ID-like artifact, LCA sketch, or safety-case view is not the plant architecture by itself. First recovery may need:

CPS and plant architecture first recovery:
  MaterialSpatialStructure:
    physical separation, adjacency, energy path or material path
  ControlStructure:
    controller, plant, observer, supervisor, control rate
  InformationDataStructure:
    sensor data semantics, provenance, custody, source return
  PlacementDeploymentStructure:
    locality, environment, jurisdiction, safety separation
  EvidenceAssuranceStructure:
    evidence reuse boundary and affected structures
first architecture move:
  relate physical separation, sensor data semantics, control rate,
  placement boundary, and evidence reuse
correspondenceOrLossLine:
  record which separation, data, control-rate, placement, or evidence-reuse
  relation is preserved by the slice and which structure is hidden or lossy
stop condition:
  no P&ID, LCA diagram, or safety case is treated as the architecture

Chiplet or device architecture. A packaging diagram or interconnect sketch may involve several structure kinds:

Chiplet and device architecture first recovery:
  MaterialSpatialStructure:
    packaging, adjacency, thermal path, energy path
  FlowTransductionStructure:
    interconnect topology, data flow path, energy flow path, or signal flow path
  ModuleInterfaceStructure:
    interface specification, protocol, conformance boundary
  PlacementDeploymentStructure:
    physical locality, substrate, host environment
first architecture move:
  separate interconnect topology, packaging path, thermal path, or energy path,
  interface specification, and evidence boundary and conformance boundary
correspondenceOrLossLine:
  record the preserved relation among interconnect, physical package,
  interface, and placement, plus any benchmark or packaging-view loss
stop condition:
  no packaging diagram or benchmark becomes performance, safety,
  evidence, or gate proof by appearance

Organization or operating-model architecture. An org chart or work-method diagram can be architecture-relevant only after the work, role, information, and evidence records are separated:

Organization and operating-model architecture first recovery:
  RoleEnactorStructure:
    responsibility allocation and enactment boundary
  WorkMethodStructure:
    repeatable work method and exception path
  InformationDataStructure:
    information custody, state residence, provenance
  EvidenceAssuranceStructure:
    evidence reuse, approval, audit trail, source return
first architecture move:
  relate responsibility allocation, work repeatability,
  information custody, and evidence reuse
correspondenceOrLossLine:
  record the preserved relation among role, work, information, and evidence
  structures, plus any org-chart or work-method-diagram loss
stop condition:
  no org chart or work-method diagram is treated as the architecture, decision,
  evidence sufficiency, or assurance verdict

Evidence reuse across product variants. A certification or test package reused across module variants may be architecture-relevant as an evidence-and-assurance structure view, but it is not an assurance verdict:

Evidence reuse across product variants:
  structureKindRef: EvidenceAssuranceStructure
  structuralFeature:
    evidence package shared across module variants
  affectedQBundleSlot:
    assurance maintainability or release readiness
  architectureMove:
    name affected structures, variant boundary, hidden view losses,
    and source-return condition
  governingPatternApplicationRefs:
    A.10, G.6, or B.3 for evidence sufficiency or assurance verdict
  nonAdmissibleUse:
    evidence-structure view as assurance verdict

AI agent diagram. A "planner-memory-tools" diagram is not the agent's architecture by itself. It may start first recovery as a structure-kind set, without minting an AI-domain ontology:

AI-agent architecture first recovery:
  RuntimeInteractionStructure:
    model-tool-memory-planner-evaluator-human topology
  InformationDataStructure:
    memory scopes, data custody, provenance, retention,
    context-window relation and source-return relation
  SecurityTrustBoundaryStructure:
    untrusted content channels, prompt-injection or instruction boundary,
    tool authority, secret-bearing contexts, memory custody crossing and data custody crossing,
    output handling, supply-chain or update path
  ModuleInterfaceStructure:
    tool specs, API specs, and interface specs and substitutability limits
  EvidenceAssuranceStructure:
    eval harness, human approval, evidence decay, incident feedback
admissibleArchitectureMove:
  split runtime interaction, information, security boundary, module-interface, and evidence-assurance claims before relying on the diagram
correspondenceOrLossLine:
  record the preserved relation among runtime topology, information custody,
  security boundary, module-interface, and evidence-assurance structures,
  plus any diagram or evaluation-harness loss
governingPatternApplicationRefs:
  C.30.TGA-FLOW-REL when an E.18 flow relation is being used,
  A.6.M module-relation repair for tool, API, or interface relation claims,
  A.10, G.6, or B.3 when evidence or assurance reliance is being claimed,
  C.24, E.16, A.20, or A.21 when tool-call, autonomy, constraint, or gate authority is being claimed
stop condition:
  ASV contains only the structural-view record; evidence sufficiency, assurance, gate, autonomy, and tool-call authority claims are assigned to the governing patterns for those claims

Structural AI-agent security is architecture structure when these structure kinds change the next architecture move. When the claim being made is latent representation, decoding, or effect adequacy rather than architecture structure, keep the phrase as a reduced-use source cue until the representation, decode, or effect-adequacy pattern governing that claim carries that claim.

Generated code-agent relation graph. A probe JSON or code-agent architecture relation graph can be an architecture structural view publication only after observed, inferred, or unknown observation value, evidence pointers or source pointers, unexplored regions, typed relation semantics, and source-return conditions are present. Belief-state proof and downstream-change safety assurance apply the patterns governing those claims.

Neural-network block replacement. Replacing attention, FFN, convolution, SSM, recurrent, memory block or cache block, MoE expert-selection, pruning, distillation, or another block is an architecture move only when the changed structure kind, flow relation, module-interface claim kind, preserved and lost structure, affected characteristic, source relation, and decision or evidence governing pattern are named.

Archetypal Grounding

Tell-Show-Show rowGrounding
TellA practitioner looks at an architecture "view" and asks whether it is functional, flow, control, module-interface, information or data, placement, scale, work, evidence, or declared logical structure. C.30.ASV turns that question into structure-kind triage or a full structural view record.
Show: U.SystemA plant, vehicle, software system, product platform, AI-agent system, or neural-network model may need several structural views over the same architecture claim. One module view does not exhaust the system architecture, and one flow graph does not prove work, evidence, safety, or release.
Show: U.EpistemeA diagram, model, generated relation graph, ADR, dashboard, SysML view, or C4 diagram is an episteme, view, or publication face. It can publish an architecture structural view only when the architecture claim, structure refs, structure kind, viewpoint, hidden structure and lost structure, correspondence, source or reliance relation, and admissible use are recoverable.

Bias-Annotation

Lenses tested: Arch, Onto, Epist, Prag, Did, Gov. Scope: architecture structural-view claims over holons.

Bias riskMitigation
Module-view biasMake module-interface one structure kind, not the default meaning of architecture.
Viewpoint-kind conflationKeep structure kind, viewpoint, view record, and viewpoint bundle separate.
TEVB mutation biasImport TEVB where useful; do not expand VF.TEVB.ENG by implication.
Check-only biasEvery failed conformance check gives a repair move or governing-pattern application.
Didactic-thinning riskThe pattern starts with triage and action, not taxonomy alone.

This checklist verifies the preceding guidance after the practitioner has chosen the selected move; it is not a required project control form and not a substitute for the card, note, view, relation, or repair move above.

Conformance Checklist

IDRequirementFailed-check repair
CC-ASV-1 Structure target.Every architecture structural view names structureRefs or a recoverable selected-structure reference.Name the selected structure reference, or downgrade the artifact to an architecture question, diagram, note, or publication that does not claim to be a structural view.
CC-ASV-2 Structure kind.Every architecture structural view names structureKindRef.Run ArchitectureStructureKindTriage@Project; if no structure kind changes action, keep the text as ordinary prose or a source note.
CC-ASV-3 Same selected architecture claim.The view preserves architectureClaimRef, DescriptionContext, and the claim record's describedHolonRef and boundedContextRef unless explicit retargeting or a bridge is declared.Restore the same claim record and bounded context, or add an explicit retargeting or bridge note before using the view.
CC-ASV-4 Viewpoint discipline.The view is under VF.ARCH.STRUCTURE or another declared architecture-specific bundle, rather than an ad-hoc tag.Assign the view to VF.ARCH.STRUCTURE, a declared local viewpoint bundle, or a governing pattern; otherwise keep the label as Plain recognition wording.
CC-ASV-5 Lost structure.The view names hidden or lost structure, especially for query, extraction, coarsening, or publication uses.Add a one-line hidden-structure note or lost-structure note, or narrow the admissible use so omitted structure is not relied on.
CC-ASV-6 Correspondence.Cross-view relations are carried by correspondenceModelRefs or correspondence records, not by prose alone.Add a correspondence note or stop at a single-view statement without cross-view consistency claim.
CC-ASV-7 No publication collapse.A diagram, model, table, dashboard, generated relation graph, or ADR is kept as publication, record, or carrier, not the architecture structural view itself.Keep the artifact as publication or carrier and name the source episteme or view; do not require a full architecture view unless it changes the next move.
CC-ASV-8 No single-view architecture.If a decision uses an architecture view as decision claim, it names the affected structures and views, not only one favored diagram.Add affected structure and view refs, or narrow the statement to the single view's admissible use.
CC-ASV-9 No proof overread.The view does not act as evidence, safety proof, causal proof, gate decision, or work record without a named governing pattern.Assign the claim being made to A.10, G.6, B.3, A.20, A.21, C.28, or mark the proof, evidence, gate, or assurance use unsupported; do not add more C.30.ASV fields as a substitute.
CC-ASV-10 Relation or correspondence record named by value.Every cross-reference names the kind named by value, relation, or record: selected structure, structure kind, viewpoint, correspondence record, allocation record, bridge record, evidence relation, publication carrier when a publication relation is being made, interface specification, or governing record named by value.Replace the ambiguous reference with the kind, relation, or record that actually carries the claim, or split the sentence into separate records.
CC-ASV-11 Source return.When compression, extraction, coarsening, evidence reuse, publication, or many-to-many allocation hides distinctions, SourceReturnCondition is present.Add one source-return trigger, or narrow the view's admissible use so omitted distinctions are not used for action, assurance, causal use, legal review, regulatory review, or reopening.
CC-ASV-12 Architecture-name recovery.Every <X>Architecture phrase recovers <X>StructureKind or a declared local relation.Rewrite the phrase through ArchitectureStructureKindTriage@Project; if no relation is being claimed, keep the name as Plain prose and do not let it carry ontology.
CC-ASV-13 Useful action.The repair leaves a surviving admissible architecture move: inspect, split, relate, downgrade, assign to a governing pattern, generate candidates, stop, state a structural view, add correspondence, add source return, or apply the governing pattern.Restore one move, or classify the phrase as reduced-use cue, quote-only wording, blocked transfer, or incomplete rewrite.

Common Anti-Patterns and How to Avoid Them

Anti-patternSymptomRepair
Module diagram as architecture viewOne module-interface diagram is treated as the whole architecture.Run structure-kind triage; keep module-interface as one structure kind and add other views only when they change action.
Viewpoint as structure kindVP.Functional, VP.ModuleInterface, or another viewpoint is used as if it were the selected structure kind.Recover ArchitectureStructureKindRef and bind it to a viewpoint through ArchitectureStructureKindViewRecordBinding when needed.
Structure kind as viewpointFunctionalStructure or ControlStructure is added to TEVB as a new viewpoint.Keep TEVB core unchanged; use VF.ARCH.STRUCTURE and binding rows.
Publication-face collapseA diagram, model, table, dashboard, generated relation graph, ADR, or C4 view is treated as the ASV record.Recover source episteme or source view and publication relation; use an ASV record only if the view changes action.
Single-view decisionA decision uses one architecture view as if it covered all affected structures.Name affected structures and view refs, or narrow the decision to the single view's admissible use.
Lost-structure silenceExtracted, generated, coarsened, or compressed views hide distinctions but still justify action.Add hidden structure and lost structure and source-return condition, or narrow admissible use.
Proof overreadThe structural view is used as evidence sufficiency, safety proof, causal proof, gate decision, or work record.Assign the claim being made to the governing pattern and keep ASV only to view adequacy.
Risk color as security architectureA red, yellow, or green risk cell, risk matrix, maturity score, or compliance color stands in for SecurityTrustBoundaryStructure or resource-allocation priority.Recover protected asset or effect, trust boundary, untrusted input, privilege or authority relation, data flow or control flow, abuse or misuse path, and the evidence named by value, assurance, measurement, causal, gate, selection, or allocation claim kind if that claim is being made; do not treat ordinal risk color as security architecture adequacy, resource-allocation priority, or gate passage.
Taxonomy without actionThe text classifies a view but does not say what changes in practice.Add admissibleArchitectureMove or stop at Plain recognition wording.

Consequences

BenefitCost or trade-off
Architecture views become Description epistemes and specification-use cases over selected structures, not diagrams by appearance.A conforming use states architecture claim, structure refs, structure kind, viewpoint, and use when the view has FPF-governed use.
TEVB remains stable while architecture gets broader structure-kind coverage.Structure-kind bindings add one explicit record when architecture-specific coverage matters.
Functional, flow, control, module-interface, placement, information, runtime, work, evidence, scale, material, and logical structures can be separated.Some familiar names require triage before they can carry FPF claim kinds.
Failed checks produce repair moves rather than only classification objections.The checklist is longer than a pure taxonomy, but it is more useful for action.

Rationale

C.30.ASV exists because architecture descriptions are multi-view by nature, but FPF cannot let "view" absorb every architecture claim. A structure kind and a viewpoint are different. A structure kind says what kind of selected structure is being described; a viewpoint says how an episteme or view is oriented toward a concern. They may be bound, but they are not interchangeable.

The pattern keeps first use light by providing ArchitectureStructureKindTriage@Project. If triage identifies the structure kind under consideration and the next admissible architecture move, no full view record is needed. The full record is used when a view changes action, correspondence, publication, source return, source or reliance use, or non-view claim kind.

The TEVB decision is conservative. TEVB remains the small engineering viewpoint bundle over holons. Architecture may import it, but architecture-specific structure kinds and view-record bindings are defined beside TEVB rather than mutating TEVB.

SoTA-Echoing

Practice or source lineC.30.ASV adoptionAction consequenceBoundary
ISO/IEC/IEEE 42010:2022 architecture-description disciplineAdopt explicit concern, viewpoint, view, correspondence, and source-side EntityOfConcernRef discipline, mapped here to DescriptionContext.EntityOfConcernRef.ASV records require architecture claim, DescriptionContext, viewpoint, structure kind, correspondence when used, and admissible use.ISO terminology does not override FPF EntityOfConcern and Description-episteme boundary and specification-use and refinement discipline and does not make a view the architecture itself.
OMG SysML v2 view-as-query and MBSE traceability practiceAdapt model-view discipline and traceability to FPF Description or views.Generated, queried, or model-derived views state viewConstruction, selected structure, hidden and lost structure, and source-return condition when action relies on the selection.Tool models and queries do not become source episteme, source or reliance relation, evidence sufficiency, gate passage, or assurance.
UAF, ArchiMate, C4, and multi-view architecture practiceAdapt viewpoint-library and lightweight diagram communication pressure. C4 contributes communication and zoom pressure only.C4-like, UAF-like, and ArchiMate-like diagrams can publish ASV records only when Description-episteme or specification-use content, DescriptionContext EntityOfConcern, structure refs, structure kind, viewpoint, and publication relation are explicit.Do not import their layer, viewpoint, enterprise taxonomies, structure-kind adequacy, evidence sufficiency, or architecture decision claim without a recoverable C.30 or C.30.ASV source view.
Systems security engineering, secure-by-design, SSDF, and CSF-style practiceAdopt security as architecture-side structure when trust boundaries, authority, untrusted input, secure defaults, hardening, update channels, and detection boundaries and response boundaries change action.Use SecurityTrustBoundaryStructure before evidence, assurance, gate, risk score, or compliance proof.A security framework, checklist, risk color, or control catalog is not security architecture adequacy, evidence sufficiency, assurance, or gate passage by itself.
Theory of Code Space, arXiv:2603.00601 and related code-agent architecture relation-graph probingAdopt partial-observability, typed relation discovery, invariant discovery, uncertainty reporting, and externalized architecture relation graphs as ASV practice source.Treat an externalized code-agent relation graph as a diagnostic architecture-description or ASV publication only with observed, inferred, or unknown observation value, evidence pointers, unexplored regions, typed relation semantics, and source-return conditions.Do not mint U.CodeSpace; do not treat probe JSON, cognitive-model publication, dependency-F1 result, or diagnostic relation graph as architecture adequacy, internal belief proof, agent authority, safe-code-change authority, assurance, or release authority.
GonzoML neural-network architecture discussionsAdopt practitioner operation language for architecture views: block substitution, relation retargeting, dataflow changes, memory placement or cache placement, path-selection or gating, MoE expert-selection, pruning, distillation, NAS, ablation, and compute, memory, or latency tradeoffs.Use those phrases as recognition cues for changed structure kind, flow relation, module-interface claim kind, security or trust boundary, data-custody relation, preserved and lost structure, affected characteristic, source relation, and decision or evidence governing pattern.Neural-network labels, benchmarks, ablations, pruning masks, block, layer, router, cache, or state labels, or search outputs do not become FPF ontology, architecture decisions, evidence sufficiency, gate passage, assurance, or architecture adequacy by themselves.

Relations

Builds on: C.30.P, C.30, A.22, A.6.3, E.17.0, E.17.1, E.17.2, A.7, E.10.D2, E.10, C.2.P, and F.18.

Coordinates with: A.6.F, A.6.M, C.30.TGA-FLOW-REL, C.30.LCA, C.30.ILC, E.18, C.29, C.16, C.25, C.28, A.10, G.6, B.3, A.20, A.21, A.15, C.11, and governing patterns for architecture decision and candidate-set claims. Use A.6.M when the module-interface claim kind is being made.

Neighboring claims stay with their governing patterns: C.30 for grounded architecture and selected-structure adequacy, A.22 for selected-structure EntityOfConcern, E.TGA for graph, path, and crossing discipline, C.29 for mathematical-lens use, C.16 for characterization, C.25 for Q-Bundles, C.28 for causal use, A.10 and G.6 for evidence, B.3 for assurance, A.20 and A.21 for gate or release records, A.15 for work, C.11 for decisions, and E.17 for publication. C.30.ASV governs architecture structural-view adequacy for the selected structure being viewed.

C.30.ASV:End

Control Structure View Adequacy (LCA)

Type: Architectural subpattern under C.30 Status: Stable Normativity: Normative unless explicitly marked informative

Problem frame

Use this pattern when a selected control structure or control-structure relation changes the next architecture move: a controller regulates a plant, an observer or estimator changes what can be known, a planner provides references to lower-rate control, a supervisor constrains a subsystem, a policy loop changes allowed behavior, or an LCA cue makes roles, rates, observation boundaries, actuation boundaries, feedback, or externalities architecture-relevant.

The first-minute working situation is ordinary engineering talk: a diagram says the supervisor watches a subsystem, a controller regulates a plant, an observer estimates state, a planner gives references to a lower-rate controller, or a policy relation or control relation changes allowed controller behavior. The useful first move is to recover a ControlStructureView@Context: which architecture claim is being described, which control roles and relations are present, which rate bands or recovered control-layer relations are being claimed, which feedback or externality boundaries are named, and which governing pattern carries any additional claim being made. If the source only says layer, level, tier, or stack without a control-specific relation, use C.30.STRAT first.

What goes wrong if C.30.LCA is missed: a control diagram becomes proof; stratification labels bypass C.30.STRAT and start carrying undeclared scope; and B.2.5, Transduction Graph Architecture (TGA), or Layered Control Architecture (LCA) prose is overread as control adequacy.

What C.30.LCA buys in practice: the practitioner can keep useful controller, plant, observer, regulator, supervisor, feedback, rate, and control-layer language while recovering the control-structure view and the governing pattern that carries any proof or claim named by value.

Not this pattern when the issue under repair is generic stratification or source-label repair, only a TGA path slice, function description, module boundary, measurement head, causal intervention, or safety case. Use C.30.STRAT, C.30.TGA-FLOW-REL, A.6.F, A.6.M, C.16, C.28, or the assurance or evidence pattern governing the claim as appropriate.

The primary EntityOfConcern for this pattern use is the selected control structure or control-structure relation set under an ArchitectureOf@Context. The ControlStructureView@Context is a describing episteme for that selected structure; proof, safety, evidence, gate, and architecture-as-whole claims remain claim named by value refs governed by their governing patterns. Ordinary use may stop with a typed control-structure view note:

ControlStructureViewNote ordinary minimum:
  architecture claim or described holon plus context:
  one control relation:
  loop state: closed | one-way | unclear:
  control-layer or rate label recovered?: yes | no | C.30.STRAT needed:
  governing pattern for proof, evidence, causal, gate, or assurance claim, if that claim is being made:
  stop condition:

The full ControlStructureView@Context is used when the control claim being made needs declared roles, relations, rates, recovered control-layer labels, boundary refs, or explicit governing-pattern applications beyond that note.

Problem

Control diagrams are persuasive because they look operational: arrows imply feedback, boxes imply responsibility, and recovered control-layer labels imply separation. In practice that is often enough for orientation, but not enough to make the architecture claim admissible. A control-stack description can quietly overclaim that stability, safety, evidence sufficiency, gate validity, assurance, or causality has already been established; a non-control layer, level, tier, or stack label belongs first to C.30.STRAT, not to C.30.LCA.

FPF needs a pattern that preserves the useful recognition of control architecture without letting the recognition cue become a proof. The control roles, feedback relations, externality boundaries, and rate separations belong in an architecture structural view. Claims about dynamics, temporal adequacy, causal use, evidence, assurance, gates, or mathematical lens transfer belong in the governing pattern that governs that claim kind.

Forces

  • Control talk is useful and current engineering practice uses it, so deleting it would make architecture prose less usable.
  • The same source labels can name different things. C.30.LCA applies only to recovered control-layer, rate-band, control-relation, bounded-context, and B.2.5 supervisor-subholon uses; other layer, level, tier, or stack uses are recovered with C.30.STRAT and then governed by their governing patterns when those claims are being made.
  • Layered and multi-rate control descriptions often need timing and dynamics claim before they can carry stability or safety claims.
  • B.2.5 already gives FPF a supervisor-subholon feedback-loop pattern, but it does not turn every loop diagram into proof.
  • TGA graphs can describe flow and transduction relations that participate in control, but the TGA graph is still a description or view, not the control structure itself.
  • Practitioners need one small first output; dynamics, C.29, evidence, assurance, and gate records are used only when the question under repair calls for that governing pattern use.

Solution

Treat LCA-like material as a control-structure view under C.30. Recover the described architecture claim, the selected control structure or control-structure relation set, the control roles, the control relations, the relevant rate bands or recovered control-layer labels, and the boundary refs that make the view checkable. If the source label is not yet control-specific, apply C.30.STRAT before applying C.30.LCA to the case. Then state the admissible use and the non-admissible overread.

The ordinary minimum may stop with a compact ControlStructureViewNote:

ControlStructureViewNote:
  architecture claim or described holon plus context:
  selected control structure or relation:
  one control relation:
  loop state: closed | one-way | unclear:
  control-layer or rate label recovered?: yes | no | C.30.STRAT needed:
  boundary refs used?: observation | actuation | feedback | externality | not used:
  governing pattern for proof, evidence, causal, gate, or assurance claim, if that claim is being made:
  admissibleUse:
  nonAdmissibleUse:
  stop condition:

Use rateBandRefs?, controlLayerRefs?, and externalityBoundaryRefs? only when rate, recovered control-layer, or externality wording carries a control-structure claim being made. Otherwise the ordinary note may stop after one control relation, loop state, and the proof-governing pattern application named by value if that claim is being made. Generic stratification labels stay with [C.30.STRAT](/generated/patterns/C.30.STRAT) until recovered.

When a recovered control-layer relation is used to justify decomposition, substitution, or design reliance, recover the inter-layer assumption-guarantee relation or mark the control-layer relation as orientation only. interLayerControlRelationRefs? is used only when the relation is already control-specific and is used for decomposition, substitution, design reliance, safety, or stability claim kinds.

InterLayerControlRelationNote:
  upperLayerAssumptionRefs:
  lowerLayerGuaranteeRefs:
  observationRequirementRefs:
  actuationAuthorityRefs:
  latencyOrRateEnvelopeRefs:
  violationFallbackRefs:
  admissibleUse:
  nonAdmissibleUse:

Use this note only when a recovered control-layer relation is used for decomposition, substitution, safety or stability claim, or architecture decision claim. It is not proof. Otherwise keep C.30.LCA at the small note or ordinary view form, or return the source label to [C.30.STRAT](/generated/patterns/C.30.STRAT).

ControlStructureView@Context ::= {
  architectureClaimRef : ArchitectureOf@ContextRef,
  descriptionContext   : DescriptionContext(
    EntityOfConcernRef = selectedControlStructureEntityOfConcernRef,
    BoundedContextRef = ArchitectureOf@Context.boundedContextRef,
    ViewpointRef = viewpointRef
  ),
  selectedControlStructureEntityOfConcernRef :
    U.StructureRef | FinSet(QualifiedRelationRecordRef),
  viewpointRef (= descriptionContext.ViewpointRef),
  structureKindRef = ControlStructure,

  controlRoleRefs : FinSet(PlannerRef | RegulatorRef | ControllerRef |
                           ObserverEstimatorRef | PlantProcessRef | SupervisorRef),
  controlRelationRefs       : FinSet(QualifiedRelationRecordRef),
  controlLayerRefs?         : FinSet(ControlLayerRef),
  rateBandRefs?             : FinSet(RateBandRef),
  interLayerControlRelationRefs? : FinSet(InterLayerControlRelationRef(
    assumptionRefs,
    guaranteeRefs,
    allowedControlActionRefs,
    observationRequirementRefs,
    actuationAuthorityRefs,
    latencyOrRateEnvelopeRefs,
    violationFallbackRefs
  )),
  stratificationRepairRefs? : FinSet(C30STRATRepairRef),
  supervisorSubholonRelationRefs? : FinSet(B25SupervisorSubholonRelationRef),
  feedbackRelationRefs      : FinSet(QualifiedRelationRecordRef),
  observationBoundaryRefs?  : FinSet(BoundaryRef),
  actuationBoundaryRefs?    : FinSet(BoundaryRef),
  externalityBoundaryRefs?  : FinSet(BoundaryRef),
  controlledHolonRefs?     : FinSet(U.HolonRef),

  rateSeparationClaimRefs? : FinSet(C27TemporalClaimRef | TemporalAdequacyClaimRef),
  dynamicsClaimRefs?       : FinSet(A3_3DynamicsRef),
  gateDecisionRefs?          : FinSet(A20ConstraintValidityRef | A21GateDecisionRef),
  TGAPathSliceRefs?        : FinSet(PathSliceId),
  stabilityClaimRefs?    : FinSet(DynamicsRef | StabilityEvidenceRef),
  evidenceClaimRefs?     : FinSet(A10EvidenceGraphRef | G6EvidenceRef),
  assuranceClaimRefs?    : FinSet(B3AssuranceRef),
  causalUseClaimRefs?    : FinSet(C28ApplicationRef),
  scaleAuditRef?           : ArchitectureScaleAuditRecordRef,
  MathLensUseOutputRefs?           : FinSet(MathLensUseOutputRef),

  admissibleUse,
  nonAdmissibleUse,
  sourceReturnCondition
}

DescriptionContext.EntityOfConcernRef names the selected control structure or control-structure relation set represented by selectedControlStructureEntityOfConcernRef. architectureClaimRef names the enclosing architecture claim and supplies the bounded context and described holon; it is not the EntityOfConcern of the control-structure view itself.

Safety-loss control-structure note

Use a SafetyLossControlStructureNote only when safety wording is being used for a loss-control claim and the practitioner first needs the architecture-side loss-control structure, not a safety-case verdict:

SafetyLossControlStructureNote:
  lossOrHarm:
  hazardOrUnsafeState:
  unsafeControlActionOrMissingControl:
  controlledProcessOrPlantRef:
  controlConstraintRef:
  feedbackOrObservabilityBoundary:
  timingOrRateBoundary:
  operationalDesignScopeOrMisuseScope:
  foreseeableMisuseRefs?:
  architectureStructureKindRefs:
    ControlStructure | ConstraintRequirementStructure |
    SecurityTrustBoundaryStructure | InformationDataStructure |
    EvidenceAssuranceStructure
  governingPatternApplicationRefs:
    A.3.3 dynamics, C.27 temporal or rate,
    C.28 causal-use, A.10 or G.6 evidence,
    B.3 assurance, A.20 or A.21 gate
  nonAdmissibleUse:
    not safety proof, not safety-case verdict, not regulatory acceptance

The note gives a positive safety-triggered architecture move: find the loss-control structure, controlled process or plant, constraint, foreseeable misuse, operational design scope, and action-relevant boundary. It does not replace the generic control-structure view and does not replace evidence, assurance, gate, causal, dynamics, or temporal claims.

Role interpretation.

Source labelFPF recovery
Plant or controlled holonU.Holon whose state evolves; reusable state-evolution claims use [A.3.3](/generated/patterns/A.3.3).
Regulator or controllerSystem in a control role enacting a method over observations and actuations.
PlannerUpstream role or method producing setpoints, plans, references, or allowed regions for regulators.
Observer or estimatorRole or method producing state estimates, observations, or evidence-facing readouts.
SupervisorRole or method governing subordinate holons, gates, policy changes, or control-mode changes.

Control-specific stratification gate. Layer, level, tier, and stack enter C.30.LCA only after [C.30.STRAT](/generated/patterns/C.30.STRAT) or the local sentence recovers a control-specific item: controlLayerRef, controlRoleRef, controlRelationRef, interLayerControlRelationRef, rateBandRef, bounded context, and, where the supervisor-subholon relation is being claimed, [B.2.5](/generated/patterns/B.2.5) supervisor-subholon relation. Generic system level, aggregation scope, organization level, work or evidence scope, scale window, coarse-graining, deployment tier, and publication section do not stay in C.30.LCA. A layer label is not a control structure, not a system level, not a rate band, and not evidence of separation by itself.

B.2.5 boundary. [B.2.5](/generated/patterns/B.2.5) remains the supervisor-subholon feedback-loop check pattern. [C.30.LCA](/generated/patterns/C.30.LCA) can cite a [B.2.5](/generated/patterns/B.2.5) relation when a supervisor-subholon loop is part of the control view. It does not use [B.2.5](/generated/patterns/B.2.5) prose as proof of stability, safety, causality, evidence sufficiency, gate validity, or assurance. If an episteme appears in a control example, the acting Transformer, publication or review practice, and publication relation, source relation, or reliance relation are named; an episteme does not sense, judge, plan, adapt, or act as an agent.

TGA boundary. A TGA path slice may supply flow-structure or transduction-structure input to the control view when a flow or transduction relation is being used. The TGA graph remains a description or view of flow or transduction structure. It does not become the functional architecture, the control structure, or proof of control adequacy.

C.29 boundary. LCA may be an accepted local control-theory description in one context and a transferable mathematical lens in another. When transfer, prediction, assurance input, or reusable cross-domain explanation is being claimed, use MathLensUse.FullCard or at least MathLensUse.MiniCard. Dynamics, temporal adequacy, and causal claims are still assigned to [A.3.3](/generated/patterns/A.3.3), [C.27](/generated/patterns/C.27), and [C.28](/generated/patterns/C.28).

Nesting and scale rule. If a control-structure view nests without a local depth limit, the record uses scaleAuditRef? when the nesting affects latency, stability, observability, accountability, or assurance.

Worked slice A - LCA diagram used as proof. A safety note says: The Layered Control Architecture proves the plant is safe because the supervisor monitors the lower controller. A conforming repair keeps the control-structure view and names planner, controller, plant, and supervisor relations, observation and actuation boundaries, and any rate bands. Safety and assurance claims use [B.3](/generated/patterns/B.3), evidence to [A.10](/generated/patterns/A.10) or [G.6](/generated/patterns/G.6), temporal adequacy to [C.27](/generated/patterns/C.27), and dynamics or stability claims use [A.3.3](/generated/patterns/A.3.3) or the appropriate dynamics claim.

Worked slice B - multi-rate controller. A source says a control stack has a slow planner, a faster regulator, and an observer with a different update period. Apply [C.30.LCA](/generated/patterns/C.30.LCA) to the case only after the stack label has been recovered as control roles, relations, and rate bands; otherwise the label is recovered first by [C.30.STRAT](/generated/patterns/C.30.STRAT). C.30.LCA does not claim rate adequacy. If the rate relation matters for oscillation, latency, stability, or safety, the next admissible move is [C.27](/generated/patterns/C.27) plus the dynamics or assurance pattern named by value when that claim kind is being made.

Worked slice C - supervisor-subholon loop. A subsystem is supervised by an external controller that changes allowed modes. [C.30.LCA](/generated/patterns/C.30.LCA) records the supervisor-subholon relation and may reference [B.2.5](/generated/patterns/B.2.5). If the text claims that this loop authorizes work, passes a gate, or proves a policy constraint, the claim uses [A.15](/generated/patterns/A.15), [A.20](/generated/patterns/A.20), or [A.21](/generated/patterns/A.21).

Archetypal Grounding

ArchetypeWithout C.30.LCAWith C.30.LCA
SystemA plant, controller, or supervisor diagram is treated as if the drawing itself established the controlled system's behavior.The controlled system, controller, observer, planner, supervisor, boundaries, and rate bands are recorded as a view of control structure.
EpistemeA control-description publication is read as proof because it uses familiar control labels.The publication is treated as a description or view; proof-like claim kinds are governed by the pattern for that claim kind.

Bias-Annotation

  • Diagram authority bias. A neat feedback diagram can look more persuasive than the source relation, reliance relation, or claim pattern it actually uses. Repair by naming that relation named by value and the governing pattern that carries the claim kind being made.
  • Stratification-label bias. A layer, level, tier, or stack label can hide whether it names a control relation, rate band, aggregation, scale, organization, work scope or evidence scope, deployment, or publication section. Repair with C.30.STRAT; C.30.LCA applies only to the recovered control-specific case.
  • Supervisor anthropomorphism. A supervisor label can make an episteme, policy, or dashboard sound agentive. Repair by naming the acting transformer, method, or work practice.
  • TGA and LCA conflation. A flow graph and a control view can inform each other, but neither replaces the other. Repair by naming the description context and structure kind for each view.

This checklist verifies the preceding guidance after the practitioner has chosen the selected move; it is not a required project control form and not a substitute for the card, note, view, relation, or repair move above.

Conformance Checklist

IDCheckWhy it matters
CC-LCA-1A conforming use names the ArchitectureOf@Context or recoverable described holon and bounded context whose control structure is being viewed.Prevents free-floating control diagrams.
CC-LCA-2A conforming use records control roles and relations: planner, regulator or controller, observer or estimator, plant or controlled system, supervisor, or the local subset actually present.Keeps the view action-guiding.
CC-LCA-3A conforming use recovers layer, level, tier, or stack wording with C.30.STRAT unless the text already recovers a control-specific controlLayerRef, controlRelationRef, interLayerControlRelationRef, rateBandRef, bounded context, or B.2.5 supervisor-subholon relation.Prevents pseudo-level or pseudo-layer overread inside C.30.LCA.
CC-LCA-4A conforming use records observation, actuation, feedback, and externality boundaries when they are used in the view.Makes the control relation inspectable.
CC-LCA-5Stability, safety, dynamics, temporal adequacy, causal use, evidence, gate, and assurance claims are assigned to their governing patterns.Prevents LCA-as-proof.
CC-LCA-6B.2.5 is used only as a supervisor-subholon feedback-loop relation or check pattern, not as proof of stability, safety, evidence, gate validity, or assurance.Keeps existing FPF control relation bounded.
CC-LCA-7A TGA path slice used by the control view remains a flow or transduction description or relation to E.18, not the control structure itself.Keeps TGA and LCA relations distinct.
CC-LCA-8A C.29 or mathematical-lens use is opened when LCA is transferred across domains or used for prediction, reusable explanation, or assurance input.Preserves mathematical-lens use.
CC-LCA-9The record states admissible use, non-admissible use, and source-return condition.Prevents narrowed recognition from becoming unchecked reliance.

Common Anti-Patterns and How to Avoid Them

Anti-patternSymptomRepair
LCA-as-proofThe text says the control stack proves safety, stability, or gate readiness.Keep the control view and assign proof or claim named by values to dynamics, evidence, assurance, gate, or safety patterns.
Control-layer-as-generic-levelLayer, level, tier, or stack is used without a recovered control role, relation, rate band, bounded context, or B.2.5 supervisor-subholon relation.Apply C.30.STRAT; return to C.30.LCA only for a recovered control-layer or control-relation case.
Agentive epistemeA policy, model, dashboard, or architecture note is said to watch, decide, plan, or adapt.Name the acting transformer, method, work practice, publication relation, source relation, or reliance relation.
TGA and LCA substitutionA TGA graph is treated as the control architecture, or an LCA diagram is treated as the flow graph.Use DescriptionContext and structure kind fields to keep views distinct.
Hidden rate claimMulti-rate control is named, but rate adequacy is not checked.Add rateSeparationClaimRefs? and assign timing claims to C.27.

Consequences

The gain is a small, usable control-structure output that preserves common architecture language while blocking proof overread. Practitioners can still say controller, plant, supervisor, feedback, and control layer, but the record shows what those words carry; generic stratification labels use C.30.STRAT before they are allowed to enter this pattern.

The cost is an extra relation note before downstream reliance. When the claim being made is only recognition, that cost is small. When the claim being made is safety, stability, evidence, assurance, or gate passage, the cost is appropriate because those claims were never carried by the diagram alone.

Rationale

Control architecture is too important to leave to diagram authority and too useful to remove from architecture language. The FPF move is to keep the practice cue and recover the control-structure content first: controlled holon or architecture claim, control roles, control relations, recovered rate or control-layer labels, observation and actuation boundaries, externality boundaries, and the next admissible control-architecture move. The record may be a Description episteme or episteme-lane view, possibly admitted for specification use, but that is the record lane for the control-structure move, not the center of the pattern. It can cite C.30.STRAT, B.2.5, TGA, dynamics, C.27, C.28, evidence, assurance, gates, and C.29, but it does not absorb their claim kinds.

This also protects the architecture ontology's EntityOfConcern and Description-episteme boundary plus specification-use discipline. The architecture-relevant EntityOfConcern is the selected control structure under ArchitectureOf@Context; the LCA diagram or control note is an architecture description or view when description or view use is being made. Several descriptions may describe the same control structure, and one description may be published without becoming the structure it describes.

SoTA-Echoing

SoTA and practice sourceWhat it contributesFPF adoption stancePractitioner implication
Anderson, Doyle, Low, and Matni, "System Level Synthesis" (Annual Reviews in Control, 2019).Structured controller-synthesis practice treats closed-loop responses, constraints, locality, and distributed implementation as explicit synthesis variables and implementation relations rather than as a box-and-arrow guarantee.Adopt and adapt: use SLS as current control-structure pressure for explicit role, relation, locality, rate, and implementation-boundary fields; do not import SLS proof claims into C.30.LCA.A distributed-control diagram can start a control-structure view; stability or robust-performance claims are governed by dynamics or control proof patterns.
Ames, Coogan, Egerstedt, Notomista, Sreenath, and Tabuada, "Control Barrier Functions: Theory and Applications" (ECC, 2019).Safety-critical control separates a controller structure from a safety property and the mathematical certificate or enforcement method used for that property.Adopt and adapt: keep safety wording visible as a neighboring safety or proof claim, not as control-view adequacy.When the sentence says the supervisor or controller makes the plant safe, keep the control view and assign the safety claim to the safety named by value, dynamics, evidence, or assurance pattern.
Rawlings, Mayne, and Diehl, Model Predictive Control: Theory, Computation, and Design, 2nd ed. (2017).Planner or regulator, receding-horizon, constraint, update-period, and model-boundary distinctions are common current MPC structure cues.Adopt as control vocabulary: recover roles, rates, model boundaries, and constraints; assign timing and dynamics claims to C.27 and A.3.3 when those claims are being made.A multi-rate or MPC-style note should name rate bands and model boundaries before it claims adequacy.
Leveson and Thomas, STPA Handbook (2018), as systems-theoretic safety-control practice.Safety analysis treats unsafe control actions, feedback, process models, constraints, and losses as control-structure-relevant distinctions.Adopt and adapt: allow safety-loss control-structure notes, while keeping safety-case verdicts and evidence sufficiency outside C.30.LCA.A loss-control diagram can organize the view; it does not close the safety case.
ISO/IEC/IEEE 42010:2022 architecture-description practice.Architecture descriptions use concerns, viewpoints, views, and correspondences, and several views may describe one architecture.Adopt and adapt: bind ControlStructureView@Context to DescriptionContext and ArchitectureOf@Context.A control view is a view under a declared concern, not the architecture itself.

Relations

  • Builds on C.30 for grounded architecture and selected-structure adequacy and C.30.ASV for structural-view adequacy.
  • Uses A.22 for structure and structural-view kind discipline.
  • Coordinates with C.30.STRAT when layer, level, tier, stack, ladder, rung, block, expert, cache, router, gate, or similar source labels must be recovered before any control-specific use enters C.30.LCA.
  • Coordinates with B.2.5 for supervisor-subholon feedback-loop recognition.
  • Coordinates with E.18 and C.30.TGA-FLOW-REL when flow or transduction path slices supply structure input to the control view.
  • Applies A.3.3 for dynamics and stability claims, C.27 for temporal and rate adequacy, C.28 for causal-use claims, A.10 or G.6 for evidence claim, B.3 for assurance, A.20 or A.21 for constraint validity and gate decisions, A.15 for work authority, and C.29 when LCA is used as a transferable mathematical lens.

Neighboring claims stay with their governing patterns: C.30.STRAT for stratification and source-label precision restoration, C.30 for grounded architecture and selected-structure adequacy, C.30.ASV for architecture structural-view adequacy, B.2.5 for supervisor-subholon feedback-loop discipline, E.18 for graph, path, and crossing discipline, A.3.3 for dynamics claims, C.27 for temporal and rate adequacy, C.28 for causal use, A.10 or G.6 for evidence, B.3 for assurance, A.20 or A.21 for gate and constraint-validity records, A.15 for work, and C.29 for mathematical-lens use. C.30.LCA governs only the control-structure view relation being claimed.

C.30.LCA:End

Cross-Scope Architecture Residual Triage

Type: Architectural subpattern under C.30 Status: Stable Normativity: Normative for FPF pattern, companion-text, and project-description use that claims architecture-specific residuals across declared scopes.

Problem frame

Use this pattern when a project situation contains a cross-scope architecture residual for a described holon, often described in project speech as:

"Optimization at the component scope breaks the wider holon."
"We added modularity, but integration exceptions grew."
"Local agent autonomy conflicts with the control or policy scope."
"At one scale window the architecture is stable; at the next, bespoke bridges appear."
"The team optimizes latency, but the evidence or assurance scope becomes unrepairable."
"We may need to add, split, or mediate a declared holon level, declared scope, control layer, interface grammar, work scope, or evidence scope, but it is not clear which architecture move is admissible."

The first useful move is CrossScopeArchitectureResidualTriage@Context: name the affected declared holon levels or declared scopes, the selected structure in which those levels or scopes are recoverable, residual-bearing locus, local repair already attempted, why local repair is insufficient, and the first admissible architecture move or governing-pattern application.

The primary EntityOfConcern is the cross-scope or interlevel architecture residual in the described holon or holon family under a bounded context. The described holon may be a system, episteme, method, organization, publication family, or another structured holon. A phrase in a description, a diagram label, or a mathematical-lens output may make the residual visible, but it is not the residual itself and does not become the center of this pattern.

InterlevelConflict@Context applies when two or more declared holon levels, declared scopes, or level-bearing structure relations of the same described holon or holon family impose incompatible or tensioned constraints, objectives, admissibility conditions, tempos, resource allocations, information paths, or assurance requirements. Examples include declared system levels, declared episteme levels, aggregation scopes, typed control layers, declared organizational scopes, work scopes, evidence scopes, system scopes, environment scopes, description-use scopes, publication-use scopes, or other declared scopes. A selected structure matters here only when it carries, separates, or relates the declared levels or scopes. A conflict between structures belongs in C.30.ILC only when those structures are assigned to different declared holon levels, declared scopes, scale windows, or coarse-graining steps; a same-level, same-scope, or unassigned conflict between structures belongs elsewhere until a level, scope, scale-window, or coarse-graining assignment is recovered.

FrustrationResidual applies when a persistent cross-scope or interlevel residual remains after local repairs have been attempted or deemed insufficient: local optimization in one declared holon level or declared scope improves local fit while degrading, blocking, or destabilizing another declared holon level, declared scope, or level-bearing structure relation.

ComplexityGrowthPressure is admitted only as conditional architecture pressure: reducing an interlevel residual may require adding, splitting, mediating, or stabilizing a declared holon level, declared scope, aggregation scope, interface grammar, control loop, evidence scope, work-method scope, abstraction scope, source-return scope, or declared system level when that special case is being claimed. It is not a claim that complexity is good or that complexity necessarily grows.

Entry condition: if declared holon levels or declared scopes, the selected structure or architecture structure kind that carries them, one residual-bearing locus, and one first admissible architecture move cannot be named for the described holon in context, keep the issue at ordinary problem framing or ProblemCard@Context; do not claim CrossScopeArchitectureResidualTriage@Context yet.

What goes wrong if C.30.ILC is missed: a local improvement, control layer, scale label, interface grammar, or evidence reuse is treated as whole-holon architecture adequacy while the residual moves into another declared holon level or declared scope.

What C.30.ILC buys in practice: the practitioner can keep useful conflict or frustration language as an entry label while governing the architecture residual itself: affected holon levels or scopes, the selected structure that carries them, residual-bearing locus, and one admissible architecture move or governing-pattern application.

Interlevel conflict and frustration may appear in ordinary project descriptions, but the conforming record governs the residual through declared holon levels or declared scopes, the selected structure that carries them, and a residual-bearing locus. The pattern does not create a generic level scale or U.Frustration. It asks which declared holon level, declared scope, aggregation scope, control layer, organizational scope, work scope, evidence scope, system scope, environment scope, scale window, interface grammar, allocation boundary, publication section, or source-return condition bears the residual. A system level or episteme level is a special case of a declared holon level.

Not this pattern when the issue under repair is only stakeholder negotiation, ethics, measurement, scale relation, coarse-graining relation, mathematical-lens validation, candidate generation, residual-reducing candidate-set work, final selection, causal outcome, evidence, or assurance. Use the governing pattern and keep C.30.ILC only to the architecture residual-bearing locus.

Problem

Architecture work often starts from a residual: a local fix works in one declared holon level or declared scope and fails in another. Component optimization increases whole-holon or product-line integration cost. A new module boundary reduces local complexity and increases exceptions at the product-line scope. A control layer improves local safety and creates accountability or latency claims elsewhere. A reusable evidence set reduces repeated work and hides a new source-return obligation.

The useful architecture intuition is narrower than a new Frustration kind: local optimization at one declared holon level or declared scope can create a persistent residual in another declared holon level, declared scope, or level-bearing structure relation. Depending on the claim being made, that residual is governed by C.29 only when a recoverable multilevel mapping, scale mapping, or coarse-graining mapping is being claimed; by C.31.ASAP when architecture scale preference over declared alternatives is being claimed; or by G.5 when residual-reducing candidate architecture moves form a candidate set being used. An ordinary conflict between structures is not enough for the RG lens or frustration mathematical lens, but a conflict between structures assigned to different declared holon levels or scale windows may be enough when the mapping, preserved-structure line, and lost-structure line are recoverable. The first C.30.ILC output is only the grounded triage record.

Without a pattern, teams either discuss the residual as vague complexity, treat it as ordinary stakeholder conflict, jump into measurement, use mathematical frustration language as proof, or jump to candidate generation too early. C.30.ILC keeps the first move small: identify whether the residual is architecture-shaping and name the first admissible architecture move or governing-pattern application.

The practical work is often not to draw another view. It is to assign the residual to the locus named by value that can bear it: declared holon level, declared scope, level-bearing selected structure, structure kind, constraint, characteristic or Q-bundle, evidence-reuse boundary, source-return condition, or non-architecture claim kind.

Forces

  • Local optimization can be real and still be harmful at another declared holon level or declared scope.
  • Level, layer, scope, scale, abstraction, organization, system, and environment labels can sound precise while naming different project-side entities, relations, scopes, or claim kinds.
  • Frustration language can be useful because it points to incompatible constraints or fitness contributions, but it can also smuggle a physics, biology, psychology, or global-optimizer ontology into architecture prose.
  • Measurement is tempting because the residual feels numeric, but a measure before declared-scope and structure-kind recovery can hide the real conflict.
  • Ethics and stakeholder mediation may be present, but not every cross-scope residual is a mediation problem.
  • Architecture synthesis may be needed, but a small triage output often identifies a narrower move: split scope, add mediator, add interface grammar, change allocation, expose coupling, add evidence scope, accept bounded exception, or return to source.
  • The pattern is not a prescribed sequence of moves; architecture work is often case-managed through loops, checks, and dead ends.

Solution

Create a CrossScopeArchitectureResidualTriage@Context record when an architecture concern is carried by residuals across declared holon levels, declared scopes, or level-bearing structure relations.

CrossScopeArchitectureResidualTriage@Context ::= {
  describedHolonRef,
  boundedContextRef,
  architectureConcernCue,

  declaredHolonLevelRefs?: FinSet(DeclaredHolonLevelRef),
  declaredScopeRefs: FinSet(AggregationScopeRef | DeclaredSystemLevelRef |
                            ControlLayerRef | WorkEvidenceScopeRef |
                            OrganizationScopeRef | SystemEnvironmentScopeRef |
                            RateBandRef | ScaleWindowRef |
                            PublicationSectionRef | OtherDeclaredScopeRef),
  structureKindRefs: FinSet(ArchitectureStructureKindRef),

  interlevelConflictDescription?,
  conflictCarrierRefs?:
    FinSet(ConstraintRef | ObjectiveRef | AdmissibilityConditionRef |
           TempoRef | ResourceAllocationRef | InformationPathRef |
           AssuranceRequirementRef | OtherDeclaredConflictCarrierRef),
  localScopeOptimizationClaim?,
  widerScopeOptimizationClaim?,
  conflictingConstraintRefs?,
  conflictingCharacteristicRefs?,
  conflictingQBundleRefs?,

  symptom,
  crossScopeResidualDescription,
  crossScopeResidualLocusKind:
    hiddenCoupling | interfaceException | controlRateConflict |
    scaleWindowLoss | evidenceReuseFailure | regulatoryBespokeResidue |
    workMethodException | dataSemanticDrift |
    placementJurisdictionConflict | securityTrustBoundaryBreak |
    otherDeclared,
  frustrationResidualBefore?,
  complexityGrowthPressure?,
  localRepairAttempted?,
  whyLocalRepairInsufficient?,

  firstAdmissibleArchitectureMove:
    splitDeclaredHolonLevel | mergeDeclaredHolonLevel |
    splitDeclaredScope | mergeDeclaredScope |
    splitDeclaredSystemLevel | mergeDeclaredSystemLevel |
    addMediator | addInterfaceGrammar | addControlLayer |
    addEvidenceScope | addWorkMethodScope | changeAllocation |
    exposeHiddenCoupling | acceptBoundedException |
    applyD3D4 | applyC28 | noArchitectureMove,

  triggeredGoverningPatternRefs?,
  admissibleNextMove,
  stopCondition,
  sourceReturnCondition?
}

Layer, level, tier, stack, and declared-scope labels. Declared holon level is the general level-bearing recovery field for this pattern; system level and episteme level are special cases when the described holon or selected structure makes them relevant to the claim. System level may remain as ordinary recognition language when a practitioner would naturally use it, but the record recovers the project-side scope references through declaredHolonLevelRefs or declaredScopeRefs; a system level is not the default architecture level. When the source says layer, level, tier, or stack, recover exactly one or more of: declaredHolonLevelRef, controlLayerRef, declaredSystemLevelRef, aggregationScopeRef, rateBandRef, organizationLevelRef, workEvidenceScopeRef, scaleWindowRef, or publicationSectionRef when the wording only names a document layer. A move such as splitDeclaredHolonLevel, splitDeclaredScope, or, in the special system-level case, splitDeclaredSystemLevel is admissible only when the affected declared holon level, declared scope, selected structure, declared system level, aggregation scope, control layer, organization scope, work scope, evidence scope, system scope, environment scope, rate band, scale window, publication section, or source-return condition is named. A layer label is not a structure kind, not a system level, not a rate band, and not evidence of separation by itself.

Interlevel conflict, frustration residual, and complexity-growth recovery. A conflict is architecture-shaping only when the record names the declared holon levels or declared scopes, the selected structure or structure kind that carries them, and the conflict carrier: constraint, objective, admissibility condition, tempo, resource allocation, information path, or assurance requirement. A frustration residual is architecture-shaping only when local repair or local optimization leaves a persistent residual in another declared holon level, declared scope, or level-bearing structure relation. Complexity-growth pressure is only a candidate reason to add, split, mediate, or stabilize structure when that change is expected to reduce the residual enough to justify the new cost and its own residue.

crossScopeResidualDescription is not enough by itself. A residual becomes architecture-shaping only when its residual-bearing locus is declared: hidden coupling, interface exception, control-rate conflict, scale-window loss, evidence-reuse failure, regulatory bespoke residue, work-method exception, data-semantics drift, placement or jurisdiction conflict, security trust-boundary break, or another declared locus.

Multilevel optimization boundary. [C.30.ILC](/generated/patterns/C.30.ILC) can recognize that local optimization in one declared holon level or declared scope degrades another declared holon level or declared scope. It does not optimize the architecture and does not prove that one global function exists. Use [C.29](/generated/patterns/C.29) with MLU.Description@MultilevelLearningFrustration only when the mathematical representation supplies a recoverable mapping between declared levels, scopes, scale windows, or coarse-graining steps and states what structure is preserved and lost. Conflicting structures can enter this lens only when each structure is assigned to a declared holon level, scope, scale window, or coarse-graining step and the mapping shows why the conflict is interlevel. If scale window, RG relation, coarse-graining relation, preserved structure, lost structure, or conflict residual slope becomes an architecture scale-preference claim, use [C.31.ASAP](/generated/patterns/C.31.ASAP) and keep any mathematical-lens claim in [C.29](/generated/patterns/C.29). If the practitioner needs to generate, compare, or publish residual-reducing candidate architecture moves, use [G.5](/generated/patterns/G.5) for the candidate set and [C.11](/generated/patterns/C.11) when a final local choice is being made; [C.30.ILC](/generated/patterns/C.30.ILC) stops at the residual and first admissible move. If the case is only a conflict between two selected structures with no declared multilevel mapping or scale mapping, keep it in [C.30](/generated/patterns/C.30), [C.30.ASV](/generated/patterns/C.30.ASV), [D.3](/generated/patterns/D.3), [D.4](/generated/patterns/D.4), [C.28](/generated/patterns/C.28), evidence, assurance, or decision patterns as applicable.

Anti-collapse rule: no generic frustration score, no risk-matrix residual, no stakeholder-mediation takeover, no physics or biology ontology transfer, no global-optimizer proof, no causal proof, and no assurance proof. A frustration or risk label does not govern the case until declared holon levels or declared scopes, the selected structure or structure kind that carries them, residual-bearing locus, and first architecture move are recoverable; stakeholder mediation applies [D.3](/generated/patterns/D.3) or [D.4](/generated/patterns/D.4) only when values, ethical conflict, or negotiation is being claimed.

Stop condition. Stop after CrossScopeArchitectureResidualTriage@Context when it names the residual and the first admissible architecture move. It does not measure scale preference, generate candidate architectures, mediate stakeholder conflict, or select a decision. Apply a governing pattern only when a claim kind being made exists:

Claim kind being madeGoverning pattern to apply
measurement or characteristic claim[C.16](/generated/patterns/C.16) or the characteristic pattern that governs the characteristic under evaluation
scale window, RG relation, coarse-graining relation, preserved structure, lost structure, or conflict residual slope[C.31.ASAP](/generated/patterns/C.31.ASAP) when an architecture scale-preference claim is being made; use [C.29](/generated/patterns/C.29) when mathematical-lens use is being claimed
multilevel learning or frustration mathematical-lens use with recoverable level mapping or scale mapping[C.29](/generated/patterns/C.29) with MLU.Description@MultilevelLearningFrustration
candidate generation or residual-reducing candidate architecture moves[G.5](/generated/patterns/G.5) for the candidate set; [C.11](/generated/patterns/C.11) when final local choice is being made
final local choice[C.11](/generated/patterns/C.11)
causal outcome claim[C.28](/generated/patterns/C.28)
evidence or assurance[A.10](/generated/patterns/A.10), [B.3](/generated/patterns/B.3), or [G.6](/generated/patterns/G.6)
ethical or stakeholder mediation[D.3](/generated/patterns/D.3) or [D.4](/generated/patterns/D.4)

D.3 and D.4 boundary. [D.3](/generated/patterns/D.3) and [D.4](/generated/patterns/D.4) handle conflict topology, values, stakeholder mediation, and ethical negotiation. [C.30.ILC](/generated/patterns/C.30.ILC) handles architecture-specific recognition: whether the conflict is borne by declared holon levels or declared scopes inside a selected structure: structural views, allocation, interfaces, control rates, work reuse, evidence reuse, scale windows, or coarse-graining loss. It is a triage and architecture-move pattern, not a negotiation pattern.

Architecture-move examples.

CueAdmissible architecture moveNon-admissible overread
Component optimization breaks integrationexpose hidden coupling; add interface grammar; change allocationTreat local performance as whole-holon adequacy.
Modularity reduces local work and increases exceptionsaccept bounded exception; revise module boundary; add work scope or evidence scopeAverage exceptions into a modularity score without declared scope, comparator, and measurement relation.
Local autonomy conflicts with control scopeadd control layer; change allocation; apply [C.30.LCA](/generated/patterns/C.30.LCA)Treat autonomy label as causal or safety proof.
Evidence reuse hides source lossadd evidence scope; add source-return condition; apply [A.10](/generated/patterns/A.10) or [G.6](/generated/patterns/G.6)Treat reused evidence as automatically valid in the wider scope.
A scale window changes the residualapply [C.31.ASAP](/generated/patterns/C.31.ASAP), with [C.29](/generated/patterns/C.29) when scale-lens use is being madeTreat two observations as a universal scale law.
A frustration lens with recoverable level mapping or scale mapping makes candidate moves comparableuse [C.29](/generated/patterns/C.29) for lens adequacy and [G.5](/generated/patterns/G.5) for the candidate setTreat an unassigned or same-scope structure conflict as RG mathematics or frustration mathematics, or treat an interlevel residual without recoverable mapping as a global optimizer, proof, or selected architecture.

Worked slice A - clean module layout, bad flow. A product team redraws modules so each component has an explicit responsibility relation or enactor relation, but order-to-cash flow now crosses more work transfers and exceptions rise. [C.30.ILC](/generated/patterns/C.30.ILC) names the module structure, flow structure or transduction structure, affected work scope, cross-scope residual, and first move: expose hidden coupling or apply C.30.TGA-FLOW-REL. It does not turn the exception count into a modularity measure until [C.16](/generated/patterns/C.16) or the characteristic pattern governing the characteristic under evaluation is applied.

Worked slice B - AI agent control conflict. A local agent optimizes its local objective and violates a supervisor's allowed-mode constraint. [C.30.ILC](/generated/patterns/C.30.ILC) names the agent scope, supervisor scope or control scope, control relation, local optimization claim, residual-bearing locus, and local repair attempted. The first move may be add control layer, change allocation, or apply [C.30.LCA](/generated/patterns/C.30.LCA). Safety, causality, and gate claims use their governing patterns.

Worked slice C - evidence scope residue. A reusable certification evidence set removes repeated evidence work for several product variants, but one variant has a hidden environment difference. [C.30.ILC](/generated/patterns/C.30.ILC) names the work scope or evidence scope and source-return condition. It applies [A.10](/generated/patterns/A.10) or [G.6](/generated/patterns/G.6) when an evidence-validity claim is being made.

Worked slice D - frustration residual before synthesis. Several decompositions reduce local module work but each creates a different integration, control-rate, or evidence-reuse residual in another declared scope. [C.30.ILC](/generated/patterns/C.30.ILC) records the residuals and first architecture moves. If the team needs a residual-reducing candidate palette, [C.30.ILC](/generated/patterns/C.30.ILC) stops and applies [G.5](/generated/patterns/G.5) to the candidate set. If the team claims a multilevel-learning lens or frustration lens, [C.29](/generated/patterns/C.29) carries the lens-use fields and stop condition only after the level mapping, scope mapping, scale-window mapping, or coarse-graining mapping and preserved structure and lost structure are recoverable.

Archetypal Grounding

ArchetypeWithout C.30.ILCWith C.30.ILC
Holon levelsA residual across component, system, episteme, publication-use, control, environment, or product-line scopes is called generic complexity.The affected declared holon levels or declared scopes, the level-bearing structure, the residual, and the first architecture move are named.
Episteme as described holonA diagram, measurement note, or conflict memo has its own structure, but a second description about it is interpreted as if it already selected a repair.The episteme can be the described holon; the description of that episteme remains separate from decision, evidence, measurement, selection, or mediation and is governed by the governing pattern when those claims are being made.

Bias-Annotation

  • Local-success bias. A local improvement is treated as whole-architecture improvement. Repair by naming the wider declared holon level or declared scope and the residual.
  • Pseudo-level bias. Level, layer, or scope sounds precise but no declared holon level or declared scope exists. Repair through declaredHolonLevelRefs or declaredScopeRefs.
  • Generic-structure-conflict bias. A conflict between selected structures is treated as interlevel conflict even though no declared holon level, scale window, or coarse-graining relation is recoverable. Repair by keeping the case in C.30, C.30.ASV, or the governing pattern unless the structures are assigned to different declared holon levels or scale windows.
  • Frustration-ontology bias. A useful conflict or frustration entry label becomes a new first-order architecture kind, physics ontology, biology ontology, or psychology claim. Repair by recovering declared holon levels or declared scopes, the level-bearing structure, conflict carriers, residual-bearing locus, and the governing pattern for any lens, proof, evidence, mediation, or synthesis claim.
  • Global-optimizer bias. Local optimization in one declared holon level or declared scope is used as if the architecture literally optimizes one global function. Repair by keeping the local optimization claim as a triage input unless C.29 supplies an admissible mathematical-lens use with recoverable level mapping or scale mapping and the candidate-set or decision pattern carries any synthesis or selection claim.
  • Measurement-first bias. A residual is measured before its level-bearing structure and scope grounding are declared. Repair by applying C.16 or the characteristic pattern governing the characteristic under evaluation only after triage names the affected characteristic or measurement relation.
  • Mediation-default bias. Every conflict is treated as stakeholder conflict. Repair by checking whether the use under repair is architecture structure, allocation, interface grammar, control, work or evidence scope, source-return, or another declared level-bearing architecture relation.
  • Synthesis-jump bias. A local residual immediately triggers candidate generation. Repair by identifying the first admissible architecture move before applying G.5 to a residual-reducing candidate set.

This checklist verifies the preceding guidance after the practitioner has chosen the selected move; it is not a required project control form and not a substitute for the card, note, view, relation, or repair move above.

Conformance Checklist

IDCheckWhy it matters
CC-ILC-1A conforming use names describedHolonRef, boundedContextRef, and the architecture concern cue.Keeps the triage grounded without narrowing architecture to systems.
CC-ILC-2A conforming use names declared holon levels or declared scopes, not only level, layer, scope, or scale prose.Prevents pseudo-level and pseudo-scope reasoning.
CC-ILC-3A conforming use names the selected structure or structure kind that carries, separates, or relates the declared levels or scopes affected by the residual.Keeps the residual interlevel rather than merely a same-level, same-scope, or unassigned conflict between structures.
CC-ILC-4A conforming use records conflict carriers, local repair attempted, and why local repair was insufficient when a conflict or local repair is claimed.Prevents premature synthesis and repeated local fixes.
CC-ILC-5A conforming use states one first admissible architecture move or noArchitectureMove.Makes the output action-guiding without candidate generation.
CC-ILC-6Evidence, assurance, measurement, causal, ethical, selection, scale, RG, coarse-graining, mathematical-lens, and residual-reducing candidate-set claim kinds use their governing patterns.Prevents triage from becoming proof, lens adequacy, mediation, synthesis, or selection.
CC-ILC-7If a source-return condition is needed, the record states what hidden or lost distinction triggers return to the source.Protects compressed and extracted views.
CC-ILC-8The stop condition is visible.Prevents the triage pattern from expanding into a hidden prescribed sequence.
CC-ILC-9If multilevel learning or frustration is used as mathematics, the record names C.29, MLU.Description@MultilevelLearningFrustration, the recoverable level mapping or scale mapping, and preserved structure and lost structure; if residual-reducing candidate moves form a candidate set being used, the record applies G.5 to the candidate set.Preserves the useful multilevel optimization line without importing ontology, proof, or a hidden selector.

Common Anti-Patterns and How to Avoid Them

Anti-patternSymptomRepair
Generic complexity bucketEverything becomes complexity or interlevel conflict.Name declared holon levels or declared scopes, level-bearing structure, residual, and first architecture move.
Structure conflict as interlevel conflictTwo structures are in tension, but no declared holon level, scale window, or coarse-graining relation is recoverable.Use C.30, C.30.ASV, D.3, D.4, C.28, evidence, assurance, or decision patterns as applicable; use C.30.ILC only when the conflict is across declared levels or scopes.
Frustration-as-ontologyFrustration is treated as a new FPF kind, psychological state, physics kind, biology kind, assurance score, or proof.Keep frustration as an entry label; recover FrustrationResidual, conflict carriers, residual-bearing locus, and governing patterns for C.29, evidence, assurance, causal, mediation, or synthesis claims when those claim kinds are being made.
Optimization-as-global-proofA local optimization claim is treated as proof that the whole architecture optimizes one global objective.Record local and wider-scope claims separately; use C.29 only for an admissible mathematical lens with recoverable level mapping or scale mapping and use candidate-generation, comparison, or decision patterns for synthesis and selection.
Measurement-first conflictThe team starts measuring before declaring what is in conflict.Run ILC triage first; apply C.16 or the characteristic pattern governing the characteristic under evaluation only when the measured characteristic is under evaluation.
Risk color as cross-scope decisionA red, yellow, or green risk cell, risk matrix, or maturity score decides the cross-scope architecture move or resource-allocation priority.Recover declared holon levels or declared scopes, structure kind under considerations, the residual, the loss, hazard, or threat path, selected source, evidence, or relation interpretation, characteristic scale, comparator, gate pattern, and first admissible architecture move; do not treat ordinal risk color as architecture adequacy, evidence sufficiency, causal proof, assurance proof, resource-allocation priority, or gate passage.
Stakeholder-only conflictA structural residual is treated as mediation with no architecture move.Use D.3 or D.4 only when values, stakeholder negotiation, or ethical mediation is being claimed.
Hidden candidate generationThe residual immediately spawns many designs.State the first admissible move; apply G.5 to a residual-reducing candidate set only when candidate generation is being claimed.
Scope word without scope recordThe text says level, layer, scale, or scope without a declared field.Recover the declared holon level or declared scope named by value, or demote the phrase to ordinary recognition.

Consequences

The gain is an early architecture move that is small and precise. The practitioner can preserve useful problem language such as conflict, frustration, level, layer, or local optimization while recovering the FPF fields that keep the claim reviewable.

The cost is that C.30.ILC refuses to solve the whole problem. It identifies the first architecture move or governing-pattern application. Measurement, scale relation, RG relation, coarse-graining relation, mathematical lens use, stakeholder mediation, candidate generation, evidence, assurance, and final choice remain outside until those claims are being made.

This makes multilevel optimization usable rather than decorative. C.30.ILC identifies the residual that makes optimization relevant; C.29 carries an admissible mathematical-lens use only when level mapping or scale mapping and preserved structure and lost structure are recoverable; G.5 carries residual-reducing candidate sets; and the decision pattern carries any final selected architecture.

Rationale

Interlevel conflict and frustration are useful Plain entry labels because they point to a recurrent architecture failure: local repair in one declared holon level or declared scope leaves a residual in another. They are dangerous as generic labels because they can hide which level, scope, level-bearing structure, relation, conflict carrier, or source-return condition bears the residual.

A local optimum or successful local repair is therefore not treated as whole-architecture adequacy. It becomes architecture-relevant only when the residual-bearing locus is recoverable and the next move can be named.

C.30.ILC keeps the entry label but recovers the architecture relation or structure claim. It treats conflict or frustration as architecture-shaping only when declared holon levels or declared scopes, the level-bearing structure, conflict carriers, and residual-bearing loci are named. This lets FPF preserve the practical intuition without introducing a second ontology of levels, a hidden measurement pattern, a physics or biology transfer, a global optimizer proof, or a prescribed architecture work order.

SoTA-Echoing

SoTA and practice sourceWhat it contributesFPF adoption stancePractitioner implication
Scenario-based architecture trade-off practice, with ATAM-like reasoning used here as lineage and practice source for concern, scenario, sensitivity point, and trade-off recognition rather than as a decision or evidence method.Architecture work often starts from cross-concern and cross-scope trade-offs rather than one local measurement result.Adopt and adapt: use the conflict cue for triage, require declared holon levels or scopes, level-bearing structure, and governing patterns for final selection, evidence, assurance, and gate passage.A residual can start an architecture move without becoming a decision, proof, or safety case.
Vanchurin, Wolf, Katsnelson, and Koonin multilevel learning and frustration line, plus related multilevel optimization and complexity-frustration materials.Local optimization at one declared holon level, scope, or level-bearing structure relation can create persistent residual in another; frustrated optimization can be a candidate mathematical lens when a level mapping or scale mapping is recoverable.Adopt and adapt: C.30.ILC uses this line for architecture triage only. C.29 with MLU.Description@MultilevelLearningFrustration carries mathematical-lens adequacy with preserved structure and lost structure; no U.Frustration, physics or biology ontology transfer, global optimizer proof, causal proof, assurance proof, or stakeholder-mediation takeover.First recover holon levels or scopes, level-bearing structure, conflict carriers, residual-bearing locus, local repair, and the first architecture move. Apply C.29 only when the lens mapping is being claimed; apply G.5 only when residual-reducing candidate moves form a candidate set being used.
Control and cyber-physical systems practice.Local autonomy, feedback, supervisor relations, and rate separation can create cross-scope conflict.Reuse through C.30.LCA, B.2.5, C.27, and A.3.3; do not let ILC carry control proof.A control conflict is governed by control-structure or dynamics patterns only when those claims are being made.
FPF source-return and semantic-coarsening discipline.Compressed views and reusable records can hide distinctions that matter in a wider scope.Adopt: add sourceReturnCondition? when hidden distinctions carry the residual.A bounded exception or source-return trigger may be the correct first move.

Relations

  • Builds on C.30 and C.30.ASV for grounded architecture, selected-structure, and structural-view adequacy.
  • Uses A.22 for structure and structural-view discipline.
  • Coordinates with C.30.TGA-FLOW-REL, C.30.LCA, A.6.F, and A.6.M when the residual concerns flow, control, function, allocation, module, or interface structure.
  • Applies C.16 or the characteristic pattern that governs the characteristic under evaluation for measurement or characteristic claims.
  • Applies C.29 with MLU.Description@MultilevelLearningFrustration only when multilevel learning or frustration is used as a mathematical lens with recoverable level mapping or scale mapping and preserved structure and lost structure; applies C.31.ASAP for architecture scale-preference claims and C.29 for mathematical-lens claims when scale, RG, coarse-graining, preserved structure, lost structure, or scale-window adequacy is being claimed.
  • Applies G.5 for candidate generation and residual-reducing candidate architecture moves.
  • Applies C.11 for final local choice, C.28 for causal outcome claims, A.10, B.3, or G.6 for evidence or assurance, and D.3 or D.4 for ethical or stakeholder mediation.

Neighboring claims stay with their governing patterns: C.30 for grounded architecture and selected-structure adequacy, C.30.ASV for structural-view adequacy, A.22 for structure and structural-view discipline, C.30.TGA-FLOW-REL for architecture-TGA flow relation, C.30.LCA for control-structure view relation, A.6.F for function-use repair, A.6.M for module-interface repair, C.16 or the local characteristic pattern for the characteristic under evaluation, C.29 for mathematical-lens use, C.31.ASAP for architecture scale-preference, G.5 for candidate-set generation, C.11 for final local choice, C.28 for causal use, A.10, B.3, or G.6 for evidence or assurance, and D.3 or D.4 for ethical or stakeholder mediation. C.30.ILC governs only cross-scope architecture residual triage.

C.30.ILC:End

C.30.TGA-FLOW-REL - Architecture-TGA Flow-Structure Relation

Type: Architectural pattern Status: Stable Normativity: Normative unless explicitly marked informative

C.30.TGA-FLOW-REL:1 - Problem frame

Use this pattern when an architecture discussion depends on a Transduction Graph Architecture (TGA) graph, path, path slice, crossing, flow valuation, edition pin, plane pin, context pin, or no-hidden-scalarization claim.

The first useful move is small. ArchitectureFlowStructureRelation@TGA is a C.30-side relation record for a relation being used between ArchitectureOf@Context, selected architecture-relevant structure, architecture structural view, or conditional ArchitectureDescription@Context use and the E.18 graph, path, crossing, or flow-valuation relation being used for flow or transduction structure. It names the architecture locus, selected structure or view reference when used in the relation, conditional description reference when durable description use is being made, the E.18 object, correspondence or source-return condition when used in the relation, and the admissible architecture use.

ArchitectureFlowStructureRelation@TGA:
architectureClaimRef?:
selectedArchitectureStructureRefs?:
architectureStructuralViewRef?:
architectureDescriptionRef?:
functionalStructureViewRef?:
flowTransductionStructureViewRef?:
transductionGraphRef?:
selectedPathOrSliceRefs?:
crossingBundleRefs?:
flowValuationRefs?:
correspondenceRefs?:
sourceReturnCondition?:
admissibleUse:
nonAdmissibleUse:

Ordinary minimum: name at least one architecture-side reference (architectureClaimRef, selectedArchitectureStructureRefs, architectureStructuralViewRef, or architectureDescriptionRef when durable description use is being made), at least one E.18 object reference (transductionGraphRef, selectedPathOrSliceRefs, crossingBundleRefs, or flowValuationRefs), the architecture-flow FlowTransductionStructure, one blocked overread, and stop or governing-pattern application. Use functional-structure, flow-structure, crossing, flow-valuation, correspondence, and source-return fields only when they change the next architecture move. All other fields are conditional and may be not used.

Use this relation only when a grounded architecture claim, selected architecture-relevant structure, architecture structural view, functional-architecture view, flow-structure claim, or conditional architecture-description use depends on an E.18 graph, path, crossing, or valuation relation. Stop when the architecture-flow relation and non-admissible uses are clear. If another claim is being made, that claim is governed by its governing pattern and this relation remains only the architecture-flow relation.

What goes wrong if this pattern is missed: a TGA graph becomes functional architecture, whole architecture ontology, performed-work occurrence, work-result record, proof, or project decision by appearance.

What this buys in practice: the practitioner can use E.18 for flow or transduction structure while C.30 remains the grounded architecture and selected-structure adequacy locus and C.30.ASV remains the architecture-structural-view locus.

Not this pattern when the question under repair is a graph, path, crossing, or flow valuation without a relation being used for grounded architecture adequacy, conditional architecture-description use, or an architecture structural view. Use E.18 directly. If the question under repair is an architecture claim or durable architecture description without an E.TGA graph claim, path claim, or crossing claim kind, use C.30. If it is a functional view without flow relation or TGA claim kind, use C.30.ASV and A.6.F. If another claim being made is present, use the governing pattern and keep C.30.TGA-FLOW-REL only to the architecture-flow relation.

C.30.TGA-FLOW-REL:2 - Problem

Grounded architecture claims, selected architecture-relevant structures, architecture structural views, and conditional architecture descriptions often need E.18 objects when they discuss flow or transduction structure, functional dependencies, data movement, control paths, evidence flows, neural-network dataflow, or code-agent relation graphs.

C.30.TGA-FLOW-REL prevents that collapse by requiring the selected architecture-side reference, such as ArchitectureOf@Context, structure ref, structural view, or conditional description use, before any E.18-governed graph, path, or crossing object gets architecture use.

C.30.TGA-FLOW-REL:3 - Forces

ForceTension
Flow relation vs architecture takeoverE.TGA graph, path, or crossing relation can be essential, but it does not become all architecture ontology.
Functional view vs flow viewA functional structure view may need a flow relation, but a graph, path, or crossing object is not a functional element by itself.
Graph precision vs work overreadE.18 gives precise graph, path, and flow-valuation objects; work occurrence and work results remain outside TGA unless their own pattern governs the claim being made.
No-hidden-scalarization vs architecture scoringE.18 set-return and no-hidden-scalarization discipline can inform architecture reasoning, but it does not become a general architecture score.
Small relation vs unneeded non-architecture apparatusA project often needs one relation record, not a full C.29 lens card, evidence path, assurance case, or decision record.
E.18 stability vs C.30 integrationA TGA-based architecture claim, selected flow or transduction structure, architecture structural view, or conditional architecture-description use needs a relation to E.18 without rewriting E.TGA as generic architecture adequacy theory.

C.30.TGA-FLOW-REL:4 - Solution

C.30.TGA-FLOW-REL is the C.30 entry relation to E.18 when a grounded architecture claim, selected architecture-relevant structure, architecture structural view, or conditional architecture description uses E.TGA graph, path, crossing, or flow-valuation objects as a flow or transduction structure relation.

It supplies only the architecture-flow relation:

ArchitectureFlowStructureRelation@TGA ::= {
  architectureClaimRef?,
  selectedArchitectureStructureRefs?,
  architectureStructuralViewRef?,
  architectureDescriptionRef?,
  functionalStructureViewRef?,
  flowTransductionStructureViewRef?,
  transductionGraphRef?,
  selectedPathOrSliceRefs?,
  crossingBundleRefs?,
  flowValuationRefs?,
  correspondenceRefs?,
  sourceReturnCondition?,
  admissibleUse,
  nonAdmissibleUse
}

At least one architecture-side field and at least one E.18 object field must be named by value. Optional fields stay not used unless they change inspection, correspondence, source return, governing-pattern application, or stop.

C.30.TGA-FLOW-REL:4.1 - Use trigger

Use this pattern only when a ArchitectureOf@Context claim being made, selected architecture-relevant structure, architecture structural view, functional-structure view, flow-structure claim, or conditional ArchitectureDescription@Context use depends on one or more E.18 objects:

  • TransductionGraphRef;
  • PathId or PathSliceId;
  • CrossingBundleRef;
  • U.Transfer flow valuation;
  • edition, plane, or context pin;
  • no-hidden-scalarization or set-return discipline;
  • correspondence between functional structure and flow or transduction structure;
  • generated or extracted relation graph used as architecture-flow reliance.

If the sentence only says that work occurred, use A.15 or the governing work pattern. If the sentence only says that a graph exists, use E.18. If the sentence uses the graph as mathematical-lens reliance, use C.29.

C.30.TGA-FLOW-REL:4.2 - Relation to functional structure

FunctionalStructureView@Context under C.30.ASV may cite ArchitectureFlowStructureRelation@TGA when a flow relation is being used. That relation does not make the TGA graph a functional element. It says that a functional structure view corresponds to or is declared relative to one E.18 graph, path, or crossing relation.

FunctionFlowRelationNote:
functionalStructureViewRef:
flowTransductionStructureViewRef:
architectureFlowStructureRelationRef:
functionOrEffect:
pathOrSliceRef:
crossingBundleRef:
preservedStructure:
lostOrHiddenStructure:
admissibleUse:
nonAdmissibleUse:

Use this note when the practitioner needs to see whether the function-flow relation changes inspection, split, relation-making, downgrade, claim named by value-governance assignment, candidate generation, or stop.

C.30.TGA-FLOW-REL:4.3 - Claim-kind applications named by value

Claim kind being madeGoverning pattern to apply
Work occurrence or work resultA.15 and the governing work-result or P2W relation
Gate decisionA.21
Evidence claimA.10 or G.6
Assurance claimB.3
Causal flow or intervention claimC.28
Mathematical-lens useC.29
Architecture description or view adequacyC.30 or C.30.ASV
Function-like wordingA.6.F
Interface, signature, or module compatibilityInterfaceSignatureBoundaryNote or the module-and-interface repair pattern when the corresponding claim is being made
Architecture decisionthe project-side architecture decision pattern when the corresponding claim is being made

This table is the single boundary for generic non-flow claims. Elsewhere in this pattern, keep only local false positives that the TGA relation itself makes tempting: graph-as-architecture, graph-as-functional-architecture, flow-as-work-log, crossing-as-gate, valuation-as-score, generated relation-graph proof, and prompt-data-tool flow as authority proof.

C.30.TGA-FLOW-REL:4.4 - E.18:5.12 boundary statement

For an E.TGA-governed flow or transduction structure kind used by ArchitectureOf@Context, selected architecture-relevant structure, architecture structural view, or conditional ArchitectureDescription@Context, an architecture-flow relation may cite an E.TGA transduction graph over the described holon plus MVPK faces and correspondences.

Grounded architecture adequacy and conditional architecture-description use are governed by C.30. E.18 supplies the flow or transduction structure objects and relations; it does not define all architecture structure kinds.

This is the E.18:5.12 boundary statement. It is not a TGA rewrite and not a second E.TGA source of truth.

C.30.TGA-FLOW-REL:4.5 - Worked slices

Functional architecture with a flow relation being claimed. A team says, "The functional architecture is this TGA graph." The repair is:

functionalStructureViewRef: required effects and dependencies
flowTransductionStructureViewRef: selected E.18 graph structure, path structure, crossing structure, or flow-valuation structure
transductionGraphRef: E.18 graph
selectedPathOrSliceRefs: path slices used for the architecture claim
correspondenceRefs: functional effect to flow path relation
nonAdmissibleUse:
  graph as functional architecture itself,
  graph as work occurrence,
  graph as evidence sufficiency,
  graph as gate result,
  graph as project decision

Filled relation record:

ArchitectureFlowStructureRelation@TGA:
architectureClaimRef: ArchitectureOf@CheckoutServiceContext
selectedArchitectureStructureRefs: selected request-handling and payment-authorization flow structure
architectureStructuralViewRef: ArchitectureStructuralView@CheckoutRuntimeFlow
architectureDescriptionRef: not used; the durable architecture description is not being evaluated here
functionalStructureViewRef: FunctionalStructureView@CheckoutRequiredEffects
flowTransductionStructureViewRef: FlowTransductionStructure@PaymentAuthorizationPath
transductionGraphRef: TransductionGraph@Checkout-v3
selectedPathOrSliceRefs: PathSlice@request-to-payment-authorization
crossingBundleRefs: not used
flowValuationRefs: not used
correspondenceRefs: required effect `authorize payment` corresponds to the E.18 path slice; this is correspondence, not identity
sourceReturnCondition: reopen if graph edition, path slice, source observation class, or required-effect declaration changes
admissibleUse: inspect whether the functional structure view depends on the E.18 path slice being used and whether an architecture split or correspondence note is needed
nonAdmissibleUse: graph as functional architecture itself; graph as work occurrence; graph as evidence sufficiency; graph as gate result; graph as project decision

Near miss: if the graph has no C.30-side architecture reference named by value, the case stays in [E.18](/generated/patterns/E.18). If the same sentence is a work log, evidence claim, gate decision, or benchmark result, that non-flow claim is governed by its governing pattern and this relation keeps only the architecture-flow relation.

Neural-network dataflow change. Source labels such as attention block, SSM block, convolution block, memory mechanism, cache mechanism, and MoE expert-selection go through [C.30.STRAT](/generated/patterns/C.30.STRAT) unless the changed item is already recovered. C.30.TGA-FLOW-REL applies only when the changed structure kind and flow or transduction relation are named. A benchmark, ablation, or pruning result may bear on an non-architecture claim named by value, but it does not make the flow relation an architecture decision or evidence sufficiency by itself.

Code-agent relation graph. A code-agent relation graph with IMPORTS, CALLS_API, REGISTRY_WIRES, or DATA_FLOWS_TO edges can be used for an architecture-flow relation only with source edition, a source observation class selected from {observed, inferred, unknown}, typed relation semantics, unexplored regions, and source-return condition when subsequent action relies on hidden distinctions.

C.30.TGA-FLOW-REL:4.6 - Lowering and currentness conditions

Lower, narrow, or reopen the relation at the smallest changed locus when:

  • E.18 graph, path, crossing, or flow-valuation semantics change;
  • edition, plane, context pin, set-return, or no-hidden-scalarization discipline changes;
  • source graph edition, path slice, source observation class, source pin, unexplored region, or source-return condition changes;
  • the C.30 architecture locus, selected architecture-relevant structure, architecture structural view, conditional architecture description, or C.30.ASV relation changes;
  • functional-flow correspondence changes;
  • a non-flow claim is being made and is governed by C.30.TGA-FLOW-REL:4.3 rather than by this relation;
  • C.29, C.16, C.28, A.10, G.6, B.3, A.20, A.21, A.15, C.30, C.30.ASV, A.6.F, C.30.STRAT, or E.18 changes the governing boundary used by the relation.

Admissible repair results are: update the affected reference, add or change correspondence, add or change source-return condition, narrow admissible use, keep the graph claim inside E.18, apply the governing pattern to a non-flow claim, lower to quote-only or reduced-use cue, or block the architecture-flow use.

C.30.TGA-FLOW-REL:5 - Archetypal Grounding

Tell-Show-Show rowGrounding
TellA practitioner sees a graph or path and wants to use it for a grounded architecture claim, selected architecture-relevant structure, architecture structural view, or conditional architecture description. C.30.TGA-FLOW-REL asks whether the graph is E.18-governed flow or transduction relation for the selected architecture locus, and names its non-admissible uses.
Show: U.SystemA software system, plant, AI agent, neural network, vehicle, or supply chain may have flow or transduction structure. The graph can inform architecture reasoning about that structure without carrying the non-flow claims named in C.30.TGA-FLOW-REL:4.3.
Show: U.EpistemeA TGA graph, generated relation graph, code-agent probe, neural-network diagram, dashboard, or architecture note is an episteme, view, or publication. It can publish or substantiate the flow relation only when its E.18 object, context pins, correspondence, source-return condition, and admissible use are recoverable.

C.30.TGA-FLOW-REL:6 - Bias-Annotation

Lenses tested: Arch, Onto, Epist, Prag, Did, Gov. Scope: architecture-flow relations using E.18 objects.

Bias riskMitigation
Graph-as-architecture biasThe pattern states that grounded architecture adequacy and conditional architecture-description use stay with C.30, while structural views stay with C.30.ASV.
Function-flow collapseFunctional structure and flow or transduction structure are related, not identical.
Non-flow claim overreadThe relation table assigns non-flow claim kinds to their governing patterns.
Mathematical overreadMathematical-lens use of a graph or valuation is governed by C.29.
Check-only biasConformance checks include repair moves and stop conditions.

This checklist verifies the preceding guidance after the practitioner has chosen the selected move; it is not a required project control form and not a substitute for the card, note, relation, or repair move above.

C.30.TGA-FLOW-REL:7 - Conformance Checklist

IDRequirementFailed-check repair
CC-TGA-FLOW-1 E.18 object.The relation names the E.18 graph, path, slice, crossing, or flow valuation object it uses.Add the E.18 object reference named by value or use C.30 or C.30.ASV without TGA relation.
CC-TGA-FLOW-2 Architecture locus.The relation names ArchitectureOf@Context, selected architecture-relevant structure, architecture structural view, or conditional ArchitectureDescription@Context use it relates to.Add architectureClaimRef, selectedArchitectureStructureRefs, architectureStructuralViewRef, or architectureDescriptionRef when durable description use is being made; otherwise keep the graph claim inside E.18 only.
CC-TGA-FLOW-3 Functional and flow separation.Functional structure and flow or transduction structure remain separate unless a correspondence is declared.Add FunctionFlowRelationNote or remove the functional-architecture claim from the graph sentence.
CC-TGA-FLOW-4 No TGA architecture takeover.The TGA graph is not treated as generic architecture ontology or all architecture structure kinds.Assign grounded architecture claims, selected architecture-relevant structures, or conditional architecture-description use to C.30 and keep this pattern to flow or transduction structure.
CC-TGA-FLOW-5 No work overread.A graph, path, or slice is not treated as work occurrence or work result.Assign the work claim to A.15 or the governing work-result pattern.
CC-TGA-FLOW-6 No evidence, assurance, or gate overread.The relation is not used as evidence sufficiency, assurance claim, gate decision, or release permission without evidence named by value, assurance, gate, or release pattern application.Assign the claim being made to A.10, G.6, B.3, A.20, A.21, or the release locus named by value when a release claim is being made.
CC-TGA-FLOW-7 Causal and mathematical boundaries.Causal or intervention claims and mathematical-lens claims are assigned to C.28 and C.29.Apply those governing patterns or narrow the relation's admissible use.
CC-TGA-FLOW-8 Pin and scalarization boundary.Edition, context, and plane pins plus no-hidden-scalarization claims remain E.18-governed.Add E.18 pin and set-return references or remove the comparison or selection claim.
CC-TGA-FLOW-9 Source return.Extracted, generated, coarsened, or partial graphs state source-return conditions when hidden distinctions affect action.Add source-return condition or narrow the admissible use.
CC-TGA-FLOW-10 Useful action.The repair leaves a surviving move: name graph, path, or crossing relation; add correspondence; return to source; assign the claim being made to a governing pattern; or stop.Restore that move, or classify the phrase as reduced-use cue, quote-only wording, blocked transfer, or incomplete rewrite.
CC-TGA-FLOW-11 Lowering and currentness.The relation states the smallest changed locus when E.18 semantics or pins, source observation class, architecture locus, correspondence, source return, or neighboring governing boundary changes.Update the affected reference, narrow admissible use, keep the graph claim inside E.18, apply the governing pattern to the non-flow claim, lower the relation, or block architecture-flow use.

C.30.TGA-FLOW-REL:8 - Common Anti-Patterns and How to Avoid Them

Anti-patternSymptomRepair
Graph-as-architectureThe E.18 graph is called the architecture.Use C.30 for the grounded architecture claim, selected architecture-relevant structure, or conditional architecture description, and keep this relation only for flow or transduction structure.
Graph-as-functional-architectureA TGA graph is treated as the functional architecture itself.Split functional structure from flow or transduction structure and add correspondence.
Flow-as-work-logPath or slice wording is treated as work occurrence.Assign occurrence or result claims to A.15 or P2W and keep TGA as graph or path relation.
Crossing-as-gate-resultA crossing relation is treated as gate passage.Assign gate-decision claims to A.21 and keep crossing relation under E.18.
Valuation-as-scoreA flow valuation is used as a generic architecture score.State E.18 valuation and set-return discipline; assign measurement, characterization, selection, or candidate-set claims to C.16 or an admitted governing pattern when those claims are being made.
Generated relation-graph proofA code-agent relation graph or probe output is used as proof of architecture understanding or safety.Recover source, source observation class selected from {observed, inferred, unknown}, hidden structure, and evidence or assurance pattern governing the claim applications.
Prompt-data-tool flow as authority proofA prompt, data, or tool-flow graph is treated as permission for tool action or proof that authority is safe.Keep the graph as a flow relation. A path from untrusted content to tool action is governed by SecurityTrustBoundaryStructure, C.24, E.16, A.20, or A.21 when those claim kinds are being made.

C.30.TGA-FLOW-REL:9 - Consequences

BenefitCost or trade-off
E.18 graph, path, and crossing discipline becomes usable for grounded architecture claims, selected architecture-relevant structures, architecture structural views, and conditional architecture descriptions.A conforming use names the C.30 architecture record, selected structure ref, C.30.ASV structural-view reference, or conditional architecture-description ref that uses the TGA relation.
Functional structure and flow or transduction structure stay separable.Concise "the graph is the architecture" prose is repaired before it is used for an FPF claim kind or admissible-use boundary.
Non-flow claim kinds are assigned to their governing patterns.More governing patterns are named when practitioners try to overuse the graph.
The E.18:5.12 boundary statement stays narrow.Generic architecture adequacy remains outside E.18.

C.30.TGA-FLOW-REL:10 - Rationale

E.TGA is already the governing FPF pattern for transduction graphs, paths, crossings, flow valuations, and related pins. Architecture needs to use that work without letting it become generic architecture ontology. The smallest stable relation is therefore a C.30-side record that points to E.18 objects and states admissible and non-admissible architecture use.

This pattern also protects functional architecture. A functional structure view may correspond to flow or transduction structure, but function and flow are different structure kinds. The relation is useful precisely because it preserves that difference while allowing correspondence.

C.30.TGA-FLOW-REL:11 - SoTA-Echoing

Practice or source lineC.30.TGA-FLOW-REL adoptionAction consequenceBoundary
E.18 E.TGA graph, path, crossing, and flow-valuation disciplineAdopt E.18 as the governing source for graph, path, crossing, and valuation objects.The pattern names E.18 references rather than redefining graph or flow semantics.E.18 does not become generic architecture ontology or architecture-description ontology.
ISO/IEC/IEEE 42010:2022 and multi-view architecture practiceAdapt view and correspondence discipline to architecture-flow reliance.Flow or transduction views relate to grounded architecture claims, selected architecture-relevant structures, architecture structural views, or conditional architecture descriptions through C.30, C.30.ASV, and correspondence refs.Architecture views do not become proof, evidence, gates, or decisions.
MBSE and SysML v2 view and relation practiceAdapt model-derived flow views and path views as Description-episteme source relations.A model-derived flow view states source, selection, hidden or lost structure, and admissible use.Tool models do not override FPF E.18 or C.30 relations.
Neural-network dataflow and GonzoML architecture-operation corpusAdopt practitioner flow-structure recognition for block replacement, path-selection, memory and cache placement, MoE expert-selection, pruning, distillation, ablation, and compute, memory, and latency tradeoffs.Keep block, cache, expert, router, gate, and similar words as C.30.STRAT source labels until the flow or transduction structure is recovered; C.30.TGA-FLOW-REL applies only when that recovered structure changes the architecture move.Benchmarks, ablations, pruning masks, or architecture-search outputs do not become evidence sufficiency, assurance, gate passage, or architecture decision by themselves.
Theory of Code Space and arXiv:2603.00601 code-agent relation graph probingAdapt relation graphs with source observation class selected from {observed, inferred, unknown} and partial-observability warnings.Generated code relation graphs can be used for flow relation only with typed relation semantics, source pins, unexplored regions, and source return.Do not mint U.CodeSpace; do not treat probe output as internal belief proof, architecture adequacy, assurance, or release evidence or release claim.

Currentness front. The governing currentness sources are E.18 object semantics and pins, C.30 and C.30.ASV architecture-side relation law, the source observation class, and the non-flow governing patterns named in C.30.TGA-FLOW-REL:4.3. When one changes, the relation changes only at the affected reference, correspondence, source-return condition, admissible-use boundary, or governing-pattern assignment.

C.30.TGA-FLOW-REL:12 - Relations

Builds on: C.30, C.30.ASV, A.22, A.6.F, E.18, E.17, E.17.0, A.7, E.10, C.2.P, and F.18.

Coordinates with: C.30.STRAT, A.15, A.20, A.21, A.10, G.6, B.3, C.28, C.29, C.16, admitted measurement, selection, or candidate-set governing patterns when those claims are being made, InterfaceSignatureBoundaryNote, and the module-and-interface repair pattern when a module or interface claim is being made.

Neighboring claims stay with their governing patterns: C.30.STRAT for stratification wording and source-label repair, E.18 for graph, path, crossing, and flow-valuation discipline, C.30 for grounded architecture and selected-structure adequacy, C.30.ASV for architecture structural-view adequacy, A.6.F for function-use repair, and the non-flow governing patterns named in C.30.TGA-FLOW-REL:4.3. C.30.TGA-FLOW-REL governs only the architecture-TGA flow-structure relation being claimed.

C.30.TGA-FLOW-REL:End

Modularity and Reusable Structure Characteristics

Type: Characterization pattern Status: Stable Normativity: Normative unless explicitly marked informative

Problem frame

Use this pattern when modularity or reusable-structure language is doing work in an architecture discussion and the practitioner needs to know which few characteristics matter, what repair follows, and whether any measurement or comparison is admissible.

The first useful move is deliberately small:

ModularityVectorLite:
  describedHolonRef:
  boundedContextRef:
  architectureClaimRef?:
  structureKindRefs:
  threeLiveCharacteristicsAtMost:
  observedProblem:
  repairDirection:
  relatedClaimGovernanceIfClaimed:
  nonAdmissibleOverread:
  stopCondition:

Start with recognition, at most three characteristics under evaluation, the observed problem, and a repair direction. A report-only proxy is an admissible stop when no beyond-local-repair use is being made.

Claim-use boundary: comparison, publication, evidence, assurance, gate, decision, benchmark, causal-use, cross-case reuse, selection, procurement, and architecture scale-preference are beyond-local-repair uses in C.31. Add their fields only when that use is being made and recoverable by value and the governing pattern can be named.

What goes wrong if C.31 is missed: "modular" becomes a binary label; a single modularity score hides incompatible characteristics; interface publication is confused with substitutability; internal cohesion is improved while evidence reuse gets worse; bespoke residue moves from templates into work or assurance; and complexity language becomes a commensurable score without a declared characteristic, scale, measurement basis, comparison basis, or admissible-use boundary.

What C.31 buys in practice: the practitioner can see which modularity characteristic changes the next move, which false use is blocked, which repair is plausible, and which governing pattern governs measurement, evidence, causal, scale, selection, or accounting claims.

Not this pattern when the question under repair is only source-label recovery, module-interface relation repair, reusable-structure accounting, general measurement legality, quality-family claim, architecture scale-preference claim, mathematical-lens use, candidate architecture synthesis, or selection. Use [C.30.STRAT](/generated/patterns/C.30.STRAT), [A.6.M](/generated/patterns/A.6.M), [C.31.RSA](/generated/patterns/C.31.RSA), [C.16](/generated/patterns/C.16), [C.25](/generated/patterns/C.25), [C.31.ASAP](/generated/patterns/C.31.ASAP), [C.29](/generated/patterns/C.29), [G.5](/generated/patterns/G.5), or [C.11](/generated/patterns/C.11) as appropriate; do not treat C.31 as the synthesis or selector pattern.

Problem

Architecture work often asks for more modularity, better reuse, lower coupling, more explicit interfaces, cleaner allocation, or less bespoke residue. These phrases point to real engineering work, but they do not name one scalar property.

Modularity can improve along one characteristic while worsening another. A design can reduce external coupling and increase interface alphabet size. A platform can standardize interfaces and create unhelpful rigidity. Evidence reuse can improve while functional-to-module allocation remains tangled. A report can show a high reuse share while hiding source-return work or residual uncertainty.

C.31 turns modularity talk into a small characteristic vector plus repair direction. It does not promise that every characteristic is measurable now, comparable across cases, causal, admissible for decision use, or evidence-backed.

Forces

ForceTension
Fast architecture repair vs measurement legalityPractitioners often need the next modularity move before a full measurement template exists.
Characteristic plurality vs scalar pressureDifferent modularity interpretations have different subjects, scales, evidence, declared measurement or comparison basis, governing-pattern needs, and risks; one score hides that plurality.
Useful proxy vs proxy substitutionA cheap share, count, or graph interpretation can guide local repair, but it may become a false quality, evidence, or decision claim.
Module-interface view vs broader structureModularity can involve functions, flows, control, work, evidence, data, placement, or scale, not only modules.
Local repair vs cross-case publicationA local diagnosis can stop at report-only use; cross-case comparison needs C.16, C.25, G.2, and possibly G.5 or C.11 claim-governance assignment.
Complexity pressure vs complexity ontologyResidual pressure and growth signals are useful, but complexity is not one commensurable architecture characteristic.

Solution

C.31 governs modularity and reusable-structure characteristics as C.16-compatible characteristic heads, composite descriptions, lens-backed characteristic interpretations, temporal or scale-sensitive characteristic interpretations, causal-use-sensitive characteristic interpretations, or report-only proxies. It starts from action guidance and adds fields for beyond-local-repair use only when a use being made requires them.

Ordinary output: ModularityVectorLite

ModularityVectorLite is the ordinary output. It names at most three characteristics under evaluation because the first task is to find the next repair, not to audit all possible modularity interpretations.

ModularityVectorLite:
  describedHolonRef:
  boundedContextRef:
  architectureClaimRef?:
  structureKindRefs:
  threeLiveCharacteristicsAtMost:
    - characteristicRef:
      currentCue:
      repairDirection:
      claimUseClass:
      forbiddenOverread:
  observedProblem:
  relatedClaimGovernanceIfClaimed:
  stopCondition:

The vector is complete enough when it states what can be done next and what cannot be inferred. If a characteristic is used beyond local repair, use the appropriate card and governing pattern; architecture scale-preference claims are governed by [C.31.ASAP](/generated/patterns/C.31.ASAP).

Filled ModularityVectorLite

ModularityVectorLite:
  describedHolonRef: ProductPlatform@FieldPumpFamily
  boundedContextRef: FieldServiceAndProcurement@2026Q2
  architectureClaimRef?: ArchitectureOf@PumpControllerPlatform
  structureKindRefs: ModuleInterfaceStructure, EvidencePackageStructure
  threeLiveCharacteristicsAtMost:
    - characteristicRef: InterfaceStandardizationShare
      currentCue: controller ports are named by the same API family, but three field variants still require adapter-specific wiring.
      repairDirection: narrow the interface grammar and name the allowed variation before counting the interface as standardized.
      claimUseClass: local repair cue
      forbiddenOverread: the public API label is not substitutability or procurement suitability.
    - characteristicRef: SubstitutabilityWidth
      currentCue: two alternate controller boards pass the bench test, but only one has the required thermal envelope and connector constraints.
      repairDirection: state the substitution conditions and the exception before using the alternative count.
      claimUseClass: report-only proxy until C.16 or selection use is being made
      forbiddenOverread: the alternate-board count is not a selection result.
    - characteristicRef: EvidenceReuseShare
      currentCue: electrical-safety evidence is reused, while environmental evidence is recreated per enclosure variant.
      repairDirection: split reusable evidence package from variant-specific evidence and add source-return condition.
      claimUseClass: local repair cue with possible evidence-package use
      forbiddenOverread: reused evidence is not assurance sufficiency.
  observedProblem: the team says the platform is modular because interfaces are public and evidence is reusable, but field replacement and certification still create variant-specific work.
  relatedClaimGovernanceIfClaimed: A.6.M for the module-interface relation; C.31.RSA if report-only share becomes reusable-structure accounting; A.10 or B.3 only if evidence or assurance use is being made.
  stopCondition: stop at local repair until measurement basis, comparability basis, and any selection or assurance use are declared by their governing patterns.

Near miss: a high interface-standardization count alone is not a C.31 improvement. If field-service work, source-return events, or variant-specific evidence increase, the vector records that proxy divergence and returns to repair rather than treating the count as architecture quality.

Characteristic classes

Every C.31 head is classified before use:

ClassUseBoundary
DirectCharacteristicA C.16-governed characteristic can be named with subject, scale, unit or unitless interpretation, declared measurement basis, comparability basis, and repair move.It is not automatically a score or decision selector.
CompositeCharacteristicDescriptionThe head is a bundle or description with sub-slots, such as function-module alignment or flow-boundary alignment.Do not pretend the bundle is one raw measure.
LensBackedCharacteristicThe head depends on a model description or mathematical lens, such as compression or RG or coarsening lens.Apply C.29 for lens use that changes action.
TemporalOrScaleCharacteristicThe head depends on time window, repeated instance, scale variable, aggregation scope, or source-return condition.Apply C.31.ASAP for architecture scale preference, C.27 for temporal adequacy, and C.18.1 or C.19.1 when scale-law or general BLP preference claims are being made.
CausalUseSensitiveCharacteristicThe interpretation is used to claim effect or intervention success.Apply C.28 before relying on the claim causally.
ReportOnlyProxyThe interpretation is only a local diagnostic or communication aid.State forbidden overread and the governing pattern needed for any beyond-local-repair use.

In C.31, declared basis and comparability basis name C.16-compatible measurement or comparison fields. They are not generic reason words and are not substitutes for evidence, assurance, cause, source, decision, or architecture-description relations.

Measurement-head mapping

When a head becomes decision-facing or publication-facing, create MeasurementHeadMapping before relying on it:

MeasurementHeadMapping:
  sourceHead:
  knownMeasureFamilyOrPractice:
  fpfCharacteristicKind:
  scaleType:
  unitPolicy:
  declaredBasisNeeded:
  requiredEvidence:
  evidencePathRefs?:
  sourceRelationRefs?:
  evidenceClaimAbsentBecause?:
  commonFalseUse:
  nonAdmissibleUse:
  repairMove:
  governingPatternRef:

This mapping is not a measurement template by itself. It prepares a C.16-compatible characteristic card or a report-only boundary. When the head is decision-facing or publication-facing, the mapping names required evidence plus at least one evidence path or source relation. If no evidence claim is being made, evidenceClaimAbsentBecause states why the head remains local, report-only, or repair-only.

C.31 characteristic card

Use the full card only when the use goes beyond local repair:

ModularityCharacteristicCard:
  characteristicRef:
  subjectRef or relationSubjectTuple:
  characteristicClass:
  scaleRef:
  unitInterpretation:
  declaredBasisRef:
  comparabilityBasisRef:
  requiredEvidence:
  evidencePathRefs?:
  sourceRelationRefs?:
  evidenceClaimAbsentBecause?:
  proxyRisk:
  auditQuestion:
  nonAdmissibleUse:
  repairMove:
  relatedClaimGovernanceRefs:

Each card states its own C.16 well-formedness fields: characteristic, scale, unit or unitless interpretation, declared measurement basis, comparability basis, evidence path or evidence-claim-absent reason, non-admissible use, and repair move. When source material is used as evidence, the source relation is named. A source checklist, source-discharge slice, dashboard label, or inherited score is not enough.

Seed characteristic heads and repair moves

These heads are seeds, not an exhaustive taxonomy. Use only the heads that change the next move.

Characteristic headIntended characteristic interpretationTypical scale or value formDeclared measurement or comparison basisDefect signalRepair directionEscalation trigger
InternalCohesionDensityDensity of typed relations inside a proposed module.ratio or graph-derived valuetyped dependency graph or DSMproposed module has insufficient typed internal dependency basissplit the proposed module, move relations, or reclassify as component relationcomparison, clustering, or publication use
ExternalCouplingDensityCross-boundary dependencies per module or interface.ratio or distributiontyped dependency graph, interface graph, integration defectshidden external dependencies dominate module boundaryexpose dependency, revise interface spec, split context, or accept bounded exceptionintegration risk, assurance, or release claim
InterfaceAlphabetSizeCount or entropy-like variety of interface types.count or entropy-like valueinterface registrytoo many interface variants erase modular benefitreduce variants, introduce interface grammar, split context, or document exceptionplatform grammar, candidate selection, or publication use
InterfaceStandardizationShareShare of interfaces conforming to declared specifications.ratio or percentageconformance tests and specificationsstandardization is low where reuse needs itdefine or narrow standards, add conformance tests, or stop at local exceptioncross-case comparison, certification, or procurement decision claim
InterfacePublicnessOpenness, publication, and vendor-neutrality value.ordinal or categorystandards, API specs, licensing, access termsopen label lacks substitution pathrecover interface spec, substitution policy, and conformance expectationopen-architecture claim, procurement decision claim, or publication claim
SubstitutabilityWidthNumber or diversity of compatible alternatives for a slot or interface.count or diversity valueapproved implementations, vendors, testsonly one viable implementation existsrepair interface spec, loosen unnecessary coupling, or mark single-source exceptioncompetition, platform, or decision claim
ModuleTypeReuseRateInstances per module type or template.ratio or countproduct-line records, bills of material, template recordsreuse is claimed only by repeated namingdefine module type, allowed variation, and measurement basiscross-case reuse or product-line publication
TemplateCompressionGainDescription saving from template plus parameters compared with instance-by-instance descriptions.ratio or bits under declared methodcorpus or model-description methodcompression erases safety, legal, or source distinctionsadd source-return condition, split template, or apply C.29lens-characteristic or effect claim, publication, or decision use
FunctionModuleAlignmentCharacteristicFunctional elements and module relations align without unmanaged many-to-many exceptions.vector, ordinal, or bundle descriptionfunctional view and module relation recordsallocation hides many-to-many exceptionssplit function from module claim, revise allocation, or add correspondencecandidate decomposition or quality-composition claim
FlowModuleBoundaryAlignmentCharacteristicFlow topology crosses declared interfaces rather than hidden channels.vector, ordinal, or bundle descriptionTGA path and interface refsflows bypass declared module boundariesexpose crossing, revise interface, or apply C.30.TGA-FLOW-REL for the architecture-flow claimarchitecture-flow publication or assurance claim
ControlStructureSeparationCharacteristicControl responsibilities, rates, and boundaries are explicit enough for the architecture move.ordinal or vectorLCA or control description and temporal adequacy basiscontrol relation is hidden inside module labelapply C.30.LCA, C.27, A.3.3, or B.3 when a control, temporal, dynamics, or assurance claim kind is being madestability, assurance, or gate use
HiddenCouplingDiscoveryRateHidden dependencies discovered after integration or change.ratedefect and change recordsdependencies appear lateexpose side channel, revise interface spec, add sentinel, or reopen boundaryintegration risk, repeated release, or assurance claim
CrossBoundaryChangeReachHow many modules, views, or work items a local change touches.distributionchange-impact recordslocal change travels farther than claimedsplit relation, add interface grammar, revise allocation, or source returnrelease, decision, or comparison claim
WorkRepeatabilityShareDelivery, operation, or test work under repeatable method descriptions.ratiowork records and method descriptionswork repeats as bespoke effortmove repeated work into MethodDescription or accept exceptionwork planning, evidence reuse, or scale use
EvidenceReuseShareEvidence package items reused across instances or contexts.ratioevidence graph and validity contextevidence is recreated or mis-scopedmove repeated evidence into reusable evidence or assurance packagecertification, safety-case, or assurance claim
RegulatoryBespokeResidueOne-off regulatory or acceptance content not covered by reusable structures.ratio or ordinalsafety, approval, or regulatory recordseach instance needs new regulatory argumentisolate residue, add reusable evidence package, or keep bounded exceptionsafety case, approval, or publication claim
LearningTransferCoefficientImprovement transfer from one instance or run to subsequent instances.slope or elasticityrepeated work data and learning curve recordsimprovement claim hides time or causal assumptionsapply C.27 for temporal adequacy and C.28 for causal usecausal, benchmark, or scale-preference use
BespokeResidueShareShare of structure not covered by reusable templates or rules.report-only share unless C.16 measurement basis is declaredRSA description and exception registerresidue is hidden under reuse scoreuse C.31.RSA and source-return conditionaccounting, comparison, or decision claim
RGFlowStabilityStability of characteristic vector across declared coarse-graining scopes.vector or ordinaldeclared multi-scope architecture graphscoarse-graining hides lower-scope hazardsapply C.29 for lens use and C.31.ASAP when an architecture scale-preference claim is being madeRG, scale, or lens transfer use
ExceptionCurveSlopeChange in one-off exceptions over a scale variable.slopeexception records against scale variableexceptions grow with scaleapply C.31.ASAP or accept bounded exceptionscale preference, publication, or decision claim

Claim-scoped residual heads

C.31 uses residual heads only as qualitative repair cues. These heads do not create one complexity characteristic.

HeadMeaningRelated claim governanceRiskRepair direction
ComplexityGrowthPressurePressure to add, split, mediate, or stabilize a declared aggregation scope, interface grammar, control relation, evidence scope, work-method scope, abstraction scope, or source-return condition.C.30.ILC, C.31.ASAP when an architecture scale-preference claim is being made, G.5, C.11treating more apparatus as progressname the pressure and the repair direction; use set-return or decision patterns when the corresponding claim is being made
FrustrationResidualPersistent cross-scope residual after local repair.C.30.ILC, C.29-local cross-scope lens claimturning a lens-backed interpretation into proofkeep as residual cue or apply C.29 or C.30.ILC
ConflictResidualSlopeResidual grows or shrinks over declared scale variable, scale window, or coarse-graining scale.C.31.ASAP, C.29, C.27, C.18.1, C.19.1treating two points as universal lawdeclare window, lens-use boundary, and measurement basis or stop at report-only
DeclaredScopeAdditionCostAdded work, evidence, change-policy, latency, observability, accountability, or interface cost from a new declared aggregation or control scope.C.16, C.31, C.30.LCAignoring the cost of added structureidentify cost bearer and apply the measurement pattern if used for comparison
BespokeResidueGrowthOne-off exceptions grow with deployment spread, regulation, or project repetition.C.31.RSA, C.31.ASAP when an architecture scale-preference claim is being madeassuming all bespoke work is badsplit useful exception from repairable residue
InterfaceAlphabetGrowthInterface variants grow faster than reuse, substitutability, or integration payoff.A.6.M, C.31premature standardizationadd platform grammar, split context, or accept bounded variation
SourceReturnCostFrequency or cost of returning from a compressed, indexed, coarse, extracted, or accounting view to source-side structure records.C.29, source-return discipline, A.10over-compressionadd source-return condition or reduce compression
ControlNestingDepthRiskNested control relations create latency, accountability, observability, stability, or assurance cost.C.30.LCA, C.27, B.3, A.3.3LCA-as-proofapply control, temporal, assurance, or dynamics governing patterns when the corresponding claim is being made

Proxy-risk discipline

Every decision-facing C.31 card includes ProxyRisk and AuditQuestion. If the proxy diverges from the value it was meant to represent, the card stops at report-only use or returns to repair.

HeadProxy riskAudit question
ExternalCouplingDensityTeams hide dependencies instead of reducing them.Did integration failures or source-return events fall?
InterfaceStandardizationSharePremature standardization blocks useful variation.Did exception slope or workarounds rise?
InterfacePublicnessOpen label without substitutability.Are alternative implementations actually viable under declared conditions?
TemplateCompressionGainCompression erases safety, legal, or source distinctions.Did source-return events or bounded exceptions rise?
EvidenceReuseShareReused evidence becomes stale or mis-scoped.Does evidence remain valid in the new context?
RGFlowStabilityCoarse-graining hides lower-scope hazards.Are source-return conditions triggered?

Rejected shortcut

The expression ModularityScore = average(all measures) is not admissible as a C.31 result. A local score is admissible only when the scoring method, codomain, polarity, characteristic basis, comparability basis, and use boundary are disclosed through the governing scoring or comparator pattern. Without that, keep the result as report-only or return to ModularityVectorLite.

Lowering and currentness conditions

Lower or reopen a ModularityVectorLite, ModularityCharacteristicCard, or report-only proxy when any of these conditions changes the characteristic use:

  • proxy audit worsens, such as more integration failures, workarounds, source-return events, stale evidence reuse, or bounded exceptions;
  • measurement basis, comparability basis, scoring method, codomain, polarity, unit policy, or declared characteristic basis changes;
  • evidence path, source relation, evidence-claim-absent reason, or source-return condition changes;
  • described holon, bounded context, architecture claim, structure kind, characteristic head, or repair direction changes;
  • a report-only proxy is used for comparison, selection, publication, assurance, benchmark, causal-use, cross-case reuse, decision, procurement, or architecture scale-preference;
  • C.31.RSA, C.31.ASAP, C.16, C.25, C.29, C.30.STRAT, A.6.M, C.30, C.30.ASV, A.10, B.3, A.20, A.21, G.5, or C.11 changes the boundary for the neighboring claim being made.

Admissible repair results are: keep the result report-only, split or rename the characteristic head, update basis or evidence fields, revise the repair direction, change relatedClaimGovernanceIfClaimed, lower a score to a local proxy, or stop C.31 use for the beyond-local-repair claim and use the governing pattern.

Archetypal Grounding

Tell. Modularity is a vector of action-guiding characteristics, not a magic scalar. A good C.31 interpretation says what to repair next.

Show. A product architecture can have high interface standardization and still poor substitutability. A software-system architecture can reduce external coupling while increasing hidden data custody. A safety-case architecture can reuse evidence while increasing regulatory bespoke residue. Each case needs a different characteristic and a different repair.

Show. A DSM or dependency graph can substantiate a modularity interpretation, but the graph does not by itself say which dependency kind matters, what scale applies, whether the interpretation is comparable, or what action follows.

Holon and episteme: architecture and modules are selected structures of described holons; the described holon may be a system, episteme, method, organization, publication family, or another structured holon. C.31 heads, cards, vectors, and report-only proxies are characteristic records, declared-measurement-basis records, comparability-basis records, or report-only records about those structures.

Bias-Annotation

Bias riskC.31 repair
Scalar biasRefuse one modularity score unless scoring method and comparability basis are declared.
Measure-first biasStart with ModularityVectorLite and repair direction before C.16-heavy fields.
Interface-publication biasTreat public interfaces as only one possible basis for substantiating substitutability.
Proxy biasAdd ProxyRisk and AuditQuestion to every decision-facing card.
Complexity umbrella biasKeep residual heads claim-scoped and apply scale, RG, or lens governing patterns when those uses are being made.
Source-label biasTreat software, neural-network, chiplet, safety-case, product-line, block, layer, expert, cache, router, and gate labels as source examples until C.30.STRAT and the governing pattern recover the FPF characteristic subject, structure, scale, and admissible use.

Conformance Checklist

IDCheck
CC-C31-1Ordinary use starts with ModularityVectorLite, three characteristics under evaluation at most, observed problem, repair direction, and stop condition.
CC-C31-2Each characteristic head under evaluation is classified as DirectCharacteristic, CompositeCharacteristicDescription, LensBackedCharacteristic, TemporalOrScaleCharacteristic, CausalUseSensitiveCharacteristic, or ReportOnlyProxy.
CC-C31-3A decision-facing or publication-facing head has MeasurementHeadMapping, C.16-compatible fields, and a required evidence path, source relation, or explicit evidence-claim-absent reason before it is relied on.
CC-C31-4Each characteristic row states at least one repair move or claim named by value-governance assignment.
CC-C31-5Report-only proxies state forbidden overread and do not establish beyond-local-repair use.
CC-C31-6Proxy-risk and audit-question fields are present for decision-facing cards.
CC-C31-7Complexity, residual, and growth heads remain claim-scoped cues; apply C.29, C.31.ASAP when an architecture scale-preference claim is being made, C.27, C.28, C.16, C.25, C.30.ILC, C.31.RSA, G.5, or C.11 when the corresponding claim kind is being made.
CC-C31-8No C.31 text treats modularity as a single quality proof, assurance proof, gate result, causal proof, or architecture decision.
CC-C31-9Any score discloses scoring method, codomain, polarity, characteristic basis, comparability basis, and use boundary through the governing pattern.
CC-C31-10SoTA seeds for DSM, modularity-index, empirical modularity, platform, evidence-reuse, Conway and mirroring, Amdahl, queueing, coordination-overhead, information-hiding, abstraction-leakage, or Goodhart and Campbell proxy-risk sources are converted into pattern-local G.2 rows before C.31 uses them for practitioner guidance being relied on.
CC-C31-11Source labels such as block, layer, expert, cache, router, or gate use C.30.STRAT before they become C.31 characteristic subjects, scale cues, repair moves, or proxy-risk rows.
CC-C31-12A vector, card, or report-only proxy states a lowering or reopen condition when proxy audit worsens, measurement or comparability basis changes, evidence path or source relation becomes stale, characteristic head changes, or a related governing pattern changes.

Common Anti-Patterns and How to Avoid Them

Anti-patternSymptomRepair
ScalarModularityScoreA single score claims architecture quality.Replace with ModularityVectorLite, disclosed scoring basis and governing pattern, or report-only boundary.
UntypedMeasureListA table of heads appears without characteristic, scale, declared measurement basis, or repair move.Classify heads and create C.16-compatible cards only where the recovered claim needs them.
MeasurementBeforeRepairThe practitioner is asked for full measurement before one useful move exists.Start with three characteristics under evaluation and repair direction.
OpenInterfaceEqualsModularInterface publication is treated as modularity.Apply relation repair through A.6.M and characterize only the interface or substitutability head under evaluation.
ComplexityAsOneCharacteristicAlgorithmic cost, graph-connectivity cost, policy and approval cost, evidence-maintenance cost, and cognitive cost are averaged.Keep residual heads claim-scoped and apply lens or measurement patterns when those uses are being made.
ProxyBecomesValueA report-only proxy becomes a beyond-local-repair claim.State forbidden use and use the governing pattern before relying on that claim.

Consequences

Benefits:

  • Modularity becomes action-guiding without becoming one fake score.
  • Cheap repair remains possible before measurement.
  • Characteristic, declared-measurement-basis, comparability-basis, proxy-risk, and governing-pattern boundaries are visible.
  • DSM, MOSA, platform, product-line, and architecture-operation sources can inform practice without importing their ontology wholesale.

Costs:

  • Familiar score language often has to be downgraded to report-only use.
  • Cross-case comparison requires additional C.16, C.25, G.2, comparator, evidence, or decision claim.
  • Some attractive "complexity" statements are assigned to characteristic named by value, lens, or residual cue rather than becoming a general complexity pattern here.

Rationale

C.31 is a characterization pattern because modularity and reusable-structure talk changes engineering action through characteristics: coupling, cohesion, interface variation, substitutability, reuse, evidence reuse, hidden coupling, source-return cost, and residual growth. Those heads are useful only when their subject, scale, declared measurement or comparison basis, false use, and repair move are visible.

The pattern puts ModularityVectorLite first to preserve affordability. Many practitioners need to see one relation to repair, one interface grammar to tighten, or one residue to account for. Requiring the full measurement apparatus too early would turn C.31 into a control form and would violate the architecture source invariant: repair succeeds only when one useful admissible action remains.

The pattern rejects a single complexity or modularity score because selected heads are not automatically commensurable. When a local score is genuinely useful, it belongs under disclosed scoring, comparator, characteristic, declared-measurement-basis, and governing-pattern discipline.

SoTA-Echoing

Source or practiceCurrentness or lineage useAdopt and adapt for C.31Rejected overreadPractitioner implication
DSM and dependency-structure practice (https://dsmweb.org/design-structure-matrix-dsm/; https://dsmweb.org/introduction-to-dsm/)Mature and still-used architecture-analysis practice for dependency representation, clustering, and compact dependency communication.Adopt typed dependency analysis as a possible declared measurement or comparison basis for specific C.31 heads such as InternalCohesionDensity, ExternalCouplingDensity, InterfaceAlphabetSize, and HiddenCouplingDiscoveryRate.A dependency matrix is not architecture, proof, complete modularity, assurance, or decision by itself.A dependency graph helps only after dependency kind, subject, scale, repair direction, and non-admissible use are declared.
Cabigiosu and Camuffo, "Measuring Modularity" (https://doi.org/10.1109/TEM.2016.2614881)Published modularity-measurement source used as measure-plurality lineage, not as a universal current scoring rule.Adopt the result that modularity measures answer different engineering or management questions; adapt it into Characteristic plurality vs scalar pressure, MeasurementHeadMapping, and proxy-risk fields.One measure family is not universal modularity adequacy and does not settle architecture quality.The practitioner asks which characteristic changes action before choosing any measure family.
Jung and Simpson modularity indices for DSM-based assessment (https://pure.psu.edu/en/publications/new-modularity-indices-for-modularity-assessment-and-clustering-o/)Product-architecture and DSM-index lineage for index choice, clustering, and assessment variation.Use as evidence that index choice depends on architecture type, dependency kind, and measure purpose; adapt by requiring characteristic, scale, measurement basis, comparability basis, and forbidden overread.One modularity index is not FPF architecture quality, architecture adequacy, or decision authority.Index use requires declared structure, dependency type, scale, and non-admissible overread before publication, comparison, or decision use.
MOSA and open systems practice (https://www.cto.mil/sea/mosa/; https://www.cto.mil/wp-content/uploads/2025/03/MOSA-Implementation-Guidebook-27Feb2025-Cleared.pdf)Current engineering and acquisition practice family for modular interfaces, conformance, severable components, replacement, and supplier diversity.Adopt the pressure to make interface standards, conformance, substitutability, and supplier-diversity relations explicit; adapt by applying A.6.M before C.31 characterizes InterfacePublicness, SubstitutabilityWidth, or related heads, and by applying G.5 or C.11 to supplier-set selection or procurement decision use when that use is being made.Open, public, platform, API, conformance, or supplier-diversity label is not modularity, procurement suitability, or a beyond-local-repair claim by itself.Open-system conformance and substitution claims may change C.31 repair only after the module-interface relation is repaired; procurement and other beyond-local-repair uses require their governing pattern.
Platform and product-line engineering practice (https://tag-app-delivery.cncf.io/fr/whitepapers/platform-eng-maturity-model/; https://www.sei.cmu.edu/library/variability-in-software-product-lines/; https://arxiv.org/abs/2605.21353)Mature product-line variability lineage plus current platform-engineering maturity-model and current SPLE-review cues; used for variability-slot, extension-rule, reuse, and exception-residue characteristic discipline.Adopt variability slots, extension rules, template records, product-line records, allowed variation, and exception-residue tracking as possible C.31 characteristic subjects or declared measurement bases.A platform or product-line label is not modularity value, reusable-structure proof, architecture scale-preference evidence, procurement suitability, or decision authority.The practitioner names which characteristic changes action: interface standardization, module-type reuse, template compression, bespoke residue, exception curve, or the governing pattern for a beyond-local-repair claim being made.
Conway and mirroring, information-hiding, effective-interface, and abstraction-leakage lineageSocio-technical and interface-boundary sources used as holon-architecture lineage, not as software-only ontology.Adopt declared correspondence across role and enactor structures, work and procedural structures, and module-interface structures; separate explicit interface specification from observed or implicit interface; recover hidden coupling and source-return conditions.Team boundary, delivery unit, documented interface, or abstraction label is not module boundary, substitutability, modularity quality, or decision by itself.The practitioner separates team and work structure, explicit interface, implicit dependency, and modularity characteristic before claiming improvement.
Amdahl, queueing, and coordination-overhead laws (https://www.cs.cmu.edu/~18742/papers/Amdahl1967.pdf; https://arxiv.org/abs/1306.3302; https://arxiv.org/abs/2603.20654)Mature mathematical law and queueing lineage plus current extension sources for communication, synchronization, and scalable-workload-fraction limits.Adopt serial fraction, synchronization, communication overhead, WIP, waiting, bottleneck, and partitionability as possible C.31 defect signals; apply C.29, E.18, or C.30.TGA-FLOW-REL when mathematical speedup or flow claims are being made.More modules, teams, services, paths, processors, accelerators, or work partitions are not improvement by count.A module split is evaluated by changed characteristics and bottlenecks, not by decomposition count.
Goodhart and Campbell proxy-pressure laws and holon-architecture trade-off disciplineGeneral proxy-risk and trade-off lineage for architecture characteristic use.Adopt vector and trade-off discipline plus proxy-risk discipline: no single modularity score, reusable share, benchmark, or index establishes value or beyond-local-repair use without the governing pattern for that use.One declared measure value, benchmark, reusable-share number, or modularity index is not architecture value or decision authority.The practitioner states which characteristic changes action and which proxy overread is blocked before comparison or decision.
Architecture-operation language, with neural-network and software-system discussions as source examples, including the GonzoML architecture-operation intakeCurrent practitioner-language source for replacement, selection, pruning, distillation, ablation, block substitution, memory or cache placement, gating, routing, and architecture search; not used as a standard.Adopt operations as recognition cues for structure, relation, flow, scale, or candidate-set repair under consideration; keep block, layer, expert, cache, router, and gate as C.30.STRAT source labels until the FPF characteristic subject, relation kind, scale, and admissible use are recovered.Block, layer, expert, cache, router, gate, benchmark, ablation, pruning, or distillation label is not an FPF characteristic by default.The operation points to a possible characteristic; it does not name the characteristic until the FPF kind, subject, scale, and admissible use are recovered.

Source-currentness front. Use the table's Currentness or lineage use cell as the source-use boundary. A lineage row can explain why a characteristic family matters, but it cannot establish current comparison, procurement, assurance, benchmark, decision, publication, or other beyond-local-repair use without a current source relation under G.2 or the governing pattern for that use. Refresh the source use when MOSA or acquisition guidance changes, platform or product-line practice changes, DSM or modularity-index practice changes, queueing or coordination-overhead assumptions change, proxy-pressure law is used for a new claimed value relation, or architecture-operation language is used as current practice rather than as source-side recognition language. When refresh changes the source role, update the affected characteristic head, proxy-risk field, audit question, related claim governance, or report-only boundary rather than treating the older source as current by default.

Rows named current, such as MOSA guidance, current platform practice, current scalable-workload extensions, or current architecture-operation corpus material, require source refresh before beyond-local-repair use when the named practice changes. Rows named lineage stay lineage unless a current source relation is explicitly recovered.

Older or local sources may serve as lineage or worked examples only when the row says so. They do not stand in for current competitive source, and they do not make a modularity value admissible for beyond-local-repair use without the governing pattern for that use.

Relations

PatternRelation
C.30.STRATRecovers source labels such as layer, level, tier, stack, block, expert, cache, router, and gate before C.31 uses any recovered characteristic subject, scale cue, repair move, or proxy-risk row.
A.6.MRepairs module-interface relations before C.31 characterizes modularity.
C.31.RSAGoverns reusable-structure accounting, bespoke residue, and report-only shares.
C.31.ASAPGoverns architecture scale-preference claims after C.31 names the scale-sensitive characteristic, scale variable or window, and repair direction.
C.16, A.17, A.18, A.19Govern characteristic, scale, coordinate, score, unit, comparability, and measurement legality.
C.25Governs broader quality-family Q-Bundles when modularity is used in a quality claim.
C.30 and C.30.ASVGovern architecture claims and structural views that supply C.31 subjects.
C.30.ILCGoverns cross-scope residual and frustration recognition when architecture move triage is being made.
C.29Governs mathematical-lens use such as compression, RG, epiplexity, or graph-lens transfer.
C.27, C.18.1, C.19.1Govern temporal and set-dynamic claims such as learning transfer, exception slope, and scale-window movement.
C.28Governs causal-use claims.
A.10, B.3, A.20, A.21Govern evidence, assurance, gate, safety, and release claims.
G.2, G.5, C.11Govern SoTA basis, set-return selection, and local decision claims. Candidate-generation or architecture-synthesis claims stay outside C.31 unless G.5, C.11, or a named architecture-synthesis governing pattern governs that claim; C.31 records only modularity or reusable-structure characteristic use and report-only boundaries.

C.31:End

Reusable Structure Accounting

Type: Characterization pattern Status: Stable Normativity: Normative unless explicitly marked informative

Problem frame

Use this pattern when a practitioner needs to locate where reusable structure lives, where bespoke residue grows, which accounting basis is being used, what can be refactored, and what remains a bounded exception or source-return condition. A report-only share stays report-only unless the relevant outside-RSA use is governed by its governing pattern.

Claim-use boundary: comparison, publication, evidence validity, assurance or safety-case reliance, gate use, architecture scale preference, causal-use, selected-set publication, candidate-synthesis, and local decision are outside-RSA uses. C.31.RSA may state the reusable locus, bespoke residue, accounting basis, report-only share, repair direction, and source-return condition. Add those other claims only under their governing patterns when those claims are being made.

The first useful move is ReusableStructureTriage:

ReusableStructureTriage:
  describedHolonRef:
  boundedContextRef:
  architectureClaimRef?:
  structureRefs or structuralAspectRefs:
  whereReusableStructureCurrentlyLives:
  whereBespokeResidueCurrentlyGrows:
  residueRefactoredInto:
    template | interfaceSpecification | methodDescription |
    workStructure | evidencePackage | assuranceArgumentStructure | otherDeclared
  residueAcceptedAsBoundedException:
  sourceReturnCondition?:
  relatedClaimGovernanceIfClaimed:
  stopCondition:

Use the fuller accounting description only when an accounting basis and structure references are declared. Ordinary use stops when the practitioner knows where reusable structure lives, where bespoke residue grows, what can be refactored, and what remains a bounded exception.

What goes wrong if C.31.RSA is missed: a reusable share is treated as a proof of modularity; one-off work is hidden under a reuse label; evidence reuse is counted without validity context; hidden residual uncertainty is averaged with reusable templates; and "more reusable structure" is treated as always better.

What C.31.RSA buys in practice: the practitioner can state where structure is reusable, where it is bespoke, what source-side distinctions must remain reachable, and when the result is only report-only accounting.

Not this pattern when the question under repair is source-label recovery, module-interface relation repair, modularity-characteristic selection, measurement or comparability legality, architecture scale preference, mathematical-lens use, or any outside-RSA use named above. Use [C.30.STRAT](/generated/patterns/C.30.STRAT), [A.6.M](/generated/patterns/A.6.M), [C.31](/generated/patterns/C.31), [C.16](/generated/patterns/C.16), [A.10](/generated/patterns/A.10), [B.3](/generated/patterns/B.3), [G.6](/generated/patterns/G.6), [C.31.ASAP](/generated/patterns/C.31.ASAP), [C.29](/generated/patterns/C.29), [G.5](/generated/patterns/G.5), or [C.11](/generated/patterns/C.11) as appropriate; do not treat C.31.RSA as the synthesis or selector pattern.

Problem

Architecture teams often say that structure is reusable, repeated, templated, common, standardized, or bespoke. Those phrases are useful, but they do not say what is being counted, described, or compared. Structure can be selected from functions, flows, control relations, module interfaces, work methods, evidence packages, regulatory arguments, data schemas, deployment constraints, or exception networks.

Functional, flow, control, module-interface, work, evidence, and assurance structures may be included only when their declared accountingBasisRef and evidence relation named by value, assurance relation, source relation, or source-return condition are declared when those relations are being claimed.

The practical question is: which reusable loci matter, which bespoke residue remains, what source distinctions are lost by accounting, and what repair or source return follows?

Forces

ForceTension
Reuse visibility vs false proofReusable loci should be visible, but a share is not proof of quality, assurance, or architecture adequacy.
Accounting convenience vs heterogeneous structureTemplates, interface grammars, work methods, and evidence packages do not automatically share one unit.
Residue repair vs useful exceptionSome bespoke residue should be refactored; some should remain a bounded exception.
Compression vs source returnAccounting can summarize structure, but downstream action may require return to source-side records.
Local triage vs cross-case comparisonA local report-only share can guide repair; comparison needs declared scale, unit interpretation, admissible comparability relation, and comparator admission named by value.
Reuse value vs reuse costMore reusable structure can increase interface cost, evidence decay, or loss of needed variation.

Solution

C.31.RSA governs reusable-structure accounting as a typed description over declared structures and structural aspects. It starts with ReusableStructureTriage; it uses ReusableStructureAccountingDescription@Context only when the accounting basis is declared.

Typed accounting description

ReusableStructureAccountingDescription@Context:
  accountingBasisRef:
  structureRefs: FinSet(U.StructureRef)
  structuralAspectRefs: FinSet(StructuralAspectDescriptionRef)
  reusableStructureSlots:
  bespokeResidueSlots:
  hiddenOrResidualUncertaintySlots:
  slotBasisRefs?:
  admissibleAggregationRuleRef?:
  reportOnlyShares?:
  sourceReturnCondition?:
  admissibleUse:
  nonAdmissibleUse:

accountingBasisRef states the accounting rule being used: description length, dependency edges, work items, evidence package count, cost share, template instances, interface variants, regulatory case sections, or another declared accounting rule. The accounting rule is not implied by the word "reuse".

Well-formedness: every slot is over declared structureRefs, declared structuralAspectRefs, and one declared accounting basis. Slot labels are explanatory; they are not root kinds and are not automatically commensurable.

Explanatory slot labels

A local accounting description may use explanatory slot labels such as:

S_function
S_flow
S_control
S_type
S_interface
S_scale
S_work
S_evidence
S_changePolicy
S_unique
S_crossScopeUnique
H_residual

These labels are local slots, not FPF ontology. H_residual is residual uncertainty or unmodelled variance under the accounting basis. It is not obviously the same unit as interface grammar, work template, evidence package, or regulatory argument.

Report-only shares

ReusableStructureShare:
  report-only share over declared structureRefs and structuralAspectRefs
  under accountingBasisRef; not an architecture amount

BespokeResidueShare:
  report-only share under accountingBasisRef

HiddenOrResidualShare:
  report-only uncertainty or residue interpretation under accountingBasisRef

Numeric shares require a declared accountingBasisRef, declared scale or unitless-value rule, unit when relevant, polarity when relevant, admissible comparability relation, and comparator admission named by value such as CG-Spec, ComparatorSetRef, or a comparator-governing reference named by value before they can guide outside-RSA use such as comparison, ranking, selection, gate use, or decision use. Without that, the share remains local report-only guidance.

Pseudo-sum boundary

An explanatory decomposition may be useful:

total-described-structure under accountingBasisRef:
  reusable slots
  bespoke residue slots
  hidden or residual uncertainty slots

This is not ReusableStructureEquation, not an architecture amount, and not a hidden StructureAmount kind. It is a readable decomposition of one declared accounting description. If the slots do not share a declared accounting basis and comparability rule, they cannot be summed or ranked.

Structure-relocation moves

RSA is useful because it points to relocation and repair moves:

SituationRepair direction
Repeated delivery work contains structure that is not explicit in the work or method description being used.Move repeated structure into MethodDescription, work structure, or reusable work relation.
Repeated interface exceptions are handled one by one.Add or revise interface grammar, variability slots, or substitution policy under A.6.M.
An undocumented dependency crosses module or view boundaries.Expose the dependency, revise boundary, add correspondence, or add source-return condition.
Evidence is recreated for each instance.Move repeatable evidence into an evidence package, assurance argument record, or validity-context note.
Regulatory or safety-case residue remains one-off.Split reusable argument structure from context-specific exception; apply B.3 or G.6 for assurance or safety-case reliance.
Compression hides needed distinctions.Reduce compression, add source-return condition, or apply C.29 for lens-governed compression or reduction claims.
Bespoke residue protects necessary local variation.Keep it as a bounded exception with admissible use and non-admissible use.

High reusable structure is not always good. The architecture question is where structure lives and what action follows: reusable templates, interfaces, flows, control relations, work methods, evidence packages, or unique exception networks and hidden coupling.

After a relocation or reuse move, ask what got worse:

Reuse move may improveCheck what may worsen
Template reuseLoss of needed variation, hidden local exception, or stale source-return condition.
Interface grammarInterface relation cost, conformance work, change cost, migration cost, or substitution constraint.
Work-method reuseContext mismatch, extra handoff cost, slower local response, or hidden work exception.
Evidence-package reuseEvidence decay, validity-window mismatch, missing context witness, or assurance overread.
Assurance-argument reuseWeakest-link dependency, certification-window mismatch, or unexamined regulatory exception.
Compression or lens-backed accountingLost source distinction, observer-budget dependency, or C.29 stop-condition breach.
Bespoke-residue reductionReduced resilience, local-fit loss, or new hidden coupling.

The result is not "more reuse is better." A conforming RSA move states the reusable locus, the bespoke or residual locus, the accounting basis, the first repair direction, and the first cost, loss, or source-return condition that can make the move inadmissible.

Triage and accounting use boundary

Use only ReusableStructureTriage when:

  • there is one local case;
  • no outside-RSA use is being made;
  • the practitioner only needs a repair direction;
  • no numeric share is being relied on.

Use ReusableStructureAccountingDescription@Context when:

  • the accounting basis is declared;
  • a report-only share is useful;
  • structure refs or structural aspects need to be compared inside one declared accountingBasisRef;
  • source-return conditions matter;
  • reusable structure or bespoke residue is used for outside-RSA use such as cross-case report, publication, assurance, architecture scale preference, or decision.

Reopen and lowering conditions

An RSA result remains valid only inside its declared accounting basis, structure edition, source-return condition, and comparator admission. Reopen the triage or lower the admissible use when any of the following changes:

  • a hidden source distinction becomes action-relevant;
  • the accounting basis changes or proves heterogeneous;
  • the selected structure, structural aspect, interface grammar, evidence package, work method, or assurance argument changes edition;
  • a comparator set, CG-Spec, or outside-RSA use is added after a report-only share was recorded;
  • downstream reliance uses the RSA result for outside-RSA evidence, assurance, gate, causal-use, scale-preference, or decision work that the RSA note did not admit;
  • evidence validity, assurance window, or source-return condition decays;
  • a local bounded exception becomes repeated enough to require refactoring;
  • a reuse move improves one locus while worsening interface cost, variation loss, evidence decay, assurance work, source-return cost, or hidden bespoke residue.

Lower the result to report-only when outside-RSA comparison, ranking, selection, gate use, or decision use lacks comparator admission named by value. Lower it to quote-only or source cue when the accounting basis cannot be recovered. Mark it blocked when the reusable locus and bespoke-residue locus cannot be separated.

Archetypal Grounding

Tell. Reusable structure is not a substance. It is structure located in declared places under a declared accounting basis.

Show. In one architecture, reusable structure may be located in a template and interface grammar. In another, it may be located in a test package, regulatory argument, work method, or flow pattern. In a third, the reusable part may be small, but the bounded exception is exactly what preserves safety or local fit.

Show. A share can be useful as a local report. It becomes misleading when it hides which structure was counted, which structure was not counted, and when the reader must return to source records.

Holon and episteme: the structures being accounted over are selected architecture-relevant structures in context. The RSA description, slots, report-only shares, and source-return condition are accounting descriptions, slot-bearing records, report-only records, and source-return records about those structures.

Worked case: reusable evidence package, bespoke delivery work

Situation:

A regulated product line has reusable component templates and a reusable test package.
Each customer delivery still repeats approval work and bespoke integration exceptions.

ReusableStructureTriage:

describedHolonRef: product-line delivery system
boundedContextRef: regulated customer deployments, current qualification window
architectureClaimRef: ArchitectureOf@Context(product-line delivery)
structureRefs or structuralAspectRefs:
  component template structure
  interface grammar structure
  evidence package structure
  delivery work structure
whereReusableStructureCurrentlyLives:
  component template structure
  reusable test package
  interface grammar for standard variants
whereBespokeResidueCurrentlyGrows:
  customer-specific approval work
  integration exceptions outside interface grammar
  local evidence witnesses not covered by reusable package
residueRefactoredInto:
  workStructure + evidencePackage + interfaceSpecification
residueAcceptedAsBoundedException:
  customer-specific regulatory clause with declared non-admissible reuse
sourceReturnCondition:
  return to deployment evidence and regulatory exception record before assurance or gate use
relatedClaimGovernanceIfClaimed:
  `A.10` and `G.6` for evidence validity; `B.3` for assurance reliance; `A.6.M` for interface grammar; `C.16` if comparison is being made
stopCondition:
  report-only accounting unless comparator admission, evidence validity, and assurance validity are declared

Admissible move: publish the local report-only RSA note and repair the recurring delivery approval work into reusable work structure and reusable evidence structure. Non-admissible move: claim that the reusable evidence package proves every deployment or that a high reusable share makes the architecture better.

Anti-case: high share hides a bad architecture move

Situation:

A team reports that 85 percent of its architecture is reusable because most screens use one shared template.
The template makes many local exceptions necessary for product teams and side-channel integrations.

This is not a successful RSA result. The accounting basis counts template instances but hides interface relation cost, lost variation, hidden bespoke work, and evidence decay. The repair is to mark the share as report-only, add the missing bespoke-residue slots, and apply A.6.M, C.31, or an characteristic pattern governing the claim to the interface relation cost before any comparison or decision use.

Lowering replay: the team tries to use the 85 percent share to rank this template architecture above another product-line variant and approve the template program. The use is lowered to local report-only accounting because the comparator set, accounting-basis alignment, interface-cost measure, source-return condition, and decision record are absent. Before comparison or decision use, A.6.M must repair the interface grammar, C.16 or A.19 must govern comparability and characteristic space, and C.11 must govern the local decision claim.

Stop condition: do not use the 85 percent share for outside-RSA ranking, gate, assurance, or decision. Reopen the RSA note when the interface grammar, exception register, or comparator set changes.

Transfer case: neural-network block replacement

Situation:

A model architecture replaces a repeated attention block with a hybrid SSM-attention block.
The benchmark improves, but cache placement, memory access, and ablation evidence change.

RSA can transfer from product-line architecture to neural-network architecture only after [C.30.STRAT](/generated/patterns/C.30.STRAT) has treated block, cache, and related terms as source labels unless the reusable locus is already recovered. Then RSA names the declared structures and accounting basis:

  • reusable structure may be located in recovered repeated-block topology, dataflow pattern, cache-placement rule, or evaluation harness;
  • bespoke residue may be located in model-specific tuning, data distribution dependence, memory-layout exception, or ablation gap;
  • benchmark gain is not reusable-structure accounting by itself;
  • evidence claims apply [A.10](/generated/patterns/A.10) and [G.6](/generated/patterns/G.6); causal claims apply [C.28](/generated/patterns/C.28); mathematical-lens or compression claims apply [C.29](/generated/patterns/C.29).

Admissible move: record which recovered structural locus was reused, what changed, what source distinctions must remain reachable, and which governing pattern governs benchmark, evidence, causal-use, or mathematical-lens claims. Non-admissible move: treat "block replacement improved the architecture" as RSA proof.

Bias-Annotation

Bias riskC.31.RSA repair
Reuse-good biasDo not treat more reusable structure as automatically better. Ask what repair, cost, or source-return condition follows.
Share-proof biasDo not let ReusableStructureShare prove modularity, quality, or any outside-RSA use named in the claim-use boundary.
Hidden-unit biasDo not sum templates, interface variants, work items, and evidence packages without a declared accounting basis.
Residue-bad biasDo not treat every bespoke exception as waste. Some residue is a bounded exception that preserves local fit or safety.
Evidence-reuse biasDo not count evidence reuse without validity context and source-return condition.
Compression biasDo not let accounting hide distinctions needed for action, assurance, causal use, legal review, regulatory review, or subsequent decision reopening.

Conformance Checklist

IDCheck
CC-C31.RSA-1The text starts from ReusableStructureTriage unless an accounting basis and structure refs are already named.
CC-C31.RSA-2Any accounting description names accountingBasisRef, structureRefs, structuralAspectRefs, reusable slots, bespoke residue slots, residual uncertainty slots, admissible use, and non-admissible use.
CC-C31.RSA-3Report-only shares are marked report-only unless every outside-RSA use being made and named in the claim-use boundary is governed by its governing pattern.
CC-C31.RSA-4No text treats RSA as proof of modularity, quality, or any outside-RSA use named in the claim-use boundary.
CC-C31.RSA-5Heterogeneous slot labels are not summed unless a declared accounting basis and aggregation rule make the operation admissible.
CC-C31.RSA-6Each bespoke residue interpretation states a repair direction, bounded-exception condition, source-return condition, or governing-pattern application.
CC-C31.RSA-7Evidence reuse and assurance reuse apply A.10, B.3, or G.6 when validity, assurance, or safety-case reliance is being claimed.
CC-C31.RSA-8RSA does not duplicate the C.31 characteristic taxonomy; it uses C.31 only when a modularity characteristic under evaluation, such as bespoke residue, evidence reuse, or residual uncertainty, must govern the accounting interpretation.
CC-C31.RSA-9Source-return condition is present when accounting hides action-relevant source distinctions.
CC-C31.RSA-10Outside-RSA comparison, ranking, selection, gate use, or decision use names comparator admission named by value such as CG-Spec, ComparatorSetRef, or a comparator-governing reference named by value; otherwise the RSA share remains report-only.
CC-C31.RSA-11The RSA note names reopen or lowering conditions for source distinction change, accounting-basis change, structure-edition change, implicit-interface change, comparator change, evidence or assurance decay, downstream reliance, repeated bounded exception, and reuse move side effects when those conditions are needed for the record.
CC-C31.RSA-12Source labels such as block, layer, expert, cache, router, gate, or pruning mask use C.30.STRAT before they become structureRefs, structuralAspectRefs, accounting-basis fields, repair moves, or source-return conditions.

Common Anti-Patterns and How to Avoid Them

Anti-patternSymptomRepair
ArchitectureAmountA reusable share is treated as an amount of architecture.Restate as report-only share under one declared accounting basis.
ResidueIsWasteAll bespoke residue is marked bad.Split repairable residue from bounded exception.
HeterogeneousPseudoSumTemplates, interface variants, work items, evidence packages, and exceptions are summed as if they shared one unit.Declare accounting basis or keep the decomposition qualitative.
EvidenceReuseAsAssuranceEvidence reuse share is treated as assurance.Apply A.10, B.3, or G.6 for validity and assurance reliance.
RSAAsC31DuplicateRSA repeats every modularity characteristic.Keep RSA to reusable loci, bespoke residue, residual uncertainty, report-only shares, and source-return conditions.
NoSourceReturnAccounting hides source distinctions used by downstream action.Add sourceReturnCondition or narrow admissible use.

Consequences

Benefits:

  • Reusable structure and bespoke residue become visible without a false architecture amount.
  • Practitioners get a cheap triage before accounting.
  • Report-only shares can guide repair without becoming proof.
  • Evidence reuse, work repeatability, interface grammar, and bounded exceptions can be separated instead of averaged.

Costs:

  • Some attractive reuse reports remain report-only.
  • Numeric shares require declared accountingBasisRef, declared scale or unitless-value rule, relevant unit and polarity, admissible comparability relation, and comparator admission named by value before they can guide outside-RSA comparison, ranking, selection, gate, or decision use.
  • The pattern raises a source-return question whenever accounting hides distinctions needed by downstream action.

Rationale

C.31.RSA is separate from C.31 because accounting over reusable structure has a different reusable-structure accounting question from choosing modularity characteristics. C.31 asks which characteristic changes action. C.31.RSA asks where reusable structure and bespoke residue are located under a declared accounting basis.

The pattern refuses StructureAmount because architecture is selected structure in context, not a substance. A useful accounting description can still report shares, but only under declared structure refs, structural aspects, and an accounting basis.

The pattern also keeps residue ethically and practically neutral until interpreted. Bespoke residue can be a defect, a local necessity, a safety boundary, a regulatory constraint, or a deliberately accepted exception. The repair is to name which one.

SoTA-Echoing

Source or practiceCurrentness or lineage useAdopt and adapt for C.31.RSARejected overreadGoverning-pattern use and action consequence
C.25 Q-Bundle discipline inside FPFLanded FPF-local governing discipline for quality-family claims.Adopt separation of scope, measures, mechanisms, windows, evidence, and admissible use. In C.31.RSA this changes ReusableStructureShare: the share is report-only accounting under declared accountingBasisRef until the relevant outside-RSA use is governed by its governing pattern.A reusable-structure share does not replace the underlying Q-Bundle, description, evidence relation, or decision record.Apply C.25 and C.16 when reuse becomes a quality claim or measurement claim; the practitioner may report a share locally but must not use it as proof without the governing pattern for that use.
ISO/IEC/IEEE 42010:2022 architecture-description, viewpoint, model-kind, and correspondence discipline (https://www.iso.org/standard/74393.html; https://www.iso-architecture.org/ieee-1471/cm/)Current international standard and conceptual-model source for architecture-description and view discipline for this source-use decision.Adopt explicit architecture description, source view, viewpoint, model-kind, correspondence, and conformance pressure. In C.31.RSA this changes source-return use: reusable-structure accounting names the structure refs, source view or architecture-description refs, correspondence refs, and source-return condition before any cross-view share is used.A view, diagram, model kind, or correspondence label is not the reusable structure itself and does not make a share comparable, admissible for decision use, or assurance-bearing.Apply C.30, C.30.ASV, or E.17.0 when source views or architecture descriptions are being used; RSA may count only after the selected structure refs and accounting basis are recoverable.
Modular Open Systems Approach (MOSA) and open-system acquisition or engineering practice (https://www.cto.mil/sea/mosa/; https://www.cto.mil/wp-content/uploads/2025/03/MOSA-Implementation-Guidebook-27Feb2025-Cleared.pdf)Current engineering and acquisition practice family for modular interfaces, conformance, replacement, and supplier-diversity pressure.Adopt the pressure to make reusable interface, conformance, substitution, and supplier-diversity structure explicit. In C.31.RSA this changes interface reuse: reusable interface accounting remains report-only until A.6.M has repaired interface grammar, substitution policy, version or change policy, conformance work, source or evidence relation, and the supplier-diversity relation when that relation is being made.Open interface label, API label, platform label, or supplier-diversity goal is not reusable structure, procurement suitability, assurance, gate passage, or decision authority by itself.Apply A.6.M for interface grammar, substitution policy, version or change policy, conformance expectations, source or evidence relation, and supplier-diversity relation before RSA comparison or decision use; use G.5 or C.11 for supplier-set selection or procurement decision use when that use is being made.
DSM, dependency, and product-architecture practice, including Eppinger and Browning DSM lineageMature architecture-analysis lineage still used for dependency and product-architecture reasoning; lineage, not a complete current standard.Adopt typed dependency structures as possible source for reusable loci and bespoke-residue diagnosis. In C.31.RSA this changes dependency use: dependency counts, partitions, and clusters become candidate source fields only when declared structureRefs, structural aspects, and accounting basis are present.Dependency count, cluster count, or DSM modularity score is not architecture amount, quality proof, or decision verdict.Apply C.16 and C.31 for characteristic and scale legality; apply C.29 when graph, partition, compression, or C.29 lens-use result changes action.
Goodhart and Campbell proxy-pressure lawsGeneral proxy-risk lineage for report-only shares, reuse scores, and benchmark-like accounting.Adopt proxy-risk discipline for reusable-share use. In C.31.RSA this changes share use: a reusable-structure share remains report-only until the relevant outside-RSA use is governed by governing patterns.Reusable-share improvement, coverage improvement, or benchmark improvement is not value, assurance, evidence sufficiency, gate passage, or architecture decision by itself.Apply C.16, C.25, G.5, C.11, or the evidence and assurance patterns before a reuse number can guide selection or reliance.
System-evolution, information-hiding, and effective-interface lineageGeneral holon-architecture lineage for reusable structure that changes over time and hides variation-prone structure.Adopt evolution and hidden-change discipline. In C.31.RSA this changes residue interpretation: reusable loci, bespoke residue, hidden interface behavior, source-return conditions, and bounded exceptions are reopened when the structure edition, accounting rule, implicit interface, or reliance relation changes.One-time reusable-share accounting is not sustainable fitness; a stable-looking interface or template does not prove future substitutability.Reopen or lower the RSA result when hidden variation, implicit dependency, source distinction, or continuing adaptation changes the accounting meaning.
Software product-line engineering and variability-management practice, including Pohl, Boeckle, and van der Linden lineage plus current product-line and variability work (https://www.sei.cmu.edu/library/variability-in-software-product-lines/; https://arxiv.org/abs/2605.21353)Mature product-line variability lineage plus current SPLE-review cues for variability slots, product-line reuse, platform extension rules, and reuse-rule discipline.Adopt variability-slot and reuse-rule pressure. In C.31.RSA this changes product-line use: reusable structure may be located in template, interface, work, evidence, and exception loci, and bespoke residue must name repair direction, bounded exception, or source-return condition instead of being averaged into one share.Product-line label, shared code base, feature model, or platform name is not enough to infer reusable structure or architecture scale-preference evidence.Apply A.6.M for platform claims or interface claims, C.31.ASAP for architecture scale preference, and C.11 or G.5 for choice or candidate-set use.
GSN Community Standard v3 and assurance-case reuse and safety-case reuse practice (https://scsc.uk/gsn; https://arxiv.org/abs/2506.11023)Current assurance-case standard family plus current formalization work for this source-use decision; assurance validity remains context-sensitive.Adopt the distinction between reusable assurance argument structure, reusable evidence structure, and context-specific validity witnesses. In C.31.RSA this changes evidence and assurance reuse: reuse remains accounting until evidence validity, safety-case use, or assurance reliance is governed by its own pattern.Evidence reuse share or assurance-argument template reuse does not infer assurance, safety-case success, gate passage, or release permission.Apply A.10 and G.6 for evidence validity and safety-case use, and B.3 for assurance reliance; add source-return condition and validity-window check before reliance.
Architecture-operation language, with neural-network and software-system discussions as source examples, including the GonzoML architecture-operation intakeCurrent practitioner-language source for structural substitution, gating, memory placement, cache placement, routing, ablation, pruning, distillation, and architecture search; not used as a current standard by itself.Adopt the recognition that replacement and search expose reusable and bespoke structural loci. In C.31.RSA this changes architecture-operation use: source labels such as block, layer, expert, cache, router, gate, or pruning mask remain source labels until C.30.STRAT and the governing pattern for the claim being made recover structureRefs, aspect refs, accounting basis, repair moves, and source-return conditions.Block, layer, expert, cache, router, gate, benchmark, ablation, pruning mask, or distillation success is not RSA slot ontology, architecture decision, evidence sufficiency, gate passage, assurance, or architecture adequacy by itself.Apply C.30.STRAT first where source-label recovery is needed, then C.30 or C.30.ASV for architecture claim and structural view, C.30.TGA-FLOW-REL for flow changes, C.29 for mathematical-lens or compression claims, A.10 or G.6 for benchmark or evidence use, and C.28 for causal claims.

Source-currentness front. Use the table's Currentness or lineage use cell as the source-use boundary. Rows named current, such as ISO/IEC/IEEE 42010:2022, MOSA guidance, current product-line or variability work, GSN Community Standard v3, current safety-case reuse work, and the architecture-operation corpus material used as current practitioner language, require source refresh before outside-RSA use when the named standard, guide, practice family, or corpus role changes. Rows named lineage, such as DSM or product-architecture lineage, Eppinger and Browning lineage, Goodhart and Campbell proxy-pressure lineage, system-evolution and information-hiding lineage, and Pohl, Boeckle, and van der Linden lineage, stay lineage unless a current source relation is explicitly recovered.

Refresh or lower the RSA result when a source-role change alters the reusable locus, bespoke-residue locus, accounting basis, source-return condition, comparator admission, evidence-validity relation, assurance or safety-case reliance, architecture scale-preference relation, or any outside-RSA use. A source row may explain why an accounting distinction matters, but it does not make an RSA share current for comparison, decision, assurance, gate, or publication without the governing pattern for that outside-RSA use.

Older or local sources may serve as lineage or worked examples only when the row says so. They do not stand in for current competitive source, and they do not make an RSA share admissible for outside-RSA use without the governing pattern for that use.

Relations

PatternRelation
C.30.STRATRecovers source labels such as layer, level, tier, stack, block, expert, cache, router, gate, and pruning mask before RSA uses recovered reusable loci, bespoke-residue loci, accounting-basis fields, repair moves, or source-return conditions.
C.31Supplies modularity characteristics under evaluation; RSA does not duplicate the characteristic taxonomy.
A.6.MSupplies module-interface relation repair for reusable interface and platform-grammar claims.
C.30 and C.30.ASVSupply architecture claim and structural-view context for the structures being accounted over.
C.16, A.17, A.18, A.19Govern measurement, scale, unit, comparability, score, and characteristic legality when RSA shares are used beyond report-only.
C.25Governs broader quality-family bundles when reusable structure is used in a quality claim.
A.10, B.3, G.6Govern evidence, assurance, and safety-case reliance.
C.29Governs compression, epiplexity, RG, or other mathematical-lens claims when accounting depends on a lens.
C.27, C.28, C.31.ASAP, C.18.1, C.19.1Govern temporal, causal, architecture scale-preference, scale-law, and BLP claims derived from residue growth or reuse movement.
G.5, C.11Govern set-return selection and local decision claims. Candidate-synthesis and selected-set publication claims are governed by G.5 when set-return or candidate-set publication is being claimed; local decision claims are governed by C.11; RSA does not govern candidate-synthesis, selected-set, or decision use.

C.31.RSA:End

Architecture Scale-Amenability Preference

Type: Characterization pattern Status: Stable Normativity: Normative unless explicitly marked informative

Problem frame

Use this pattern when a practitioner compares architecture alternatives under a declared scale variable or scale window and needs to avoid treating a modularity label, platform label, product-line label, reusable-structure share, or coarse-graining metaphor as an automatic scale-preference claim.

The first useful move is ScaleClaimTriage:

ScaleClaimTriage:
  architectureAlternativeSetRef:
  scaleVariableRef:
  scaleWindowRef:
  claimedPreferenceUnderScale:
  slopeEvidenceRef, scaleProbeEvidenceRef, or noProbeReason:
  expectedStableOrImprovingStructure:
  exceptionGrowthRisk:
  sourceReturnCondition:
  relatedClaimGovernanceIfClaimed:
  stopCondition:

Ordinary use starts by naming the alternatives, the scale variable, the scale window, the claimed preference under scale, the available slope or scale-probe evidence or no-probe reason, the expected stable or improving structure, and the exception growth risk. Use ArchitectureScaleAuditRecord@Project only when the scale preference is being used to affect a comparison, selected set, publication, assurance input, or architecture decision.

What goes wrong if C.31.ASAP is missed: "modular", "platform", "product line", "reusable", "general", "open", "coarse-grained", or "RG-like" becomes a shortcut for a scale-preference claim; a locally hand-engineered solution is called debt even when safety, legality, or mission constraints justify it; exception growth is hidden until the architecture is already expensive to change; and coarse descriptions keep losing lower-scope safety or semantic distinctions without a source-return condition.

What C.31.ASAP buys in practice: the practitioner can say what is being scaled, where the scale claim holds, what structure is expected to remain stable or improve, what exceptions are allowed, what evidence or no-probe reason exists, which scale-preference claim stays in C.31.ASAP, and which governing pattern governs any lens-use, evidence, assurance, selection, or decision claim being made.

Not this pattern when the question under repair is only module-interface relation repair, modularity-characteristic selection, reusable-structure accounting, mathematical-lens use, scale-law adequacy, method preference under general BLP, candidate architecture generation, selected-set return, or final local choice. Use [A.6.M](/generated/patterns/A.6.M), [C.31](/generated/patterns/C.31), [C.31.RSA](/generated/patterns/C.31.RSA), [C.29](/generated/patterns/C.29), [C.18.1](/generated/patterns/C.18.1), [C.19.1](/generated/patterns/C.19.1), [G.5](/generated/patterns/G.5), [G.9](/generated/patterns/G.9), or [C.11](/generated/patterns/C.11) as appropriate. C.31.ASAP governs architecture scale-preference claims; it does not select the architecture, prove the scale law, or certify the project.

Problem

Architecture work often asks whether one structure will scale better than another: a product-line architecture rather than bespoke variants, an open interface rather than a closed integration, a stable flow topology rather than repeated project exceptions, or a reusable evidence package rather than repeated assurance work.

These claims are useful only after the scale relation is declared. "Scales better" can mean fewer interface grammar variants, lower exception growth, better learning transfer, more reusable templates, more stable control relations, less source-return cost, fewer regulatory exceptions, or more freedom of action. Those are not the same claim.

C.31.ASAP turns architecture scale-preference talk into a declared scale variable or window, a preference claim, evidence or no-probe reason, expected stable or improving structure, exception-growth risk, and source-return condition. It does not turn scale preference into proof, selection, assurance, causal use, or a universal law.

Forces

ForceTension
Fast architecture choice vs scale evidencePractitioners often need a scale-aware preference before a full scale study exists.
Reusable structure vs useful exceptionReuse can improve scale behavior, but some bespoke residue is justified by safety, legal, mission, or context constraints.
Platform label vs scale mechanismA platform or product-line name does not say which variability slots, extension rules, exception curve, or refactor trigger makes scale behavior better.
Coarse view vs source distinctionsCoarse-grained architecture descriptions can expose stable structure, but they can also hide lower-scope hazards.
Preference guidance vs selection authorityA scale preference can inform a candidate set or decision, but selection and choice remain with their governing patterns.
Architecture scope vs method BLPArchitecture scale amenability resembles BLP, but C.31.ASAP governs architecture alternatives and selected structures, not general method-family policy.

Solution

C.31.ASAP specializes scale-amenability preference for architecture alternatives. It applies when an architecture alternative set, scale variable or scale window, and claimed preference under scale are named.

Applicability fields

C.31.ASAP applies only when all of the following are present:

  1. a declared architecture alternative set;
  2. a declared scale variable or scale window;
  3. a claimed preference under scale;
  4. slope evidence, scale-probe evidence, or a no-probe reason;
  5. an expected stable or improving structure, exception-growth risk, or source-return condition that changes the next architecture move.

If those fields are absent, keep the claim in C.31 as a temporal or scale-sensitive characteristic cue, in C.31.RSA as report-only accounting, in C.29 as a bounded lens-use output, or in ordinary architecture prose.

ScaleClaimTriage

Use ScaleClaimTriage before any heavier scale audit:

ScaleClaimTriage:
  architectureAlternativeSetRef:
  describedHolonRef:
  boundedContextRef:
  architectureClaimRef?:
  scaleVariableRef:
  scaleWindowRef:
  claimedPreferenceUnderScale:
  slopeEvidenceRef?:
  scaleProbeEvidenceRef?:
  noProbeReason?:
  expectedStableOrImprovingStructure:
  exceptionGrowthRisk:
  sourceReturnCondition:
  admissibleUse:
  nonAdmissibleUse:
  relatedClaimGovernanceIfClaimed:
  stopCondition:

The triage is complete enough when it states the next admissible architecture move and the nearest blocked overread. It may stop at local guidance when no comparison, publication, assurance, selected-set, or decision use is being made.

Architecture scale-preference rule

When architecture alternatives satisfy the same safety boundary, legal boundary, and assurance boundary, prefer the alternative whose reusable functional-structure, flow-structure, control-structure, module-interface, work-template, and evidence-package structure and learning-transfer slopes remain stable or improve over the declared scale window, unless an ArchitectureScaleAuditRecord@Project records a bounded exception.

This is not a selector result. If an alternative set, shortlist, selected set, local choice, gate, or decision is being claimed, use G.5, G.9, C.11, A.21, or the governing pattern. C.31.ASAP governs only the scale-preference claim and its boundary.

Scale variables

Typical architecture scale variables include:

Scale variableReading
N_unitsrepeated units or instances
N_scopeCountaggregation scopes, coarse-graining scopes, or typed LCA control scopes
N_sitesdeployments, sites, markets, or jurisdictions
N_interfaceTypesdistinct interface grammar variants
N_requiredTransductionKindsdistinct TGA transduction kinds in the selected functional-structure view
N_flowRelationKindsflow-relation or crossing variants in the selected flow-structure view
N_moduleTypesmodule type library size
N_workRepetitionsdelivery, operation, or test repetitions
N_supplierOrVendorClassessubstitutability or vendor class dimension
N_regulatoryInstancesapproval, safety, or certification repeats
freedomOfActionallowed design, search, or control variation

The scale variable is not enough by name. The claim being made also needs a scale window, expected stable or improving structure, exception-growth risk, and source-return condition.

Scale audit outputs

Use the heavier audit only when the scale preference changes comparison, publication, selected-set, assurance-input, or decision use:

ArchitectureScaleAuditRecord@Project:
  architectureAlternativeSetRef:
  scaleVariableRefs:
  scaleWindowRef:
  ArchitectureSlopeVector:
  IsoScaleParityNote?:
  ASAPWaiverReason?:
  ArchitectureHeuristicDebt?:
  BespokeResidueRegisterRef?:
  SourceReturnCondition:
  admissibleUse:
  nonAdmissibleUse:
  relatedClaimGovernanceIfClaimed:
  stopCondition:
OutputMeaning
ArchitectureSlopeVectorSlopes for reusable structure, interface variation, flow stability, control stability, work repeatability, bespoke residue, exception growth, and learning transfer.
IsoScaleParityNoteComparison under equalized scale budgets where possible; if parity is not possible, the loss is named.
ASAPWaiverReasonDeclared reason for not choosing the scale-amenable alternative.
ArchitectureHeuristicDebtReport-only note for knowingly accepting a locally hand-engineered solution with less scale-amenable slope profile under the declared scale window.
BespokeResidueRegister@ProjectException inventory with expiry or refactor triggers; not a kernel kind.
ScaleWindowDeclared range where the preference claim holds.
SourceReturnConditionCondition for returning from a compressed, coarse, extracted, indexed, or accounting representation to source-side structural evidence, source records, or a related source or evidence record with higher declared validation boundary.

ArchitectureScaleAuditRecord@Project is a project-side triage record governed by this pattern. It is not an assurance proof, gate record, selected-set publication, local decision, or work plan.

Waiver discipline

ASAPWaiverReason:
  deontic constraint
  safety or legal boundary
  scale-probe overturn
  assurance infeasibility
  context-specific bounded exception

Not every non-scale-amenable choice is debt. A deontic constraint, safety boundary, legal boundary, mission constraint, assurance infeasibility, or scale-probe overturn can justify a bounded exception without creating ArchitectureHeuristicDebt.

ArchitectureHeuristicDebt remains report-only unless tied to a decision, risk, work, evidence, assurance, or selected-set record through its governing pattern.

Scale-refactoring moves

Before scale-preference guidance becomes action-guiding, name at least one possible repair or stop:

Scale symptomPossible architecture moveBoundary
interface variants grow without payoffreduce interface alphabet or introduce interface grammarA.6.M governs interface relation repair.
product-line or platform variants lack explicit variation pointsintroduce variability slots or extension rulesPlatform label alone is not scale-preference evidence.
one aggregation scope hides lower-scope hazardssplit the declared aggregation scope or architecture boundaryC.29 supplies lens-use fields only when coarse-graining is mathematical-lens use.
repeated work contains reusable structurereplace bespoke work with a method templateWork and method claims go to A.15, A.15.1, or A.15.4 when those claims are being made.
regulatory or safety residue remains local and repeatedisolate regulatory residue or safety-specific exception registerEvidence, assurance, and gate claims go to A.10, B.3, G.6, or A.21.
coarse representation loses safety, semantic, or source distinctionsreturn to lower-scope source-side evidence or narrow the scale windowSource-return condition is mandatory.

C.29 lens relation

C.31.ASAP does not prove a scale law and does not perform mathematical-lens recovery. Use C.29 when the scale preference depends on an RG, coarse-graining, epiplexity, graph, multilevel-learning, or frustration lens.

For architecture use, the C.29 output should name MLU.Description@RGArchitecture, MLU.Description@MultilevelLearningFrustration, or another local MathLensUse output only when the lens changes the next admissible move. The C.31.ASAP side records the scale variable, scale window, slope or scale-probe evidence, exception-growth risk, and source-return condition. C.29 records candidate mathematical object, mapping mode, preserved structure, lost structure, visible payoff, admissible use, non-admissible use, and stop condition.

Archetypal grounding

ArchetypeWithout C.31.ASAPWith C.31.ASAP
Product-line platformPlatform name is treated as scale-preference evidence.Variability slots, extension rules, exception curve, and refactor triggers are declared before preference use.
Neural architecture block libraryReusing blocks is treated as reusable architecture by itself.The alternative set names scale variable, interface grammar variants, exception growth, and source-return condition.
Safety or certification reuseReusable evidence package is counted without validation boundary.Evidence reuse remains tied to source-return; A.10, B.3, or G.6 govern evidence validity, assurance reliance, or safety-case use when those claims are being made.
Cross-scope residualA frustration or complexity label is treated as scale mathematics.C.31.ASAP names the scale window and residual slope; C.29 records the lens-use fields if the mathematical-lens use is being claimed.

Filled triage slice

ScaleClaimTriage:
  architectureAlternativeSetRef: product-line platform alternative vs bespoke customer-specific variants
  scaleVariableRef: N_sites
  scaleWindowRef: 5 to 40 regulated deployment sites inside the current qualification window
  claimedPreferenceUnderScale: platform alternative is preferred if interface variants and approval exceptions grow slower than bespoke variants
  slopeEvidenceRef, scaleProbeEvidenceRef, or noProbeReason: scale-probe evidence from six deployments; no universal scale law claimed
  expectedStableOrImprovingStructure: interface grammar, reusable test package, deployment work template
  exceptionGrowthRisk: jurisdiction-specific clauses and side-channel integrations may grow faster than sites
  sourceReturnCondition: return to exception register, interface variant log, and deployment evidence before publication, selected-set, assurance, or decision use
  relatedClaimGovernanceIfClaimed: C.31 for the characteristic; C.31.RSA for reusable-structure share; C.16 or A.19 for comparison; G.5 or G.9 for selected-set use; C.11 for local decision; A.10, B.3, or G.6 for evidence or assurance
  stopCondition: stop at local scale-preference guidance unless comparator admission, evidence validity, and decision or selected-set governance are present

Admissible move: prefer the platform alternative as a local scale-preference guide and start interface-grammar repair before deployment spread increases. Non-admissible move: treat the platform label, reusable-share number, or six-site probe as architecture selection, evidence sufficiency, assurance, gate passage, or final decision.

Near-miss lowering slice

Near-miss: a team says the platform architecture should win because it has an 82 percent reusable-structure share, an RG-like coarse description, and "less bespoke debt" than the local variant.

Lowering replay:

  • The platform label is a source cue, not scale-preference evidence; recover variability slots, extension rules, exception curve, and source-return condition first.
  • The 82 percent reusable-structure share stays report-only under C.31.RSA until the scale variable, scale window, accounting basis, comparator admission, and admissible comparison relation are declared.
  • The RG-like phrase stays with C.29 unless the mathematical-lens fields, preserved structure, lost structure, payoff, admissible use, and stop condition are recoverable.
  • The "bespoke debt" label is lowered to waiver review when safety, legal, mission, assurance, or scale-probe overturn reasons may justify the local variant.

Stop C.31.ASAP use when the scale window, probe evidence or no-probe reason, comparator admission, or source-return condition is absent. Reopen it only after those fields are recoverable and the platform-label, share, lens, and waiver claims have their governing patterns.

Bias annotation

Bias riskC.31.ASAP correction
Platform label biasPlatform or product-line wording names a possible source context, not scale-preference evidence. Recover variability slots, extension rules, exception curve, refactor triggers, and source-return condition.
Modularity-means-scalability biasA module count, interface count, or reusable-structure share is not a scale preference. Use C.31 and C.31.RSA first, then C.31.ASAP only when scale variable and scale window are named.
Debt inflation biasA locally hand-engineered solution is called debt without checking deontic, safety, legal, mission, assurance, or scale-probe waiver reasons.
RG proof biasRG, coarse-graining, fixed-point, or universality wording is treated as scale-preference proof. Use C.29 for lens recovery and keep scale preference in C.31.ASAP.
Selection launderingThe scale-preference claim is used as if it selected the architecture. Use G.5, G.9, or C.11 for selected-set or choice claims.

Conformance Checklist

IDRequirementPurpose
CC-C31.ASAP-1A C.31.ASAP use being made names architecture alternative set, scale variable or scale window, and claimed preference under scale.Prevents generic "scales better" wording.
CC-C31.ASAP-2ScaleClaimTriage names slope evidence, scale-probe evidence, or a no-probe reason.Prevents preference claims without declared evidence or no-probe reason.
CC-C31.ASAP-3Expected stable or improving structure and exception-growth risk are stated.Keeps the pattern about architecture structure rather than scale vocabulary.
CC-C31.ASAP-4Source-return condition is present when any compressed, coarse, extracted, indexed, or accounting representation drops source-side distinctions.Prevents unsafe coarse descriptions.
CC-C31.ASAP-5Waiver reason is one of deontic constraint, safety or legal boundary, scale-probe overturn, assurance infeasibility, or context-specific bounded exception.Prevents false debt labels.
CC-C31.ASAP-6ArchitectureHeuristicDebt remains report-only unless a decision, risk, work, evidence, assurance, or selected-set record is being used under its governing pattern.Prevents shadow project authority.
CC-C31.ASAP-7Platform, product-line, modularity, reuse, open-interface, RG, and coarse-graining labels do not establish scale preference by themselves.Blocks source-label overread.
CC-C31.ASAP-8Mathematical-lens claims name C.29 output fields; C.31.ASAP governs only the architecture scale-preference side.Keeps C.29 and C.31.ASAP distinct.
CC-C31.ASAP-9Comparison, selected-set, local choice, evidence, assurance, gate, work, or release claims name the governing pattern.Prevents scale preference from becoming selection or assurance.
CC-C31.ASAP-10SoTA rows mutate at least one solution line, checklist item, boundary, relation, or worked slice.Keeps source use non-decorative.

Common anti-patterns

Anti-patternSymptomRepair
ModularThereforeScalableThe text says modular or platform architecture scales without scale variable, window, slope evidence, or exception curve.Add ScaleClaimTriage or downgrade to C.31 characteristic cue.
GenericScaleAuditAudit fields appear with no architecture alternative set or next move.Return to ScaleClaimTriage; remove audit apparatus until preference use is being made.
AllExceptionsAreDebtAny non-scale-amenable choice becomes debt.Test waiver reasons and keep justified bounded exceptions out of ArchitectureHeuristicDebt.
RGAsScaleProofCoarse-graining or RG wording is used as a scale-preference claim.Apply C.29 for lens use and C.31.ASAP for preference claim; require source-return condition.
ShareAsScalePreferenceEvidenceReusableStructureShare or BespokeResidueShare is used to prefer one alternative.Keep the share report-only in C.31.RSA until scale variable, window, and admissible comparison are declared.

Consequences

Positive consequenceCost or trade-off
Scale preference becomes inspectable before selection or decision.The practitioner must name a scale variable and window instead of relying on a label.
Platform and product-line claims gain usable refactor triggers.Some source language becomes only a recognition cue until variability slots and exception curves are declared.
C.29 lens use stays useful without turning into scale proof.RG claims and coarsening claims need preserved and lost structure plus source-return condition.
Report-only debt notes remain bounded.Decisions or risk records must use their governing patterns when reliance use is being made.

Rationale

C.31.ASAP is added because C.31 and C.31.RSA can expose scale-sensitive characteristics and reusable-structure residue, but they should not themselves decide which architecture alternative is preferable under scale. C.31.ASAP governs this architecture scale-preference claim family; it is narrower than general BLP and broader than one measurement card.

The pattern adapts BLP-style scale-amenability to architecture: prefer the alternative that preserves or improves reusable structure over a declared scale window when safety, legality, and assurance boundaries are comparable. It also blocks the common shortcut that treats modularity, reuse, platform practice, or mathematical coarse-graining as scale-preference evidence by itself.

SoTA-Echoing

Source familySource-use roleC.31.ASAP adaptationNon-admissible overreadPractitioner implication
Software product-line and variability-management practice (https://www.sei.cmu.edu/library/variability-in-software-product-lines/; https://arxiv.org/abs/2605.21353)Mature variability lineage plus current SPLE-review cues.Adopt variability slots, product-line reuse, exception inventory, and refactor triggers as architecture scale-preference fields.Product-line label, shared code base, feature model, or platform name is not scale-preference evidence.Before preferring the product-line alternative, name the scale window, variability slots, exception curve, and source-return condition.
Product-platform and modular product-architecture practice (https://link.springer.com/article/10.1007/s00163-023-00427-1; https://arxiv.org/abs/2510.11089)Current engineering-design source line for modular product architecture, assembly orientation, product-family reuse, and manufacturing-aware modularity.Adopt the product-family commonality and variety trade-off as an architecture scale-preference pressure: reusable structure needs declared variation points, interface rules, assembly or realization constraints, exception curve, and source-return condition.A product-platform name, common-module count, or modular-product label is not scale-preference evidence and does not by itself justify a module-interface or manufacturing claim.Before preferring a product-platform alternative, state which product-family variation is scaled, which structure remains stable, and which assembly, safety, legal, or mission exception is allowed.
Platform-engineering maturity practice (https://tag-app-delivery.cncf.io/fr/whitepapers/platform-eng-maturity-model/)Current platform-practice source for platform service set, extension-rule, substitution-policy, and maturity-pressure claims.Adapt platform practice into extension-rule, substitution-policy, conformance-expectation, and exception-growth checks.Platform maturity does not by itself select an architecture or prove reusable structure.Treat platform claims as source cues until the architecture scale variable and exception behavior are declared.
C.19.1 BLP in FPFFPF-local preference discipline for general scale-amenable methods.Specialize the preference idea to architecture alternatives, selected structures, scale variables, and architecture slope vector.C.31.ASAP does not replace general method BLP, selector policy, or decision records.Use C.19.1 for method-family policy; use C.31.ASAP for architecture scale preference.
C.29 RG and coarse-graining lens use in FPFFPF-local mathematical-lens discipline.Require scale window, coarse-graining rule, preserved structure, lost structure, and source-return condition when RG-like architecture scale reasoning is being claimed.RG wording is not physical RG, scale proof, causal proof, assurance, or selected architecture.Use MLU.Description@RGArchitecture or MLU.Description@MultilevelLearningFrustration only when the lens changes the next move.

Relations

  • Builds on: C.31, C.31.RSA, C.16, A.17, A.18, A.19, C.18.1, C.19.1, and C.29.
  • Coordinates with: A.6.M for module-interface relation repair; C.30, C.30.ASV, C.30.LCA, and C.30.ILC for architecture and selected-structure questions; A.10, B.3, and G.6 for evidence and assurance reliance; G.5, G.9, and C.11 for selected-set, parity, and choice claims.
  • Boundary: C.31.ASAP governs architecture scale-preference claims. C.31, C.31.RSA, C.29, C.18.1, C.19.1, G.5, G.9, and C.11 govern modularity-characteristic, reusable-structure accounting, mathematical-lens, scale-law, general method preference, selected-set, parity, and local-choice claims when those claims are being made.
  • Precision-restoration relation: source wording recovered by E.10, E.10.ARCH, or C.30.STRAT is governed by C.31.ASAP only when the recovered claim being made is architecture scale preference over a declared alternative set, scale variable, and scale window.

C.31.ASAP:End

Bias-Audit & Ethical Assurance

Use this when. Use this pattern when a holon, model, metric, decision system, policy, or authored FPF claim may create unfair, biased, or ethically unsafe effects for people or groups. If the fairness claim is causal — for example "this intervention is fair", "this policy would have prevented harm", "this model is counterfactually fair", or "this practice causally reduces disparity" — keep the ethical audit in D.5 and cite C.28 for causal-use question, causality-ladder rung, estimand, causal evidence support basis, identification, realizability, evidence design, support record, and support verdict.

Not this pattern when. If the question under repair is only measurement construction, use C.16; if it is only causal-use support without fairness or ethical audit, use C.28; if it is only an assurance claim or assurance input/result, use B.3. Metric disparity alone is not yet causal fairness.

Causal-fairness boundary. A local C.28 causal-fairness repair, such as adding a causal-use question, estimand, support basis, support record, or supported-fairness-use and unsupported-fairness-use pair, is not by itself the Bias-Audit Cycle. It remains a local support repair until the claim, model, metric, policy, or decision system is in a D.5 project, release, assurance, or human/group-impact audit condition.

Problem Frame

FPF is designed to produce reliable, objective, and trustworthy holons. However, formal correctness (FV score) and empirical validation (EV score) are not sufficient on their own. Any record, model, metric, policy, or decision system designed by humans or trained on human-generated data is susceptible to hidden cognitive, cultural, and algorithmic biases. A perfectly verified control system can still be unsafe if its requirements were based on a biased assumption about operator behavior. A highly accurate machine learning model can be deeply unfair if its training data was not representative.

A fairness claim can also be unsafe by causal overclaim. "This policy is fair because a metric improved" is not the same claim as causal fairness, counterfactual fairness, or path-specific fairness. D.5 therefore brings causal fairness into the audit entry section: the audit must distinguish metric disparity, associative fairness evidence, interventional fairness proxy, and counterfactual fairness claim before the ethical assurance record is treated as supported.

Problem

Without a formal, repeatable method for surfacing and mitigating these biases, FPF models risk becoming "flawed by design." This leads to three critical failure modes:

  1. Systemic Harm: The deployed holon, despite meeting all its technical specifications, causes unintended negative consequences for certain groups or in certain contexts.
  2. Eroded Trust: Stakeholders or the public lose trust in the system (and its creators) when its inherent biases are exposed after deployment.
  3. Hidden Risk: The assurance case looks well-supported on paper, but it is built on a foundation of unexamined and potentially dangerous assumptions, creating a significant hidden risk.

Forces

ForceTension
Objectivity vs. Inevitable SubjectivityHow to strive for objective, neutral models while acknowledging that all creation is influenced by the subjective perspectives of the creators.
Speed of Delivery vs. Depth of ReflectionHow to integrate a thoughtful ethical review process without paralyzing ordinary iterative work cycles.
Expertise vs. InclusivityHow to leverage specialized ethical expertise without disenfranchising the core engineering team from moral responsibility.
Process vs. CultureIs ethical assurance a bureaucratic checklist to be completed, or a cultural practice of continuous self-critique?

Solution

FPF introduces the Bias-Audit Cycle (BA-Cycle), a lightweight, iterative review loop designed to integrate ethical reflection directly into the engineering development cycle. It is not a one-time gate but a continuous loop of inquiry.

The Bias-Audit Cycle: Four Phases

The cycle consists of four distinct phases, aligned with the project's natural rhythm.

PhaseTriggerCore ActivityOutput
BA-0: Kick-offProject start or major new feature.Framing the ethical scope. The team identifies potential areas of bias and creates an initial, living document called the Bias Register.A skeleton Bias Register with initial questions.
BA-1: Rapid ScanEnd of each sprint or design session.Continuous lightweight check. A rotating member of the core team (the Engineer-Scrutineer) quickly scans recent changes against a checklist, flagging potential issues in the Bias Register.Updated Bias Register with new items flagged for discussion.
BA-2: Panel ReviewBefore a major integration or release decision (e.g., before moving to the Evidence state).Deep, multi-perspective critique. A small panel, including individuals in roles like Ethicist, Domain Sociologist, and UX Design Critic, reviews the flagged items and proposes concrete mitigations.A structured, auditable record called the Bias-Audit Report, documenting findings and required actions.
BA-3: ClosureAt the release freeze.Ensuring accountability. The facilitator confirms that all "blocking" issues from the Bias-Audit Report have either been resolved or have a documented, accepted risk.The final Bias-Audit Report is marked as resolved or risk-accepted for that release.

The Bias Taxonomy: A Shared Language for Critique

To structure the audit, FPF provides a minimal, extensible taxonomy of common bias categories.

CodeBias CategoryManager's View: The Simple Question to Ask
REPRepresentation Bias"Whose voice, data, or perspective is missing from this model?"
ALGAlgorithmic Bias"Could our automated rule or formula unintentionally amplify unfairness for minority or edge cases?"
VISVisual Framing Bias"Does this diagram, color choice, or dashboard visualization steer the user towards a preferred conclusion?"
METMetric Proxy Bias"Are we chasing a metric that is easy to measure, at the expense of the real, harder-to-measure objective?" (Connects to ADR-015)
LNGLexical Bias"Do our naming choices (e.g., 'master/slave', 'blacklist/whitelist') encode unintended value judgments or historical baggage?"

Didactic Note for Managers: This is Risk Management, Not a Philosophy Seminar

The Bias-Audit Cycle is FPF's "immune system." It's designed to find and neutralize hidden assumptions before they become costly product failures or public relations disasters. Think of it like a security audit, but for the ethical and social integrity of your system.

  • It's not about being "perfect"; it's about being "aware." The goal is not to eliminate all bias (an impossible task) but to make your team's biases explicit, documented, and consciously managed.
  • It's cost-effective. The lightweight "Rapid Scan" catches most issues early, during a sprint. The more intensive "Panel Review" is reserved for key moments, ensuring that expert time is used efficiently.
  • It creates a defensible record. The Bias-Audit Reports provide a clear, auditable trail showing that your team has taken a systematic and responsible approach to identifying and mitigating potential harms. In an era of increasing scrutiny on AI and autonomous systems, this record is not just good practice—it's a critical business asset.

Normative Artifacts

The Bias-Audit Cycle produces two key records that serve as the auditable record of ethical deliberation.

  • The Bias Register:

    • Nature: A living, evolving episteme that serves as a repository of questions, concerns, and potential biases identified throughout a holon's evolution.
    • Content: It is a structured collection of inquiries, organized by the Bias Taxonomy (REP, ALG, etc.). It is continuously updated during the Rapid Scans (BA-1) and represents the "running log" of ethical and bias-related considerations for the project.
  • The Bias-Audit Report:

    • Nature: A formal, versioned episteme that documents the findings of the Panel Review (BA-2).
    • Content: It contains a structured record of findings. Each finding is a U.Episteme with attributes for:
      • biasCode: The category from the Bias Taxonomy.
      • severity: An ordinal level (high, medium, low).
      • description: A narrative explaining the issue.
      • mitigation: A proposed U.Method or U.ConstraintRule to address the issue.
      • status: A state (blocking, resolved, risk-accepted).
    • Conceptual Example:
      • finding-01: An episteme with biasCode: REP, severity: high, and a description stating that the training data for a recognition holon lacks representation from certain demographics. The mitigation would be a U.Method for acquiring a balanced dataset, and the status would be blocking until this method is executed and its outcome validated.

Causal fairness use audit

When a fairness claim is causal rather than metric-only, D.5 records the ethical-audit question and cites C.28 for causal-use support:

CausalFairnessUseAuditCard {
  causalUseQuestionRef: U.CausalUseQuestion
  protectedVariableRef
  decisionVariableRef
  outcomeVariableRef
  fairnessCausalityLadderRung: CausalityLadderRung
  fairnessEstimandRef: U.CausalEstimand
  permittedPathSet?
  prohibitedPathSet?
  pathSpecificFairnessEstimandRef?
  pathSpecificExcessLossRef?
  comparatorOrCounterfactualRef
  causalEvidenceSupportBasis: CausalEvidenceSupportBasis
  causalIdentificationProfileRef?
  counterfactualSamplingRealizabilityProfileRef?
  causalUseEvidenceDesignRef?
  causalUseSupportRecordRef?
  causalUseSupportVerdict: CausalUseSupportVerdict
  fairnessCausalEthicalConstraintRef?
  supportedFairnessUse
  unsupportedFairnessUse
}

Metric-only fallback: if only a metric disparity is claimed and no causal fairness use is made, record it as metric/evaluation use, not [C.28](/generated/patterns/C.28)-heavy causal fairness.

Local causal-fairness repair does not by itself trigger the full Bias-Audit Cycle, a panel review, or release-cycle duties. It may only downgrade causal wording, add the missing [C.28](/generated/patterns/C.28) support reference, or mark unsupported causal fairness use.

The full [D.5](/generated/patterns/D.5) duties activate under [D.5](/generated/patterns/D.5) project or release conditions: the holon, model, metric, decision system, policy, or authored claim may materially affect people or groups; the fairness/ethical claim is release-bearing; or the local causal-fairness repair becomes an input to audit, assurance, deployment, publication, or risk acceptance.

Fairness escalation rule: interventional-action proxy may support bounded interventional fairness use but cannot be published as counterfactual fairness.

What changes in practice: a fairness audit must say whether the claim is associative, interventional, or counterfactual, and a counterfactual fairness claim must carry the causal-use question, comparator/counterfactual, permitted paths, prohibited paths, causal evidence support basis, causal identification or counterfactual sampling realizability, causal-use support verdict, and supported fairness use and unsupported fairness use.

What this does not authorize: [D.5](/generated/patterns/D.5) does not replace [C.28](/generated/patterns/C.28) for causal-use question, causality-ladder rung, estimand, identification, realizability, or CausalUseSupportVerdict; it keeps ethical audit and fairness assurance, while [B.3](/generated/patterns/B.3) keeps assurance claim support and non-admissible-use consequences.

Conformance Checklist

  • CC-D5.1 (Cycle Mandate): Any project developing a holon that interacts with or makes decisions about humans MUST conduct the Bias-Audit Cycle.
  • CC-D5.2 (Artifact Mandate): The project MUST maintain a Bias Register and produce a Bias-Audit Report before any major release.
  • CC-D5.3 (Blocking Issue Mandate): A release SHALL NOT be considered conformant if its latest Bias-Audit Report contains any unresolved findings with status: blocking. The issue must either be moved to resolved (mitigated) or risk-accepted (formally signed off by a designated authority).
  • CC-D5.4 (Role Mandate): The Panel Review (BA-2) MUST involve at least three individuals representing distinct perspectives, ideally aligning with the roles of Ethicist, Domain Sociologist, and UX Design Critic from the Intellect Stack.
  • CC-D5-CF-1: A fairness claim MUST declare whether it is associative, interventional, or counterfactual.
  • CC-D5-CF-2: An interventional-action-rung fairness proxy MUST NOT be published as a counterfactual-rung fairness result.
  • CC-D5-CF-3: If a counterfactual fairness estimand is claimed actionable, it MUST cite CausalIdentificationProfile or CounterfactualSamplingRealizabilityProfile.
  • CC-D5-CF-4: A causal fairness audit MUST cite C.28 for causal-use question, causality-ladder rung, causal estimand, causal evidence support basis, identification, realizability, evidence design, causalUseSupportRecordRef when one is consumed, and CausalUseSupportVerdict; D.5 keeps ethical audit and fairness assurance.
  • CC-D5-CF-5: A local causal-fairness wording repair or support-reference repair does not trigger the full Bias-Audit Cycle unless D.5 project, release, assurance, or human/group-impact audit conditions are live.

Common Anti-Patterns and How to Avoid Them

Anti-PatternManager's View: What It Looks LikeHow FPF Prevents It (Conceptually)
The "Ethics Ghetto"One person is the "ethics officer," and the rest of the engineering team sees bias as "not my job."The Rapid Scan (BA-1) is a conceptual activity performed by a rotating member of the core team. This distributes the responsibility for ethical reflection across all roles.
The "Checklist Charade"The team mechanically answers "yes/no" to bias questions just before a release, without any real reflection, simply to satisfy a process requirement.The Panel Review (BA-2) is a moment of deep, multi-perspective critique that a perfunctory checklist cannot survive. The requirement for a structured Bias-Audit Report also forces concrete findings and mitigation methods, not just checkmarks.
The "Bias Whack-a-Mole"The team fixes one bias issue, only for another to pop up, because they are only addressing symptoms.The Bias Taxonomy encourages a more systematic approach. By considering categories like Representation (REP) and Metric Proxy (MET), the team is prompted to look for root causes (e.g., flawed data collection methods or poorly chosen objectives) rather than just patching individual algorithmic flaws.

Consequences

BenefitsTrade-offs / Mitigations
Proactive Risk Mitigation: The cycle surfaces and addresses potential ethical and social harms before they are deployed, preventing costly failures and reputational damage.Additional Ceremony: The cycle introduces extra review steps and records into the work cycle. Mitigation: The process is designed to be lightweight and to align with ordinary iteration cadences (e.g., the Rapid Scan is a brief conceptual check at the end of a work cycle).
Creates an Auditable Ethical Record: The Bias-Audit Reports provide a transparent, defensible trail demonstrating that the organization has a systematic process for managing ethical risks.Finding the Right Expertise: It may be challenging to find individuals to fill the required roles. Mitigation: These roles represent perspectives, not necessarily formal job titles. The key is the diversity of viewpoints.
Builds a Culture of Responsibility: By making ethical reflection a routine part of the engineering process, the cycle fosters a culture where every team member is empowered and expected to think critically about the broader impact of their work.-
Improves Holon Quality: Designing for a wider range of users and edge cases, as prompted by the audit, often leads to more robust, user-friendly, and innovative holons.-

Rationale

Formal correctness is not a substitute for moral responsibility. This pattern recognizes that bias is not an occasional flaw but a systemic feature of any human-led design process. The Bias-Audit Cycle is FPF's formal mechanism for managing this reality. It is a direct implementation of the Cross-Disciplinary Bias Audit Guard-Rail (E.5.4).

By integrating this cycle into the core engineering work cycle, FPF moves ethical assurance from a peripheral, often-ignored "nice-to-have" into a central, non-negotiable component of engineering excellence. It ensures that the powerful tools of formal reasoning and validation provided by FPF are always directed towards creating holons that are not only correct, but also conscionable.

Relations

  • Implements: The Cross-Disciplinary Bias Audit Guard-Rail (E.5.4).
  • Complements: D.4 Trust-Aware Mediation Calculus by providing inputs on fairness and value alignment; B.3.4 Evidence Decay & Epistemic Debt by questioning the longevity of assumptions about social context.
  • Coordinates with: C.28 for causal fairness use, causality-ladder rung, causal estimand, causal evidence support basis, identification, realizability, evidence design, causal-use support record, and causal-use support verdict; B.3 for assurance claim support and unsupported-use consequences.
  • Operationalizes: The conceptual roles of Ethicist, Domain Sociologist, and UX Design Critic from the Intellect Stack.

D.5:End

Vision & Mission: “Operating System for Thought”

Problem frame

Modern engineering, science, and strategy all suffer from conceptual overload: dozens of domain tools, drifting vocabularies, and disconnected “best practices” splinter ideas as they travel from napkin sketch to certified deliverable. Stakeholders—Engineers, Researchers, Learners—lack a single, evolvable scaffold that can carry an insight across that span.

Problem

Absent such a scaffold, every discipline re‑invents epistemology and systems thinking, spawning silos, steep learning curves, and brittle life‑cycle models. Previous attempts either froze agility in rigid hierarchies or dissolved rigour in tool‑centric jargon.

Forces

ForceTension
Conceptual UnityFreedom to evolve ↔ invariant principles that prevent vocabulary drift.
Rigor vs AgilityFormal verifiability ↔ rapid, iterative exploration.
Universality vs SpecificityDomain‑agnostic kernel ↔ problem‑specific leverage.
Didactic ClarityHuman comprehension ↔ abstract purity and density.
Physical GroundingAbstract constructs ↔ a material Transformer that proves feasibility.

Mission Statement

Enable any motivated system/actor/agent/transformer — human or AI — to transform a raw idea into a reproducible, auditable change in the physical world through incremental, falsifiable cycles.

Vision Statement

Reliable reasoning should be as accessible as version control: clone the conceptual kernel, extend it with domain patterns, and commit decisions that remain traceable across time, scale, and discipline.

Solution — FPF as an Operating System for Thought

FPF delivers a generative scaffold realised as:

  1. a Kernel of non‑derivable, cross‑domain first principles;

  2. pluggable patterns—Systemic Calculus, Knowledge Dynamics, etc.—that instantiate those principles;

  3. a pattern language (Architectural ► why/ how; Definitional ► what) with embedded Conformance Checklist (CC);

  4. Design Rationale Records (DRRs) that govern safe, auditable evolution;

  5. three core invariants that every artefact must honour

    • Evolvability — change is expected and governed;
    • Cross‑Scale Coherence — the same algebra binds parts to wholes at any level;
    • Didactic Transparency — each element exposes its own reasoning path.

Conformance Checklist

IDRequirementRationale
CC‑Vision.1Every composite artefact MUST cite a material Transformer that can, in principle, perform the aggregation (Γ(D,C)) that produced it.Ensures physical feasibility and auditability.
CC‑Vision.2Every normative rule MUST demonstrably support at least one core invariant (Evolvability, Cross‑Scale Coherence, Didactic Transparency).Keeps the Canon lean and purpose‑driven.
CC‑Vision.3Conceptual text MUST NOT contain tokens black‑listed by the DevOps Lexical Firewall (yaml, docker, …).Preserves layer purity and tool‑agnostic core.
CC‑Vision.4A conformant artefact MUST state a measurable benefit for at least one of the three roles (Engineer, Researcher, Learner) or justify omission.Aligns success with stakeholder trajectories.

Consequences

Positive — Unified language accelerates cross‑disciplinary discovery; regulators can audit claim lineages; learners acquire concepts through the spec itself. Trade‑offs — Authors face an initial learning curve and must trace every rule to an invariant; disciplined traceability is required to prevent variant sprawl.

Relations & Precedence

Pattern E.1 governs E.2 Eleven Pillars and the Guard‑Rail set A.5A.8; any later pattern that conflicts with E.1 MUST be revised via a DRR before entering the Canon.

“Purpose without a scaffold is wishful thinking; a scaffold without purpose is cargo‑cult—FPF welds the two into disciplined imagination.”

E.1:End

The Eleven Pillars

Problem frame

Pattern E.1 set the FPF mission as an operating system for thought. To turn that mission into a durable architecture, FPF needs a small, explicit constitution - principles that remain stable while everything built on top of them can evolve. Without such invariants, domain silos, vocabulary drift, and tool-centric shortcuts quickly erode coherence and reproducibility across disciplines.

The pillars are also the first-principles basis of FPF. They are the minimal commitments from which pattern-level work derives: decisive structure, teachability, maturing formality, open kernel, layering, register discipline, practical payoff, cross-scale consistency, explicit state, open-ended evolution, and SoTA renewal. Later patterns can support this basis by making a concrete argument about pillar support more inspectable; they do not replace pillar authority.

Problem

Frameworks without binding first principles wobble between two extremes: rigid dogmas that kill adaptation and amorphous guidelines that invite cognitive chaos. In either case, reasoning fragments, auditability collapses, and physical impact suffers.

Forces

ForceTension
Foundational StabilityImmutable core ↔ perpetual adaptation to new knowledge
Cognitive LoadMinimal elegance ↔ comprehensive coverage
Rigor vs AccessibilityFormal soundness ↔ intuitive entry for non‑specialists
Universality vs ModularityDomain‑agnostic scope ↔ plug‑in extensibility
Pragmatic GroundingAbstract invariants ↔ measurable, falsifiable outcomes

Solution

FPF rests on eleven non‑negotiable pillars. Each pillar is a binding constraint that every artefact, pattern, and design‑rationale record (DRR) must honour. Together they form the load‑bearing structure that guarantees evolvability, cross‑scale coherence, and didactic clarity.

IDPillarEssence
P‑1Cognitive EleganceHighlight decisive structure, eliminate ornamental formalism; separate data governance from thinking.
P‑2Didactic PrimacyHuman comprehension outranks theoretical or tooling purity.
P‑3Scalable FormalityA single artefact can mature step‑by‑step from informal guess to formally assured state without forks or rewrites.
P‑4Open‑Ended KernelThe Kernel contains only meta‑concepts; all domain knowledge lives in external patterns.
P‑5FPF LayeringPatterns are modular, declarative extensions that can be added, replaced, or removed without destabilising the core.
P‑6Lexical StratificationEvery core concept is expressible in four registers: plain name, technical term, formal U.Type, and mathematical symbol.
P‑7Pragmatic UtilityProofs, metrics, and models exist to achieve real‑world objectives; falsification is rewarded over confirmation.
P‑8Cross‑Scale ConsistencyComposition algebras (aggregation, boundary, emergence) are invariant across material systems, knowledge, and methods.
P‑9State ExplicitnessEvery artefact declares its state (design‑time, run‑time, etc.); transitions are cheap, traceable, auditable.
P‑10Open‑Ended EvolutionEvery entity is expected to evolve indefinitely; cycles must remain cheap, safe, and cognitively rewarding.
P‑11State‑of‑the‑Art AlignmentThe kernel and extension domain-specific patterns track reliable contemporary knowledge and update when the SoTA advances.

When a pillar-impact argument relies on mathematical structure, scale behavior, optimization, uncertainty, invariance, obstruction, or other first-principles modeling support, the applicable mathematical-lens use support path is C.29. The pillar claim remains governed by E.2; C.29 only states the mathematical lens, preserved and lost structure, admissible use, neighboring-pattern exits, and stop condition that make the pillar support inspectable.

Any DRR that contradicts a pillar must first amend this constitutional pattern.

Conformance Checklist

IDRequirementPurpose
CC‑P‑1Every architectural pattern must list which pillar(s) it instantiates or refines.Guarantees constitutional grounding.
CC‑P‑2Every DRR proposing a normative change must include a “Pillar Impact Analysis.”Makes constitutional review explicit.
CC‑P‑3Tooling and pedagogical artefacts should document which pillar(s) shape their design.Upholds P‑2 (Didactic Primacy).
CC‑P‑4An pattern is conformant only if its invariants reference ≥ 3 pillars, demonstrating cross‑scale and pragmatic alignment.Prevents narrow, siloed extensions.
CC‑P‑5When two lawful approaches exist, authors SHOULD prefer methods whose empirical capability slope is non‑negative over the audited scale window (data, compute, freedom‑of‑action) and MUST justify any exception via a BLP Scale‑Audit (BLP‑1) with declared tolerances (α = budget; δ = assurance; units specified).Embeds Bitter‑Lesson preference; curbs heuristic debt.
CC‑P‑6A pillar-impact analysis that relies on mathematical structure, scale behavior, optimization, uncertainty, invariance, obstruction, or other first-principles modeling support is complete only when that support is ordinary accepted local theory, a cited C.29 output, or a named neighboring-pattern output for evidence, causal, bridge, assurance, measurement, work, decision, publication, or admission claims.Keeps mathematical support for pillars inspectable without letting C.29 revise pillar authority.

Policy — Bitter‑Lesson Preference (BLP)

Intent. Favor general, computation‑leveraged, and freedom‑of‑action methods over hand‑tuned, brittle heuristics when safety and legality are held constant. This codifies the empirical trend that methods which scale with data, compute, and search breadth outpace bespoke rule‑engineering. Applicability: beyond ML, this policy covers search/optimization, control, simulation‑based inference, and other computational sciences where capability improves with scale and exploration. When NQD/E/E‑LOG promotes novelty/coverage (illumination) telemetry into dominance (via an explicit CAL policy; policy‑id recorded in SCR), these telemetry metrics are included in BLP comparisons for the audited window.

BLP‑1 — Scale‑Audit Requirement. Any DRR that selects a more specialized/hand‑engineered method over a general/scalable alternative MUST include a Scale‑Audit:

  • (a) Parity harness: same ComparatorSet, freshness window, and evaluation seeds/replicates; set-returning evaluation (see G.5/G.9). Dominance criterion: Pareto‑only by default across the declared objective vector; any alternative requires a documented waiver by Gov‑CAL under E.3 precedence.
  • (b) Budgets: sweep compute (steps/tokens/params/time/energy, as applicable), data (size/quality), and freedom‑of‑action (from script‑like instructions → minimal prohibitions) under a fixed risk/safety envelope. If any parameter cannot be swept, pin it and record the invariant.
  • (c) Slopes & uncertainty: report ∂quality/∂compute, ∂quality/∂data, and (where applicable) ∂coverage/∂freedom‑of‑action and ∂novelty/∂budget; include error bars/CI from multi‑seed trials; publish edition pins and policy‑IDs in SCR/telemetry (G.11).
  • (d) Resources: publish Resrc‑CAL accounts (time/energy/FLOPs) and assurance deltas (B.3).
  • (e) Objective declaration: list the objective vector (quality, risk, cost, and any illumination telemetry explicitly promoted into dominance via CAL with policy‑id recorded in SCR) used for Pareto comparison.

BLP‑2 — Preference Rule. Given admissibility and comparable assurance (within δ) and budget (within α), prefer the method whose slope vector is Pareto‑dominant over the audited range (per BLP‑1c/1e). If no dominance holds within error bounds, prefer the more general method (fewer domain‑specific heuristics, greater transfer via Bridges Φ/Ψ); otherwise resolve via E/E‑LOG tie‑breakers declared in policy.

BLP‑3 — Minimal‑Prescription Default. Author rules‑as‑prohibitions (negative constraints) over step‑by‑step scripts. Encode limits in Φ policy tables (and Φ_plane where applicable) instead of procedural checklists; allow the agent/system to sequence functions autonomously under those constraints (SoS‑LOG). Pre/post‑conditions and test harnesses remain permitted; scripts are permissible only when mandated by safety/regulation, or with compelling evidence recorded in the DRR and reviewed under E.3 precedence / E.5 Guard‑Rails.

BLP‑4 — Heuristic‑Debt Register. Any hand‑tuned rule admitted for pragmatic reasons MUST be registered as Heuristic Debt with: scope, responsible role, expiry/review window, measurable replacement target under BLP‑2, and a de-hardening/sunset plan. Track in CalibrationLedger/BCT (Baseline Change Tracker) and cite in SCR.

BLP‑5 — Continuous‑Learning Posture. Where product policy allows, enable feedback‑driven adaptation (e.g., preference learning, critique loops) within Guard‑Rails (E.5) and privacy/regulatory controls, with appropriate opt‑outs where required. Disabling adaptation requires DRR justification and a review date.

BLP‑6 — Precedence & Safeguards. BLP is a Gov/Arch policy instantiated by Pillars P‑10 (Open‑Ended Evolution), P‑11 (SoTA Alignment), P‑7 (Pragmatic Utility), and P‑1 (Cognitive Elegance). It does not override safety/ethics (E.5) nor E.3 precedence rulings; where BLP conflicts with Guard‑Rails, Guard‑Rails prevail. When NQD/E/E‑LOG elevates illumination to dominance for exploration mandates, BLP adopts that lens rather than overriding it.

Informative SoTA contexts (post‑2015): set-returning selection across LLM prompt‑programming vs fine‑tuned task models; preference‑learning families (RLHF ↔ DPO); QD archives (MAP‑Elites/CMA‑ME/DQD/QDax); open‑ended environment–method co‑evolution (POET‑class); offline RL vs Decision Transformer parity; and beyond ML, optimization/control (model‑based planning vs hand‑tuned controllers) and simulation‑based inference in the sciences. These are illustrative only; use the parity harness instead of single‑winner leaderboards.

Conformance Checklist — BLP

IDRequirementPurpose
CC‑BLP.1Tolerances α (budget) and δ (assurance) are declared in the DRR or referenced via policy profile.Makes BLP decisions reproducible.
CC‑BLP.2DRR includes a Scale‑Audit (BLP‑1a–e) with published slopes and pinned editions/policy‑IDs.Makes scale behavior auditable.
CC‑BLP.3Selection decision cites BLP‑2 and lists the governing pillars and precedence checks.Ties choice to constitution.
CC‑BLP.4Any admitted heuristic is logged as Heuristic Debt with expiry/review and de‑hardening plan.Prevents silent drift toward brittle rules.
CC‑BLP.5Default authoring uses rules‑as‑prohibitions; deviations are DRR‑justified and safety‑anchored.Preserves agent autonomy under constraints.
CC‑BLP.6Resource accounts (time/energy/FLOPs) and assurance deltas are reported via Resrc‑CAL and B.3.Avoids “free heuristic” illusions.
CC‑BLP.7Replicate counts/seeds and confidence intervals for slope estimates are recorded.Prevents spurious slope inferences.

Relations

  • Instantiates pillars: P‑10, P‑11, P‑7, P‑1.
  • Depends on: G.5/G.9 (admission/comparator/selector & parity harness), G.11 (refresh telemetry), C.5 (Resrc‑CAL), C.18 (NQD‑CAL), C.19 (E/E‑LOG), F.7/F.9 (Bridges, CL/Φ/Ψ).
  • Constrained by: E.5 Guard‑Rails (DevOps Lexical Firewall; Notational Independence; Cross‑Disciplinary Bias Audit) and E.3 precedence.

Definitions

α (budget tolerance) may be relative or absolute; declare units (e.g., % cost, wall‑time, energy). δ (assurance tolerance) is the permissible delta in assurance under B.3; declare measure and floor(s).

Consequences

Positive

  • Provides an explicit “north star” for every contributor.
  • Delivers a falsifiable checklist for evaluating proposals.
  • Builds trust in high‑assurance domains through transparency.

Trade‑offs

  • Constitutional review adds friction to rapid, informal changes.
  • Amending the pillar set itself demands high‑bar governance.

Rationale

The pillars are distilled from systems engineering, philosophy of science, software architecture, and ontology design. They interlock: Cognitive Elegance (P‑1) enables Didactic Primacy (P‑2); Open‑Ended Kernel (P‑4) and FPF Layering (P‑5) make Open‑Ended Evolution (P‑10) and SoTA alignment (P‑11) feasible; Cross‑Scale Consistency (P‑8) provides the algebraic backbone for Scalable Formality (P‑3). This minimal yet sufficient set balances stability with change, rigor with accessibility, and abstraction with measurable impact.

C.29 is a downstream support pattern for this constitution when mathematical first-principles structure is part of an argument about pillar support. It makes the structure, loss, and stop condition explicit while E.2 remains authority over what counts as a pillar.

Relations

  • Depends on: pat:constitutional/vision – pillars operationalise the mission.
  • Refined by: All subsequent patterns in the Core Specification.
  • Mathematical support path: C.29 supports pillar-impact arguments only for adequacy of mathematical lenses used to express first-principles structure. It does not amend pillar content, priority, or conformance.
  • Governs: Every DRR, tool, and pedagogical artefact linked to FPF.

These pillars are not a cage but the load‑bearing columns of a workshop where ideas can be safely built, dismantled, and evolved.

E.2:End

FPF Pillar-Adequacy Evaluation CharacteristicSpace

Status: Core.

Problem frame

Use E.2.DA when the object under improvement is an FPF-level object and the question is whether it realizes the E.2 Pillars adequately for a declared use. The object can be a monolith edition, selected pattern host set, pattern family, projection set, release candidate, or whole-FPF edition.

Use it after a broad cleanup, new pattern family, projection repair, source-use repair, or corpus-level improvement when local pattern quality is not enough. A set of good local patterns can still harm FPF entry, naming, layering, source use, projection integrity, or open-ended evolution.

Not this pattern when the evaluated object is one authored pattern version, one DRR, one local wording repair, or one pattern-use entry problem. Use E.21, E.9.DA, E.10 and its precision-restoration neighbours, or E.11 for those objects.

First useful move: name the FPF object under improvement named by value, declared use, reader family, and qualification window; then evaluate all eleven Pillar coordinates. If a Pillar seems unaffected, give it a value and a short rationale saying what is preserved.

What goes wrong if missed: FPF can become locally polished but globally worse. Readers may find fewer useful entry points, precision repairs may erase the working move, source rows may become decorative, or several patterns may grow local variants of the same doctrine.

Primary EntityOfConcern in plain terms: the scoped FPF object under improvement as an E.2 Pillar-realizing language object.

Problem

E.2 gives the Pillars and their constitutional meaning. It does not by itself evaluate whether a concrete FPF object realizes those Pillars well enough for a concrete use. Without E.2.DA, corpus-level reviews tend to collapse into local pattern scores, process state, review praise, or broad claims that "FPF improved."

The specific failures are:

  1. Local pattern quality is averaged into FPF adequacy.
  2. Entry projections and companion files start carrying semantics beside governing patterns.
  3. Precision repair improves terminology but damages first-use comprehension or changes the FPF kind carried by the repaired text.
  4. Source and SoTA rows are counted rather than checked for changes in FPF moves.
  5. Front-like words such as all 5s, exceptional, Pareto, SoTA, NQD, or shortlist become loose synonyms.
  6. Corpus-level stop claims hide what became worse.

Forces

ForceTension
Constitutional meaning vs evaluationPillar meanings stay in E.2; values over realized adequacy live here.
Whole-FPF quality vs local qualityOne strong pattern can still sit in a weak corpus ecology.
Discoverability vs precisionReal readers search ordinary words, while FPF claims need governing patterns and kinds.
Didactic force vs semantic legalityThe text must teach the move without smuggling new ontology into examples or projections.
Breadth vs affordabilityEleven Pillars are complete enough for FPF; affordability comes from compact evidence, not omitted coordinates.
Open-ended evolution vs release stopFPF can improve forever, but one scoped object needs a local stop condition.

Solution

E.2.DA is the Pillar-adequacy specialization of A.19.ECS. It evaluates one FPF object under improvement against all eleven E.2 Pillars for a declared use.

There is no smaller E.2.DA evaluation. If the caller only needs local pattern quality, DRR adequacy, or wording repair, that is a different object-under-improvement evaluation. Once E.2.DA is invoked, every Pillar coordinate receives a value, short rationale, evidence locus, and shared evidence basis for the FPF object being evaluated.

Local names and kind settlement

Local nameKind and role
FPFPillarAdequacyEvaluationAuthored evaluation record over one scoped FPF Pillar-adequacy claim.
FPFObjectUnderImprovementRefFPF object version named by value being evaluated.
FPFAdequacyUseScopeDeclared FPF-level use the object must serve.
FPFAdequacyReaderScopePrimary reader family and working situation for the adequacy claim.
FPFAdequacyQualificationWindowEdition, source-currentness, neighbour, release, or comparison window for which the values hold.
FPFPillarAdequacyCoordinateSetThe eleven required Pillar coordinates in this pattern.
FPFPillarAdequacyEvidenceBasisChecked loci named by value in the scoped FPF object: pattern bodies, host or monolith sections, projections, README scenarios, ToC rows, E.11 entry-distribution loci, I.2 expanded entry-disambiguation cases, source rows, relation rows, companion files, evaluation results, and missing or unchecked loci that affect values.
FPFPillarValueRationalesRequired result rows: Pillar coordinate, value, short rationale, and evidence locus named by value.
PillarAdequacyEvidenceRefsLoci named by value in patterns, projections, source rows, entry rows, relation rows, or findings used as value evidence.
FPFKindRestorationEvidencePre-repair and post-repair object-kind, relation-or-claim-kind, slot-or-use-position when live, admissible-use, and scope evidence for broad precision or wording cleanup that affects the scoped FPF object.
FPFPillarAdequacyStatusAdmissible-use result for the scoped FPF Pillar-adequacy claim.
FPFPillarAdequacyFrontOptional non-dominated set of FPF variants or edit packages under the declared coordinate set.

These names are local to the evaluation unless F.18 promotes a durable name. They name FPF content objects and evaluation fields, not release state, review state, or project evidence.

Evaluation record

FPFPillarAdequacyEvaluation:
  FPFObjectUnderImprovementRef: <object and version named by value>
  FPFAdequacyUseScope: <entry | authoring | review | project use | source absorption | corpus release | other use named by value>
  FPFAdequacyReaderScope: <primary reader and working situation>
  FPFAdequacyQualificationWindow: <edition/source/neighbour/release/comparison window>
  FPFPillarAdequacyEvidenceBasis: <checked pattern, host, monolith, projection, README/ToC/E.11/I.2 entry locus, source, relation, companion, evaluation-result, and missing loci that affect values>
  FPFPillarAdequacyCoordinateTable: <all eleven coordinates, values, short rationales, evidence loci>
  FPFKindRestorationEvidence: <when broad wording/precision repair is part of the evaluated change: pre/post kind, relation or claim kind, slot or use-position when live, admissible use, scope, governing pattern when another pattern governs the kind under repair/relation/claim/position, and preserved/split/intentionally changed/blocker disposition>
  FPFPillarAdequacyStatus: <status>
  StopOrRepairCondition: <local stop, first repair, Pillar decision, or architecture decision>

[E.22](/generated/patterns/E.22) may frame the evaluation purpose when the caller needs floor evaluation, exceptional improvement, trade-off inspection, open-question discovery, absorption, or proposal portfolios. [E.23](/generated/patterns/E.23) governs repeated improvement after the evaluation returns findings or candidate proposals.

Ordinal coordinate scale

ValueLabelMeaning
0absentThe Pillar is not realized for the declared FPF object and use.
1namedOnlyThe Pillar is named but cannot guide the FPF-level use.
2partiallyExpressedForDeclaredUseThe Pillar is present but incomplete, fragile, or too local.
3sufficientlyExpressedForDeclaredUseThe Pillar is realized enough for the declared use, with known limits visible.
4wellExpressedForDeclaredUseThe Pillar is clear across relevant loci and protected from common loss.
5exceptionallyExpressedForDeclaredUseThe Pillar is exceptionally realized with reinforcing loci, heterogeneous cases, and no hidden FPF-level loss.

The values are ordinal content evaluations. They are not a scalar score, maturity ladder, release gate, or proof that development ends.

Required Pillar coordinates

Pillar coordinateEvaluation questionGood state
P1CognitiveEleganceAdequacyDoes the object expose decisive structure without ornamental formalism?The reader sees the smallest structure that changes the move.
P2DidacticPrimacyAdequacyDoes human comprehension stay ahead of formal, tooling, or review purity?Working situation, recognition reason, first move, and payoff stay visible.
P3ScalableFormalityAdequacyCan informality mature toward formal assurance without forks or rewrites?Plain, Tech, Formal, and mathematical strengthening remain staged.
P4OpenEndedKernelAdequacyDo kernel concepts stay meta-level while domain knowledge stays in patterns?New content extends FPF without smuggling domain doctrine into the kernel.
P5FPFLayeringAdequacyDo modular pattern layering and neighbour authority stay intact?Patterns can be added, replaced, or removed without shadow authority.
P6LexicalStratificationAdequacyAre Plain, Tech, Formal, and mathematical registers recoverable when live?Load-bearing wording maps to fields named by value, kinds, lenses, or neighbours.
P7PragmaticUtilityAdequacyDo proofs, measures, models, and reviews change real admissible action?The object changes prediction, decision, diagnosis, design, repair, stop, or assignment.
P8CrossScaleConsistencyAdequacyDo composition, aggregation, boundary, emergence, and method structure stay consistent across scales?Cross-scale claims name preserved structure, lost structure, algebra, and boundary.
P9StateExplicitnessAdequacyAre states, transitions, currentness, editions, and qualification windows explicit when live?Readers can tell what version/state is being used and what changes it.
P10OpenEndedEvolutionAdequacyCan improvement continue cheaply and safely without pretending development ends forever?Local stop conditions coexist with reopen paths for new use, source, comparison, or failure evidence.
P11SoTAAlignmentAdequacyDoes current knowledge discipline the object without citation theatre?Current sources change moves, boundaries, examples, checks, or stop rules.

Evidence and coordinate separation

One evidence locus may support several coordinates, but the rationale must say what property it supports in each coordinate. The following distinctions carry most repairs:

DistinctionUse
P1 vs P2smallest decisive structure vs reader comprehension and first move.
P2 vs P6usable recognition text vs recoverable register mapping.
P5 vs P7right governing pattern vs useful change in action.
P7 vs P11practical payoff vs current source contribution.
P8 vs P9cross-scale invariant vs state, transition, edition, and currentness.
P10 vs E.23evolvability of the FPF object vs repeated improvement method.

If a distinction cannot be recovered from the FPF object, lower the affected coordinate and state the first repair. Do not add a new local doctrine table to explain around the missing content.

E.21 and E.9.DA results are evidence loci for E.2.DA, not inputs to be averaged. A pattern-quality value can support a Pillar only by pointing to the FPF-level effect it creates or damages.

Result-row discipline and calibration

An E.2.DA result uses this table shape:

Pillar coordinateValueShortRationaleEvidenceLocus
<E.2.DA coordinate><0..5><assigned-value basis; why the lower adjacent value would understate the FPF evidence; why the higher adjacent value would overstate it, or for 5 what would lower/reopen><pattern section, monolith section, host, README scenario, ToC row, E.11 entry-distribution locus, I.2 expanded case, projection, source row, relation row, companion file, evaluation result, or missing locus named by value>

A Pillar essay, local-quality average, two-column table, or result whose value depends on unchecked corpus/projection/source evidence is not an E.2.DA result. It is only draft evaluation material. Missing or unchecked evidence lowers the Pillar coordinate that needs it; it does not make the coordinate optional.

Common calibration points:

Pillar family345
Entry, usability, and projection PillarsThe object can be used with visible limits, but projection or first-use evidence is partial.Relevant governing loci and projections are coherent enough for declared use.The use is replayable across governing text, projection, cold-reader or retrieval evidence, and non-use boundary.
Layering and semantic authority PillarsNeighbours are plausible, but some authority or shadow-spec risk remains.Governing patterns named by value and thin projections are distinguishable.Authority is robust across pattern bodies, relations, projection rows, and anti-fragmentation cases.
Source and evolution PillarsSource or reopen language exists, but currentness, contribution, or smallest-reopen basis is compact.Source contribution, currentness window, and reopen condition are explicit for declared use.Source-front movement and future reopen are replayable without freezing development after a local stop.

Status and stop condition

StatusMeaning
admissibleForDeclaredFPFUseAll eleven coordinates meet the declared floor for the scoped use.
repairBeforeFPFUseOne or more coordinate floors fail for the declared use.
holdForPillarDecisionThe defect requires an E.2 Pillar amendment or precedence decision.
holdForArchitectureDecisionThe defect requires pattern split, object-under-improvement, source-use, projection-role, or naming architecture decision.
refreshNeededA source, pattern, entry role, projection, relation, or vocabulary change invalidates a previous evaluation.

The stop condition states the declared floor, values, bounded non-use, smallest reopen locus, and first repair if the declared use is not yet admissible.

Compact result form

E.2.DA result:
  FPF object under improvement: <FPFObjectUnderImprovementRef>
  Declared use and reader: <scope>
  Qualification window: <window>
  Evidence basis checked: <FPFPillarAdequacyEvidenceBasis>
  Status: <FPFPillarAdequacyStatus>
  Coordinate table: <Pillar coordinate | Value | ShortRationale | EvidenceLocus for all eleven Pillars>
  First repair or stop: <repair | hold | local stop>
  Reopen if: <smallest changed locus or condition>

For a small release decision, the coordinate table may be compact. It is still complete. Status is not assigned from prose, a checklist count, a local-pattern average, a two-column table, or a result missing evidence loci needed by its values.

Worked slices

Broad precision cleanup. A wording pass makes many patterns more admissible but several Problem frames now explain less about why the distinction matters, or a cleaned phrase changes the governed kind while the trigger word disappears. P2, P6, and P7 receive lower values until the affected patterns restore recognition reason, useful action, and pre/post kind evidence in admissible wording.

Repeated-content/route/reference/neighbour-reference/negative-fanout cleanup that weakens content. A corpus pass removes repeated "not proof/not gate/not work" prose, route metaphors, repeated guards, repeated mini-rules, repeated conditional neighbour-reference mappings, reference boilerplate, or architecture-placement prose, but leaves several patterns with less positive ontology, method, norm, or worked action than before. P2, P5, P6, P7, and P10 receive lower values until the affected patterns restore their own subject content and state only live declarative governing relations.

Projection repair. README scenarios, ToC rows, E.11 entry-distribution loci, and I.2 expanded entry-disambiguation cases improve search but can start carrying pattern semantics. P5 and P9 fall because projections become shadow authority. The repair moves durable semantics back to governing patterns and leaves thin echoes in projections.

Source absorption. A new source family adds current methods, but pattern bodies only cite it. P11 stays low until source rows change selected moves, examples, checks, or stop conditions. P7 changes only when the source changes action.

Bias annotation

This pattern biases FPF toward whole-language adequacy. The bias is useful because local repairs often hide corpus-level loss.

The bias is bounded by the object-under-improvement declaration. E.2.DA does not replace E.21, E.9.DA, E.10, E.11, or E.23; it evaluates their FPF-level Pillar effect when the scoped FPF object includes their results.

Conformance checklist

CheckRequirement
CC-E2DA-1Name FPFObjectUnderImprovementRef, use scope, reader scope, and qualification window.
CC-E2DA-2Preserve E.2 as the source of Pillar meaning.
CC-E2DA-3Evaluate all eleven Pillar coordinates with values, short rationales, and evidence loci, using the required result-row shape.
CC-E2DA-4Justify values from FPF content, not review praise, landing, monolith placement, or absence of visible defects.
CC-E2DA-5State status, stop or first repair, bounded non-use, and reopen condition.
CC-E2DA-6Keep projections, packets, companions, and entry rows below governing pattern authority.
CC-E2DA-7Treat E.21 and E.9.DA as evidence loci only where they change Pillar realization.
CC-E2DA-8State what became worse when visible coordinates improved.
CC-E2DA-9State the FPFPillarAdequacyEvidenceBasis; if host/monolith parity, projection, README, ToC, E.11, I.2, source-currentness, relation, companion, or evaluation-result evidence is missing or unchecked, lower the Pillar coordinate that needs it.
CC-E2DA-10Use adjacent-value calibration when assigning 3, 4, or 5; a rationale must distinguish the assigned value from its lower and higher neighbours.
CC-E2DA-11When the evaluated FPF object includes broad wording, naming, or precision cleanup, state FPFKindRestorationEvidence for changed FPF-governed phrases. If the cleanup changes, narrows, widens, flattens, or loses the governed kind, relation, claim kind, slot or use-position when live, admissible use, or scope without accepted decision evidence and governing-pattern reference when another pattern governs the kind under repair, relation, claim, or position, lower the affected Pillar coordinates and keep the repair blocking.

Common anti-patterns and repairs

Anti-patternRepair
Pillar essay. A review names Pillars without values or evidence.Produce the complete E.2.DA result form.
Local-quality averaging. Several E.21 values are averaged into FPF adequacy.Re-evaluate Pillar effects over the FPF object.
Sterile or kind-changing precision cleanup. Language is admissible but no longer usable, or the trigger word is gone while the governed kind, relation, claim kind, slot or use-position when live, admissible use, or scope changed.Lower P2/P6/P7 and restore recognition reason, useful action, and pre/post kind evidence; if the kind or use being made-position changed without an accepted decision, treat the cleanup as a blocking semantic defect.
Projection authority. A ToC, packet, or companion carries semantics.Move semantics to the governing pattern and leave projection echo.
Citation shelf. Source rows do not change FPF moves.Lower P11 and state the missing source contribution.
Pillar table without evidence loci. Values are listed but not tied to corpus loci named by value.Re-run with `Pillar coordinate

Relations

PatternRelation
E.2Supplies Pillar names and meanings.
A.19.ECSSupplies construction discipline for object-under-improvement evaluation characteristic spaces.
E.21Evaluates one pattern version; may supply evidence loci.
E.9.DAEvaluates one DRR; may supply evidence loci.
E.22Frames the quality-evaluation purpose when needed.
E.23Runs repeated improvement after values or proposal rows exist.
E.10, A.6.P, C.2.P, C.16.Q, F.18Govern local precision and naming repair.
E.11, E.17, I.2Govern entry, projection, publication, description, and expanded entry-disambiguation roles that may affect Pillar adequacy.
C.18, C.19, G.5, G.9, G.11Govern OEE/NQD, pool, selected-set, parity, and refresh semantics when front-like vocabulary is live.
C.29, C.16, A.17, A.18, A.19Govern mathematical-lens, characteristic, scale, measurement, and characteristic-space legality when those claims are being made.

Rationale

FPF needs a corpus-level quality instrument because the language can degrade while individual pattern edits look successful. The complete eleven-coordinate evaluation prevents the common escape hatch: "this is only a local repair" repeated across many files until Pillar realization changes.

The instrument is still affordable because it asks for short rationales and evidence named by value loci. It does not require a new review process, full audit bundle, or exhaustive source dossier.

SoTA-Echoing

Source-use decisionLocal adoption
E.2 constitutional sourceSupplies Pillar heads and prevents local redefinition.
Pattern-language entry and projection discipline from README, E.11, ToC, and I.2Makes entry, thin echoes, and governing-pattern authority evaluable under P1, P2, P5, P7, P9, and P10.
Current pattern-quality source lines from E.21Provide local pattern-quality evidence without averaging it into corpus adequacy.
Current DRR adequacy source lines from E.9.DAProvide decision-quality evidence when upstream decisions affect Pillar realization.
Precision and naming source lines from E.10, A.6.P, C.2.P, C.16.Q, and F.18Keep wording repair distributed while evaluating FPF-level Pillar effects.
MCDA, Pareto, Goodhart, and QD/OEE/NQD lines inherited through E.21, E.22, and E.23Keep improvement multi-coordinate, non-scalar, and sensitive to hidden losses.

Consequences

ConsequenceBenefitCost
FPF-level adequacy becomes measurable by content.Release and corpus decisions no longer rely on local praise or review state.Evaluators must name the FPF object and use named by value.
Complete Pillar evaluation blocks partial-good stories.Hidden losses in entry, layering, source use, and evolution become visible.Even compact evaluations must touch all eleven coordinates.
Local evaluation patterns keep their authority.E.21, E.9.DA, and E.10 are evidence or repair neighbours, not substitutes.Users must choose the right object under improvement before evaluating.

E.2.DA:End

Principle Taxonomy & Precedence Model

Problem frame

Pattern E.2 supplies eleven immutable pillars, yet experience shows that a flat list of principles invites ambiguity: reviewers cannot decide which pillar overrules another and “dead‑letter” rules accumulate.

Problem

When two pillars or derived principles pull in opposite directions, architectural decisions stall—or worse, drift toward the loudest voice. Without an explicit taxonomy and precedence cascade, FPF risks devolving into subjective debate, breaking its claim to be a rigorously auditable “operating system for thought.”

Forces

ForceTension
Categorical ClarityCoherent grouping ↔ preservation of individual nuance
Deterministic Conflict ResolutionPredictable hierarchy ↔ flexibility for context‑specific overrides
Evolutionary StabilityDurable core ↔ adaptability to new knowledge

Solution

Principle Taxonomy

Every principle is an instance of U.Principle assigned exactly one class ∈ { Gov, Arch, Epist, Prag, Did }.

ClassScope & PurposeExample Pillars
Gov (Governance)Change process, community decision‑makingP‑10 Open‑Ended Evolution - P‑11 SoTA
Arch (Architectural)Macro‑structure & invariantsP‑1 Cognitive Elegance - P‑4 Kernel
Epist (Epistemological and Ontological)Semantics, evidence, trustP‑3 Scalable Formality - P‑8 Consistency
Prag (Pragmatic)Real‑world value & cost/benefitP‑7 Pragmatic Utility
Did (Didactic)Cognition & learnabilityP‑2 Didactic Primacy - P‑6 Lexical Stratification

Epistemological sub‑concerns (reasoning, falsifiability) reside inside Onto, avoiding category sprawl yet keeping semantics and trust in one bucket.

E.3:4.2 - Precedence Stack

LevelGoverning ArtefactOverrides
0Vision & Mission (E.1)everything
1Eleven Pillars (E.2)all below
2Principles (this pattern)patterns & DRRs
3Architectural / Definitional patternslocal rules
4Tooling & Pedagogyinformative only

Within the precedence stack the default order is: Gov ≫ Arch ≫ Epist ≫ Prag ≫ Did

Graph Rule — The precedence graph MUST be acyclic; any new edge that would form a cycle is rejected.

Governance principle vs Architectural principle clash: e.g. Core release schedule (Gov) outranks performance‑tuning (Prag)

Conformance Checklist

IDRequirementPurpose
CC‑PT.1Every principle record MUST state class and may list precedence_over[].Enables deterministic overrides.
CC‑PT.2Precedence graph MUST be acyclic.Prevents circular law.
CC‑PT.3Any DRR introducing/modifying a principle MUST include a Pillar Impact Analysis and proposed precedence edges impact on each affected Pillar (P‑1… P‑11)Aligns evolution with Pillars.

Illustrative Conflict Resolution

  1. The Conflict

    • P‑1 Cognitive Elegance (Arch) demands an unambiguous term for “part–whole” entities, pushing us toward Holon.
    • P‑2 Didactic Primacy (Did) values immediate practitioner familiarity, pushing us to retain System.
  2. Risk of Stalemate Without a precedence cascade, the discussion would collapse into subjective argument: “purity beats clarity!” vs “clarity beats purity!”.

  3. Applying the Precedence Model

    • Default order: Gov ≫ Arch ≫ Epist ≫ Prag ≫ Did.
    • Arch outranks Did; therefore P‑1 takes formal precedence over P‑2.
  4. Principled Decision We adopted Holon to satisfy the higher‑priority principle and mitigated the didactic cost by:

    • declaring System ≡ U.System ⊑ U.Holon,
    • providing aliases and an “On‑Ramp” tutorial.

The precedence rule did not merely name a winner; it compelled a solution that honoured both principles in proportion to their rank.

Precedence (high → low). Law & Regulation → E.5 Guard‑RailsB.3 Trust & AssuranceE.3 governance decisionsE/E‑LOG policies (editioned) → BLP (E.2) → Product Policies → Implementation Tactics.

Notes.

  • BLP is a constitutional policy (see E.2 / “BLP”), but does not supersede E.5 Guard‑Rails nor B.3 assurance floors; it does govern ties among lawful, comparable‑assurance options.
  • Wherever NQD/E/E‑LOG promotes illumination telemetry to dominance (via an explicit CAL policy; policy‑id recorded in SCR), BLP adopts that lens rather than overriding it (see E.2 BLP‑6).
  • Any exception to policy MUST include a DRR with rationale and expiry.
  • BLP Override (Waiver). When a narrower hand‑engineered method is selected over a general/scalable alternative within declared tolerances (α = budget, δ = assurance), the DRR MUST include:
    • a BLP Scale‑Audit (see E.2 BLP‑1) covering compute/data/freedom‑of‑action sweeps and slope/uncertainty reporting,
    • the tolerances α/δ and objective vector used (E.2 BLP‑1e),
    • a Heuristic‑Debt entry (responsible role, scope, expiry/review, de-hardening plan) per E.2 BLP‑4,
    • an AutonomyProfileId (see E.3‑ABL) and the GateDecision authority (see Gate‑decision authority map below). Set-returning parity. All precedence decisions that compare methods MUST use the G.5/G.9 parity harness and Pareto dominance; scalarisation across mixed scales/units is prohibited (B.3).

BLP — Bitter‑Lesson Hooks into Precedence

  1. Tie‑breaking. If two lawful options are within δ assurance and within α budget, prefer the option whose slope vector Pareto‑dominates over the audited window; if no dominance, prefer the more general method. (E.2 BLP‑2.)
  2. Script‑vs‑Search conflicts. For conflicts between procedural scripts and general search/learning, scripts prevail only when mandated by E.5 or regulation, or when a DRR records a BLP‑waiver with expiry and hazard rationale (E.2 BLP‑3/6).
  3. Publication. Precedence rulings that reference BLP MUST publish editioned policy‑IDs, edition pins, and Resrc‑CAL accounts to the SCR (E.2 BLP‑1d; G.11).

ABL — Autonomy‑Budget & Oversight Profiles (GateProfile) This section defines an extensible family of autonomy oversight profiles for agentic tool use: each profile specifies (i) a budget envelope, (ii) a Freedom‑of‑Action (FoA) descriptor, and (iii) the required gate‑decision publication to authorize execution under that envelope. The familiar labels L0…L4 are treated here as profile identifiers (not a fixed managerial ladder): projects MAY introduce additional profiles or sub‑profiles by minting new profile ids, provided they publish the same fields (budgets, FoA, decision roles, telemetry requirements) and keep profile changes explicit and auditable.

ProfileIdNameFreedom‑of‑Action (FoA)Explore‑Share (default)Typical UseGateDecision authority
L0Scripted ExecutionWhitelist only; fixed scripts0Compliance‑critical, deterministic proceduresEngineer‑of‑Record (EoR)
L1Constrained SequencingNegative constraints; single‑tool≤ 0.10Low‑risk automation with bounded noveltyEoR + Peer Review
L2Supervised AutonomyMulti‑tool plans; bounded replanning0.20 (±0.10)Ambiguous tasks; moderate budgetTeam Lead + Safety
L3Auditable AutonomyMulti‑step, self‑replanning; adaptive0.30 (±0.10)Production agents with learning under guard‑railsProduct + Safety + Legal
L4Open‑Ended / Research ModeBroad FoA within sandbox & rails0.40–0.50Illumination‑first exploration, sandboxes onlyGovernance Board (Gov‑CAL)

Normative requirements by profile.

  • Budgets. Each profile MUST declare ceilings for time / compute / cost / risk and a FoA descriptor; units must be explicit (Resrc‑CAL). Budgets are hard gates at run‑time (C.Agent‑Tools‑CAL ATC‑3).
  • Profile binding & change visibility. Every CallPlan MUST declare the active profile id. Any profile change is a GateCrossing (E.18) and MUST be published (DecisionLog entry + pinned policy‑ids), so an auditor can reconstruct which profile governed which Window.
  • Assurance floors. B.3 WLNK minima on F and R apply at all profiles. Any profile‑specific tightening (e.g., higher required R_eff or stricter CL/Φ policies for broader FoA) MUST be declared on the profile and pinned by policy‑id. Pre‑deployment assurance deltas MUST be recorded for L2+.
  • Exploration discipline. explore_share MUST be explicit in the CallPlan (C.Agent‑Tools‑CAL ATC‑4). Deviations from defaults require DRR justification.
  • Provenance. L1+ MUST emit a CallGraph with Service/Method editions, EmitterPolicyRef, budget deltas, and observation hooks (C.Agent‑Tools‑CAL ATC‑5/6).
  • BLP conformance. For L2+, selection MUST apply BLP (E.2 BLP‑2) with α/δ tolerances declared in the plan policy. Any admitted heuristic requires a Heuristic‑Debt entry (E.2 BLP‑4).
  • Learning/Adaptation. L3–L4 MAY enable feedback‑driven adaptation within E.5 Guard‑Rails and privacy controls; L0–L2 default off unless a DRR documents mitigation (E.2 BLP‑5).
  • Human‑in‑the‑Loop (HITL). HITL obligations are expressed as gate decisions and pause/resume hooks, not an implicit “approval ladder”:
    • L0–L1: execution MAY start only after an explicit GateDecision authorizing the CallPlan is present in the declared window.
    • L2: sentinels MUST be able to pause execution; resumption requires a new GateDecision recorded in the DecisionLog.
    • L3: the profile MUST declare periodic review windows; continued execution across a review boundary requires an explicit GateDecision.
    • L4: continuous telemetry review; the default execution context is sandboxed; leaving the sandbox requires an explicit GateCrossing with a published CrossingBundle (E.18 + F.9/F.17/E.17, with A.21 when a gate decision is live).

Gate‑decision authority map (default signers; who may author GateDecisions).

  • L0: EoR or appointed maintainer.
  • L1: EoR and peer reviewer (two‑person rule).
  • L2: Team Lead and Safety representative.
  • L3: Product Owner and Safety and Legal/Privacy.
  • L4: Gov‑CAL Board (multi‑disciplinary) with documented scope, time‑boxed trial budget, and rollback criteria.

Profile promotion / demotion triggers.

  • Promote a profile when repeated BLP‑consistent results show stable assurance within δ and budget adherence within α for ≥ N_policy runs (declare N_policy in the active profile). Promotion is not implicit: a GateDecision MUST authorize the profile change and cite the slope evidence (E.2 BLP‑1c).
  • Demote a profile when: (i) a sentinel breaches risk or budget, (ii) assurance drops below floors, (iii) policy changes, or (iv) a significant heuristic‑debt item expires without replacement. Demotion MUST be published as a GateCrossing with updated budgets/policies pinned.

Conformance Checklist — E.3 ↔ BLP Interop

IDRequirementPurpose
CC‑E3.10Precedence list includes BLP explicitly below E/E‑LOG and above product tactics; conflicts handled via BLP‑waiver discipline.Makes BLP’s standing auditable.
CC‑E3.11Every DRR that overrides BLP MUST include a Scale‑Audit (E.2 BLP‑1) and a Heuristic‑Debt entry (E.2 BLP‑4).Prevents silent heuristic drift.
CC‑E3.12Each agentic plan declares an AutonomyProfileId (e.g., L0–L4) with explicit budgets, explore_share, and E/E‑LOG EmitterPolicyRef.Aligns autonomy with assurance.
CC‑E3.13L1+ executions emit CallGraphs with editioned policy/method ids and budget deltas; L3+ include adaptation status.Ensures replayability & audit.
CC‑E3.14Profile changes follow promotion/demotion triggers and are published as GateCrossings with edition pins in the SCR.Keeps autonomy under control.

Consequences

Positive — Turns subjective debate into objective, traceable decisions; high‑impact conflicts surface early.

Rationale

The chosen taxonomy mirrors FPF’s layered dependency: Governance rules how change occurs; Architecture shapes what can exist; Epistemology secures meaning and trust; Pragmatics and Didactics ensure usefulness and learnability. Explicit override edges supply the flexibility experts need, while the default hierarchy keeps day‑to‑day design deterministic—a “living constitution” that remains both human‑intelligible and machine‑enforceable.

Relations

  • Depends on: pat:constitutional/vision, pat:constitutional/pillars
  • Governs: All subsequent patterns and DRRs; Guard‑Rail patterns reference CC‑PT.\

“A taxonomy sorts principles; precedence gives them order—together they convert debate into design.”

E.3:End

FPF Ecosystem Family Architecture

Problem frame

The FPF ecosystem contains three maintained families: the normative Conceptual Core, executable or machine-checking Tooling Reference material, and learning-oriented Pedagogical Companion material. If these families are mingled without a clear architectural separation, the ecosystem becomes difficult to navigate, govern, and maintain. Users cannot easily distinguish binding rules from helpful advice, and the entire framework's release cycle becomes coupled to its most volatile component.

Problem

How can we structure the FPF ecosystem to ensure a clean separation of concerns between normative concepts, didactic materials, and executable tooling? A formal architecture is required to maintain conceptual purity, enable independent evolution of components, and provide a clear map for all stakeholders.

Forces

ForceTension
Stability vs. AgilityThe conceptual core must evolve slowly and deliberately ↔ tools and tutorials must iterate quickly to keep pace with technology and user needs.
Authority vs. AccessibilityUsers need to know which rules are normative and binding ↔ they also need accessible, non-normative guides to help them learn.
Modularity vs. CohesionThe different FPF ecosystem families must be able to evolve independently <-> they must remain part of a single, coherent FPF ecosystem.

Solution

The FPF ecosystem is formally stratified into three canonical FPF ecosystem families. Each family has a distinct purpose and is governed by different rules, ensuring a clear separation of concerns. The interaction between these families is governed by the Unidirectional Dependency Principle (see Guard-Rail E.5.3).

  1. The Conceptual Core (The Canon): This family contains the normative FPF patterns, kernel definitions, rules, and invariants. It is the canonical FPF pattern set for universal FPF content. It is defined to be tool-agnostic and notation-independent.

  2. The Tooling Reference: This family contains executable tools and machine-checkable support publications that implement or verify the normative rules of the Core. This includes reference linters, simulators, and data schemas. This family makes Core rules operational without becoming the Core pattern set.

  3. The Pedagogical Companion: This family contains non-normative, didactic publications designed to help humans learn and apply FPF. This includes tutorials, worked examples, and playbooks. This family explains the Core and the Tooling Reference without changing Core meaning.

Archetypal Grounding (System / Episteme)

  • For a U.System:

    • Conceptual Core: Defines the universal pattern U.System.
    • Tooling Reference: Provides a modeling language profile or a serialization schema for modeling systems.
    • Pedagogical Companion: Provides a tutorial on how to model a water pump using that profile.
  • For an U.Episteme:

    • Conceptual Core: Defines U.Episteme and the F-G-R assurance tuple components (F/R characteristics plus G as ClaimScope).
    • Tooling Reference: Provides the reference linting tool to automatically score epistemes.
    • Pedagogical Companion: Provides a case study on how a scientific theory's R-score evolves over time.

Conformance Checklist

IDRequirement
CC-E.4.1Every FPF pattern, support publication, tool, or pedagogical publication MUST declare which of the three families (Core, Tooling, Pedagogy) it belongs to.
CC-E.4.2The content of each family member MUST be consistent with the defined purpose of its family (e.g., no normative rules in the Pedagogical Companion).
CC-E.4.3Tooling Reference and Pedagogical Companion family members SHALL NOT be imported by Conceptual Core patterns.

Consequences

BenefitsTrade-offs / Mitigations
Clear Separation of Concerns: Users and contributors can immediately identify the nature and authority of any given FPF pattern, support publication, tool, or learning publication.Requires Discipline: Authors must be careful to place new content in the correct ecosystem family.
Decoupled Release Cycles: The Core can maintain a stable, slow release cadence, while the Tooling Reference and Pedagogical Companion families can evolve rapidly.-
Architectural Clarity: Provides a simple, powerful mental model for navigating the entire FPF ecosystem.-

Rationale

This pattern establishes the macro-architecture of the entire FPF ecosystem. By separating the normative Core from executable Tooling Reference material and learning-oriented Pedagogical Companion material, it creates a system that is simultaneously stable, agile, and accessible. This layered architecture is a proven pattern in large-scale systems, from the OSI model in networking to the structure of modern operating systems, and it is essential for FPF's long-term health and scalability.

Relations

  • Instantiates: P-5 (FPF Layering) at a macro-level.
  • Is Constrained by: E.5.3 (Unidirectional Dependency).
  • Is Foundation For: The entire authoring and governance model, as it defines the "territories" where different rules apply.

“A canon without a rationale is scripture; a rationale without a canon is gossip. FPF keeps both, fused in patterns.”

E.4:End

Four Guard‑Rails of FPF

Problem frame

FPF positions itself as a timeless, universal “operating system for thought.” Collaborative projects of this scope face four predictable entropic pulls:

  1. Implementation gravity – concept prose accretes tool jargon.
  2. Notation lock‑in – one diagram style becomes “the language.”
  3. Convenience cycles – quick fixes create reverse dependencies.
  4. Disciplinary monoculture – implicit bias colours “universal” rules.

Left unchecked, these forces erode Pillars P‑1 Cognitive Elegance, P‑4 Open‑Ended Kernel and P‑5 FPF Layering.

Problem

Without explicit, non‑negotiable protectors the Conceptual Core would slowly:

  • entangle with transient technology terms,
  • hard‑freeze into a single dialect,
  • devolve into a tightly coupled “big ball of mud”,
  • betray its trans‑disciplinary promise.

Forces

ForceTension
Purity vs PragmatismPreserve pristine concepts ↔ need real examples.
Universality vs ConventionRules valid across domains ↔ convenience of one familiar notation.
Modularity vs IntegrationIndependent layers ↔ temptation to cross‑link for speed.
Objectivity vs PerspectiveNeutral framework ↔ Transformers’ unavoidable cultural lens.

Solution — the Four Guard‑Rails

FPF establishes four architecturally enforced guard‑rails that every Core, Tooling, and Pedagogy artefact must obey. They function as an “immune system” resisting each entropic pull. Scope note (conceptual, not lint). These guard‑rails regulate the architecture of thought—concepts, claims, and their relations. They do not mandate tools, file formats, notations, or workflows; any linting or automation lives outside the Core and is optional, provided it preserves these conceptual constraints.

#Guard‑RailProtects against
GR‑1DevOps Lexical FirewallImplementation, governance, automatisation and DevOps concerns gravity
GR‑2Notational IndependenceNotation lock‑in
GR‑3Unidirectional DependencyConvenience cycles
GR‑4Cross‑Disciplinary Bias AuditDisciplinary monoculture

Concrete rules for each rail live in patterns E.5.1E.5.4.

Archetypal Grounding (System / Episteme)

Guard‑RailU.System exampleU.Episteme example
GR‑1Definition of U.System never cites file formats or build scripts.Definition of U.Episteme avoids naming specific proof engines.
GR‑2Pump boundary invariant is true in plain text or any diagram.F‑G‑R semantics hold in algebraic or graph notation alike.
GR‑3A sizing helper imports Core invariants; Core never imports helper tutorials.Learning guide cites R‑score; Core never cites guide.
GR‑4Bias audit removes thermo‑mechanical jargon from a “universal” pattern.Audit replaces physics‑centric metaphors in a trust pattern.

Conformance Checklist

IDRequirementPurpose
CC‑GR.1Every new Core pattern SHALL cite, in its Relations section, the guard‑rail(s) it relies on or may affect.Ensures traceability and deliberate rule interaction.
CC‑GR.2Artefacts classified as Tooling or Pedagogy MUST NOT violate any rule in GR‑1 through GR‑4.Keeps entropic forces outside the Conceptual Core.
CC‑GR.3A revision to any guard‑rail pattern REQUIRES a Design‑Rationale Record that (a) states the reason, and (b) includes a Pillar‑impact analysis per E.3 precedence model.Aligns evolution with higher‑level principles.
CC‑GR.4The aggregate of guard‑rail rules MUST remain internally consistent and acyclic; no guard‑rail may override another without explicit precedence edges.Preserves deterministic governance.
CC‑GR.5Every Core pattern MUST anchor its primary primary EntityOfConcern or primary relation with a declared ReferencePlane (`worldconcept
All CC‑GR duties are conceptual. Any automated checks are informative only and live in Tooling/Pedagogy.

Consequences

BenefitsTrade‑offs / Mitigations
Long‑term integrity – stops slow drift of the Core toward jargon, notation lock‑in, and hidden cycles.Authors must run a guard‑rail checklist before submission. Mitigation: template auto‑inserts the checklist.
Stable yet evolvable ecosystem – Core stays timeless while Tooling & Pedagogy can iterate rapidly.Early stage contributions may feel constrained; examples in the Pedagogical Companion show compliant paths.
Trust & auditability – stakeholders can verify the framework’s purity independently.Adds overhead to governance; justified by safety and longevity.

Rationale

A constitution without enforcement degrades into dead‑letter rules. The four guard‑rails translate abstract Pillars into concrete, testable constraints. Grouping them under one umbrella pattern:

  • gives newcomers a single “safety index” to consult,
  • makes compliance binary (pass / amend),
  • provides a stable anchor for future automated conformance tools—without mentioning any specific engine, thus honouring GR‑1 itself.

They collectively instantiate Pillars P‑1, P‑2, P‑4, P‑5 and reinforce the precedence order defined in E.3.

Relations

  • Comprises:
    • pat:guard/devops‑firewall (E.5.1) – GR‑1
    • pat:guard/notational‑independence (E.5.2) – GR‑2
    • pat:guard/unidirectional‑dependency (E.5.3) – GR‑3
    • pat:guard/bias‑audit (E.5.4) – GR‑4
  • Depends on:
    • pat:constitution/pillars (E.2)
    • pat:constitution/principle‑taxonomy (E.3)
  • Constrains: every Core, Tooling, and Pedagogy artefact; all DRRs.

E.5:End

DevOps Lexical Firewall

Problem frame

The FPF Core is meant to remain valid across decades and technology generations. Implementation details—file formats, build pipelines, runtime flags—evolve rapidly and differ between domains. When such terms invade normative prose, the Core ages as quickly as the tools it mentions.

Problem

Conceptual erosion: a rule that cites a transient technology becomes obsolete when that technology fades, forcing unnecessary Core revisions and fragmenting historical audits.

Forces

ForceTension
TimelessnessConcepts must survive tool turnover.
Pedagogic clarityExamples need concreteness ↔ too much concreteness hard‑codes technology.
Cross‑domain reachPhysical‑system engineers and knowledge‑theorists use different stacks.

Solution

Establish a Lexical Firewall around the Conceptual Core (conceptual constraint; not a build‑time linter):

  1. Forbidden lexicon Normative patterns SHALL NOT contain tool‑or file‑specific words (e.g. protocol keywords, file extensions, IDE commands). Permissible wording: “a reference parser”, “a serialisation schema”.

  2. Indirection rule When a Core concept needs an executable illustration, the pattern cites the Tooling Reference family artefact by conceptual name, never by concrete path or syntax.

  3. Glossary pointer If an unavoidable technical term appears, it is defined in a Tooling Glossary outside the Core and referenced by conceptual alias—not embedded. Non‑normative automation. Machine checks MAY exist in Tooling; they are advisory and MUST NOT be imported into the Core.

Archetypal Grounding (System / Episteme)

ScenarioU.System exampleU.Episteme example
Normative text“A system boundary must expose at least one conserved‑quantity flow.” (No mention of modelling language.)“An episteme records its F–G–R assurance tuple.” (No mention of proof syntax.)
Illustrative linkA modelling profile resides in the Tooling family; Core cites it as “the reference system‑profile”.A linting routine lives in Tooling; Core cites it as “the reference episteme‑checker”.

Conformance Checklist

IDRequirement
CC‑LFW.1A Core pattern SHALL fail review if it contains implementation‑specific tokens.
CC‑LFW.2References to executable artefacts MUST use conceptual names, not file paths or command strings.
CC‑LFW.3Pedagogical examples inside Core MAY describe behaviour, but MUST NOT embed code snippets.

Consequences

BenefitsTrade‑offs / Mitigations
Core stays evergreen and cross‑domain.Authors must relocate concrete examples to Tooling or Pedagogy.
Reviewers can machine‑scan for banned tokens.Requires a small vocabulary allow‑list; maintained in Tooling Guide.

Rationale

Language shapes thought. By firewalling transient jargon, we uphold P‑1 Cognitive Elegance (clarity), P‑2 Didactic Primacy (domain‑neutral exposition) and P‑5 FPF Layering (clean separation between Core and Tooling). The rule is content‑agnostic and thus itself immune to the very decay it prevents.

Relations

  • Parent umbrella: pat:constitution/guard‑rails (E.5)
  • Constrains: every pattern in Conceptual Core
  • Instantiates pillars: P‑1, P‑2, P‑5

E.5.1:End

Notational Independence

Problem frame

FPF concepts must travel across academic disciplines, modelling tools, and future notations we cannot yet foresee. If a normative pattern binds its meaning to one diagram style, file syntax, or markup dialect, the concept ages as soon as the notation does.

Problem

Semantic lock‑in: when a definition relies on a particular glyph set or diagram grammar, alternative communities either translate it—risking drift—or ignore FPF altogether.

Forces

ForceTension
ExpressivenessDiagrams and formal grammars aid precision ↔ they should never become the definition itself.
LongevityA 20‑year horizon ↔ notation life‑cycles of 3‑5 years.
Cross‑discipline adoptionMathematicians prefer algebraic syntax; engineers prefer schematics.

Solution — Notational Independence Guard‑Rail (conceptual; semantics over syntax; not a notation mandate)

  1. Semantics primacy Normative content SHALL define concepts in linguistic form first (plain English + mathematics if needed). Visual or syntax examples are secondary illustrations.

  2. Equivalence clause When an official alternate notation exists, the pattern must state: “Representation A and Representation B are semantically equivalent under mapping M.”

  3. Reference indirection If the Core cites a diagram, it does so by conceptual role (“reference boundary schematic”) rather than by file or syntax name.

  4. Conceptual prefix neutrality FPF conceptual prefixes (e.g., U., Γ_, ut:, tv:, ev:, mero:) are cognitive namespaces, not syntax tokens. Core patterns MUST NOT tie their meaning to any concrete serialisation or URI scheme for these prefixes; any expansions are illustrative only and live in Tooling or Pedagogy.

  5. Cards and other "forms" Cards, tables and other "forms" exist in FPF core only as conceptual model, not as data model, thus no need to data-related notation or notation for lint. Comformance checklist and quards is also conceptual, argumentation like "this will ease machine check" is forbidden, no machine checking is intended in core; machine checks and linters live only in Tooling.

Archetypal Grounding (System / Episteme)

ScenarioU.System exampleU.Episteme example
DefinitionBoundary of a pump is expressed in prose plus set notation; a diagram is illustrative.F‑G‑R assurance components defined textually; a triple‑store serialisation is illustrative.
Alternate renderingSame pump semantics rendered in a lattice diagram or a tabular sheet remain valid.R‑scores plotted in a heatmap or listed in CSV remain equivalent.

Conformance Checklist

IDRequirement
CC‑NI.1A Core pattern MUST NOT embed semantics that hinge on one specific notation.
CC‑NI.2Illustrative renderings SHALL be marked “informative”.
CC‑NI.3When multiple official renderings exist, the pattern MUST declare the semantic mapping between them.
CC‑NI.4If a conceptual prefix appears in Core, its expansion (if shown) SHALL be marked informative and MUST NOT be required to interpret the semantics.

Consequences

BenefitsTrade‑offs / Mitigations
Ensures FPF survives notation turnover.Authors invest time describing mappings; mitigated by reusable mapping templates.
Lowers entry barrier for domains using different diagram traditions.Excessive illustrations can bloat pages; guidance in Pedagogical Companion limits scope.

Rationale

Language and diagrams are tools, not truths. By elevating semantics over syntax, FPF maintains P‑1 Cognitive Elegance and P‑2 Didactic Primacy while safeguarding P‑5 FPF Layering: tooling layers can add new renderers without Core edits.

Relations

  • Parent umbrella: pat:constitution/guard‑rails (E.5)
  • Constrains: every normative Core pattern and official alternate rendering
  • Instantiates pillars: P‑1, P‑2, P‑5

E.5.2:End

Unidirectional Dependency

Problem frame

FPF separates artefacts into stable Conceptual Core, executable Tooling Reference, and fast‑evolving Pedagogical Companion (see E.4 FPF Ecosystem Family Architecture). If dependencies can point both ways, volatile layers will eventually drag the Core into rapid revision cycles or introduce domain‑specific bias.

Problem

Architectural gravity: a tutorial or helper script adds a new feature, Core patterns import it “temporarily,” and within months the supposedly timeless layer depends on transient assets—breaking Pillar P‑5 FPF Layering.

Forces

ForceTension
Agility vs StabilityTooling must iterate quickly ↔ Core must remain slow and deliberate.
Reuse vs IsolationAuthors want to reuse helper concepts ↔ Core cannot depend on volatile code.
SimplicityRule must be testable and unambiguous ↔ must allow legitimate upward imports.

Solution — One‑Way, Acyclic Imports

Define a strict partial order over FPF ecosystem families and guard meaning flow (see E.10 V-1): imports point only upward in stability, and no Core semantics may derive from Tooling/Pedagogy. No linters or machine checking in Conceptual Core.

imports is a dependency DAG, not a specialisation relation (normative). Whenever an artefact exposes an explicit imports : [...] list (e.g., SignatureManifest.imports in A.6.0), treat imports as dependency edges governed by this section: the induced imports graph MUST be acyclic (a DAG) and MUST respect the declared direction. imports MUST NOT be used to encode specialisation (e.g., / ⊑⁺ between mechanisms); specialisation relations are declared separately via the relevant morphism and specialisation-chain rules (e.g., A.6.1 U.MechMorph).

Pedagogical Companion ⟶ Tooling Reference ⟶ Conceptual Core

  1. Allowed edges Dependencies MAY point only upward (toward greater semantic stability). No cycle is ever permitted.

  2. No downward import Conceptual Core patterns SHALL NOT import Tooling Reference or Pedagogical Companion family members. Tooling Reference family members SHALL NOT import Pedagogical Companion family members.

  3. Future layers Any new family is inserted below an existing one or becomes part of the Tooling or Pedagogy strata; the ordering extends accordingly.

Archetypal Grounding (System / Episteme)

LayerU.System illustrationU.Episteme illustration
CoreDefinition of U.System and boundary invariant.Definition of F‑G‑R assurance components.
Tooling“Reference system‑profile” that checks boundary flow; imports Core invariants.“Episteme‑scoring routine” that calculates R‑score; imports Core characteristics.
PedagogyTutorial using the system‑profile to model a pump; imports profile and Core term.Case study explaining R‑score evolution; imports scoring routine and Core term.
ForbiddenCore pattern importing measurement script.Core pattern importing R‑score web dashboard.

Conformance Checklist

IDRequirement
CC-UD.1Dependency graph among all FPF ecosystem family members MUST be acyclic.
CC-UD.2A family member SHALL import only from its own family or any family above it in the order.
CC‑UD.3A DRR that introduces a downward edge SHALL be automatically rejected.

Consequences

BenefitsTrade‑offs / Mitigations
Core stays free of tool churn and tutorial bias.Authors must create abstraction layers in Tooling instead of inserting hooks into Core.
Release cadence decoupled: Core (slow), Tooling (medium), Pedagogy (fast).Slight duplication when multiple tools target same concept; mitigated by shared Core definitions.

Rationale

One‑way import graphs are a proven safeguard in operating systems (kernel vs user land) and layered protocols. Here the rule operationalises Pillars P‑4 Open‑Ended Kernel and P‑5 FPF Layering, ensuring that innovation happens “below” without contaminating the timeless Core.

Relations

  • Parent umbrella: pat:constitution/guard‑rails (E.5)
  • References family definition: pat:constitution/fpf-ecosystem-family-architecture (E.4)
  • Instantiates pillars: P‑4, P‑5
  • Constrains: All artefact imports recorded in DRRs or SCRs

E.5.3:End

Cross‑Disciplinary Bias Audit

Problem frame

FPF calls itself trans‑disciplinary, but every author carries implicit metaphors from a source domain. If those metaphors leak into “universal” patterns, practitioners from other fields disengage or mis‑interpret the rules.

Problem

Unrecognised bias hides in wording, examples, unit choices or principle weighting. Once embedded in normative language, such bias is hard to remove and contradicts Pillars P‑2 Didactic Primacy and P‑8 Cross‑Scale Consistency.

Forces

ForceTension
NeutralityOne voice for all disciplines ↔ need for relatable examples.
ConcisenessAudit guidance must be brief ↔ must cover multiple bias types.
LongevityGuidance must survive emergence of new domains.

Solution — Principle‑Taxonomy‑Guided Bias Audit

  1. Bias‑Lens set Every normative pattern is assessed through five lenses that match the Principle classes from E.3: Gov, Arch, Onto/Epist, Prag, Did.

  2. Equilibrium question For each lens ask: “Does the pattern over‑privilege this class or silence it?” Examples:

    • Over‑reliance on Onto/Epist precision may ignore Prag cost.
    • Dominant Arch metaphors may alienate Did audiences.
  3. Scope‑or‑Balance rule

    • If imbalance is found and universality is intended, re‑phrase to restore balance.
    • If imbalance is intentional (domain‑specific pattern), mark the scope explicitly: “Applies primarily to thermodynamic systems.”
  4. Audit trace The pattern carries a short Bias‑Annotation paragraph recording which lenses were tested and any scoping statement. No workflow checklists or reviewer metadata or other data and data format and data governance tips is stored in the Core.

Archetypal Grounding (System / Episteme)

Bias lensExample imbalanceConceptual correction
Arch vs DidPump pattern uses abstract category theory terms.Add plain‑language boundary narrative or move abstraction to appendix.
Onto/Epist vs PragEpisteme trust score defined with complex logic but no guidance on empirical cost.Add pragmatic note on evidence collection cost or scope the pattern.

Conformance Checklist

IDRequirementPurpose
CC‑BA.1Each Core pattern SHALL include a Bias‑Annotation listing the five lenses and any declared scope limitation.Ensures explicit reflection on bias.
CC‑BA.2A pattern labelled “universal” MUST NOT privilege a single lens without justification or scoping note.Preserves trans‑disciplinary integrity.
CC‑BA.3If scope is declared, the pattern SHALL reference the mapping or rationale that enables cross‑domain translation.Keeps pathways open for other calculi.
CC‑BA.4 (QD‑triad evidence for “universal”).Any pattern that labels itself “universal” SHALL cite A.8 CC‑UC 1 + CC‑UC 2 and attach the QD evidence (Diversity_P + IlluminationSummary, with edition and binning) or else scope the claim to its declared U.BoundedContext.preserves domain quality diversity

Consequences

BenefitsTrade‑offs / Mitigations
Neutral, inclusive language attracts wider adoption.Authors spend a few extra lines on Bias‑Annotation; mitigated by template snippet.
Bias is surfaced at writing time, not after publication.

Rationale

Coupling the audit directly to the Principle Taxonomy keeps the guard‑rail concept‑driven, not workflow‑driven. No mention of review boards, CI‑jobs, or checklists appears in the Core; such mechanics belong in the Tooling Guide. This guard‑rail therefore satisfies GR‑1 (Firewall) while securing Pillars P‑2, P‑7 Pragmatic Utility, P‑8.

Relations

  • Parent umbrella: pat:constitution/guard‑rails (E.5)
  • Depends on: pat:constitution/principle‑taxonomy (E.3)
  • Constrains: All normative patterns claiming universality

E.5.4:End

Didactic Architecture of the Specification

Problem frame

FPF addresses readers from at least two characteristics of diversity:

  • Disciplinary – systems engineers, knowledge scientists, ethicists.
  • Experience – newcomers need intuition; experts need rigour.

Past drafts mixed governance mandates with domain examples, producing a steep learning curve and repeated “forward‑reference” detours.

Problem

If core ideas are buried under formalism or scattered across parts, readers either give up or misuse the framework. We need a didactic macro-order that guides cognitive load from low to high while keeping normative sections discoverable, without letting readers confuse document order with one universal first-practical workflow.

Forces

ForceTension
Cognitive LoadEarly clarity ↔ eventual formal depth.
Conceptual IntegrityForegoing examples risks abstraction ↔ too many examples delay axioms.
Didactic order vs practical entryStable document macro-order ↔ truthful first-practical routes that may cross parts.

Solution — “On‑Ramp to Archetypes first, Authoring last” sequence

Document order is distinct from first-practical entry

The macro-order of the document is a didactic scaffold, not a universal practical workflow. Entry navigation publication units such as README, Preface, ToC query cues, E.11 entry-distribution loci, and I.2 expanded entry-disambiguation cases are informative navigation only: they may cross Parts when that is the first honest entry for the question under repair, and they do not create a second normative process history.

The "On-Ramp First" Macro-Structure: The specification is ordered to create a smooth cognitive ramp:

  • It begins with an informal, non-normative Preface (The On-Ramp), which uses storytelling and concrete examples (System and Episteme) to build intuition.
  • It then proceeds through the normative Parts (A-D), moving from the foundational kernel to the rich patterns of trans-disciplinary reasoning.
  • It concludes with the authoring rules (Part E) and appendices, ensuring that this "meta" content does not obstruct the primary learning path.
  1. Preface (On‑Ramp) Informal tour; introduces U.System and U.Episteme via concrete stories before any normative language appears.

  2. Part A Kernel Minimal holonic ontology and the Transformer principle give readers the essential vocabulary.

  3. Part B Trans‑disciplinary Reasoning Tell‑Show‑Show pedagogy: universal rule → Sys‑CAL example → KD‑CAL example.

  4. Part C Extension Patterns Domain‑specific calculi expand on the examples already seen.

  5. Part D Ethics & Conflict Optimisation Shows reflective patterns only after readers grasp holonic reasoning.

  6. Part E Authoring Constitution, guard‑rails, and contributor rules come last; novices can postpone reading.

  7. Appendices (Annexes) Tutorials, tooling guides, and migration scripts live here.

Archetypal Grounding (System / Episteme)

Narrative layerFirst sight of U.SystemFirst sight of U.Episteme
PrefaceCoffee‑machine story (pump as system).Meta‑analysis story (study bundle as episteme).
Part AFormal definition inherits boundary invariant.Formal definition inherits F‑G‑R coordinates.
Part B Tell‑Show‑ShowΓ_sys example: assemble pump.Γ_epist example: merge study bundle.

Conformance Checklist

IDRequirement
CC‑DA.1Each Part SHALL open with a one‑paragraph situational “hook” before formal text.
CC‑DA.2Every architectural pattern MUST implement Tell‑Show‑Show: universal rule plus System & Episteme illustrations.
CC‑DA.3Governance patterns (Part E) SHALL NOT appear before the Kernel in the main document flow.
CC‑DA.4Navigation aids SHALL distinguish document order from first-practical entry guidance; first-entry pattern-comparison guidance and expanded entry-disambiguation cases are informative and MAY cross Parts without implying a universal process history.

Consequences

BenefitsTrade‑offs / Mitigations
Smooth learning curve; readers can stop at their needed depth.Template discipline required; mitigated by authoring guide (E.8).
Reduces forward‑reference clutter; each concept is primed before formal use.Preface evolves when new archetypes added; handled via On‑Ramp revision DRR.

Rationale

Educational research shows retention improves when abstract rules are immediately paired with contrasting illustrations. By fixing the reading order and mandating Tell‑Show‑Show inside every architectural pattern, FPF embeds pedagogy into its architecture, realising Pillars P‑2 Didactic Primacy and P‑1 Cognitive Elegance without weakening rigour.

Relations

  • Depends on: pat:constitution/guard‑rails (GR‑1 ensures example jargon stays outside Core).
  • Constrains: Placement of all Parts, patterns, and appendices.
  • Instantiates pillars: P‑1, P‑2

E.6:End

Archetypal Grounding Principle

Problem frame

Universal rules are powerful only when readers can grasp them. In FPF the Conceptual Core speaks in substrate‑agnostic language: U.Holon, Γ‑aggregation, MHT emergence. Practitioners need to “see” those rules in familiar matter—physical hardware or bodies of knowledge—before they can reuse them.

Problem

A purely abstract statement risks two failures:

  1. Didactic failure – readers dismiss the pattern as “too meta,” violating Pillar P‑2 Didactic Primacy.
  2. Unproven universality – without cross‑domain instantiation the rule remains an untested claim.

Forces

ForceTension
Universality vs ConcretenessAbstract law ↔ concrete example.
Brevity vs ClaritySpec should stay concise ↔ dual examples add length.
Rigour vs AccessibilityFormal semantics ↔ intuitive narrative.

Solution — mandatory Archetypal Grounding subsection

Every architectural pattern SHALL include a dedicated section, titled exactly “Archetypal Grounding,” that shows how the abstract law SCRs in FPF’s two canonical holon flavours:

  1. U.System – the archetype of a physical, operational holon.
  2. U.Episteme – the archetype of an abstract, epistemic holon.

This enforces a repeatable Tell‑Show‑Show rhythm:

StageContent
TellSolution section states the universal rule.
Show #1Archetypal Grounding – concrete U.System example.
Show #2Same section – parallel U.Episteme example.

Archetypal Grounding (of this pattern itself)

Universal ruleU.System instantiationU.Episteme instantiation
“Every architectural pattern requires grounding.”Pattern D.1 Algebra of Aggregation illustrates Γ_sys on assembling a water pump.The same pattern illustrates Γ_epist on merging a meta‑analysis.

Conformance Checklist

IDRequirementPurpose
CC‑AG.1Every architectural pattern in Parts A, B, C, D, E SHALL contain a subsection headed exactly “Archetypal Grounding”.Guarantees consistent Tell‑Show‑Show rhythm.
CC‑AG.2The Archetypal Grounding subsection MUST illustrate the rule with both U.System and U.Episteme.Demonstrates trans‑disciplinary reach.
CC‑AG.3If a rule intentionally applies to only one substrate, the subsection SHALL state the scope limitation and justify it against the five Principle‑Taxonomy lenses (Gov, Arch, Onto/Epist, Prag, Did).Prevents silent bias; links to Bias‑Audit guard‑rail.
CC‑AG.4Patterns lacking a compliant Archetypal Grounding subsection MAY NOT progress to “Accepted” status.Enforces discipline without referring to workflow mechanics.

Consequences

BenefitsTrade‑offs / Mitigations
Immediate clarity – readers see abstract laws in action.Patterns grow by one short table; mitigated by consistent template snippet.
Proof of universality – every rule is self‑documenting across substrates.Authors must think cross‑domain; fosters richer patterns.
Narrative cohesion – recurring System/Episteme protagonists create a memorable storyline.
Built-in Proof of Universality: The specification consistently demonstrates its trans-disciplinary claims, building trust and credibility.

Rationale

Tell‑Show‑Show is a proven pedagogical sequence. By making it normative, FPF hard‑codes P‑2 Didactic Primacy into the fabric of every architectural pattern while still honouring P‑1 Cognitive Elegance—the grounding section replaces brittle ad‑hoc anecdotes with a disciplined dual example. Linking scope‑justification to the five Principle lenses ties the pattern to the Taxonomy‑Guided Bias Audit and keeps governance language out of the Core.

Relations

  • Implements macro flow: pat:authoring/didactic‑architecture (E.6)
  • References base types: pat:kernel/holon (A.1) (U.System, U.Episteme)
  • Interacts with bias guard‑rail: pat:guard/bias‑audit (E.5.4) via CC‑AG.3
  • Constrains: Authoring template in pat:authoring/pattern‑template (E.8)

E.7:End

FPF Authoring Conventions & Style Guide

Type: Architectural (A) Status: Stable Normativity: Normative (unless explicitly marked informative)

Use this when

Use E.8 when you are writing, revising, or reviewing one FPF pattern and need to know what shape, voice, reader-recognition role, and assurance material the pattern must carry before it can be treated as mature FPF text.

Use it especially when a draft is technically correct but hard to use: the cold reader cannot tell when to apply it, what action to take, what mistake that action prevents, which related pattern governs a specific outside claim, or which assurance material is informative rather than the first user-facing guidance.

Not this pattern when. Use E.9 when the main work is deciding why FPF should change and how that decision is distributed across patterns. Use E.19 when the main work is an admission or refresh review. Use the local domain pattern when the question is what FPF says inside that domain rather than how a pattern should be authored.

What goes wrong if missed

A pattern can satisfy a checklist and still be practically unreadable. It may open with package architecture instead of a recognisable working moment, bury its payoff, hide the pattern that governs a specific outside claim, or let assurance prose silently replace the reader-facing claim. The result is a formally neat text that authors can defend but practitioners cannot reliably use.

What this buys

E.8 gives FPF authors one shared pattern shape and one shared authoring discipline: recognition text first, assurance text second, canonical sections present, terminology kept stable, SoTA used as current practice grounding rather than decoration, and practical consequences visible before a reader has to reconstruct the architecture.

First useful move. Put the working situation, first action-guiding move, practical payoff, ordinary boundary, and nearest heavier assurance condition into the recognition text before tightening template details or conformance material.

Cheap stop. If the draft already gives a cold reader the working situation, first useful move, practical payoff, ordinary boundary, and nearest heavier assurance condition, do not add more authoring apparatus just to look mature. Use conformance material to verify that guidance; do not let it replace the guidance.

FPF-governed wording extension. Add heavier assurance, conformance, SoTA grounding, relation material, or related-pattern material only when the light recognition text would leave a false claim, unstable primary EntityOfConcern, hidden governing pattern for a specific claim/relation/boundary, unbacked practical payoff, or misleading admissible use.

When an authoring pass claims quality improvement rather than ordinary drafting, keep these roles distinct: E.22 frames the improvement-oriented quality-evaluation question, the object-under-improvement evaluation such as E.21 or E.9.DA supplies value meanings and stop meanings, C.16.Q repairs overloaded quality and evaluative-characterization wording, C.25 carries engineering quality-family endpoints when those endpoints are claimed, and E.23 governs any repeated quality-improvement method. Closing checklist rows or satisfying a review profile is not by itself quality improvement.

Quality/projection evidence placement. Pattern-quality status, corpus projection, README/ToC/E.11/I.2 alignment, card/retrieval evidence, cold-reader evidence, monolith parity, landing evidence, developer/reviewer/executor correspondence, and other quality-carrier facts belong in the evaluation result, review run record, projection carrier, or release/landing evidence carrier. They do not belong anywhere in the pattern itself, including notes, appendices, Relations, Rationale, SoTA-Echoing, examples, tables, and checklist rows, unless the pattern's own EntityOfConcern and intended-reader move are that evaluation/projection work. This is a role test, not a lexical test: the same word may be user-facing content in an evaluation pattern and carrier leakage when it reports quality, landing, projection, or role-turn state for this pattern.

Pattern roles across coupled flows. In authoring guidance, speak at the pattern level. One pattern may be the pattern of concern for different roles in different flows: an author repairs it, E.21 evaluates it, E.19 admits or refreshes it, a practitioner selects and uses it, and a later evaluator may reopen it. Those flows may be joined in one TransductionGraph through transfer, feedback, return, projection, landing, edition-change, or repair relations, but their roles and EntityOfConcern assignments stay distinct. The pattern itself also carries its own primary EntityOfConcern: the subject its Problem/Solution/guidance is about. Development-flow evidence may cause rewrites, but reviewer/executor exchange, status, projection proof, landing proof, and use-found evidence remain in their carriers rather than entering the pattern as if they were guidance for the intended reader. This is the pattern-authoring instance of the broader TGA/P2W coupled-flow rule: a publication, principle scheme, work plan, or self-evolving specification flow may help create or govern later work without becoming the performed work, project evidence, gate passage, assurance, edition bump, or applied-edition content.

Maturity rule. Section completeness is not pattern maturity. A pattern matures when its Problem frame, Solution, worked cases, boundaries, and conformance checks all point to the same usable action guidance.

Primary EntityOfConcern in plain terms. The primary EntityOfConcern of E.8 is the authored FPF pattern: its canonical sections, reader-recognition role, wording discipline, examples, rationale, anti-patterns, SoTA-Echoing, and relations.

Primary working reader. The first reader is an FPF author or reviewer shaping pattern prose for later practitioners and managers. The downstream practitioner is the reader the pattern must ultimately serve, so the authoring guide must model the same recognition discipline it requires.

Pattern Kind In Plain Terms

An FPF pattern is an action-guiding method description for a recurring working situation. It is applied by an intended FPF user who recognizes the situation, understands the problem and forces, and then uses the Solution to decide what to do, what to stabilize, what to avoid, and what practical change should follow.

Pattern application is the user-side act: the user recognizes the working situation, applies the pattern, and uses the Solution to shape the next admissible move. Its Problem frame, Problem, Forces, Solution, Consequences, worked slices, and anti-patterns carry the guidance. Its Conformance Checklist checks whether that guidance has been applied and authored correctly; it must not replace the Solution or turn the pattern into a control form.

The primary content-bearing job is constructive method guidance: the pattern must say what the user should do so the recurring error does not arise. Error prevention, auditability, and conformance checks are evidence that the guidance is usable; they are not the pattern's center. The first substantive content in the opening Problem frame and Solution must be a positive subject spine: the primary EntityOfConcern kind, the first admissible action-guiding move, the practical delta, and the few boundaries needed for that first move. The text must not replace subject content with repeated guards, distinctions, related-pattern mappings, references, mini-rules, definitions, caveats, architecture rationale, or quality/projection evidence unless the repetition adds a new local action, case, evidence value for the user, or first-reading recognition need. Copying distinctions owned by other patterns into this pattern as repeated "do not confuse our EoC with their EoC" prose is the same repetition problem. Boundary doctrine is pattern content like any other doctrine: if strict distinction, non-use, ToC navigation, or the governing pattern for a claim/relation/boundary already carries the distinction, do not repeat it locally. Use one short pattern id or governing-pattern statement when needed. Add local boundary prose only when it states a documented local confusion and exact stop condition that the owning pattern does not already carry. The repair is to say clearly what this pattern's own EntityOfConcern is, not to enumerate the unbounded set of other things it is not.

The same rule blocks pattern-application drift for any FPF object, not only for patterns. Name the object by its FPF kind when the kind is known: a pattern is a pattern, a claim is a claim, a relation is a relation, a row is a row, a source is a source, a publication is a publication, a WorkPlan is a WorkPlan, and so on. FPF patterns are applied to situations, claims, texts, or work objects. Use governing pattern only in the typed form governing pattern for <claim/relation/boundary> when one pattern actually governs that specific item; use related pattern for a looser pattern relation; use relation only for the relation itself. A compact pattern-reference sentence should be declarative: this pattern applies to <situation/claim/object>, this claim is governed by <pattern id>, this relation is recorded in Relations, this entry cue belongs in README, ToC, E.11, I.2, or a retrieval/projection carrier, or this pattern application stops under <condition>. Relations are positive claims, not catalogs of absent relations. Detailed discoverability belongs in README, ToC query cues, E.11, I.2, or retrieval/projection carriers; compact related-pattern statements belong late in Relations after the positive subject/action spine. Ordinary references use ordinary reference apparatus: a pattern id in prose, a citation, Builds on, Coordinates with, Relations, ToC, README, E.11, or I.2. They are also not repeated as many conditional sentences or small variants when one compact definition, boundary, table, Relations, ToC, README, E.11, I.2, or retrieval/projection locus already carries the same content family.

Treat precision-restoration problems in pattern prose as one profile with five layers: word/head/use precision, phrase apparatus, repetition/distribution, role/carrier separation, and pattern application. Do not add a local row for each new symptom. E.8 requires the author to keep the positive subject/action spine first; F.19 repairs phrase-level apparatus; E.10, E.10.ARCH, F.18, or the governing pattern repairs remaining word/head/use precision; E.21 measures the collapsed effect on pattern quality.

A wording cleanup is kind-preserving by default. Before an author accepts a changed FPF-governed phrase as a repair, the pre-repair and post-repair EntityOfConcern, kind, relation or claim kind, slot or use-position, admissible use, and scope must be recoverable when those items are live. This is a bounded complete preservation check, not an order to formalize ordinary prose or unchanged text and not permission to choose "no edit" as the easy minimum. Leaving text unchanged closes only when the phrase is not triggered, ordinary prose, or already satisfied by value with loci; otherwise the finding remains open. Removing a trigger word or replacing a generic head is not a repair when it changes the ontology: for example, a graph-shaped method cue must not be narrowed into a work sequence unless an accepted decision explicitly changes the kind and consequences. If a relation, signature, mathematical-lens, role, method, work, or evidence position is live, the author cites the governing pattern for that position instead of restating its ontology in E.8. If the phrase hides several kinds, split them or send the decision to the governing pattern or DRR; do not flatten them into one cleaner-looking word.

For apparatus-overwrap, follow F.19. E.8 adds only the pattern-authoring placement rule: after boilerplate apparatus is removed or moved and remaining content is precision-restored under E.10, E.10.ARCH, F.18, or the governing pattern when needed, pattern prose keeps only the intended user's admissible move and boundary. Process, architecture, review, quality, projection, and release evidence stay in their own carriers unless they are rewritten as that user-facing move.

When an action-adjacent pattern classifies wording, a name, a publication face, an explanation class, a comparison unit, or another semio-facing object, that classification is only useful if it returns to action guidance. The pattern must say what use or action is admissible now, what related use or action is not admissible under the current pattern, and which FPF pattern governs the case when the claim is a work, evidence, gate, decision, assurance, engineering-justification, release, or reliance claim.

Semio-Echoing is admissible only as a trigger-controlled auxiliary placement. Use it when E.10, C.2.P, or E.10.ARCH has exposed a wording-use overread whose EntityOfConcern, episteme/publication stack, alignment path, and remaining admissible reader move are recoverable by value. Do not add it as a generic warning block. In non-semio patterns the primary content remains the pattern's own EntityOfConcern and admissible move; semio material stays as a thin cue, related-pattern relation named by value, local recovery line, or named description and publication-use boundary section unless it changes that move or blocks a documented overread. If the material mainly says that a description, view, publication, record, card, diagram, source, or file is not a permission, promise, prescription, evidence item, assurance verdict, decision, gate passage, release, work occurrence, or authority source, keep it out of the subject Solution and put it in that boundary section or in the exact description-publication pattern.

Problem frame

FPF grows through the addition of patterns written by authors from many disciplines. Without a shared structure and voice, the framework would fracture, violating Pillars P‑1 Cognitive Elegance and P‑2 Didactic Primacy.

Problem

Structural drift and stylistic fragmentation threaten three qualities:

  1. Comparability – readers cannot align patterns lacking common headings.
  2. Narrative cohesion – prose swings from dry jargon to informal blog style.
  3. Reviewability after guidance – missing sections hide boundary and assurance checks (Archetypal Grounding, Bias‑Annotation) that let reviewers verify the action guidance without replacing it.

Forces

ForceTension
Uniformity vs ExpressivenessConsistent template ↔ freedom for diverse domains.
Rigor vs ReadabilityFormal precision ↔ engaging prose.
Brevity vs CompletenessConcise patterns ↔ mandated safety subsections.

Solution — One template, enriched by style principles

Canonical Pattern Template

Within each pattern, the canonical section headings SHALL appear in the order below. For each canonical content section heading (1–12), the <Title> component (after the heading separator, e.g. -) MUST start with the canonical section title (case-insensitive match; canonical capitalisation preferred); an optional clarifier after an em dash is allowed (e.g., Solution — …). The Footer marker (section 13, if present) is a sentinel and is governed by H-9 rather than the standard <FullId> - <Title> shape.

Extensibility. Authors MAY add additional sections. Prefer expressing them as subsections under the nearest canonical section (e.g., 4.1, 4.1.1 under Solution). If an additional pattern-level section is necessary, it MUST NOT delete or reorder the canonical sections and its title MUST NOT shadow a canonical title.

Mandatory vs optional.

  • Canonical sections 1–13 are mandatory in every pattern.
  • Canonical sections carry content. Authors must not use omission placeholders as section substitutes; when a section is intrinsically small, write the smallest content-bearing grounding, misuse, boundary, or reduced-case statement that preserves the section's role.
  • First substantive authoring seed. The first non-empty authored body of a pattern SHALL already instantiate the canonical section frame by value: title line, header block, canonical sections 1–13, and the footer marker.
  • Recognition-role openings and first-minute working guidance belong inside that canonical frame. Any retained pre-template entry material must also stay inside that same canonical frame rather than appearing as one pre-template opening memo. Authors MUST NOT seed one pre-template opening memo and postpone canonical sectioning, Conformance Checklist, or footer-marker installation to one separate E.19, assembly, or review-repair pass.

Template:

  • Title line: Hashes + FullId + - + Pattern Title; optional (informative) note.
  • Header block: Type, Status; optional Normativity override.
  1. Problem frame
  2. Problem
  3. Forces
  4. Solution
  5. Archetypal Grounding (Tell-Show-Show; at least one content-bearing grounding slice, reduced grounding case, or ordinary/non-use boundary)
  6. Bias‑Annotation
  7. Conformance Checklist
  8. Common Anti‑Patterns and How to Avoid Them (at least one local misuse, overread, or exact boundary case; no placeholder)
  9. Consequences
  10. Rationale
  11. SoTA-Echoing (post-2015 practice alignment; terminology drift and deltas; full comparison or reduced SoTA required whenever external or internal practice changes the Solution)
  12. Relations
  13. Footer marker

Footer marker. End each pattern with a single visible sentinel heading line by itself: ### <PatternId>:End. This makes truncation detectable even when HTML comments are stripped or surfaced by editors. The footer marker is intentionally content‑free: do not place prose under it.

Note. Pattern boundaries are still parseable by scanning for the next pattern heading (## …), but an explicit :End marker helps retrieval pipelines (and LLM prompts) distinguish “this chunk is the whole pattern” from “this chunk was cut mid‑pattern”.

Heading & ID discipline (human tooling + retrieval)

FPF is often consumed through full‑text search and retrieval (RAG). A reader or an LLM may see a subsection without its parent headings, so headings must be self‑identifying.

H-1 (Heading shape). Every pattern heading and every subsection heading inside a pattern SHALL follow: <hashes> <FullId> - <Title> (optional note of non‑normativity)

Exception. The Footer marker is a sentinel heading and is governed by H-9, not by the standard <FullId> - <Title> shape.

H-2 (Heading separator). The canonical separator between <FullId> and <Title> is - (ASCII, space-hyphen-space). Previously authored text may use Unicode dash variants such as or as separators; tooling SHOULD treat those variants as migration candidates, and authors SHOULD migrate touched headings to -.

H-3 (FullId). FullId is the full hierarchical address. For a pattern heading it is the pattern ID (e.g., A.2, E.10.D1). For headings inside a pattern, append dot‑separated ordinal section numbers after the colon (:) (e.g., A.2:4.4, E.10.D2:3). Exception: the Footer marker uses the reserved sentinel token :End as defined in H-9. The colon (:) is reserved for section paths and MUST NOT appear in pattern IDs.

H-4 (Ordinals). Ordinals in section paths SHOULD track the canonical template numbering (1 = Problem frame, …, 13 = Footer marker) to maximise cross‑pattern comparability. During refactors or in previously authored patterns, ordinals MAY be local. In that case, the canonical section title at the start of <Title> is the semantic key; readers and tools MUST NOT infer section semantics from the ordinal alone. Note: the Footer marker itself is exempt from ordinal encoding; it uses the reserved token :End (see H-9).

H-5 (Where kind and normativity are declared). Pattern kind (e.g., Architectural / Definitional) MUST be declared in the Header block, not encoded into the heading text. Normativity (normative / informative) MUST also be declared in the Header block when it deviates from the default. If a reminder is needed for readers, authors MAY add a short parenthetical note at the end of the heading (e.g., (informative) / (non‑normative)), but headings MUST NOT use square‑bracket tags.

H-6 (Heading levels). Heading levels MUST preserve a fixed offset between structural layers (Part or Cluster (flat) → Pattern → Pattern sections):

  • Part and Cluster headings MUST use # (level 1) across the file.
  • A Pattern heading MUST use ## (level 2).
  • Inside a pattern, each nested section MUST add exactly one # per level (e.g., ## A.2 - …, ### A.2:2 - …, #### A.2:2.1 - …).

H-7 (Ellipsis discipline). Authors MUST NOT use three consecutive full stops/dots (...) as punctuation in headings or narrative prose. Authors MUST use the Unicode ellipsis (U+2026) instead. For editorial elisions in quotations, authors SHOULD prefer […] to make the omission explicit and distinguish it from retrieval truncation. Exception: literal three‑dot sequences that are part of an external language’s syntax MAY appear only inside code spans or fenced code blocks.

H-8 (Normative keywords). The key words MUST, MUST NOT, REQUIRED, SHALL, SHALL NOT, SHOULD, SHOULD NOT, RECOMMENDED, MAY, and OPTIONAL are to be interpreted as described in RFC 2119, as clarified by RFC 8174 (only when capitalised). Authors SHOULD avoid informal deontic phrasing (“need to”, “is required to”) in normative clauses.

Deontics vs admissibility. Use RFC keywords only for deontic obligations (requirements on authors, reviewers, implementers/tooling, or published pattern or companion texts) — i.e., things an agent can choose to do or omit. Do not use RFC keywords to state definitions, structural invariants, typing rules, or other admissibility conditions of the modeled world.

When you need an enforceable constraint that is mathematical rather than deontic, express it as a non‑deontic predicate using one of: Definition:, Invariant:, or Well‑formedness constraint: (optionally with formal quantifiers). Prefer mathematical terms like cardinality 1..1 (total) / 0..1 (partial) / 0..n over deontic adjectives like “mandatory or optional” when the intent is cardinality, not duty.

Admissibility predicate discipline (recommended shape). When expressing admissibility/validity constraints as predicates (Definition: / Invariant: / Well‑formedness constraint:):

  • Authors MUST NOT use RFC keywords inside the predicate block.
  • Authors SHOULD give each predicate a stable identifier and short name (e.g., RA‑1 (Locality), RE‑3 (Method gate)), so that Conformance Checklist items can reference it without re‑authoring the rule.
  • Authors SHOULD write the constraint as a declarative predicate (optionally quantified), e.g., role ∈ Roles(context), rather than as “X MUST …”.
  • If the constraint needs to be checked as part of pattern conformance, authors SHOULD reference the predicate identifier from the Conformance Checklist (and/or call out validator behaviour), rather than duplicating the predicate with RFC keywords.

H-9 (Footer marker sentinel). Footer marker SHALL be a single heading line whose FullId is the pattern ID followed by the reserved sentinel token :End (no ordinals, no title, no square‑bracket tags): ### <PatternId>:End It is the only allowed heading inside a pattern whose section token is non‑numeric. It MUST be the final line of the pattern and MUST NOT carry any prose. Tooling and readers MUST treat it as a boundary sentinel, not as a semantic section.

Unification note: historic A‑ and D‑templates differed only by the presence/absence of Bias‑Annotation and Relations; the unified template keeps the headings everywhere and requires every heading to carry content-bearing grounding, boundary, consequence, rationale, source-use, relation, or reduced-case material rather than an omission placeholder. The Alexandrian pattern canon historically calls Problem frame “Context”. FPF avoids that label because Context is already overloaded in FPF (e.g., U.BoundedContext and its Plain‑register label).

Stylistic Principles (S-0 ... S-19)

#PrincipleGuideline
S-0Narrative Flow Seven-Step HeuristicAuthors are encouraged to structure major paragraphs or subsections using the seven-step mnemonic.
S-1Density without JargonShort declarative sentences; tool names belong in Pedagogy/Tooling.
S-2Internal CohesionInline references to Pillars and related patterns.
S-3Embedded Mini-DefinitionsGloss a new term in parentheses on first appearance.
S-4ContextualisationBrief historical or disciplinary lineage references.
S-5Prophylactic ClarificationPre-empt common misreadings inside the prose.
S-6Quotable ClosersFinish Solution or Consequences with a memorable aphorism.
S-7Generative over PrescriptivePresent rules as enabling constraints, not bureaucracy.
S-8Trans-disciplinary Tie-insIllustrate using at least two distinct fields.
S-9Physical Grounding ReferenceLink abstractions to a Transformer or physical process.
S-10Punchy Blocks<= 5 sentences per paragraph; lists for clarity.
S-11Narrative FlowEnsure sections read as a continuous story, not bullet soup.
S-12Full sentences over tagsAvoid “keyword soup”. Each list item SHOULD contain a subject and a verb; prefer 2-4 sentence micro-paragraphs to bare tag lists.
S-13SoTA-Echo structureIn the SoTA-Echoing section, present: claim -> practice -> source -> alignment -> adoption status (adopt/adapt/reject); cite Bridges & CL when crossing Contexts/ReferencePlanes.
S-14Didactic-content sufficiencyNew and substantially revised patterns carry enough didactic content to be teachable without nearby project notes.
S-15Worked slices over scenario labelsTransform-like families show at least one concrete source and resulting-publication slice; scenario names alone are not enough.
S-16Ordinary vs FPF-governed wording realismKeep ordinary use light, and make heavier review records explicit only for disputed, high-risk, or higher-impact cases.
S-17Self-contained monolith proseA merged pattern must explain itself inside the monolith; planning shorthand and review-context dependencies are not admissible in pattern prose.
S-18Reader-role disciplineKeep every pattern host or monolith section addressed to the intended FPF user; move package-development, architecture-placement rationale, developer/reviewer/executor correspondence, and quality/projection evidence to separate companion, evaluation, review, projection, or release carriers unless the sentence has been rewritten as the user's admissible move or boundary.
S-19Precision before relaxationIn FPF-governed prose, restore the head kind named by a generic phrase before treating any qualifier as trustworthy claim guidance; then restore the claim kind or admissible-use boundary hidden in the qualifier before allowing any later plain, didactic, or coarsened restatement.

Authors use the principles as a scaffold, not a straitjacket: the goal is coherent, engaging insight. Engagement remains subordinate to semantic discipline: hooks, quotable lines, Plain restatements, and didactic images may improve recognition, but any ontological, evidence, causal, assurance, bridge, gate, work, decision, or admissibility claim kind or admissible-use boundary they carry must be recoverable through the governed Tech reading or named neighboring pattern. Ordinary Plain prose without that claim kind or admissible-use boundary stays ordinary prose.

S-0 (Narrative Flow Seven-Step Heuristic) — explanation Narrative flow is recommended to follow these steps: Hook -> Frame -> Weave -> Ground -> Bridge -> Flow -> Close.

Brief explanations:

StepPurpose in a paragraph/section
HookOpen attention with a vivid but bounded image or paradox that maps back to the primary EntityOfConcern and claim.
FrameState the specific question or problem space.
WeaveConnect to earlier patterns or Pillars.
GroundTie to a concrete System/Episteme or physical process.
BridgeShow the implication for the upcoming claim or rule.
FlowDeliver the formal content or argument.
CloseEnd with a quotable line or payoff that reinforces memory.

Narrative Flow Heuristic also operationalises S-1 (Density w/o Jargon), S-2 (Internal Cohesion), S-4 (Contextualisation), and S-6 (Quotable Closers).

Recognition text and assurance text

Every canonical pattern SHALL stabilise one primary EntityOfConcern, relation record, or claim record early enough that a cold reader can tell what kind of thing the pattern is actually governing. If ordinary forms vary (note, sheet, guided UI, rendering, review aid), the text must make explicit which of those are merely presentation forms of one primary selected EntityOfConcern, relation, or claim and which would instead name a different act, process, work-result record, or governing companion. Recognition and assurance texts may refine that selected item differently, but they must not silently swap the central kind.

If a pattern uses a broad umbrella or head together with a narrower operative branch, the text must also make the stack explicit early enough for first reading: what the broad head names, what the current narrowed branch is, what primary EntityOfConcern, relation record, or claim record is actually in play, what move is being carried by that object, and what wider work or process remains outside the pattern. A qualifier alone does not restore that stack.

Under F.18 local-first naming, the canonical pair here is recognition text and assurance text. The earlier provisional recognition shell / assurance shell wording is retired. These names refer to two reading-order roles carried by existing sections or projections inside one pattern; they do not mint new authoritySourceRef targets, governing-pattern relations, publication-form/face kinds, publication-face kinds, or a second face family. A third didactic-content role remains optional and is justified only when the family is especially easy to misuse, easy to over-read, or hard to teach without extra scaffolding.

The recognition text is the first-reading text. It is the part of the pattern that lets a cold working reader recognise the situation quickly enough to decide whether to keep reading. It should start from a subject-domain or practice moment before internal taxonomy whenever the pattern is meant to help real work rather than only internal canon maintenance. In practice it usually appears in an early Use this when line or equivalent opening, plus the upper parts of Problem frame, Problem, Solution, Consequences, and nearby worked slices. Its job is to make visible:

  • what ordinary working situation this pattern is for;
  • what goes wrong if the pattern is missed;
  • what the pattern buys the reader in practice;
  • when this is not the right pattern;
  • what primary EntityOfConcern, relation record, or claim record is actually being kept stable;
  • and, when technical terms must appear early, a pairwise plain gloss for each early FPF-governed technical term.

The assurance text is the second-reading text. It carries the heavier FPF-governed material that makes the pattern reviewable and auditable:

  • declaration blocks and typed fields when those are part of the pattern's declared conformance or boundary claim;
  • representation ontology, EntityOfConcern discipline, or primary-EntityOfConcern discipline;
  • any minimal modeling or mathematical lens that keeps the primary EntityOfConcern, relation record, or claim record stable;
  • guidance/check, invariants, admissibility, and stop or neighbouring-pattern conditions;
  • SoTA-Echoing when it carries explanatory work;
  • and the review hooks that let a broader or more consequential interpretation or use be checked explicitly.

The assurance text may sharpen, justify, and discipline the recognition text. It must not silently replace, strengthen, or universalize the claim that the recognition text made visible. If the recognition text says “this pattern helps with a bounded working situation”, the assurance text must not quietly turn that into an unbacked carrier claim, unbacked guarantee, or broader universality claim.

If a pattern claims universal or transdisciplinary status, that claim must already be visible in the recognition text. It is not enough for universality to appear only later in a guidance/check sheet, declaration block, or SoTA-Echoing rationale. A broad claim should therefore be demonstrated in the recognition text through at least three heterogeneous reader or domain situations. When a compact matrix helps, F.16 is the preferred template for showing that breadth. If SoTA-Echoing carries an FPF-governed claim, the practical implication of those rows should be recoverable from the recognition text and case bank rather than remaining a late-only justification layer.

A third didactic-content role means enough didactic and operational content that the pattern survives without nearby project documents. Typical indicators include:

  • at least one concrete source and resulting-publication slice in Archetypal Grounding when the pattern governs transforms or publication change;
  • at least one boundary-heavy example or anti-example when nearby patterns or other governing companion roles are easy to confuse;
  • reviewer guidance that tells what to inspect first and which neighboring FPF pattern governs the failure mode and which project-side FPF kind and reference named by value carries the claim or effect;
  • local mini-definitions or glossary material for recurring terms that would otherwise be recovered only from project context.

Pattern density is therefore not “more metadata” and not “longer tag lists”. It is the presence of enough recognition, assurance, and, when needed, extra didactic material that a reader can understand the pattern, apply it lightly in ordinary cases, and recognise when a heavier review path is required.

Package-form and governing-pattern relation role-word discipline

FPF pattern prose is not free-form descriptive English. When authors name a package-form or a governing-pattern relation, they must use role words with stable semantic intent.

Use the following distinctions explicitly:

This is a cross-cutting review discipline, not a replacement for local pattern lexica. For example, A.6.7 / A.19.CHR already carry the suite/kit/pack distinction, and E.17.1 already carries the viewpoint bundle/family/library distinction.

  • governing pattern = the pattern that carries the primary guidance/check authority of the family;
  • specialization = a named refinement under an existing governing pattern;
  • overlay = a cross-cutting governance role or reading-order projection over existing governing patterns;
  • profile = a declarative review/use role derived from a governing pattern rather than a replacement pattern;
  • family = a recurring class of cases governed by one pattern or governing companion;
  • bundle = a packaged set of defaults, allowances, or coordinated members;
  • cluster = a navigation or reading-order grouping; not by itself a governing-pattern claim;
  • suite = a coordinated set of members with explicit suite semantics under the governing FPF pattern or named authority reference;
  • pack = an editorial or review grouping, not automatically a semantic-authority claim;
  • kit = a reusable coordinated publication or boundary-description package with kit-level semantics under the governing FPF pattern or named authority reference;
  • record = a case, report, or review record;
  • umbrella = a provisional or review-stage head spanning possible subfamilies before a final governing FPF pattern, accepted DRR, or pattern-body decision.

These words are not interchangeable. In particular, authors must not let cluster, bundle, suite, family, profile, overlay, or umbrella do the work of an unnamed governing-pattern relation. When that relation matters, it must be stated directly: specialization under ..., profile governed by ..., overlay over ..., bundle under ..., or another equally explicit formulation.

A pattern may reuse a pattern-native role word when that role is already defined by the governing pattern. Outside that case, authors must not improvise near-synonyms or shift between role words for stylistic variety.

Precision-restoration placement discipline

When a pattern or companion text is drafted from E.10 or E.10.ARCH, distinguish two authoring objects:

  • semanticArea is the Part-F semantic unit for a wording-use restoration row: one Concept-Set row, one UTS row, or an explicitly bounded row-set. It is declared with semanticAreaBaseConcept and semanticAreaSenseFamily.
  • ontologicalNeighborhood is the applicability neighborhood around that named semanticArea: nearby primary EntityOfConcern kinds, relation kinds, claim records, governing FPF patterns, non-use boundaries, and remaining reader move that can carry the recovered meaning after the wording is repaired.
  • pattern nest is the publication and specialization placement of a pattern under its governing pattern family.

These are not synonyms. A precision-restoration pattern is placed in the pattern nest whose primary EntityOfConcern, relation record, or claim record it repairs. Its semanticArea states the Part-F semantic unit it repairs, while its ontologicalNeighborhood may name several relation governing the asserted uses. For example, quality-term repair lives in the C.16 characterization nest, even though its neighbouring relations can include relation construction, action invitation, evidence, assurance, source-use assignment, engineering quality bundles, pattern-quality evaluation, or mathematical-lens use.

Affected patterns should use a thin pointer when the first-stage wording repair belongs elsewhere. The pointer names the selected restoration pattern and the condition that triggers it; it does not copy the trigger registry, the full E.10.ARCH recovery algorithm, or a second local architecture for the same repair. The affected pattern then keeps its own subject matter: the characteristic, structure, view, episteme, relation, evidence, assurance, gate, work, decision, or adequacy question it already governs.

If a draft proposes a new precision-restoration pattern, the authoring claim must show the repeated wording failure, semanticAreaBaseConcept, semanticArea, semanticAreaSenseFamily, the recovered primary EntityOfConcern kind or relation/claim record, the intended pattern nest, the neighboring governing relations, and the admissible action left after repair. A new pattern is not justified merely because a word appears often, because a local checklist wants a bucket, or because a campaign needs a tidy grouping.

Reader-role discipline for pattern prose

A pattern is written for its intended FPF user: the person who will use the pattern to organise thought, inspect a case, publish a note, or review a result under that pattern. Its FPF-governed sections therefore explain what the pattern lets that user do, what it forbids, what it costs, and how it relates to neighbouring patterns in user terms. When neighbouring patterns or other governing companion roles are named, the prose should answer one user question such as which neighboring FPF pattern applies, which project-side FPF kind and reference named by value carries the claim, which nearby pattern is easy to confuse, or what must stay coordinated here; it should not read as one explanatory aside about why the package architecture was split that way. E.8 reader and reviewer wording is FPF pattern-authoring wording. Project-side publication readers, explanation readers, comparative review units, and participants in named project-side review relations are governed by the publication or project-side patterns that name those publication units, explanation-use relations, comparative review units, evidence paths, work records, or gate records, such as E.17, E.17.ID.CR, E.17.EFP, A.10, A.15.4, A.20, or A.21.

Authors must keep FPF-development or package-architecture material separate from that user-facing body. In particular, Problem, Solution, Consequences, Rationale, worked slices, and ordinary-vs-FPF-governed wording guidance must not do the work of:

  • arguing that the material is worth isolating;
  • justifying overlay/profile/governing-pattern or authority-reference choice as a package decision;
  • discussing authority-reference freeze, naming freeze, merge state, blast radius, or safest landing form;
  • or narrating future package promotion or defer decisions.

If architecture-placement commentary is still helpful, the default place is a separate companion note or ADR-like architecture note. A pattern may include a short optional informative subsection such as Architectural placement note (informative) only when that placement materially helps users avoid misuse; even then, it must stay clearly separated from the user-facing solution and rationale rather than replacing them.

Human-facing fit beyond role correctness

Human-facing fit is also subject-domain fit. A recognition text that starts from internal taxonomy, pattern-placement convenience, or package-architecture wording before the problem-domain moment is still under-authored even if its later guidance/check text is correct. When a broader umbrella name and a narrower operative branch are both used, the recognition text should also tell the reader which stack is actually active rather than leaving that reconstruction to a later declaration block or companion note.

A pattern can already be role-clean, boundary-clean, and reader-role-clean, yet still fail the first minute of use for a cold working reader. That failure usually appears when the text is admissible but does not yet make the working situation, practical payoff, primary EntityOfConcern, non-use boundary, or first action-guiding move visible enough.

P-2 epistemic precision check. When E.10 selects epistemic precision restoration for pattern prose, the first admissible action-guiding move must survive as a remaining admissible reader move or be replaced by an neighboring FPF pattern governing that claim application that now carries that claim. This is a direct E.2 P-2 and E.12 requirement, not an optional style preference. Intentional didactic metaphors and vivid Plain recognition lines are admissible when they are ordinary recognition aids or when their claim kind or admissible-use boundary maps back to Tech under E.10:6.2. A precision-corrected rewrite that leaves the recognition text inert is still under-authored.

For canonical patterns, the first-reading text should behave as a recognition text and the heavier review/check scope should remain in an assurance text.

When a pattern claims practice guidance or is meant to be used by engineers, managers, researchers, or other working readers, authors should make the following visible before the heavier harness takes over:

  • a recognisable Use this when or equivalent first-minute recognition cue;
  • a concrete working situation in Problem frame, not only taxonomic or pattern-placement language;
  • a short statement of what goes wrong if the pattern is missed or misread;
  • a short statement of what this pattern buys the reader in practice;
  • the first admissible action-guiding move the user should take in that situation;
  • a short Not this pattern when boundary for ordinary nearby non-use cases;
  • one minimally viable worked case or use slice that shows what changes in practice;
  • when a typed declaration block, formal lens, or other compact modeling material is FPF-governed, a short user-facing statement of what kind of object the pattern is governing and what minimal lens keeps that object reviewable;
  • pairwise plain glosses for any FPF-governed technical terms that must appear before the heavier declaration role arrives;
  • when SoTA-Echoing carries explanatory work, a short working-reader implication for each row or cluster of rows and a visible link back to the case bank or worked slices that those rows discipline;
  • a visible split between the recognition text and the heavier assurance text or companion material;
  • and, if the draft implicitly serves several working-reader situations, an explicit primary working reader, primary concern, or primary viewpoint.

Problem-frame recognition signature (informative). A canonical pattern should expose the working situation through its Problem frame, not through one separate navigation block. When an E.11 pattern-entry discoverability problem is present, the same Problem frame may also carry candidate-pattern and tempting-wrong-pattern cues; otherwise it should stay with action guidance rather than becoming a local catalogue row.

The local recognition signature should make recoverable:

  • the concrete working situation;
  • the primary EntityOfConcern, relation named by value, claim record, or stabilized concern;
  • what goes wrong if the pattern is missed or misread;
  • the first admissible action-guiding move and what that move buys;
  • the ordinary not-this-pattern boundary;
  • the first admissible action-guiding result; when an E.11 discoverability problem is present, the first admissible entry stop or entry-stabilizing result.

Use this pattern when, This pattern applies when, or equivalent Problem frame prose may be used as the first sentence or compact cue of this signature. It is not one separate required section. Compact candidate-pattern comparison belongs in E.11-distributed entry material; expanded entry-disambiguation cases belong in I.2.

If the prose points to neighbouring patterns or other governing companion roles, it should present them as neighboring FPF patterns, project-side FPF kinds and references named by value, or E.11 entry-recognition reclassifications rather than as hidden co-authorities of the current pattern.

If the pattern claims broad, universal, or transdisciplinary usefulness, that breadth should already be visible in the recognition text. At minimum the recognition text should show at least three heterogeneous reader or domain situations rather than one narrow case family with a later broad claim attached. When a compact matrix helps, F.16 is the preferred template for making that breadth legible.

This is not a request to flatten the pattern into plain language only. It is a rule about ordering, assurance depth, and text consistency: the recognition text must help a working reader recognise the pattern early, while the assurance text continues to carry the full claim kind or admissible-use boundary. If the pattern uses technical lexicon, ontological distinctions, or a mathematical lens, those structures must remain recoverable, but the first-reading text should not require the reader to decode that full stack before recognising the working situation. The assurance text may tighten or discipline the recognition text; it must not silently shift what the recognition text claimed.

Illustrative migration example (informative).

Old pre-template top:

Start here when the dominant question is API, protocol, SLA, published boundary, or compliance wording.
First output: Claim Register.
Neighboring pattern relations / entry-recognition reclassifications: A.6.B, A.6.C.

Repaired Problem-frame recognition signature:

Use this pattern when boundary-facing language - API, protocol, SLO/SLA, compliance clause, or other published boundary description - mixes guidance/check clauses, admissibility gates, duties, and evidence into one sentence or published boundary description.

If missed, the text becomes boundary-claim soup: runtime behavior, governance, and evidence are treated as one undifferentiated promise.

Do not use this pattern merely because the text mentions an API or boundary description. If the question is still one unstable cue, preserve it through the admissible cue-preservation line first.

First admissible action-guiding result: one `A.6.B`-governed atomic claim set or one Claim Register whose claim/use questions are explicit enough for the governing FPF pattern or named project-side FPF kind and reference to inspect.

Design-time and run-time referents stay separated in pattern prose

Pattern prose must keep its referent index explicit. In ordinary body sections, the default truth-makers are run-time or governed-domain objects, states, moves, boundaries, consequences, and user-facing practical effects. Normative-standard wording is still admissible when the sentence is explicitly about the standard as a normative publication, for example in marked migration navigation examples, marked informative notes, or conformance/checklist clauses.

Design-time and development-state referents are different objects. The current draft, current body, current pass, author, reviewer, handoff, packet, governing companion, landing choice, or other writing-process objects must not be smuggled in as the hidden truth-condition of pattern prose. A quick test is: what makes this sentence true? If the sentence is true because the current text is arranged a certain way, because the author or reviewer must do something next, or because the current development state says so, then it is design-time residue, not pattern content.

Move that material to the authored-slice carrier, handoff, DRR, or companion architecture note. If a sentence is kept in the pattern, rewrite it so that its truth depends on the governed run-time/domain object or on the standard's declared normative claim set rather than on the current writing pass. If a pattern or example claims autonomy for any Role/Method/Service:

  1. Add a subsection “Autonomy (RoC‑E.16)” that lists:
    • AutonomyBudgetDeclRef (id, version, Scope (G), Γ_time),
    • Aut-Guard policy-id (PolicyIdRef),
    • OverrideProtocolRef (SpeechAct names, SoD),
    • pointer to where Green‑Gate applies in the Method steps,
    • where AutonomyLedgerEntry is recorded on U.Work.
  2. Include one Tell‑Show‑Show vignette that demonstrates depletion and override handling.
  3. Use LEX‑BUNDLE terms (Scope (G), Γ_time, Role, Method, and Work). Avoid “validity”, “process”, “actor”, “system”, “mechanism” unless mapped to kernel types.

Archetypal Grounding (System / Episteme)

Template elementU.System illustrationU.Episteme illustration
Section orderPump‑assembly pattern follows sections 1–12 (and, optionally, 13).Meta‑analysis pattern follows the same sections.
S‑1 Density w/o Jargon“The pump boundary is the sealing surface.”“This episteme raises F (Formality) by making falsifiers testable.”
Hook‑Weave‑GroundOpens with field anecdote → weaves in Γ‑core → ties the claim to motor torque.Opens with historical paradox → weaves in A.10 evidence refs → ties the claim to peer‑review data.

Note: Prefer examples that reuse FPF characteristics vocabulary (e.g., F (Formality) rather than “F‑score”) unless you explicitly mean an external metric and name it as such.

Bias‑Annotation

Lenses tested: Gov, Arch, Onto/Epist, Prag, Did. Scope: Universal for the authoring conventions in this pattern. This guidance biases toward Did (readability, narrative flow) and Arch (template regularity) by design; the mitigation is content-bearing reduced sections and justification through the smallest grounding, misuse, boundary, or reduced-case statement, not omission placeholders.

Conformance Checklist

CC style (canonical). Conformance Checklist items are authoring checks: they test whether the pattern guidance has been applied and written correctly in a pattern or companion text that claims conformance. They do not replace Solution, do not make the pattern a control form, and do not state deontic obligations about the modeled world. A CC clause of the form “X SHALL ...” is to be read as “In a conforming pattern or companion text, X SHALL ...”.

Preferred wording for new or edited CC items: start with an explicit conformance subject (e.g., “Authors ...”, “Reviewers ...”, “A conforming implementation ...”, “A validator ...”). If a CC item is enforcing an admissibility predicate, it SHOULD cite the predicate’s identifier (from a Definition: / Invariant: / Well-formedness constraint: block) rather than restating the predicate as “X MUST ...”. For boundary/interface/protocol/declaration patterns, prefer A.6.B-scoped claim IDs (L/A/D/E) or cite an existing Claim Register (A.6.B:7) instead of restating mixed prose.

IDRequirementPurpose
CC-SG.0 (Heading discipline).Pattern and subsection headings SHALL follow H-1 ... H-9 (FullId prefix, reserved punctuation, heading levels, ellipsis discipline). The Footer marker SHALL follow H-9.Makes chunks self-contained; reduces ambiguity between author elision and retrieval truncation.
CC-SG.1Every new pattern SHALL follow the section order defined in the Canonical Template (Title block -> ... -> Footer marker).Guarantees structural comparability.
CC-SG.1a (Initial pattern draft shape).The first non-empty authored version of a pattern SHALL already use the canonical section frame (Title block -> Footer marker). Authors MUST NOT start from one pre-template opening memo and promise to backfill canonical sections later.Prevents large late-stage structural rewrites and keeps drafting aligned with E.8 from the first substantive pass.
CC-SG.2 (Grounding required).Every pattern MUST include an Archetypal Grounding section with at least one content-bearing Tell, Show, reduced grounding case, or ordinary/non-use boundary. A placeholder saying that grounding is absent is nonconforming.Keeps patterns teachable and reduces "definition-only" ambiguity.
CC-SG.3The Bias-Annotation section SHALL cite the five Principle-Taxonomy lenses and declare either “Universal” or an explicit scope limitation.Keeps cross-disciplinary neutrality explicit (ties to Guard-Rail 4).
CC-SG.4Deontic normative sentences MUST use only RFC-style keywords (see H-8); RFC keywords MUST NOT appear inside Definition:/Invariant:/Well-formedness constraint: blocks. When enforceable, admissibility/validity predicates SHOULD be referenced by id from the Conformance Checklist (rather than duplicated as “X MUST ...”). Informal deontic verbs are prohibited in normative clauses.Prevents ambiguity between obligation language and model validity; improves auditability.
CC-SG.5Pattern prose SHOULD demonstrate adherence to Style Principles S-0 ... S-19; reviewers are empowered to request revision when clarity or didactic quality suffers.Embeds common narrative voice without rigid policing.
CC-SG.6 (SoTA-Echo required).Every pattern SHALL include a SoTA-Echoing section and clearly state divergence of its Solution from SoTA with explanation of why. Architectural patterns SHALL satisfy the full authoring requirements below. Definitional patterns SHALL carry reduced SoTA when a full comparison is not meaningful: name which current practice is adopted, adapted, or rejected for terminology work, ambiguity or sense recovery, separation between constraint and ontology, controlled-vocabulary caution, or a comparable definitional problem. Internal coherence alone is not enough.Ensures explicit lineage, guards against vocabulary drift, and prevents definitional patterns from using internal coherence as zero SoTA.
CC-SG.7 (Post-2015, multi-Tradition).For Architectural patterns, SoTA-Echoing SHALL cite >= 3 post-2015 sources across >= 2 Traditions; each item MUST carry adoption status (adopt/adapt/reject) with reason.Guards against monoculture; makes intent explicit.
CC-SG.8 (Bridge & CL on reuse).Any cross-Context or ReferencePlane reuse mentioned in SoTA-Echoing MUST cite Bridge id + CL and (if ReferencePlanes differ) Φ(CL)/Φ_plane policy-ids; penalties -> R_eff only.Safe, auditable reuse.
CC-SG.9 (Lexical hygiene).The term mapping SHALL NOT appear in SoTA-Echoing except in the precise E.10 sense; use alignment/Bridge/relation instead.Avoids overloading reserved vocabulary.
CC-SG.10 (No keyword soup).SoTA-Echoing items MUST be written as sentences (not bare noun phrases); bullet lists are acceptable only with complete clauses.Improves didactic quality and comparability.
CC-SG.11 (Anti-patterns).Every pattern SHALL include a Common Anti-Patterns and How to Avoid Them section with at least one local misuse, overread, boundary case, or neighboring-pattern misuse relation. A placeholder saying no anti-pattern applies is nonconforming.Makes misuse paths explicit and reduces review churn without creating omission-as-content.
CC-SG.12 (Boundary claim-set discipline).If a pattern’s subject is a boundary, interface, API, protocol, connector, SLA, or other published boundary description, it MUST either (a) provide an A.6.B-governed atomic claim set (L-*/A-*/D-*/E-*, with stable IDs), or (b) explicitly cite an existing A.6.B Claim Register / scoped claim set that it reuses.Pulls A.6.B into the authoring contour, prevents boundary-kind soup, and makes review more explicit and repeatable.
CC-SG.13 (Didactic sufficiency).New patterns and substantial revisions MUST remain understandable without project-planning notes. When a pattern introduces a new named family, profile, or specialization, or adds a non-trivial note derived from another pattern, its Solution and Grounding SHALL carry enough didactic content: the relation to the pattern that governs the specific claim, ordinary-vs-FPF-governed wording guidance, at least one concrete source and resulting-publication slice where applicable, and visible related-pattern or project-side FPF kind and reference named by value cues.Prevents skeleton-only patterns and project-context leakage.
CC-SG.14 (Controlled prose, not free shorthand).FPF-governed prose SHALL NOT rely on bare relation words or planning shorthand whose governing-pattern relation is left implicit (e.g., bare “species”, “branch”, “flow”, or API-like “input/output” language). When a governing-pattern relation matters, authors MUST name it explicitly (specialization under ..., profile governed by ..., overlay over ..., etc.).Keeps pattern prose precise and self-identifying.
CC-SG.15 (Package-form and governing-pattern relation role-word discipline).When a pattern names a package-form or the governing-pattern relation of a family (primary carrier, specialization, profile, overlay, family, bundle, cluster, suite, pack, kit, record, umbrella), the chosen role word MUST match the intended ontology and MUST NOT be swapped for stylistic variety or left to implication.Prevents semantic blur in pattern prose and keeps governing-pattern relations auditable.
CC-SG.16 (Reader-role discipline).Authors MUST keep every pattern host or monolith section user-facing. FPF-development or package-architecture reasoning about isolation, overlay or carrier choice, freeze, merge state, planned evolution, review/executor correspondence, or quality/projection state MUST NOT occupy any pattern text, including notes, appendices, Relations, Rationale, SoTA-Echoing, worked slices, tables, or checklists; if such placement reasoning is still needed, put it in a separate companion, architecture, evaluation, review, projection, release, or landing carrier.Keeps pattern prose aligned with its intended reader and prevents package-governance leakage into use guidance.
CC-SG.16a (Referent-index discipline in pattern prose).Pattern sections MUST keep run-time/domain referents, normative-standard referents, and design-time/development-state referents distinct. In ordinary pattern prose, sentence truth MUST depend on the governed run-time/domain object or on the pattern's declared normative claim set, not on the current draft state, author action, reviewer action, or development-state status. If a sentence is true only because of the current writing/review pass or text arrangement, it is design-time residue and belongs in carriers or companion notes, not in the pattern.Prevents Conway/process leakage, DesignRunTag drift, and late cleanup before review or landing.
CC-SG.16b (Quality/projection carrier separation).Pattern text MUST NOT present E.21 values, PatternQualityStatus, corpus-projection evidence, README/ToC/E.11/I.2 alignment, card/retrieval evidence, cold-reader evidence, monolith parity, landing evidence, developer/reviewer/executor correspondence, or other quality-carrier facts as pattern content. This applies to the whole host or monolith section, including notes, appendices, Relations, Rationale, SoTA-Echoing, examples, tables, and checklists. Such facts belong in evaluation results, review records, projection carriers, README, ToC, E.11, I.2, cards, retrieval/projection carriers, or release/landing evidence carriers. They may remain in the pattern only when the role test shows that the pattern's own EntityOfConcern and user move are that evaluation/projection work, or when rewritten as the user-facing move or boundary that the evidence justifies.Prevents pattern-quality and corpus-projection evidence from masquerading as practitioner guidance.
CC-SG.17 (Recognition text and assurance text).Admission or substantial revision runs MUST check that a canonical pattern exposes a recognition text early enough for the intended working reader and an assurance text that carries declaration, guidance/check, modeling, and review/check scope without silently shifting the recognition-text claim. The recognition text MUST expose a recognisable working situation, what goes wrong if the pattern is missed, what the pattern buys, and a clear ordinary not this pattern when boundary. Any FPF-governed typed declaration or modeling lens MUST be exposed by a short user-facing statement of the primary EntityOfConcern, early FPF-governed technical terms MUST receive nearby pairwise plain glosses, and any SoTA-Echoing used as explanatory grounding MUST state a short practitioner or manager implication plus visible linkage to the worked cases or boundary slices it disciplines. If the pattern claims universal or transdisciplinary reach, the recognition text MUST demonstrate that claim through at least three heterogeneous reader or domain situations, preferably using an F.16-style example matrix or an equally explicit alternative.Prevents text-clean but reader-opaque patterns and keeps broad claims visible where cold readers actually enter the text.
CC-SG.17a (Problem-frame recognition signature and E.11 boundary).Authors SHOULD express a pattern's concrete working situation through the pattern's Problem frame, not through a separate navigation block. The Problem frame should make recoverable the primary EntityOfConcern, relation named by value, claim record, or stabilized concern, what goes wrong if the pattern is missed or misread, the ordinary not-this-pattern boundary, the first admissible action-guiding move, and the result that move buys. Only when an E.11 pattern-entry discoverability problem is present should the same recognition text add candidate-pattern, tempting-wrong-pattern, entry-recognition reclassification, or first admissible entry-stop cues. Compact candidate-pattern comparison belongs in E.11-distributed entry material; expanded entry-disambiguation cases belong in I.2; lexical-query material belongs under the lexical/naming patterns and companion patterns that already govern it. Pattern-local Start here when, First output, neighboring-pattern lists, and Common wrong escalations and boundary transfers blocks SHOULD NOT replace the action-guiding Problem frame and Solution.Keeps working-use recognition inside the canonical pattern frame while preventing navigation/workflow language from becoming local pattern structure.
CC-SG.17b (Epistemic precision repair preserves action guidance).When authors edit pattern prose under C.2.P, the repaired recognition text MUST preserve or restore the first admissible action-guiding move as a remaining admissible reader move, or explicitly name the neighboring FPF pattern that now carries that claim. When both Tech and Plain registers are active in the same sentence family, any Plain or didactic wording MUST map back to the recovered Tech reading under E.10:6.2 when it carries ontological, evidence, causal, assurance, bridge, gate, work, decision, or admissibility claim kind or admissible-use boundary. More engaging recognition wording remains admissible as ordinary Plain prose only when it does not carry such claim kind or admissible-use boundary, or as a recognition aid whose claim kind or admissible-use boundary is recoverable through the recovered Tech reading or named FPF pattern application. Type-correct but inert wording is not mature pattern prose.Prevents epistemic precision cleanup from leaving pattern guidance inert while also preventing expressive prose from reintroducing overread.
CC-SG.18 (Precision before relaxation).In FPF-governed prose, authors MUST NOT leave a generic head noun or qualifier with FPF-governed use uninterpreted when that phrase carries semantic, boundary, or authority claim kind or admissible-use boundary. A narrowing qualifier by itself does not restore the head kind. Authors MUST restore head kind first, then qualifier claim kind or admissible-use boundary, then any comparison criterion or escalation condition before downstream claim or effect. If a later Plain, didactic, or coarsened rendering is kept, the more precise upstream reading MUST remain recoverable.Prevents ambiguity from being hidden inside ordinary-looking phrases and keeps softened prose subordinate to an explicit authoritative reading.
CC-SG.18a (Semio-Echoing auxiliary placement).Semio-Echoing or comparable semio-facing material MUST be trigger-controlled and auxiliary. A conforming non-semio pattern keeps its own EntityOfConcern, first useful move, practical payoff, stop condition, and related-pattern relations primary; it adds semio material only when the EntityOfConcern, episteme/publication stack, alignment path, and remaining admissible reader move are recoverable by value under E.10, C.2.P, or E.10.ARCH. Generic description/publication-use guards about descriptions, views, publications, records, cards, diagrams, sources, or files not being permissions, promises, prescriptions, evidence items, assurance verdicts, decisions, gate passages, releases, work occurrences, or authority sources belong in a named boundary section or exact description-publication pattern, not as the main subject Solution. When a semio-bias repair touches several non-semio patterns or source rows, conformance evidence is row-atomic: for each affected pattern or source row, name the primary EntityOfConcern, first useful move, required pattern-quality checks, guard placement, first-screen result, related-pattern relations named by value, and any source re-seeding result.Prevents semio-bias: correct language checks must not replace the pattern's constructive method guidance.
CC-SG.18b (Positive subject content and precision-restoration profile control).A conforming pattern's first substantive content in Problem frame and Solution MUST be the positive subject-kind/action spine: primary EntityOfConcern, first useful move, practical delta, and bounded non-use needed for that move. Material from any precision-restoration layer MUST NOT compete with that spine. Boundary doctrine and related-pattern mapping are pattern content like any other doctrine: if the governing pattern, strict distinction, non-use rule, README/ToC/E.11/I.2 entry cue, or relation row already carries it, use one short pointer instead of repeating it locally; add local boundary prose only for a documented local confusion and exact stop condition. Pattern application MUST stay explicit: patterns are applied to situations, claims, texts, or work objects, and related FPF patterns are stated as declarative pattern relations in Relations only after this pattern has stated its own ontology, method, norm, worked action, or other positive solution content. For phrase-level apparatus, apply F.19; for remaining word/head/use precision, apply E.10, E.10.ARCH, F.18, or the governing pattern. Architecture-placement or package-boundary rationale stays in DRR, architecture documents, review handoff, or companion material; if it implies a working-reader move, write that move in pattern terms and keep the rationale outside the pattern.Prevents precision-restoration debt and architecture/reference boilerplate from replacing the pattern's own subject matter.
CC-SG.18c (Kind-preserving wording repair).A changed FPF-governed phrase MUST leave the pre-repair and post-repair primary EntityOfConcern, kind, relation or claim kind, slot or use-position, admissible use, and scope recoverable when those items are live. Removing a trigger word, changing a head, or replacing a phrase is not a repair until the author can show that the kind and any live slot or use-position were preserved, split by accepted decision, or intentionally changed by accepted decision, and can cite the governing pattern when another pattern governs the kind under repair, relation, claim, or position.Prevents lexical cleanup from becoming ontology drift.

Common Anti-Patterns and How to Avoid Them

These failure modes recur in drafts and in downstream application. They are predictable ways the Forces in this pattern get violated.

Anti-patternSymptomWhy it failsHow to avoid / repair
Template cargo-cultingHeadings exist, but each section is a thin bullet list with no narrative.Satisfies Uniformity but loses Readability and Didactic Primacy.Use S-0 narrative flow per section; write 2-4 sentence micro-paragraphs before any list/table.
Un-grounded abstractionsProblem/Solution stay abstract; no concrete System/Episteme Tell-Show-Show.Breaks teachability and makes misuse likely.Fill Archetypal Grounding first; then back-propagate concrete nouns into Problem/Forces/Solution.
SoTA name-droppingSoTA-Echoing is a list of nouns/buzzwords with no adopt/adapt/reject rationale.Violates CC-SG.7 and CC-SG.10; readers cannot audit alignment.For each source, state what is adopted/adapted/rejected and why (complete clauses, 2-4 sentences).
Tool-bound normativityA vendor tool, file format, or schema is described as required to apply the pattern. Data governance implied.Violates Guard-Rails (lexical firewall; notation independence, data governance absence); reduces portability and conceptual clarity.Keep normative content conceptual; move tooling and data governance into Context-local Profiles.
Hidden trade-offsSolution sounds universally good; Consequences lists only benefits.Removes decision-use value; applicability cannot be judged.In Consequences, include at least one trade-off and a mitigation; if none exists, explain why.
Skeleton-only patternThe template is present, but the pattern gives only one compressed definition block and scenario labels.Passes form while failing didactic sufficiency.Add didactic content: local decomposition, concrete slices, reviewer cues, and neighboring-pattern or project-side FPF kind and reference named by value guidance.
Project-context leakageA reader needs architecture memos or planning notes to understand the pattern.The monolith stops being self-sufficient.Move the essential problem framing, worked slices, and rationale into the pattern itself; keep project reviews informative only.
Repeated content, reference, and architecture boilerplate leakageProblem frame or Solution spends user-facing space repeating the same guard, distinction, mini-rule, reference, definition, caveat, related-pattern mapping, placement note, split rationale, or defer rationale without a new local action/case/evidence need.The product text becomes an architecture memo or reference note instead of a pattern. Ordinary references, footnotes, README/ToC/E.11/I.2 entry cues, and Relations already carry cross-reference work; repeating it as prose hides the positive Solution.Replace the boilerplate with a normal pattern id, citation, Builds on, Coordinates with, Relations, README/ToC/E.11/I.2 entry cue, or architecture/DRR note. Keep only a local boundary sentence when it changes the first admissible move.
Quality-carrier leakageAny host or monolith pattern text, including notes, appendices, Relations, Rationale, SoTA-Echoing, examples, tables, or checklist rows, talks about corpus projection, README/ToC/E.11/I.2 alignment, retrieval/cold-reader evidence, monolith parity, landing evidence, PatternQualityStatus, all-4/all-5 posture, or developer/reviewer/executor correspondence as if that is pattern content.The text is now about why the pattern can be evaluated, found, landed, or trusted, or about role-turn communication, rather than about what the intended user should do.Move the quality/projection facts to E.21, E.19, README/ToC/E.11/I.2, projection/card/retrieval, or release/landing carriers. Keep only the user-facing action or boundary justified by that evidence.
Apparatus overwrapA simple pattern claim, relation, object, action, or placement is wrapped in extra role, carrier, locus, flow, state, status, text-state, package, or process words.The sentence may be technically correct, but the reader sees apparatus before the pattern's object and move. A poetic plain rewrite can be just as bad if it loses the FPF kind.Apply F.19; the final rewrite keeps the same EntityOfConcern, head kind, relation or claim kind, established FPF term, concerned role, and flow role.
Generic-head underspecificationAn FPF-governed phrase uses a generic head such as note, view, guidance, output, or artifact, but the text never restores what kind of thing that phrase names.The reader cannot tell what ontology the sentence is actually governing.Restore the head kind first in pattern-local or project-local terms before any broader claim or effect or comparison is made.
Qualifier-smuggled claim kind or admissible-use boundaryA modifier such as comparative, safe, interactive, reliable, or faithful is doing the semantic work while the text leaves its claim kind or admissible-use boundary implicit.The sentence sounds precise without actually stating its comparison criterion, relation claim kind or admissible-use boundary, or downstream claim or effect boundary.Unpack the qualifier into explicit claim kind or admissible-use boundary, criteria, named neighboring FPF pattern, or project-side FPF kind and reference rather than relying on the modifier alone.
Mixed comparison criterionOne sentence compares or ranks publication-form, carrier, process, authority-reference, or project-record values under one declared criterion.The sentence becomes ontologically incoherent when the compared objects do not share the criterion, even if each local noun sounds plausible.First restore head kind, then qualifier claim kind or admissible-use boundary, then rewrite the comparison through a homogeneous claim-kind criterion, threshold, or named governing-pattern relation condition.
Implicit relation shorthandWords like “species”, “branch”, or process metaphors do the semantic work without naming the actual governing-pattern relation.Readers infer the wrong ontology or workflow.State the governing-pattern relation explicitly and remove shorthand that only makes sense inside project discussions.
Package-form and governing-pattern relation driftWords like bundle, cluster, profile, overlay, family, suite, or kit are swapped as if they were stylistic variants.Readers cannot tell whether the text is naming an authoritySourceRef target, a navigation grouping, a review role, or a packaged set of defaults.Pick one role word by ontology, keep the governing-pattern relation explicit, and do not vary the noun unless the ontology really changes.
Reader-role leakagePattern sections start telling the reader why the pattern was isolated, what landing form is safest, or why freeze/merge is premature.The pattern stops teaching the user and starts narrating FPF-development decisions.Move package-development reasoning to companion notes; keep pattern sections about admissible use, costs, boundaries, and neighboring FPF pattern governing that claims or project-side FPF kinds and references for the intended user.
Editorial/development self-instruction leakThe pattern starts saying things like this draft should ..., later authoring will ..., or that is the opening this draft must hold.The text stops addressing the working reader and starts narrating the current editorial or drafting process.Move the sentence to the authored-slice carrier or handoff, or rewrite it as one user-facing claim about the primary EntityOfConcern, boundary, or practical consequence.
Role-clean but pragmatically foggyThe pattern addresses the right reader in principle, but a cold practitioner still cannot recognise the working situation, practical payoff, primary EntityOfConcern, first useful move, or project-level implication of the SoTA-Echoing early enough.The text passes role hygiene but still fails E.12/E.13/E.14 as working guidance.Bring a manager-first or practitioner-first recognition cue higher, add one minimally viable worked case, state what changes in practice, expose the primary EntityOfConcern and any minimal modeling lens in plain user-facing prose, add plain glosses for early FPF-governed technical terms, and keep SoTA-Echoing tied to visible practitioner or manager implications plus nearby case linkage rather than lineage alone.
Hybrid audience blobOne main narrative tries to serve engineers, managers, auditors, architects, and researchers at once with no primary working reader or concern role.The text becomes globally polite but locally blurry; no reader knows which concern governs the first role.Make the primary working reader, concern, and viewpoint explicit and assign other audiences to secondary companion roles, other faces, or an explicit out-of-scope note.

Consequences

BenefitsTrade‑offs / Mitigations
Predictable skeleton – readers instantly know where to find context, forces, and criteria.Limits author freedom in macro layout; mitigated by flexibility inside the Solution subsection.
Cohesive voice – S‑principles give FPF a recognisable style, aiding memorability.Reviewers must read for style, not only semantics; checklists reduce review effort.
Embedded pedagogy – Tell‑Show‑Show and Hook → Close heuristics turn the spec into a self‑teaching text.Slightly longer patterns; justified by better comprehension and fewer clarifying DRRs.

Rationale

Structure and style function as FPF’s grammar. By unifying what were once separate “template” and “style guide” patterns, authors face a single reference point that satisfies:

  • P‑1 Cognitive Elegance – uniform, minimal surprises.
  • P‑2 Didactic Primacy – narrative flow, dual archetype examples.
  • Guard‑Rails 1 & 2 – no tool jargon, no notation lock‑in inside prose.

A unified template also improves retrieval: a chunk containing A.2:<n> - Bias‑Annotation remains self‑identifying even when parent headings are missing, and the recommended footer marker makes truncation detectable.

International and industry standards often speak in terms of conformance criteria. FPF uses the label Conformance Checklist to make adoption easier for engineers and managers.

SoTA-Echoing (normative; lineage and deltas to contemporary State-of-the-Art)

Purpose. Make each pattern's relationship to contemporary best-known problem-solving practice explicit and comparable without importing tooling or data governance. This section is prose-first and notation-independent. It does not mint an independent second rule source, but it is an FPF-governed alignment section: the Solution, Conformance Checklist, Relations, worked cases, and other FPF-governed sections must reflect the stance stated here or explicitly justify divergence.

SoTA definition. In FPF, SoTA names the best-known currently defensible problem-solving practice for the named practice question in the relevant domain or practice tradition. It is not official status, a recent edition, broad popularity, citation volume, institutional adoption, reputation, or familiar terminology. A standard, book, paper, benchmark, or practice report carries SoTA only when it states or justifies the current best-known answer for the named practice question; otherwise it is lineage, current-standard reference, rationale-only material, or rejected-popular-practice material.

Two-part SoTA test. A row must pass both tests. First, the source family must be SoTA-bearing: it must represent the current best-known answer for the named practice question or a clearly named current branch of that answer. Second, the pattern must incorporate that answer by value: the adopted, adapted, or rejected stance must change Solution, boundary, anti-pattern, rationale, checklist, relation, worked case, evidence requirement, stop/reopen condition, or another FPF-governed pattern locus. A current best-known source that changes no FPF locus is uncaptured SoTA; a citation that changes wording without being current best-known practice is not SoTA.

Incorporation test. A SoTA row is accepted as pattern grounding only when it changes what the pattern lets a working user do, what the pattern forbids them to over-read, which neighbouring FPF pattern must apply, which evidence or validation requirement remains applicable, or how the Solution and neighbouring FPF-governed sections are written. A citation that only decorates the pattern or proves that the author has read a tradition does not carry E.8.

Minimum contents (authoring requirements).

  1. Evidence binding (no duplicate SoTA). If a SoTA Synthesis Pack exists (G.2), this section SHALL cite its ClaimSheet IDs, CorpusLedger entries, and BridgeMatrix rows as the governing evidence source for claims and report adopt, adapt, or reject consistent with those IDs. Avoid forking an untracked SoTA narrative. 1a) Accepted decision and source material set, not DRR-only narrowing. When a pattern is drafted under an accepted DRR and other accepted decision or source materials also exist by value, the DRR remains the decision and placement record, but SoTA-Echoing, neighboring-pattern relations, and any minimal modeling or mathematical lens MAY and SHOULD inherit non-conflicting material from that accepted material set.
  2. Sources (current problem-solving source refs, not prestige refs). For Architectural patterns, cite at least 3 primary SoTA source refs that carry current best-known answers for the named practice question, with at least two independent Traditions when more than one serious tradition currently answers that question. For Definitional patterns, cite at least 1 current source or practice ref for the reduced issue being governed: terminology work, ambiguity or sense recovery, separation between constraint and ontology, controlled-vocabulary caution, or a comparable definitional problem. If the best source is older but still current, mark why it still answers the named practice question rather than treating source age, standard status, or popularity as SoTA by itself.
  3. Best-known, not merely popular. Authors SHALL distinguish best-known currently defensible practice from merely widespread or fashionable defaults. If the pattern adopts, adapts, or rejects a popular but less defensible practice, that divergence MUST be stated explicitly. 3a) Currentness and lineage status. Older standards, early papers, and historically important examples may be cited as lineage only when later practice has materially changed the answer. They may carry a SoTA row only when the pattern states why the source ref is still current for the named practice question or pairs it with a current source that supplies the current practice. 3b) Problem-domain and practice answerability. The selected SoTA source family MUST answer the governed working problem and the relevant domain or practice tradition. It MUST NOT be selected only because it makes package placement, naming neatness, or pattern clustering easier to justify.
  4. Practice alignment. For each cited item, state what is adopted, adapted, or rejected and why in 2 to 4 sentences.
  5. Scale admissibility. If numeric operations are implied, bind to ComparatorSet or CG-Spec and declare partial-order stance with no hidden scalarization.
  6. Cross-Context reuse. Any reuse across U.BoundedContext must expose Bridge id plus CL and, if ReferencePlanes differ, Phi policy ids; penalties affect only R_eff.
  7. Lexical hygiene. Avoid “mapping” unless you mean an explicit Bridge, translation relation, or other named relation with loss notes.

Writing guidance (readability). Write short paragraphs, not tag lists. For each Tradition, provide one sentence naming the practice, one sentence comparing it to the pattern's Solution, and one sentence giving adoption status with reason. Where helpful, add one System and one Episteme micro-example (Tell-Show-Show).

Format: human-first. A small table is allowed, but each row MUST be accompanied by 1 to 2 sentences as above. Vendor tokens, tool tokens, file formats, or data schemas are out of scope unless the named practice question under discussion makes them have FPF-governed use.

SoTA alignment for this pattern (E.8 self-echo)

Claim (E.8 need)SoTA practice (post-2015)Use of sourcePrimary source (post-2015)Alignment with E.8Adoption status
Pattern texts must be teachable, not just correct.Use a stable skeleton with context, problem, forces, solution, actions, and consequences, plus illustration and checks, to keep patterns readable and actionable.Current-practice writing-guidance use. This row is used for E.8's canonical pattern skeleton and didactic ordering; it is not treated as external authority over FPF ontology.Iba (2021), “How to Write Patterns: A Practical Guide for Creating a Pattern Language on Human Actions” (PLoP 2021 PLoPourri).Canonical Template mirrors the skeleton and adds Archetypal Grounding plus Conformance Checklist as first-class sections.Adopt and adapt. Adopt the skeleton; adapt by making bias and conformance explicit sections.
Pattern quality needs explicit validation beyond folklore.Critique of ad hoc validation, including the rule of three, and push toward more rigorous discovery and validation methods.Current-best source use for pattern discovery and validation rigor in this row's narrow use. The source changes E.8 by requiring validation to be explicit rather than folklore-based.Riehle, Harutyunyan, Barcomb (2020), “Pattern Discovery and Validation Using Scientific Research Methods”.E.8 encodes validation as Conformance Checklist plus SoTA-Echoing with adoption status and evidence binding.Adopt. Adopt auditability goals; keep the mechanism lightweight through checks and evidence binding.
Governance should constrain structure, not mandate tools.Specify conformance and structure; do not prescribe processes, notations, tools, or recording media.Current-standard reference use. The architecture-description standard supplies a useful conformance-vs-tooling distinction, but E.8 does not import architecture-description ontology as pattern-authoring ontology.ISO/IEC/IEEE 42010:2022, Software, systems and enterprise - Architecture description.E.8 is template-centric and conformance-centric, with guardrails against tool and notation lock-in in core narrative.Adopt. Directly adopt the conformance-not-tooling discipline for authoring shape.
Pattern languages are networks; visuals often mislead.Systematic surveys report low consensus on what to visualise and ambiguous or inexpressive visuals; relations need clear definition in text.Current-practice rationale use. The source is used as rationale for the text-first relation discipline; it is not current-best source material for all pattern-language visualization.Quirino, Barcellos, Falbo (2018), “Visual Notations for Software Pattern Languages: A Mapping Study”.E.8 requires a Relations section and keeps diagrams optional, placing primacy on textual structure and explicit links.Adapt. Use the finding as rationale for text-first, relation-explicit authoring.
Controlled technical writing should be plain without losing necessary terms.Plain-language practice writes for a specific audience, removes unnecessary words and hidden verbs, avoids synonym churn for the same object, and keeps necessary technical or legal terms when they carry the meaning.Current-practice source use for kind-safe plain wording. The source changes E.8 by making plain wording a precision-preserving diagnostic, not decorative simplification.U.S. Plain Writing Act implementation and Digital.gov plain-language guides; SEC, A Plain English Handbook.E.8 encodes kind-safe plain rewriting: remove phrase-level role/carrier/locus/flow/status apparatus only when it adds no kind, relation, evidence value, or user move; preserve established FPF terms unless E.10/F.18 changes them.Adapt. Adopt audience-first, concise, consistent wording; adapt it to FPF kind preservation.

Relations

  • Coordinates with: E.9.DA when an authored pattern body is drafted from a concrete DRR and the blocker is whether the DRR selected, distributed, carried source use, carried accepted decisions, or supplied a first drafting move sufficiently for that authoring use. E.8 still governs the pattern body; E.9.DA is not a mandatory authoring section, review card, or substitute for writing the Solution.

  • Builds on: E.6, E.7

  • Constrained by: Guard‑Rails E.5.1E.5.4 (lexical firewall, notation independence, etc.)

  • Coordinates with: E.21 when one authored FPF pattern version is evaluated as a scoped pattern-quality claim. E.8 governs authoring shape, recognition text, action guidance, worked cases, SoTA grounding, and conformance material; E.21 governs the pattern-quality evaluation, required coordinate values, PatternQualityStatus, and stop condition. Do not import E.21 as a mandatory authoring section or full review card.

  • Coordinates with: E.23 when an authored FPF pattern body is being improved through repeated passes. E.8 still governs the authored pattern body; E.23 governs the repeated quality-improvement method; the object-under-improvement evaluation such as E.21 or E.9.DA supplies value meanings and stop meanings.

  • Constrains: All patterns; the DRR template references the same section order.

E.8:End

Evaluation CharacteristicSpace FPF Pattern Publication Form

Type: Authoring method pattern Status: Stable Normativity: Normative

Problem frame

Use E.8.ECSPF when an evaluation CharacteristicSpace constructed or repaired under A.19.ECS must be published as an FPF pattern. The question is not "what values should this evaluated object be judged by?" but "how do we write the FPF pattern publication form so those values remain usable, reviewable, and bounded?"

A.19.ECS governs the evaluation characteristic-space specification: evaluated object kind, use scope, contrast cases, coordinate set, value meanings, evidence basis, result-row shape, calibration points, coordinate-specific payloads, missingness, protected trade-offs, status meanings, and stop or reopen conditions. E.8 governs ordinary FPF authoring form. E.8.ECSPF governs their intersection: an FPF pattern whose main payload is a reusable evaluation.

Not this pattern when. Use A.19.ECS when the characteristic-space specification itself is missing or inadequate. Use E.8 when the pattern is not an evaluation-characteristic-space pattern. Use E.21, E.9.DA, E.2.DA, F.18, C.25, or a project-local evaluation when one already supplies the value meanings for the evaluated object and use. Use E.22 to frame one quality evaluation and E.23 to run repeated improvement. Use a local rubric, table, or project rule instead of an FPF pattern when the evaluation is not intended for durable FPF reuse.

First useful move. Start from the accepted A.19.ECS specification. Name the evaluated object kind, declared use, and first action-guiding evaluation use in the pattern's recognition text before presenting coordinate tables or conformance rows.

FPF-publication boundary. If the evaluation is local, temporary, or project-specific, do not publish an FPF pattern. Keep the A.19.ECS specification in the local publication form and cite the FPF neighbouring patterns named by value it uses.

What goes wrong if missed. An evaluation-characteristic-space pattern becomes a score sheet, review form, checklist, or taxonomy. The coordinate table appears before the working situation. Readers can see values but cannot tell when to use them, what to do after an evaluation result, which objects are outside the declared evaluated-object kind, or which neighbouring pattern governs evidence, assurance, gate, work, decision, naming, measurement, or improvement-loop claims.

What this buys. E.8.ECSPF lets FPF publish evaluations as real patterns: practitioner-readable first, exact enough for review, and bounded enough that E.22 and E.23 can consume them without stealing their values.

Primary EntityOfConcern in plain terms. The primary EntityOfConcern is the authored FPF pattern publication form for one evaluation CharacteristicSpace.

Primary working reader. The first reader is an FPF author or reviewer turning an accepted evaluation characteristic-space specification into a reusable FPF pattern for later practitioners, managers, and stewards.

Problem

A.19.ECS can produce a good evaluation characteristic-space specification without saying how to publish that specification as an FPF pattern. E.8 can produce a good generic FPF pattern without saying how a coordinate set, object-kind-fit rule, evidence basis, result-row shape, calibration points, status set, and stop condition should be placed when they are the pattern's main payload.

Recurring failures:

  1. Publication-form/content collapse. The FPF pattern is treated as the evaluation itself, instead of a publication form for an evaluation characteristic-space specification.
  2. Table-first pattern. Coordinate rows arrive before evaluated object kind, use, first move, FPF-publication boundary, and object-kind boundary.
  3. Checklist substitution. Conformance rows replace the Solution instead of checking a readable evaluation method.
  4. Underpublished values. Coordinate names are present, but value meanings, missingness, polarity, protected trade-offs, status meanings, or stop conditions are missing.
  5. Wrong-kind examples. Worked cases show only passing examples, so the pattern cannot teach below-floor and outside-declared-object-kind boundary outcomes.
  6. Neighbour theft. Evidence, assurance, gate, work, decision, naming, measurement, OEE/NQD, or mathematical-lens claims are carried as if the evaluation-characteristic-space pattern governed them.
  7. Pattern-quality confusion. The author uses E.21 to judge whether the FPF pattern version is good, but forgets that the new pattern must still publish the evaluation for one evaluated object kind by value.
  8. Quality-carrier leakage. E.21 values, corpus projection, README/ToC/E.11/I.2 alignment, retrieval, cold-reader evidence, monolith parity, landing evidence, or developer/reviewer/executor correspondence for the publication form is written into the evaluation pattern as if it were the evaluated object's method.

Forces

ForceTension
Recognition first vs coordinate completenessAn evaluation-characteristic-space pattern needs tables, but the reader must first see the working situation and first evaluation use.
Generic E.8 form vs ECS payloadThe canonical pattern skeleton stays fixed, but the payload has special fields from A.19.ECS.
Reusable FPF pattern vs local evaluationFPF publication is useful only when the evaluation is durable and reusable beyond one local project.
Values named by value vs checklist feelValues and statuses must be named by value without making the pattern feel like an administrative form.
Related-pattern statements vs second ontologyThe pattern must keep outside claims with governing patterns for those claims without becoming a directory of every related pattern.
Evaluation of object vs evaluation of FPF pattern versionThe evaluation judges its evaluated object; E.21 may separately evaluate whether the authored FPF pattern publication form is good enough.

Solution

When an A.19.ECS specification is selected for durable FPF publication, author the evaluation as an E.8 pattern with these additional placement rules:

  1. Keep the evaluation characteristic-space specification separate from the publication form. The pattern publishes an evaluation CharacteristicSpace; it is not itself the evaluated object, the evaluation result, the improvement loop, or the evidence record.
  2. Put recognition before coordinates. The opening text names evaluated object kind, declared use, first evaluation use, FPF-publication boundary, what goes wrong, and what the pattern buys before any dense table.
  3. Place the A.19.ECS specification by value. The Solution carries the record shape, local names, object-kind-fit rule, coordinate set, value meanings, evidence-basis rule, result-row shape, adjacent-value rationale rule, calibration points, coordinate-specific evidence payloads, missingness rule, protected trade-offs, status meanings, and stop or reopen condition.
  4. Use worked slices as the discriminating-case test. Archetypal Grounding and worked cases include a passing evaluated object, a below-floor evaluated object, and an outside-declared-object-kind boundary case.
  5. Keep checklist rows secondary. Conformance checks verify that the evaluation is recoverable and usable. They do not become the user's method.
  6. Keep outside claims with governing patterns. Relations and compact non-use boundaries name the governing pattern for evidence, assurance, gate, work, decision, naming, measurement, OEE/NQD, mathematical lens, E.22 quality-evaluation, and improvement-loop claims. They do so declaratively and do not replace the evaluation publication form with reference boilerplate, phrase apparatus, or architecture-placement rationale. If phrase-level apparatus appears, apply F.19; if remaining words still hide precision, apply E.10, E.10.ARCH, F.18, or the governing pattern. If a wording repair changes an FPF-governed phrase in the evaluation specification or publication form, the pre-repair and post-repair evaluated object kind, relation or claim kind, slot or use-position when live, admissible use, and scope must remain recoverable; lexical substitution without that check and governing-pattern reference when another pattern governs the kind under repair, relation, claim, or position is not a repair.
  7. Evaluate the publication form with E.21. When the FPF pattern publication form is under quality improvement, E.21 evaluates the FPF pattern version's quality. The evaluation coordinates inside the pattern continue to judge the evaluated object declared by that evaluation. The E.21 result, corpus-projection evidence, README/ToC/E.11/I.2 alignment, retrieval or cold-reader evidence, monolith parity, landing evidence, and developer/reviewer/executor correspondence stay in the quality, review, projection, or release carriers unless the publication form's own EntityOfConcern and user move are that evaluation/projection work.

The authoring flow and the quality-improvement flow are different flows. This pattern publishes an evaluation for its declared evaluated object kind. A later E.21 evaluation of this pattern is evidence about the publication form as an FPF pattern, not part of the evaluation that the pattern publishes. That evidence may cause edits to recognition text, coordinates, cases, or boundaries, but it remains outside the pattern unless rewritten as user-facing evaluation guidance.

Canonical placement table

E.8 sectionECS-specific payload
Problem frameEvaluated object kind, declared use, first useful evaluation use, FPF-publication boundary, what goes wrong without this evaluation, and what practical move the evaluation enables.
ProblemFailure modes that the evaluation prevents: wrong-kind scoring, hidden value drift, proxy value, one-score collapse, missingness confusion, or neighbour theft.
ForcesTensions among reuse, coordinate count, readability, measurement legality, trade-off protection, local stop, and open-ended improvement.
SolutionA.19.ECS record shape, local names, object-kind-fit rule, coordinate set, value meanings, evidence basis, result-row shape, adjacent-value rationale rule, calibration points, coordinate-specific evidence payloads, evidence and missingness rules, protected trade-offs, status meanings, stop and reopen conditions.
Archetypal GroundingAt least one passing evaluated object, one below-floor evaluated object, and one outside-declared-object-kind boundary case.
Bias-AnnotationKnown skew in source examples, reader family, domain tradition, measurement preference, benchmark preference, or FPF-internal reuse.
Conformance ChecklistChecks that the specification is recoverable, not that a reviewer likes the evaluated object.
Common Anti-PatternsScore-sheet pattern, checklist-as-solution, table-first recognition failure, neighbour theft, one total score, hidden value drift.
ConsequencesWhat a conforming evaluation use permits, what it does not permit, and which neighbours govern claims that exceed the evaluation.
RationaleWhy this coordinate set and publication-form are selected, including relation to A.19.ECS and existing evaluations named by value.
SoTA-EchoingCurrent practice that changes evaluated-object selection, coordinate choice, value meaning, missingness, comparison, or stop discipline.
RelationsA.19.ECS, E.8, E.21, E.22, E.23, and exact domain or neighbour patterns.

Local names and kind settlement

Local nameRoleNon-use boundary
EvaluationCharacteristicSpaceFPFPatternPublicationFormThe authored FPF pattern body that publishes one evaluation CharacteristicSpace.Not the evaluated object being evaluated, evaluation result, improvement loop, evidence record, or release approval.
ECSPayloadThe by-value A.19.ECS specification inside the pattern.Not an arbitrary table or checklist.
RecognitionEvaluationUseLineEarly line saying what object is evaluated, for which use, and what the first admissible evaluation use does.Not a slogan or pattern-title paraphrase.
DiscriminatingCaseBankPassing, below-floor, and outside-declared-object-kind boundary worked slices.Not only positive examples.
RelatedPatternRelationBlockDeclarative governing-pattern statements named by value for claims outside the evaluation.Not a general directory of possibly related patterns.
EvaluationResultFormBlockPublished result-form discipline for this evaluation: required row fields, evidence basis, short rationale rule, and any coordinate-specific payload.Not a review report, project status, or optional appendix.
CalibrationAndPayloadBlockPublished adjacent-value calibration points and payload rules for values that need comparator, source-currentness, corpus-projection, worked-case, or retrieval evidence.Not extra bureaucracy and not a second score system.
PatternVersionQualityEvaluationOptional E.21 evaluation over the authored pattern publication form.Not a replacement for the evaluation for one evaluated object kind and not publication-form method content.

Archetypal Grounding

Tell. An evaluation CharacteristicSpace becomes reusable in FPF only when a practitioner can recognize the evaluated object and use before reading the coordinate table. The publication form must teach the evaluation use, not merely list the values.

Show, pattern-quality evaluation. E.21 is an evaluation for one FPF pattern version. Its publication form must still open with the working question "is this pattern good enough for the declared use?" before showing coordinates such as first-move recoverability, boundary fit, and SoTA binding.

Show, local rubric that should not become an FPF pattern. A project team defines a temporary rubric for choosing a meeting room. The A.19.ECS specification may be adequate locally, but no durable FPF pattern is needed because the evaluated object kind and use do not recur across FPF practice.

Show, object-kind boundary. A nuclear-plant evaluation can judge nuclear plants and declared comparable power-generation alternatives. A chair or FPF pattern is outside that evaluated-object kind: before the evaluation is opened, select a suitable evaluation; after a forced invocation, record an object-kind-fit defect/value rather than treating it as a weak nuclear plant or skipping declared coordinates. The pattern publication form must show that boundary before readers try to use the coordinate table.

Bias-Annotation

Evaluation-characteristic-space patterns are vulnerable to domain-example bias: the first examples can silently choose the evaluated object kind, use, and value family for later readers. A conforming publication form names known skew in examples, sources, reader family, domain tradition, measurement preference, benchmark preference, or FPF-internal reuse. When the evaluation claims broad use, the case bank must include heterogeneous evaluated object situations or explicitly narrow the claim.

Conformance Checklist

CheckRequirementWhy
CC-E8ECSPF-1The pattern publication form SHALL name the A.19.ECS evaluation characteristic-space specification or carry its evaluated object kind, use, object-kind-fit rule, coordinate set, value meanings, evidence basis, result-row shape, calibration points, coordinate-specific payloads, missingness, trade-offs, status, and stop condition by value.Prevents publication-form/content collapse.
CC-E8ECSPF-2Recognition text SHALL state evaluated object kind, declared use, first evaluation use, FPF-publication boundary, and object-kind boundary before dense coordinate tables.Keeps the pattern usable before it becomes reviewable.
CC-E8ECSPF-3The Solution SHALL carry the ECS payload rather than leaving it only in conformance rows, SoTA rows, or examples.Prevents checklist substitution.
CC-E8ECSPF-4Worked cases SHALL include passing, below-floor, and outside-declared-object-kind boundary outcomes.Tests evaluated-object-kind discrimination.
CC-E8ECSPF-5Each coordinate SHALL state value meanings, polarity or no-simple-direction value rule, missingness rule, and protected trade-off when applicable to the declared evaluation use.Makes evaluation uses repeatable and bounded.
CC-E8ECSPF-6Relations SHALL name governing patterns for evidence, assurance, gate, work, decision, naming, measurement, OEE/NQD, mathematical-lens, E.22 quality-evaluation, and improvement-loop claims when the publication form makes those claims. They SHALL keep pattern application and relation kind explicit, keep simple relations free of phrase apparatus, and keep ordinary references or architecture-placement reasoning out of publication-form evaluation prose.Prevents a second ontology or apparatus-overwrapped publication form.
CC-E8ECSPF-6aWording, naming, or precision-restoration repairs in an evaluation-characteristic-space pattern SHALL include a kind-restoration check for the evaluated object, relation or claim kind, slot or use-position when live, admissible use, and scope before and after the repair, plus the governing pattern when another pattern governs the kind under repair, relation, claim, or position.Prevents evaluation patterns from inheriting lexical cleanup as ontology drift.
CC-E8ECSPF-7If the authored publication form is under improvement, E.21 SHALL evaluate FPF pattern-version quality separately from the evaluation's evaluated object result.Keeps pattern quality distinct from evaluated object quality.
CC-E8ECSPF-8The pattern SHALL not publish a local, temporary, or one-project evaluation as FPF unless reuse scope and governing patterns for outside claims justify FPF publication.Blocks needless pattern growth.
CC-E8ECSPF-9The publication form SHALL state what would lower, reopen, or retire the published evaluation: changed object kind, changed use, changed use of a cited source, changed source adoption/adaptation/rejection decision, missing contrast case, coordinate-value drift, missingness-rule change, or corrected governing pattern for an outside claim.Makes maintenance of the evaluation pattern testable.
CC-E8ECSPF-10The publication form SHALL state the required result row shape and evidence basis. If values need external, comparator, projection, worked-case, or currentness evidence, the result form SHALL require that evidence by value or lower the coordinate.Prevents a published evaluation from accepting prose impressions or two-column value lists as results.
CC-E8ECSPF-11Reusable evaluation patterns SHALL publish calibration points for common adjacent-value disagreements and any coordinate-specific evidence payload needed to reach floor or exceptional values.Makes the same evaluation usable by more than one evaluator.
CC-E8ECSPF-12The publication form SHALL keep E.21 values, PatternQualityStatus, corpus-projection evidence, README/ToC/E.11/I.2 alignment, card/retrieval evidence, cold-reader evidence, monolith parity, landing evidence, developer/reviewer/executor correspondence, and other quality-carrier facts out of the pattern. These facts belong in the E.21 result, E.19 run record, README/ToC/E.11/I.2, card/retrieval/projection carrier, or release/landing evidence carrier unless the role test shows that the publication form's own EntityOfConcern and user move are that evaluation/projection work.Prevents quality of the publication form from replacing the evaluation published by the pattern.

Common Anti-Patterns and How to Avoid Them

Anti-patternSymptomRepair
Score-sheet pattern.The pattern is mostly a table of values.Move evaluated object kind, use, first evaluation use, FPF-publication boundary, and practical consequence into recognition text before the table.
Checklist-as-solution.Users are told only what must be checked.Put the actual evaluation method and record shape in Solution; let checklist rows verify it.
Publication-form/content collapse.The FPF pattern is treated as the evaluated object being evaluated or evaluation result.State that the pattern is a publication form for the CharacteristicSpace; the evaluated object and evaluation result are separate.
Positive-only case bank.Every example passes.Add below-floor and outside-declared-object-kind boundary cases.
Related-pattern authority theft.The pattern claims evidence, assurance, gate, release, measurement, naming, or improvement authority.Keep each claim with the pattern that governs it and keep only the evaluation claim here.
Rubric promotion.A local rubric becomes an FPF pattern because it was useful once.Keep it local unless durable FPF reuse, evaluated object scope, and governing patterns for outside claims are declared.
Frozen evaluation publication form.The evaluated EntityOfConcern kind, use, use of a cited source, source adoption/adaptation/rejection decision, or coordinate meanings change, but the pattern keeps the old values as if still current.Reopen A.19.ECS for the evaluation EntityOfConcern and state whether earlier evaluation results remain comparable, need a bridge, or must be retired.
Report-shaped evaluation pattern.The pattern publishes coordinate names but leaves the returned result as a narrative, score list, or two-column table.Add a result-form block: coordinate, value, short rationale, evidence basis, and coordinate-specific payload where needed.
Pattern-quality report as evaluation pattern.E.21 status, all-4/all-5 posture, corpus projection, retrieval evidence, README/ToC/E.11/I.2 alignment, monolith parity, landing readiness, or role-turn correspondence appears anywhere in the pattern as if it were the evaluation method.Move that evidence to the quality/review/projection/release carrier and keep the pattern body focused on the evaluation for the declared evaluated object kind.
Apparatus-overwrapped publication form.The evaluation relation is written through role, carrier, locus, flow, status, or package words that add no evaluated object kind, coordinate meaning, evidence rule, user move, or flow-role distinction.Apply F.19; if remaining content still hides a word/head/use, apply E.10, E.10.ARCH, F.18, or the governing pattern.

Consequences

A conforming E.8.ECSPF publication form makes an evaluation findable, teachable, and reusable inside FPF. It lets E.22 frame quality evaluations and E.23 run improvement loops without re-inventing values. It also makes the cost visible: a reusable evaluation-characteristic-space pattern must publish more than a local rubric, because it must prevent wrong-kind use, hidden value drift, neighbour theft, and proxy-for-value substitution.

The pattern publication form does not certify the evaluated object, approve a release, prove evidence, or finish improvement. It only publishes a bounded evaluation.

Rationale

The split between A.19.ECS and E.8.ECSPF preserves the FPF distinction between an evaluation characteristic-space specification and its publication form. A.19.ECS says what must exist for an evaluation to be adequate. E.8.ECSPF says how that adequate evaluation is authored as an FPF pattern when FPF publication is selected. This prevents two symmetric mistakes: stuffing FPF pattern-format requirements into a general characteristic-space construction method, and publishing an evaluation-characteristic-space pattern whose coordinate set is not recoverable by value.

SoTA-Echoing

Source-use convention. This section uses source rows only where they change the publication form: evaluated object and use before checklist, coordinate meanings and missingness, worked cases, non-scalar comparison, protected trade-offs, or action-guiding recognition text. Reporting frameworks and standards are reference-only use unless they solve the publication-form problem named by value.

ClaimCurrent practice lineUse of source and representative sourcesAdoption in E.8.ECSPFBoundary
Evaluation rubrics are useful only when criteria, value meanings, and use context are explicit.Current reporting practice makes evaluation cards, scenario descriptions, metric meanings, raw-result visibility, intended use, and performance-characteristic reporting explicit.Current-practice and reference use. BenchmarkCards and EvalCards are current evaluation-card reporting sources; HELM, VHELM, and AHELM are current suite-reporting sources for scenarios, metrics, inference settings, prompts, raw outputs, and comparable reporting; model cards are retained lineage for intended-use and performance-characteristic reporting.The publication form must publish evaluated object kind, use, coordinate meanings, missingness, and worked cases before checklist closure.E.8.ECSPF is not a benchmark harness, model-card schema, automated evaluator, or reporting standard.
Multicriteria evaluation needs non-scalar comparison and trade-off visibility.Current QD and multicriteria practice keeps dimensions, dominance, trade-offs, objective heads, and diversity or descriptor choices visible when one total score would hide important loss.Current-best source use for QD overview in this narrow use, plus retained lineage. A survey on Quality-Diversity optimization: Approaches, applications, and challenges, Swarm and Evolutionary Computation 100:102240 (2026), supplies the current QD overview used here. MCDA and older QD practice are retained lineage for dimensions, dominance, and trade-offs.The publication form keeps coordinate values, protected trade-offs, and status meanings distinct.Scalarization belongs only to an neighboring pattern governing the claim or explicitly declared local method.
Pattern publication must remain action-guiding.Pattern-language practice treats a pattern as reusable action guidance for recurring situations, not as a static rubric table.Lineage and current FPF reference use. Pattern-language practice is retained as lineage and problem pressure; current FPF E.8 supplies the governing publication-form rules for recognition text, first useful move, worked cases, and relations.The publication form keeps recognition text and first evaluation use before coordinate tables.E.8.ECSPF does not replace E.8; it specializes it for evaluation-characteristic-space patterns.

Relations

PatternRelation
E.8Governs the canonical FPF authoring form. E.8.ECSPF specializes that form for evaluation CharacteristicSpace pattern publication forms.
A.19.ECSConstructs or repairs the evaluation CharacteristicSpace. E.8.ECSPF authors the FPF pattern publication form for the selected specification when FPF reuse is selected.
A.19, A.17, A.18, C.16Govern CharacteristicSpace, characteristic, scale, coordinate, and measurement legality.
E.21Evaluates quality of the authored FPF pattern publication form. It does not replace the evaluation for one evaluated object kind.
E.22Frames one quality evaluation using the evaluation published by the publication form.
E.23Runs repeated improvement using the evaluation published by the publication form.
E.9.DA, E.2.DA, F.18, C.25Existing or candidate evaluations that may use this authoring specialization when their publication-form is being written or refreshed.
A.10, B.3, A.20, A.21, A.15Govern evidence, assurance, gate, decision, and work claims when an evaluation result is reused for those purposes.
C.18, C.19, G.5, G.9, G.11Govern OEE/NQD archive, novelty, diversity, pool, selected-set, parity, and refresh claims.
C.29Governs mathematical-lens use when a mathematical structure defines or justifies coordinate choice.

E.8.ECSPF:End

Design‑Rationale Record (DRR) Method

Type: Governance and authoring pattern Status: Stable Normativity: Normative

Use this when

  • one proposed normative change needs an explicit by-value account of what FPF should say, why this decision is preferred, and which neighboring patterns or selected non-pattern FPF kind-reference pairs it affects
  • several patterns or selected non-pattern FPF kind-reference pairs must move together and one external decision record is needed to keep one bounded coordinated change set (one mutually dependent change set) semantically complete while enduring Core text is redistributed
  • one bounded content decision question would otherwise force authors to decide the same load-bearing answer separately across several patterns or selected non-pattern FPF kind-reference pairs
  • one deprecation, narrowing, or cross-pattern amendment must stay reviewable without reconstructing intent from patch history, chat memory, or scattered notes

Not this pattern when. Do not use E.9 as the permanent location of normative Core law, as a campaign or process brief, or as the main vehicle for purely editorial Delta-0 or Delta-1 cleanup that fits the lightweight variant in CC-DRR.5. Use E.9.DA when one concrete DRR already exists and the question is whether its selected answer, selected-locus obligations, source use, lexical closure, and drafting actionability are adequate for a declared downstream authoring use.

What goes wrong if missed

  • Core text changes without one explicit rationale account, so later readers cannot recover which alternatives were rejected or which exclusions were intentional
  • coordinated multi-pattern amendments drift apart because the temporary selected-answer account survives only in patches, handoffs, or reviewer memory
  • future repairs overfit to local wording and silently lose Pillar, taxonomy-lens, impact-graph, practical-use, or pattern-placement discipline

What this buys

  • one external decision record that states the bounded FPF change by value before Core text is rewritten
  • one minimum kernel that keeps Problem frame, Decision, Rationale, and Consequences recoverable for later review and replay
  • one temporary convergence record for coordinated changes, while keeping enduring Core text in the selected patterns and selected non-pattern FPF kind-reference pairs rather than in the DRR
  • one temporary convergence record that fixes the selected answer (the chosen content answer for the bounded content decision question) before later drafting fans out across several selected patterns or selected non-pattern FPF kind-reference pairs

First useful move. State the bounded FPF content decision question, the selected answer, the rationale for that answer, and the selected distribution across patterns or selected non-pattern FPF kind-reference pairs before drafting or landing the Core text.

Cheap stop. If the change is ordinary local wording repair, application of an already accepted pattern, or editorial cleanup that does not change FPF semantics, obligations, boundaries, names, admissible uses, or normative force, do not open a full DRR. Use the lighter governing pattern for the local repair: E.17.AUD.LHR for one overloaded local lexical head inside one publication unit, C.2.P for one episteme, publication, or source-use phrase requiring local epistemic precision restoration, E.10 for general lexical repair, F.18 only when a durable reusable name is being minted, and E.8 for authoring-form correction. Leave E.9 for bounded content decisions that need rationale by value.

Kind-or-boilerplate diagnostic. When a DRR proposes wording for selected patterns, apply F.19 to separate boilerplate apparatus from remaining content before any wording is treated as pasteable pattern prose. If the remaining content still hides wording-use, naming, relation, claim, admissible-use, selected-locus, user-move, or flow-role precision, the DRR names the applied E.10, E.10.ARCH, F.18, or governing pattern. Process, architecture, review, or reference apparatus belongs in its own carrier, not in pasteable pattern prose.

A DRR-proposed wording repair is not pasteable pattern prose until it carries a kind-restoration check. The DRR must show the pre-repair and post-repair object kind, relation or claim kind, slot or use-position, admissible use, and scope, or explicitly decide that the change is a semantic change rather than an editorial repair. A nicer head word, shorter phrase, or removed trigger word is not decision evidence when it narrows a graph into a sequence, turns a method into work, widens an evidence record into assurance, treats a use-position as a new kind, or otherwise changes the kind or use-position without an accepted decision. When the decision depends on slot, lens, role, method, work, evidence, assurance, gate, or decision ontology, the DRR cites the governing pattern rather than redefining that ontology locally.

Primary EntityOfConcern in plain terms. The primary EntityOfConcern here is one external decision-rationale record for one bounded FPF content decision or one bounded coordinated change set. The minimal lens is simple: the record must keep the problem frame, decision, rationale, consequences, and impact and boundary account recoverable enough that accepted content can be distributed into the selected Core patterns and selected non-pattern FPF kind-reference pairs without semantic invention.

Primary working reader. The first working reader is an FPF author, reviewer, or steward who must evaluate, challenge, or land one bounded content decision. Downstream pattern readers benefit from the landed Core text; they are not the primary reader of the DRR itself.

Problem frame

FPF is engineered for Pillar P‑10 Open‑Ended Evolution: its normative rules must adapt as new calculi and insights arrive. But change without a record of why leads to conceptual erosion and undermines auditability. Hence FPF requires an explicit Design‑Rationale Record (DRR)—a durable conceptual record that precedes every normative change.

Problem

Direct edits to the Core, absent a structured rationale, trigger three systemic hazards:

  1. Lost provenance – future authors cannot infer the reasoning behind a rule; intent decays.
  2. Implicit assumptions – discarded alternatives vanish from memory, so debates resurface and churn repeats.
  3. Conceptual drift – incremental tweaks slip past the Eleven Pillars and Principle Taxonomy lenses, blurring the framework’s foundations.

Forces

ForceTension
Agility vs RigourEvolve swiftly ↔ demonstrate deliberate, Pillar‑aligned decisions.
Transparency vs EfficiencyProvide a public argument trail ↔ avoid bureaucratic drag on minor edits.
Clarity vs ConcisenessCapture enough reasoning and coordinated implications ↔ prevent meta‑text from bloating the Core itself.

Solution — the DRR as a structured argument and temporary convergence record

Any proposal to add, modify or deprecate a NORM, A, D, or GOV rule MUST be accompanied by a Design‑Rationale Record. By default, a conforming DRR contains at least four conceptual components (below); these form the minimum decision kernel recoverable by any conforming DRR. A lightweight editorial variant is permitted by CC‑DRR.5.

In this pattern, a bounded coordinated change set means one bounded group of mutually dependent content decisions whose enduring FPF expression will be distributed across several patterns or selected non-pattern FPF kind-reference pairs. In this pattern, the selected answer means the current set of chosen content decisions for that bounded content decision question: what FPF should say, which selected patterns or selected non-pattern FPF kind-reference pairs carry it, what stays outside, and which source-use row, evidence path, validation evidence obligation, or loss/recoverability regime applies. In this pattern, selected non-pattern FPF kind-reference pair is a tuple-like instruction, not one new kind: when a DRR selects a non-pattern publication, view, record, or relation to carry durable content, it must name the FPF kind named by value and reference by value, for example pattern profile, U.View, source map, source-use note, authoritySourceRef target, evidence-path record, review-finding record, or architecture-decision record. In this pattern, a temporary convergence record means one external decision record that temporarily holds the selected answer while the selected Core patterns and selected non-pattern FPF kind-reference pairs are still being updated.

A nontrivial DRR may therefore govern one bounded coordinated change set. In that case the DRR is the temporary convergence record for the selected answer until selected Core patterns and selected non-pattern FPF kind-reference pairs are updated; it is not a second permanent Core-law section.

Minimum-kernel componentGuiding questionTypical content
Problem frameWhy are we talking about this?Problem statement, triggering insight, intended FPF use-value, scenario grounding, or external change.
DecisionWhat will we do?Precise normative text, selected content distribution, explicit outside-current-decision disposition, or other substantive change law to enter the specification.
RationaleWhy is this the right thing?Comparison of alternatives, Pillar check, taxonomy-lens balance, architecture/usability/SoTA grounds.
ConsequencesWhat follows from this choice?Expected benefits, trade-offs, impacted patterns and selected non-pattern FPF kind-reference pairs, practical gains/costs, and remaining validation evidence obligation.

Minimum decision-inspection content blocks

A conforming DRR must also make the following decision-inspection content blocks recoverable. They may appear inside the four kernel components or inside one dedicated Decision grounds used or decision-inspection block, but they are part of substantive DRR adequacy rather than later review-only hardening.

Decision-inspection content blockWhat must be recoverable by valueUsual location in the DRR
Exact decision grounds and governing inheritanceExact source documents, accepted architecture records, accepted audit records, and inherited decisions that materially govern the decision, plus any remaining uncertainty not already closed by those grounds.Header or Decision grounds used, with the Problem frame or Rationale carrying the decision-relevant source use.
Purpose, utility, and scenario groundingIntended FPF use-value, first-minute working situation, minimum scenario/anti-case grounding, and compact utility/fitness reading.Problem frame.
Alternatives and current disposition mapMaterial alternatives plus one current disposition for each content decision question this DRR must settle: selected now, rejected now, inherited unchanged, or outside current decision with named pattern, selected non-pattern FPF kind-reference pair, or decision record. When the accepted decision grounds or the DRR itself already names one pattern or selected non-pattern FPF kind-reference pair as part of the distribution question, that named pattern or selected non-pattern FPF kind-reference pair is already part of the current disposition map and must not remain one conditional watch item.Decision and Rationale.
Content-distribution and outside-boundary mapFor each load-bearing selected answer: the positive content obligation each selected pattern or selected non-pattern FPF kind-reference pair must carry, the first subject-kind/action spine expected in drafting when a pattern is selected, which related patterns or selected non-pattern FPF kind-reference pairs stay unamended under the current decision, and any agreement across selected patterns and selected non-pattern FPF kind-reference pairs that those selected patterns and selected non-pattern FPF kind-reference pairs must preserve. Outside-boundary and non-obligation material is secondary distribution control; it must be normalized, compact, and not pasteable as copied negative doctrine or precision-restoration debt for the selected pattern Solution. Pattern applications are declarations about specific claims, relations, or boundaries. Repeated content families, ordinary reference apparatus, README/ToC/E.11/I.2 navigation, package-boundary rationale, split/defer rationale, architecture placement reasoning, and phrase apparatus around simple claims stay in DRR, architecture documents, handoff, relation rows, README, ToC, E.11, I.2, or one compact local locus instead of the Solution. When proposed wording still needs precision restoration, the DRR names the selected restoration or governing pattern: E.10, E.10.ARCH, F.18, F.19, or another governing pattern. Named related patterns or selected non-pattern FPF kind-reference pairs must be classified now, not left as tentative most likely / may need / if later touched watch prose.Decision.
Existing-pattern sufficiency and new-pattern necessityFor each load-bearing selected answer, whether one already-existing pattern is sufficient, one already-existing selected non-pattern FPF kind-reference pair is sufficient, or one newly selected pattern or selected non-pattern FPF kind-reference pair is necessary, and why rejected options would misplace, overload, or falsely split the pattern or selected non-pattern FPF kind-reference pair that governs the selected answer.Decision and Rationale.
Naming, ontology, and wrong-carrier-confusion accountHead/branch/object/move/outside-work separation, tempting wrong-pattern assignment or wrong non-pattern FPF kind-reference assignment, and any load-bearing F.18 naming obligation needed to keep the selected answer truthful by value.Problem frame, Decision, and Rationale.
Reusable content-disposition when triggeredWhether a potentially reusable selected non-pattern FPF kind-reference pair remains local, is generalized now, is rejected, or is placed outside the current decision with named pattern, selected non-pattern FPF kind-reference pair, or decision record.Decision and Rationale.
Loss and recoverability template when source-loss or scope narrowing is declaredPreserved distinctions, dropped distinctions, admissible use, non-admissible downstream use, recoverability class, and reopen/stop rule.Decision and Consequences.
Selected locus and related-pattern boundary accountWhy the selected patterns and selected non-pattern FPF kind-reference pairs carry the content, which tempting patterns or selected non-pattern FPF kind-reference pairs stay outside, and which governing patterns govern specific outside claims, relations, or boundaries.Decision and Rationale.
Convergence and overlap account when several content-decision branches touch the same carrier setWhether overlap is valid convergence or one reopened architecture smell, what agreement across selected patterns and selected non-pattern FPF kind-reference pairs must hold, and whether a new pattern or selected non-pattern FPF kind-reference pair is actually selected or refused now.Decision and Consequences.
Selected-answer stability boundaryWhich elements of the selected answer are fixed now for later FPF drafting, and which later elaborations may strengthen wording, examples, source-use rows, or validation evidence without reopening the selected answer.Decision and Consequences.
Impact, practical gains, and remaining validation evidence obligationAffected patterns and selected non-pattern FPF kind-reference pairs, practical gains/costs, authority or release consequences when they follow from the content decision, and the remaining validation evidence obligation that still constrains later authoring or landing.Consequences.
SoTA and competitive-positioning account when load-bearingCurrent best-known problem-solving source lines under E.8 that discipline the decision, what problem-owning domain or practice they answer to, which official/popular/legacy alternatives they reject or bound when relevant, and what unresolved uncertainty would materially change the selected answer.Problem frame, Rationale, and Consequences.

These decision-inspection content blocks are not separate process paperwork. A DRR that keeps only the four labels while leaving decision grounds, first-minute use question, naming, selected content distribution, pattern or selected non-pattern FPF kind-reference pair sufficiency or necessity, overlap handling, impact, or unresolved uncertainty implicit is structurally labeled but still substantively immature.

Together these decision-inspection content blocks let the DRR act as one decision record for one bounded coordinated change set: enough semantic closure that later drafting distributes the selected answer into selected patterns and selected non-pattern FPF kind-reference pairs rather than inventing it for the first time pattern by pattern.

When one bounded decision coordinates several patterns or selected non-pattern FPF kind-reference pairs, or one cluster of mutually dependent pattern edits and selected non-pattern FPF kind-reference pair edits, the DRR MAY carry additional substantive sections beyond that minimum kernel. Typical substantive additions include obligations on selected patterns and selected non-pattern FPF kind-reference pairs, one explicit new-pattern vs existing-pattern decision, one impact or non-goal map across selected patterns and selected non-pattern FPF kind-reference pairs, coverage or agreement maps across selected patterns and selected non-pattern FPF kind-reference pairs, convergence classification, and one provisional decision-law account by value that keeps the bounded change account semantically complete until enduring Core text is distributed.

Such additions do not change the DRR’s kind. A DRR carrying them remains conforming only when it stays about the FPF content decision: what FPF should say, why, what is excluded, how selected patterns and selected non-pattern FPF kind-reference pairs are affected, and what practical use or authoring action improves. A DRR carrying richer convergence content MUST NOT become a campaign plan, process script, baton carrier, packet checklist, staging log, or other development-process brief.

When one selected answer could plausibly fit one already-existing pattern or selected non-pattern FPF kind-reference pair or require one newly proposed pattern or selected non-pattern FPF kind-reference pair, the DRR must decide that sufficiency/necessity question by value. It is not enough to list a tentative carrier list or leave downstream drafting to discover the selected pattern or selected non-pattern FPF kind-reference pair later.

When the accepted decision grounds or the DRR itself already names one pattern or selected non-pattern FPF kind-reference pair as part of the distribution question, that pattern or selected non-pattern FPF kind-reference pair is not a neutral future watch item. The DRR must classify it now either as one selected pattern or selected non-pattern FPF kind-reference pair with explicit obligation, one explicit boundary neighbor kept unchanged, one inherited-unchanged neighbor, or one outside-current-decision item with named pattern, selected non-pattern FPF kind-reference pair, or decision record. Conditional or time-relative pattern prose or prose for one selected non-pattern FPF kind-reference pair such as most likely, may need local hardening, if later touched, watch later, or one equivalent placeholder is non-conforming there because it marks one unmade current decision rather than one explicit current disposition.

When accepted decision grounds expose one potentially reusable selected non-pattern FPF kind-reference pair or neighboring source-use, evidence, assurance, validation, or architecture-decision mechanism, the DRR must not merely note that such content already exists. It must decide whether that content is generalized now, kept local with a substantive reason, rejected, or marked outside the current decision with a named pattern, selected non-pattern FPF kind-reference pair, or decision record.

When one selected answer involves source-loss mode, simplification, redaction, summarization, or other declared loss, the DRR must make the admissible-use template explicit by value. Explanation alone is not enough; the decision must say what remains preserved, what is dropped, which branch reading is admissible and which selected non-pattern FPF kind-reference pair carries it, which uses lack an admissible carrier or evidence path, what recoverability class applies, and what reopen or stop rule governs cases that exceed the declared source-loss or scope-narrowing state.

A nontrivial DRR is mature enough for downstream authoring only when material selected-answer branch choices about the EntityOfConcern, selected patterns and selected non-pattern FPF kind-reference pairs, outside-current-decision boundary, reusable-content disposition, and loss/recoverability regime have already been selected, rejected, inherited unchanged, or placed outside the current decision with a named pattern, selected non-pattern FPF kind-reference pair, or decision record. If those choices are still missing, the DRR is still decision-grounding work rather than one accepted design-rationale record.

The DRR lives outside the normative Core. An accepted DRR SHALL be landed by applying its Decision account and any stabilized enduring content to the relevant pattern or selected non-pattern Core kind-reference pair as explicit normative or informative text (the change is "in the Core"; the DRR is not). A richer DRR MAY remain the temporary convergence record while redistribution into selected Core patterns and selected non-pattern FPF kind-reference pairs is still incomplete, but it SHALL NOT remain the permanent sole semantic carrier once landed Core text exists.

Authors drafting from an accepted DRR MAY elaborate examples, SoTA‑Echoing, recognition sections, local wording inside the selected patterns and selected non-pattern FPF kind-reference pairs, and neighboring fit. They SHALL NOT silently revise the selected answer, selected patterns and selected non-pattern FPF kind-reference pairs, outside-current-decision boundary, reusable-content disposition, or declared loss/recoverability regime. Any such revision SHALL be handled through one successor DRR or other named successor decision record.

A DRR may itself be improved through E.23, but the DRR remains the selected decision record, not a full pattern draft. When SoTA is load-bearing in that improvement, it must mutate the selected answer, selected-locus obligation, boundary, example, validation obligation, or reopen condition; otherwise it is rationale-only or lineage-only for the DRR.

To preserve P‑2 Didactic Primacy without duplicating meta‑text, authors landing an accepted DRR SHOULD distill stable and reusable parts of its Rationale, Consequences, and other valid convergence sections into the appropriate informative sections of the affected pattern(s) (Rationale, Consequences, SoTA‑Echoing, Archetypal Grounding; per the Pattern Template, E.8). The full DRR remains external as provenance.

A substantive DRR is one current content decision object. It may carry selected content obligations only when they are part of the Decision or Consequences. It MUST NOT carry next-gate state, handoff/packet state, process-order state, monolith status, future campaign planning, or one hidden promise that the same current content decision question will be decided later inside the same decision object. Any undecided remainder must be marked outside the current decision with a named pattern, selected non-pattern FPF kind-reference pair, or decision record.

Process-source method admission into FPF

When a DRR imports stable method from process-source document-carried method description into FPF, it must decide the admission by value rather than treating process prose as a second canon.

The DRR names:

  • the process-source passage or accepted source named by value process-source decision-ground item being considered;
  • the reusable FPF method recovered from that passage;
  • the current FPF pattern, section, or accepted DRR that already carries the method, if any;
  • the remaining delta that current FPF does not yet carry;
  • the selected FPF pattern chosen to carry that delta;
  • process-control material excluded from FPF pattern prose, such as role dispatch, seam state, helper behavior, Git recovery, packet transport, review transport, chat cadence, and mutable release state;
  • the source-use result for that passage or decision-ground item: quote named by value, narrowed scope, instantiated case, decision-bearing use, draft-guidance source, example-only use, or retired source use;
  • any meaning loss or addition created by that source-use result: changed scope, relation, evidence path, admissible use, non-admissible use, reader move, or recoverability condition;
  • the first improved FPF use that the admitted method gives to an author, reviewer, or downstream FPF user;
  • the current disposition: selected now, inherited sufficient, rejected now, or outside the current decision with the named evaluation pattern, accepted DRR, or accepted decision-ground item named by value.

Reusable process-source method is not limited to semio wording or pattern-authoring language. It may enter FPF only when it is separable from local process mechanics, improves FPF use, and has one exact evaluation pattern. After the method lands in FPF, process documents should cite the selected FPF pattern instead of keeping a parallel long-form rule.

Archetypal Grounding (System / Episteme)

Holon flavourDRR analogueMinimum kernel illustrated
U.System (physical)Engineering Change Order for pump motor upgrade.Context: inefficiency and plant-use problem; Decision: switch to brushless DC and update the selected control/maintenance patterns or selected non-pattern FPF kind-reference pairs; Rationale: energy gain vs cost and authority fit; Consequences: new control schema, supplier change, validation evidence obligation.
U.Episteme (knowledge)Foundational theory revision paper.Context: conflicting data and explanatory problem; Decision: introduce new axiom and distribute its consequences into the selected theory/teaching patterns or selected non-pattern FPF kind-reference pairs; Rationale: explains legacy & new data, Pillar alignment, alternative rejection; Consequences: fresh predictions, update to curricula, downstream review obligation.

Bias-Annotation

LensBias risk in DRR useMitigation in this pattern
GovThe DRR can become a bureaucratic approval ritual rather than a decision-rationale record.Keep CC-DRR.5 for lightweight editorial changes and require richer DRRs only when the content decision is semantically load-bearing.
ArchA rich DRR can become a shadow specification that competes with the selected Core patterns and selected non-pattern FPF kind-reference pairs.Treat the DRR as a temporary convergence aid; enduring content is distributed into the selected Core patterns and selected non-pattern FPF kind-reference pairs.
Onto/EpistAuthors can mix content decisions, evidence paths, source-use grounds, process state, and provenance into one ambiguous object.Require exact decision grounds and selected-answer boundaries while excluding process-order state, baton, packet, and mutable status state from the DRR.
PragThe method adds work before editing Core text.Allow pointer-based DRRs and require only the selected non-pattern FPF kind-reference pairs materially needed for the selected decision.
DidRationale can become too internal for later authors to use.Distill stable rationale, consequences, anti-cases, and SoTA implications into informative pattern sections when the Core text is updated.

Scope: this bias annotation is universal for FPF semantic changes governed by E.9. It does not turn project-management state, helper state, or review logistics into DRR content.

Conformance Checklist

IDRequirementPurpose
CC‑DRR.1Any Δ‑2/Δ‑3 semantic change set against a NORM, A, D, or GOV pattern SHALL be backed by an accepted DRR containing at least Problem‑frame (Context), Decision, Rationale, and Consequences.Prevents undocumented semantic edits while setting a minimum kernel rather than an artificial ceiling.
CC‑DRR.1aA DRR whose proposed change is expressed as a new or revised pattern written in the standard template (E.8) MAY satisfy that minimum kernel by pointing to the corresponding pattern sections rather than duplicating prose.Avoids “double writing” while keeping the argument recoverable.
CC‑DRR.1b (rich convergence content is permitted)A DRR that coordinates several patterns or selected non-pattern FPF kind-reference pairs, or mutually dependent pattern and selected non-pattern FPF kind-reference pair changes, MAY include additional substantive sections beyond the minimum kernel—for example obligations on selected patterns or selected non-pattern FPF kind-reference pairs, explicit new-pattern vs existing-pattern decisions, boundary/non-goal maps, coverage or agreement maps across selected patterns and selected non-pattern FPF kind-reference pairs, convergence classification, or one provisional decision-law account by value—provided that the DRR stays about the FPF content decision and MUST NOT become process management.Allows one semantically sufficient convergence record for coordinated changes without forcing mid-distribution invention or extra shadow documents.
CC-DRR.1c (exact decision grounds are recoverable)A conforming DRR MUST make its exact decision grounds and governing inheritance recoverable by value, either in one dedicated Decision grounds used section or one equivalent header with exact source-use and rationale fields. Routing, status, and provenance records do not count unless their substantive content still governs the decision by value.Prevents anti-telephone drift and keeps the decision inspectable against its real source-use and inheritance grounds.
CC-DRR.1d (problem-frame adequacy)The Problem frame MUST make the intended FPF use-value, first-minute working situation, minimum scenario/anti-case grounding, compact utility/fitness reading, and any load-bearing current SoTA, competitive-positioning, or inherited-decision justification recoverable by value.Prevents a DRR from being formally labeled but pragmatically under-specified.
CC-DRR.1e (current disposition map and content obligations)The Decision MUST name the selected patterns and selected non-pattern FPF kind-reference pairs and the positive content obligations each selected pattern or selected non-pattern FPF kind-reference pair must carry by value, including the first subject-kind/action spine when a pattern is selected. For every load-bearing selected answer and for every content decision question explicitly assigned to this DRR by accepted decision grounds, the Decision MUST record one current disposition now: selected now, rejected now, inherited unchanged, or outside current decision with named pattern, selected non-pattern FPF kind-reference pair, or decision record. Boundary and non-obligation lists MUST NOT be handed to later drafting as copied negative doctrine. Distinctions already owned by strict distinction, an pattern that governs the specific claim/relation/boundary, or ToC/navigation loci MUST be classified as one pointer or non-carried fanout unless a documented local confusion needs a new exact stop condition. The Decision MUST apply F.19 before proposing wording for selected patterns; boilerplate apparatus stays outside pasteable pattern prose, and remaining content that still hides precision must name the applied E.10, E.10.ARCH, F.18, or governing pattern. Pattern application and selected-locus disposition MUST remain declarative content distribution, not architecture-placement memo. Owning pattern is admissible only when the owned distinction, claim boundary, relation, row shape, or naming decision is named. When one pattern or selected non-pattern FPF kind-reference pair is already named as part of that distribution question, the Decision MUST NOT leave it in conditional or time-relative pattern prose or prose for one selected non-pattern FPF kind-reference pair such as most likely, may need, or if later touched.Stops hidden deferral, including conditional/time-relative carrier-list wording, prevents tentative carrier-list prose from replacing real content decisions, and prevents DRR boundary maps from becoming local subject-Solution noise.
CC-DRR.1e2 (kind-restoration for proposed wording).When the DRR proposes changed wording for an FPF-governed phrase, the Decision MUST record a kind-restoration check: pre-repair and post-repair primary object kind, relation or claim kind, slot or use-position, admissible use, and scope. If the wording changes kind, narrows or widens the object, collapses several kinds into one head, treats a slot/use-position as a kind, or loses a live slot/use-position, the DRR MUST accept that semantic decision by value or leave the wording as a blocking finding rather than a repair. When another pattern governs that kind under repair, relation, claim, or position, the Decision cites that pattern instead of restating it.Prevents DRR wording proposals from laundering ontology changes as editorial cleanup.
CC-DRR.1f (reusable-content disposition when triggered)When accepted decision grounds expose a potentially reusable selected non-pattern FPF kind-reference pair or neighboring source-use, evidence, assurance, validation, or architecture-decision mechanism, the DRR MUST decide whether it is generalized now, kept local with reason, rejected, or placed outside the current decision with named pattern, selected non-pattern FPF kind-reference pair, or decision record.Prevents unexamined inheritance of local source-use publications, evidence records, assurance records, validation views, or architecture-decision relations.
CC‑DRR.1g (source-loss and recoverability template when triggered)If the decision declares a source-loss mode, simplification, redaction, summarization, or other source-to-rendering loss, the DRR MUST make explicit the preserved distinctions, dropped distinctions, admissible uses, non-admissible downstream uses, recoverability class, and reopen or stop rule.Prevents rhetorical smoothing from masquerading as stable content.
CC‑DRR.1h (naming and ontology adequacy)A conforming DRR MUST make the selected head/branch/object/move/outside-work separation recoverable by value and MUST expose any tempting wrong-pattern assignment or wrong non-pattern FPF kind-reference assignment or load-bearing F.18 naming obligation that materially affects the decision.Prevents semantically important naming and typing choices from being rediscovered later during pattern drafting.
CC‑DRR.1i (existing-pattern sufficiency or new-pattern necessity is explicit)When a load-bearing selected answer could plausibly belong in one already-existing pattern, one already-existing selected non-pattern FPF kind-reference pair, or one newly proposed pattern or selected non-pattern FPF kind-reference pair, the DRR MUST make that sufficiency/necessity judgement by value and MUST explain why rejected options would misplace, overload, or falsely split the pattern or selected non-pattern FPF kind-reference pair that governs the selected answer.Prevents carrier selection from being rediscovered during downstream drafting.
CC‑DRR.1j (selected-answer stability boundary is explicit)The Decision or Consequences MUST make clear which elements of the selected answer are fixed now for later FPF drafting and which later elaborations may strengthen wording, examples, source-use rows, or validation evidence without reopening the selected answer.Prevents later drafting from silently widening or re-deciding the accepted answer.
CC-DRR.1k (source-use result is explicit).When a DRR imports a source-borne method, architecture claim, accepted decision-ground item, or other reusable source passage, it MUST state how the source is used in the selected answer: quote named by value, narrowed scope, instantiated case, decision-bearing use, draft-guidance source, example-only use, or retired source use. It MUST also state any meaning loss or addition in scope, relation, evidence path, admissible use, non-admissible use, reader move, or recoverability condition.Blocks free paraphrase and makes source movement reviewable without turning source documents into a second canon.
CC‑DRR.2A conforming DRR MUST include a rationale account that compares the material alternatives and assesses the selected proposal against all Eleven Pillars and the five Principle‑Taxonomy lenses (Gov, Arch, Onto/Epist, Prag, Did).Keeps evolution aligned, comparative, and cross‑disciplinary.
CC‑DRR.3The DRR SHALL list every pattern, selected non-pattern FPF kind-reference pair, or neighboring pattern or selected non-pattern FPF kind-reference pair that it supersedes, amends, excludes from the current decision, assigns to a neighboring pattern or selected non-pattern FPF kind-reference pair, or risks impacting, together with any agreement across selected patterns and selected non-pattern FPF kind-reference pairs the selected patterns and selected non-pattern FPF kind-reference pairs must preserve. It MUST also make clear why the selected patterns and selected non-pattern FPF kind-reference pairs carry the content, which tempting patterns or selected non-pattern FPF kind-reference pairs stay outside, and, when several content-decision branches touch the same carrier set, whether that overlap is valid convergence or one reopened architecture smell.Maintains an explicit impact/boundary graph for coordinated changes.
CC‑DRR.3a (practical and validation consequences are explicit)The Consequences account MUST expose the practical change in use, practical gains/costs, affected patterns and selected non-pattern FPF kind-reference pairs, and any remaining content-scope validation evidence obligation or authority/release consequence that still constrains the selected decision by value.Prevents consequences from collapsing into generic optimism or process-order prose.
CC-DRR.3b (SoTA shapes the decision when load-bearing)When SoTA or competitive positioning is load-bearing, the DRR MUST make the current SoTA source-use line recoverable under E.8, state why it is current best-known problem-solving practice for the DRR decision question rather than merely official, recent, popular, or familiar, and state any uncertainty that would materially change the decision. A literature overview that does not shape the selected answer, boundary, or validation evidence obligation is non-conforming.Keeps SoTA from becoming decorative appendix material or prestige-source substitution.
CC‑DRR.4An accepted DRR SHALL have its Decision account landed in the Core as the normative change. When that DRR temporarily carries richer convergence content, authors landing it SHOULD distribute any part that stabilizes into enduring FPF content into the relevant Core patterns and selected non-pattern FPF kind-reference pairs. Authors MAY distill other DRR sections into informative pattern sections (Rationale/Consequences/SoTA‑Echoing/Grounding), but they SHALL NOT introduce new normative constraints except via explicit NORM/A/D/GOV text.Preserves Core authority while allowing a richer temporary convergence record.
CC-DRR.4a (separate-law content proliferation is blocked)If the DRR needs compact law/check content, it SHOULD keep that content as one decision-law section or as obligations on selected existing amendment targets. It MUST NOT mint a separate law sheet, profile, selected non-pattern FPF kind-reference pair, or checklist unless that separate selected non-pattern FPF kind-reference pair is selected by value and shown not to duplicate the DRR or the selected amendment targets.Prevents unnecessary separate source-use, validation, or shadow-law proliferation.
CC‑DRR.4b (current decision object remains singular)A conforming DRR MUST remain one current content decision object. It MUST NOT carry process-order/gate/handoff/process state, mutable status, or hidden same-decision future-planning language; any undecided remainder MUST be marked outside the current decision with named pattern, selected non-pattern FPF kind-reference pair, or decision record.Keeps the DRR ontologically about the FPF decision rather than about the development container.
CC-DRR.4c (downstream authoring stays inside the accepted decision)Authors drafting from an accepted DRR MAY elaborate examples, SoTA-Echoing, recognition sections, local wording inside the selected patterns and selected non-pattern FPF kind-reference pairs, and neighboring fit, but they SHALL NOT silently revise the selected answer, selected patterns and selected non-pattern FPF kind-reference pairs, outside-current-decision boundary, reusable-content disposition, or declared loss/recoverability regime. Any such revision SHALL be handled through one successor DRR or other named successor decision record.Keeps later pattern drafting from re-deciding bounded content by drift.
CC-DRR.4d (major decision gaps are not left to drafting-time invention)A conforming DRR MUST NOT leave material selected-answer branch choices about the EntityOfConcern, selected patterns and selected non-pattern FPF kind-reference pairs, outside-current-decision boundary, reusable-content disposition, or loss/recoverability regime to be discovered case-by-case during later pattern drafting or drafting for one selected non-pattern FPF kind-reference pair. Those choices MUST already be selected, rejected, inherited unchanged, or placed outside the current decision with named pattern, selected non-pattern FPF kind-reference pair, or decision record.Ensures the DRR actually coordinates one bounded change set rather than serving as a thin preface to later rediscovery.
CC‑DRR.5A DRR for minor, non‑substantive edits (Δ‑0/Δ‑1; e.g., typos, wording clarity, didactic rearrangements) MAY use a lightweight variant containing Problem‑frame (Context) + Decision only (“no semantic change”), provided it does not alter semantics.Avoids bureaucratic drag on editorial work.
CC‑DRR.6 (evidence boundary)For Δ‑2/Δ‑3 lexical or authoring-sensitive changes, the DRR SHALL state the content-scope evidence or validation evidence obligation that bears on the decision, and it MAY summarize already-available decisive evidence by value when that evidence materially shapes the chosen content. The DRR SHALL NOT need a LAT id, run-manifest id, gate id, packet id, or other authoring-evidence citation in order to count as complete; those remain in the relevant evidence or authoring record. If later LAT or refresh evidence motivates reopening or revising the decision, that later evidence belongs in a successor DRR or other named successor decision record rather than being retrofitted into the accepted DRR.Keeps the DRR a design-rationale record while preserving re-runnable evidence in the relevant evidence or authoring record.

Common Anti-Patterns and How to Avoid Them

Anti-patternWhat it looks likeWhy it failsRepair
Process brief disguised as DRRThe record explains baton movement, packet state, review timing, or current campaign state.It describes development process rather than the FPF content decision.Remove mutable process state and keep only the decision grounds, selected answer, alternatives, and consequences.
Shadow specificationThe DRR becomes the only place where stable semantics, examples, source-use rules, or validation rules remain after the Core has moved.Later FPF readers cannot use the decision because it never became pattern content.Distribute enduring content into the selected patterns and selected non-pattern FPF kind-reference pairs; leave the DRR as provenance.
Four-label shellThe record has Problem frame, Decision, Rationale, and Consequences headings, but no decision grounds, use-value, alternatives, content distribution, or impact account by value.The minimum kernel is labeled but not substantively recoverable.Fill the decision-inspection content blocks needed for the decision, or use the lightweight variant only for true Delta-0 / Delta-1 edits.
Tentative carrier listThe DRR says a pattern may need work later, is most likely affected, or should be watched if touched.A named distribution question is postponed while pretending to be decided.Classify each named pattern or selected non-pattern FPF kind-reference pair now: selected, rejected, inherited unchanged, or outside the current decision with a named record.
Loss without use/reopen ruleThe decision summarizes, redacts, simplifies, or otherwise declares a source-loss mode but does not state admissible use, non-admissible downstream use, recoverability, and reopen conditions.A representation with undeclared source loss can be used as if it were the full source.Add the source-loss and recoverability template: preserved distinctions, dropped distinctions, admissible uses, non-admissible uses, recoverability class, and reopen or stop rule.
Free paraphrase importThe DRR restates a source-borne method, architecture claim, accepted decision-ground item, or reusable source passage in smoother prose but does not say whether it quoted, narrowed, instantiated, used as decision grounds, turned into draft guidance, kept example-only, or retired the source use.The paraphrase can widen, weaken, or redirect the source while appearing to preserve it.State the source-use result and loss and addition account, or keep the passage as an quote or example-only source named by value example.
Decorative SoTA appendixSources are listed after the fact or treated as SoTA because they are official, recent, popular, or famous, but they do not change the selected answer, boundary, or validation evidence obligation.The record looks researched while the decision remains unchallenged by current best-known practice.State what each load-bearing source makes the DRR adopt, adapt, or reject, why that source family is current for the DRR decision question under E.8, and which uncertainty would materially change the answer.

Consequences

BenefitsTrade‑offs / Mitigations
Complete audit trail – every semantic normative change carries a structured “why”.Adds deliberate friction; mitigated by CC‑DRR.5 (Δ‑0/Δ‑1 lightweight) and CC‑DRR.1a (pointer‑based DRRs).
Higher decision quality – Pillar, alternatives, scenario, and utility checks surface hidden conflicts early.Authors must do more real content work up front; the gain is less downstream reinvention and less hidden deferral.
Institutional memory – prevents re‑litigation of rejected alternatives.DRR archive grows; index stored in a non‑normative annex.
Executable downstream authoring - selected patterns and selected non-pattern FPF kind-reference pairs, outside-boundary, reusable-content decisions, selected-answer stability, and remaining validation evidence obligation are explicit enough for later drafting/landing without semantic invention.Richer DRRs need discipline to avoid becoming shadow specs or process briefs; mitigated by CC-DRR.1b, CC-DRR.4a, CC-DRR.4b, CC-DRR.4c, and CC-DRR.4d.

Rationale

FPF evolves by explicit, reviewable deltas rather than silent edits. The DRR is the minimum structured argument—and, when several patterns or selected non-pattern FPF kind-reference pairs must move together, an allowed temporary convergence record that keeps P‑10 Open‑Ended Evolution compatible with P‑1 Cognitive Elegance and P‑2 Didactic Primacy.

E.9 sets a floor, not a ceiling: every conforming DRR must make Problem‑frame / Decision / Rationale / Consequences recoverable, but it may carry richer substantive coordination content when that prevents shadow documents or semantic invention during distribution into Core patterns and selected non-pattern FPF kind-reference pairs. The same floor also requires the decision-inspection content that later authoring and review otherwise reconstruct manually: exact decision grounds, use-value, first-minute working situation, scenario grounding, alternatives, current disposition map, naming/ontology obligation, selected content distribution, existing-pattern sufficiency/new-pattern necessity, overlap classification, selected-answer stability, impact/boundary graph, practical payoff, and any remaining uncertainty that materially shapes the decision.

Pointer-based DRRs (CC‑DRR.1a) prevent duplicated prose, and distribution into Core patterns and selected non-pattern FPF kind-reference pairs (CC‑DRR.4) keeps the specification itself learnable without turning the DRR into a permanent shadow canon. Process-law ordering, gate, and handoff records stay outside because they are not part of the content answer that FPF is selecting.

SoTA-Echoing

E.9 aligns with contemporary architecture-decision and rationale-capture practice, but its contribution is not the existence of a decision record. ADR practice already carries compact context, decision, and consequence records. FPF uses the DRR as a decision-rationale record for one bounded FPF content decision, with enough by-value rationale to distribute durable content into selected patterns and selected non-pattern FPF kind-reference pairs.

Practice source familyLocal FPF invariant and practical implicationPopular shortcut rejected
Architecture-description standards such as joint ISO, IEC, and IEEE 42010:2022Architecture work must make concerns, viewpoints, decisions, and rationale inspectable. A DRR adapts this to FPF content deltas by exposing the concerns and alternatives that shape the FPF change, not only the edited text.Reject treating a patch or edited wording as self-explanatory architecture rationale.
Markdown ADR practice, including post-2015 lightweight ADR and MADR-style templatesContext, decision, and consequence records are useful when the change is local. A semantic FPF amendment needs enough by-value decision-ground and source-use content for later pattern drafting without reinvention.Reject treating a generic ADR template as sufficient when a multi-pattern FPF change needs Pillar, lens, naming, SoTA, distribution, or loss and recoverability content.
Continuous and evolutionary architecture decision-record practiceDecision records are revisitable decision records for evolving systems. FPF keeps mutable process state out of the DRR and handles reopened content with a successor decision record.Reject turning the DRR into a status log, gate diary, or permanent shadow law.
Research and design-rationale traditions around alternatives and trade-off captureRejected alternatives and trade-offs must remain recoverable enough that future authors do not re-litigate or silently reverse the selected answer. FPF adapts this through the Eleven Pillars and Principle-Taxonomy lenses.Reject recording only the selected answer while leaving why-this-not-that implicit.

The practical gain is content-selection quality under semantic load: the DRR decides the selected answer, alternatives, losses, boundary, and selected loci before pattern drafting begins. Any durable rule, example, or content obligation that remains useful after acceptance belongs in the selected FPF pattern or selected non-pattern FPF kind-reference pair, not in the DRR as a permanent shadow canon.

When a DRR relies on a source document, workstream plan, campaign queue, external review packet, standard, article, ADR-like note, or prior accepted decision, it states how the source is used and the source adoption/adaptation/rejection decision, then carries the selected payload by value: adopt, adapt, reject, lineage-only, rationale-only, selected payload, rejected or non-carried payload, source loss, selected locus, non-use boundary, and reopen condition. A cited source is not FPF doctrine, child DRR, review result, gate, evidence sufficiency, or monolith landing source by citation alone.

Relations

  • Instantiates: P‑10 Open‑Ended Evolution, P‑2 Didactic Primacy

  • Template governed by: pat:authoring/pattern‑template (E.8)

  • Interacts with: pat:guard/bias‑audit (E.5.4) via lens check

  • Complemented by: E.9.DA when one concrete DRR follows E.9 form but its adequacy for downstream drafting, host amendment, accepted-decision carry-through, source-use carry-through, or selected-locus distribution is disputed or materially relevant. E.9.DA reads the DRR decision-adequacy claim; it is not a second DRR form, review gate, or mandatory ordinary editorial step. Also complemented by pat:authoring/code-of-conduct (E.12) for etiquette in DRR debate.

  • Coordinates with: E.23 when one DRR is being improved through repeated quality-improvement passes. E.9 keeps the DRR kind and decision-record form; E.9.DA supplies the decision-adequacy object-under-improvement evaluation when adequacy is being improved; E.23 governs the repeated method rather than turning the DRR into final pattern prose.

E.9:End

DRR Decision-Adequacy Evaluation CharacteristicSpace

Status: Core.

Problem frame

Use E.9.DA when one DRR must be reliable enough for a declared FPF authoring use: pattern drafting, host amendment, selected-locus distribution, accepted-decision carry-through, source-use carry-through, scope-boundary decision, split decision, or architecture-hold decision.

Not this pattern when the evaluated object is one authored pattern version, one admission or refresh review, one local wording repair, or a measurement-law problem. Use E.21, E.19, E.10 and its precision-restoration neighbours, or C.16/A.17/A.18/A.19 for those objects.

First useful move: name the exact DRRVersionRef, declared authoring use, selected-locus disposition map, and qualification window; then evaluate every decision-adequacy coordinate in this pattern. Missing decisions lower coordinates and produce repair, split, or hold status inside the same evaluation.

What goes wrong if missed: a formally valid DRR may still be too weak for drafting. It may summarize sources instead of deciding, mention neighbours without obligations, hide rejected alternatives, leave trigger words unresolved, or omit the first drafting action.

Primary EntityOfConcern in plain terms: the decision-adequacy claim of one exact DRR version for a declared FPF authoring use.

Problem

E.9 defines the DRR kind and minimum decision-rationale form. It does not by itself say whether one concrete DRR is decision-bearing enough for downstream FPF authoring. Without E.9.DA, reviewers tend to approve headings, source volume, or clean prose while the pattern author still has to invent missing decisions.

Recurring failures:

  1. The decision question is broad or implicit.
  2. The selected answer is a summary rather than a decision.
  3. Alternatives, rejected options, and outside-decision items are not closed.
  4. Receiving loci are named but not assigned content obligations or non-obligations.
  5. The selected FPF content architecture is explicit but wrong.
  6. Source use is copied without saying what changed in the accepted decision.
  7. Architecture descriptions, views, graphs, packets, or notes are treated as the FPF decision.
  8. Administrative state becomes adequacy evidence.

Forces

ForceTension
Decision completeness vs concise rationaleA DRR must decide enough, but must not become final pattern prose.
Exactness vs drafting freedomThe DRR fixes selected answers and boundaries; authors still write usable pattern text.
Source preservation vs synthesisSource distinctions matter, but the DRR must state FPF decisions.
Multi-locus coordination vs EoC boundaryOne decision can affect many patterns while one DRR adequacy claim stays scoped.
Architecture selection vs address completionEvery locus can be assigned and still be the wrong split or merge.
Affordability vs completenessSmall editorial decisions stay under E.9; opened E.9.DA evaluates every coordinate compactly.

Solution

E.9.DA is the DRR decision-adequacy specialization of A.19.ECS. It evaluates whether one DRR version carries enough decision content for the declared authoring use.

There is no partial E.9.DA result. Once invoked, the evaluator assigns a value, short rationale, and evidence locus to every coordinate in E.9.DA:4.4, and states the evidence basis used for the result. If the DRR lacks a field, source row, selected-locus map, architecture decision, comparator, or currentness basis needed by a coordinate, the relevant coordinate receives a low value and the status states the repair, split, or hold.

Local names and kind settlement

Local nameKind and role
DRRDecisionAdequacyEvaluationAuthored adequacy-evaluation record for one scoped DRR decision-adequacy claim.
DRRVersionRefExact DRR version being evaluated.
DRRDeclaredAuthoringUseDownstream FPF authoring use the DRR is expected to carry.
DRRSelectedLocusDispositionMapMap from selected loci named by value to content obligations, non-obligations, sibling decisions, or outside-decision dispositions.
DRRDecisionAdequacyQualificationWindowEdition, source set, accepted-decision record, neighbour condition, and currentness window for which the evaluation holds.
DRRDecisionAdequacyCoordinateSetThe required coordinates in this pattern.
DRRDecisionAdequacyEvidenceBasisDRR, source, accepted-decision, selected-locus, architecture, currentness, and neighbour loci named by value for coordinate values.
DRRCoordinateValueRationalesRequired result rows: coordinate, value, short rationale, and evidence locus named by value.
DRRCoordinateLocusRefsExact DRR loci used as value evidence.
DRRSourceUseDischargeMapSource-use role, source-currentness, selected payload, rejected payload, and selected locus when source material is load-bearing.
DRRKindRestorationCheckRequired pre-repair/post-repair object-kind, relation-or-claim-kind, slot-or-use-position, admissible-use, and scope check, or not triggered/ordinary prose/already satisfied/blocker disposition with loci, for any DRR wording, naming, or precision-restoration repair proposal.
DRRDecisionAdequacyStatusAdmissible-use status for the scoped DRR decision-adequacy claim.

These names are local evaluation fields. They are not release state, review status, project evidence, gate result, assurance, or pattern-quality values.

Evaluation record

DRRDecisionAdequacyEvaluation:
  DRRVersionRef: <DRR version named by value>

  DRRDeclaredAuthoringUse: <drafting | amendment | distribution | source-use carry-through | accepted-decision carry-through | split/hold decision>
  DRRSelectedLocusDispositionMap: <locus -> obligation/non-obligation/sibling/outside>
  DRRDecisionAdequacyQualificationWindow: <source, edition, neighbour, currentness window>
  DRRDecisionAdequacyEvidenceBasis: <checked DRR, source, accepted-decision, selected-locus, architecture, currentness, and neighbour loci; missing or unchecked loci named when they affect values>
  DRRDecisionAdequacyCoordinateTable: <all coordinates, values, short rationales, evidence loci>
  DRRKindRestorationCheck: <required for each wording/naming/precision-restoration repair proposal; pre kind/relation/claim/slot-or-use-position/admissible use/scope -> post kind/relation/claim/slot-or-use-position/admissible use/scope; not triggered | ordinary prose | already satisfied | preserved | split | intentionally changed | blocker, with loci>
  DRRDecisionAdequacyStatus: <status>
  StopOrRepairCondition: <local stop, first repair, split, or architecture hold>

[E.22](/generated/patterns/E.22) may frame whether the evaluation is floor-only, exceptional-improvement, trade-off, open-question, absorption, or proposal-producing. [E.23](/generated/patterns/E.23) governs repeated improvement of the DRR after evaluation findings exist.

Ordinal coordinate scale

ValueLabelMeaning for a DRR decision-adequacy coordinate
0absentThe coordinate is not expressed for the declared authoring use.
1namedOnlyThe coordinate is named or implied, but cannot carry decision reliance.
2partiallyExpressedForDeclaredUseThe coordinate is present but incomplete, fragile, or too narrow.
3sufficientlyExpressedForDeclaredUseThe coordinate can carry the declared authoring use, with limits visible.
4wellExpressedForDeclaredUseThe coordinate is clearly expressed with direct evidence and boundary protection.
5exceptionallyExpressedForDeclaredUseThe coordinate is exceptionally expressed across reinforcing loci and cases without hiding cost or neighbour loss.

The value is a content evaluation of the DRR text and accepted source-use payload, not a reward for review, landing, popularity, citation volume, or absence of visible defects.

Required decision-adequacy coordinates

CoordinateEvaluation question
BoundedDecisionQuestionRecoverabilityCan the reader recover the FPF content decision question named by value and adjacent questions outside it?
SelectedAnswerDecisivenessDoes the DRR decide the selected answer now rather than defer it to drafting?
SourceUseAndDecisionInheritanceCarryThroughDoes needed source use or accepted decision inheritance change selected answers, boundaries, obligations, cases, architecture choices, stops, or reopen conditions by value?
AlternativeDispositionCompletenessAre selected, rejected, inherited, lineage-only, rationale-only, and outside-decision options closed for the declared use?
SelectedLocusObligationClosureAre obligations and non-obligations assigned to selected loci named by value without unclassified selected loci or precision-restoration/profile defects that would become pasteable pattern prose?
FPFContentArchitectureSelectionAdequacyIs the selected FPF content architecture substantively adequate: existing pattern, new pattern, split, merge, selected content object, branch, and governing pattern for each outside claim, relation, or boundary?
ArchitectureSourceAndViewLossClosureAre affected structures, structure kinds, structural views, view losses, source-return conditions, and splits among architecture decision, architecture description, and publication decided when the decision uses them?
DraftingActionabilityCan a pattern author recover the first substantive drafting content as this pattern's positive subject-kind/action spine, without mining copied boundary doctrine, reference boilerplate, phrase apparatus, or architecture-placement rationale for pattern prose?
LexicalAndNamingClosureAre durable names, trigger words, and relation-like heads repaired through E.10, F.18, A.6.P, C.2.P, or the pattern that governs the relevant kind, claim, relation, or name?
SoTAAndEvidenceUseInDecisionDoes each load-bearing source change a decision payload, and are non-SoTA source uses bounded?
ScopeBoundaryAndNonOverreadAre outside-decision items, inadmissible overreads, source-return paths, and lost distinctions explicit without letting precision-restoration defects or architecture-memo leakage displace the selected answer?
ConsequencesAndRegressionCoverageAre consequences, costs, validation obligations, source-loss regressions, regression cases, and near-misses enough to protect drafting?
SiblingDecisionCoordinationIs coordination with other DRRs, accepted decisions, or evaluation patterns explicit without duplication or weakening?
AdministrativeStateAndAuthoringHistorySeparationAre review logistics, packet state, landing, monolith placement, chat history, and authoring history kept out of decision evidence?
CorpusEcologyAndShadowSpecResistanceDoes the DRR assign repeated doctrine to governing patterns and avoid duplicate local variants or shadow specs?

Coordinate separation is by repair question. One DRR section may support several coordinates, but the rationale must state the distinct property supported for each. When two heads always fail and repair together, the DRR or the evaluation pattern needs characteristic-space repair through A.19.ECS.

Result-row discipline and calibration

An E.9.DA result uses this table shape:

CoordinateValueShortRationaleEvidenceLocus
<E.9.DA coordinate><0..5><assigned-value basis; why the lower adjacent value would understate the DRR evidence; why the higher adjacent value would overstate it, or for 5 what would lower/reopen><DRR section, row, alternative, source-use row, selected-locus row, accepted-decision row, architecture decision, or missing locus named by value>

A prose summary, heading checklist, two-column coordinate/value table, or table without exact EvidenceLocus is not an E.9.DA result. It is draft evaluation material. Missing or unchecked evidence lowers the coordinate that needs it; it does not make the coordinate inactive.

Common calibration points:

Coordinate family345
Decision question and selected answerThe decision can guide limited drafting, but deferred or ambiguous material remains visible.The selected answer and outside questions are directly recoverable for declared authoring use.The decision is reinforced across question, alternatives, consequences, selected loci, and first drafting move without hidden deferral.
Source-use and inheritanceSources or inherited decisions are relevant, but payload mutation or rejection is compact or incomplete.Source-use role, adopted payload, rejected payload, currentness, and selected-locus obligation are explicit.Source distinctions are replayable across selected answer, cases, boundaries, and first drafting move.
Selected-locus and architecture closureLoci are named, but some obligation, non-obligation, split, architecture choice, ordinary reference relation, or phrase apparatus remains generic.Loci named by value and content obligations are closed for declared use without precision-restoration defects or architecture-memo prose in the future pattern body.The split, merge, governing pattern for outside claim/relation/boundary, and lost/source-return distinctions are replayable across cases and consequences while product prose remains positive-subject first.
Drafting actionabilityA skilled author can proceed, but must infer some first move, subject spine, boundary disposition, selected-locus relation, or reference/architecture disposition from scattered material.The first substantive drafting content is the positive subject-kind/action spine; copied distinctions owned by other patterns are classified as pointers named by value or non-carried fanout; ordinary references stay as references; architecture rationale and phrase apparatus stay out of pattern prose; and pattern application remains explicit.Drafting can proceed across heterogeneous selected loci without inventing decisions, final prose, local negative catalogs, reference boilerplate, phrase apparatus, or architecture-memo leakage.

Status and stop condition

StatusMeaning
admissibleForDeclaredAuthoringUseThe DRR can be used for the declared drafting, amendment, distribution, source-use, or accepted-decision carry-through.
newFrameRequiredThe DRR appears useful only for a different decision, authoring use, selected-locus set, source-use claim, or qualification window than the declared one. This is not an admissible result for the current request; open a new E.22 frame or repair the DRR.
repairBeforeDraftingOne or more coordinate floors fail for the declared authoring use.
splitDecisionRequiredSeveral coupled questions need separate decision records or explicit convergence.
holdForArchitectureDecisionContent object, branch, neighbour boundary, selected locus, structural view relation, source-return condition, or publication split must be decided before adequacy can close.

admissibleForDeclaredAuthoringUse states the first drafting move and the most expansive non-admissible overread. newFrameRequired is not a pass for the current declared use. Non-ready statuses state the first repair, split boundary, or architecture question.

Compact result form

E.9.DA result:
  DRR version: <DRRVersionRef>
  Declared authoring use: <DRRDeclaredAuthoringUse>
  Qualification window: <window>
  Evidence basis checked: <DRRDecisionAdequacyEvidenceBasis>
  Status: <DRRDecisionAdequacyStatus>
  Coordinate table: <Coordinate | Value | ShortRationale | EvidenceLocus for every required coordinate>
  First drafting move or first repair: <...>
  Most expansive non-admissible overread: <...>
  Reopen if: <smallest changed locus or condition>

The coordinate table may be short. It is still complete. Status is not assigned from a prose summary, two-column table, applied-finding count, review acceptance, or result missing evidence loci needed by its values.

Finding row

E.9.DA finding:
  DRR version: <DRRVersionRef>
  Declared authoring use: <DRRDeclaredAuthoringUse>
  Coordinate or status affected: <coordinate | status | stop condition>
  Exact DRR locus: <section, row, alternative, source-use row, accepted-decision row>
  Value or status effect: <value/status/floor/stop impact>
  Correction direction: <selected answer | selected locus | source-use payload | architecture choice | example | boundary | stop/reopen>
  Closure test: <what changed DRR text would show>

Vague labels such as weak DRR, needs more evidence, or architecture unclear are not findings until rewritten into this row.

Worked slices

Weak precision-restoration DRR. A DRR says E.10, A.6.P, and C.2.P are relevant, but does not decide whether a new branch exists, what name it has, which repeated prose moves, or which regression cases test the split. SelectedAnswerDecisiveness, SelectedLocusObligationClosure, FPFContentArchitectureSelectionAdequacy, and DraftingActionability fall.

Adequate multi-locus DRR. The DRR selects a new precision-restoration pattern, assigns exact content obligations to selected loci, states rejected alternatives, gives first drafting moves, and carries source-use payload into examples and conformance. It can be admissible for host drafting without containing final pattern prose.

Architecture-impact DRR. A DRR uses diagrams, graphs, dashboards, or architecture notes. The evaluation asks whether the DRR decided the architecture or structure claim, structural view relation, preserved and lost structure, source-return condition, selected loci, and publication boundary. The description locates material; it is not the FPF decision.

Bias annotation

This pattern biases FPF toward decisions before drafting. The bias is useful because missing decisions become expensive once they fan out into pattern hosts.

The bias is bounded. Small editorial decisions can use E.9 directly. Pattern quality remains under E.21; repeated improvement remains under E.23; wording repair remains under E.10 and precision-restoration neighboring patterns named by value.

Conformance checklist

CheckRequirement
CC-E9DA-1Name DRRVersionRef, declared authoring use, selected-locus disposition map, and qualification window.
CC-E9DA-2Evaluate every coordinate in E.9.DA:4.4 with value, short rationale, and evidence locus, using the required result-row shape.
CC-E9DA-3Justify values from DRR decision content and accepted source-use payload, not administrative state or reputation.
CC-E9DA-4State DRRDecisionAdequacyStatus, first drafting move or first repair, bounded non-use, and reopen condition.
CC-E9DA-5Keep DRR adequacy distinct from pattern quality, review pass, release state, evidence, assurance, gate, and project work.
CC-E9DA-6Apply E.10 to load-bearing names, coordinates, status values, examples, stop conditions, and finding wording introduced or repaired by the evaluation.
CC-E9DA-6aApply the F.19 kind-or-boilerplate diagnostic from E.9/E.21 to proposed drafting wording and record the scalar effect as a precision-restoration profile: remaining word-use precision goes to E.10, E.10.ARCH, F.18, or a governing pattern; phrase apparatus goes to F.19; boilerplate stays out of future pattern prose.
CC-E9DA-6bFor any proposed wording, naming, or precision-restoration repair, record DRRKindRestorationCheck. The repair is not adequate if it only removes a trigger word or substitutes a cleaner phrase while changing, narrowing, widening, flattening, or losing the governed kind, relation, claim kind, slot or use-position, admissible use, or scope without an accepted semantic decision and governing-pattern reference when another pattern governs the kind under repair, relation, claim, or position.
CC-E9DA-7State source contribution by payload mutation when a source is load-bearing.
CC-E9DA-8State what became worse if visible decision-adequacy values improved.
CC-E9DA-9State the DRRDecisionAdequacyEvidenceBasis; if source-currentness, accepted-decision inheritance, selected-locus, architecture, or comparator evidence is missing or unchecked, lower the coordinate that needs it.
CC-E9DA-10Use adjacent-value calibration when assigning 3, 4, or 5; a rationale must distinguish the assigned value from its lower and higher neighbours.

Common anti-patterns and repairs

Anti-patternRepair
Heading-complete DRR. Headings exist but authors cannot tell what to write.Lower selected-answer, selected-locus, and drafting-action coordinates.
Source packet in DRR clothing. Sources are preserved but FPF decisions are absent.State selected payload, rejected payload, and selected-locus obligations.
Address completion without architecture. Every locus is named but the split or merge is wrong.Repair FPFContentArchitectureSelectionAdequacy.
Watch item as decision. Drafting is expected to choose the answer later.Select, repair, split, or hold.
Review-state proxy. Review acceptance or landing is treated as adequacy.Use decision-content evidence only.
Adequacy table without evidence loci. Values are listed without exact DRR or source loci.Re-run the evaluation with `Coordinate
Apparatus-overwrapped drafting payload. The DRR offers selected-pattern wording wrapped in role/carrier/locus/flow/state/status/text/package/process apparatus without changing a recoverable kind, relation, claim kind, admissible use, evidence value, selected locus, user move, or flow role.Classify the wording under F.19. If it changes a kind or claim, repair through precision restoration; if not, remove it from the future pattern payload or rewrite it as the positive subject-kind/action spine.

Consequences

ConsequenceBenefitCost
DRR adequacy becomes inspectable before drafting.Pattern authors get decisions, not source summaries.Every opened E.9.DA evaluation touches all coordinates.
Architecture selection becomes visible.Exact but wrong split/merge choices no longer pass as complete distribution.Some DRRs need architecture repair before drafting.
Source mutation is explicit.SoTA, standards, reviews, audits, and accepted decisions shape decisions rather than decorate them.Rationale-only sources cannot raise values.

Rationale

The cheapest place to repair missing FPF decisions is the DRR, before pattern prose spreads uncertainty across several hosts. A compact complete evaluation is better than a heavy preliminary audit: it gives every coordinate a value, identifies the first repair, and stops.

SoTA-Echoing

ClaimPractice basisLocal adoption
DRR adequacy is decision-content adequacy, not template completeness.Architecture-description and ADR traditions keep concerns, alternatives, decisions, rationale, and consequences inspectable.The DRR must carry selected answers, alternatives, consequences, and selected-locus decisions.
Multi-host FPF changes need selected-locus disposition.Lightweight ADR practice is useful but too central-record-oriented for multi-pattern FPF changes.DRRSelectedLocusDispositionMap states obligations and non-obligations by locus.
Source evidence must mutate the decision.Current FPF E.8, E.19, E.21, and living-source discipline require non-decorative source use.SoTAAndEvidenceUseInDecision checks changed decision payload, not citation presence.
Quality improvement remains multi-coordinate.MCDA, Pareto, Goodhart, and QD lines inherited through E.22/E.23 show why one visible value is insufficient.The evaluation asks what became worse and keeps repeated improvement outside E.9.DA.

Relations

PatternRelation
E.9Defines the DRR kind and minimum form.
E.8Receives authored pattern bodies after accepted decisions.
E.21Evaluates resulting pattern versions, not DRR adequacy.
E.22Frames the evaluation purpose when needed.
E.23Runs repeated improvement of a DRR after findings or proposal rows exist.
E.19May return findings that expose upstream DRR defects.
E.10, A.6.P, C.2.P, C.16.Q, F.18Govern wording, relation, episteme, quality-term, and naming repair.
C.16, A.17, A.18, A.19, C.25Govern characteristic, scale, measurement, characteristic-space, and quality-bundle claims.
Architecture-facing FPF patternsReceive architecture, structure, view, graph, publication, and source-use distinctions when the DRR decision uses them.

E.9.DA:End

Unified Lexical Rules for FPF (LEX‑BUNDLE)

Definitional pattern; normative for all FPF pattern text and for any Context that claims FPF conformance.

Status & placement. Part E.10 (“Lexical Discipline & Stratification”); complements E.10.D1 (D.CTX), E.10.D2 (EntityOfConcern and Description-episteme boundary and specification-use gates), the DesignRunTag and CtxState boundary discipline (A.15; E.18), E.10.ARCH wording-use restoration architecture, A.6.P relation precision restoration, C.2.P epistemic precision restoration, A.19.SPR state-family precision restoration, and F.18 local-first naming. E.10:0.2 is the shared lexical trigger scan. The detailed LEX sections below supply register, naming, morphology, and local rewrite checks only for the selected live problem; they are not a second trigger registry and do not replace E.10.ARCH, the selected precision-restoration realization patterns, governing patterns, or F.18.

Builds on: A.7 Strict Distinction (Clarity Lattice); E.5 Guard‑Rails (DevOps Lexical Firewall; Notational Independence; Unidirectional Dependency); F.5 Naming Discipline for U.Types & Roles. Coordinates with. A.2 and A.15 (Role–Method–Work alignment), A.10 (Evidence Graph Referring), B.1 and B.3 (Γ‑algebras & assurance), F‑cluster (context of meaning; Bridges).

Use this when

What goes wrong if missed. Precision repair turns into taste or synonym replacement. A broad head such as support, surface, route, mapping, kind, basis, force, load, bearing, object, or record is replaced by another broad head, while the live relation, source-use relation, admissible use, or neighbouring FPF pattern application remains unrecovered.

What this buys. E.10 gives one cheap trigger scan before heavier repair: ordinary wording stays ordinary, local lexical mistakes are repaired locally, relation-like wording applies A.6.P; episteme, publication, or source-use wording applies C.2.P; architecture or structure wording applies C.30.P; stratification or source-label wording such as layer, level, tier, stack, ladder, rung, block, expert, cache, router, or gate applies C.30.STRAT; characteristic or scale wording applies C.16.P; quality or evaluative wording applies C.16.Q; state-family wording applies A.19.SPR; and already recoverable cases apply the governing pattern directly. The result is precise enough to compose with FPF without making every phrase into a new pattern or review artifact.

Use E.10 when a word, head, or local phrase in conformant FPF text is starting to hide what kind it names, which register it belongs to, which context of meaning governs it, or which relation or action claim it carries.

First useful move. Restore the head kind and register of the local wording. If no FPF-governed use remains, make the small local rewrite under E.10 and stop. If an E.10:0.2 row selects a precision-restoration realization pattern or a governing pattern, apply that pattern instead of inventing a synonym. If the repaired wording becomes a durable reusable head, apply F.18 after the live precision-restoration branch has recovered the kind and use. Governing FPF patterns are named only after that repair has made the EntityOfConcern, relation, claim, admissible use, project-side reference, or non-use disposition recoverable by value.

Cheap stop. If one local lexical repair restores kind, relation, and admissible use without changing the normative meaning of FPF, stop with the repaired wording; do not open a Name Card, DRR, review profile, or larger epistemic precision restoration note by habit. Ordinary application starts at E.10:0.2, applies only the row selected by the live sentence, and then stops at local repair, the selected restoration pattern or governing pattern, controlled precision reduction, or F.18 when a durable reusable head is actually being minted. Later LEX sections are detailed checks for the selected case, not a universal interpretation sequence.

Not this pattern when. Do not use E.10 as the ontology that governs the recovered claim. If the use under repair is evidence, assurance, work, gate, decision, causal use, publication, relation precision, or epistemic precision, the accepted text must make the governing FPF pattern application explicit; E.10 contributes only the wording-problem classification. For non-FPF source prose, use C.2.P source-expression unpacking mode and borrow E.10 only as a repair test, not as a conformance verdict.

One-screen ordinary-use path

Ordinary E.10 use is one bounded FPF-governed wording repair, not a full lexical audit. The bounded complete accepted result is:

  1. BoundedTextSpan: the exact sentence, row, section, pattern version, DRR slice, or project text deliberately using FPF-governed terms, pattern references, relation names, or conformance claims under repair.
  2. TriggerSpan: the word or phrase that carries possible FPF-governed use.
  3. SelectedInterpretation: ordinary no FPF-governed use, local head repair, register repair, morphology repair, relation-like precision restoration, episteme precision restoration, publication precision restoration, source-use restoration, durable naming, or not-triggered false positive.
  4. FinalWordingOrBlocker: the accepted local wording, the governing-pattern result, or the blocker that remains.
  5. StopBackToSubstance: after final wording or blocker is present, stop lexical work and return to the primary EntityOfConcern, relation or claim record named by value, source-use, mathematical-lens, architecture, project-action, evidence, assurance, gate, decision, or work problem that made the wording matter.

The detailed tables below are reference material for triggered cases. They are not a mandatory interpretation sequence. For a modest repair, one sentence, one trigger span, one selected interpretation, and one final wording or blocker is enough only when it discharges every live FPF-governed use in that span.

When E.10 is applied beyond one sentence, add a bounded-text line: exact accepted DRR named by value, FPF pattern, monolith section, extracted host, review packet, pattern section, source span, or other named text span; trigger spans or grouped loci; selected interpretation; repair boundary; and expected non-use boundary. This prevents accidental whole-corpus sweeps and makes change impact inspectable.

Formal fields from the older LEX substrate are live only when the selected wording problem needs them: triggerSpan, boundedTextSpan, structuralRole, selectedInterpretation, LEX.TokenClass?, register, USM.Scope?, EntityOfConcern and Description-episteme boundary and specification use?, governingPattern, and finalWordingOrBlocker.

Local patterns may cite the relevant E.10 trigger row, but they should not reproduce large trigger lists or create local lexical registries unless a named local application profile has its own primary EntityOfConcern, first useful move, and governing-pattern boundary. New trigger families enter E.10 only when they recur across FPF-governed texts and cannot be handled by one local pattern; specialized patterns receive the detailed ontology when the problem is no longer lexical. Stale or overly broad trigger rows are narrowed or retired.

Self-application is bounded. When E.10 is under improvement, use E.10 only for its own wording-trigger repairs; use E.21 for pattern-quality evaluation, E.22 for improvement-oriented quality-evaluation framing, E.23 for the improvement loop, E.2.DA for FPF-level Pillar effect, and neighboring pattern governing the claims for relation, episteme, publication, source-use, naming, or quality-word issues.

Scope split

E.10 governs lexical conformance for FPF pattern text, extracted pattern hosts, FPF-Spec monolith text, FPF governing documents, accepted DRR text, and any project, product, research, engineering, or review text that deliberately uses FPF terms, pattern references, FPF relation names, FPF kind claims, FPF admissibility claims, or claims FPF conformance.

For ordinary source text, intake notes, seminar transcripts, external reviews, project documents, source publications, tool outputs, or other text that does not itself claim FPF-governed use, use C.2.P source-expression unpacking mode. That use may borrow E.10 tests, A.6.P relation repair, A.6.6 basedness repair, F.18 naming tests, or another governing pattern as methods, but it does not judge the source text as failed FPF wording.

Problem and applicability table

E.10 is a lexical trigger scan and conformance pattern. Its primary EntityOfConcern for one pattern use is one wording use in conformant FPF text as a lexical or register sign: the head, register, morphology, local label, name candidate, kind-reference, relation-bearing cue, or replacement candidate used by the sentence.

E.10 recognizes which wording-use problem is live and selects the first applicable closure path. It does not itself become the ontology for the recovered relation, episteme, evidence, work, gate, decision, publication, architecture, characteristic, quality, or project-side FPF kind and reference named by value.

The full shared recovery order and applicability-row architecture belong to E.10.ARCH. E.10 keeps only the cheap scan, local rewrite option, direct known governing-pattern rule, compact applicability table, bounded complete result rule, and fail-closed non-use boundary.

exact is not a precision marker by itself. It is admissible only for literal identity or bounded source identity: exact sentence, source passage, trigger span, formula edition, same referent, or same declared CharacteristicSpace. When exact modifies an FPF pattern, kind, relation, record, object, field, use, claim, gate, source, or neighboring pattern, treat the phrase as trigger wording. Recover the governing pattern, FPF kind, relation record, source-use relation, admissible use, slot or use-position, value set, and scope by value, then write the recovered object. If recovery fails, use quote-only, reduced-use, blocked-use, or incomplete-rewrite disposition.

Classification is not closure. A conforming result must end in one of these by-value outcomes:

  • local wording accepted or locally rewritten;
  • selected precision-restoration pattern applied;
  • neighboring FPF pattern governing that claim applied directly because the primary EntityOfConcern, relation record, or claim record is already recoverable;
  • controlled precision-reduction result with declared loss and reopen condition;
  • F.18 durable-name path after the kind under repair or relation is known;
  • quote-only, reduced-use cue, blocked use, incomplete rewrite, ordinary prose, or not-triggered disposition.
FPF-governed use found by E.10First applicable restoration or governing patternClosure result
No FPF-governed use after context checkKeep ordinary prose, quote, didactic phrase, or not-triggered text.No precision-restoration pattern opens.
Local lexical or register ambiguity onlyLocal rewrite under E.10.Repaired wording plus remaining reader move, or ordinary-prose demotion.
Relation-like wording or relation-bearing useApply A.6.P or a retained A.6 relation specialization.Named relation kind, slots and qualifiers, admissible relation use, blocked overread, and reader move.
Source-expression, publication, carrier, face, PublicationUnit, FPF-governed use, or reading, read, or quality-read wording whose entity or construction is not yet recoveredApply C.2.P first. If the recovered entity or construction is evaluation for improvement, then use the evaluation pattern governing that evaluation claim, such as E.22, E.21, or E.9.DA.Source-local meaning, publication relation set, carrier relation when that relation is being made, EntityOfConcern, project-side FPF kind, use disposition, evaluation claim or bundle named by value when live, adjacent overread blocked, and reader move.
Architecture or structure wording with hidden selected structure, ArchitectureOf@Context relation, architecture-description use, structural-view use, source-return condition, or named C.30 subcaseApply C.30.P. If A.22, C.30, C.30.ASV, or a named C.30 subpattern is already recoverable, use it directly.Recovered selected structure, ArchitectureOf@Context, architecture description, structural view, source-return condition, governing-pattern result, or stop.
Stratification or structure-source-label wording such as layer, level, tier, stack, ladder, rung, block, expert, cache, router, or gate when the FPF kind under repair, relation, claim-use, or source-use disposition is not yet recoveredApply C.30.STRAT first. If a control-layer relation, module-interface relation, functional-flow relation, mathematical scale relation, coarse-graining relation, publication relation set, gate relation, or neighboring use named by value is already recovered, use that governing pattern directly.Recovered FPF kind, relation, claim-use, source-use disposition, and governing pattern; StratificationSourceLabelRepairNote; ordinary source label; quote-only, reduced-use, or blocked-use disposition; or stop.
Characteristic, scale, score, coordinate, metric, indicator, threshold, comparison, or scalar-quality wording with hidden constructionApply C.16.P. If A.17, A.18, C.16, A.19, C.25, C.29, E.21, or a governing pattern is already recoverable, use it directly.Recovered Characteristic, Scale, Coordinate, Value, Score, unit, scoring method, comparison basis, indicator role, governing-pattern result, or stop.
State-family wording with hidden bearer, state frame, value set, admissible use, or governing pattern: state, status, posture, readiness, stance, currentness, or close compoundsApply A.19.SPR. If the governing pattern and state-like field are already recoverable by value, use that governing pattern directly.Recovered bearer, state frame or governing pattern, value/classification, admissible use, non-admissible overread, reopen condition, governing-pattern result, or stop.
Quality or evaluative characterization wordingApply C.16.Q, C.25, E.21, or another characterization pattern governing the claim after any needed C.16.P repair. If the found problem is relation construction, apply A.6.P instead.Quality-term repair, Q-bundle or pattern-quality coordinate use, relation split or bridge split when live, and blocked scalar/gate/release overread.
Function-like wording with hidden FPF kind, relation, claim, view, or governing-pattern application: function, functional, functionality, effect, or close compoundsApply A.6.F first when kind and relation recovery is needed. If the FPF kind named by value or pattern relation is already recovered by value, use the governing pattern directly.FPF kind or relation named by value assignment, governing-pattern application, mathematical-lens use, quality/characteristic pattern application, module-interface pattern application, ordinary-prose demotion, or stop.
Intentional loss of precision for a narrower admissible useApply the controlled precision-reduction pattern, normally A.6.3.CSC, with neighboring E.17.*, A.6.3.RT, F.9, or C.29 when their relation is live.Source-bearing side, declared loss, narrower admissible use, blocked downstream use, and reopen condition.
Durable reusable head, deprecated alias, concept-set row, cross-context name-use, or UTS-facing nameApply F.18 after the live repair has selected what the name would name.Name card or naming row only for durable naming need; one-off local wording closes locally.
Trigger found but kind, relation, substrate, governing pattern, admissible use, or remaining reader move cannot be recoveredFail closed.Quote-only wording, reduced-use cue, blocked use, incomplete rewrite, ordinary prose, or not FPF-governed wording.

reading, read, and quality-read are trigger wording only when the sentence uses the word to carry interpretation, publication use, source-use assignment, evaluation, comparison, evidence, gate, work, decision, release, assurance, or admissibility claim. Do not create ReadingPrecisionRestoration. Recover the actual EntityOfConcern, publication lane, evaluation claim or bundle, relation, or work-side kind and apply C.2.P, E.17.ID.CR, E.22 plus object-under-improvement evaluation named by value, A.6.P, or the neighboring FPF pattern governing that claim.

function, functional, functionality, and effect are trigger wording when the FPF kind named by value, relation, claim, view, or governing-pattern application is hidden. Do not assign the wording by architecture default. A.6.F remains the function-like wording unpacker; mathematical function, mapping, relation, loss, objective, value functional, or operator goes to C.29 when mathematical-lens use is live, and functional-architecture use goes to C.30, C.30.ASV, or C.30.TGA-FLOW-REL only when that architecture or flow relation is recovered.

layer, level, tier, stack, ladder, rung, block, expert, cache, router, and gate are source labels when they first arrive from engineering, mathematical, publication, or project prose without a recovered FPF kind. Do not mint U.Layer, U.Level, U.Tier, U.Stack, or a universal stratification kind. Use C.30.STRAT to recover the governing pattern, or go directly to the governing pattern when the FPF kind under repair, relation, claim-use, or source-use disposition is already recovered by value: C.30.LCA for control-layer relations, A.6.M for module-interface relations, C.30.TGA-FLOW-REL for flow relations or transduction relations, C.16.P or C.29 for scale relation, coarse-graining relation, or mathematical use, C.2.P for publication relation set or source-use relation, and gate patterns, work patterns, or decision patterns when those claims are being made.

Local patterns may cite the relevant E.10 trigger row, but they must not reproduce the trigger registry or create local lexical registries unless a named local application profile has its own primary EntityOfConcern, first useful move, and governing-pattern boundary. Specialized restoration patterns receive the detailed ontology when the problem is no longer lexical.

Bounded complete result and direct known governing-pattern rule

The direct known governing-pattern rule is:

If the governing pattern and primary EntityOfConcern, relation record, or claim record are already recoverable by value, use that governing pattern directly.

Apply a precision-restoration realization pattern such as A.6.P, A.6.F, C.2.P, C.30.P, C.30.STRAT, C.16.P, C.16.Q, or A.19.SPR only when wording hides the EntityOfConcern under repair, relation, characteristic, scale, score, quality characterization, source-use disposition, state-family field, admissible use, or remaining reader move.

The bounded complete result is the shortest result that fully recovers the kind under repair and remaining reader move. Shortest is not lowest effort: every live FPF-governed use receives a by-value disposition, and not triggered or ordinary prose must be stated as such with the checked span.

  • local rewrite for a one-sentence local ambiguity;
  • compact repair note or row when one precision-restoration pattern is needed;
  • governing-pattern application when the FPF kind under repair, relation, claim-use, source-use disposition, or admissible-use boundary is already recoverable;
  • full restoration check only when several claim being made or admissible-use cases, source-currentness relation, cross-pattern authority, or downstream reliance remain live;
  • fail-closed non-use when recovery is not possible.

After kind and governing pattern recovery, state the remaining admissible reader move: what the reader may now do, why the distinction matters, or which FPF pattern now carries the claim being made. If the repaired wording is type-correct but inert, the repair is incomplete.

Value-substitution check. A wording repair also fails when it optimizes lexical purity while making the working text worse: less readable for its declared reader, less affordable to apply, less semantically composable with neighbors, less clear about the primary EntityOfConcern, relation record, or claim record, or less action-guiding. In that case, narrow the repair, keep ordinary wording with an recovery note with recovered kind and use, use the direct governing pattern, or leave the issue blocking by value. Do not trade real kind, relation, source-use, or admissible-use recovery for smooth prose; this check prevents precision-restoration theatre, not ontology repair.

Tool-assisted trigger inventories may help find candidate spans, but they cannot close ontological precision repair. Closure remains recovered kind, recovered relation or substrate, admissible use, non-admissible overread, and remaining reader move by value.

Replacement-candidate closure. A repair that replaces one trigger word with another word or phrase is not closed until the replacement candidate itself passes the same E.10 trigger scan. If the candidate is another umbrella word, quasi-scale, process metaphor, role-free deontic word, or untyped head, recover the kind named by value, relation, admissible use, and governing pattern, send a durable naming case to F.18, or fail closed. A bounded repair may therefore require repeated E.10 passes until the candidate wording reaches a stable closure point: ordinary wording with no FPF-governed use, local repair with recovered kind and use, governing-pattern application, F.18 durable-name result, controlled precision-reduction result, or explicit blocker. Do not accept a smoother synonym as repair evidence.

Wording-Use Trigger Check Registry

E.10:0.2 is the shared trigger scan. This section is the check registry for high-pressure wording in FPF-governed text and source prose being unpacked for possible FPF use. It does not create a second all-purpose ontology and does not create domain-pattern outcomes. It selects a closure path: local rewrite, selected precision-restoration realization pattern, governing pattern, controlled precision reduction, F.18 durable-name path, or fail-closed non-use.

The words below are frequent in conformant FPF text and in project texts that deliberately use FPF-governed terms, pattern references, relation names, or conformance claims. Files carrying FPF pattern text are useful search examples, not the boundary of language cleanup: the same rule applies wherever the text under repair is claim-bearing FPF, project guidance that deliberately uses FPF-governed terms, pattern references, relation names, or conformance claims, or source prose being unpacked for possible FPF use. They are not banned words. They are words that must trigger kind recovery when they carry ontology, authority, evidence, or admissibility claim. The table gives alternatives to recover from; it must not be copied as a group kind. The chosen result may be a local wording repair, a selected restoration pattern or governing-pattern application, controlled precision reduction, or an explicit not-triggered disposition.

Trigger wordsRecovery choices; write the selected kind, relation record, relation phrase, tuple-like record, or not-triggered disposition before useMust not mean
case, scenario, example, pilot, anti-caseworked case, recognition case, pilot case, negative control, project situation, evidence case, comparison case, or source exampleproof, evidence, universal pattern, accepted DRR, source basis, or decision by itself
basissource basis, decision basis, evidence basis, comparison basis, threshold basis, grounding basis, admissibility basis, or authority basisgeneric reason, untyped support, or "whatever the text relies on"
force, load, bearing, claim force, claim-force-bearing, force-bearing, claim-bearing, relation force, qualifier force, support force, or close compoundsclaim being made or admissible-use boundary, relation-bearing use, support-like interpretation under A.6.P, qualifier claim, action-guidance use whose governing pattern is named, evidence requirement, assurance use, gate use, work use, decision use, release use, admissibility use, or a conventional pattern-language Forces section entry naming a tension that shapes the patternunstated strength scale, hidden authority, unnamed evidence weight, unnamed importance, process load, generic pressure, or proof that a wording repair closed
context, scope, framebounded context, project operational context, review context packet, source context, reference frame, viewpoint frame, or claim scopeworld, situation, authority, authority-reference status, or hidden qualifier
state, status, posture, readiness, stance, currentness, or close state-family compoundsstate-like claim over a named bearer, state frame or governing pattern, value/classification, admissible use, non-admissible overread, and reopen condition; apply A.19.SPR when hiddenmaturity adjective, authority, gate passage, release permission, evidence, assurance, source authority, work completion, or process state by appearance
claim, claim content, claim referentclaim node or claim content in a claim-bearing episteme, claim-bearing publication, admissibility target, EntityOfConcern, or referent relationsentence, opinion, text fragment, document with named source-basis, evidence-basis, architecture-basis, or review-basis role, or whole publication unit
evidence, witness, ground, proofevidence record or evidence path, witness, grounding relation, source pin, observation, validation result, or assurance argument componentauthority, approval, gate, engineering justification, or truth by label
authority, permission, approval, commitment, obligationrole assignment, speech act, commitment record, authority relation, gate record, decision record, or policy claimvisible label, author confidence, reviewer praise, explanation, or provenance mark
profile, harness, catalog, registry, index, mapprofile with named source-basis/evidence-basis/architecture-basis/review-basis role, review harness, entry index, registry record, source-reference map with a named map kind, navigation index, catalog publication, benchmark harness, publication form, companion publication, publication-companion relation, or governing record named by valuegoverning FPF pattern, governing source, ontology, method, or release decision unless named by value
entry, front door, corridor, routenavigation aid, recognition entry, navigation-bearing publication, corridor overview, or movement, control, and temporal relationgoverning pattern body, mandatory process sequence, release readiness, or proof that the target publication or target record is complete
same, parity, identity, equivalence, mirrorsame EntityOfConcern, semantic equivalence, bridge relation, version identity, carrier mirror relation, or file mirror relationsimilarity, substitutability, no-loss transform, source equality, or authority equality by wording resemblance
file, path, host, packet, bundle, packagecarrier path, file carrying FPF pattern text, review-facing target packet, review-facing context packet, package-form decision, or transport bundleepisteme, publication form, pattern body, review result, authoritySourceRef target, governing FPF pattern, or authority-reference relation
quality, characteristic, metric, indicator, scoreU.Characteristic, quality term, Q-bundle, scale, indicator, observed value, benchmark, or evaluation recordvague praise, scalar truth, success proof, or replacement for the named characteristic space
slot, field, row, label, badge, markschema slot, relation slot, table row, publication label, provenance mark, status badge, or cuekind, evidence, authority, gate passage, or proof of currentness
EntityOfConcern, EntityOfInterest, EoI, EoIClass, describedEntity, DescribedEntityRef, primary described entity, or EntityOfConcern-like headsEntityOfConcern, EntityOfConcern reference, EntityOfConcern class constraint, publication-unit primary entity of concern, source-side wording translated to the adopted EntityOfConcern family, ordinary topic or subject, or project-side kind/reference pairuniversal object, second C.2.1 slot family, relation-valued bucket, free publication-unit field, authoring target, carrier, or reader interest

Lexical Trigger Rewrite Rules

EntityOfConcern, primary entity of concern, and local topic wording

Do not replace every topic-like or object-like phrase with EntityOfConcern. Classify the sentence first.

If local wording meant...Rewrite as...
the EntityOfConcern named by a claim-bearing episteme or episteme-lane U.ViewEntityOfConcern, EntityOfConcernRef, or entityOfConcernRef under C.2.1
the admissible class constraint on EntityOfConcern slot valuesEntityOfConcernClass only where an episteme slot or EntityOfConcern-preserving law is live
the primary entity of concern for one bounded PublicationUnitpublicationUnitPrimaryEntityOfConcern when the unit carries or exposes a claim-bearing episteme or episteme-lane U.View; otherwise non-claim-bearing kind or reference named by value, or plain topic, subject only when no normative slot is live
wording such as describedEntity, DescribedEntityRef, primary described entity, EntityOfInterest, or EoIClassrecover the EntityOfConcern-family use named by value, publication-unit primary-EoC use, or local FPF kind; rewrite to EntityOfConcernSlot, entityOfConcernRef, EntityOfConcernRef, EntityOfConcernChangeMode, EntityOfConcernClass, publicationUnitPrimaryEntityOfConcern, or the local FPF kind named by value before FPF-governed use; if no use can be recovered by value, keep the old wording only as quoted source or trigger wording and block reliance
a review targetreview target, review-facing target packet named by value, FPF pattern, pattern section, or file-carrier set only when the file-carrier interpretation is live
a local table or paragraph topic with no claim-bearing slottopic, subject, or direct noun
an FPF-side pattern, pattern section, accepted DRR, FPF publication, FPF view, document with named source-basis, evidence-basis, architecture-basis, or review-basis role, or companion or projection material being improvedgoverning FPF pattern, pattern section, accepted DRR, FPF publication, FPF view, document with named source-basis, evidence-basis, architecture-basis, or review-basis role, or companion or projection material
a project-side episteme, publication, record, carrier, or activity under workproject episteme, view, or publication named by value, A.10 evidence path, typed evidence record, A.20 constraint or adjudication decision record, A.21 GateDecision, A.21 DecisionLogRef, B.3 assurance or engineering-justification record, typed status record whose FPF status pattern is named, A.2.8 U.Commitment, C.11 ChoiceResult, C.11 decision record, A.6.A action invitation, A.15.1 dated U.Work occurrence, A.15 U.WorkPlan, U.Method, U.MethodDescription, carrier relation, or front-end relation

Required check:

EntityOfConcern rewrite:
  sentence under repair:
  claim-bearing episteme or episteme-lane view live? yes or no
  EntityOfConcern, grounding, ClaimGraph, viewpoint slots triggered:
  PublicationUnit primary entity of concern, if any:
  review-target interpretation, process-description interpretation, source-basis-document interpretation, if any:
  source-migration wording retained? yes/no and why:
  chosen replacement:
  distinction preserved:
  remaining admissible reader move:
publication-unit wording that implies authoring or interpretation work

When a phrase makes the bounded unit sound like authoring work or interpretation work, split the sentence by kind under repair.

If local wording meant...Rewrite as...
bounded human-inspected unit inside a publicationPublicationUnit
the act of writing or editingauthoring work, editing work, or U.Work, U.WorkPlan, U.MethodDescription where the corresponding claim is being made
a pattern body or sectiongoverning pattern body, pattern section, or PublicationUnit of that pattern
a file or rendered mediumcarrier, front-end, rendering, or document with named source-basis, evidence-basis, architecture-basis, or review-basis role
a publication formpublication form
a generic publication facegeneric publication face, or U.View only when the governing pattern makes that relation live
a declared MVPK facedeclared MVPK face, and U.EpistemeView only under MVPK constraints
a claim-bearing episteme or episteme species named by valueU.Episteme, U.EpistemePublication, episteme-lane U.View with explicit episteme tether, or episteme species named by value

Do not make a permanent technical modifier by joining authoring, interpretation, and unit-boundary concerns. That mix hides whether the sentence is about a publication unit, authoring work, reader inspection, or a carried claim.

content

Do not use content as a governing head. Split it into:

  • claim-bearing episteme content;
  • publication-unit text;
  • publication form;
  • generic publication face;
  • declared MVPK face;
  • carrier data;
  • record payload;
  • pattern section;
  • source-basis excerpt;
  • review target.

Plain explanatory prose may use content only when the sentence does not carry ontology, authority, or admissibility.

publication

Every FPF-governed publication sentence must say which publication construction is live:

  • act or occurrence of publishing, or publishing work;
  • U.EpistemePublication;
  • publication form;
  • generic publication face;
  • declared MVPK face;
  • PublicationUnit;
  • carrier or rendering;
  • document with named source-basis, evidence-basis, architecture-basis, or review-basis role;
  • external-standard publication;
  • project record publication.

If the sentence says a publication "supports", "authorizes", "proves", "permits", or "makes admissible" something, split the basis: fill relationClaimSlice when a relation claim is live, fill admissibleUse when a boundary-use claim is live, and fill projectSideFPFRef when project-side records, evidence paths, gate decisions, constraint or adjudication decisions, assurance records, work, action invitations, speech acts, commitments, methods, or carriers are live. If either side is not triggered, say so explicitly rather than filling it with generic support.

surface, view, face

Do not treat these as synonyms.

WordFirst split
viewU.View, U.EpistemeView, reader viewpoint, UI view, declared-substrate interpretive view, or review view
facegeneric publication face, declared MVPK face, UI face, or public-facing companion publication
surfaceTreat as trigger wording, not as an accepted Tech head. Recover one of: publication face, publication form, publication unit, carrier, rendering, UI or front-end face, physical or geometric surface, companion publication, companion or projection material, carrier relation, or neighboring pattern object named by value.

If the sentence can survive only because these are blurred, the sentence is not ready.

source, target

These are relation words, not final kinds.

Split source into source U.Episteme, source U.EpistemePublication, U.View over a source U.Episteme, document with named source-basis, evidence-basis, architecture-basis, or review-basis role, A.10 evidence path, authority-reference relation, named FPF pattern cited as source, file carrier, source frame, source context, relation slot on the source side of a named relation, or project-side FPF kind and reference named by value.

Split target into EntityOfConcern, target U.Episteme, review target, governing FPF pattern, project target, work target, target publication form, project-side FPF kind and reference named by value, target frame, target context, or relation slot on the target side of a named relation.

Generic object and target are not final recovered kinds. Keep them only when the sentence is explicitly declaring a variable slot, such as ObjectKindUnderImprovement, ObjectVersionUnderImprovement, ObjectVersionUnderQualityEvaluation, review target, or one named relation endpoint whose endpoint kind is supplied by value nearby. When the kind named by value is known, write the kind named by value: FPF pattern version, DRR, FPF corpus slice, publication form, PublicationUnit, file carrier, system carrier, declared transduction result, candidate proposal, evidence path, gate decision, work plan, method description, object-under-improvement evaluation, or another named FPF kind.

Do not recover an FPF pattern, publication form, PublicationUnit, pattern body, or view as a carrier. Use carrier only for the system, medium, file, rendering, or transport object that bears or renders a publication or symbol. If the text means the FPF pattern publication form, write FPF pattern publication form; if it means the file or rendered medium, write file carrier, system carrier, rendering, or another carrier kind named by value.

Common repair examples:

Problem wordingRequired recovery
target version in improvement proseObjectVersionUnderImprovement or ObjectVersionUnderQualityEvaluation, unless target is a source-side quote
pattern carrierFPF pattern publication form when the pattern is the publication form; file carrier or rendering only when the system-side bearer is live
object evaluation when the evaluated kind is knownobject-under-improvement evaluation name, such as PatternQualityQBundle, DRRDecisionAdequacyEvaluationCharacteristicSpace, FPFPillarAdequacyEvaluationCharacteristicSpace, or declared local evaluation
thing, object, target, artifact, or material as final headFPF kind named by value, project-side FPF kind, or blocker

Do not publish "source and target" if the selected relation needs the actual FPF kind.

artifact, material, output, deliverable

These are high-risk umbrella words. Before accepting them, test publication-related and record-related interpretations first:

  • U.Episteme;
  • U.View, U.EpistemeView;
  • publication form;
  • generic publication face;
  • declared MVPK face;
  • PublicationUnit;
  • carrier, front-end, or rendering;
  • project-side FPF kind and reference named by value;
  • work result, work-occurrence output, or project record named by the governing FPF pattern;
  • evidence carrier;
  • document with named source-basis, evidence-basis, architecture-basis, or review-basis role;
  • review target.

If none fits, record the candidate missing kind in architecture first; do not invent it inside pattern prose.

record

Use record only when the governing FPF pattern or project practice names the record kind and relation. The nearby wording must say which FPF kind the record instantiates or records, for example:

  • A.10 evidence path or evidence record for a named claim;
  • A.21 GateDecision or DecisionLogRef;
  • A.20 constraint or adjudication decision record;
  • C.11 ChoiceResult or decision record;
  • A.15 U.WorkPlan, A.15.1 dated U.Work occurrence, or other named work record;
  • A.2.8 U.Commitment or A.2.9 SpeechAct publication;
  • U.RoleAssignment or status-register entry under the named governing pattern;
  • E.19 review run record or another named review record whose review target and review relation are explicit;
  • process run record in process documents.

Do not let record mean "any file that remembers something", "the missing source", or "the thing to create when support is absent". If required support is absent, create a prospective repair request, future decision request, prospective work-plan entry, or explicit source-gap note; it does not backdate support.

model, diagram, screen, dashboard, table, note, memo, summary, explanation

These are recognition examples, not governing kinds. Classify each occurrence as one of:

  • episteme or episteme publication;
  • U.View, U.EpistemeView;
  • publication form;
  • generic publication face;
  • declared MVPK face;
  • PublicationUnit;
  • carrier, front-end, or rendering;
  • project-side FPF kind and reference named by value;
  • explanation and source-finding relation under E.17.EFP;
  • evidence, currentness, and provenance relation under A.10;
  • gate-bearing claim or effect under A.20 or A.21;
  • assurance and engineering-justification record under B.3;
  • work and reliance source-restoration relation under A.15.4.

Keep the ordinary example word only after the governing kind is visible nearby.

reader, reviewer, author, operator

Do not use people-position words as hidden kind names.

Use:

  • working reader or intended practitioner for ordinary usability;
  • engineer-manager when the FPF use case is the engineer-manager applying the pattern in work;
  • reviewer only for a participant in a named review relation; use review process, review gate, or review target for the process, gate, or object;
  • author only for authoring or editing work;
  • operator only for an actual U.Role, operator position or process operator in the selected context.

If a text says "reader-facing" or "review-facing", it must also name what is facing that person: generic publication face, declared MVPK face, packet, document with named source-basis, evidence-basis, architecture-basis, or review-basis role, PublicationUnit, carrier, or UI or front-end.

owner, home, host, locus

These are not interchangeable.

owner may be kept as architecture-discussion shorthand only when the kind under repair is an explicit responsibility assignment or stewardship assignment. It is not an admissible substitute for pattern, DRR, U.Episteme, U.EpistemePublication, publication unit, file carrier, or project record.

Split into:

  • governing FPF pattern relation or authority-reference relation;
  • named governing source set;
  • explicit source-maintenance role assignment;
  • file carrying FPF pattern text;
  • file carrier;
  • publication unit;
  • process-control role assignment;
  • role assignment;
  • evidence record or evidence source;
  • governing FPF pattern or project target;
  • support root.

Never use owner to avoid deciding whether the sentence is about a governing FPF pattern, authority-reference relation, file carrier, responsibility assignment, or process control.

route, branch, handoff, path, trajectory, move, flow

Recover the movement, control, and temporal relation set before using these words:

  • A.16 local move;
  • A.16.0 trajectory account;
  • A.19, C.2.2a position in characteristic space or state space;
  • B.2.5 control relation, control-layer relation;
  • process handoff;
  • selector relation or selection mechanism;
  • work transfer;
  • E.18 path publication;
  • A.6.3, A.6.4 episteme morphism or retargeting.

If no movement, control, and temporal relation is live, keep the word ordinary and non-authorizing.

use, supported use, action, effect

Split the word before accepting it:

  • applying an FPF pattern to a problem situation;
  • interpreting or using a publication, view, record, cue, or carrier;
  • relying on a named project episteme, a named source-basis document, or a project-side FPF kind and reference named by value for a named claim or effect;
  • admissible act, work, or claim under a named FPF pattern, A.6.P relation claim, relation phrase, or project-side FPF kind and reference named by value;
  • non-admissible act, work, or claim requiring one other named value: FPF pattern, A.6.P relation claim, relation phrase, project-side FPF kind and reference named by value, C.11 ChoiceResult, C.11 decision record, A.6.A action invitation, A.15 U.WorkPlan, A.15.1 dated U.Work occurrence, U.Method, U.MethodDescription, A.20 constraint or adjudication decision record, A.21 GateDecision, A.21 DecisionLogRef, A.10 evidence path, typed evidence record, B.3 assurance or engineering-justification record, typed status record whose FPF status pattern is named, carrier relation, or front-end relation;
  • planned work;
  • actual U.Work;
  • evidence of interpretation or effect;
  • gate or admission decision.

Do not let supported use become a generic capability of a document. The FPF-governed wording names the admissibleUse target named by value and non-admissible stronger or adjacent use, relationClaimSlice when a relation claim is live, and projectSideFPFRef when a project-side FPF kind and reference named by value is live. If the sentence says "supported", it must name the admissibleUse target named by value and non-admissible stronger or adjacent use, relationClaimSlice when a relation claim is live, and projectSideFPFRef when a project-side FPF kind and reference named by value is live. Do not satisfy the rule by naming only a project record, evidence record, gate record, assurance record, engineering-justification record, only an FPF pattern, or one mixed project-side entry when several A.7 or A.15 role, method, work-plan, and actual-work kinds are live.

sign, concept, denotat, and school-semiotic labels

Do not import the school-semiotic triad as architecture ontology. When a source or review text says sign, signifier, signified, concept, denotat, representamen, interpretant, or sign vehicle, apply the composite recovery order before the term appears in FPF-facing prose.

Possible recoveries include:

  • U.Episteme or episteme species named by value;
  • selected EntityOfConcern, grounding, reference-plane relation;
  • U.View, U.EpistemeView;
  • publication form, generic publication face, declared MVPK face, or PublicationUnit;
  • carrier, front-end, or rendering;
  • cue, displayed wording, mark, status display, credential display, provenance mark, signature evidence;
  • evidence record, gate record, work-state record, commitment record, role-assignment record, or another project-side FPF kind and reference named by value;
  • FPF pattern, pattern section, accepted DRR, FPF publication, or FPF view when the object is on the FPF side.

Use concept only where current FPF already has the relevant concept-set, UTS, local-meaning, or Part F machinery live. Otherwise recover the episteme slot, relation, or typed record named by value.

pattern, generic FPF-side object wording, locus, row, target

Pattern is not a free synonym for regularity. If the intended object is an FPF pattern, write FPF pattern or name the governing pattern. If it is not an FPF pattern, do not write recovered FPF construction as the final value. Choose one recovered value by sentence function: episteme, view, publication, publication form, generic publication face, declared MVPK face, PublicationUnit, carrier relation, front-end relation, project-side FPF kind and reference named by value, document with named source-basis, evidence-basis, architecture-basis, or review-basis role, review target, relation record, relation phrase, C.11 ChoiceResult, C.11 decision record, A.6.A action invitation, A.15 U.WorkPlan, A.15.1 dated U.Work occurrence, U.Method, U.MethodDescription, A.20 constraint or adjudication decision record, A.21 GateDecision, A.21 DecisionLogRef, A.10 evidence path, typed evidence record, B.3 assurance or engineering-justification record, or typed status record whose FPF status pattern is named.

Avoid generic FPF-side object wording, generic named-target wording, locus, row, and host when they hide kind. Use them only when the kind is literally a table row, document with named source-basis role, file carrying FPF pattern text, or review target and the sentence does not need a narrower FPF kind. For FPF-facing wording that carries a claim being made, relation, admissible use, or reader move, these are candidate recoveries, not a group kind: governing FPF pattern, pattern section, accepted DRR, FPF publication, FPF view, typed record, relation record, or relation phrase. Choose one by sentence function.

Union-field unpacking under A.6.P

Do not write authority-bearing FPF pattern, authority-bearing FPF row, FPF row named by value, selected FPF pattern, record, or relation, governing FPF relation, or required project record or action as final fields.

When one of these union-fields appears, make the A.6.P choice explicit:

  • if the sentence is making a relation claim, recover the RelationKind, endpoints, slots, qualifiers, scope, time, viewpoint, and admissibility target, then express the result as a relation record or relation specification;
  • if the sentence is not making one relation claim, unpack the current context into FPF-side kind, reference, or relation named by value and one project-side FPF kind with its reference, or state that no project-side FPF kind is triggered;
  • if the same unpacking recurs across cases with one stable recovery apparatus, open a light A.6.P specialization candidate rather than minting a vocabulary-wide replacement field.

This unpacking is mandatory when a publication, display, cue, explanation, dashboard tile, schema, signature, badge, or generated output is being read as evidence, gate passage, work, permission, approval, commitment, release, safety proof, assurance, or engineering justification.

Do not fill one project-side slot with whichever nearby FPF kind is easiest to name. A project publication or record is a description-side item or record-side item; A.15.1 dated U.Work occurrence, A.6.A action invitation, A.2.9 SpeechActRef, A.2.8 U.Commitment, and U.Method and U.MethodDescription belong to different FPF kinds.

Heterogeneous kind lists

Do not repair a heterogeneous list by giving it one broader umbrella name. When a sentence lists unlike candidates such as pattern, DRR, publication, U.View, carrier relation, front-end relation, project-side FPF kind and reference named by value, C.11 ChoiceResult, C.11 decision record, A.6.A action invitation, A.15 U.WorkPlan, A.15.1 dated U.Work occurrence, U.Method, U.MethodDescription, A.20 constraint or adjudication decision record, A.21 GateDecision, A.21 DecisionLogRef, A.10 evidence path, typed evidence record, B.3 assurance or engineering-justification record, or typed status record whose FPF status pattern is named, do not promote the row to a new kind. Classify the list as one of:

  • one kind under repair selected at bounded complete generality;
  • a relation set with typed slots;
  • a tuple-like record;
  • several alternative cases;
  • an indicator of failed ontology.

If the list is a relation set, name the slots. If it is a tuple-like record, name the tuple object and its slot semantics. If it is an alternative-case set, split the cases. If it is failed ontology, return to architecture before pattern or DRR prose depends on the list.

strong, stronger, weak, weaker, support

Do not use strength metaphors unless a named FPF scale, evidence class, threshold, or characteristic space is live.

Preferred rewrites:

  • stronger claim -> wider claim scope, higher evidence requirement, gate or admission threshold, claim requiring world-contact evidence or authority relation, authority claim, or named evidence-support class;
  • weaker claim -> narrower claim scope, lower evidence-support class, bounded admissible act, work, or claim, source-loss mode under A.6.3.CSC when a source-to-rendering loss is live, coarsened rendering, or explicit abstain or reopen condition;
  • support -> one selected support-like interpretation under A.6.P, not a more polished synonym. If the selected interpretation is base, anchor, or basedness, apply A.6.6 and state dependent, base, baseRelation, scope, live Γ_time, live witnesses, admissibleUse, and nonAdmissibleUse. For FPF-governed support, first choose the support-like interpretation:
  • source-description relation: a source episteme, publication, view, model, graph, trace, generated representation, or document describes, exposes, renders, cites, or makes inspectable one claim-bearing item;
  • EntityOfConcern or grounding-holon grounding: the claim-bearing episteme, view, representation, or pattern application is grounded in its EntityOfConcern, local world contact, observation setting, EntityOfConcernSlot, or GroundingHolonSlot;
  • base, anchor, or basedness relation: the phrase means relative-to, based-on, anchored-in, base change, or scoped grounding as a base relation; use A.6.6 support wording selection and rewrite as baseRelation(dependent, base) or SWBD, not as a generic SupportBasis, SupportRelation, or SupportRecord;
  • evidence or witness support: an evidence role, evidence path, witness relation, witness carrier, observation, test, or observation record or test record bears on a claim;
  • assurance or engineering-justification support: an assurance argument, trust calculus, safety case, or engineering-justification claim is live;
  • causal-use relation or evidence relation: a causal-use question, rung, estimand, CausalEvidenceSupportBasis, CausalUseSupportVerdict, supported use, and unsupported use are live;
  • mathematical-lens use or lens-use admissibility: a mathematical lens, mapping, similarity, or formal object makes a bounded claim admissible or exposes preserved structure and lost structure;
  • characteristic, measurement, threshold, or comparison basis: a characteristic, metric, scale, benchmark, threshold, or comparison basis is being used;
  • admissible-use or boundary-use basis: the sentence says what use, act, claim, publication use, or reliance is admissible;
  • work, enablement, prerequisite, resource, or operational help: one thing helps, prepares, routes, resources, enables, or makes work easier without evidence, authority, truth, or admissibility claim;
  • publication companion, entry, navigation, or reader help: a file, section, index, map, review packet, support document, or companion helps readers find, inspect, compare, or review another item.

Support-headed names such as SupportRecord, SupportSource, SupportLine, SupportForm, a support phrase that hides a state-family claim, SupportSection, SupportMaterial, support basis, support relation, support view, and supported use are diagnostic triggers; they are conformant only when rewritten to a governing FPF record named by value, field, publication function, state-family value under A.19.SPR only when the selected claim is actually a state-family claim, relation, admissible-use boundary, or, for the A.19 case, DeclaredSubstrateInterpretiveView under A.19.DECLARED-SUBSTRATE-INTERPRETIVE-VIEW. If the phrase is base-dependence, A.6.6 is the governing pattern and the text must expose dependent, base, baseRelation, scope, live Γ_time, live witnesses, admissibleUse, and nonAdmissibleUse. Otherwise rewrite the head to the selected interpretation: source-description relation, EntityOfConcern grounding, grounding-holon relation, evidence path, source-use relation, source-currentness claim, source adoption/adaptation/rejection decision, source-description relation, relation record, admissible-use boundary, assurance claim, C.28 causal-use relation or causal-use verdict, C.29 lens-use output, C.16 characteristic construction, measure relation, or comparability relation, bridge/comparison card, work enablement relation, publication companion, or ordinary reader help.

A support-headed phrase selected by an accepted DRR, pattern draft, table heading, schema field, coordinate name, or future drafting vocabulary is already durable enough to trigger F.18 unless the text explicitly marks it as source-only, quote-only, or rejected. Do not accept subject to F.18 later as E.10 closure when the phrase is already being used to guide authoring, review, landing, or reusable FPF wording. Either complete the naming decision now, replace the head with the selected interpretation named by value, or leave the naming issue blocking by value.

If the sentence cannot name the scale, evidence class, threshold, relation, source-loss mode, EntityOfConcern, grounding holon, base relation, admissible-use target, or support-like interpretation named by value, it is not ready for architecture or pattern prose. A.6.3.CSC governs FPF-governed source-loss-mode governance; A.6.P governs support-like interpretation discrimination and relation precision restoration; C.2.P requires the wording to recover the governing pattern and mode.

Applying patterns versus procedural calls

FPF patterns are applied in problem situations. They are not called, invoked, routed through, executed as procedure steps, or chained as an imperative program. When another FPF pattern is live, the text names the FPF pattern application and the ontology, conformance claim, or conformance section named by value being applied; it does not describe a route, exit, or handoff as if the pattern controlled a sequence.

Use apply pattern, use the pattern guidance, the pattern governs this problem situation, or the case falls under this pattern when the FPF side is live. Do not use project action as a final class. For project-side activity, choose exactly one kind under repair for the sentence: U.Method; U.MethodDescription; U.Mechanism; A.15 U.WorkPlan; A.15.1 dated U.Work occurrence; work-result record or result-measurement record; C.11 ChoiceResult; C.11 decision record; A.6.A action invitation; A.20 constraint or adjudication decision record; A.21 GateDecision; A.21 DecisionLogRef; A.10 evidence path; typed evidence record; B.3 assurance or engineering-justification record; typed status record whose FPF status pattern is named; carrier relation; front-end relation; or another accepted project-side FPF kind. Use route, path, branch, handoff, trajectory, move, or flow only after the movement, control, and temporal relation set has named the FPF kind under repair.

FPF-side and project-side episteme and publication contexts

Semioarchitecture often talks about two different described contexts:

  • FPF-side episteme and publication context: FPF as episteme, FPF patterns, pattern sections, DRRs, FPF publications, FPF views, support documents and documents with named source-basis, evidence-basis, architecture-basis, or review-basis roles, and review targets;
  • project-side episteme and publication context: the engineer-manager's project epistemes, publications, views, records, carriers, cues, evidence records, A.20 constraint or adjudication decision records, A.21 gate decisions, A.21 decision-log refs, B.3 assurance or engineering-justification records, commitments, A.15.1 dated U.Work occurrences, C.11 ChoiceResult values, C.11 decision records, and A.6.A action invitations.

Do not blur them with source, artifact, object, material, target, pattern, or broad semiosis. If both contexts are live, split the sentence into relationClaimSlice when a relation claim is live, admissibleUse when a boundary-use claim is live, and projectSideFPFRef when a project-side FPF kind and reference named by value are live. If one context is not live, state not triggered rather than leaving a placeholder.

decision, action, work, method, plan

Do not let action cover every project-side event. Split:

  • decision-making and decision records under C.11 when a decision is live;
  • role, method, and work-plan and actual-work alignment under A.15;
  • work occurrence, work plan, work record, launch value or finalization value, or gate record under the relevant work patterns or gate patterns;
  • action invitation under A.6.A when the representation invites an action without itself becoming authority;
  • A.15.1 dated U.Work occurrence when the live A.15 object is work; A.2.9 SpeechActRef when the live act is a communicative act; A.2.8 U.Commitment when the act institutes a commitment.

P2W language from TGA is not a generic source-to-work slogan. Use it only when the chain from principles, theories, and signatures through method choice, work planning, work execution, result measurement, and cycle return is actually being made.

Whole-corpus trigger use

When a whole-corpus cleanup is selected, use this pattern's trigger guide over claim-bearing FPF text and project text that deliberately uses FPF-governed terms, pattern references, relation names, or conformance claims.

Do not do a global string replacement. Classify each unclear term occurrence by the bounded complete rewrite mode and preserve accepted FPF names unless a separate accepted naming decision changes them.

case, scenario, example, pilot, anti-case

These words are useful for recognition and testing, but they often hide whether the text is talking about a project situation, evidence, a worked slice, a negative control, or a decision basis.

Split before use:

  • working problem situation;
  • worked case or example;
  • pilot case;
  • anti-case, negative control;
  • evidence case;
  • comparison case;
  • source example;
  • benchmark case;
  • candidate corpus example.

A case can illustrate or test a pattern. It does not by itself become evidence, a pattern, a DRR, a source basis, or an authority-reference relation. If the case is being used to justify a claim-bearing text change, choose and name each EntityOfConcern under repair or relation separately: evidence record or evidence path, decision basis or decision record, authority relation, relation to a governing FPF pattern, or relation to an accepted DRR.

basis, context, scope, frame

These are boundary, context, relation, and scope words. They must not stand as final kinds.

Split:

  • source basis;
  • decision basis;
  • evidence basis;
  • comparison basis;
  • threshold basis;
  • grounding basis;
  • admissibility basis;
  • review context packet;
  • bounded context;
  • claim scope;
  • viewpoint frame or reference frame.

If a basis changes what may be done, fill admissibleUse; fill relationClaimSlice only when a relation claim is live, and fill projectSideFPFRef when a project-side FPF kind and reference named by value are live. If context changes the EntityOfConcern, apply the EntityOfConcern, grounding, and reference-plane checks before any bridge, parity, or identity claim.

translation and multilingual heads

A translated term is not automatically the same FPF head. A translation may preserve reader access while losing kind precision, admissible use, source-use boundary, or source-description relation. A bilingual alias is not a Bridge by itself and does not create equivalence, substitution, UTS admission, or cross-context naming relation.

When translated wording has FPF-governed use, recover the FPF kind named by value, local head, publication construction, source relation, and admissible use before accepting the translation. A translated explanation is a derivative rendering; operative claims need source links and E.17.EFP or A.10 when reliance use is being made. A translated PublicationUnit may preserve form while shifting publicationUnitPrimaryEntityOfConcern or carried publication move; apply E.17.AUD or E.17.AUD.OOTD when that shift is live. Local translated heads may use E.17.AUD.LHR or C.2.P without full F.18 unless durable cross-context naming, UTS row, Core-facing term, or reusable FPF head is intended.

state, status, posture, readiness

Do not let state-family wording become a maturity adjective, evidence claim, assurance result, gate passage, release permission, source authority, work completion, or process state by appearance.

When a state-family word has FPF-governed use, apply A.19.SPR unless the governing pattern and local state-like field are already recoverable by value.

Minimum closure:

State-family wording:
  triggerSpan:
  bearerRef:
  stateFrameOrGoverningPatternRef:
  stateValueOrClassification:
  criteriaOrEvidenceRef?:
  admissibleUse:
  nonAdmissibleOverread:
  validityWindowOrReopenCondition?:
  finalWordingOrBlocker:

Typical governing patterns:

If the wording means...Use...
position in a declared CharacteristicSpace[A.19](/generated/patterns/A.19), with [C.16.P](/generated/patterns/C.16.P) first if characteristic, scale, coordinate, score, or threshold construction is hidden
reusable state-transition or dynamics law[A.3.3](/generated/patterns/A.3.3)
language-state position for an episteme, publication, or wording-use object[C.2.P](/generated/patterns/C.2.P) where source-publication recovery is needed, then [C.2.2a](/generated/patterns/C.2.2a) and [A.16](/generated/patterns/A.16).*
source use, source currentness, source publication, or source-use disposition[C.2.P](/generated/patterns/C.2.P), [E.17](/generated/patterns/E.17), [E.9.DA](/generated/patterns/E.9.DA), or the source-use field named by value
evidence path state, evidence relation, or reliance disposition[A.10](/generated/patterns/A.10)
assurance result, assurance claim, or assurance input[B.3](/generated/patterns/B.3)
local CV, constraint, adjudication, gate, or release readiness[A.20](/generated/patterns/A.20), [A.21](/generated/patterns/A.21), or the release pattern governing the claim or gate pattern
temporal claim status or temporal-use classification[C.27](/generated/patterns/C.27), retaining dynClaimPosture only as a declared C.27 field
mathematical-lens use admissibility[C.29](/generated/patterns/C.29), retaining LensUseAdmissibilityValue only as a declared C.29 field
DRR decision-adequacy result or source-use classification[E.9.DA](/generated/patterns/E.9.DA)
pattern-quality result or quality-evaluation status[E.21](/generated/patterns/E.21); [E.19](/generated/patterns/E.19) remains review and admission profile
landing, monolith, review, queue, handoff, transport, or current campaign statethe process file or release carrier named by value, not live pattern prose unless that state is the pattern's own object

A retained ...Posture, ...Status, ...Readiness, or ...State field must declare field name, bearer kind, governing pattern, value set or classification source, admissible use, non-admissible overread, and reopen/change condition when applicable. If those are missing, rewrite to the governing-pattern phrase or record, mark quote-only/reduced-use, or leave the rewrite blocked.

Do not replace support with a support phrase that hides a state-family claim, a source-use bucket, a basis-headed bucket, or another state-family substitute. Apply the support-like interpretation, base-relation, source-use, evidence, assurance, lens-use, characteristic, or admissible-use pattern that actually carries the claim.

live, current, active, and status/article overwrap

live, current, active, open, pending, and similar status-like modifiers are trigger wording when they attach to pattern, record, object, field, operation, route, locus, move, text, claim, question, use, or relation without saying what state, time window, use-position, or claim role the modifier adds.

First recover whether the modifier expresses a real FPF value:

  • If it means source currentness, state, status, readiness, publication-use disposition, quality result, admission state, or campaign/process state, apply A.19.SPR, C.2.P, E.9.DA, E.21, E.19, the release or process carrier named by value, or the governing pattern for that value.
  • If it means a claim, question, use, or relation is currently asserted, relied on, or action-bearing in the described situation, keep the modifier only when the sentence also names the claim named by value, relation, admissible use, and governing pattern or says why ordinary prose is enough.
  • If it only points to "the thing under discussion", treat it as phrase-level apparatus and apply F.19: write the pattern, pattern of concern, record named by value kind, affected field, operation claim, relation claim, or other object named by value instead of live X.
  • If it is development, review, projection, landing, or current-campaign state about an FPF pattern version, keep it in the process, quality, projection, release, or campaign carrier rather than in the pattern unless that state is the pattern's own primary EntityOfConcern.

Do not close this row by deleting live or replacing it with current, active, at issue, or another status word. Closure is a KindRestorationCheck: the modifier is ordinary prose, an state, currentness, or use-position value named by value, a retained claim/use/relation marker with named admissible use, an F.19 apparatus removal, or a blocker.

claim, evidence, witness, ground, proof

Claim is not a synonym for sentence or prose. Evidence is not a synonym for source, proof, approval, or confidence.

For claim, recover:

  • claim-bearing episteme;
  • claim node, claim content;
  • EntityOfConcern or claim referent;
  • viewpoint and representation scheme when live;
  • admissibility target when the claim is used.

For evidence-like words, recover:

  • evidence record or evidence path;
  • witness or source pin;
  • grounding relation;
  • validation result;
  • assurance argument component;
  • provenance mark only as provenance, not as evidence by itself.

If evidence is being read as engineering justification, gate passage, permission, safety proof, or release confidence, apply the governing FPF pattern or use the project-side FPF kind and reference named by value instead of strengthening the evidence word.

authority, permission, approval, commitment, obligation

These are deontic claims or claims carrying an authority-reference relation, not visual or rhetorical properties.

Recover:

  • role assignment;
  • speech act or issuing act;
  • commitment record;
  • policy claim;
  • authority relation;
  • gate record or decision record;
  • authority-changing decision;
  • delegated permission;
  • contestability, revocation, expiry condition.

Labels, badges, signatures, dashboards, certificates, comments, reviewer praise, and generated explanations may cue authority-looking cases. They do not carry authority unless the authority act, authority record, authority-reference relation, and evidence path are named.

profile, harness, catalog, registry, index, map

These usually point to a review profile, review harness, registry record, catalog publication, navigation index, map, publication form, companion publication, publication-companion relation, or relation between one companion publication and the publication unit or project record it helps readers inspect or use. Choose that kind named by value before writing; do not leave support record as the recovered head unless the named FPF pattern really defines that record kind. Treat one as a governing FPF pattern body, accepted campaign DRR, named current architecture document, or relation to one of them only when the named FPF pattern, accepted DRR, architecture document, relation record, or relation phrase is given by value.

Split:

  • review profile;
  • review harness;
  • source map;
  • navigation index;
  • registry record;
  • catalog publication;
  • benchmark harness;
  • entry aid or discoverability aid;
  • governing pattern body.

If the named companion publication, review profile, review harness, registry record, index, or map mainly helps readers find, compare, test, or review something, keep it as a companion, navigation, or testing aid until a named FPF pattern or accepted DRR records the recurring action-guidance gain by value.

entry, front door, corridor, route

These terms often mix navigation, recognition, movement, and authority.

Split:

  • entry publication or navigation aid;
  • first-use recognition text;
  • navigation-bearing publication;
  • movement, control, and temporal relation;
  • process sequence;
  • corridor overview;
  • governing FPF pattern named by the live problem; if a cluster or relation between patterns is genuinely live, name the cluster phrase or relation phrase named by value and the governing FPF patterns by value.

An entry can make the right pattern easier to find. It does not prove the pattern is sufficient, complete, or ready for gate use.

same, parity, identity, equivalence, mirror

Similarity is not identity. Before accepting same, parity, or equivalence wording, name which relation is being claimed:

  • mirror file in parity with a governing source;
  • same EntityOfConcern;
  • same claim content;
  • semantic equivalence;
  • bridge relation;
  • version identity;
  • file or carrier equality;
  • source-publication identity;
  • no-loss transform.

If the relation is about mirror parity, verify against the governing source or state that the check is not performed. If the relation is semantic, use A.6.3, A.6.4, F.9, or the selected bridge pattern or equivalence pattern rather than relying on matching labels.

file, path, host, packet, bundle, package

These are carrier, transport, or package-form words.

Split:

  • file or carrier;
  • mirror file;
  • file carrying FPF pattern text;
  • document with named source-basis, evidence-basis, architecture-basis, or review-basis role;
  • review-facing target packet;
  • review-facing context packet;
  • release package;
  • pattern package, pattern family, or pattern group under an accepted decision;
  • governing source section.

A packet or bundle can carry a review target by value. It is not automatically the authority-reference status, the target pattern, the accepted review result, or the FPF authoritySourceRef target.

quality, characteristic, metric, indicator, score

Do not let evaluation words float.

Split:

  • U.Characteristic;
  • characteristic space;
  • Q-bundle;
  • E.21 PatternQualityQBundle;
  • scale;
  • indicator;
  • observed value;
  • benchmark result;
  • review finding;
  • decision threshold;
  • qualitative judgment with no scale.

metric is especially risky because FPF often treats it as imprecise shorthand for scale, value, or indicator machinery. If the text says a quality improved, name what changed: characteristic, scale, observed value, threshold, decision consequence, or admissible act, work, or claim. If "quality improved" refers to an FPF pattern version, name whether the change affects an E.21 required coordinate value, status payload, stop condition, bounded non-use, or governing-pattern application.

slot, field, row, label, badge, mark, cue

These words are not kinds by themselves.

Split:

  • episteme slot;
  • relation slot;
  • schema field;
  • table row;
  • row in a pattern body;
  • publication label;
  • provenance mark;
  • status badge;
  • pre-articulation cue;
  • displayed cue;
  • evidence marker.

A label, badge, mark, or cue may trigger review. It does not prove currentness, identity, authority, evidence, gate passage, or release permission unless the source relation named by value and evidence path are named.

Current Scan Reading

For conformant text cleanup and source-expression unpacking, high-risk phrases are not automatically wrong. The shared scan is E.10:0.2; the rows below are episteme-publication-heavy candidate recovery prompts, not a second registry and not group kinds. Choose the recovered value by sentence function before reuse:

  • topic-like or object-like wording: recover episteme slots or non-claim-bearing project kind;
  • publication-unit wording that implies authoring or interpretation work: distinguish U.Episteme, U.EpistemePublication, PublicationUnit, file, source note, review target;
  • content: usually one of claim graph, text span, publication unit, carrier bytes, or document with named source-basis, evidence-basis, architecture-basis, or review-basis role;
  • primary-entity field names: use publicationUnitPrimaryEntityOfConcern when a bounded PublicationUnit carries or exposes a claim-bearing episteme or episteme-lane U.View; otherwise non-claim-bearing kind or reference named by value when no episteme slot is live;
  • surface: keep publication face or publication form or interop publication form only when publication-face kind discipline is named by value; otherwise rewrite to generic publication face, declared MVPK face, publication carrier, interop carrier, UI or front-end face, companion publication, source named by value, evidence, assurance, or relation record, or carrier relation;
  • artifact, material, output, and content: do not let them stay as heads in architecture or pattern prose when they carry ontology or authority;
  • source, target: acceptable only when the recovered source kind, target kind, and any live relation slot are also named;
  • reader, reviewer: safe only when the word really names a usability reader, review participant, or review process; otherwise name the generic publication face, declared MVPK face, packet, or PublicationUnit;
  • pre-FPF sign vocabulary: recover FPF episteme kinds, publication kinds, view kinds, carrier kinds, and record kinds before reuse; do not rebuild FPF episteme and publication ontology on a concept-sign-denotation triad;
  • generic FPF-side object wording, locus, row, host, or target: choose the recovered value named by value: FPF pattern, pattern section, accepted DRR, FPF publication, FPF view, document with named source-basis, evidence-basis, architecture-basis, or review-basis role, file carrier, review target, typed record, relation record, or relation phrase;
  • supported use: replace with the admissibleUse target named by value and non-admissible stronger or adjacent use, relationClaimSlice when a relation claim is live, and projectSideFPFRef when a project-side FPF kind and reference named by value is live;
  • strong, stronger, weak, weaker: replace with scope, evidence class, threshold, gate or admission threshold, source-loss mode under A.6.3.CSC when a source-to-rendering loss is live, coarsened rendering, or explicit abstain or reopen condition;
  • authority-bearing FPF pattern or row: split into governing FPF pattern or pattern section, relationClaimSlice when a relation claim is live, admissibleUse named by value when a boundary-use claim is live, and projectSideFPFRef when a project-side FPF kind and reference named by value are live;
  • route, call, invoke, or procedure-like pattern wording: replace with pattern application or with project-side U.Work occurrence, U.Method, C.11 decision value, or A.6.A action invitation.

High-risk residue classes:

  • pre-FPF sign vocabulary must be restored to FPF kinds by context;
  • FPF-side umbrellas: generic FPF-side object wording, generic named-target wording, locus, row, host, and source must be unpacked into the recovered value named by value, such as FPF pattern, pattern section, DRR, FPF publication, U.View, document with named source-basis, evidence-basis, architecture-basis, or review-basis role, file carrier, relation record, relation phrase, or file-carrier phrase;
  • project-side umbrellas: artifact, material, output, screen, dashboard, credential, badge, and explanation must be unpacked into one recovered value named by value, such as publication, generic publication face, declared MVPK face, publication form, carrier relation, front-end relation, project-side FPF kind and reference named by value, A.10 evidence path, typed evidence record, A.20 constraint or adjudication decision record, A.21 GateDecision, A.21 DecisionLogRef, B.3 assurance or engineering-justification record, typed status record whose FPF status pattern is named, C.11 ChoiceResult, C.11 decision record, A.6.A action invitation, A.15 U.WorkPlan, A.15.1 dated U.Work occurrence, U.Method, U.MethodDescription, work-result record, or result-measurement record;
  • admissibility phrases: supported use, stronger or adjacent use not carried by the current pattern, insufficient evidence relation, and similar formulas must name the admissibleUse target named by value and non-admissible stronger or adjacent use, relationClaimSlice when a relation claim is live, and projectSideFPFRef when a project-side FPF kind and reference named by value is live;
  • pattern-control metaphors: route, call, invoke, exit, path, branch, chooser, and workflow must be checked for declarative pattern application versus real movement, control, and temporal claims.

Trigger Concordance And Closure Mechanism

E.10 is applied to a bounded FPF-facing text object, not only to one remembered example sentence. Before claiming E.10 closure over an accepted DRR, FPF pattern, extracted pattern host, monolith section, review-facing packet, or FPF-facing guidance, run trigger concordance when a high-pressure trigger is FPF-governed across the bounded object.

Do not build a heavy concordance for every ordinary word. Trigger concordance applies when one trigger word or trigger-headed phrase:

  • appears in a selected name, durable reusable name, heading, table column, schema field, coordinate name, status value, or future drafting vocabulary;
  • recurs across the problem frame, decision, selected names, validation, and handoff-like action claims or conformance subjects often enough to carry the local architecture;
  • acts as a replacement head for another broad head;
  • appears in a returned finding or accepted basis as a term whose meaning must survive into FPF wording;
  • or remains the only word that lets the sentence appear precise.

The mechanism is:

  1. Inventory the trigger spans inside the bounded object, with loci or grouped loci and count. Mark structural role: ordinary prose, selected name, heading, table column, field, example, quote/source-only wording, relation phrase, publication phrase, or source-use phrase.
  2. Group occurrences by local interpretation, not by trigger word alone: ordinary no FPF-governed use, local lexical repair, relation-like use, episteme use, publication use, source-use, durable naming need, quote-only or source-only wording, false positive, or blocker.
  3. For each local interpretation, choose and complete the repair consequence. Local repair may close under E.10. Relation-like wording applies A.6.P or its retained specialization. Episteme wording, publication wording, or source-use wording applies C.2.P. Durable reusable naming applies F.18 after the kind under repair/use recovery. Quote-only or source-only wording needs a non-use disposition. Classification labels are not closure endpoints.
  4. Rewrite the bounded object, or leave a blocker. A note saying apply A.6.P where live, apply C.2.P where live, apply the governing pattern where live, subject to F.18 later, classified under A.6.P, classified under C.2.P, or boundaries are stated nearby is not closure unless the recovered result is already present in the final wording or the missing required repair is explicitly blocking. The Final wording or blocker cell must not be empty for any FPF-governed trigger.
  5. Reread saturation. If one trigger word still carries several different local interpretations after repair, or dominates the selected names of the bounded object, the text has likely preserved an umbrella rather than repaired it. Split the local interpretations into names or governing-pattern applications named by value before accepting the wording.

Use this compact closure table when trigger concordance is live:

Trigger span or nameLoci/count and structural roleselected interpretationRequired recoveryFinal wording or blockerClosure disposition
ordinary no FPF-governed use / local repair / relation-like / episteme-publication-source-use / durable naming / quote-only / false positive / blockerE.10 / A.6.P / C.2.P / F.18 / not triggeredclosed locally / recovered and integrated / quote-only / not triggered by value / still blocking

Allowed closure dispositions are only:

  • ordinary wording with no FPF-governed use accepted;
  • local lexical repair closed under E.10;
  • A.6.P recovery completed and integrated into the text;
  • C.2.P recovery completed and integrated into the text;
  • F.18 naming decision completed after kind/use recovery and integrated into the text;
  • quote-only, source-only, or non-use disposition stated by value;
  • false positive stated by value;
  • still blocking.

Do not close trigger concordance with a summary statement that E.10 was run, with a citation to A.6.P or C.2.P alone, with a correct classification but no governing-pattern repair product, with a later-work promise, or with a table that covers only representative examples while the remaining FPF-governed occurrences keep the same unresolved head.

Recovery and disposition table

E.10 gives only a small local recovery/disposition form. It does not unpack relation-like or episteme-publication-heavy source meaning by itself.

E.10 resultRecovery productDisposition
local wording acceptedOrdinary wording with no FPF-governed use.Leave as ordinary prose.
local wording rewriteRepaired phrase that names the local kind named by value, register, ordinary sense, or admissible lighter wording.Accept locally after the replacement-candidate anti-umbrella rule.
relational precision restoration requiredTrigger span plus the relation-like wording or relation-bearing use: endpoint, qualifier, slot, scope, time, viewpoint, support-like interpretation, basedness, service, bridge wording, whole-part, mapping, comparison, or dependency.Apply A.6.P or its retained specialization before accepting current FPF wording; if the trigger is a false positive, state that reason by value.
epistemic precision restoration requiredTrigger span plus the live episteme, publication, source-use relation, or source-expression relation.Apply C.2.P before accepting current FPF wording; if the trigger is a false positive, state that reason by value.
combined precision restoration requiredTrigger span plus both relation-like wording and episteme, publication, or source-use wording.Apply C.2.P for source-currentness relation and the claim-bearing episteme or publication relation set; apply A.6.P for the relation-bearing slice.

Closure rules

Closure questionConforming answer
Can E.10 alone close the case?Yes only for not-triggered, false-positive by value, ordinary wording with no FPF-governed use, and local lexical-repair outcomes whose replacement candidate has also passed E.10.
What counts as closed by value?The final wording or the recorded disposition names the recovered kind named by value, relation phrase, relation record, admissible use, non-admissible stronger or adjacent use, source-use disposition, publication construction, durable naming decision, or false-positive reason. The reader must not need chat memory or a future pass to recover what the trigger meant.
What counts as A.6.P or C.2.P application?A governing-pattern application is not the classification label. It is the completed recovery product: selected relation interpretation, relation phrase or record named by value, endpoint repair, qualifier repair, scope repair, admissible-use repair, source-use disposition, episteme construction or publication construction named by value, project-side reference, false-positive reason, quote-only disposition, non-use disposition, or named blocker integrated by value into the text or closure account.
Can E.10 close relation-like wording by itself?No. If the live problem is endpoint, qualifier, slot, scope, time, viewpoint, support-like interpretation, basedness, service, bridge wording, whole-part, mapping, comparison, or dependency, the conforming text applies A.6.P or a retained specialization, or states the false-positive reason by value.
Can E.10 close episteme-publication or source-use wording by itself?No. If the live problem is source wording, episteme, publication, view, face, carrier, publication unit, EntityOfConcern, grounding, FPF transfer, project-side claim, admissible-use claim, or pattern-application wording, the conforming text applies C.2.P or states the false-positive reason by value.
Can a replacement term close the case because it sounds more precise?No. A repair is not conforming merely because the old overloaded word was replaced. The replacement candidate must pass the same trigger scan and anti-umbrella test.
Can a trigger-headed selected name close with F.18 later?No, not when the name is already selected by an accepted DRR, table heading, schema field, coordinate, pattern draft, or future drafting vocabulary. Complete F.18 now after kind/use recovery, replace the head with wording named by value, or leave the naming issue blocking by value.
Can a correct classification close the case without changing the text?No. Correct classification only starts the consequence. If the trigger is FPF-governed, the final wording must change, the governing-pattern result must be recorded by value, or the issue must remain blocking.
Can a high-frequency trigger close through representative examples?No. When trigger concordance is live, representative examples may guide grouping, but the closure account must cover all FPF-governed occurrences or exact grouped loci/counts and must say what remains ordinary, repaired, quote-only, rejected, or blocking.
Where do trigger words and examples live?In this shared E.10 scan architecture or in a named local application profile tied to its own primary EntityOfConcern, relation record, or claim record. Do not copy growing word lists into F.18, A.6.P, C.2.P, E.19, or local checklists.

Problem context

Current name set. E.10 is the current FPF pattern. E.10:0.2 is the shared wording-use trigger scan. The older LEX-BUNDLE or ULR material below is retained as detailed reference apparatus for selected lexical, register, naming, morphology, and local rewrite problems. It is not a second current ontology, not a second trigger registry, not a second pattern head, and not a replacement for E.10.ARCH, the selected precision-restoration realization pattern, a governing pattern, or F.18.

Intent. Provide one normative rule-set that makes FPF language unambiguous, composable across contexts, and teachable by design. Authors, reviewers, and tooling can point to LEX-BUNDLE as the governing lexical pattern for:

  • Vertical stratification (Kernel ↔ Extensions ↔ Context ↔ Instance);
  • Twin registers (Tech/Plain) with safe synonyms;
  • Naming morphology (allowed suffixes & style) for the kernel’s core objects;
  • Minimal Generality tests (names are neither parochial nor vacuous);
  • Ontology recovery rows for overloaded words (e.g., process, function, service);
  • Conformance checks and minimal examples.

Scope. Applies to: (a) Core (Parts A–G), (b) Extensions patterns specs (CAL, LOG, and CHR), (c) Context glossaries that claim FPF conformity, and (d) Diagrams/prose in normative text. It does not constrain Tooling or Pedagogy wording other than where they quote Core semantics.

Problem

  1. Polysemy drift. Process, function, service, agent, activity slide between structure, recipe, execution, and promise.
  2. Cross‑context collision. A label (e.g., Owner) is assumed “global” though meanings differ per U.BoundedContext.
  3. Name bloat vs. parochialism. Either hyper‑specific domain names leak into core types, or vague umbrella names obscure invariants.
  4. EntityOfConcern and Description-episteme boundary and specification-use collapse. Authors mix EntityOfConcern (the thing under concern), Description episteme (how we describe it), and specification use (testable criteria, formality, acceptance, and harness-gated use of a Description episteme).
  5. Register soup. Tech terms bleed into Plain pedagogy and vice‑versa, inviting category errors.

Forces

ForceTension to resolve
Universality vs. local fitKernel must stay universal while allowing domain nuance in a Context of meaning.
Brevity vs. clarityShort names help, but only if morphology signals the right kernel slot.
Stability vs. evolutionNames should survive refactors; yet we must accommodate new roles/types without explosion.
Pedagogy vs. precisionPlain words aid learners; Tech labels anchor formal checks.

Solution — the LEX‑BUNDLE rule‑set (overview)

LEX-BUNDLE aka ULR (Unified Lexical Rules) names the retained reference apparatus for register, naming, morphology, and rewrite checks inside the current E.10 pattern. Use it only after the E.10:0.2 scan has selected a lexical or register or naming problem that actually needs those details.

  1. Vertical Stratification (E.10 -> four strata);
  2. Twin‑Register Discipline (Tech/Plain pairs);
  3. Minimal Generality (MG) principle + tests;
  4. Morphology & Style (suffixes, casing, reserved prefixes);
  5. Canonical Rewrites for overloaded words (L‑rules);
  6. Conformance Checklist (CC‑LEX) and Regression Stubs (RSCR‑LEX).

Below are the normative clauses

Vertical Stratification (four strata; no cross-bleed)

Rule V‑0 (Strata). Every lexical item in a conformant text belongs to exactly one stratum:

  1. KernelU.* types, kernel relations, invariants (e.g., U.Holon, U.Role, U.Method, U.Work, U.PromiseContent).
  2. Extension patterns — CAL, LOG, and CHR exports (e.g., Sys‑CAL, KD‑CAL, Agency‑CHR) that extend but do not override Kernel.
  3. Context — a U.BoundedContext with its Glossary, Invariants, Roles, and Bridges (local Context of meaning).
  4. Instance — concrete identifiers (holders, role assignments, works, carriers).

V‑1 (Unidirectional meaning). Meaning flows downward only: Kernel → Extention patterns → Context → Instance. No stratum may redefine a higher stratum’s term; it may only specialise or bridge it.

V‑2 (Strata vs authoring stances). The four lexical strata above constrain tokens. They are independent of a claim-bearing unit's stance (its CtxState pins such as DesignRunTag, ReferencePlane, and Locus). Strata answer “what words mean here”; stance answers “where this claim lives in the flow” and which evidence‑lane expectations apply.

V‑3 (Citation style). When a Context term is used, its Context must be visible at first mention (e.g., OwnerRole:ITIL_2020). If an author needs Cross‑context reuse, they MUST cite a Bridge with a stated Congruence Level (CL) (see F.9).

V‑4 (Firewall). Tooling/Pedagogy idioms shall not leak into Kernel prose (DevOps Lexical Firewall). CI/CD jargon, file formats, or API names MUST NOT appear in Core definitions. (Pedagogy may use them as examples only, in the Plain register, with Tech anchors present.)

Ontology Guards

Tech register ontology guards

Purpose. This section stabilises the Tech register of the kernel lexicon by enforcing head‑anchored naming, explicit kind naming, EntityOfConcern and Description-episteme boundary and specification-use morphology, disciplined treatment of Role and Holder, and Domain usage consistent with D.CTX and UTS. It aligns with F.4 Role Description (RCS/RSG), F.11 Method Quartet Harmonisation, and F.17 UTS. Scope: Guidance is register‑agnostic and applies to the whole FPF; examples are illustrative and MUST pass Minimal Generality & Domain Anchoring (MG-DA) and other rules of lexical governance pattern E*. This guidance applies to kernel and non‑kernel components (including Part G and patterns in Part C) and SHOULD be reused across extensions.

Onto1 — Head‑anchoring (use Kernel heads + pass LEX.TokenClass, EntityOfConcern and Description-episteme boundary, and specification-use gates)

  • Rule: The head noun of a term MUST explicitly signal the kind (System, Holon, Role, Work, Episteme, Tradition, Lineage, Characteristic, Method, Profile, Description, Spec, Flow, Card, Pack, Dashboard, …).
  • Figurative heads with obvious overload (“Tradition”, “family”, “process”, “function”) are forbidden in the kernel. Use plain twins only with a 1:1 Tech mapping and declare LEX.TokenClass for the Tech token. They MAY appear only in the Plain register as 1:1 twin‑mappings to a Tech token, but MUST NOT appear in the Tech register. Plain language should minimise lexical error from overloaded terms; use plain‑twin lexical guards.
    • Do: IncidentDashboard, MethodSpec, TraditionProfile, FlowDescription.
    • Don’t: IncidentBoard, TDD Tradition, Production Process (kernel), Service Function (kernel).

Onto2 — EntityOfConcern and Description-episteme boundary and specification-use morphology (ref. E.10.D2)

  • Rule: A term for the EntityOfConcern uses the bare head for the FPF kind under concern: Method, Tradition, Characteristic. A Description episteme appends …Description: MethodDescription, TraditionDescription. A Description episteme admitted for specification use appends ...Spec and presupposes acceptance criteria, harnesses, measurable anchors, formal checkability, verification use, or another specification-granting gate named by value (normative in E.10.D2 and neighbouring patterns). E.g., Algorithm is a species of MethodDescription for a computer (a system in the role of information transformer); if expressed in a formal language and bundled with acceptance tests, it is MethodSpec (per F.11). If expressed as pseudo-code, it is MethodDescription.
  • Formal-description guard: A formal mathematical or physical theorem, including a formal postulate theorem in physics, remains a Description episteme until a bounded use assigns specification use. Its formal language belongs to formality and publication-expression discipline; it becomes a specification only under acceptance criteria, harness checks, normative invariants, measurable anchors, verification use, or another specification-granting condition named by value.
  • Extension: Apply the same morphology to non-method EntitiesOfConcern where appropriate: FlowDescription/FlowSpec, SystemDescription/SystemSpec.
  • Do: SamplingMethod - SamplingMethodDescription - SamplingMethodSpec.
  • Don’t: SamplingAlgorithm (when it is just prose), SamplingProcessSpec (head not signalling kind). Onto3 — Roles, Holders, and Carriers (holonic) (ref. F.4 / F.5)
  • Rule: The playable intention is named …Role and described through F.4 Role Description (RCS/RSG), e.g., SafetyOfficerRole, ReviewerRole. The party assuming a role is the Holder. Use the Holder#Role:Context pattern to type the assumption (where Context is a U.BoundedContext), e.g., Team‑Alpha (U.Holon) is Holder#SafetyOfficerRole:Plant‑Ops. Carrier is reserved for a system that bears a symbol of episteme (U.Episteme, Tradition, Lineage, Profile, repertoire) independent of any concrete role assumption, e.g., LeanTraditionCarrier, CalibrationLineageCarrier. Avoid Artefact as a head in the kernel: it is ambiguous between a Carrier (e.g., document), a system “made by” some transformer, or an episteme abstracted from its carrier.
  • Register note: Job titles (Reviewer, Owner, Lead) belong in the Plain register and MUST twin‑map to explicit Tech …Role tokens.
  • Why: This resolves the inconsistent “role carrier vs role holder” usage: use “Holder” for holonic role assumption, keep “Carrier” for the system that bears a symbol of episteme.
  • Rewrite note. …CarrierRole used for a role holder MUST be rewritten to Holder#…Role:Context. Use SCR-LEX to enforce the rewrite.
  • Do: ReviewerRole (or AssessorRole), Holder#ReviewerRole:Journal‑Issue‑42 (or Holder#AssessorRole:Procurement‑Lot‑42); LeanTraditionCarrier (U.Holon), independent of any particular role. Don’t: Reviewer (as a kernel type), ReviewerCarrier (to mean a role holder), SystemReviewer (role collapsed into a type).

Onto4 — Domain only as a catalog mark (ref. E.10.D1 D.CTX; publish stitching on UTS)

  • Rule: Domain is not a kernel kind and carries no semantics, inheritance, or reasoning rights. It is a catalog mark that groups several U.BoundedContext entries.
  • Required stitching (see D.CTX & UTS). Any use of Domain MUST present: 1. the enumerated list of ContextId in D.CTX, and 2. the corresponding UTS strings (F.17) with twin labels.
  • “Discipline ≠ Domain.” Domain labels are catalog‑only (D.CTX + UTS); Discipline is a CG‑Spec‑governed holon (U.Discipline). Cross‑use requires Bridge (F.9) + CL; LexicalCheck MUST fail texts that equate Domain with Discipline.
  • Governance. No “Domain … governance”. Rules of comparability/aggregation belong to Discipline/CG‑Spec (ComparatorSet, ScaleComplianceProfile (SCP), MinimalEvidence, Γ‑fold, CL‑routing), not to Domain. Prefer DomainFamily + stitching over inventing new “Domain” types.
  • Do: DomainBundle: ClinicalSafety → {ContextId: AdverseEvents, DeviceLabelling, …} + UTS twins.
  • Don’t: ClinicalSafetyDomain as a type with inheritance; Domain Governance sections in Tech.

Onto5 — Always state what the term names

  • Rule. The definition or first line of a gloss MUST state the FPF kind named by the term: a U.Holon, U.System, U.Episteme, Tradition, Lineage, Profile, Role, U.Work execution, Characteristic, or Carrier.
  • Do:Kind named: ReviewerRole — a role intention playable by a holon within an editorial context.”
  • Don’t: “Reviewer — a person who …” (blurs the kind named).

Onto6 — Bans and ontology recovery hints (mirror E.10 § 9 L-rules; do not duplicate tables; not a substitution table)

  • process / function / activityWork / MethodDescription / Flow (context‑dependent).
  • TraditionTradition (Tech); leave “Tradition” only as a Plain twin with an adjacent Tech label.
  • domainDomainFamily + {ContextId list} + UTS twins.
  • …CarrierRole used for a role holder -> Holder#…Role:Context.
  • ambiguous Owner in role names → prefer StewardRole / CustodianRole / explicit responsibility head.
  • job titles (owner, lead, champion) in the kernel → use explicit …Role names; keep titles in Plain with twin‑labels.
  • Do: FlowDescription: ReturnsHandling, Tradition: Test‑Driven, Holder#CustodianRole:Asset‑Ledger.
  • Don’t: Returns Process, TDD Tradition (kernel), Ledger Owner (underspecified).

Worked mini‑examples across arenas

  1. Software engineering: BuildFlowDescription, CIHarnessSpec; Holder#MaintainerRole:Repo‑X. Avoid Build Process, Repo Owner.
  2. Applied research / experimentation: SamplingMethodSpec, CalibrationLineageCarrier; Holder#ReviewerRole:Grant‑Call‑Y. Avoid Sampling Algorithm (if prose), Lab Owner.
  3. Production / service management: ShiftWork, SafetyOfficerRole; Holder#SafetyOfficerRole:Plant‑Ops. Avoid Safety Officer as a type, SafetyDomain Governance.
  4. Operations research / optimisation: RoutingMethodDescription, CostCharacteristic; Holder#ModelStewardRole:OR‑Program. Avoid Routing Function, Model Owner.
  5. Healthcare / clinical ops: CarePathwayFlowDescription, MedicationAdministrationWork; Holder#AttendingPhysicianRole:Ward‑12. Avoid Care Process, Ward Owner.
  6. Finance & accounting: ReconciliationMethodSpec, JournalPostingWork; Holder#TreasuryStewardRole:Liquidity‑Book. Avoid Reconciliation Process, Account Owner (underspecified).
  7. Legal / compliance: RetentionPolicySpec, InvestigationWork; Holder#DataProtectionOfficerRole:Org‑X. Avoid Compliance Function, Data Owner (underspecified).
  8. Cloud / IT operations: IncidentFlowDescription, RunbookMethodSpec; Holder#OnCallEngineerRole:Service‑Y. Avoid Incident Process, Service Owner (underspecified).
  9. Logistics / supply chain: PickingWork, RoutingMethodSpec; Holder#DispatcherRole:Hub‑Z. Avoid Picking Process, Fleet Owner.
  10. Construction / civil engineering: PermitAcquisitionFlowDescription, InspectionMethodSpec; Holder#SiteStewardRole:Project‑Lot‑17. Avoid Inspection Process, Site Owner.
  11. Emergency response: TriageMethodDescription, EvacuationFlowDescription; Holder#IncidentCommanderRole:Event‑R. Avoid Triage Function, Incident Owner.
  12. Agriculture: IrrigationFlowDescription, SoilSamplingMethodSpec; Holder#FieldStewardRole:Plot‑17. Avoid Irrigation Process, Field Owner.

Checklist before minting a KernelToken

  • Head noun signals kind (Onto1).
  • EntityOfConcern and Description-episteme boundary and specification-use morphology correct (Onto2).
  • If role‑related: Role vs Holder vs Carrier separation observed; holonic scope explicit (Onto3).
  • Any Domain mention stitched to D.CTX and UTS; no norms on Domain (Onto4, Onto6).
  • Object‑of‑talk declared (Onto5).
  • SCR-LEX rewrites checked for current role-holder and carrier separation (Onto6).

Note on registers. Keep figurative or business‑casual terms in the Plain register only, with strict twin‑label links to the Tech token (LEX‑BUNDLE). In the Tech register, speak in KL‑CAL: episteme‑about‑epistemes (Tradition, Lineage, Profile), not in catalogue‑admin idioms.

  • Onto‑Deon — Deontic lexicon guard (Core register) Rule. In the Conceptual Core, avoid using “Standard” as the head noun of an EntityOfConcern name unless the object is an explicit deontic speech-act under the Gov lens (cf. E.3).

For interface/boundary invariants and public commitments of things (holons, interfaces, ports), prefer EntityOfConcern-side names named by value like InterfaceContract, ComplianceProfile, AcceptanceSpec, InteropProfile, etc.

Use the word standard for a publication of a Description episteme, possibly admitted for specification use, that is intended to be complied with and has explicit compliance checks.

If an EntityOfConcern-side item is currently named … Standard, rename it to a proper EntityOfConcern-side name, and (optionally) add a separate publication of the relevant Description episteme under the needed compliance or specification use that contains the standard text and the intended compliance checks. Rewrite hints (Tech → Tech). publication Standardpublication standard; frame Standardframe standard; measurement Standardmeasurement standard; Method Interface Standard (MIC)Method Interface Standard (MIS) (alias acceptable during transition); Boundary‑Inheritance Standard (BIC)Boundary‑Inheritance Standard (BIS) (alias acceptable during transition). Rationale. Keeps Core prose centred on EntitiesOfConcern and their boundary invariants; reserves deontic obligations for governance contexts and U.PromiseContent‑like promises. Do not misuse “plane”: deontic speech‑acts are analysed via the Gov lens, while ReferencePlane remains {world | concept | episteme}.

Twin‑Register Discipline (Tech / Plain)

Plain twin (LEX). A registry entry pairing the authoritative Tech label with a display‑only Plain label for one U.Type in one U.BoundedContext; governed by PTG (Plain Twin Governance; in the LEX registry) and referenced by Twin‑Map ID (LEX). “Plain twin” ≠ the Plain register (the register is where twins may be used; the twin is the 1:1 mapping). Convention. In this spec, Plain (capitalized) names the register; plain twin (lowercase) names the 1:1 mapping entry.

Rule R‑0 (Registers). Every Kernel and Extenstion patterns concept has a Tech label (the testable semantic token) and an optional Plain label (didactic synonym). The Tech label is authoritative; the Plain label is permitted only in expository text and must map 1:1 to the Tech meaning inside the current Context.

Allowed pairs (normative table; examples)

Tech (authoritative)Plain (didactic)Notes & guards
U.Systemsystem, machine, teamBare “service” is never a safe Plain twin for U.System; treat it as an always‑unpack token (L‑SERV, A.6.8). Avoid “service‑instance”; prefer “system instance”, “service access point”, or “service offering” depending on facet.
U.Epistemebody of knowledge, document, dataset, modelPair must respect Carrier vs Content (A.7).
U.Methodhow‑to, procedure (abstract)Do not call this “process” (L‑PROC).
U.MethodDescriptionrecipe, SOP, playbook, code, spec‑textIf testable, call out Spec explicitly per E.10.D2 (EntityOfConcern and Description-episteme boundary and specification use).
U.Workrun, execution, activity, job, caseNever use “process” or “procedure” here.
U.Rolerole, hat, maskAlways context‑indexed per D.CTX.
U.PromiseContentpromise, offering, service offeringNever equate to provider system or API (L‑SERV).
U.Capabilityability, capacity (within bounds)Separate from Role, Method, and Work; must carry envelope & measures.
U.Dynamicslaw of change, model of evolutionNot a capability or a method.

R‑1 (Plain first‑use). At first use in a section, show Tech label and (optionally) the Plain twin: “…a U.Method (the how‑to), described by a U.MethodDescription (the recipe) …” R‑2 (No unpaired Plain in CC). Conformance Checklists must use Tech labels only.

Domains can mint aliases inside their U.BoundedContext glossary; all aliases must map 1:1 to a Tech label (SenseCell row in the Context’s Concept-Set Table), and if exported across Contexts, via an Alignment Bridge (with CL/Loss).

Make “plain twins” (reader‑friendly labels) safe by construction, not just style. The plain twin must not change kind, scope, or reader expectations versus the canonical Tech name; it is display‑only and context‑local.

  • Tech name (tech) — the canonical, kernel‑conformant label used in normative clauses (e.g., U.RoleAssignment, TransformerRole).
  • Plain twin (plain) — a didactic display alias permitted in expository prose and UI display contexts inside one U.BoundedContext.

Principle: Meaning lives in the Tech name; the plain twin may never move meaning. (Locality is enforced by U.BoundedContext and Bridges.)

Plain Twin Safety constraints (normative)

CC‑TWIN‑1 - One‑to‑one & local. Each Tech name has at most one plain twin per U.BoundedContext; the same plain twin MUST NOT point at more than one Tech name in the same Context.

CC‑TWIN‑2 - Sense‑equivalence proof. A plain twin MUST bind to the same SenseCell as its Tech name in that Context (F.3/F.7). Authors MUST record at least one counter‑example test showing how the twin could be misread and why it still passes in this Context (SenseCell notes).

CC‑TWIN‑3 - Head‑term discipline (HND). The plain twin MUST preserve the head term of the Tech name, or append an explicit bracketed head on first use:

  • Roles keep “(role)”, Services keep “(service)”, Methods keep “(method)”, Work keeps “(work record)”, Capability keeps “(capability)”. Examples: TransformerRole → “Transformer (role)”, U.PromiseContent → “Service (service)”, U.Work → “work (work record)”.

CC‑TWIN‑4 - Kind‑consistent. A plain twin MUST NOT map across Kinds (C.3). If the twin’s everyday interpretation could denote a different Kind (e.g., Tradition = organization, corpus, domain), it is forbidden unless qualified by a bracketed head and Context gloss on first use (see CC‑TWIN‑7).

CC‑TWIN‑5 - Ambiguity stop‑list. The following base nouns are reserved and MUST NOT be used as unqualified plain twins: Tradition, service, process, function, model, system, method, standard, library, dataset, evidence, activity, task, action. They are allowed only with an explicit head per CC‑TWIN‑3 and a Context gloss (CC‑TWIN‑7). (This list MAY be extended in the registry.)

CC‑TWIN‑6 - No cross‑context by label. Plain twins are not portable. Reuse in another U.BoundedContext requires a Bridge with CL and loss notes; names alone carry no authority.

CC‑TWIN‑7 - First‑use gloss. At first occurrence in a document or screen, a plain twin MUST be shown as “Plain twin [Tech name] — Context gloss”, e.g.: “Transformer (role) [TransformerRole] — mask borne by a system to enact a method step in OR_2025”.

CC-TWIN-8 - Normative publication-form overread ban. Plain twins MUST NOT appear in Conformance Checklists, predicates, type signatures, or acceptance clauses. Only Tech names are normative. (Plain twins are strictly didactic.)

CC‑TWIN‑9 - Twin budget. At most one plain twin per Tech name per Context. Synonym piles are prohibited (control vocabulary sprawl; see F.14).

CC‑TWIN‑10 - Registry entry & DRR. Every plain twin MUST have a registry entry (in the LEX registry) recording: tech, plain, context, head, SenseFidelity = {3,2,1,0}, ambiguity notes, counter‑examples, DRR id. Any change requires a DRR.

CC‑TWIN‑11 - Tests. Twin entries MUST pass the Twin Harness (see F.15): Head term, Kind consistency, SenseCell match, Stop‑list compliance, and First‑use gloss.

Minimal Generality & Domain Anchoring (MG-DA) — names neither parochial nor vacuous

Principle (MG-DA). A minted name is as general as necessary and no more, and its head noun is anchored to the FPF kind being named. First classify the NameToken (name of a concept: term, lexical unit) itself using LEX.TokenClass, then apply the guardrails corresponding to that class: kernel tokens must unify across domains; discriminator/context tokens must make the domain legible from the name itself. Names too general to have obvious domain are banned.

LEX.TokenClass (meta‑lexical; not a USM Scope)

Definition. LEX.TokenClass : NameToken → {KernelToken | ContextToken | DiscriminatorToken}. This is a Characteristic on NameTokens (symbols), used by the LEX registry and MG-DA checks. It is not a USM scope and carries no truth/validity semantics.

KernelToken — Minimal Generality (MG‑K)

MG‑K1 (Tri‑domain witness, MUST). Maintain a DRR/Glossary note with ≥ 3 heterogeneous arenas where the invariants hold (e.g., manufacturing, healthcare, cloud ops). If you cannot, narrow to a Context name or move qualifiers into RCS (Role Characterisation Space). MG‑K2 (No parochial nouns, MUST). Kernel names MUST NOT contain domain nouns (Ticket, Microservice, Patient, Developer). Such nouns belong in Context or as RCS Characteristics. MG‑K3 (No vacuity, MUST). Avoid vacuous heads (Thing, Event, Process, Resource). Use existing kernel heads (U.Holon, U.Work, U.Method, U.Resrc, …). MG‑K4 (Intent over mechanism, MUST). Kernel type/role names encode intent, not mechanism. Mechanisms (algorithms, hardware form, recipe flavors) live in RCS or Capability. MG‑K5 (Notation independence, SHOULD). The EntityOfConcern-side kind criterion is separable from any one notation/toolchain. MG‑K6 (Refactoring safety, MUST). If a name fails MG, do not mutate it silently. Record a DRR and apply F.13 Lexical Continuity & Deprecation (aliases; Bridges for Cross‑context mappings).

DiscriminatorToken / ContextToken — Domain Anchoring (DA‑D)

DA‑D1 (kind anchoring, MUST). The head noun names the FPF kind being classified (e.g., Sense, Context, Role, Bridge, Characteristic). Readers can answer “X of what?” without external context. DA‑D2 (Characteristic, not axis, MUST). Enumerated properties are named as Characteristic within a CharacteristicSpace (MM‑CAL). Avoid spatial metaphors (axis, dimension, plane, lane, tier, layer) unless the metaphor is a pattern‑defined primitive in this spec. DA‑D3 (Enum clarity, MUST). If the term denotes an enumeration, (a) the value set is small and closed, (b) membership criteria are obvious from the definition, (c) the kind being classified is explicit in the name (e.g., SenseFamily, not bare Family, RowPlane or overly general Facet). DA‑D4 (Anti‑recipe, MUST). Do not bake how-to or local methods into discriminator names; those belong in U.Method or U.MethodDescription, or in U.Capability when the kind under repair is an ability envelope. DA‑D5 (Mapping discipline, MUST). Cross‑context interpretations go through a Bridge (F.9). Discriminator names must not suggest global identity. DA‑D6 (Register discipline, SHOULD). Keep normative tokens stable; synonyms live in Plain register only and must not appear in constraints/tests. DA‑D7 (Ban generic combinators, MUST). Reject vague composites like NameUseMode, NamingScope, RowFacet/RowPlane/RowLane. Each candidate must pass DA‑D1 and DA‑D3 (kind-anchored head and explicit CharacteristicSpace).

Global tests (apply after 7.2/7.3)

MG-DA‑T1 (Three‑arena witness). If LEX.TokenClass(t)=KernelToken, you MUST provide the tri‑domain witnesses (7.2‑MG‑K1). Otherwise this is SHOULD (document at least one contrasting arena). MG-DA‑T2 (Object‑of‑talk). The head noun uniquely signals the subject area; avoid free‑floating metaphors. MG-DA‑T3 (Anti‑recipe). Remove mechanism/implementation words; relocate to Method/Capability/RCS. MG-DA‑T4 (Enum clarity). For enumerations, list the closed value set and its CharacteristicSpace. MG-DA‑T5 (Collision & Uniqueness, MUST). Before merge, run a full‑text search over the corpus and the Reserved‑Names registry. The candidate MUST NOT collide with any existing token used in another sense anywhere in FPF. If a collision exists, either rename or raise a DRR to deprecate the prior token. MG-DA‑T6 (Teaching swap). In didactic prose (E.10.D2), the term can be swapped in without caveats. MG-DA-T7 (EntityOfConcern ground, MUST). The definition card states the EntityOfConcern-side kind criterion for membership explicitly; reviewers can check membership without consulting external narrative.

Compatibility with USM (how tokens and scopes meet)

USM applies to acts, not tokens. Mint/rename/use are LexicalActs that carry a USM scope. LEX.TokenClass constrains where a token may be used via an AllowedScopes policy: Conformance rule. For any usage u of a token t: LEX.TokenClass(t)=c ⇒ USM.Scope(u) ∈ AllowedScopes(c).

The LEX registry defines AllowedScopes(c) (e.g., KernelToken usage in normative kernel constraints is allowed; in Plain register outside a glossary is restricted; Context emissions of KernelToken require a Bridge/alias, etc.).

Audit. Violations are flagged as SCR‑LEX‑Sxx (see acceptance tests below).

Metaphor guidance (non‑binding heuristics)

Prefer object‑anchored heads to metaphors. If a metaphor is unavoidable, ensure it is (a) explicitly defined by a pattern here, and (b) unambiguous within the NameClass. Example families (use sparingly):

  • Progression metaphors (level, tier, ladder): only where a gate or upgrade is defined by the pattern.
  • Separation metaphors (lane, track): only where parallel, non‑interfering flows are enforced by rules.
  • Grouping metaphors (family, class): only for small, closed enumerations attached to a clearly named classified kind (e.g., SenseFamily rather than bare Family).

Short‑form and acronym discipline

SF‑1 (First expansion, MUST). On first use, expand the term; place the short‑form in parentheses (e.g., “Minimal Generality & Domain Anchoring (MG-DA)”). SF‑2 (Uniqueness, MUST). Register short‑forms in the Reserved‑Names list; run the collision check (7.4‑MG-DA‑T5). SF‑3 (Form, SHOULD). Prefer typographic separators (MG-DA) to fused acronyms (MGDA). Use the fused form only in code or identifiers where punctuation is disallowed, and only after registration.

Examples (illustrative, canonical)

Prefer U.PromiseContent (promise) over BusinessService; U.Capability over Function; U.Dynamics over NaturalProcess; U.WorkPlan over ScheduleProcess. Do not mint ETLService at kernel level—model ETL as MethodDescription; the Service is “data delivered under acceptance.”

Acceptance & regression checks (LEX/USM)

SCR‑LEX‑S01 (TokenClass declaration). Every normative token has a declared LEX.TokenClass. SCR‑LEX‑S02 (Collision & uniqueness). Full‑text + Reserved‑Names check passes (no other meaning in FPF). SCR‑LEX‑S03 (kind anchoring). Heads name the FPF kind classified (DA‑D1). SCR‑LEX‑S04 (CharacteristicSpace). Enumerations declare their value set and space (DA‑D2/3). SCR‑LEX‑S05 (USM compatibility). For each LexicalAct, USM.Scope ∈ AllowedScopes(LEX.TokenClass). SCR‑LEX‑S06 (Slot/Ref suffix discipline). Any token with suffix …Slot or …Ref is either (a) a SlotKind/RefKind declared under A.6.5, or (b) an episteme field whose type is a RefKind; no ValueKind or other type class may end with these suffixes. SCR‑LEX‑S07 (Manifest provides covers SlotKinds and RefKinds). If a SignatureManifest is present (A.6.0), its provides list MUST include any public SlotKinds (…Slot) and RefKinds (…Ref) introduced by that signature or mechanism, in addition to types, relations, and operators, so SD and lexical linters can treat them as exported API. RSCR‑LEX‑E01 (Banned generics). Reject tokens matching the banned combinators list (DA‑D7). RSCR‑LEX‑E02 (Metaphor hygiene). If a metaphor is used, show the pattern that defines it; otherwise rename. RSCR‑LEX‑E03 (Strategy token minting). Reject new Kernel tokens named Strategy/Policy as kinds; model them as lenses/flows/compositions inside G.5 or as …Description/…Spec in Contexts. (Prevents kernel overloading; aligns with C.22 “no minted Strategy head”.)

Morphology & Lexical Form (LEX.Morph)

Principle. Form follows the FPF kind being named. A token’s morphology (suffix/prefix/casing) must (a) express what kind of thing it names, (b) respect MG-DA (Minimal Generality & Domain Anchoring), and (c) pass LEX.TokenClass gates: LEX.TokenClass(token) ∈ {KernelToken | ContextToken | DiscriminatorToken}. Morphological choices never override EntityOfConcern, Description episteme, specification use, and publication lanes or CHR:ReferencePlane semantics.

Casing & basic forms

M‑0 (Casing and categories). Types & role kinds: UpperCamelCase (IncisionOperatorRole, MethodDescription). Relations/verbs: lowerCamelCase (performedBy, isExecutionOf, bindsMethod). IDs/instances: flat with delimiters (context‑defined) but never collide with type forms (e.g., W#Seam134, ctx:Hospital.OR_2025). Register discipline: normative tokens use the Technical register; Plain synonyms are allowed in prose only, never in constraints.

Reserved suffixes (gated by LEX.TokenClass, EntityOfConcern and Description-episteme boundary, and specification use)

Use tables as a whitelist. Rows indicate when a suffix is permitted and what it means. The EntityOfConcern and Description-episteme boundary and specification-use gate prevents EntityOfConcern, Description episteme, specification use, and publication-lane confusion; “Examples” are illustrative.

SuffixKind named by suffixEntityOfConcern and Description-episteme boundary and specification-use gateLEX.TokenClass gateExamplesForbidden misuses (typical)
RoleRole kind (EntityOfConcern-side)EntityOfConcern sideKernelToken/ContextTokenTransformerRole, ApproverRoleAppearing in BoM/mereology; mixing with run logs.
MethodAbstract way of doing (recipe type)EntityOfConcern sideKernelToken/ContextTokenSteriliseInstrumentMethodVersioning on Method (version the MethodDescription instead).
MethodDescriptionRecipe/description (notation‑agnostic)Description epistemeKernelToken/ContextTokenJS_Schedule_v4_MethodDescriptionCalling it “process”; encoding runtime actuals here.
...SpecTestable specification (acceptance-bound)Description episteme admitted for specification useKernelToken/ContextTokenMethodSpec, FlowSpec, SystemSpecUsing “Spec” without acceptance tests/harness; treating formal notation alone as specification; putting runtime actuals here.
WorkExecution (runs or kinds of runs)(run record; not EntityOfConcern and Description-episteme or specification use)KernelToken/ContextTokenSpeechActWork, W#Seam134Plans/schedules; design‑time recipes.
WorkPlanSchedule of intentDescription episteme (plan record)ContextTokenMaintenanceWorkPlan_Q3Logging actuals; claiming execution.
ServiceExternal promise objectEntityOfConcern side (promise/commitment use)KernelToken/ContextTokenObjectStorageService, PassportIssuanceServiceNaming teams/APIs as “Service”.
CapabilitySystem abilityEntityOfConcern sideKernelToken/ContextTokenScheduleGenerationCapabilityMislabeling roles or methods as capabilities.
DynamicsLaw/model of changeEntityOfConcern sideKernelToken/ContextTokenLotkaVolterraDynamicsUsing for abilities (Capability) or recipes (Method).
ObservationObservation record/kind(run record; not EntityOfConcern and Description-episteme or specification use)ContextToken/DiscriminatorTokenVibrationObservationMixing with MethodDescription or Evaluation.
EvaluationEvaluation episteme or evaluation recordDescription episteme or Description episteme admitted for specification useContextToken/DiscriminatorTokenCalibrationEvaluationUsing to name roles or methods.
EvidenceRoleRole in evidence assemblyEntityOfConcern side (role kind)KernelToken/ContextTokenWitnessStatementEvidenceRoleUsing as a generic “evidence”.
EpistemeEpistemic knowledge unit (structural)Description episteme or Description episteme admitted for specification useKernelToken/ContextTokenTraceabilityEpistemeColliding with CHR ReferencePlane (never suffix “Plane”).
System/HolonSubstantial entityEntityOfConcern sideKernelToken/ContextTokenAnesthesiaSystem, OrderFulfillmentHolonUsing to denote Context or run record.
BoundarySystem boundaryEntityOfConcern sideKernelToken/ContextTokenSterileFieldBoundaryUsing as a role or method.
ObjectiveTarget stateEntityOfConcern/Description side (depends on formalization)KernelToken/ContextTokenHemostasisObjectiveEncoding acceptance tests here (put tests in Spec/MethodDescription).
RequirementAcceptance condition, requirement claim, or commitment record where binding condition is liveDescription episteme or Description episteme admitted for specification useKernelToken/ContextTokenLatencyRequirementUsing as a role or capability.
BoundedContextContext card(meta-structural; not EntityOfConcern and Description-episteme or specification use)ContextTokenITIL_2020_BoundedContextTreating Context as domain; minting U.* inside a Context.
surface (trigger only)Not a durable Tech head by itself; recover publication face, form, unit, carrier, rendering, UI face, physical/geometric surface, or the neighboring FPF object.publication availability or ordinary source wordingTrigger wordingpublication face, interop publication form, carrier relationStructureSurface, MechanismSurface, PortfolioSurface
CardUTS/record unit (episteme)Description episteme, Description episteme admitted for specification use, or publication-unit use, depending on FPF kind named by valueContextTokenMethodCard, ExternalIndexCardEncoding runtime actuals; using as a ‘Service’

Legacy suffix conventions

SuffixLexical classMeaning / OntologyWhere it livesExamples / Notes
SpaceEntityOfConcern-side kindA typed state space (finite product of Characteristic×Scale slots); no proceduresKernel A.19; CHR/space consumersCharacteristicSpace, CreativitySpace. Edition of a Space is a phase of the episteme that defines it.
SpaceRefPointerRegistry reference to a SpaceData fields / UTSCharacteristicSpaceRef. Use .edition on the Ref when pinning a historical phase.
MapEntityOfConcern-side kind (method)A mapping method from subjects to coordinates in a declared Space (encoder/featurizer)Kernel/Method family (EntityOfConcern side), described through Description epistemes and admitted for specification use only when gates named by value grant specification useDescriptorMap (declares invariances, corpus typing). Not a record or file.
MapRefPointerRegistry reference to a MapData fields / UTSDescriptorMapRef. Pin the method phase via DescriptorMapRef.edition.
DefSpec-family alternate token (CG-Spec family)A definition/specification publication that fixes a formula or distance over a space; synonym of …Spec within CG-Spec registries onlyPart G (CG‑Spec family)DistanceDefDistanceSpec. Prefer …Spec in new normative prose; …Def retained where already published.
DefRefPointerRegistry reference to a …Spec/…DefData fields / UTSDistanceDefRef. Use DistanceDefRef.edition to pin the exact formula edition.
SpecDescription episteme admitted for specification useTestable invariants bound to acceptance harnessesE.10 and A.21Stable, testable definitions; normative by default; admitted for specification use. Use for normative calculi and scoring/normalization specifications.
SlotStructural positionNamed argument position in a relation/morphism signature (SlotKind in A.6.5)Kernel A.6.0/A.6.5EntityOfConcernSlot, GroundingHolonSlot. Always names a position; never used for ValueKinds or episteme fields.
RefPointerReference/identifier to a registry item of some ValueKind (RefKind in A.6.5), not the thing itselfData fields / UTS; RefKind typesU.EntityRef, U.HolonRef; episteme fields …Ref : U.EntityRef. Reserved for RefKinds and episteme fields typed as them; …Ref never carries content and is never used for ValueKinds or SlotKinds.
SeriesGovernance objectA PhaseOf chain (“editions”) for an epistemeEdition governanceU.EditionSeries. Holds immutability and provenance rules.
.editionAttribute (on Ref)The phase id of the referenced record; attaches to …Ref, not to the record nameData fields / UTSUse XRef.edition, not bare XEdition fields. Lower camelCase for keys.

Notes.Kernel‑only ban list remains in § 8.3. • CHR guard: the only token that may use the word plane is CHR:ReferencePlane. • Axis and dimension metaphors are deprecated; use Characteristic for a measured aspect and CharacteristicSpace for a declared characteristic space where an enumeration is intended (see § 7).

Not only suffix guard

  • Suffixes are closely related to kinds and should be clearly guarded by MG-DA.
  • Other morphemes (not only suffixes) also must respect kinds. For example, Space is a geometric conceptnever use it as a suffix (…Space…) or other morpheme in beginning or in the middle of a term to name non‑geometric entities (e.g. prefer Set/Kid/Kit instead of Space where membership is intended).

L-EPI-PUB — episteme, publication, view, carrier, and authority-reference lane discipline

  • Use U.Episteme for the claim-bearing unit. Use U.EpistemePublication or governed U.Episteme publication only when that episteme is available as a published episteme under C.2.1 and E.17 discipline.
  • Name the publication form separately from the episteme: for example U.PreArticulationCuePack, RoutedCueSet, U.AbductivePrompt, typed route-bounded projection, partial normal form, endpoint-pattern-governed publication, or another declared form. A publication form is not itself the governing FPF source.
  • Name U.View and MVPK face separately from the publication form. A PlainView, TechCard, InteropCard, or AssuranceLane is an episteme-level view or publication face, not the source claim, not the publication form itself, and not the SCR or RSCR carrier.
  • Name the carrier or rendering lane separately. Documents, dashboards, generated screens, trace files, cards, and transport formats hold or render a publication; they are not the U.Episteme, not the claim or effect being relied on, and not the governing pattern.
  • Name source-finding cues separately from source epistemes. A cue, badge, credential view, dashboard tile, heading, signature-looking mark, or generated explanation may help find a source; it does not by itself create an authoritySourceRef target, evidence relation, gate decision, assurance claim, role assignment, status assertion, work occurrence, or permission.
  • Use governingPatternRef for a named FPF pattern that governs admissible interpretation or use. Use authoritySourceRef when a non-pattern authoritySourceRef target such as an external standard, editioned register, DRR, gate decision, policy source, or role-assignment or status register carries the relevant authority. Do not use generic sign/episteme-publication wording, generic source wording, generic project-work wording, or container-placement wording as solution terms.
  • When a published episteme is used for work, name the live P2W chain element: intended method family, selected method/method of work, U.WorkPlanning baseline, planned work, actual U.Work or U.WorkEnactment, work result, result measurement, or non-work reliance on a claim or effect. Do not let generic action, use, or material hide that distinction.
  • Use C.2.P when episteme-publication-heavy wording carries episteme, publication, view, carrier, relation, admissibility, evidence, work, gate, decision, method, or FPF-pattern-application claim. This parent pattern keeps the lexical and naming discipline; C.2.P supplies the epistemic precision-restoration profile that recovers the FPF kind named by value, relation record, relation phrase, tuple-like record, project-side FPF kind and reference named by value, or not-triggered disposition before final wording is accepted.

Publication face, form, unit, and carrier discipline - surface as trigger wording

  • Definition. surface is trigger wording, not a durable FPF Tech head by itself. When it has FPF-governed use, recover whether the sentence means publication face, publication form, publication unit, carrier, rendering, UI/front-end face, physical/geometric surface, companion publication, projection material, carrier relation, or another FPF kind or relation named by value.
  • Allowed final heads: publication or carrier terms named by value, or deliberately ordinary physical/geometric surface when no FPF-governed use is carried.
  • Forbidden final heads: StructureSurface, MechanismSurface, PortfolioSurface, and any ...Surface that hides a structural, mechanistic, measurement, review, assurance, explanation, comparison, or publication-unit object.
  • Preferred alternatives: name publication face, form, unit, carrier, and rendering; use ...Boundary for structural borders, ...View for episteme/view relations, and ...Card only for a UTS or record unit when that is exact.

**L‑SPACE — disciplined use of Space **

  • Use Space only for CHR‑grounded measurement and state constructs such as CharacteristicSpace per A.19. Do not coin generic …Space for sets, portfolios, or publication forms. Publish portfolios and archives as sets via admissible selectors; publish them on UTS as views or cards, not as spaces.
  • Field‑name guard (Kernel blocks). In Kernel conceptual blocks (e.g., A.6.0/A.6.1 lists), do not name a field …Space; reserve Space to the types (CHR/ReferencePlane families). Use BaseType as the field name and let the referenced U.Type carry …Space where appropriate; otherwise, for set‑valued universes, use …Set.
  • Space is geomertic concept, neve use it even not as a suffix for naming non-geometric spaces (e.g. instead of Sets with membership)

L‑ROLE — disciplined use of Role

  • Role is always Role Enactment for the U.Holon/U.System kind (agentive use).
  • Param‑slot / relation‑endpoint guard. Do not use the morpheme Role for formal parameter positions in operator algebra declarations (OperationAlgebra) or Signature arguments. Reserve Role for agentive kinds only (A.2/F.4/F.6). Prefer SlotKinds + SlotSpecs (A.6.5) to type formal slots; if a didactic list is useful, use a ValueKindView (name→ValueKind) projection derived from SlotSpecs/SlotIndex. Same for similar situations (table columns, tuple placements): use MG-DA with domain‑specific terminology, never “Role”.

Forbidden suffixes & the DevOps, Data Governance and Repository-Workflow Lexical Firewall

M‑F (Forbidden in Kernel tokens). In KernelToken names, do not use: …Function, …Process, …Task, …Activity. These are ambiguous or vacuous—map using § 6 typing rules (often to Method, MethodDescription, or Work).

M‑FW (Tool/file markers). Tooling/file suffixes (…API, …JSON, …YAML, …CI, …Kafka, …Postgres) are not part of conceptual names. Place them in Context glossaries or operational configs (DevOps Lexical Firewall). Kernel names never carry tool/format/notation marks. It is pure conceptual, no data management and data governance intended.

Prefix discipline

M‑P1 (Reserved prefixes). U. reserved for Kernel types; Γ_ for algebraic operators; CAL, LOG, and CHR for pattern packages. Never mint U.* inside a Context.

M‑P2 (Edition markers). Apply explicit edition/version markers to Contexts and to MethodDescription / Servicenot to Method (e.g., BPMN_2.0_BoundedContext, JS_Schedule_v4_MethodDescription, PassportIssuanceService_v2025). Authors MAY annotate Context or Service names for didactics. Norms (edition vs release vs version).

  1. edition — the content phase of an episteme (Concept/Object/Symbol where Symbol‑only notation swaps do not force a phase). Lives in U.EditionSeries. Never embedded in labels (see R‑RD‑7); bind via data: …Ref.edition.
  2. release — a Work of making a Carrier public; may carry tags/dates; does not change episteme identity or phase.
  3. version — a tooling/carrier identifier (file/package/code). Use only in Tooling/Pedagogy families; not in Core names.

Property discipline. When a field pins a referenced record’s phase, write it as <Thing>Ref.edition (dot notation), never as a standalone …Edition key. E.g., replace DHCMethodEdition with DHCMethodRef.edition.

Morphology tests (apply with § 7 MG-DA)

M‑1 (Slot test). The candidate fits one slot or side in the Strict Distinction lattice (EntityOfConcern ≠ Description episteme ≠ publication carrier; Role ≠ Method ≠ Work). If not, rename or split.

M‑2 (Classified-kind anchoring). The head noun names the classified FPF kind or reference (Role/Method/Service/Work/Context/Characteristic). No free‑floating metaphors.

M‑3 (Family congruence). Where eligibility clarity is needed, add a Context‑specific characteristic (RCS) as a qualifier (e.g., NormativeStandardRole). Do not fake families with bare metaphors (no RowPlane, senseFamily, …Lane).

M‑4 (Run vs design). Use Work only for executions; use MethodDescription for recipes; never cross.

M‑5 (Kernel parochiality). KernelToken names carry no domain nouns; push domain markers to Context or RCS.

M‑6 (Vacuity ban). Avoid vacuous heads (Thing, Event, Process, Resource). Use established kernel heads (U.Holon, U.Work, U.Method, U.Resrc, …).

M-7 (Notation independence). The EntityOfConcern-side meaning survives notation/tool swaps.

M‑8 (Collision & uniqueness). Before merge, run full‑text + Reserved‑Names checks; the token must not collide with any other meaning anywhere in FPF (cf. § 7 MG-DA‑T5).

Alias hygiene

Aliases live only inside a Context Glossary and map to one technical label with an equivalence note (≡). No global aliases.

Entry lexeme support and lexical-query discipline

Public first-entry scenario text, ToC query rows, local Problem-frame recognition text, or expanded I.2 entry-disambiguation cases may use one compact entry lexeme cue block when the lexical issue changes the first useful FPF entry. That cue block should not live in every pattern body by default. Keep it instead in:

  • FPF readme section,
  • E.11 entry-distribution loci,
  • I.2 expanded entry-disambiguation cases,
  • Table of Content query rows,
  • or one bounded lexical-query record governed by F.17, UTS, or F.18.

This block remains one editorial lexical-query set. It does not mint names, aliases, U.Types, bridges, or semantic equivalences by itself. When visible, it should distinguish at least:

  • canonical label,
  • plain-language twin,
  • domain alias,
  • lexical-query cue,
  • deprecated cue,
  • false friend or forbidden synonym.

Minimal visible lexical-query shape may therefore use one compact field set such as:

canonical
noncanonical_visible
domain_query_examples
forbidden_aliases

Ordinary lexical-query support should stay compact:

  • ordinary Table of Content rows: prefer 2-5 query phrases;
  • ordinary README scenario or [E.11](/generated/patterns/E.11) entry-distribution cues: keep only the most discriminating domain phrases and false friends;
  • fuller lexical sets belong under [F.17](/generated/patterns/F.17), [F.18](/generated/patterns/F.18), and [E.10](/generated/patterns/E.10) only when one real naming, alias, bridge, or collision claim exists.

Lexical support should increase entry precision, not maximize keyword recall. The same boundary should be kept explicit in lexical support:

  • lexical_hook is not one alias;
  • one alias is not one canonical name;
  • one search cue is not one semantic equivalence;
  • one entry_orientation_label is not one RelationKind.

Language-specific query cues may be added as entry-lexeme support. They do not become canonical names, aliases, or semantic equivalents unless admitted through [F.18](/generated/patterns/F.18) / [E.10](/generated/patterns/E.10). One Russian practitioner phrase may therefore help recover one English canonical pattern while remaining lexical-query support only.

Compatibility with USM (acts vs tokens)

LEX applies to tokens; USM applies to acts. Mint/rename/use are LexicalActs that carry a USM scope (e.g., ClaimScope, WorkScope). LEX constrains where a token form may appear via AllowedScopes policies:

LEX.TokenClass(t)=c ⇒ USM.Scope(usage) ∈ AllowedScopes(c).

Example: using a KernelToken in a Context constraint may require a Bridge/alias; logging Work inside a MethodDescription violates M‑4 and the policy.

Acceptance & regression checks (LEX/USM)

  • SCR‑MOR‑S01 (Suffix whitelist). Every normative token with a reserved suffix matches § 8.1 row semantics and passes EntityOfConcern and Description-episteme boundary and specification-use gates.
  • SCR‑MOR‑S02 (Kernel bans). KernelToken names contain none of the forbidden suffixes (§ 8.2).
  • SCR‑MOR‑S03 (Prefixes). Reserved prefixes obey § 8.3; no U.* minted in Context.
  • SCR‑MOR‑S04 (Run/design gate). Work appears only for executions; MethodDescription has no runtime actuals.
  • SCR‑MOR‑S05 (Collision). Full‑text + Reserved‑Names checks pass (no other sense of the token elsewhere).
  • SCR‑MOR‑S06 (Object‑of‑talk). Heads pass M‑2; no bare metaphors as heads.
  • RSCR‑MOR‑E01 (DevOps firewall). Tool/file suffixes quarantined to Context; none leak into KernelToken names.
  • RSCR‑MOR‑E02 (USM compliance). For each LexicalAct, verify USM.Scope ∈ AllowedScopes(LEX.TokenClass) (see § 7.5).

Autonomy lexicon (L‑AUTO )

Forbidden (Core): bare “validity”, “actor/agent” (as free‑standing nouns), “kill switch”, “process” for behavior, “envelope” when used as scope. Use instead: Scope (G) for epistemic scope; WorkScope for capability bounds; RoleAssignment for who acts; SpeechAct for overrides; SafeStop instead of “kill switch”. Named prefixes (policy & registry):

  • aut: for AutonomyBudgetDecl fields (e.g., aut:action_tokens, aut:risk_bands);
  • guard: for guard checks bound to AdmissibilityConditionsId;
  • ovr: for override SpeechActs (ovr:PauseAutonomy, ovr:ResumeAutonomy, …).

Notes.

  1. Scope‑sensitive guards must declare the Γ_time window selector used for admission checks.
  2. Proper names of patterns/components that already include “Agent/Agency” (e.g., Agency‑CHR, Agent‑Tools‑CAL) are permitted as titled terms; avoid re‑introducing “agent” as a free‑standing noun in new prose.

LEX-CHR-STRICT — Reserve Characteristic for CSLC-measurable aspects

Intent. Prevent calling non-measurable objects (sets, statuses, scopes, policies, bridges, contexts, guards) “characteristics”.

Rule L-CHR-S1 (Reservation). Use Characteristic only for variables that declare a CSLC scale (nominal/ordinal/interval/ratio) with admissible values/units/polarity (Part C.16/A.17A.18). Rule L-CHR-S2 (USM). U.Scope / U.ClaimScope (G) / U.WorkScope are USM scope objects, not Characteristics; they must not appear in any CharacteristicSpace. Rule L-CHR-S3 (Status). ESG/RSG statuses and deontic/epistemic statuses — not Characteristics; its statuses/states. Rule L-CHR-S4 (Lexical classifiers). Lexical classifiers/tags — Facets/attributes; do not name them as Characteristics, if not declared CSLC. Checks.CC-L-CHR-1. scope characteristic(s) is banned in Core/Context. — CC-L-CHR-2. CharacteristicSpace near Scope — error. — CC-L-CHR-3. Kind-preserving repair: F–G–R characteristicsF–G–R components only when the recovered kind is component rather than characteristic.

LEX‑QA‑1 — Using “‑ility/‑ilities” terms (availability, reliability, …)

Rule. Tokens ending with ‑ility/‑ilities or widely used quality names (Availability, Reliability, Security, Safety, Scalability, Maintainability, Usability, …) are Quality‑Family labels, not automatically CHR Characteristics.

Authoring choice: — To use such a term as a CHR characteristic, bind it to a named U.Characteristic with one CSLC Scale (A.18) and refer to that Characteristic in guards/UTS; — Otherwise publish a Q‑Bundle (see C.25) that includes Measures (CHR) (the measurable slots) and, where relevant, Scope (USM set over U.ContextSlice) and windows/mechanism/status fields.

Rationale. Scope is set‑valued (USM) and not a CHR measurement; mechanisms/statuses are governance records. Keeping them outside the CHR CSLC avoids illegal scalarisation and preserves set‑algebra semantics for scope. (A.2.6 § 6.2; A.6.1; C.16/A.18).

Ontology recovery rows for overloaded words (LEX L-rules; normative)

What this section does. LEX L-rules standardise how we recover kind and use in Core/Context when overloaded everyday words hide FPF concepts. What this section does not do. It does not restate naming (see § 7 MG-DA) or morphology/casing/suffix rules (see § 8 LEX.Morph); it depends on them. Guards. Tokens are classified by LEX.TokenClass ∈ {KernelToken, ContextToken, DiscriminatorToken} (§ 7.1). Only CHR:ReferencePlane may use the bare word plane. E.10.D2 names the boundary between EntityOfConcern and Description epistemes with DescriptionContext; specification use needs a granting gate named by value; publication faces/forms/units/carriers/renderings stay in publication lanes. Enumerations are Characteristics in a CharacteristicSpace only when a CSLC scale is declared; otherwise treat such slots as non-measurable attributes (not Characteristics).

Hard bans and ontology recovery rows (single table; normative)

Use this table mechanically. “Ban” means the listed phrase is not allowed in Core prose, identifiers, or diagrams unless the canonical appears alongside it (or as a registered Context alias). EntityOfConcern and Description-episteme boundary, specification-use gates, and token gates prevent EntityOfConcern, Description episteme, specification use, publication-lane, and TokenClass leaks (cf. § 8.1).

L‑ruleAmbiguous or low-precision word (Ban)Canonical FPF target(s)EntityOfConcern and Description-episteme boundary and specification-use gateTokenClass gateNotes
L‑PROCprocess, procedure, or function stepU.Method (abstract way-of-doing); U.MethodDescription (recipe/notation-agnostic); U.Work (execution); U.WorkPlan (schedule)EntityOfConcern-side for Method; Description episteme for MethodDescription; run record for Work; Description episteme for WorkPlanKernel/Context for types; Context for runs“Industrial process” as line role -> model system + …Role; chemistry in Method/Dynamics.
L‑FUNCfunctionU.Capability (ability/envelope) or U.PromiseContent (promise clause or offering) or U.Method (recipe) or U.Work (what happened)EntityOfConcern-side for Capability/PromiseContent/Method; run record for WorkKernel/ContextNever use function as a type name in Core.
L‑SERVservice used for team/system/API/ticket/processAlways unpack to the facet: U.PromiseContent (service offering or promise clause), U.Commitment (SLA obligation), U.SpeechAct (promise or offer act), accessSpec : U.MethodDescription (API or interface spec), service access point (SystemRef, addressable endpoint), service delivery system (SystemRef), service delivery method (U.MethodDescription), or U.Work (delivery run, case, or ticket).EntityOfConcern-side for PromiseContent/Commitment/Method; Description episteme for specs; system-side for systems; run record for WorkKernel/Context/Discriminator (per facet)“API = service” is forbidden; name the facet head phrase (A.6.8).
L‑SLASLA or service level agreement used for SLO, contract, or documentUnpack: (i) SLOs or acceptance thresholds -> U.PromiseContent.acceptanceSpec; (ii) binding obligation/penalty -> U.Commitment; (iii) packaged “the SLA” -> Contract Bundle (A.6.C); (iv) published terms -> U.SpeechAct + clause carrier (U.Episteme).EntityOfConcern-side for PromiseContent/Commitment; Description episteme for clause carriers/specs; run record for Work+evidenceKernel/Context/DiscriminatorTreat “SLA” as polysemic shorthand; never store it as a single type name.
L‑SCHEDschedule, plan, or calendar as executionU.WorkPlan (intent/window) vs U.Work (actuals/telemetry)Description episteme vs run recordContextNever attach actuals to a plan.
L‑ACTactivity, action, or task as typeU.Work (execution); steps belong to U.MethodDescription (with requiredRoles, capability bounds)run record vs Description epistemeContextReserve verbs: enact (role/RSG), execute (Work), actuate (System), approve (SpeechAct Work).
L‑AGENTagent, actor, or doer (bare)say “system bearing …Role”; use U.AgentialRole where neededIKernel/ContextOrg titles (Owner/Operator/Reviewer) live as roles in a Context.
L‑OWNERowner of X (global)Ownership is a Role inside a U.BoundedContext (e.g., OwnerRole:ITIL_2020); SoD via IContextNo global “owner” property in Kernel.
L‑CAPcapability for assignment, recipe, run, or promiseU.Capability only = ability with envelope; assignments are …Role; recipes U.Method or U.MethodDescription; runs Work; promises U.PromiseContent (service promise clause or offering)EntityOfConcern-side vs Description episteme vs run recordKernel/ContextHolder of a Capability is a U.System.
L‑DYNprocess of diffusion, growth, or learningU.Dynamics (law/model of change)IKernel/ContextReserve for uncaused change models.
L‑EVID“paper/dataset proves/ensures”…#EvidenceRole:Context on an Episteme; claims/scopes/polarity/timespan; provenance from WorkDescription episteme, possibly admitted for specification useContext/DiscriminatorEvidence is a role binding, not an actor.
L‑CTXcontext (fuzzy trope)U.BoundedContext (named card)ContextNever use “depends on context” in Core; name the Context.
L‑BRIDGEcross‑context equivalence “by same label”Explicit Bridge Card (F.9): state kind/dir/CL/Loss/scope (apply A.6.9 (RPR‑XCTX) for disambiguation + licence‑revealing name/verb choice).Same label ≠ same concept; umbrella “same/equivalent/align/map/…” must be repaired into a Bridge before it can justify reuse, rows, or substitution.

Red/Green pattern (example). ✗ “The process ensures quality.” → ✓ “The MethodDescription defines steps; Work is evaluated against RequirementRole.”

Diagnostic examples, not substitutions

Use these rows as compact diagnostics for common ontology recoveries, not as a replacement table. A proposed repaired sentence is accepted only after the live EntityOfConcern, head kind, relation or claim kind, admissible use, and scope are recovered and the transformed sentence passes § 7 MG-DA, § 8 LEX.Morph, and the KindRestorationCheck from E.10:10.2. If the example row would change the kind in the local sentence, split the sentence or leave a blocker; do not copy the example as a ready-made rewrite.

Trigger symptomRecovered ontology example
“the process owner approves”SystemX#ApproverRole:Context performs a SpeechAct Work “approve …”
“the document enforces policy”Policy_vN#RequirementRole:Context gates Work; enforcement = SpeechAct + audit
“our service runs nightly jobs”Nightly Work claimsPromiseContent(BatchProcessing); promise content defines acceptance
“the API is the service”API = accessSpec : MethodDescription; promise content defines acceptance
“capability assigned to team Y”Team Y plays Role; the team (as system) has Capability C within envelope E
“process health green”StateAssertion for ObserverRole/Service KPI passes acceptance window
“function of component A fails”Work performed by SystemA#Role failed acceptance (observations show …)
“context is unclear here”Name the U.BoundedContext; else split and Bridge

Acceptance tests (LEX‑AC)

A text passes LEX if all answers are Green:

  1. Context named. Polysemous terms appear inside a named U.BoundedContext (or the page declares a local context card).
  2. Right EntityOfConcern and Description-episteme boundary and specification use. EntityOfConcern, Description-episteme, specification-use, publication-lane, and run-record uses are not conflated (cf. § 8.1 gates).
  3. Promise vs ability vs performance. PromiseContent (promise clause), Capability (ability), Work (performance) are not conflated.
  4. No anthropomorphism. Documents/datasets/models do not “do”; Systems do.
  5. Scheduling hygiene. No actuals on WorkPlan; all actuals live on Work.
  6. Cross‑context reuse. Any reuse across Contexts cites a Bridge id with kind, direction, congruence level, loss, and scope. Apply A.6.9 (RPR‑XCTX) when the published prose uses “same”, “equivalent”, “align”, “map”, or similar bridge wording.
  7. MG-DA ok. New or refactored tokens pass § 7 MG-DA (anchored head noun; collision check; CharacteristicSpace for enums).
  8. Morphology ok. Suffix/prefix/casing respect § 8 LEX.Morph (e.g., …Role, MethodDescription, Work, reserved prefixes).
  9. Banned tokens absent. No process/function/task/activity in Kernel senses; no tooling/file suffixes in Kernel tokens.
  10. State gating present (when needed). Readiness is expressed via RSG state + StateAssertion, not vague “approved/ready”.

Coordination map (how LEX plugs into the rest of FPF)

  • With E.10.D1 D.CTX (Context discipline). ULR–CTX‑1: Every Core meaning that can vary names its U.BoundedContext. ULR–CTX‑2: Same‑spelled labels are distinct senses across Contexts; reuse requires a Bridge (F.9) with CL & loss notes.

  • With E.10.D2 (EntityOfConcern and Description-episteme boundary and specification use/refinement discipline). Speak in the right EntityOfConcern and Description-episteme boundary and specification use. ULR-EOC-DESC-SPEC-1..3 apply (the EntityOfConcern is named directly; Description suffixes name Description-episteme use; Spec suffixes name specification use on a Description episteme; work/state assertions are evaluations or occurrences). Upgrades Description to specification use only when checkable acceptance or another specification-granting gate named by value exists.

  • With A.2 / A.15 (Role–Method–Work alignment). Role = assignment; Method = way‑of‑doing; MethodDescription = documented recipe; Work = dated occurrence. Sentences must keep this split.

  • With F‑cluster (Unification) & UTS (F.17). Harvest in one Context → SenseCellConcept‑Set row with relation (≡/⋈/⊂/⟂) and losses. UTS is the human‑readable roll‑up.

Acts vs tokens. LEX applies to tokens; USM applies to acts (mint/rename/use). Conformance: LEX.TokenClass(t)=c ⇒ USM.Scope(usage) ∈ AllowedScopes(c) (see § 7.5).

Conformance checklist (LEX‑CC)

  1. LEX‑CC‑1 (Bans). Any banned token in Core/Arch fails unless the canonical appears (or the token is a registered Context alias).
  2. LEX‑CC‑2 (Context). Each polysemous term names its U.BoundedContext.
  3. LEX‑CC‑3 (EntityOfConcern and Description-episteme boundary and specification-use morphology). Usage passes § 8 gates (suffix/prefix/casing), EntityOfConcern and Description-episteme boundary checks, and specification-use checks.
  4. LEX‑CC‑4 (Bridge). Cross‑context reuse cites Bridge id and CL; same‑spelled labels without a Bridge are non‑conformant.
  5. LEX‑CC‑5 (MG-DA). New tokens pass MG-DA tests, including full‑text collision and Reserved‑Names checks.
  6. LEX‑CC‑6 (Service & evidence). Service acceptance computed from Work; evidence is an EvidenceRole on an Episteme with provenance.
  7. LEX‑CC‑7 (USM compatibility). For each LexicalAct, USM.Scope ∈ AllowedScopes(LEX.TokenClass).
  8. LEX‑CC‑8 (Minting discipline). If overload cleanup requires one local replacement phrase, the text records the repaired phrase and the governing local repair pattern. If cleanup requires one durable reusable name, the text runs the full F.18 MintNew or DocumentLegacy procedure; intuition-first partial Name Cards are non-conformant.

Worked micro‑examples (short, cross‑domain)

Factory. ✗ “The process failed; the service restarted itself.” ✓ PLC_17#ObserverRole:PipelineOps logged Observations; CAB_Chair#ApproverRole:ChangeControl performed a SpeechAct “approve restart”; OpsBot#DeployerRole:CD_Pipeline_v7 executed Work RestartRun‑4711 which claimsPromiseContent(CoolingUtility); post‑run Evaluation shows the Service acceptance passed.

Cloud. ✗ “The process owner approved; the API service deployed.” ✓ ProductLead#AuthorizerRole:Rollout_2025 performed a SpeechAct; sCG‑Spec_ci_bot#DeployerRole:CD_Pipeline_v7 performed Work Deploy‑F123; API = accessSpec : MethodDescription#REST_v12; promise content “Feature Access” declares acceptance; telemetry Work shows fulfilPromiseContent.

Research. ✗ “Dataset X proves the theory; the process is reproducible.” ✓ DatasetX#ModelFitEvidenceRole:Theory_Context supports claim C within scope S; reproducibility via StateAssertions on ReplicationEvidenceRole; procedures are U.MethodDescription; re‑runs are Work.

Semioarchitecture. ✗ “projection has one meaning in routing and bridge prose.” ✓ A.16 keeps projection as a move name for route-bounded partialization; F.9.1 keeps projection as a bridge stance label. If one durable reusable replacement name is really needed, handle the naming question with F.18 MintNew or an explicit source-retention naming decision rather than flattening both local interpretations into one umbrella rewrite.

Editorial note. This section inherits § 7 MG-DA (anchored head nouns; Characteristic/CharacteristicSpace for enums; collision checks) and § 8 LEX.Morph (suffix/prefix/casing). It deliberately omits their details to avoid duplication. The only legitimate uses of plane in the Core are CHR:ReferencePlane and the derived operators CL^plane and Φ_plane; policy flags MUST NOT introduce new “planes”. To distinguish pre‑operational vs operational states within ReferencePlane=world, use WorldRegime ∈ {prep|live} (formerly PlaneRegime).

Guarded-head cross-reference (normative lexical caution)

When one wording head already carries several FPF-governed local interpretations, lexical cleanup should prefer a guarded-head note over silent flattening. The note may record that the head remains risky, name the cited texts or patterns that govern the local interpretations, and point readers to the local canonical interpretation in each cited text.

If cleanup reveals that no admissible existing token can carry the needed meaning, use the local repair pattern for one-off wording. If the change needs one durable reusable name, handle the naming question with F.18 MintNew or DocumentLegacy rather than inventing an ad hoc synonym by feel.

This cross-reference is lexical only. It does not create a new repair-side definition site, does not establish Cross-context equivalence, and does not overrule cited local definitions. It simply keeps overloaded heads from being normalized into one false global interpretation.

projection is the main current example: A.16 keeps it as a move name for route-bounded partialization, while F.9.1 keeps it as a bridge stance label. E.10 therefore requires deconfliction notes and explicit naming of the cited text that governs each local interpretation, not one umbrella rewrite that erases the distinction.

Migration playbook — turning messy language into ULR‑clean prose (informative)

A pragmatic three‑pass routine. Works with plain text, diagrams, or models; no tools required.

Pass 0 — Pre‑flight (2 minutes per page)

0.1 Name the Context card you’re writing in (title, edition, scope note). 0.2 For every new or renamed token, declare LEX.TokenClass ∈ {KernelToken, ContextToken, DiscriminatorToken}. 0.3 Run MG-DA pre‑check (anchored head noun; no metaphor heads; if enum → declare its CharacteristicSpace). 0.4 Run collision/uniqueness: full‑text grep + Reserved‑Names registry (see § 7). If collides → rename or DRR deprecate.

Pass 1 — Harvest in the Context

1.1 Underline overloaded words (process, service, function, workflow, ticket, approval, spec, plan, …). 1.2 For each, write a one‑line intent in Plain register (what FPF kind or relation is meant). 1.3 Mark any cross‑Context reuse candidates.

Pass 2 — Recover Core anchors (not substitution)

Pass 2 is not a lexical replacement table. For each underlined word or phrase, first record the pre-repair object kind, relation or claim kind, slot or use-position, admissible use, and scope. Then choose one disposition: keep with a guarded-head note, split into several kinds named by value, rewrite locally, send to F.18 for durable naming, send to the governing pattern, or leave blocking. A replacement phrase is admissible only after the post-repair kind, relation or claim kind, slot or use-position, admissible use, and scope are recoverable and no umbrella flattening, semantic narrowing, accidental widening, or slot-as-kind substitution has occurred.

2.1 Recover underlined words through § 9 L‑rules table:  • recipe → U.Method / U.MethodDescription  • scheduled run → U.Work / U.WorkPlan  • promise → U.PromiseContent  • ability → U.Capability  • actor‑mask → …Role / RoleAssignment  • document or evidence-bearing publication cue → Episteme with EvidenceRole or RequirementRole 2.2 Apply LEX.Morph (§ 8): suffix gates (…Role/…Work/MethodDescription/Service), casing, reserved prefixes. 2.3 Pass EntityOfConcern and Description-episteme boundary and specification-use check: the EntityOfConcern named directly; recipes/docs as Description epistemes; Spec only where the specification-granting gate is present; actuals as run records. 2.4 Attach Context tags on first use; set twin labels (Tech/Plain) in the local Glossary. 2.5 Record a local KindRestorationCheck for every changed FPF-governed phrase: pre-repair kind/relation/slot-or-use-position/use/scope, post-repair kind/relation/slot-or-use-position/use/scope, and preserved/split/intentionally changed/blocker disposition. A changed word without this check remains an unresolved lexical finding. If a relation, signature, field, mathematical-lens, role, method, work, evidence, assurance, gate, or decision use-position is live, cite the governing pattern for that position; E.10 detects the wording-use problem and does not replace the selected ontology.

Pass 3 — Stitch & publish

3.1 Add safe rewrites for any anti‑patterns you found (use § 9.2 quick table). 3.2 If sameness is needed across Contexts, create a Bridge (F.9) with explicit kind/dir/CL/Loss/scope (apply A.6.9 (RPR‑XCTX) when quoted or imported source wording uses umbrella “same/equivalent/align/map/…” language). 3.3 Publish a one‑page UTS (F.17) for the Context (columns: Context, Tech label, Plain label, Kernel anchor, Warnings). 3.4 Log a short DRR when renames/aliases occur (F.13), linking to grep results that motivated the change.

ULR conformance prompts (normative, concept-only questions)

Use these prompts during review. They reference § 7 (MG-DA) and § 8 (LEX.Morph) instead of repeating them.

  1. Context prompt. Does each potentially polysemous noun live inside a named U.BoundedContext?
  2. EntityOfConcern and Description-episteme boundary and specification-use prompt. Does each sentence use the correct boundary (the EntityOfConcern named directly; Description-episteme use for descriptions; specification use only where a neighbouring gate grants it; run: actuals)?
  3. Token prompt. For new/renamed tokens, is LEX.TokenClass declared and consistent with where the token appears?
  4. Head-kind prompt. Does the head noun name what kind of thing the phrase is actually about (Role/Method/Service/Work/Context/Characteristic/publication form/interpretation/process/authority use)? A narrowing qualifier alone does not answer this question.
  5. Qualifier-claim prompt. If an adjective, participle, genitive, or comparative modifier carries a claim being made, comparison criterion, relation, or admissible-use boundary, has that use been restored explicitly rather than left inside the modifier alone?
  6. Slot/use-position prompt. If the sentence names an object through a relation slot, signature slot, schema field, mathematical-lens use-position, or another FPF-governed position, are the object kind, position name, reference mode when live, admissible use, and governing pattern recoverable? If not, apply E.10.ARCH or the governing pattern before rewriting.
  7. Support-like interpretation prompt. If support, supported, supporting, or a support-headed compound has FPF-governed use, apply E.10:0.2 first and then use A.6.P support-like interpretation discrimination instead of a synonym swap. If the selected interpretation is base, anchor, or basedness, apply A.6.6 and state dependent, base, baseRelation, scope, live Γ_time, live witnesses, admissibleUse, and nonAdmissibleUse. If no interpretation can be selected, do not use support wording for reliance, publication, gate, decision, assurance, work, architecture, pattern-quality, or cross-context reuse.
  8. Comparison-basis prompt. If the sentence compares, ranks, escalates, or downgrades something, is the comparison basis ontologically homogeneous after head-kind and qualifier restoration?
  9. Morphology prompt. Do suffix/prefix/casing pass LEX.Morph gates (e.g., …Role, MethodDescription, Work)?
  10. Promise vs ability vs performance. Are Service (promise), Capability (ability), and Work (performance) distinct?
  11. Plan vs execution. Are WorkPlan windows separated from Work actuals?
  12. Evidence prompt. Do documents hold roles and justify, while systems act?
  13. Bridge prompt. If sameness spans Contexts, is there an explicit Bridge with CL and loss notes?
  14. Collision prompt. Did we run full-text + Reserved-Names checks (no other meaning of this token anywhere in FPF)?
  15. Naming-procedure prompt. If one durable reusable name is needed because no admissible existing token carries the needed meaning beyond one local repair, did we run the full F.18 MintNew or DocumentLegacy procedure rather than picking a label by intuition and filling a partial Name Card afterward?
  16. Value-substitution prompt. After the repair, can the declared reader still see the remaining admissible move, and did the repair preserve usability, affordability, semantic composability, neighbor-pattern fit, and local action guidance? If not, narrow the repair, keep ordinary wording with an recovery note with recovered kind and use, or leave the issue blocking instead of optimizing for lexical purity.

Working order for precision repair on FPF-governed prose. Restore the head kind first; a narrowing qualifier such as comparative, safe, interactive, or reliable does not by itself restore that kind. Then unpack the qualifier claim, then check whether the comparison or escalation basis is homogeneous. Only after that may a later Plain, didactic, or coarsened rendering admissibly relax the sentence, and even then the more precise upstream interpretation must remain recoverable.

SoTA-Echoing for lexical governance

E.10 lexical governance is not a private FPF style preference. It is a compact authoring discipline for communication, comprehension, term formation, discoverability, and error prevention. These external practice rows are admitted only where they change what an author or reviewer does in a live wording repair.

Practice sourceUse of source and source-currentness claimWhat E.10 adoptsWhat E.10 rejects
ISO 704:2022 and ISO 1087:2019 terminology work on concepts, definitions, designations, and term formation.Current-standard/reference-only for terminology work; official status does not make it complete SoTA for FPF semantic repair.Mutates E.10:0.2, E.10:0.2a, and E.10:11: use explicit designation and definition discipline when a term is minted, repaired, or made reusable; keep head kind, context, and intended use recoverable.Do not solve FPF wording by dictionary substitution, synonym stuffing, or global alias registry. Do not turn every term into a class hierarchy.
ISO 9241-110:2020 interaction principles and W3C WCAG 2.2 Understanding SC 2.4.6, 3.2.4, and 3.3.2 on descriptive headings/labels, consistent identification, and visible labels/instructions.Current-standard/reference and current practice anchor for comprehension, task suitability, predictable identification, and error prevention.Mutates E.10:0.2a, E.10:0.2c.15, E.10:0.2c.28, and E.10:11: require a repair to preserve the remaining reader move, usable local label, and predictable repeated label; treat label clarity as a usability constraint after kind recovery.Do not accept readability, friendliness, or a nicer label as proof that the term is semantically safe. Do not let a label change kind, scope, authority, or downstream use.
W3C SKOS Reference for controlled structured vocabularies and lexical labels, with heavier OWL/RDF ontology practice used only by ontology-bearing neighboring patterns named by value.Current reference source for controlled-vocabulary publication and label relations; not current-best source for every FPF wording repair.Mutates E.10:0.2b, E.10:0.2c.18, and E.10:0.2c.28: keep vocabulary labels, concept-like heads, registries, maps, and reusable names recoverable as publication or naming objects named by value before reuse; send durable naming to F.18 and relation, source, or domain ontology to neighboring pattern governing the claims.Do not make OWL-style term-to-class modeling the default answer to every vague term. Do not let a controlled vocabulary become a second FPF ontology or replacement trigger registry.
W3C WCAG 2.2 headings/labels and consistent-identification guidance, plus FPF-internal E.11, README, ToC, and I.2 entry-distribution practice.Current reference source for discoverability and label consistency; FPF entry projection remains the governing local architecture.Mutates E.10:0.2b, E.10:0.2c.29, E.10:12, and E.11 coordination: keep trigger wording discoverable enough for first repair, but make final wording, governing-pattern application, and entry projection govern the result.Do not turn trigger lists into local lexical registries, front-door taxonomies, or accepted replacement vocabulary. Do not let search convenience select ontology.

The practical result is simple: lexical governance must improve action guidance and semantic composability, not become language-police work. A SoTA row that does not change a rewrite, a forbidden shortcut, a governing-pattern application, a conformance prompt, or a reopen cue remains decorative and does not carry E.10.

ULR regression cues (concept-only “diff” triggers)

Re-review your prose when any of these happen:

  • Context edition changes → re-affirm twin labels, Bridges, and acceptance wording.
  • A role/type name grows (“and/plus/--”) → apply MG-DA: split or bundle (A.2).
  • A slash, and, plus, &, or similar grouping mark appears in FPF-governed wording → classify the span before editing the mark. The trigger is the FPF-governed grouping use, not the character itself: LLM output, review text, intake notes, or draft prose often uses a slash as lazy and/or, as an untyped bundle, or as an attempt to point at a hidden kind. If the grouped words are claim-bearing heads, relation heads, kind candidates, a lazy and/or join, or an attempt to point at a hidden kind, apply MG-DA, A.6.P, or the selected restoration pattern: split, bundle, or recover the relation named by value and admissible use. If the mark is part of accepted notation or a conventional designation such as a standard name, source name, discipline abbreviation, established compound name, formula, ratio, fraction, unit, path-like quoted source token, title, product name, or URL, keep the notation and classify its use; do not rewrite ISO/IEC, ISO/IEC/IEEE, 1/2, or similar conventional forms merely to remove the mark.
  • A “service” statement broadens scope → check that acceptance terms cover the new promised content, endpoint, or work boundary; else split the Service.
  • Recipes gain/lose steps → update MethodDescription, not Service or Role names.
  • Evidence verbs creep into actor sentences → re-apply L-rules (documents do not act).
  • A generic head or support-headed compound acquires FPF-governed claim or admissible use (comparative, safe, interactive, reliable, support, supported, supporting, support-looking, and similar modifiers or heads) → restore the head kind first, then unpack the qualifier claim or support-like interpretation before broader publication.
  • New token minted → ensure LEX.TokenClass declared; run collision checks; add CharacteristicSpace if enum.
  • Suffix drift (e.g., …Work on a plan) → fix via LEX.Morph.
  • Cross-Context reuse by label appears → require a Bridge (F.9) or split senses.
  • A guarded head needs a new label → prefer a guarded-head note first; if no admissible existing token remains for one durable reusable name, handle the naming question with full F.18 MintNew or DocumentLegacy.

Teaching deck — the ULR quick card (reusable in any Context)

Say it cleanly, once (memorise): Role = assignment (mask) - Method = way‑of‑doing - MethodDescription = recipe (document) - Work = run (dated) Capability = can‑do within bounds (envelope + measures) - Service = promise (access + acceptance) EntityOfConcern and Description-episteme boundary separates the EntityOfConcern from Description epistemes; specification use is a gated use of a Description episteme; publication faces/forms/units/carriers do not act; meaning use is interpreted within named Contexts; Bridge records state cross-context correspondence, direction, loss, and scope.

Name forms (allowed morphology):Types/roles: <Noun><Role/Type> (IncidentCommanderRole, NormativeStandardRole, WorkItemType). • Statuses: <Noun>Status inside the Context’s role space (ApprovedStatus) — status‑only; not enactable. • No suitcase nouns: avoid “and/plus/&” in names; use bundles (A.2) or separate roles. • Acronyms: first expansion + register; short‑form registered per § 7.7.

Three worked micro‑examples — ULR across domains (informative)

Healthcare (OR context)

Messy: “The surgical process is scheduled at 08:00; the SOP approves the incision and the service documents recovery.” ULR rewrite:WorkPlan OR‑Case‑221 starts 08:00 and will execute MethodDescription Incision_v4. SOP_OR_v4 holds RequirementRole; a SpeechAct Work by QA_Officer#ApproverRole authorises the run. The hospital offers Service ‘Post‑op monitoring’ (access = ward protocol; acceptance = vitals envelope).”

Manufacturing (assembly line)

Messy: “The welding function provides air‑tight seams; the process costs 3 min.” ULR rewrite:Robot_SN789 has Capability ‘execute Weld_MIG_v3 within envelope E at measures M’. Work instances that fulfil Service ‘Provide seam S’ average 3 min; acceptance bounds are in Seal_Acceptance.md. The MethodDescription is Weld_MIG_v3; the Role is WelderRole.”

Cloud/SRE (production Context)

Messy: “The storage service wrote logs and the deployment process failed after 2 min.” ULR rewrite:sCG‑Spec_ci_bot#DeployerRole:CD_v7 performed Work ‘Deploy r4711’ (failed at T+120 s). The platform offers Service ‘Object Storage’ (access = S3_API_Spec_vX; acceptance = durability/availability targets). LogWriter is a System bearing TransformerRole that wrote the records; the service did not act.”

Closing notes (governance & purity)

  • Notation‑agnostic. ULR is a language constitution, not a scanner or template. Apply it in prose, sketches, or formal models.
  • Where checks live. Convenience checks belong to Tooling; ULR itself stays notation‑agnostic. Conformance code lives in SCR‑LEX / RSCR‑LEX as referenced above.
  • Acts vs tokens. LEX applies to tokens; USM applies to acts (mint/rename/use). Conformance: LEX.TokenClass(t)=c ⇒ USM.Scope(usage) ∈ AllowedScopes(c) (§ 7.5).
  • Guards honoured. DevOps Lexical Firewall and Unidirectional Dependency remain intact.
  • Reserved “plane”. Only CHR:ReferencePlane uses the bare word plane. E.10.D2 is the EntityOfConcern and Description-episteme boundary plus specification-use gates, with publication lanes kept separate; all other category talk is expressed as Characteristics in a CharacteristicSpace when scale semantics are declared.

One‑line memory: “ULR keeps words honest so ideas stay composable.”

E.10:End

Wording-Use Ontological Precision Restoration Architecture

Type: Architectural (E) Status: Stable Normativity: Normative unless explicitly marked informative

Plain-name. Wording ontology repair architecture.

Intent. Keep FPF wording-use precision restoration distributed without letting every pattern of concern or subject pattern grow its own first-stage trigger registry. E.10 catches one overloaded wording use; E.10.ARCH says which applicability rows exist, how one row selects the first applicable restoration or governing pattern, and when repeated repair-only prose should be extracted from a subject pattern.

E.10.ARCH is not a generic language-cleanup pattern. Its mechanism is ontological reconstruction: recover what kind of thing is being talked about, which adjacent EntityOfConcern values, relation records, claim records, slot or use-position values, and FPF kinds named by value or references are admissibly involved, which relation, source-use disposition, or state-family value is live, and, when plain ontology is not enough, which mathematical lens under C.29 or which pattern-defined formal apparatus makes the candidate structure checkable. The output returns to wording only after that kind, slot/use-position, and use structure is recoverable. When the kind is recoverable but phrase-level apparatus still hides it, use F.19 for ontology-first plain technical rewriting.

Builds on. E.10, A.6.P, A.6.F, C.2.P, C.30.STRAT, A.19.SPR, A.6.3.CSC, F.18, E.8, E.19, and E.2.

Coordinates with. A.22, C.30, C.30.P, C.30.STRAT, C.30.ASV, named C.30.* structure or view patterns, C.16, A.17, A.18, A.19, C.25, C.27, C.29, F.19, E.21, E.11, I.2, and evidence, assurance, gate, work, decision, causal-use, release, and publication patterns governing those claims when those claims are being made.

Use this when

Use this pattern when a recurring FPF-governed wording-use problem cannot be closed by one local E.10 rewrite because the wording hides a stable primary-EntityOfConcern use field set, a stable recovery apparatus, and a useful remaining reader move.

Use it especially when a subject or adequacy pattern contains repeated first-stage repair prose such as:

  • architecture-vs-diagram, model, graph, ADR, dashboard, view, layer, level, tier, stack, block, expert, cache, router, or gate triage before the architecture, structure, control, module-interface, flow, scale, publication, or gate pattern can start;
  • axis, dimension, feature, property, metric, indicator, score, strong, weak, robust, level, coordinate, threshold, or scalar-quality triage before a characteristic or scale pattern can start;
  • quality-term repair that decides between relation construction, quality characterization, evaluative characterization, Q-bundle use, pattern-quality coordinate use, action invitation, bridge, or governing pattern;
  • state-family wording such as state, status, posture, readiness, stance, or currentness before the bearer, state frame, value set, admissible use, or governing pattern is recovered;
  • source, publication, carrier, face, PublicationUnit, dashboard, documentation, or source-return wording whose project-side use is not yet recovered;
  • relation-like, function-like, evidence-like, assurance-like, gate-like, work-like, decision-like, causal-use, release, or naming wording whose governing pattern is already known or must be recovered before the sentence is admitted.

What goes wrong if missed. FPF accumulates many small local trigger lists. One pattern says "architecture is not a diagram", another says "metric is not proof", another says "quality is not one scalar", and a reviewer cannot tell which pattern carries the repair. The text looks more precise, but the reader does not get a stable first move.

What this buys. E.10.ARCH gives one architecture for distributing wording-use repair: E.10 catches; E.10.ARCH selects the row and extraction criterion; a realization pattern or governing neighboring pattern recovers the ontology; the subject pattern returns to its own primary EntityOfConcern and first useful move.

First useful move. Decide whether the wording can close locally under E.10, already has a governing pattern, or needs one applicability row with stable semanticAreaBaseConcept, semanticArea, semanticAreaSenseFamily, ontologicalNeighborhood, recovery apparatus, and remaining reader move.

Not this pattern when.

  • If a sentence is repaired locally under E.10, stop there.
  • If the governing pattern and primary EntityOfConcern, relation record, or claim record are already recoverable by value, use that governing pattern directly.
  • If the kind under repair is evidence, assurance, gate, work, decision, causal-use, release, mathematical-lens use, grounded architecture adequacy, structural-view adequacy, characteristic-space construction, Q-bundle construction, pattern-quality evaluation, or another FPF kind named by value, the governing pattern governs its own invariant. E.10.ARCH only governs the wording-use restoration distribution.
  • If the wording problem is phrase-level apparatus around an already recoverable kind, use F.19 rather than opening a new wording-use restoration row.

Primary EntityOfConcern and applicability-row scope

The primary EntityOfConcern for this pattern use is the local FPF architecture of WordingUseRestorationApplicabilityRow rows.

A WordingUseRestorationApplicabilityRow is a pattern-local row over one semanticAreaBaseConcept, one semanticArea, one semanticAreaSenseFamily, one recurring entityOfConcernUseFields field set, and one ontologicalNeighborhood. It states:

  • the trigger source recognized by E.10;
  • semanticAreaBaseConcept, semanticArea, and semanticAreaSenseFamily;
  • the primary EntityOfConcern kind and encountered FPF kind or reference;
  • the relation between the encountered FPF kind or reference and the primary EntityOfConcern;
  • the FPF kind or relation named by value recovered when live;
  • live-claim or admissible-use classification when live;
  • source-use disposition when live;
  • state-family value or governing-pattern result when live;
  • sentence role;
  • admissible use;
  • non-use boundary;
  • remaining reader move;
  • first applicable restoration or governing pattern;
  • recovery product;
  • first return to the subject pattern.

WordingUseRestorationApplicabilityRow is not a U.* kind, not a conformance record, not a process task, not a deontic obligation, and not a durable project record by itself.

WordingUseRestorationApplicabilityTable is the pattern-local publication table of such rows. It is not a pattern cluster, workstream, campaign, module, semantic parent, or authority-bearing record.

semanticAreaBaseConcept is the Base concept, source-side phrase, or already settled row cue by which the reader first recognizes the candidate semantic unit.

semanticArea is the Part-F semantic unit used by one wording-use restoration row: one Concept-Set row, one UTS row, or an explicitly bounded row-set whose rows remain sense-uniform enough for one recovery apparatus.

semanticAreaSenseFamily is the Part-F senseFamily or FPF kind named by value-family discriminator that prevents the row from becoming a theme, domain, workstream, or pattern-nest label.

ontologicalNeighborhood means the FPF applicability neighborhood around that named semanticArea: primary EntityOfConcern kind, admissible adjacent FPF kinds or references, relations, descriptions, publication forms or carriers, source-use dispositions, state-family values, use boundaries, applicable FPF patterns, remaining reader move, and the stable apparatus that makes the recovery checkable. It is not the semantic unit by itself and is not textual proximity, filename proximity, ToC proximity, alphabetic proximity, workstream grouping, topic grouping, discipline column, domain label, or pattern-nest placement.

pattern nest means a numbering or placement grouping such as A.6.*, C.16.*, or C.30.*. One applicability row may point to a realization pattern in one pattern nest, but the row and the nest are not the same concept.

Distribution architecture

The standing construction is:

  1. E.10 catches an FPF-governed wording use and either closes it locally or selects a governing pattern, controlled precision-reduction pattern, durable-name path, or fail-closed non-use disposition.
  2. E.10.ARCH maintains the shared recovery algorithm and the WordingUseRestorationApplicabilityTable.
  3. A realization pattern or retained governing pattern such as A.6.P, A.6.F, C.2.P, C.30.P, C.30.STRAT, C.16.P, C.16.Q, or A.19.SPR unpacks the wording according to the shared algorithm for one named semanticArea and its ontologicalNeighborhood.
  4. Additional applicability rows, and only when needed additional realization patterns, appear when repeated FPF-governed wording hides a stable primary-EntityOfConcern use field set, a stable recovery apparatus, and a useful remaining reader move that no existing governing pattern already carries.
  5. E.8 governs publication-form and placement wording such as pattern nest, and requires authoring prose that uses ontologicalNeighborhood to expose the governing semanticAreaBaseConcept, semanticArea, and semanticAreaSenseFamily rather than treating neighborhood as the semantic unit.
  6. E.19 checks that authored pattern hosts preserve this distribution and do not keep rival first-stage repair doctrine.

This architecture keeps E.10 compact. It also keeps subject patterns centered on their own primary EntityOfConcern values, decisions, characteristics, structures, mathematical lenses, consequences, and worked uses.

EntityOfConcern and recurring hidden-field distribution

For wording such as EntityOfInterest, EoI, EoIClass, describedEntity, DescribedEntityRef, and primary described entity, or for selected EntityOfConcern-family heads such as EntityOfConcern, entityOfConcernRef, EntityOfConcernRef, EntityOfConcernClass, and publicationUnitPrimaryEntityOfConcern, the repair is distributed by the live FPF-governed use:

EntityOfInterest, EoI, EoIClass, describedEntity, DescribedEntityRef, and primary described entity are active repair triggers. FPF-governed wording must recover the EntityOfConcern-family use named by value, publication-unit primary-EoC use, or local FPF kind, then rewrite to EntityOfConcern, entityOfConcernRef, EntityOfConcernRef, EntityOfConcernClass, publicationUnitPrimaryEntityOfConcern, or the local FPF kind named by value. If no use is recoverable by value, the wording remains quoted source or trigger wording and cannot be used for reliance.

  • C.2.1 carries the selected episteme slot and reference ontology: EntityOfConcernSlot, entityOfConcernRef, EntityOfConcernRef, EntityOfConcernChangeMode, and EntityOfConcernClass.
  • C.2.P carries episteme, publication, and source-use precision restoration when the sentence still hides source wording, claim-bearing episteme, publication or carrier construction, project-side reliance, pattern-application wording, or use or non-use disposition.
  • F.18 carries durable naming, selected head settlement, and source-string and durable-name discipline after the kind under repair and use are recovered.
  • E.17.AUD.OOTD carries publicationUnitPrimaryEntityOfConcern for one bounded publication unit with one carried move and one outside-work boundary; it must not create a second C.2.1 slot.
  • A.6.3, its retained entityOfConcernRef-preserving specializations, and A.6.4 carry preservation or retargeting of the EntityOfConcern across episteme morphisms.
  • Exact evidence, assurance, gate, work, decision, architecture, characteristic, mathematical-lens, or project-side patterns receive their own claim being made or admissible-use boundary directly when it is already recoverable.

This selected-family case is the standing example for recurring hidden-field architecture. When a new hidden-field family recurs, it is not solved by adding local warning prose to every subject pattern. It either uses an existing governing pattern, gets one applicability row in this table, or justifies a new realization pattern only when the hidden field set, recovery apparatus, and remaining reader move recur across FPF-governed texts.

Rationale and source-use lines

This distribution is selected because the recurring failure is not "too few word rules". The failure is that repair-only trigger prose migrates into subject patterns and begins to compete with their primary EntityOfConcern and first useful moves. A common symptom is a non-semio pattern whose Solution mainly teaches that a description, view, publication, record, card, diagram, source, or file is not a permission, promise, prescription, evidence record, assurance verdict, decision, gate passage, release, work occurrence, or authority source. Those guards are often correct, but their ontology is publication pragmatics, description pragmatics, and neighboring-pattern assignment, not the subject matter of the architecture, method, role, evidence, or characterization pattern. A workable FPF answer therefore needs three separations at once: a cheap shared trigger scan in E.10, a shared recovery architecture in E.10.ARCH, and local realization only where a named semanticArea has stable row identity, a stable field set, an ontologicalNeighborhood, and a remaining reader move.

Source or practice lineSource-use roleWhat the line changes in E.10.ARCH
Current FPF distribution: E.10, E.10.ARCH, A.6.P, A.6.F, C.2.P, C.30.P, C.30.STRAT, C.16.P, C.16.Q, A.19.SPR, F.18, E.8, E.19, E.11, and I.2.Current FPF-internal architecture source line for the selected distribution.Keeps E.10 compact, puts the shared recovery algorithm in E.10.ARCH, sends relation, source-use, architecture, stratification-source-label, characteristic, quality, state-family, function-like, naming, entry-distribution, and expanded entry-disambiguation cases to realization or governing patterns named by value, and gives E.19 a distribution-preservation check.
Pattern-language locality and FPF primary-EntityOfConcern discipline in E.8 and E.19.Current FPF authoring and review source line; not an external standard imported as ontology.Forces thin governing-pattern pointers and blocks local trigger-registry copies inside patterns of concern whose real work is architecture, structure, characteristic, quality, evidence, gate, work, decision, state-family precision, or release.
Terminology and controlled-vocabulary practice named in E.10:11a only where it concerns designations, labels, discoverability, and controlled vocabulary publication.Current-standard and reference-use source line; it does not define FPF kind ontology.Provides explicit recovered heads and reusable-name discipline, but rejects a central word list or controlled vocabulary as the solution to every wording-use repair.
Current governing-pattern growth in FPF.Reopen pressure, not proof of this pattern's authority.Requires a row to be removed, narrowed, or changed when a new governing pattern can carry the EntityOfConcern under repair, relation, claim, or local field directly, or when realization patterns start copying the shared algorithm back into local prose.

The selected architecture is lowered or reopened when one of those source lines changes: if E.10 can close the issue locally, if a new governing pattern removes the need for a restoration row, if a realization pattern needs a different stable field set, or if subject patterns again start carrying duplicated first-stage trigger registries.

Shared recovery algorithm

Use this recovery order for FPF-relevant wording-use restoration cases. Each realization pattern may publish a compact local form, but the order stays shared.

  1. Trigger and bounded text. Name the bounded text span or publication unit, trigger span, local sentence role, register classification, and whether the text is conformant FPF, project text deliberately using FPF-governed terms, pattern references, relation names, or conformance claims, or source text being unpacked for possible FPF use.
  2. Cheap local closure. Check whether the wording has no FPF-governed use or only a small local head, register, or morphology repair. If yes, repair locally under E.10, state the remaining reader move, and stop.
  3. Head kind and candidate ontology. Recover the head kind, register classification, EntityOfConcern and Description-episteme boundary, specification-use gate when live, candidate referents, candidate EntityOfConcern values, relation records named by value, claim records, candidate relations, candidate slots or use-positions, candidate carriers or publications, and scope, time, viewpoint, or context facets. Include literal and intended candidates when metonymy or compression is plausible.
  4. Semantic area, ontological neighborhood, and governing-pattern selection. State semanticAreaBaseConcept, semanticArea, and semanticAreaSenseFamily; then select the ontologicalNeighborhood and first applicable governing pattern by primary EntityOfConcern kind and admissible adjacent FPF kinds, references, or relations: relation construction, function-like kind and relation recovery, episteme, publication, source-use, selected structure or architecture description, characteristic or scale construction, quality characterization, evidence, assurance, gate, work, decision, causal-use, naming, controlled coarsening, or another governing FPF pattern.
  5. Formal apparatus or stable substrate. State the stable apparatus that makes the repair checkable: relation or signature slots under A.6.0/A.6.5/A.6.P, publication relation set, source-use disposition, selected structure, architecture question, characteristic or scale construction, quality bundle, mathematical lens under C.29, evidence path, gate record, work occurrence, decision record, assurance argument, causal-use record, or governing-pattern field set. When the same object is used in several relation/signature/lens positions, record the object kind and slot/use-position separately and cite the governing pattern; E.10.ARCH selects the restoration architecture rather than duplicating that pattern's ontology.
  6. Normalized ontology and lexical projection. Produce the repaired wording, compact repair note, record-shaped value, governing-pattern application, or non-use disposition. Do not replace one umbrella word with another. The replacement candidate is itself a bounded wording use until it passes the E.10 trigger scan or is demoted to ordinary wording, quote-only wording, reduced-use cue, blocked use, or incomplete rewrite.
  7. Admissible use and remaining reader move. State the admissible use, non-admissible claim escalation or adjacent use, and one useful reader move. If the wording is type-correct but inert, the repair is incomplete.

The sequence is shared; each wording-use restoration case differs by semanticAreaBaseConcept, semanticArea, semanticAreaSenseFamily, primary EntityOfConcern use fields, slot/use-position field set, ontologicalNeighborhood, governing pattern, substrate, and result.

Applicability table

Semantic area and ontological neighborhoodFirst applicable patternTrigger familyRequired recovery apparatusTypical recovery product
Relation construction; primary recoverable use is relation use or relation-bearing claimA.6.P and retained A.6 relation specializationsRelation, endpoint, qualifier, slot, scope, time, viewpoint, evidence-role distinction where live, basedness, service, bridge wording, whole or part, mapping, comparison, dependency, or evaluative ascription when the hidden claim is relation construction.RelationKind, slot discipline, QualifiedRelationRecord, endpoint facets, qualifiers, L, A, D, and E hooks, and retained relation specializations named by value.relation rewrite, relation record, candidate-set note, retained specialization application named by value, or fail-closed Plain disposition.
Function-like wording; primary recoverable use is the FPF kind named by value, relation, or claim hidden by function, functional, functionality, effect, or similar wordingA.6.F first when the FPF kind named by value, relation, or claim is not already recovered; direct governing pattern when it is recovered by valueFunctional architecture, required transformation or effect, method, work occurrence or result, role expectation, mathematical function, relation, loss, objective, quality or functionality claim, module allocation, interface or signature relation, or evidence, assurance, gate, or decision overread.FunctionUseRepair, kind and relation recovery, false-kind list, governing-pattern reference, C.30 or C.30.ASV functional-structure boundary, C.29 mathematical-lens boundary, C.16 or C.25 quality boundary, A.6.M module-interface relations and A.6 signature or slot applications.FPF kind or relation named by value assignment, governing-pattern application, FunctionFlowModuleAlignmentNote, mathematical-lens application, quality or characteristic application, A.6.M module-interface application, ordinary-prose demotion, or stop.
Episteme, publication, and source-use; encountered entity or construction may be source span, carrier, face, publication, PublicationUnit, EntityOfConcern-like head, old EntityOfConcern-family wording, or text-work evaluation cueC.2.P first; evaluation pattern governing the recovered evaluation claim after recovery when the corresponding claim is being madeSource-expression, episteme or publication wording, FPF-governed wording, EntityOfConcern or describedEntity-family wording, and reading, read, or quality-read wording when the word could mean source interpretation, publication use, FPF-governed use, or evaluation hidden inside text work.source-expression clarification, FPF-governed use, claim-bearing episteme, EntityOfConcern, publication, view, face, carrier relation when that relation is being made, PublicationUnit, publicationUnitPrimaryEntityOfConcern when live, use disposition, project-side kind named by value or reference, sentence role, and evaluation claim or bundle named by value when live.local rewrite, compact epistemic precision-restoration row, full check, recovered-by-value, reduced-use, blocked-use disposition, neighboring-pattern application, or evaluation-pattern application such as E.22, E.21, or E.9.DA.
Architecture and structure; primary recoverable use is selected structure, ArchitectureOf@Context relation, conditional ArchitectureDescription@Context use, structural view, or named C.30 subcaseC.30.PArchitecture-heavy or structure-heavy wording whose EntityOfConcern under repair, relation, or claim is not yet recoverable.A.22 selected structure and structural-view discipline, C.30 ArchitectureOf@Context, C.30.ASV structural-view and structure-kind discipline, named C.30 subpattern applications, and C.30.AD only when full architecture-description mechanism is live.architecture-structure repair note, repaired wording, selected-structure naming, architecture question, source-return condition, governing-pattern result, ordinary-prose demotion, or stop.
Stratification and source labels; primary recoverable use is hidden behind layer, level, tier, stack, ladder, rung, block, expert, cache, router, gate, or close engineering source labelsC.30.STRAT when the governing pattern is not already recovered; direct governing pattern when it is recovered by valueEngineering, mathematical, publication, project, control, module, neural-network, or architecture prose uses a source label as if it named the FPF kind directly.Source label, literal source wording, candidate primary EntityOfConcern, recovered FPF kind, recovered relation, recovered claim-use, recovered source-use disposition, governing-pattern selection, admissible use, non-use boundary, and adjacent governing-pattern applications to C.30.P, C.30.LCA, A.6.M, C.30.TGA-FLOW-REL, C.16.P, C.29, C.2.P, gate, work, or decision patterns, or ordinary source label.StratificationSourceLabelRepairNote, direct governing-pattern application, ordinary-prose demotion, quote-only, reduced-use, or blocked-use disposition, or stop.
Characteristic and scale; primary recoverable use is characteristic, scale, coordinate, score, comparison, indicator role, or characteristic-space constructionC.16.PCharacteristic, scale, coordinate, value, score, indicator, threshold, comparison, metric, axis, dimension, feature, property, level, strong, weak, robust, or benchmark wording whose construction is not yet recoverable.A.17 Characteristic, A.18 CSLC, C.16 measurement, unit, evidence stub, A.19 CharacteristicSpace, C.25 Q-bundle, C.29 mathematical-lens boundary, and E.21 pattern-quality coordinate discipline.characteristic-scale repair note, declared Characteristic, Scale, Coordinate, Value, and Score construction, non-comparability, non-measurement, blocked-gate disposition, governing-pattern result, ordinary-prose demotion, or stop.
Quality characterization and evaluative characterization; primary recoverable use is quality characterization, Q-bundle use, or pattern-quality coordinate useC.16.QQuality or evaluative characterization wording when the hidden claim is not relation construction.C.16.P where bearer or scale construction is hidden, C.25 Q-bundle, E.21 pattern-quality coordinates, and characterization or relation applications named by value.quality-term repair note, quality-bundle or pattern-quality coordinate use, relation or bridge split when live, blocked scalar, gate, or release overread, governing-pattern result, ordinary-prose demotion, or stop.
State-family hidden claim; primary recoverable use is a bearer with a state-like value, status, readiness, currentness, or local finite field whose frame is hiddenA.19.SPRState, status, posture, readiness, stance, currentness, validity, stable, accepted, blocked, candidate, admissible, ready, degraded, or close state-family compounds.bearer kind, state frame or governing pattern, value set or classification source, admissible use, non-admissible overread, validity window or reopen condition, and direct governing-pattern application for source, evidence, assurance, gate, work, decision, temporal, lens-use, pattern-quality, or process cases.state-family repair note, retained local field with bearer, value set, and admissible use named by value, direct governing-pattern application, quote-only cue, reduced-use cue, blocked use, ordinary-prose demotion, or stop.
Neighboring claim or admissible-use boundary already recoverable by valueEvidence, assurance, gate, work, decision, causal-use, release, mathematical-lens, naming, controlled-coarsening, action-invitation, A.6.M module-interface, or another governing-pattern applicationAny trigger family whose recovered FPF kind, relation, claim-use, source-use disposition, or admissible-use boundary is already recoverable by value.The governing pattern's own ontology and conformance fields.Direct governing-pattern application; no detour through a new restoration pattern.

Direct known governing-pattern rule

If the governing pattern and its primary EntityOfConcern, relation record, or claim record are already recoverable by value, use that governing pattern directly. Do not send direct C.30, C.16, C.29, E.21, evidence, assurance, gate, work, decision, causal-use, release, naming, controlled-coarsening, action-invitation, A.6.M module-interface, or mathematical-lens cases through a restoration pattern only because a familiar trigger word appears.

Apply A.6.P, A.6.F, C.2.P, C.30.P, C.30.STRAT, C.16.P, C.16.Q, or A.19.SPR only when wording hides the EntityOfConcern under repair, relation, characteristic, scale, score, quality characterization, comparison reference set, source-use disposition, state-family value, admissible use, or remaining reader move.

Admission and extraction criterion

Add or retain a WordingUseRestorationApplicabilityRow when all of the following are true:

  • the wording recurs across FPF-governed texts or project text deliberately using FPF-governed terms, pattern references, relation names, or conformance claims;
  • the hidden primary-EntityOfConcern use field set is stable;
  • the recovery apparatus or field set is stable enough to teach;
  • repeated in-place repair distracts from the subject pattern's primary EntityOfConcern and first useful move;
  • a useful remaining reader move survives after overread removal;
  • no existing governing pattern already carries the row without duplicating repair-only doctrine inside subject patterns.

Do not add a new realization pattern when an existing governing pattern such as A.6.F, A.6.A, A.6.M, A.15.4, A.6.6, A.6.3.CSC, A.10, B.3, A.20, A.21, A.15, C.11, C.28, or another governing pattern already carries the EntityOfConcern under repair, relation, claim, or field. Record that pattern as the governingPattern.

Extract repair-only material from a subject pattern when the material is only trigger lists, false-friend rows, anti-umbrella prose, or repair fields that must run before the subject pattern can start. Leave a narrow first-use cue or governing-pattern relation in the subject pattern.

Keep material in the subject pattern when it states the subject pattern's own invariant, worked case, conformance condition, characteristic construction, structural construction, mathematical lens, source-return condition, or user action.

Subject-pattern thin-pointer rule

Subject patterns keep at most one local first-use cue when the EntityOfConcern under repair, relation, claim, or field is hidden, then name the selected precision-restoration pattern as a pattern through ordinary reference apparatus or Relations. They do not turn that reference into local reference boilerplate, and they do not copy:

  • the full E.10 trigger registry;
  • this shared algorithm;
  • the WordingUseRestorationApplicabilityTable;
  • broad false-friend lists whose only job is first-stage repair;
  • old migration history written in place of current architecture prose.

A thin pointer is acceptable when it helps the working reader choose the right first move, for example:

  • use C.30.P when architecture or structure wording hides whether the use under repair is selected structure, architecture-description use, structural-view use, source, model, diagram, graph, dashboard, or ordinary prose;
  • use C.30.STRAT when layer, level, tier, stack, ladder, rung, block, expert, cache, router, gate, or a close source label hides whether the use under repair is a control-layer relation, module-interface relation, functional-flow relation, scale or coarse-graining relation, publication relation set, gate relation, neighboring use named by value, ordinary source label, quote-only cue, or blocked use;
  • use C.16.P when metric, score, axis, dimension, feature, property, indicator, strong, weak, robust, level, coordinate, threshold, or comparison wording hides characteristic or scale construction;
  • use C.16.Q when quality or evaluative characterization wording hides Q-bundle, pattern-quality coordinate, relation construction, action-invitation, bridge, or characterization use named by value;
  • use A.19.SPR when state, status, posture, readiness, stance, currentness, or a local state-like field hides bearer, state frame, value set, admissible use, or governing pattern;
  • use C.2.P when source, publication, carrier, face, PublicationUnit, dashboard, documentation, or text-work wording hides source-currentness relation or project-side reliance.

Name and placement discipline

semanticArea is the selected Part-F Tech term for the semantic unit used by a wording-use restoration row. Plain speech may say "semantic area" or "meaning area" only as a gloss for that declared Part-F row or bounded row-set.

meaning area, theme, pattern area, pattern cluster, workstream, campaign, module, and branch are not selected as Tech architecture terms for this distribution. Tech prose must resolve those cues into semanticAreaBaseConcept, semanticArea, semanticAreaSenseFamily, entityOfConcernUseFields, ontologicalNeighborhood, governingPattern named by value, and realization pattern.

pattern nest is allowed for ID and placement grouping such as A.6.*, C.16.*, or C.30.*. It is not a semantic parent relation and not an authority relation.

SelectedLocusObligationClosure is the current E.9.DA coordinate name for selected-locus obligation closure. Do not reintroduce ReceivingLocusObligationClosure as a general obligation kind, locus kind, pattern role, or restoration vocabulary.

Examples and near misses

WordingApplicable resultBlocked overread
"The architecture is the diagram."C.30.P recovers whether the diagram is publication or carrier, structure view, architecture description, or ordinary source cue; then C.30 or C.30.ASV applies only after the selected architecture or structural-view use is recovered.diagram-as-architecture; diagram-as-proof; diagram-as-gate.
"ArchitectureOf@PlantOps is defined over structures S1 and S2 under context C."Direct C.30; no C.30.P unless selected structure, architecture-description use, structural-view use, source use, model use, diagram use, graph use, dashboard use, or ordinary prose remains hidden.unnecessary restoration detour.
"The model has three layers."C.30.STRAT treats layers as a source label until the recovered FPF kind, relation, claim-use, or source-use disposition is recovered: control-layer relation, neural-network block sequence, publication relation set, mathematical scale or coarse-graining relation, or ordinary source wording. Then the governing pattern applies to the recovered result.layer-as-universal-kind; source label as proof of structure.
"This score proves readiness."C.16.P recovers characteristic, scale, value, score, threshold, comparison reference set, and gate, evidence, and decision pattern applications.score-as-proof; score-as-release permission.
"This source supports the claim."C.2.P is used if source-currentness relation or publication relation set is live; relation slice applies A.6.P; final use states recovered relation or non-use disposition.source-as-proof; support-as-generic relation.
"Quality improved."C.16.Q recovers quality characterization or evaluative characterization, or names the C.16.P, C.25, E.21, A.6.P, action, work, or bridge pattern application governing the recovered claim.quality-as-one scalar; quality-as-gate.
"The function improved maintainability."A.6.F first recovers the FPF kind named by value, relation, or claim when hidden; quality or maintainability wording then goes to C.16.P, C.16.Q, C.25, or quality pattern governing the claim when live.function-as-default-architecture; maintainability-as-unscaled verdict.
"Read this pattern for improvement proposals."Recover whether the live FPF-governed use is source-publication use, bounded comparative review unit, or improvement-oriented evaluation. Use E.22 only for improvement-oriented quality review under a declared pattern-under-improvement evaluation.generic reading as a pattern.
"This summary is enough for action."E.10 checks whether the wording is precision restoration or controlled precision reduction. If coarsened source-to-rendering use is live, A.6.3.CSC names source-bearing side, loss mode, narrower admissible use, non-admissible downstream use, and reopen condition.summary-as-full source; coarsening without declared loss.

Conformance checklist

CheckRequirement
CC-E10ARCH-1E.10 remains the compact trigger-and-applicability pattern; E.10.ARCH carries the shared algorithm and applicability-row architecture.
CC-E10ARCH-2Each WordingUseRestorationApplicabilityRow names semanticAreaBaseConcept, semanticArea, semanticAreaSenseFamily, primary EntityOfConcern kind and use fields, ontologicalNeighborhood, first applicable restoration or governing pattern, recovery product, non-use boundary, and remaining reader move.
CC-E10ARCH-3Direct known governing-pattern cases use the governing pattern directly instead of opening a restoration detour.
CC-E10ARCH-4A new realization pattern is added only when no existing governing pattern carries the stable recovery apparatus without duplicating repair-only doctrine inside subject patterns.
CC-E10ARCH-5Subject patterns of concern keep their primary EntityOfConcern and first useful move central and carry only thin first-use cues to precision restoration when wording is hidden. Generic guards about description and publication use are kept in a named description and publication-use boundary section or description-publication pattern governing that use; they do not become the subject Solution.
CC-E10ARCH-6reading, read, and quality-read wording remains trigger wording and does not mint ReadingPrecisionRestoration.
CC-E10ARCH-6aEntityOfConcern-like hidden fields follow the selected distribution: E.10 catches, C.2.1 carries slot and reference ontology, C.2.P restores episteme, publication, and source-use wording, F.18 settles durable heads and source-string decisions, E.17.AUD.OOTD carries publication-unit primary entity of concern, and governing patterns carry their own claim being made or admissible-use boundary.
CC-E10ARCH-6bState-family wording follows the selected distribution: E.10 catches, A.19.SPR realizes recurring hidden bearer, state-frame, value, and use recovery, and governing patterns carry already-recovered evidence, assurance, gate, work, decision, temporal, mathematical-lens, pattern-quality, source-use, or process cases directly.
CC-E10ARCH-6cStratification and source-label wording follows the selected distribution: E.10 catches, C.30.STRAT realizes recurring source-label repair, and governing patterns carry already-recovered control, module-interface, flow, scale or coarse-graining, publication relation set, gate, work, decision, or ordinary non-use cases directly.
CC-E10ARCH-7function, functional, functionality, and effect wording keeps A.6.F as first unpacker when the FPF kind named by value, relation, claim record, view, or governing-pattern application is hidden and does not default to architecture.
CC-E10ARCH-8semanticArea, ontologicalNeighborhood, and pattern nest follow E.8 placement discipline: semanticArea is the Part-F semantic unit, ontologicalNeighborhood is its applicability neighborhood, and pattern nest is placement. None of them becomes workstream, campaign, module, or authority-bearing record.
CC-E10ARCH-9Repair removes overread and preserves one useful admissible reader move. Type-correct but inert wording is not recovered by value.
CC-E10ARCH-10Validation checks cover duplicate trigger tables, stale quality-term-restoration links, broad U.* heads, shadow restoration apparatus, and entry or index drift.

Common anti-patterns

Anti-patternSymptomRepair
Classification without repairThe text says "this belongs under A.6.P" or "this belongs under C.2.P" but leaves no recovered wording, record, source-use disposition, direct governing-pattern application, or blocker.Apply the selected pattern or fail closed.
Trigger registry copyingE.19, C.30.P, C.16.P, C.16.Q, or a subject pattern copies the full E.10 trigger list.Keep one thin cue in the subject pattern of concern and cite E.10 and E.10.ARCH through ordinary reference apparatus or Relations.
Umbrella-to-umbrella replacementsupport becomes basis, surface becomes view, reading becomes evaluation, or function becomes role without recovered kind and use.Recover kind, relation, apparatus, admissible use, and remaining reader move; otherwise demote or block.
Sterile precisionThe wording is ontologically well-formed but no working reader can tell why the distinction matters or what move remains.Restore the didactic or recognition function in admissible wording, or classify as reduced-use cue, quote-only, blocked use, or incomplete rewrite.
Shadow precision-restoration patternA subject pattern contains its own first-stage repair algorithm beside this distribution.Extract repair-only material to the applicable realization pattern and leave a first-use cue.
Reference boilerplate in subject patternA subject pattern explains where the repair belongs, why the package was split, or what this text does not contain instead of stating the subject pattern's own repaired wording or first move.Move architecture-placement rationale to DRR or architecture notes; replace routing prose with a normal pattern id, citation, or Relations row.
Apparatus-preserving paraphraseA repair changes wording but keeps phrase-level apparatus around a recoverable kind.Apply F.19 first; return to E.10.ARCH only for remaining word/head/use precision.
Legacy placement as pattern proseOld placement or alias text explains history instead of current use.Keep only migration or entry rows where needed; write current pattern prose in the selected live placement.
  • E.10 catches and closes local wording issues or selects the applicable row.
  • A.6.P realizes the shared algorithm for relation construction and retained relation specializations.
  • A.6.F realizes function-like kind and relation recovery.
  • C.2.P realizes source-expression, episteme, publication, and FPF-governed-use recovery.
  • C.30.P realizes architecture and structure wording recovery.
  • C.30.STRAT realizes stratification and source-label wording recovery for layer, level, tier, stack, ladder, rung, block, expert, cache, router, gate, and close source labels before return to the governing pattern.
  • C.16.P realizes characteristic and scale wording recovery.
  • C.16.Q realizes quality characterization and evaluative characterization wording recovery.
  • A.19.SPR realizes state-family wording recovery when bearer, state frame, value set, admissible use, or governing pattern is hidden.
  • F.18 governs durable reusable naming after the kind under repair or relation is known.
  • F.19 governs phrase-level ontology-first plain technical rewriting after the kind under repair is recovered or while proving it is still hidden.
  • E.8 governs pattern-form and placement wording.
  • E.19 checks distribution preservation during review and refresh.
  • E.11 governs entry-distribution and sends broad or old-term entry cases to README scenarios, ToC query cues, local Problem frames, or I.2 expanded entry-disambiguation cases.

E.10.ARCH:End

Conceptual Prefixes policy & registry

Intent. Provide a compact, notation‑neutral registry and minting policy for conceptual prefixes — short shorthands that signal cognitive namespaces used throughout the Core.

Policy (normative).

  1. Purpose. A conceptual prefix exists to aid reasoning, not to name files, serialisations, or APIs. It labels a role in thought (e.g., meta‑type, calculus operator, relation family).
  2. Anchoring. Every prefix MUST be anchored to a Core extension patterns (CAL/LOG/CHR) or Kernel construct and documented in its Relations.
  3. No tool lock‑in. A prefix MUST NOT imply a particular notation or machine binding (see E.5.1E.5.2).
  4. Minting rule. New prefixes are introduced by a DRR (E.9) that demonstrates (a) cross‑pattern need, (b) non‑overlap with existing prefixes, (c) alignment with Pillars P‑1/P‑5.
  5. Scope. Prefixes are globally reserved within the Core; domain patterns MAY mint local shorthands only inside their Contexts and MUST NOT collide with this registry.

Registered conceptual prefixes (Core).

  • U.U.Types meta‑namespace (holons & primitives). Anchor: Kernel Part A.
  • Γ_Calculus operator family (by flavour: Γ_sys, Γ_epist, …). Anchor: Part B umbrella on Γ.
  • ut:Universal relation family (e.g., PartOf sub‑relations). Anchor: A.14 (Mereology) — informative alias vocabulary.
  • tv:Trace & Validation vocabulary (CT2R‑LOG): tv:AliasOf, tv:groundedBy. Anchor: B.3 (Trust & Assurance, LOG‑use).
  • ev:Evidence hooks (bindings/roles). Anchor: A.10 / B.3 (Evidence Graph Referring).
  • mero:Mereology trace types (internal labels: SumTrace / SetTrace / SliceTrace) used informatively in examples. Anchor: B.1 (Γ‑aggregation).

Conformance Checklist (E.10.P).

  • CC‑LEX‑P.1 New Core text SHALL NOT introduce an unregistered conceptual prefix.
  • CC‑LEX‑P.2 Each occurrence of a registered prefix SHALL cite its anchor pattern on first use in a section.
  • CC‑LEX‑P.3 Examples that expand a prefix into a concrete URI or syntax MUST mark the expansion informative and locate it in Tooling/Pedagogy.

Relations. Constrains E.5.1 (Lexical Firewall) & E.5.2 (Notational Independence); Depends on E.9 (DRR).

E.10.P:End

Lexical Discipline for “Context” (D.CTX)

One‑sentence summary. Make the word Context unambiguous: in FPF it only denotes the formal primitive U.BoundedContext; remove the term anchor; reserve Problem Frame for situational narrative; treat Domain as an informative family label, not a type.

Status. Discipline definitional pattern. Depends on. C‑6 Strict Distinction; C‑7 Temporal Duality; G‑1 Minimal Generality; G‑2 Contextual Specification. Coordinates with. E.10.U1 Domain‑Family Landscape Survey; E.10.U2 Term Harvesting & Normalisation; E.10.U7 Concept‑Set Table; E.10.U9 Alignment/Bridge; RoleAssigning patterns (e.g., E.10.U4). Aliases (informative). Context Discipline; No‑Anchor Rule.

Intent & Applicability

Intent. Eliminate ambiguity around “context” by (a) fixing one formal meaning—U.BoundedContext; (b) removing “anchor” from the vocabulary; (c) reserving Problem Frame for prose about situations; and (d) clarifying Domain as an informative family (workflow, provenance, services, …) that groups several U.BoundedContexts.

Applicability. Mandatory across all FPF patterns (Role Assignment & Enactment, Sys-CAL, KD-CAL, Kind-CAL, planned LCA-CAL). Apply at the start of any unification effort and whenever documentation introduces or refactors “context”, “domain”, “anchor”.

Non‑goals. No governance, workflow, or tool mandates; no storage formats; no team roles.

Problem Frame

  1. Polysemy. “Context” is used for formal scopes, narrative situations, and even runtime modes.
  2. Extra token (“anchor”). “Anchor” pretends to be “where meaning is attached”, duplicating context semantics.
  3. Domain overreach. “Domain context” conflates families (disciplinary areas) with formal contexts.
  4. Plane mixing. Runtime/design stances and deontic/behavioural notions are smuggled into “context”.

Forces

ForceTension to resolve
Universality vs localityOne calculus vs many local context of meaning (C‑6 vs C‑1).
Brevity vs precisionShort labels vs unambiguous reference.
Stability vs evolutionFixed terms vs edition turnover and language variants (C‑7).
Parsimony vs expressivityFew primitives vs enough hooks for Role Assignment & Enactment, Concept Sets, and Bridges.

Solution — Name one thing “Context” can mean

D‑CTX‑1 (Canonical meaning). In all FPF materials, Context denotes the formal primitive U.BoundedContext only. The short form Context is permitted in the Tech register strictly as an alias of U.BoundedContext.

D‑CTX‑2 (Remove “anchor”). The term anchor is prohibited. When you need “the place where a meaning lives”, use:

  • SenseCell := (U.BoundedContext, Local‑Sense) — the cell of meaning inside a specific Context; or
  • a ConceptSet.Row + column reference (see E.10.U7).

D‑CTX‑3 (Domain is informative). Domain (workflow, provenance, services, access, sensing, …) is not a U.Type. It is an informative family label grouping several U.BoundedContexts. There is no “domain context”.

D‑CTX‑4 (Narrative is Problem Frame). Use Problem Frame (or Frame) for situational narrative in patterns. Do not use “context” for narrative sections.

D‑CTX‑5 (Time is a tag, not a context). design / run are TimeScope tags (C‑7) on artefacts or sources; they do not create separate contexts.

D‑CTX‑6 (No context inheritance). U.BoundedContexts have no is‑a or containment relations. Any cross‑context relationship appears only via E.10.U9 Alignment/Bridge with explicit loss policies.

D‑CTX‑7 (Language/edition discipline). Different languages or editions may be distinct U.BoundedContexts when meaning or usage can diverge. Where an official source binds multilingual labels to the same semantics, record them as labels of the same Context.

D‑CTX‑8 (Reference forms). Use one of the following when pointing to meaning:

  • ContextId:LocalLabel (e.g., BPMN_2_0:process), or
  • SenseCell(ContextId, Local‑SenseId), or
  • ConceptSet(RowId).Column(ContextId) (E.10.U7).

Structure — Minimal reference shapes (informative)

Shapes shown do not prescribe formats; they are naming conventions.

  • Context Id. Stable short handle (e.g., BPMN_2_0, PROV_O_2013, ITIL4_2020, NIST_RBAC_2004, SOSA_SSN_2017).
  • SenseCell. (ContextId, Local‑Sense) where Local‑Sense is the Context‑local preferred label (from E.10.U2).
  • ConceptSet Row. A table row keyed by a row id; columns are SenseCells per Context (E.10.U7).

Core Invariants (normative)

  1. LCTX‑INV‑1 (Uni‑meaning). The word Context in formal text equals U.BoundedContext.
  2. LCTX‑INV‑2 (No anchor). The token anchor does not appear in normative prose; use SenseCell or ConceptSet reference.
  3. LCTX‑INV‑3 (No domain contexts). “Domain context” is invalid; use Domain family + list of U.BoundedContexts.
  4. LCTX‑INV‑4 (Frames, not contexts). Pattern headers use Problem Frame for narrative.
  5. LCTX‑INV‑5 (No hierarchy). Contexts are flat; relationships are declared only via E.10.U9 Bridges.
  6. LCTX‑INV‑6 (Plane hygiene). Contexts describe context of meaning for sources; they are not roles, statuses, executions, or types (C‑6).
  7. LCTX‑INV‑7 (Time tags). DesignRunTag is a tag on carriers, source publications, or source epistemes as applicable; it does not multiply contexts.
  8. LCTX‑INV‑8 (Language/edition). Multilingual or multi‑edition handling follows D‑CTX‑7.

Conformance Checklist (normative)

  • CC‑LCTX‑1. Grep‑style check: every “Context” in formal sections expands to U.BoundedContext.
  • CC‑LCTX‑2. The token anchor is absent from normative text; where needed, occurrences are replaced by SenseCell or ConceptSet reference.
  • CC‑LCTX‑3. Pattern headers use Problem Frame; none use “Context” for narrative.
  • CC‑LCTX‑4. References to meaning are in one of the reference forms (Sec. 5).
  • CC‑LCTX‑5. No file defines “domain context”; Domain appears only as an informative family.
  • CC‑LCTX‑6. No is‑a edges between contexts; any cross‑context relation is located in E.10.U9.
  • CC‑LCTX‑7. Language/edition handling matches D‑CTX‑7 (separate Contexts when semantics can diverge).

Anti‑patterns & Remedies

Anti‑patternSymptomWhy harmfulRemedy (normative)
A1 Context-as-situation“Context” used for narrative sectionsAmbiguityUse Problem Frame; reserve Context for U.BoundedContext (D‑CTX‑4).
A2 Anchor-speak“role anchor”, “ontology anchor”Redundant token; hides localityReplace with SenseCell or ConceptSet(Row).Column (D-CTX-2, D-CTX-8).
A3 Domain context“Workflow domain context”, etc.Family ≠ formal contextUse Domain family + explicit list of Context ids (D‑CTX‑3).
A4 Context hierarchyContext A “is‑a” Context BLeaks meanings; blocks loss policiesRemove hierarchy; use E.10.U9 Bridge with loss policy (D‑CTX‑6).
A5 Time‑as‑context“Runtime context” vs “Design context”Multiplies Contexts incorrectlyUse TimeScope tags (C‑7); keep one Context (D‑CTX‑5).
A6 Cross‑lingual blendingMixing language labels as one context despite divergent semanticsHidden driftSplit Contexts per D‑CTX‑7 or document shared semantics if truly bound.

Worked Examples

E.10.D1:9.1 Enactment — process vs activity (two context of meaning).

  • Use BPMN_2_0:process and PROV_O_2013:activity as SenseCells.
  • In a Concept‑Set row, code the provisional relation (overlap), not an equality.
  • Role Descriptions later reference the specific SenseCell, not “an anchor”.

E.10.D1:9.2 Roles — behavioural mask vs access status.

  • BPMN_2_0:participant vs NIST_RBAC_2004:role.
  • Mark (incompatible) in the Concept‑Set row to prevent conflation.
  • Any cross‑use requires E.10.U9 with explicit loss policy.

E.10.D1:9.3 Services & evidence.

  • ITIL4_2020:service / ITIL4_2020:service‑level‑objective with KD‑CAL cells SOSA_SSN_2017:observation.
  • References in acceptance patterns point to SenseCells; provenance stays within the PROV Context.

Reasoning Primitives (conceptual judgements; notation‑agnostic)

Pure thinking moves; no APIs, no storage, no governance.

  • (J1) Context expansion. ⊢ Context ≡ U.BoundedContext Reading: wherever “Context” appears in formal prose, it denotes U.BoundedContext.

  • (J2) Anchor ban. uses("anchor") ⊢ violation(D‑CTX‑2) Reading: usage of “anchor” flags a discipline violation.

  • (J3) Sense reference. ref(ContextId, LocalLabel) ⊢ SenseCell(ContextId, Local‑Sense) Reading: a well‑formed reference identifies a SenseCell.

  • (J4) Narrative frame. header("Context") ⊢ replaceWith("Problem Frame") Reading: headings “Context” in patterns must become “Problem Frame”.

  • (J5) Domain family. label ∈ {workflow,…} ⊢ DomainFamily(label) Reading: Domain labels are families, not contexts.

  • (J6) Time tag. stance ∈ {design, run} ⊢ TimeScopeTag(stance) Reading: time is a tag, not a new context.

Relations (with other patterns)

Builds on: C‑6, C‑7, G‑1, G‑2. Constrains:

  • E.10.U1 — lists only U.BoundedContexts; no “domain contexts”; context records never encode pattern semantics.
  • E.10.U2 — Seeds and Occurrences are always Context‑anchored; references use forms from Sec. 5.
  • E.10.U7 — Columns are SenseCells; row notes never call them “anchors”.
  • E.10.U9 — All cross‑context relations live here; no implicit equivalences elsewhere.
  • RoleAssigning patterns (E.10.U4, …) — Context points to SenseCell or Concept‑Set columns, never to “anchors”.

Migration Notes (conceptual playbook)

  1. Rename headings. Replace any “Context” section title with Problem Frame.
  2. Delete “anchor”. Replace with SenseCell or Concept‑Set references.
  3. Split domain vs context. Where “domain context” appears, rewrite as Domain family + explicit list of U.BoundedContexts.
  4. Audit references. Ensure every semantic reference is ContextId:LocalLabel or SenseCell(ContextId, …) or Concept‑Set column.
  5. Flatten contexts. Remove any inheritance among contexts; move relations to E.10.U9.
  6. Tag time. Replace “design or runtime context” with TimeScope tags.
  7. Language/edition pass. Split or merge Contexts per D‑CTX‑7; document rationale.

Acceptance Tests (SCR/RSCR stubs)

SCR — Static discipline checks

  • SCR‑DCTX‑S01. No occurrence of the token anchor in normative sections.
  • SCR‑DCTX‑S02. All formal uses of “Context” resolve to U.BoundedContext.
  • SCR‑DCTX‑S03. Pattern headers contain Problem Frame instead of “Context”.
  • SCR‑DCTX‑S04. All semantic references use the forms in Sec. 5.
  • SCR‑DCTX‑S05. No “domain context” strings; Domain appears only as family metadata.
  • SCR‑DCTX‑S06. No is‑a or containment relations between contexts outside E.10.U9.

RSCR — Regression discipline checks

  • RSCR‑DCTX‑E01. Adding a new family or edition does not introduce “domain context” or context hierarchies.
  • RSCR‑DCTX‑E02. Refactors of E.10.U1/U.2/U.7/U.9 do not re‑introduce “anchor”.
  • RSCR‑DCTX‑E03. Multilingual updates follow D‑CTX‑7 (split/merge rationale recorded informatively).

E.10.D1:End

EntityOfConcern, Description Episteme, and Specification-Use Discipline

Definitional pattern - normative, notation-agnostic

One-sentence summary. For any EntityOfConcern in FPF, keep the entity under concern distinct from the Description episteme that describes it in a bounded context and viewpoint, and admit ...Spec wording only for a Description episteme whose specification use is made checkable by explicit conditions. Specification is not a third peer ontology class beside the entity and its Description episteme.

Status. Definitional pattern. Builds on: A.7 Strict Distinction (Clarity Lattice); E.10.D1 D.CTX (Context is U.BoundedContext); C.2.1 U.EpistemeSlotGraph; C.2.3 Unified Formality Characteristic (F); F.15 SCR/RSCR Harness. Coordinates with. F.4 Role Description; F.5 Naming Discipline; F.12 Service Acceptance Binding; F.9 Alignment & Bridge across Contexts; F.9.1 Bridge Stance Overlay; F.10 Status Families Mapping. Non-goals. This pattern does not define editors, workflows, registries, storage formats, or publication carriers. It gives the boundary discipline that other FPF patterns use when they name an entity, its Description episteme, and any specification-use admission.

Problem frame

Use this pattern when FPF-governed wording names something under concern and also names a description, view, specification, publication, file, card, diagram, dashboard, work record, evidence item, assurance result, gate result, or decision around it.

The first useful move is to ask five questions:

  1. What is the EntityOfConcern?
  2. Which Description episteme describes it, if describing is live?
  3. Which DescriptionContext = <EntityOfConcernRef, BoundedContextRef, ViewpointRef> bounds that description?
  4. Is specification use admitted by explicit checkability, acceptance, validation, formality, or harness conditions, or is this only a Description episteme?
  5. Which neighboring FPF pattern carries any publication, carrier, evidence, assurance, gate, decision, commitment, promise, work, view, bridge, retargeting, or state-family claim?

Not this pattern when the question under repair is already an evidence path named by value, assurance claim, gate decision, commitment, work occurrence, bridge, representation transition, source relation, or state-family field. Use the neighboring pattern governing that claim for that claim and use E.10.D2 only to keep the EntityOfConcern, Description episteme, and specification-use boundary readable.

FPF frequently has to say that some item is being described: a role, method, system, work occurrence, promise content, characteristic, architecture, episteme, view, or another FPF entity. The old short memory of "thing / words / rules" remains useful, but it becomes harmful when it is taught as three peer kinds.

The working distinction is sharper:

  • the EntityOfConcern is the item under concern;
  • the Description episteme is the claim-bearing episteme that describes that item under one bounded context and viewpoint;
  • specification use is an admitted use or refinement of a Description episteme, not a separate peer class;
  • publication faces, publication forms, carriers, renderings, work occurrences, gate decisions, evidence relations, and assurance claims remain outside this boundary unless a neighboring pattern makes one of them the EntityOfConcern.

This matters whenever wording such as RoleDescription, ArchitectureDescription, MethodSpec, ServiceSpec, "the diagram is the architecture", "the card authorizes work", or "the file is the method" could make readers confuse the item under concern with a description, a publication, a carrier, a work occurrence, or a granted use.

What goes wrong if E.10.D2 is missed: specification-looking words become authority, a publication becomes the thing described, a file becomes the method, an approval state over an episteme becomes a runtime state, or two descriptions with the same label are treated as the same EntityOfConcern across contexts.

What E.10.D2 buys in practice: the practitioner can name the item under concern, keep the Description episteme inspectable, admit specification use only when checkability exists, and send every other claim being made to the governing FPF pattern that carries it.

Problem

  1. Entity-description collapse. A text treats the EntityOfConcern as if it were identical to the Description episteme, the diagram, the card, the file, or the work record.
  2. Specification inflation. A text calls any detailed write-up a ...Spec although no checkability, acceptance condition, or harness relation is present.
  3. Publication or carrier substitution. A publication face, document, dashboard, schema file, or generated view is treated as the described entity or as the authority for work.
  4. Context and viewpoint loss. A Description episteme is read as global even though FPF descriptions are bounded by DescriptionContext = <EntityOfConcernRef, BoundedContextRef, ViewpointRef>.
  5. Status and state leakage. Epistemic or deontic statuses over epistemes are used as if they were role states, system states, or runtime facts about the EntityOfConcern.

Solution

For any sentence that names an entity and also names description, specification, view, publication, carrier, evidence, evaluation, or work:

  1. Name the EntityOfConcern. State what item is under concern: for example U.Role, U.Method, U.System, U.Work, U.PromiseContent, U.Characteristic, U.ArchitectureOf@Context, or U.Episteme.
  2. Name the Description episteme when describing is live. A ...Description is a U.Episteme that describes the EntityOfConcern under DescriptionContext = <EntityOfConcernRef, BoundedContextRef, ViewpointRef>.
  3. Admit specification use only by conditions. A ...Spec is a Description episteme admitted for specification use when checkability conditions are present. The conditions must name formal checkability or declared formality, checkable invariants or acceptance criteria, a validation or acceptance harness, and the same DescriptionContext.
  4. Keep publication and carrier relations separate. A card, document, dashboard, diagram, file, rendering, or API surface may publish, encode, render, or expose a Description episteme; it is not thereby the EntityOfConcern and it does not by itself create permission, evidence, gate, assurance, decision, commitment, or work.
  5. Exit to the neighboring pattern when another claim becomes live. Evidence goes to evidence patterns; assurance to assurance patterns; gate decisions to gate patterns; commitments and promises to F.18 and related patterns; work to work and P2W patterns; publication and view mechanics to E.17/A.6.3/C.2.P; retargeting to A.6.4.

Ordinary minimum: write one line that names the EntityOfConcern, the Description episteme or not live, the DescriptionContext or missing-context blocker, the specification-use admission value, and the neighboring FPF pattern governing that claim for any live non-description claim.

E10D2BoundaryLine:
  entityOfConcernRef:
  descriptionEpistemeRef or notLive:
  descriptionContext or missingContextBlocker:
  specificationUseAdmission: admitted | notAdmitted | candidateOnly
  neighboringPatternApplicationRefs for non-description claims:
  admissibleUse:
  nonAdmissibleUse:

Stop at the boundary line when it makes the next admissible move clear. Open heavier episteme, publication, source, bridge, evidence, assurance, gate, decision, work, or state-family records only when those claims are being made.

Core field discipline

EntityOfConcern

EntityOfConcern means the item under concern in the current claim. It is not a universal "object" bucket and not an authoring target. It may be a system-side entity, an episteme, a relation, a characteristic, a work occurrence, a pattern, or another FPF kind named by value.

When the EntityOfConcern is itself an episteme, the same distinction still holds. The episteme under concern is not automatically identical to a Description episteme about that episteme, and a publication of that episteme is still a publication relation.

Description episteme

A Description episteme is a U.Episteme whose subjectRef is interpreted through:

DescriptionContext = <EntityOfConcernRef, BoundedContextRef, ViewpointRef>

It may carry labels, glosses, characterizations, state graphs, structural views, criteria, diagrams, examples, or other claim-bearing content about the EntityOfConcern. Those parts remain episteme content. They do not become parts of the EntityOfConcern unless a separate FPF pattern establishes that relation.

Specification-use admission

Use a ...Spec name only when the Description episteme is admitted for specification use under all applicable conditions:

  1. Checkability. The claimed invariants or acceptance conditions are checkable.
  2. Declared formality or equivalent discipline. The text states the formal mode, notation discipline, measurement criterion, comparator, or other exact basis that makes checking possible.
  3. Harness or validation relation. The text names the acceptance harness, SCR/RSCR check, validation method, measurement procedure, or neighboring FPF relation that will check the specification use.
  4. Same DescriptionContext. The specification-use episteme preserves or explicitly updates EntityOfConcernRef, BoundedContextRef, and ViewpointRef.

If any condition is absent, use ...Description and state the live criteria informatively or as candidates without claiming specification use.

Publication, carrier, and work boundary

U.Carrier encodes an episteme. A publication face/form/unit makes an episteme available. A rendering or UI surface displays it. A work occurrence uses it or acts under it. None of those relations changes the EntityOfConcern or upgrades a Description episteme to specification use by itself.

Naming discipline

Default suffix. Use ...Description for a Description episteme unless specification-use admission is explicit.

Reserved suffix. Use ...Spec only for a Description episteme admitted for specification use. Do not use Spec as a synonym for "detailed", "important", "official-looking", "formal-looking", or "stored in a schema".

Entity names. Use the bare FPF kind named by value for the EntityOfConcern: Role, Method, System, Architecture, Characteristic, PromiseContent, Work, Episteme, or another kind named by value. Do not append Description, Spec, Card, View, or Carrier unless the episteme, view, publication, or carrier is the actual EntityOfConcern.

DescriptionContext names. Use EntityOfConcernRef, BoundedContextRef, and ViewpointRef for Description episteme addressing. Do not revive DescribedEntityRef, EntityOfInterest, or peer-layer I-D-S wording.

Invariants

D2-1 (Entity-description distinction). The EntityOfConcern and the Description episteme about it are distinct even when the EntityOfConcern is itself an episteme.

D2-2 (Specification is admitted use). Specification is not a peer class beside EntityOfConcern and Description episteme. A ...Spec is a Description episteme admitted for specification use.

D2-3 (DescriptionContext). A Description episteme names or recovers DescriptionContext = <EntityOfConcernRef, BoundedContextRef, ViewpointRef>.

D2-4 (Publication and carrier separation). Publication faces, publication forms, publication units, carriers, renderings, files, dashboards, and UI surfaces do not become the EntityOfConcern and do not grant specification use by appearance.

D2-5 (Work separation). A plan, checklist, or specification-use Description episteme does not execute work. Work occurrences and work results remain under work and P2W patterns.

D2-6 (Status-state separation). Epistemic and deontic statuses over epistemes are not role states, system states, or runtime facts unless the exact state pattern grants that interpretation.

D2-7 (No label-only cross-context sameness). Identical labels in two bounded contexts or viewpoints do not establish sameness. Use F.9 bridges, A.6.3 views, or A.6.4 retargeting as appropriate.

D2-8 (ReferencePlane reservation). Do not call this distinction a plane. Use ReferencePlane only where CHR or another governing pattern defines that field.

Reasoning primitives

Description link.

EntityOfConcernRef(T), BoundedContextRef(C), ViewpointRef(Vp)
  |- isDescriptionOf(TDesc, T, C, Vp)

TDesc is the Description episteme about EntityOfConcern T in bounded context C under viewpoint Vp.

Specification-use admission.

isDescriptionOf(TDesc, T, C, Vp)
  and checkableInvariants(TSpec)
  and validationOrAcceptanceHarness(TSpec)
  and sameDescriptionContext(TSpec, TDesc)
  |- admittedForSpecificationUse(TSpec, T, C, Vp)

Only under those conditions may the episteme be named TSpec.

Characterization relation.

isDescriptionOf(RoleDesc, U.Role, C, Vp)
  and characterizes(RoleDesc, U.RCS)
  and characterizes(RoleDesc, U.RSG)
  |- RoleDesc characterizes U.Role by those structures @C,Vp

The role is characterized through the Description episteme. The structures are not silently parts of the role.

Evaluation relation.

evidence E satisfies criteria K within window W
  |- attestation(subject has state/status/result S @C within W)

Evaluation produces an attestation in a window. It does not mutate the EntityOfConcern.

Anti-patterns and repairs

Anti-patternSymptomRepair
Entity-description collapse"The method is the document"; "the architecture is the diagram"; "the role contains the checklist".Name the EntityOfConcern, then name the Description episteme or publication relation separately.
Spec by nameAny detailed write-up is called ...Spec.Use ...Description unless specification-use admission conditions are present.
Publication as authorityA card, dashboard, schema, generated view, or file is treated as permission, evidence, gate, assurance, decision, or work.Send that claim being made to the neighboring pattern governing that claim; keep the publication relation separate.
Carrier identityThe file path or repository entry is treated as the episteme or EntityOfConcern.Say the carrier encodes or renders the episteme.
Context erasureA context-local Description episteme is read as a global definition.Restore BoundedContextRef and ViewpointRef, or use F.9/A.6.3/A.6.4 for cross-context relations.
Status-state leakageEvidence, requirement, approval, or standard status becomes a role-state node.Keep statuses over epistemes distinct from state graphs and runtime state attestations.

Worked examples

Role

U.Role :: ChangeAuthority is the EntityOfConcern. ChangeAuthorityRoleDescription@ITIL4 is a Description episteme with DescriptionContext = <EntityOfConcernRef(ChangeAuthority), BoundedContextRef(ITIL4), ViewpointRef(RoleViewpoint)>.

The Description episteme may characterize the role by credential level, mandate window, separation-of-duty criteria, and a role-state graph. The role does not contain the graph or the checklist. If testable invariants and an acceptance harness are declared, a ChangeAuthorityRoleSpec@ITIL4 may be admitted for specification use.

Method

U.Method :: BacklogRefinement is the EntityOfConcern. A team note, practice card, or pseudo-code sketch is a BacklogRefinementMethodDescription@EssenceContext when it describes the method. It becomes BacklogRefinementMethodSpec@EssenceContext only when checkable method constraints and an acceptance or validation harness are present.

Calendar sessions, chat threads, and tickets are work occurrences or work records. They may use the method description, but they are not the method and not the Description episteme.

Architecture

ArchitectureOf@Context(Holon) is the EntityOfConcern. An architecture description, structural view, graph, ADR, or dashboard is a Description episteme, view, publication, or carrier about that architecture. The diagram does not become the architecture, and an ADR does not by itself create permission or assurance.

If a structural view uses a mathematical lens, C.29 carries the declared mathematical-lens use question. If an architecture description is used to guide work, A.15.4 and P2W-related patterns carry the work-relevance relation.

Episteme as EntityOfConcern

A safety case, DRR, pattern, or source bundle can itself be the EntityOfConcern. A review note describing that DRR is then a Description episteme about an episteme. A published PDF of the DRR is a carrier or publication relation. This prevents the common slide from "talking about a description" into "talking only about descriptions of descriptions".

Source-use and SoTA-echoing

Source or practice lineFPF useBoundary
ISO/IEC/IEEE 42010-style architecture-description practice separates described architecture, stakeholder concern, viewpoint, view, model kind, correspondence, and architecture-description publication.Adapt the separation as pressure for DescriptionContext, viewpoint, view, and correspondence discipline beyond architecture-only cases.Does not make every Description episteme an architecture description and does not grant evidence, assurance, gate, decision, or work authority.
Requirements and specification practice treats specifications as checkable descriptions used for acceptance, verification, validation, or conformance.Use ...Spec only when the Description episteme has explicit checkability, formality, criteria, comparator, harness, or neighboring-pattern gate.A detailed or official-looking document is not specification use by name alone.
FPF episteme, publication, view, carrier, and source-use machinery (C.2.1, E.17, E.17.0, A.6.3, C.2.P) supplies the ontology named by value.Reuse existing episteme slots, DescriptionContext, views, publication faces/forms/units, carrier separation, source relation, bridge, and retargeting exits.E.10.D2 does not mint a rival description ontology and does not replace source, evidence, bridge, work, or state-family patterns.
Andrey Rodin-style near-sameness and postulate-theory concerns motivate explicit same-EntityOfConcern and bridge checks across descriptions.Same label, similar description, or shared formal substrate is not enough; use F.9, A.6.3, A.6.4, or same-EntityOfConcern recovery by value.E.10.D2 names the boundary; it does not decide all cross-context sameness or mathematical-substrate adequacy.

Relations

Builds on:

  • A.7 - Strict Distinction (Clarity Lattice). Supplies the general distinction between an EntityOfConcern and the epistemes, publications, carriers, work, decisions, evidence, and assurance claims around it.
  • C.2.1 - U.EpistemeSlotGraph. Supplies DescriptionContext, subjectRef, and episteme slot discipline.
  • C.2.3 - Unified Formality Characteristic. Supplies formality levels used by specification-use admission.
  • F.15 - SCR/RSCR Harness. Supplies check and regression-check harness discipline.

Coordinates with:

  • A.6.2/A.6.3/A.6.4. Description epistemes can be transformed, viewed, or retargeted only under their episteme-morphism laws.
  • E.17 and E.17.0. Publication, view, face, form, unit, and carrier relations remain separate from the EntityOfConcern and Description episteme.
  • F.9. Cross-context relation or near-sameness requires a bridge, not label reuse.
  • F.4/F.5/F.8/F.10. Role, service, naming, acceptance, and evaluation patterns consume this boundary when they name descriptions and specifications.

Current repair moves

Use these repairs when live FPF prose violates this pattern:

  1. Replace old DescribedEntity*, EntityOfInterest, EoI, and EoIClass wording with EntityOfConcern, EntityOfConcernRef, EntityOfConcernClass, or the local FPF kind named by value. Retain old spellings only as source-side trigger wording.

  2. Replace peer-layer I-D-S wording with EntityOfConcern / Description episteme / specification-use admission wording.

  3. Replace "contains RCS/RSG/checklist" with "is characterized through the Description episteme by RCS/RSG/checklist".

  4. Replace carrier identity with "carrier encodes" or "publication exposes" wording.

  5. Replace generic "object under description" talk with the EntityOfConcern named by value and its DescriptionContext.

  6. Replace ...Spec names that lack specification-use admission with ...Description.

  7. Send permission, evidence, assurance, gate, decision, promise, commitment, work, publication, view, bridge, or retargeting claims to the neighboring pattern governing that claim instead of keeping them as local semio guard prose.

Conformance checklist

IDCheck
CC-D2-1The text names or recovers the EntityOfConcern and does not hide it behind generic object, target, subject, source-side wording, or carrier wording.
CC-D2-2Every Description episteme recovers DescriptionContext = <EntityOfConcernRef, BoundedContextRef, ViewpointRef> when the description relation is live.
CC-D2-3Every ...Spec wording has explicit specification-use admission: checkable invariants or criteria, check method or harness, and preserved or declared DescriptionContext.
CC-D2-4Publication faces/forms/units, carriers, renderings, views, and work records are not treated as the EntityOfConcern.
CC-D2-5Evidence, assurance, gate, decision, promise, commitment, and work claims exit to the neighboring pattern governing that claim when they are being made.
CC-D2-6The text does not use old I-D-S peer-class wording, intensional object, DescribedEntity*, EntityOfInterest, EoI, or EoIClass as accepted vocabulary for current FPF prose.
CC-D2-7The word plane is not used for this distinction; only governing patterns such as CHR may define ReferencePlane.

Phrasebook

AvoidUse
"The role contains the state graph.""The RoleDescription characterizes the role by a state graph."
"The diagram is the architecture.""The diagram publishes or renders an architecture Description episteme or structural view."
"MethodSpec draft.""MethodDescription draft; specification use not admitted until checkability and harness conditions are present."
"The PDF is the method.""The PDF is a carrier that encodes the MethodDescription."
"Same label, same thing.""Same label requires a bridge, view, retargeting relation, or explicit same-EntityOfConcern claim."
"Evidence status is a role state.""Evidence status classifies an episteme; role states belong to the relevant role-state graph."

Didactic memory

Use the short memory entity / description / admitted specification use:

  1. Entity. What item is under concern?
  2. Description. Which episteme describes it, in which bounded context and viewpoint?
  3. Admitted specification use. What makes a ...Spec checkable here?
  4. Publication and carrier. What only exposes, renders, stores, or transports the episteme?
  5. Neighboring claims. Which evidence, assurance, gate, decision, commitment, work, bridge, view, or retargeting pattern carries any additional claim being made?

E.10.D2:End

First-Practical Entry and Pattern-Use Discoverability Discipline

Type: Pattern-language governance pattern (E) Status: Stable Normativity: Normative for FPF entry, projection, and discoverability publication units.

At a glance. E.11 governs how FPF helps a working practitioner find the first useful pattern family without turning entry material into a shadow table of contents, universal method sequence, conformance authority, or second pattern body. The public first-entry publication unit is the FPF readme section: it starts from ordinary project needs and first useful results. The Preface explains the cross-cutting ideas behind those entries in plain engineering language before it relies on FPF terms. Local pattern Problem frame sections carry the high-precision recognition role. Separate duplicate first-entry indexes are not maintained when they repeat the readme scenario set.

Use this when. Use this pattern when a first-entry publication unit, table-of-content cue, readme section, Preface text, retrieval card, lexical query row, or pattern-local recognition text could change which FPF pattern family a user should inspect and apply first.

First output. A discoverability arrangement that names the public first-entry scenario, the first admissible governing pattern or small candidate pattern set, the local wrong-pattern boundary, and the publication unit that carries each piece.

Primary EntityOfConcern. One entry or discoverability publication unit in FPF: readme first-entry scenario text, Preface principle explanation, ToC query row, expanded entry-disambiguation case, retrieval cue, or pattern-local Problem-frame recognition text.

What this buys. A practitioner can start from a real project question instead of from FPF's internal topology, while FPF keeps pattern authority in the governing pattern body and avoids a duplicate navigation canon.

Problem Frame

FPF has many patterns. New users do not usually arrive saying "I need A.15" or "I need C.30.AD." They arrive with project questions:

  • "I need to design or review architecture."
  • "I need to write a regulation, method, boundary, contract, API, or work-process document."
  • "I need to compare options without jumping to one favorite."
  • "I need to turn a vague situation into a problem."
  • "I need to say what better means before improving."
  • "I need to know what evidence or assurance is missing."
  • "I need to keep a temporal, freshness, rate, or action-window claim honest."
  • "I need to use causal claims, model outputs, interventions, or responsibility claims safely."
  • "I need to publish, compare, or rely on descriptions, views, dashboards, or explanations of the same entity."
  • "I need better names for project entities."
  • "I need to repair a technical text."
  • "I need to know whether mathematics would help."
  • "I need the field of current options or state of the art."

Those project questions need public first-entry scenarios. They should not be forced through a compact internal index before the user has recognized what FPF can do.

At the same time, first-entry text is dangerous when it becomes too powerful. A readme blurb, table row, search cue, or example can start acting as if it defines the pattern, prescribes a universal method sequence, or grants authority that belongs only in the governing pattern.

Problem

Entry material fails in three recurring ways.

First, it becomes too internal. It starts with FPF diagnoses such as "roles and methods are mixed" even though a working practitioner only knows that they need an architecture review, a regulation, a decision, or a better name.

Second, it becomes a duplicate corpus. A separate first-entry index repeats readme scenarios, then each pattern repeats the same related-pattern fanout list, and soon FPF carries several slightly different entry arrangements.

Third, it becomes too authoritative. A projection row, heading, card, or readme paragraph starts answering as if it were the pattern body. That is projection drift: a finding aid becomes a shadow source.

Forces

ForceTension
Project recognizabilityThe public entry must start from ordinary project questions, not from internal pattern topology.
Technical precisionThe entry must still make the first admissible governing pattern recoverable.
Low burdenA newcomer should not need to fill forms or parse a compact index before seeing value.
Plain credibilityA newcomer should see the project value and the idea behind it before seeing forms, pattern ids, or FPF internal vocabulary.
No duplicate canonreadme, Preface, ToC, local pattern Problem frames, and expanded cases must not carry competing first-entry arrangements.
No semio-biasWording and description repair must be visible, but FPF must not present itself mainly as a language-policing framework.
Corpus evolutionNew patterns may change first-entry scenarios, but entry material must update without copying whole pattern bodies into projections.

Practice Grounding

Practice familyRule impact in E.11
Information foraging and information scentA first-entry cue must expose a recognizable working project question before it names internal FPF topology. Scenario heads therefore use architecture, comparison, timing, evidence, naming, mathematics, publication-use, or improvement questions, not only pattern ids.
Technical-documentation front doors and front-matter practicePublic orientation belongs in the FPF readme section. The Preface explains principles, while the governing pattern body carries normative detail.
Search and retrieval cue practice for technical corporaToC rows, lexical query rows, and retrieval cards are finding aids. They may help a user locate the governing pattern, but they do not define the claim or replace the pattern body.
FPF projection-as-finding-aid disciplineA projection publication unit must name what it can and cannot decide. If the substantive claim changes, the governing pattern or a pattern for that claim must be used.

Solution - Assign Each Entry Publication Unit One Job

Use this distribution.

Publication unitJobNot its job
FPF readme sectionPublic first-entry scenarios for working projects; plain explanation of what FPF is and where it helps first.Pattern authority, conformance rules, full ToC, internal governance evidence, or duplicate pattern body.
PrefacePlain-engineering narrative explaining why the first-entry scenarios are credible: transdisciplinarity, local closure, holons, EntityOfConcern and description, multi-view publication, architecture as structure, epiplexity, first-principles-to-work, mathematical modeling and FormalSubstrate distinctions, ontology-first repair, evidence/assurance boundaries, characteristic spaces, NQD/OEE, state of the art, didactic primacy, and FPF as a whole project with companion explanations and tools.Repeating the scenario table, defining a second entry index, serving as conformance authority, or requiring prior FPF vocabulary before the idea is understandable.
Table of ContentSearch-oriented pattern overview: id, title, admission state, keywords, query phrases, dependencies.Public first-entry explanation or durable pattern semantics.
Pattern Problem frameHigh-precision local recognition text for that pattern's own EntityOfConcern and first useful action.A related-pattern fanout list, package-placement rationale, or first-entry index.
I.2 or other expanded casesLonger entry-disambiguation cases only when compact first-entry scenarios and pattern Problem frames are insufficient.Tutorial obligation for every pattern or replacement for pattern bodies.
Retrieval cards or other projection materialThin finding aids that point to the governing pattern body and say what they cannot decide.Authority, evidence, gate, decision, or final pattern interpretation.

A separate first-entry index is not maintained when it repeats the readme scenario set. If one first-entry row has value not carried by the FPF readme section, ToC, a pattern Problem frame, or an expanded case, place that value in the appropriate publication unit instead of maintaining a duplicate index body.

readme First-Entry Scenario Rule

The public first-entry scenario set starts from working project questions and stabilizing results.

A conforming first-entry scenario has this shape:

FirstEntryScenario:
  projectQuestion:
  practicalUse:
  typicalFirstResult:
  firstPatternFamily:
  blockedOverreadOrBoundary:

The public scenario text may be prose rather than a visible form. It should still make those fields recoverable.

Good scenario heads name recognizable project work:

  • develop or review architecture;
  • write rules, methods, and work-process documents;
  • compare alternatives and make a local choice;
  • turn a vague situation into a usable problem statement;
  • define what "better" means and run improvement;
  • prepare evidence, assurance, or gate decisions before commitment;
  • check timing, freshness, rhythm, and action windows;
  • use causal explanations, interventions, responsibility, and model outputs safely;
  • compare descriptions, dashboards, explanations, and views of the same thing;
  • give things better names;
  • repair wording in technical documents before it changes action;
  • decide whether mathematics or formal modeling would help;
  • build a state-of-the-art or option portfolio.

Wording repair may be one scenario. It must not dominate the public first-entry set. FPF should not look like a commission for checking admissible technical speech when it is also a framework for architecture, problem shaping, work-method publication, comparison, evidence, mathematics, quality, and improvement.

First-Time Engineer Readability Rule

Public first-entry text is tested against a first-time engineer, engineer-manager, or assisting agent who has not studied FPF.

The title and first sentence must name a recognizable working problem before FPF taxonomy, pattern ids, internal kind names, quality or projection vocabulary, or conformance vocabulary appears. The first practical result must be something the reader could imagine producing or asking for in the project: an architecture question note, regulation outline, comparison note, problem card, quality-and-improvement note, evidence-readiness note, timing note, causal-use note, description-use note, naming card, repaired paragraph, modeling note, or option portfolio.

FPF precision remains required. It is introduced after the plain recognition hook and stays recoverable through the pattern ids and later wording. If the same sentence cannot be translated into ordinary engineering Russian or ordinary engineering English without FPF slang, it is probably not public first-entry text yet.

Public Value Claim And Grounding Rule

A first-entry scenario may state substantial project value, but that value claim must be grounded. The scenario is not bare marketing copy. It should let an unfamiliar practitioner or assisting agent recognize a project situation, imagine a first useful result, and see the substantive FPF mechanism behind that value claim.

A conforming public first-entry scenario therefore:

  • starts from a concrete project need in ordinary engineering language;
  • names the first useful written result or decision aid before it names internal FPF apparatus;
  • names the first pattern family as the means, not as the headline;
  • shows at least one substantive distinction, object, comparison, or decision that FPF will make usable;
  • avoids cards, forms, pattern ids, quality vocabulary, projection vocabulary, and conformance vocabulary until the working use is already recognizable;
  • keeps wording repair and description repair visible but below half of the public scenario set, so FPF does not present itself mainly as speech policing.

The public first-entry set should read like "here are typical ways FPF can help a working project first", not like "here is the internal topology of FPF" and not like "here are slogans about better thinking."

Preface Principle Rule

The Preface explains why the readme scenarios are possible. It names cross-cutting ideas once, in narrative order, without copying the readme scenario table.

The Preface is read by people and agents who may still be deciding whether FPF is worth the cost of opening the heavier pattern bodies. It therefore has a didactic job: show that the public first-entry value claims are not empty marketing and not a loose collection of tips. The Preface should make the reader see the underlying engineering ideas that allow FPF to help with architecture, problem shaping, evidence, comparison, naming, mathematical modeling, quality, and improvement.

The Preface should cover at least:

  • transdisciplinary use without collapse of local meanings;
  • local closure inside an open world;
  • holons, systems, epistemes, and the fact that architecture applies wherever holons have structure;
  • EntityOfConcern and description, including description episteme, publication form, carrier, and multi-view publication separation;
  • thinking-through-writing through patterns, cards, records, views, and publication forms;
  • architecture as structure and epiplexity as an architecture characteristic;
  • first-principles-to-work through TGA and P2W;
  • mathematical lenses, formal-substrate declarations, mechanism import, and first-principles carry-through as distinct claims;
  • ontology-first wording repair through E.10, E.10.ARCH, F.18, and F.19;
  • evidence, assurance, gate, decision, and work separation;
  • characteristic spaces, quality, NQD/OEE, and improvement loops;
  • novelty, diversity, and state of the art;
  • didactic primacy and plain explanation paired with technical fields.

The Preface may narrate across many pattern families, and it may discuss FPF as a whole project, including companion explanations, worked cases, tools, and project-local adaptations when those help explain the Core Specification. This is not leakage from one pattern into another. A Preface is allowed to explain the project-level idea that several patterns implement together.

The Preface may point to pattern families, but it should not become a second first-entry index.

Preface Plain-Engineering Narrative Rule

Preface prose is written in plain engineering language first and FPF vocabulary second.

A conforming Preface:

  • states the working idea before the FPF term;
  • gives a plain gloss before a strict FPF term carries the main explanatory point;
  • uses pattern ids as addresses for stricter treatment, not as the main explanatory language;
  • keeps vivid explanation and didactic force when precision repair removes overread;
  • shows how the first-entry scenarios are grounded in real concepts, not only how they are distributed across patterns;
  • can be understood before the reader has studied the pattern bodies, even though the pattern bodies remain the source of exact governance.

FPF-specific terms such as EntityOfConcern, episteme, publication form, carrier, viewpoint, DRR, math lens, FormalSubstrate, NQD, OEE, Plain, or Tech may appear in the Preface only when the ordinary engineering distinction is already visible or immediately glossed. A Preface paragraph that cannot be understood without prior FPF vocabulary is not yet in Preface style, even if every term is technically lawful.

Pattern Problem-Frame Rule

A pattern's own Problem frame is the local high-precision first-recognition section.

It should let a working practitioner recover:

  • the pattern's primary EntityOfConcern;
  • the working problem;
  • what goes wrong if the pattern is missed or misread;
  • the first admissible action;
  • the practical result that action buys;
  • the ordinary not-this-pattern boundary.

Add candidate-pattern comparison only when a real entry-discoverability problem exists. Otherwise, keep cross-pattern comparison out of the pattern body and use ordinary Relations, ToC query phrases, or expanded cases.

First-Entry Terminology

Preserve the first-entry terminology.

TermUse
first entryGeneral FPF term for the first useful entry from a working project or FPF artifact into the pattern corpus.
first practical entryPublic-facing and practitioner-facing form: the first useful entry selected by a real project question.
first-entry scenarioFPF readme section prose that starts from a recognizable project question and names first useful FPF pattern families.
first-entry cueA phrase, project question, table row, heading, retrieval card, or local recognition text that helps recover the first pattern family.
first-entry pattern-comparison setA small case-relative set of plausible candidate patterns and tempting wrong patterns for the current project question; it is used only when the first governing pattern choice is genuinely ambiguous and is not a standing replacement index.
expanded entry-disambiguation caseA longer case used only when readme, ToC, and local Problem-frame recognition are not enough.

Avoid route, workflow, lifecycle, entry neighborhood, semantic area, ontological neighborhood, map, owner, load, posture, support, and other broad heads as entry terms unless the relevant governing pattern has recovered their specific FPF kind and admissible use.

Public readme Section Single-Source Rule

The FPF readme section carries the public first-entry scenario set.

If the same public first-entry content is exported into another publication form, export it from the FPF readme section instead of maintaining a second public first-entry version.

Projection and Authority Boundary

Entry and projection publication units help a user find the governing pattern. They do not govern the claim by themselves.

When a projection is used, it must be clear whether it is:

  • public orientation;
  • table-of-content query material;
  • pattern-local recognition text;
  • expanded entry-disambiguation case;
  • retrieval card;
  • quality or projection evidence for an FPF artifact;
  • ordinary citation or relation.

If a projection needs to answer a substantive claim, use the governing pattern body or the pattern that governs that claim. Do not strengthen the projection.

Worked Slices

Public Entry From A Project Question

A project team says: "We need to review the architecture of our AI-agent platform before choosing a vendor."

The public readme first-entry scenario points to architecture, comparison, and evidence:

  • architecture: what holon is being architected, which structures matter, and which architecture characteristic is under concern;
  • comparison: which vendor, build, fine-tune, or hybrid alternatives remain in the candidate set;
  • evidence: what tests or assurance arguments are needed before commitment.

The first governing pattern family is not a wording-repair pattern. It is C.30 for architecture, with A.19, C.11, A.10, or B.3 applied when the project question narrows to comparison, local choice, evidence, or assurance. E.10 is used only if the text hides the kind of architecture, evidence, decision, or publication claim being made.

Duplicate First-Entry Row Discharge

A compact first-entry index row says:

Architecture and diagrams:
  start with C.30, C.30.AD, evidence, and dashboard patterns;
  remember that diagrams are not proof;
  compare alternatives before choosing.

Do not keep this as a second entry canon. Discharge its useful content by kind:

Useful item in the rowPublication unit or governing pattern
"Architecture" as a public working-project questionreadme first-entry scenario for architecture design or review.
"Diagrams" as publication or rendering usereadme scenario for descriptions, explanations, dashboards, or views of the same entity; [E.17](/generated/patterns/E.17).*, [A.15.4](/generated/patterns/A.15.4), or [C.30.AD](/generated/patterns/C.30.AD) when the claim is being governed.
"Diagrams are not proof"Local Problem-frame recognition in the pattern that governs the architecture description or evidence claim; not a public duplicate-index warning.
"Evidence"[A.10](/generated/patterns/A.10), [B.3](/generated/patterns/B.3), [A.20](/generated/patterns/A.20), [A.21](/generated/patterns/A.21), or the evidence/assurance scenario when the project question is evidence or commitment.
"Dashboard" as same-entity or rendering concernPublication-use or dashboard pattern material, not architecture itself.
"Compare alternatives"Comparison and selected-set scenario plus [A.19](/generated/patterns/A.19), [C.11](/generated/patterns/C.11), [C.18](/generated/patterns/C.18), or [C.19](/generated/patterns/C.19).
Search phrases such as "architecture diagram proof"ToC query material or retrieval cue, if it helps find the governing pattern.
A hard ambiguity between architecture, description, evidence, and comparison[I.2](/generated/patterns/I.2) expanded entry-disambiguation case only if readme, ToC, and local Problem frames are insufficient.

After discharge, the remaining row is deleted because it only duplicates the readme scenario set and creates a second canon. The deletion preserves value because every claim being made has a publication unit or governing pattern that matches its kind.

Conformance Checklist

IDCheck
CC-E11-1Public first-entry text starts from recognizable working project questions before pattern ids or FPF diagnoses.
CC-E11-2The FPF readme section carries the public first-entry scenario set; the Preface does not repeat that set as an index.
CC-E11-3A separate first-entry index is not maintained when it duplicates readme scenarios; any unique value is placed in readme, ToC, the pattern Problem frame, an expanded case, or the governing pattern for the substantive claim.
CC-E11-4First-entry terminology remains available: first entry, first practical entry, first-entry scenario, first-entry cue, first-entry pattern-comparison set, and expanded entry-disambiguation case.
CC-E11-5Wording and description repair do not dominate public first-entry scenarios; FPF remains visible as project architecture, work, problem, comparison, evidence, temporal, causal, publication-use, mathematics, quality, and improvement help.
CC-E11-6A projection publication unit never answers as the governing pattern body; it points to the governing pattern or says what claim or action is blocked beyond the finding role.
CC-E11-7Pattern-local recognition stays in the Problem frame and does not become a related-pattern fanout list or package-placement explanation.
CC-E11-8ToC and lexical-query phrases remain finding aids, not names, alternate names, semantic equivalences, or authority relations.
CC-E11-9A duplicate first-entry row can be discharged by kind without losing useful content: scenario, query cue, local recognition, expanded case, quality evidence, or substantive claim.
CC-E11-10Practice grounding affects rules: information scent shapes scenario heads, readme/front-matter practice shapes publication placement, retrieval practice keeps cues thin, and projection discipline blocks shadow authority.
CC-E11-11Each public first-entry scenario states a concrete project need, a first useful result or decision aid, and the first pattern family after the project value is recognizable.
CC-E11-12Public first-entry value claims are grounded by at least one substantive FPF distinction, object, comparison, or decision that explains why the proposed help is credible.
CC-E11-13Preface prose can be read before the pattern bodies: ordinary engineering meaning appears before FPF terms, and strict FPF terms that carry the main explanatory point are glossed at first use.
CC-E11-14The Preface explains FPF-level ideas and cross-pattern composition without becoming a second ToC, second first-entry index, conformance authority, or pattern-id catalogue.

Common Anti-Patterns

Anti-patternSymptomRepair
Internal diagnosis as public entryreadme starts with "roles, methods, and work are mixed" before the user sees a project problem they recognize.Rewrite the entry from the project question: architecture review, regulation writing, option comparison, problem shaping, naming, quality improvement, evidence, mathematics, or SoTA portfolio.
Ungrounded public value claimThe first-entry text claims broad benefit but does not show the first useful result, working object, distinction, comparison, or pattern family that makes the benefit credible.Keep the value claim only when it is grounded by a recognizable project need, a first result, and one substantive FPF idea or governing pattern family.
FPF-slang front doorThe readme or Preface starts with pattern ids, FPF kinds, internal quality vocabulary, or terms such as EntityOfConcern, episteme, DRR, carrier, math lens, NQD, or OEE before plain meaning is visible.Put the ordinary engineering distinction first, then add the FPF name as a precise address or gloss.
Preface as pattern-id catalogueThe Preface lists pattern families and terms but does not explain why the first-entry value claims are possible or how the ideas compose.Rewrite as cross-cutting narrative: project problem, idea, why it matters, then pattern family for stricter treatment.
Pattern-body prerequisiteThe Preface is only understandable after the reader has already studied the patterns.Add plain glosses and project examples so the Preface can be read before the pattern bodies while still pointing to them.
Duplicate first-entry canonreadme, Preface, ToC, a separate index, and pattern bodies all carry different entry arrangements.Keep public scenarios in readme, ideas in Preface, query material in ToC, local recognition in Problem frames, and expanded cases only where needed.
Semio-first public identityFPF appears mainly as technical-language policing.Keep wording repair as one entry scenario and make architecture, work, problem, comparison, evidence, mathematics, quality, and improvement visible.
Projection as authorityA readme sentence, ToC row, retrieval card, or entry cue is used as if it governs the claim.Use the governing pattern body or the pattern governing the substantive claim.
Entry as universal sequenceFirst-entry text prescribes a universal sequence.State that entries are alternatives selected by the working question, not steps.
Pattern-local reference fanoutA pattern's first substantive section lists neighboring patterns instead of its own EntityOfConcern and first action.Place discoverability in readme, ToC, or expanded cases; keep the pattern body focused on its own problem and solution.

Relations

  • The FPF readme section carries public first practical entries.
  • Preface carries cross-cutting ideas and principles behind the public first practical entries.
  • E.8 governs pattern form and pattern-local Problem-frame discipline.
  • E.19 checks entry, projection, and pattern-use discoverability during review and refresh.
  • E.21 evaluates whether corpus entry and projection material preserve quality without becoming pattern content.
  • F.17, F.18, F.19, E.10, and E.10.ARCH govern lexical, naming, and wording precision when entry cues hide FPF kinds or relations.
  • I.2 carries expanded entry-disambiguation cases only when compact public first-entry scenarios and local Problem frames are insufficient.
  • ToC rows provide query and dependency cues; they do not replace public first-entry scenarios or governing pattern bodies.

E.11:End

Didactic Primacy & Cognitive Ergonomics

Problem Frame

The FPF is designed as an "Operating System for Thought," a tool intended to augment and clarify human (and artificial) reasoning. This mission places a unique demand on its architecture: the framework's internal elegance and formal power are secondary to its primary function of being understandable and usable. A perfectly consistent but incomprehensible system fails in its didactic purpose. As formal mechanisms like Assurance Levels and epistemic scores are introduced, there is a significant risk that the pursuit of these metrics becomes an end in itself, overshadowing the ultimate goal of fostering clearer thought.

Problem

If the framework's design prioritizes theoretical purity or formal completeness over cognitive ergonomics, it becomes vulnerable to two critical failure modes:

  1. Goodhart's Law: When a measure (like AssuranceLevel:L2) becomes the primary target, it ceases to be a good measure of genuine understanding. Teams may start "gaming the metrics," producing assurance-bearing epistemes or publications that are formally perfect but conceptually shallow or pragmatically useless.
  2. Cognitive Overload & Rejection: The framework becomes so dense, jargon-laden, and procedurally complex that its users—the very agents it is meant to serve—either burn out or abandon it in favor of simpler, albeit less rigorous, methods. The "Operating System for Thought" devolves into a bureaucratic machine for certification.

Forces

ForceTension
Formal Rigor vs. Human UsabilityHow to build a system that is both formally sound and cognitively accessible, without sacrificing one for the other.
Intrinsic Complexity vs. Incidental ComplexityHow to distinguish the necessary cognitive load inherent in solving a difficult problem from the unnecessary friction imposed by a poorly designed framework.
Means vs. EndsHow to ensure that the production of high-quality epistemes or publications (the means) always serves the ultimate goal of enhancing an agent's cognitive capabilities (the end).

Solution

FPF elevates Didactic Primacy (Pillar P-2) to a normative architectural principle, operationalized through two conceptual mechanisms designed to act as a permanent counterbalance to excessive formalism.

The Principle of Didactic Primacy (Expanded Definition)

The primary purpose of the FPF is to enhance the cognitive capabilities (U.Capability/Mastery) of an Agent (U.Agent) in service of its Objectives (U.Objective). The creation of assurance-bearing epistemes or publications with high assurance levels and epistemic scores is a means to that end, not the end itself. Any architectural decision that increases formal rigor at the cost of clarity or usability must be explicitly justified by a demonstrable gain in the agent's ability to reason effectively.

Mechanism 1: The Rationale Mandate

Every key assurance episteme or publication (such as a U.AssuranceCase or Proof) MUST contain a mandatory, human-readable rationale component.

  • Nature: The rationale is not a technical description but a narrative explanation.
  • Content: It MUST answer the question: "How does achieving this level of formal assurance tangibly help the agent better understand the problem or make a more reliable decision?"
  • Purpose: This mandate forces a moment of reflection, formally linking the act of formalization back to its pragmatic, cognitive purpose. An empty or perfunctory rationale indicates that the assurance work may be an exercise in formalism for its own sake.

Didactic Note for Managers: The "So What?" Test

The Rationale Mandate is FPF's built-in "So What?" test. When your team presents a complex, formally checked episteme or publication (AssuranceLevel:L2), the rationale is where they answer your fundamental question: "This is impressive, but so what? How does this help us ship a better product, make a smarter investment, or avoid a critical risk?" If the answer isn't clear and compelling in the rationale, the formal work may have been a waste of resources. It keeps your most brilliant minds focused on creating value, not just elegant proofs.

Mechanism 2: The Human-Factor Loop (HF-Loop)**

To provide a continuous, self-correcting mechanism against cognitive overload, FPF introduces a conceptual feedback loop.

  • Core Concept: The HF-Loop is a formal method of inquiry designed to distinguish between the essential complexity of the problem being solved and the incidental complexity introduced by the FPF itself.
  • Trigger Concept: A review is triggered when the subjective cognitive workload associated with using the framework exceeds a conceptual threshold. This is not about performance metrics, but about the perceived mental effort required to use FPF's concepts and structures.
  • Review Concept: When triggered, a formal review is conducted by individuals in roles that specialize in human-centric perspectives, such as the Ethicist and UX Design Critic.
  • Output Concept: The review produces a set of proposed conceptual simplifications or didactic improvements to the framework's patterns. These are then submitted as formal change proposals (DRRs).

Conformance Checklist

  • CC-E12.1 (Rationale Mandate): Every U.AssuranceCase or proof publication at AssuranceLevel:L2 MUST contain a non-empty rationale component that satisfies the "So What?" test.
  • CC-E12.2 (HF-Loop Trigger Condition): Each pattern that defines a significant workflow SHOULD specify a conceptual condition for triggering an HF-Loop review, based on the principle of managing cognitive load.
  • CC-E12.3 (HF-Loop Review Mandate): If a trigger condition is met, a review involving the designated human-centric roles MUST be initiated. Its outcome MUST be a documented set of conceptual refinement proposals.
  • CC-E12.4 (Didactic Primacy in DRRs): Any DRR proposing a change to a normative pattern MUST include a section analyzing its impact on cognitive ergonomics and didactic clarity.

Common Anti-Patterns and How to Avoid Them

Anti-PatternManager's View: What It Looks LikeHow FPF Prevents It (Conceptually)
The "Ivory Tower" FrameworkThe FPF specification becomes a beautiful but impenetrable fortress of abstract logic that no practicing engineer can actually use.The HF-Loop provides a formal channel for user feedback to drive conceptual simplification. The roles of UX Design Critic and Ethicist are constitutionally empowered to challenge complexity that does not serve a clear purpose.
The "Meaningless Rationale"The rationale field is filled with boilerplate text like "To increase assurance," without any real connection to the problem.The "So What?" test is part of the review process for L2 assurance cases or proof publications. A perfunctory rationale is grounds for rejecting promotion of the assurance case or proof publication to L2, forcing the author to articulate the real value of their formal work.
Glorifying ComplexityA culture emerges where the most complex and difficult-to-understand models are considered the "best," regardless of their utility.The core principle of Cognitive Elegance (P-1) and the mechanisms in this pattern create a constant pressure towards simplicity and clarity. The framework formally values understanding over mere complexity.

Consequences

BenefitsTrade-offs / Mitigations
Guards FPF's Core Mission: This pattern acts as an "immune system," protecting the framework from devolving into sterile formalism and ensuring it remains a tool for enhancing thought.Introduces "Softer" Concepts: Cognitive load and rationale quality are less quantifiable than formal proofs. Mitigation: FPF operationalizes them through a formal method. The HF-Loop is a structured inquiry, not an informal chat.
Empowers Human-Centric Roles: It gives the Ethicist and UX Design Critic roles a concrete, constitutional function in the evolution of the framework.-
Prevents User Burnout and Rejection: The HF-Loop is an early warning system that detects when the framework is becoming too cumbersome, allowing for course correction before users become frustrated and abandon it.-
Creates a Self-Simplifying System: The pattern creates a formal pressure that forces FPF to evolve towards greater clarity and usability, balancing the drive for formal rigor.-

Rationale

This pattern operationalizes Didactic Primacy (P-2), transforming it from a philosophical statement into an enforceable architectural Standard. The Rationale Mandate ensures that every act of formalization is tied to a clear purpose. The Human-Factor Loop ensures that the cost of using the framework is measured not just in resources, but in the most critical resource of all: the cognitive capacity of its users.

This pattern does not weaken the formal rigor established by other ADRs; it complements it. It guarantees that the powerful machinery of FPF is always directed towards a meaningful, human-relevant goal. It is the constitutional guarantee that FPF will remain, first and foremost, an "Operating System for Thought."

Relations

  • Implements: Pillar P-2 Didactic Primacy.
  • Complements: E.13 Pragmatic Utility & Value Alignment (which focuses on the relevance of the problem, while this pattern focuses on the usability of the framework).
  • Is constrained by: The overall governance process (DRRs), which is the vehicle for implementing the conceptual simplifications proposed by the HF-Loop.

E.12:End

Pragmatic Utility & Value Alignment

Problem Frame

The FPF provides a powerful engine for constructing formally correct and highly reliable holons. This power, however, introduces a subtle but profound risk: a team can create a perfectly verified and validated holon or episteme (AssuranceLevel:L2) that solves an irrelevant, misunderstood, or non-existent problem. The framework guarantees that the solution is correct, but it does not, by itself, guarantee that the solution is useful.

Furthermore, many of the most important system objectives—such as "safety," "usability," or "security"—are not directly measurable. They are assessed via proxy characteristics (e.g., "number of reported vulnerabilities" as a proxy for security). This practice is vulnerable to Goodhart's Law: when a proxy becomes the primary target, it often ceases to be a good measure of the original goal, as teams begin to optimize the proxy at the expense of the real objective.

Problem

Without a formal mechanism to keep the entire assurance apparatus tethered to real-world value, FPF risks enabling two critical failure modes:

  1. Formalism for Formality's Sake: Teams become preoccupied with achieving high epistemic scores, producing elegant but useless holons or epistemes. The framework is used to build beautiful solutions to the wrong problems.
  2. Proxy-Metric Distortion (Goodhart's Law): Teams successfully optimize for a chosen proxy characteristic, but in doing so, they diverge from—or even actively undermine—the true, often qualitative, U.Objective that the proxy was intended to represent. The system becomes technically successful but pragmatically a failure.

Forces

ForceTension
Measurability vs. MeaningHow to use quantitative, measurable proxies for progress without losing sight of the qualitative, often un-measurable, goals that truly matter.
Abstraction vs. ApplicationHow to build and reason with abstract models without them becoming disconnected from any concrete, practical application.
Incremental Progress vs. Global ValueHow to ensure that local optimizations and incremental improvements are genuinely contributing to the overall value proposition of the holon.

Solution

FPF elevates Pragmatic Utility (Pillar P-7) to a normative architectural principle, operationalized through two mandatory conceptual mechanisms.

The Principle of Pragmatic Utility (Expanded Definition)

Any holon or episteme created within FPF is an instrument for achieving a specific, pragmatic U.Objective. The value of that holon or episteme is determined solely by its utility in achieving that objective, not by its epistemic scores in isolation.

Mechanism 1: The Proxy-Audit Loop

To formally manage the risk of Goodhart's Law, FPF introduces a conceptual feedback loop to periodically review the alignment between proxy characteristics and their intended goals.

  • New Normative Relation: A new relation, isProxyFor: U.Characteristic → U.Objective, is introduced. This relation MUST be used to explicitly declare when a measurable characteristic is serving as a proxy for an often qualitative U.Objective.
  • Conceptual Audit Process: Any characteristic marked with the isProxyFor relation is subject to a periodic conceptual audit.
  • Review Roles: This audit is conceptually performed by the individual(s) in the Strategist role. They are tasked with answering the question: "Is optimizing for this proxy still reliably driving progress toward the actual U.Objective it represents, or have we observed a divergence?"
  • Output Concept: If a divergence is identified, a high-priority U.Method for revising or replacing the proxy MUST be proposed.

Didactic Note for Managers: Are You Climbing the Right Mountain?

The Proxy-Audit Loop is your compass. Your team's dashboards might show all green—metrics are improving, targets are being hit. But the audit loop forces a crucial question: "Are these the right metrics?"

Imagine you are trying to improve "customer satisfaction" (U.Objective). You choose "average call handle time" as a proxy metric. Your team successfully drives this number down. But the Proxy-Audit reveals that customer satisfaction is actually decreasing because agents are rushing and providing poor service to meet the time target. The loop forces you to recognize this divergence and find a better proxy (e.g., "first-call resolution rate"). It ensures your team is not just climbing fast, but climbing the right mountain.

Mechanism 2: The Minimally Viable Example (MVE) Mandate

To enforce a pragmatic, value-first approach from the very beginning of a project, any new U.System or major system component MUST begin its development cycle with the creation of a Minimally Viable Example (MVE).

  • Definition: An MVE is a simple, end-to-end, working instance of the holon that demonstrates the achievement of at least one core, user-facing objective, however trivial. It is the FPF equivalent of a "Hello, World" for a complex system.
  • Assurance Requirement: The MVE MUST achieve a minimum of AssuranceLevel:L1 (Substantiated). This means the MVE cannot be a mere mock-up or a purely conceptual sketch; it must be supported by at least one piece of tangible evidence (e.g., a passing test case, a formal assertion), as defined in Pattern B.3.3.
  • Stege transition Precedence: The development of the full-scale holon cannot proceed to AssuranceLevel:L2 until the MVE has been created and has met its L1 requirement.

Conformance Checklist

  • CC-E13.1 (Proxy Declaration Mandate): Any U.Characteristic used as a primary driver for an objective MUST be explicitly linked to that U.Objective via the isProxyFor relation.
  • CC-E13.2 (Proxy-Audit Mandate): A formal Proxy-Audit review MUST be conducted at regular conceptual intervals (e.g., before each major release). The outcome of this review MUST be a documented episteme.
  • CC-E13.3 (MVE Mandate): The development of any new U.System MUST be preceded by the creation of an MVE that satisfies the AssuranceLevel:L1 requirement.
  • CC-E13.4 (MVE Traceability): The full-scale U.System MUST maintain a formal traceability link (isEvolutionOf) to its originating MVE.

Common Anti-Patterns and How to Avoid Them

Anti-PatternManager's View: What It Looks LikeHow FPF Prevents It (Conceptually)
The "Perfectly Engineered Irrelevance"The team delivers a technically brilliant system that is formally verified and validated, but no one wants to use it because it doesn't solve a real problem.CC-E13.3 forces the team to build a working, end-to-end slice of value (the MVE) first. This grounds the entire project in a demonstrated solution to a real user need from day one.
The "Metric Myopia"The team becomes obsessed with improving a specific KPI, ignoring clear indicators that this is not improving—and may even be harming—the overall user experience or business goal.CC-E13.2 mandates the Proxy-Audit Loop. This forces a periodic, strategic step-back, where the Strategist role is constitutionally required to ask, "Are we still measuring what matters?"
The "Big Design Up Front" TrapThe team spends months creating a vast, abstract, and highly detailed model of a system before ever building a single working component.The MVE Mandate prevents this. It forces an iterative, pragmatic "build-to-learn" approach, ensuring that models are always grounded in a working reality.

Consequences

BenefitsTrade-offs / Mitigations
Defense Against Goodhart's Law: The Proxy-Audit Loop is a concrete, operational defense against the common failure mode of optimizing for the wrong thing. It forces regular, strategic reflection on the meaning of metrics.Introduces Strategic Overhead: The Proxy-Audit Loop and the creation of an MVE require dedicated time for strategic thinking and early implementation. Mitigation: This is not an expense but a strategic investment. This upfront effort is designed to prevent the far greater cost of developing the wrong system over months or years.
Ensures Value-Driven Development: The MVE Mandate guarantees that all major development efforts are grounded in a demonstrated, working solution to a real problem, however small. This prevents teams from investing significant resources in abstract models that have no proven path to practical application.-
Prevents "Analysis Paralysis": By requiring an early, working example, this principle encourages an iterative, pragmatic development style. It forces teams to build and learn, rather than over-specifying in a vacuum.-
Positions FPF as an Engineering Discipline: This pattern firmly anchors FPF as a tool for practical engineering, not just theoretical modeling.-

Rationale

This pattern operationalizes Pragmatic Utility (P-7). While Pattern E.12 protects the agent from the cognitive overload of the framework, this pattern protects the problem from being lost in a sea of formal abstraction. It provides the necessary constitutional guardrails to keep the powerful formal methods of FPF focused on delivering tangible, real-world value.

The MVE Mandate ensures that every journey starts with a destination in sight. The Proxy-Audit Loop ensures that the compass used on that journey remains pointed in the right direction. Together, these mechanisms guarantee that knowledge generated within FPF is not only formally correct and epistemically reliable, but also meaningful, useful, and aligned with its intended purpose.

Relations

  • Implements: Pillar P-7 Pragmatic Utility.
  • Complements: E.12 Didactic Primacy & Cognitive Ergonomics.
  • Provides context for: The definition of U.Objective and U.Characteristic by establishing a formal link between them.

E.13:End

Human‑Centric Working‑Model

Intent

Establish a single, human‑centric Working‑Model that practitioners can read, discuss, and evolve without exposure to formal machinery. Each statement declares a justification stance (validationMode) and, when assurance is sought, attaches appropriate grounding via one or more assurance shoulders — Mapping, Logical, Constructive — and may additionally attach Empirical Validation (evidence) as defined by the Trust & Assurance calculus. Empirical Validation can accompany any stance; it is required when the stance is postulate. Assurance shoulders sit beneath the Working‑Model and never define its vocabulary.

Put bluntly: one model people work in; three assurance shoulders — plus empirical checks when the world is the judge.

Problem & Context

Teams need one shared Working‑Model to make decisions at speed. Historically this shared model either:

  • drifts into jargon—different terms for one shared working-model value, slash‑labels, partial overlaps; or
  • calcifies into machinery—too formal for day‑to‑day design and review.

Both failure modes create friction between two audiences: (1) working users (engineers, programme managers, policy owners) who need a small, stable Working-Model text, and (2) assurance authors (ontologists, methodologists, auditors) who need proofs that the Working-Model text is sound.

E.14 resolves the impasse by separating concerns:

  • A Working‑Model layer: curated kinds and relations expressed in plain terms, governed by simple human rules.
  • An Assurance stack beneath it - Mapping, Logical, Constructive - that carries the heavy arguments (concept alignment, relational semantics, generative traces) and never leaks back into the Working-Model narrative.

This pattern dovetails with the framework’s unification stance (small Working‑Model text, rigorous foundations) and with our constructional mereology commitments (sum/set/slice provide extensional identity), while keeping the Kernel minimal and meta‑only.

Forces

  1. Cognitive economy vs. semantic precision. Managers and engineers must navigate with a handful of names and relations; assurance authors must still certify that those names and relations are unambiguous and extensional.

  2. Speed of change vs. guarantees. The Working‑Model must accommodate rapid iteration; the Assurance stack must lag just enough to check, without blocking practical progress.

  3. Parsimony vs. expressivity. The Working‑Model should not proliferate relation types or ad‑hoc categories; fine‑grained distinctions live in the Assurance layers and are shown only when they materially change a decision.

  4. Downward grounding vs. upward contamination. Grounding must always flow down (Working‑Model → Mapping → Logical → Constructive). No dependence up is allowed: proofs and traces never dictate wording or layout in the Working‑Model.

  5. Trans‑disciplinary unification vs. local dialects. The Working‑Model must reconcile different disciplines’ habits without erasing them; Mapping captures dialects, while the Working‑Model exposes a single usable choice.

  6. Auditability vs. readability. Every Working‑Model statement must be auditable on request, yet day‑to‑day views hide the scaffolding unless summoned.

Solution

Human-Centric principles

Recognition text and assurance text

Human-facing patterns also need EntityOfConcern stability across the two reading-order text blocks. The working reader should not meet one object in the recognition text and a different ontological kind in the assurance text. If the pattern distinguishes an EntityOfConcern, the interpretive or operational move applied to that object, and the wider review or work process around it, those distinctions should be made explicit rather than hidden behind stylistic noun-swapping.

Working-Model-first drafting therefore also means subject-domain-first drafting. If a pattern is meant to help with a real review, design, cultural, research, or operational problem, the recognition text should open from that problem-owning moment before internal taxonomy or package architecture. If a broader umbrella head and a narrower operative branch are both live, the pattern should state that stack plainly enough that a cold reader can tell what the umbrella names, what branch is current, what object is governed, what move is being carried, and what wider work remains outside.

Under F.18 local-first naming, the canonical pair here is recognition text and assurance text. The earlier provisional ...shell wording is retired. These names refer to two reading-order text blocks inside one pattern, not to new publication-face kinds or authority kinds.

For human-facing canonical patterns, Working-Model-first discipline should appear in a two-part reading order. The recognition text is the working text that a cold practitioner, manager, or researcher should be able to understand first: what situation this pattern is for, what it buys, what it is not for, and what ordinary mistake it helps prevent. The assurance text is the heavier text that carries declaration, object discipline, modeling lens, law, reroute conditions, and other review work.

The assurance text may justify, tighten, or audit the working text, but it must not silently replace or strengthen the recognition-text claim. Where episteme-publication-heavy or transform-heavy patterns need a compact ontological account, the assurance text should expose three things explicitly:

  • the ontic target or EntityOfConcern;
  • the modeling substrate or mathematical lens when one is load-bearing;
  • the publication face or working text by which the claim is presented.

This is a reading-order rule rather than a demand that every reader consume the assurance text first. The point is to keep the human-facing Working-Model text primary while preserving a recoverable, auditable assurance text beneath it.

E.14‑P.1 – Working‑Model first, stance explicit. ** Operate one Working‑Model for all human‑facing discussion. For each assertion, the author SHALL declare a justification stance (validationMode) and choose the appropriate assurance shoulder(s): Mapping (term↔kind alignment via Lang‑CHR / D‑Projection), Logical (CT2R alias semantics, scope/constraints), Constructive (Γₘ generative trace), and Empirical Validation (evidence via U.EvidenceRole in a declared U.BoundedContext).

E.14‑P.2 – Downward‑only dependency. Information may flow from the Working‑Model down into any Assurance layer; no Assurance layer may impose vocabulary or shape back upward into the Working‑Model.

E.14‑P.3 – Small working text, big proof. The Working‑Model exposes a minimal set of names (L‑1/L‑2 registers) and a compact family of relations used in everyday reasoning; precision and completeness are proved below.

E.14‑P.4 – Human registers first. Terms in the Working‑Model are deliberately curated for human legibility (register‑badged, synonym‑aware). Synonym capture and language variance belong to Mapping; only the chosen canonical label appears in the Working-Model text.

E.14‑P.5 – Justification modes are explicit. Each Working‑Model relation declares validationMode ∈ {axiomatic, inferential, postulate}. axiomaticConstructive grounding (Γₘ trace via tv:groundedBy); inferentialLogical grounding (reasoned chain, often KD‑CAL‑backed for epistemic ties); postulateEmpirical Validation (evidence bundle with scope and timespan). Empirical Validation (LA) may also accompany inferential or axiomatic claims as real‑world confirmation. Mapping contributes TA, Logical/Constructive contribute VA, and Empirical contributes LA (per the Trust & Assurance calculus; no calculus variables appear in the Working‑Model text).

E.14‑P.6 – Parsimony in the working text. No new Working‑Model relation types are introduced if the existing Logical aliases plus Constructive grounding suffice to capture the intended meaning.

E.14‑P.7 – Evidence is a first‑class support. When postulate is chosen, authors SHALL attach an evidence pointer (Empirical Validation) appropriate to the claim and context, governed by U.EvidenceRole within a declared U.BoundedContext.

E.14‑P.8 – Working-model-first is not explanation-thin. Human-facing parsimony does not license under-explained pattern prose. When a pattern claims a Working‑Model benefit, it SHALL still provide enough problem framing, rationale, and worked slices that readers can tell what the model clarifies, what remains on the assurance shoulders, and when a heavier review path is required.

Layer Standard & Downward Flow (Working‑Model → Assurance)

This section defines what each layer is for, what it guarantees, and how a single Working‑Model statement is carried down.

Working‑Model (what humans see)

Purpose. A small, curated graph of kinds and relations that a mixed team can read at a glance.

Elements.

  • Kinds — one chosen concept per node (no slash‑labels).
  • Relations — a short list intelligible to non‑specialists (e.g., Component‑of, Member‑of, Aspect‑of, plus a small number of cross‑disciplinary ties such as Interface‑of or Constituent‑of).
  • Language register badges — labels shown in the Working-Model are L‑1 or L‑2; L‑3/L‑4 remain in Mapping as synonyms or symbols.

Obligations.

  • Every Working‑Model edge and node is grounded downward (see below).
  • The Working‑Model does not display constructor jargon, proof terminology, or evidence identifiers; those live in Assurance and are available on demand.

Assurance‑1: Mapping (from words to kinds)

Role. Consolidate human labels from varied sources and bind them to the chosen kinds used on the Working‑Model.

Guarantee. For any Working‑Model label, there exists a stable alignment to exactly one kind; synonyms, abbreviations, locales and registers are recorded here, not in the displayed Working-Model. Mapping primarily raises Typing Assurance (TA) by consolidating synonyms/registers and binding tokens/labels to one chosen kind; calculus‑level metrics live outside Part E.

Deliverable. A compact alignment table per scope that makes it obvious which one label the Working‑Model will show and which alternatives are tolerated in background sources.

(Rationale: Working teams speak many dialects; the Working‑Model speaks one. Mapping is the interpreter.)

Assurance‑2: Logical (from Working‑Model relations to alias semantics)

Role. Give each Working‑Model relation a precise alias meaning and its admissible use‑cases, keeping the Working-Model vocabulary small.

Guarantee. A Working‑Model edge such as Component‑of or Aspect‑of carries one intended reading (transitivity/antisymmetry expectations, scope notes), sufficient for auditors to assess whether the use is legitimate in a given context.

Deliverable. A short set of alias rules: “When an edge is labeled Component‑of in the Working-Model text, it intends the structural reading that is later verified by construction.” The Logical layer is the Standard that ties human labels to accepted meanings (CT2R alias rules); it primarily contributes Verification Assurance (VA). Calculus‑level symbols are not used in E‑patterns.

(Rationale: logical aliasing protects the small Working-Model text from relation proliferation while keeping meanings crisp.)

Assurance‑3: Constructive (from meanings to generative traces)

Role. Provide extensional guarantees by constructing the wholes, collections, and slices that Working‑Model relations speak about.

Guarantee. For structural edges, there exists a constructional narrative (e.g., sum, set, slice) that, if told, would recreate the whole from its parts or the aspect from its bearer; this makes identity and containment trackable and testable across scales.

Deliverable. A single generative story per structural link (axiomatic justification). For non-structural ties in the Working-Model text (e.g., epistemic links), Constructive may be absent; Logical/Empirical take the lead. Constructive contributes VA (extensional identity via Γₘ); for structural edges, tv:groundedBy MUST reference exactly one Γₘ trace.

(Rationale: constructional grounding turns everyday part‑whole talk into statements whose identity conditions are not left to taste.)

Assurance‑4: Empirical Validation (from claims to observed world)

Role. Record when and where a Working‑Model claim meets reality. Guarantee. Every empirical binding names a U.BoundedContext, a target claim/scope, and a timespan; staleness/refresh are managed per context policy. Deliverable. A U.EvidenceRole binding (status‑only) anchored into the Evidence–Provenance chain. Empirical Validation contributes LA (raises empirical R and constrains G to its validated envelope).

The downward grounding for a single Working-Model statement

Consider a Working‑Model arrow A –Component‑of→ B:

  1. Mapping shows that the words A and B are the chosen labels for their kinds; it retains tolerated synonyms and symbols in the background.
  2. Logical confirms that Component‑of in the Working-Model text means the structural reading with its ordinary mereological expectations; if the Working-Model text used Member‑of instead, Logical would similarly certify the intended reading and its boundaries.
  3. Constructive exhibits the constructional narrative (e.g., a sum of parts resulting in B with A among them), which yields axiomatic justification for the structural edge, sets validationMode=axiomatic, and binds the edge via tv:groundedBy → Γₘ.sum|set|slice.
  4. Empirical Validation records the evidence pointer and scope that make the claim auditable within its U.BoundedContext (required for postulate; optional reinforcement for other stances).

Together, these three ground the human arrow without leaking their machinery upward. The Working‑Model remains simple; the Assurance stack carries the proof.

Archetypal Grounding (System / Episteme)

Tell–Show–Show. The principle is stated once, then shown on a U.System case (structural) and on a U.Episteme case (knowledge‑bearing), in line with the authoring template.

U.System — Working‑Model first, Constructive grounding available

  • Publication (Working‑Model). Authors state structure using familiar relations (e.g., Impeller ut:ComponentOf Pump; Pump ut:ComponentOf Skid). Nothing else is required for readers to follow the design.
  • Assurance (downward grounding). When a higher-assurance claim is sought, the same author narrates the constructive story of the whole as a composition of parts and, where appropriate, attaches a downward grounding to that narrative (sum / set / slice). The narrative remains concept‑level and notation‑neutral; order and time stay out of structure and are expressed in their own planes.
  • Canonization move. Readers continue to see Working‑Model relations as the primary Working-Model text; the constructive story is supporting, not defining.

U.Episteme — Working‑Model first; Logical/Mapping preferred; Empirical evidence as appropriate

  • Publication (Working‑Model). Authors connect meaning-bearing epistemes or publications using knowledge relations (e.g., RepresentationOf, UsageOf) in the same human‑oriented style.
  • Assurance (downward grounding). Here assurance typically flows to the Logical or Mapping shoulders (reasoned argument; type/lexical alignment). Empirical Validation is used where observation is the right currency (status‑only roles on epistemes); Constructive grounding is optional and used only where a structural interpretation is genuinely intended.
  • Canonization move. Again, Working‑Model text is the public form; assurance is attached deliberately and separately, without leaking method or time semantics into structure.

6.3 - Pattern lesson (both cases) The Working‑Model layer remains the canonical publication face for authors and reviewers; assurance layers (Mapping / Logical / Constructive) are opt‑in and used purposefully, with grounding flowing downwards from the Working‑Model to the appropriate shoulder. This presentation respects the authoring template’s Archetypal Grounding requirement and keeps notational choices illustrative rather than defining.

Bias‑Annotation (what to watch for, and the counter‑moves)

Bias (name)Symptom in draftsConceptual counter‑moveWhere this is governed
Formalism captureTreating a constructive narrative as “the real thing,” with ut:*Of reduced to a label.Re‑assert Working‑Model primacy: publish in ut:*Of; attach assurance downwards only when needed.E.8 template; Notational‑Independence guard‑rail.
Canonical inversionDemanding constructive grounding for epistemic links by default.Keep the progressive stance: prefer Logical/Mapping assurance for knowledge claims; raise to Constructive only when structure is at issue.Authoring template; Working‑Model pattern family.
Layer leakage (order/time)Encoding sequence or phase as part–whole to “strengthen” claims.Keep order/time in their planes; do not smuggle them into structure.Style/structure guidance in Part E; flavour separation in Γ‑family.
Collection ↔ Composition swapUsing MemberOf as if it implied ComponentOf identity.Keep collections (set) distinct from assemblies (sum); do not upgrade membership to component status.Working‑Model mereology guidance (Part B/C linkage).
Notation lock‑inLetting a diagram or syntax define meaning.Apply Notational Independence: define semantics in prose (maths if needed); treat renderings as informative.Notational‑Independence guard‑rail.
Backwards dependencyLetting an assurance publication or record redefine public terms.Preserve unidirectional dependence: Working-Model terms do not derive their meaning from assurance publications or records.Part E guard‑rails (dependency discipline).
Silent stancePublishing claims with no declared assurance stance.Declare the stance explicitly (e.g., working claim vs reasoned vs constructive).Style/authoring discipline in Part E.

Reading reminder. Bias checks are conceptual reading aids; they never introduce notational or tooling mandates.

Conformance Checklist (normative; author‑facing duties for thought and prose)

IDRequirementPurpose
CC‑E14‑1 (Working‑Model primacy).Authors SHALL publish claims in Working‑Model form (human‑oriented ut:*Of relations or equivalent domain statements) as the canonical publication face for readers.Preserve human‑first canon and didactic clarity.
CC‑E14‑2 (Downward grounding).When assurance is attached, grounding SHALL flow downwards from the Working‑Model to the appropriate assurance shoulder (Mapping / Logical / Constructive / Empirical) and SHALL NOT impose vocabulary back onto the Working‑Model.Maintain plane separation and cognitive economy.
CC‑E14‑3 (Stance declaration).For any claim where assurance matters, the author SHALL declare validationMode (postulate / inferential / axiomatic).Make assurance intent explicit and readable.
CC‑E14‑4 (No order/time in structure).Authors SHALL NOT encode execution order, parallelism, or temporal coverage as part–whole; keep them adjacent in their own planes.Prevent layer leakage and category errors.
CC‑E14‑5 (Collection ≠ Composition).Authors SHALL keep membership claims distinct from component claims; no implicit upgrade from collection to assembly.Guard extensional identity and reader expectations.
CC‑E14‑6 (Notational independence).Core meaning MUST NOT hinge on a specific diagram or syntax; any rendering present SHALL be marked informative.Ensure longevity and cross‑discipline portability.
CC‑E14‑7 (Layer direction).Authors SHALL avoid back-defining Working-Model terms by their assurance publications or records; dependence is one‑way (Working‑Model → Assurance).Preserve unidirectional dependence of layers.
CC‑E14‑8 (Template compliance).Sections SHALL follow the canonical pattern order; Archetypal Grounding is mandatory for architectural patterns.Keep patterns comparable and auditable by reading.
CC‑E14‑9 (Progressive formality).Authors SHOULD escalate assurance deliberately (from working claim to reasoned to constructive), and use Empirical Validation where observation is the right currency.Support staged formality without overloading early drafts.
CC-E14-10 (Structural grounding handshake).For structural edges on the Working-Model, authors SHALL set validationMode=axiomatic and provide Constructive grounding with `tv:groundedBy → Γₘ.sumset
CC‑E14‑11 (Empirical bindings).When validationMode=postulate (or when adding real‑world confirmation), authors SHALL bind evidence via U.EvidenceRole in a declared U.BoundedContext with an explicit timespan and provenance anchors.Aligns with Evidence Graph Referring and empirical ageing policies.
CC-E14-12 (F-declaration).Normative Working-Model publications SHALL declare U.Formality = Fk per C.2.3 (recommended F ≥ F3 for readable publications). Assurance publications or records MAY carry higher F; min-F applies to composites.Aligns E.14 with the unified Formality characteristic; avoids legacy “tiers/modes”.
CC‑E14‑13 (Light records, not thin prose).Authors SHALL NOT use the Working‑Model-first stance as a reason to strip problem framing, rationale, or worked slices out of the pattern text. Ordinary use may stay light, but readers MUST still be able to understand the pattern without nearby project notes.Keeps human-facing economy from collapsing into under-explained prose.
CC‑E14‑14 (Recognition text before assurance text).When a pattern claims a Working‑Model or other human-facing benefit, authors SHALL keep recognition-first working text distinct from the heavier assurance text. The assurance text MAY refine and justify the working text, but it SHALL NOT silently change the recognition-text claim. If the pattern claims broad or transdisciplinary reach, the working text SHOULD show heterogeneous situations early, preferably through an F.16-style example matrix or an equally explicit alternative.Keeps Working‑Model-first drafting from collapsing into either thin prose or late-only universality.

All obligations above are conceptual and apply to thought and prose; they introduce no notational or data‑processing requirements.

E — Conceptual Examples (no notation, no data handling)

  1. Assembly from parts → “Component Of” A pump skid is agreed to be nothing over and above its pump, frame, reservoir, and valve set considered together. Because the whole is conceptually constructed from those parts, the team may safely speak of each part as Component Of the skid. The justification is the construction itself: if any listed part were removed, the very same skid would no longer exist as that whole. This keeps identity extensional and makes the engineer‑facing alias (“Component Of”) truthful rather than conventional.

  2. Parallel elements gathered → “Member Of” A test rig has four identical cartridges used in parallel. The rig treats them as a conceptual gathering; membership is fixed by inclusion in that gathering, not by sequence or timing. Speaking of each cartridge as Member Of the rig’s cartridge bank is then licensed by the same gathering act. Engineers can keep saying “member,” while architects know the warrant is the underlying construction of the bank as a collection, not an accidental tagging.

  3. Focused facet carved → “Aspect Of” When the team talks about the thermal envelope of a reactor, they are not multiplying entities; they are taking the already‑agreed reactor and conceptually carving out its thermal facet for focused reasoning. Calling that carve‑out an Aspect Of the reactor is justified because the aspect owes its identity to the parent and the chosen facet, and nothing else. This licenses disciplined talk about “boundary,” “interface,” or “envelope” without mistaking them for independent systems.

Notes across the examples • Everyday aliases (Component Of, Member Of, Aspect Of) remain the only labels engineers need to see; their truth is anchored by prior constructional choices. • Structural links draw on Constructive grounding; epistemic links—like “Representation Of” or “Usage Of”—may instead rely on Empirical Validation (evidence bundles) or Logical grounding appropriate to the claim.

F — Resulting Context (after you apply the pattern)

What improves

  • Single dial for containment. Teams can ask one plain question, “what is inside what?”, and trust that all structural talk reduces to shared constructional choices rather than ad-hoc relation lists. Ontologists keep rigorous warrants without overloading day-to-day readers.
  • Extensional identity by default. Wholes are the wholes they are because of the parts gathered; collections are the collections they are because of their members; aspects inherit identity from their parent and facet. This prevents silent drift when labels change.
  • Layer harmony. Engineer‑facing aliases live at the same level as other relation names, while their warrants live one step below, keeping human language clean and the generative basis auditable.

What to watch

  • Discipline for structural relation kinds. A structural link that lacks a constructional warrant is conceptually unsafe. Conversely, forcing epistemic links to pretend they are structural over-physicalises knowledge claims; for those, evidence or argument is the right currency.
  • Author workload moves, not grows. Day-to-day model authors stay with aliases; specification authors carry the responsibility for ensuring every structural statement really follows from a sum, a gathering, or a carve-out. This is a conscious shift of complexity away from operations and into the pattern's foundation.

Invariants you must preserve

  • Parsimony of constructors. Build wholes by summing parts; build banks by gathering elements; focus facets by carving aspects. Do not invent extra generative acts for parallelism or time‑slicing; those concerns belong to other conceptual services.
  • Two-relation-kind justification. Structural talk rides on construction; epistemic talk rides on evidence or proof. Keep the boundary sharp so that later reasoning (about reliability, compliance, or policy) remains clear.

Known consequences

  • Stable queries, fewer surprises. Because aliases are backed by shared constructions, teams from different disciplines can interoperate without renegotiating meanings at hand‑off.
  • Audit trail without jargon. Reviewers can trace every structural claim to a prior constructional choice, while everyday collaborators keep using familiar relation names.

Consequences

BenefitsTrade‑offs / Mitigations
Human‑first clarity. Readers see the Working‑Model layer as the canonical publication form; Assurance layers remain optional and purpose‑driven.Extra author discipline. Declaring the stance and (when needed) a short grounding narrative takes effort; mitigated by the authoring template and style guide.
Progressive assurance. Teams can start light and raise strictness deliberately (Mapping → Logical → Constructive) without changing the visible relations.Risk of “forever‑light.” Some models may remain in low‑assurance stances; mitigated by formal maturity checks and reviewer prompts to escalate where risk warrants.
Layer hygiene. Order/time remain outside mereology; structural identity is neither overloaded nor diluted.Split attention. Authors must learn to keep planes distinct; mitigated by the Tell‑Show‑Show pedagogy across architectural patterns.
Spec cohesion. The same section order and safety subsections (Bias‑Annotation, Conformance Checklist) keep patterns comparable and auditable.Tighter prose. Patterns grow by a few concise checks; mitigated by the canonical template.

Quotable closer. “One layer to speak, three layers to justify—only when needed.”

Rationale

Why Working‑Model is canonical. FPF privileges human‑oriented relations as the primary interface for thinking and communication. This satisfies didactic primacy while preserving conceptual integrity: formal work serves the human layer, not the other way around. The canonical template and style principles institutionalise this choice without inviting notation lock‑in.

Why grounding flows downward. Mapping, Logical, Constructive, and Empirical supports are assurance shoulders that sit beneath the Working‑Model claim. Authors select the shoulder(s) that fit purpose and risk: type/lexical alignment (TA), reasoned consequence (VA), constructive reconstruction (VA), and real‑world confirmation (LA). This keeps the Kernel small, avoids plane‑mixing, and provides a clear path to higher-assurance guarantees when warranted.

Why patterns teach before they tighten. The Tell‑Show‑Show requirement couples each universal rule with System/Episteme illustrations, reducing cognitive load and preventing premature formalism. It is the didactic mechanism that makes Human‑Centric Canonization practical across disciplines.

Why no notation talk in Core. Guard‑rails and the style guide prohibit tool jargon and notation dependence inside normative prose; meanings are given in words and mathematics, with any renderings treated as illustrative only. This preserves longevity and cross‑disciplinary portability.

Relations

Builds on:

  • E.8 Authoring Conventions & Style Guide — section order, style principles, and mandatory safety subsections used here.
  • E.7 Archetypal Grounding — the Tell‑Show‑Show rule applied in this pattern’s own Grounding section.
  • C.2.3 Unified Formality Characteristic (F) — declares the F scale and ΔF moves for progressive rigor; Working-Model publications SHALL declare F and remain notation-agnostic.

Coordinates with.

  • CT2R‑LOG — Working‑Model Relations & Grounding — alias rules and tv:groundedBy Standard for edges grounded in Γₘ.
  • Compose‑CAL (Constructional Mereology) — provides the constructive shoulder (Γₘ: sum | set | slice) used to ground structural edges.
  • E.10 Lexical Discipline & Stratification — ensures naming discipline and register hygiene when the human layer is published.

Constrains:

  • All architectural patterns that publish relations SHALL present them in the Working‑Model layer and MAY attach assurance only as needed, preserving plane separation and notational independence. (Template conformance as per E.8.)

Informs.

  • Part F unification practices (context of meaning, bridges, fit levels) by reinforcing the preference for human‑readable labels with explicit alignment notes rather than silent formal substitutions.

E.14:End

Lexical Authoring & Evolution Protocol (LEX‑AUTH)

Author patterns as evidence‑bearing epistemes, evolve them via governed open‑ended search, and publish an auditable trace that improves quality—not just compliance.

Context

FPF patterns are the canon: they define the generative rules that other artifacts depend on. Teams need to change patterns as the SoTA moves, but ad‑hoc edits lead to drift, low comparability, and brittle downstream updates. We need a method that (a) generates better alternatives, (b) selects them against explicit quality/assurance targets, and (c) publishes a machine‑ and human‑checkable trace that can be replayed, audited, and re‑run. (Built to cohere with DRR (E.9), LEX‑BUNDLE (E.10), Canonical Evolution Loop (B.4), NQD/E‑E (C.18 and C.19), Evidence Graph Referring (A.10), Trust (B.3), F‑Suite validation (F.15).)

Problem

Without a disciplined authoring protocol:

  • One‑shot generation dominates; there is no evolutionary path from vN → vN+1.
  • “Trace” degenerates into a proof‑of‑work: a method ran, not quality improved.
  • Pattern edits blur lexicon vs. norms vs. examples, breaking didactics and tool‑independence.
  • SoTA content is cited but not integrated via Bridges & CL; claims get over‑ported.

Forces

ForceTension we must resolve
Generativity vs AssuranceOpen‑ended idea generation must not erode safety/traceability.
SoTA speed vs Canon stabilityFrequent small updates must preserve conceptual integrity and roll‑up invariants.
Local meaning vs Global reuseContext‑local meaning must cross contexts only via Bridges with CL penalties.
Notational independence vs CheckabilityText must stay notation‑free yet be verifiable by Tooling harnesses.

Solution — A governed evolutionary authoring method with a publishable LEX‑AUTH Trace (LAT)

LEX‑AUTH defines how a pattern is proposed, varied, selected, validated, and merged, with artifacts and evidence fit to the FPF kernel.

Method (design‑time choreography)

Stage A — Frame & Scope (Context, Objectives, Invariants)

  1. Anchor the work in a U.BoundedContext for the spec (e.g., FPF/Core), cite governing guard‑rails (E.5.*), and state objectives for the change (e.g., clarity ↑, universality ↑, assurance cost ↓).
  2. Declare the Delta‑Class (see §4.3) and impact radius (dependent patterns, bridges, tests).
  3. Fix acceptance targets (see §4.4 Quality & SoTA metrics).

Stage B — Generate candidates (SoTA + NQD) 4. Harvest SoTA inputs (standards, rival patterns, lived domain idioms) and bind them as evidence via U.EvidenceRole with claim/claim‑scope/timespan (empirical vs deductive lines). 5. Generate candidate variants using NQD‑CAL engines (Novelty/Quality/Diversity) with an E/E policy (explore↔exploit governor) to populate a Pareto front of pattern phrasings/structures. (No single shot; multiple candidate clauses compete.)

Stage C — Shape & Align (Structure, Bridges, USM) 6. Shape top candidates into the standard architectural template (Context → Problem → Forces → Solution → CC → Consequences → Rationale), obeying LEX‑BUNDLE (no tooling jargon; twin registers allowed). 7. Bridge across Contexts explicitly (F.9): any imported definitions/claims declare CL and loss notes; propose scoped narrowing where needed. 8. Type scopes with USM (A.2.6): keep ClaimScope (G) distinct from WorkScope; no “applicability/envelope” smuggling.

Stage D — Validate & Decide (Assurance, Tests, DRR) 9. Run the harness: update SCR/RSCR (F.15), lint lexical rules (E.10), run Γ‑consistency and RSG/SoD checks where relevant. 10. Score candidates on Quality & SoTA metrics (§4.4) and assurance deltas (Δ⟨F,G,R⟩). 11. Record a DRR (E.9) with options considered, trade‑offs, chosen candidate, blast‑radius. 12. Merge the winner; version pattern SemVer by Delta‑Class.

Stage E — Publish & Monitor 13. Publish the LEX‑AUTH Trace (LAT) (§4.2) as the separate authoring/evidence record for the change.

  1. Schedule evidence refresh windows and an evolution watchpoint (B.4 loop): when metrics or SoTA inputs decay, reopen Stage B.

The LEX‑AUTH Trace (LAT) — what it is and why it matters

A LAT is not “we ran a script.” It is a structured episteme that lets others reproduce quality gains and re‑run the search when SoTA shifts.

LAT minimal contents (publish with the pattern):

  1. Context & version (pattern id, context, SemVer, Delta‑Class).
  2. Objective vector (what we tried to improve: clarity, universality, assurance cost, etc.).
  3. SoTA pack (sources bound as U.EvidenceRole with claim/scope/time and polarity).
  4. NQD settings (emitters/lenses, diversity characteristics) + E/E policy used.
  5. Candidate set (top K variants with NQD scores + short deltas from baseline).
  6. Bridge ledger (all cross‑context imports with CL and loss notes).
  7. Assurance delta (Δ⟨F,G,R⟩ from baseline; penalties from CL applied).
  8. Harness results (checks passed/failed, test diffs).
  9. DRR link (decision rationale id).
  10. Refresh policy (evidence decay windows and triggers).

Uses of the LAT: Reproducibility (re‑run B‑stages as SoTA changes), assurance (explicit impact on F/G/R), portfolio health (diversity/coverage), teaching (didactic before/after), and cross‑context safety (no silent imports). Publish the pattern with its DRR, and publish the LAT as the separate authoring/evidence record for the change. The LAT carries the reproducible authoring trace and cites the DRR as the governing decision record. The DRR remains complete without LAT citations; it may summarize already-available decisive evidence by value when that evidence materially shaped the content choice. If later LAT or refresh evidence motivates a reopened or revised choice, carry that evidence into the successor DRR or other admissible decision record rather than retrofitting the accepted DRR.

Example of a LAT‑stub

LAT:
  context: FPF/Core, pattern: F.15, semver: x.y+1, delta-class: Δ‑2
  objectives: {clarity↑, universality↑, assurance-cost↓}
  SoTA-pack: {OpenAlex 2025‑Q3, SPECTER2‑23, DPP‑2019, MAP‑Elites‑2015+}
  NQD-settings: {CharacteristicSpace: domain‑family × …, grid: CVT@k=16}
  candidates: K=4 (wording of RSCR‑F04 & gates)
  bridge-ledger: none (intra‑canon refs only)
  assurance‑delta: ΔF=+, ΔG=+, ΔR=+ (after CL‑penalties=0)
  harness: LEX‑BUNDLE lint pass; F‑suite pass; Γ‑consistency ok
  DRR-id: DRR‑2025‑09‑DFCM‑roll‑in
  refresh: F1‑Card edition refresh window = 6 mo

What counts as “changed the pattern as a whole” — Delta‑Classes & versioning

Classify the intended change before work starts (declare it in the DRR framing; echo it in the LAT or evidence record when one is used):

  • Δ‑0 Lexical polish — wording/ordering only; no change to CC or semantics. → Patch (x.y.z+1).
  • Δ‑1 Didactic restructure — narrative/layout; unchanged Conformance Checklist (CC). → Minor (x.y+1.0).
  • Δ‑2 Normative refinement — CC tightened/clarified; semantics preserved by test equivalence. → Minor (x.y+1.0) + RSCR required.
  • Δ‑3 Semantic change — CC adds/removes requirements; downstream requirements shift. → Major (x+1.0.0) + impact review + bridges refresh.

Definition of “pattern changed as a whole”: any Δ‑2/Δ‑3 change (i.e., the normative surface or semantics changed) counts as a pattern change in the canonical corpus and triggers harness & bridge reviews.

Quality & SoTA metrics (selection lenses)

Mandatory lenses (declare in LAT; higher is better unless noted):

  • Clarity (readability; plain‑register score from didactic rubric).
  • Universality (C‑1): ≥3 heterogeneous domains anchored in the Archetypal section.
  • Lexical discipline (E.10): 0 violations (DevOps lexicon, process/function conflations).
  • Assurance delta: ΔF (formality), ΔG (scope clarity), ΔR (reliability after CL penalties).
  • Bridge integrity: Bridge integrity (policy lens): declare minimum CL thresholds per Context policy; penalties route to R only (B.3/F.9); record policy‑id in LAT.
  • Test conformance: F‑suite pass; RSCR clean.
  • Exploration health (NQD): diversity coverage > threshold; no premature convergence.
  • Didactic economy: length vs density ratio within band; “Tell‑Show‑Show” present.

Optional lenses (context‑specific): Ethical/SoD guard strength; cross‑scale roll‑up integrity; aggregation proofs present; etc.

Conformance Checklist (normative)

CC‑LA‑1 (Context anchoring). Every authoring run MUST declare a U.BoundedContext, Delta‑Class, objectives, and acceptance lenses before generating candidates.

CC‑LA‑2 (SoTA as evidence). External inputs MUST be bound as U.EvidenceRole epistemes with claim, claim‑scope, polarity, timespan (formal/empirical lines). No raw links.

CC‑LA‑3 (Open‑ended generation). At least K≥3 candidate variants MUST be generated via NQD‑CAL with a declared E/E policy; single‑shot edits violate LEX‑AUTH.

CC‑LA‑4 (Bridges & CL). Any cross‑context reuse MUST appear in a Bridge with CL and loss notes. CL penalties apply to R‑lane when scoring.

CC‑LA‑5 (Harness). The candidate winner MUST pass LEX‑BUNDLE lint, SCR/RSCR tests, Γ‑consistency, and SoD/RSG gates where applicable.

CC‑LA‑6 (Assurance deltas). The LAT MUST publish Δ⟨F,G,R⟩ relative to baseline, explicitly accounting for CL penalties and any narrowed scopes.

CC‑LA‑7 (DRR). A DRR entry is mandatory for Δ‑2/Δ‑3 changes; it records options considered, rationale, and impact radius.

CC‑LA‑8 (Refresh plan). Empirical evidence in the LAT MUST carry a decay/refresh window; a watchpoint MUST be scheduled in the Canonical Evolution Loop.

CC‑LA‑9 (Publication). Publish the pattern + LAT together; past LATs are immutable. New runs produce new LATs.

Consequences

Benefits. Evolutive quality: patterns improve through search + selection, not edits by fiat. Auditability: a re‑runnable LAT shows why the chosen variant won. Safety: cross‑context reuse is explicit and penalized appropriately. Comparability: Δ‑classes & SemVer let downstream readers predict blast‑radius.

Trade‑offs. Some ceremony (LAT/DRR, NQD lenses) and maintenance (evidence refresh, bridge upkeep). These costs buy reproducibility and SoTA tracking.

LEX‑AUTH extends the FPF constitution by operationalising pattern evolution: it plugs B.4 Canonical Evolution Loop into E.9 DRR, binds SoTA via U.EvidenceRole and KD‑CAL, drives candidate generation with C.18 NQD‑CAL under C.19 E/E‑LOG, enforces lexical discipline via E.10 LEX‑BUNDLE, and validates with F.15 regression harnesses. Cross‑context safety is carried by F.9 Bridges with CL penalties in B.3 Trust. The whole remains notation‑independent (E.5.2) and stays within the Core → Tooling → Pedagogy dependency rule (E.5.3).

Operators (authoring deltas you are allowed to apply)

  • Refine (tighten CC without changing acceptance meaning).
  • Split/Merge (factor patterns; preserve links; update Bridges).
  • Generalise/Constrain (expand/restrict ClaimScope (G) with proofs or loss notes).
  • Rephrase (clarify language; leave CC untouched).

Each operator carries a default Delta‑Class and test obligations.

Self‑application Work Log (how this very pattern was authored)

This is not chain‑of‑thought; it is the required U.Work evidence for LEX‑AUTH.

Context. FPF/Core (Canon); Delta‑Class: Δ‑2 (normative refinement by addition of method & CCs). Objectives. Add an evolutionary authoring method; make trace useful (quality‑bearing); align with SoTA machinery already in spec. SoTA pack (evidence bound). Prior FPF kernel commitments to DRR (E.9), E.10 LEX‑BUNDLE, B.4 Evolution, C.18 and C.19 NQD/E‑E, F.15 harness, F.9 Bridges, B.3 Trust; these are treated as the authoritative internal SoTA for the Canon here. NQD/E‑E. Generated ≥3 alternative Solution sections; finalist chosen for clearer Δ‑classes and actionable LAT contents. Bridges. No cross‑external mapping; intra‑canon references only (CL=3). Harness. LEX‑BUNDLE lint (no tooling jargon), CCs unique/atomic, didactic “Tell‑Show‑Show” via Self‑application log, Universality criterion met by cross‑kernel applicability. Assurance Δ. F: + (explicit method & CCs); G: + (scope separation & Δ‑classes); R: + (LAT obligations + bridge penalties). DRR. Recorded: alternatives considered (lighter trace vs full LAT), chosen design (full LAT). Refresh. Reopen when SoTA (e.g., G‑suite authoring kit or CHR templates) evolves or when LAT misuse is seen in reviews.

E.15:End

RoC‑Autonomy Budget & Enforcement

Intent. Make any claim of autonomous behavior testable and enforceable via a published AutonomyBudgetDecl, Guarded enactment, Override SpeechActs with SoD, and a Work‑anchored AutonomyLedger. Rule (summary). If a Role/Method/Service claims autonomy, authors MUST: (i) publish an AutonomyBudgetDecl with AdmissibilityConditionsId and OverrideProtocolRef; (ii) gate Method steps with requiresAutonomyBudget; (iii) write a AutonomyLedgerEntry on every admitted Work; (iv) block on depletion until a ResumeAutonomy SpeechAct passes SoD; (v) surface autonomy fields in UTS rows.

Builds on: A.2 / A.2.1 / A.2.5 / A.15 / A.21; B.3; C.16; E.8; E.10; E.18; F.4; F.6; F.8; F.15; F.17. Coordinates with: A.13 (Agential Role), C.9 (Agency‑CHR), C.24 (Agent‑Tools‑CAL) where applicable; G.4G.5G.8G.9G.10 (method authoring/selection/shipping).

Problem Frame

Autonomy‑claiming performers (RoleAssignments over services/robots/teams operating without continuous human direction) must stay within declared limits (safety, risk, resource, remit) and yield to governance when required. Without a uniform rule, “autonomy” drifts into tacit norms, cannot be benchmarked or audited, and undermines selection (Part G) and publication (Part F).

Problem

  • Opaque autonomy. Patterns assert “autonomous” behavior with no budget or enforcement.
  • Un‑gated execution. Methods can execute beyond authority or risk limits.
  • Ad‑hoc overrides. No standard SpeechAct for pausing/de‑scoping; SoD is unclear.
  • Non‑portable publication. UTS (Unified Term Sheet) rows cannot surface autonomy‑critical data for parity or selection.

Forces

ForceTension
Creativity vs SafetyExploration autonomy vs hard constraints and override duties
Locality vs ComparabilityContext‑local rules vs cross‑context selection (G‑suite)
Simplicity vs AuditabilityLightweight authoring vs ledger‑grade evidence
Autonomy vs SoDHelpful self‑action vs separation‑of‑duties and human‑in‑the‑loop points

Bias-Annotation

Lenses tested: Gov, Arch, Onto/Epist, Prag, Did. Scope: Universal for any Role/Method/Service that claims autonomous operation (unsupervised decision or actuation) and is admitted via AutonomyBudgetDecl + Green‑Gate. It is not aimed at purely assistive “suggestion‑only” tools where each action is confirmed by a human at the point of execution.

  • Gov. Bias toward enforceable oversight (hard gates, SoD, canonical override SpeechActs). Mitigation: exploration autonomy is still allowed, but only inside an explicit budget and time window.
  • Arch. Bias toward gate‑and‑ledger structure (Green‑Gate + Work‑anchored AutonomyLedger). Mitigation: telemetrySpecRef can scope what is emitted when full deltas are unnecessary.
  • Onto/Epist. Bias toward typed, testable constraints (MM‑CHR tokens, explicit admissibility checks). Mitigation: budgets are optional‑field (?) so low‑risk contexts can start minimal and tighten over time.
  • Prag. Bias toward measurable quotas may under‑express “soft” autonomy goals. Mitigation: pair decision_tokens with risk_bands to capture non‑counting limits.
  • Did. Bias toward explicit mechanics increases authoring surface area. Mitigation: provide a default AutonomyBudgetDecl template and minimal harness cases in F.15.

Solution — Rule‑of‑Constraints (RoC) for Autonomy

This RoC applies whenever a Role/Method/Service claims autonomous operation (any phrasing that implies unsupervised decision or actuation).

E.16‑S1 (Autonomy Budget — mandatory). Any autonomy claim MUST publish an AutonomyBudgetDecl as a named, versioned object in the same U.BoundedContext:

AutonomyBudgetDecl {
  id, version
  scope: ClaimScope (G)                              // where this budget applies
  budget: {                                          // all typed via MM‑CHR (C.16)
    action_tokens?     : Unitful quota / rate
    decision_tokens?   : Unitful quota / rate
    risk_bands?        : CHR vector with acceptance bands
    resource_caps?     : set of unitful caps (Γ_work categories)
    time_window?       : Γ_time window & cadence
  }
  AdmissibilityConditionsId : PolicyIdRef                          // Aut-Guard policy naming gates & penalties
  overrideProtocolRef : Episteme                     // SpeechAct & SoD for pause/resume/escalate
  telemetrySpecRef? : Episteme                       // what to emit into AutonomyLedger
  editionPins : { RoleRef?, MethodDescRef?, CHR refs, …  }
}

E.16‑S1.A (Scout / probe / commit partition for bounded specialization). When an autonomy-bearing method uses bounded specialization scouting, the budget declaration MUST keep scout budget, probe budget, and commit checkpoint as distinct control surfaces rather than collapsing them into one undifferentiated burn envelope. A successful probe does not by itself authorize a committed route, wider burn, or scope widening. Leaving probe state requires one explicit checkpoint decision through the declared guard or override path, with budget burn and residual budget recorded in the AutonomyLedger. [E.16](/generated/patterns/E.16) governs this budget partition plus guard and ledger enforcement; it does not replace the dyadic move of [A.15](/generated/patterns/A.15) or the CheckpointReturn plan semantics of [C.24](/generated/patterns/C.24). E.16‑S2 (Guarded enactment — Green‑Gate). A Method step that requires autonomy MUST list requires: [RoleX] and requiresAutonomyBudget: AutonomyBudgetDecl.id. A Work instance is admissible iff at enactment time:

  • the performer’s RoleAssignment is valid and in an enactable RSG state (A.2.5);
  • the budget accounting for the AutonomyBudgetDecl indicates tokens/limits remaining for this budget in the declared Γ_time window (derived from the AutonomyLedger);
  • all guard checks defined by AdmissibilityConditionsId evaluate to pass (e.g., risk ≤ band, resource ≤ cap).

Failing any gate blocks enactment (no “soft warnings” on Core surface).

E.16‑S3 (Autonomy Ledger). All admissible Work MUST record AutonomyLedger entries:

AutonomyLedgerEntry {
  workId, performedBy: RoleAssignmentId
  budgetId, version, time
  deltas: { action_tokensΔ?, decision_tokensΔ?, riskΔ?, resourceΔ? }
  guardVerdicts: { name → pass|fail }
  pathIds: { PathId, PathSliceId }                  // for G‑suite parity/refresh
}

The ledger is evidence: attach to U.Work (A.15.1) and fold under Γ_work and Γ_time for reporting.

E.16‑S4 (Overrides — SpeechActs & SoD). Every budget MUST reference an OverrideProtocolRef that defines canonical SpeechActs:

  • PauseAutonomy(budgetId) — immediate stop of autonomy‑gated steps;
  • ResumeAutonomy(budgetId) — resume after conditions;
  • NarrowAutonomy(budgetId, Δscope) — apply stricter limits;
  • Escalate(budgetId) — handover to a declared SupervisorRole.

SoD: The override caller MUST NOT be the same RoleAssignment that is consuming the budget (enforce in the Context). All overrides are Work (SpeechActs) with ledger entries (zero or negative deltas as per policy).

E.16‑S5 (Depletion behavior). When a budget depletes (no tokens / envelope exceeded / cap breached):

  • Block further autonomy‑gated steps in the same Γ_time window;
  • Emit DepletionNotice (SpeechAct), and either Escalate or Park per policy;
  • Only a ResumeAutonomy SpeechAct from an admissible Role (per SoD) may reopen the gate.

E.16‑S6 (Publication in UTS). UTS rows that describe a Role, Method, Service, or Selector with autonomy MUST include:

  • AutonomyBudgetDeclRef (id & version);
  • Aut-Guard policy-id (PolicyIdRef);
  • OverrideProtocolRef;
  • declared Scope (G) and Γ_time window;
  • edition pins for the referenced Role/Method/CHR.
  • (optional, if a scale preference is declared) ScaleLensPolicyRef and ScaleLensOptIn ∈ {OptedIn, Neutral, OptedOut}.

E.16‑S7 (Scale & selection — optional lens). When autonomy interacts with open‑ended search (C.18 and C.19), budget consumption and guard violations are selection lenses in Part G (G.5/G.9). Applying a Scale‑Lens / Bitter‑Lesson preference is OPTIONAL. Authors MAY declare a ScaleLensPolicy for the autonomy claim; when declared, it MUST state:

  • Trigger criteria — evidence that expected utility‑of‑scale is monotonic/non‑saturating on held‑out tasks, and a threshold at which scaling beats structured heuristics.
  • Budget fit — compute/latency/cost targets within the declared AutonomyBudgetDecl (Γ_time, resource_caps).
  • Safety invariants — guards and SoD remain non‑weakened under scaling; no policy may bypass E.16 gates.
  • Fallback — a degrade‑gracefully plan if scaling fails to clear the trigger criteria within budget. If no ScaleLensPolicy is declared, selection remains neutral with respect to Bitter‑Lesson; RoC does not authorize ignoring scale‑safety guards under any policy.

Archetypal grounding (Tell‑Show‑Show; human‑centric)

Show‑A (U.System — mobile robot). Robot_R7#NavigatorRole:Warehouse_2026 executes Navigate_v3. AutonomyBudgetDecl: action_tokens=10 k steps/day, risk_bands={maxSpeed ≤ 1.2 m/s, minDist ≥ 0.5 m}, resource_caps={battery ≥ 20%}; AdmissibilityConditionsId=Aut‑Guard‑R7‑v1; override via PAUSE, RESUME, ESCALATE SpeechActs by FloorSupervisorRole ⊥ NavigatorRole. Ledger entries decrement action_tokens, track minDist. Depletion at 0 tokens halts autonomous moves and pages supervisor.

Show‑B (U.PromiseContent — autonomous deploy). DeployerRole performs step “Promote to prod” under AutonomyBudgetDecl with decision_tokens=3/day, risk_envelope={error‑budget burn ≤ 2% / day}, guard “all pre‑deploy checks pass”. Overrides only by CABChair#AuthorizerRole ⊥ DeployerRole.

Conformance Checklist (SCR — E.16‑CC)

IDRequirement
E.16‑CC‑1Any autonomy claim MUST reference an AutonomyBudgetDecl in the same U.BoundedContext.
E.16‑CC‑2Method steps that depend on autonomy MUST declare requiresAutonomyBudget: AutonomyBudgetDecl.id (and requires: [RoleX]) and MUST be Green‑Gated by the budget’s guards at enactment.
E.16‑CC‑3A Work admitted under autonomy MUST carry an AutonomyLedgerEntry with deltas and guard verdicts.
E.16‑CC‑4Overrides are SpeechActs with SoD enforced ( between consumer and overrider roles); each override creates a ledger entry.
E.16‑CC‑5Depletion MUST block autonomy‑gated steps until a ResumeAutonomy SpeechAct passes SoD and guard checks.
E.16‑CC‑6UTS rows for autonomy‑bearing Roles/Methods/Services MUST include AutonomyBudgetDeclRef, Aut-Guard policy-id (PolicyIdRef), OverrideProtocolRef, Scope (G), and Γ_time.
E.16‑CC‑7When bounded specialization scouting is in scope, scout budget, probe budget, and commit checkpoint MUST stay explicit, and a successful probe SHALL NOT count as automatic committed rollout.

Consequences

  • Testability. Autonomy is measurable (tokens/envelopes), audit‑ready (ledger), and stoppable (SpeechActs).
  • Comparability. UTS surfaces autonomy metadata for fair selection & parity.
  • Safety. Guards are hard gates; depletion halts further autonomy‑gated Work.

SoTA‑Echoing (post‑2015 practice alignment)

Each item states Adopt / Adapt / Reject, and why. Vendor/tool tokens are kept as informative, not normative.

  1. Corrigibility & safe interruptibility (2016→). Adopt/Adapt. Work on safe interruption and “off‑switch” incentives argues that capable systems should remain stoppable and should not be rewarded for resisting oversight (Orseau & Armstrong, 2016; Hadfield‑Menell et al., 2017). E.16 adapts this into canonical PauseAutonomy / ResumeAutonomy SpeechActs plus SoD and hard gating on depletion.

  2. AI safety as concrete operational hazards (2016→). Adopt. “Concrete Problems in AI Safety” pushes instrumentation and testable safety constraints over informal assurances (Amodei et al., 2016). E.16 mirrors this by turning “autonomy” into a budget + ledger + guards specification that can be benchmarked and audited.

  3. SRE error budgets & “stop the line” operations (2016→). Adopt/Adapt. Error‑budget practice treats reliability as a measurable envelope that gates risky change when depleted (Beyer et al., Site Reliability Engineering, 2016; Höller et al., The Site Reliability Workbook, 2018). E.16 adapts the idea into risk_bands and depletion behavior that blocks autonomy‑gated steps until governed resume.

  4. Risk management frameworks for AI systems (2023→). Adopt/Adapt. Contemporary risk frameworks emphasize governance, continuous measurement, and traceable controls (NIST AI RMF 1.0, 2023; ISO/IEC 23894, 2023). E.16 adapts these into UTS publication + Work‑anchored ledger evidence for parity and audit.

  5. Policy‑as‑code and provenance gating (2019→). Adopt. Modern supply‑chain integrity systems emphasize policy‑checked actions with verifiable provenance (in‑toto, 2019→; SLSA, 2021→). E.16 echoes the same principle for autonomy: no autonomy‑gated enactment without passing declared guards and emitting ledger evidence (without importing any specific tooling).

  6. Scaling laws & the Bitter Lesson (2019→). Adapt/Reject. Empirical scaling work and the Bitter Lesson motivate considering compute‑heavy search when returns are monotonic (Sutton, 2019; Kaplan et al., 2020). E.16 adapts this into an optional ScaleLensPolicy (E.16‑S7) constrained by the same budgets and guards, and rejects any interpretation that lets “scale” bypass safety gates.

  7. Budgeted specialist acquisition and checkpointed exploitation (2024→). Adopt/Adapt. Recent agentic tool-use, self-play, and open-ended search lines reinforce that the competition variable is time or budget to threshold plus fast exploitation after a viable route is found. E.16 adapts this into distinct scout/probe/commit control surfaces and rejects any reading where early probe success authorizes rollout without an explicit checkpoint.

Common Anti-Patterns and How to Avoid Them

Anti-patternSymptomWhy it failsRepair
Autonomy-by-label“Autonomous” is claimed but there is no AutonomyBudgetDecl or ledgerAutonomy becomes opaque; cannot be audited or comparedRequire E.16‑S1/S3; reject publication without AutonomyBudgetDeclRef + version
Soft gatesBudget/guards only warn; enactment proceeds anywayViolates Safety and SoD; makes budgets non-enforceableMake Green‑Gate blocking on Core surface (E.16‑S2)
Self‑overrideSame RoleAssignment consumes the budget and calls Resume/NarrowConflict of interest; SoD collapseEnforce between consumer and overrider (E.16‑S4)
Budget bypass via “scale”Scaling preference relaxes guards or ignores capsUndermines declared limits; breaks comparabilityIn ScaleLensPolicy, guards/SoD must remain non‑weakened (E.16‑S7)
Untyped quotasTokens/caps are recorded without units, or units are mixedLedger becomes non-comparable; audits become meaninglessType budgets and deltas via MM‑CHR (C.16); keep unitful rates/quotas
Ledger-as-loggingLogs exist but are not Work‑anchored (no workId/budgetId/version/pins)Evidence is non-portable; cannot support parity/refreshRequire AutonomyLedgerEntry attached to U.Work with ids, versions, and edition pins
  • E.8 — follows the pattern template (Context → Problem → Forces → Solution → Grounding → CC → Consequences).
  • E.10 — uses LEX‑BUNDLE: Scope via ClaimScope (G), time via Γ_time, no “validity/process/actor/agent‑as‑noun” language; new lexical rule L‑AUTO added in edits below.
  • Mint/reuse authority (policy-ids). Mint/reuse authority is expressed via F.8:8.1 (PolicyIdRef: PolicySpecRef + MintDecisionRef?) and explicit GateCrossing checks (E.18) evaluated by the active GateProfile/GateFit (A.21); no tier ladder is required.
  • Part F — integrates with F.4 Role Description (RCS includes AgencyLevel; RSG gates), F.6 Role Assignment & Enactment (Green‑Gate), F.15 SCR/RSCR (harness includes depletion/override tests), F.17 UTS (columns, incl. optional ScaleLens fields).
  • Part GG.4/G.5: method authors must declare budgets & guards; G.9 parity includes autonomy consumption & violations; G.10 shipping requires UTS autonomy fields.

Mini conformance checklist (cross‑E–F; author’s quick use)

  1. Declare AutonomyBudgetDecl (scope, budgets, AdmissibilityConditionsId, overrides).
  2. Gate steps with requiresAutonomyBudget.
  3. Emit an AutonomyLedgerEntry for each admitted Work.
  4. Enforce SoD on override SpeechActs; block on depletion.
  5. Publish UTS autonomy fields for any autonomy‑bearing Role/Method/Service.

(These five are sufficient for a working test harness in Part F.)

E.16:End

U.MultiViewDescribing — Viewpoints, Views & Correspondences

Tech‑name: U.MultiViewDescribing Plain‑name: multi‑view describing (viewpoints, views, correspondence for families of Description epistemes and specification-use Description epistemes)

Status & placement. Stable; Part E (Describing & Publication). Normative architectural pattern. Builds on: C.2.1 U.EpistemeSlotGraph (EntityOfConcern, Viewpoint, and View slots), A.6.2 U.EffectFreeEpistemicMorphing, A.6.3 U.EpistemicViewing, A.6.4 U.EpistemicRetargeting, A.7 (Strict Distinction; EntityOfConcern and Description-episteme boundary and specification-use gate versus publication-form and carrier lanes), E.10.D1 (Context), E.10.D2 (EntityOfConcern and Description-episteme boundary and specification use/refinement discipline). Used by: E.17 (MVPK — publication as a specialisation of multi‑view describing for morphisms), E.17.1 U.ViewpointBundleLibrary, E.17.2 TEVB, E.18:5.12 (E.TGA engineering viewpoint families), domain‑specific description schemes (architecture, safety cases, governance, research).

Guard (lexical).

Family indexing rule. U.MultiViewDescribing indexes families by EntityOfConcernClass, EntityOfConcernRef, bounded context, and viewpoint. EoIClass* and DescribedEntity* wording does not create a second view-family ontology; use the EntityOfConcern family.

C.2.1 lane binding. U.MultiViewDescribing does not mint a generic semio kind. When the family describes or views knowledge claims, the claim-bearing value is U.Episteme; when that episteme is made available as a published episteme, use U.EpistemePublication or governed U.Episteme publication. Publication forms, episteme-lane U.View values, MVPK faces, source-finding cues, and SCR and RSCR carriers remain separate lanes. If a family crosses into a later FPF pattern or a non-pattern authoritySourceRef destination, name governingPatternRef or authoritySourceRef rather than a container label.

  • U.Viewpoint is the ValueKind of ViewpointSlot and denotes viewpoint specifications, not publication-face kind values or carriers.
  • U.View is an alias of U.EpistemeView, i.e. an episteme-lane view, not a document or file. Views are epistemes; publication face/form and interop publication form are publication-face/form discipline publication-face kind values; concrete renderings and carriers remain A.7, SCR, and RSCR concerns.
  • ViewFamilyId is a lexical tag for families of viewpoints (e.g. TEVB), never for view kinds, MVPK U.View values, U.ViewFamily(-) bundles, or publication-face kind values. MVPK face kinds remain {PlainView, TechCard, InteropCard, AssuranceLane}.

Problem frame (informative)

Complex systems (social‑technical, cyber‑physical, organisational) are routinely described from many perspectives:

  • functional vs structural vs deployment vs behavioural views,
  • safety vs performance vs cost vs governance views,
  • formal specs vs operational runbooks vs regulatory dossiers.

Post‑2015 MBSE and architecture practice emphasise viewpoints and views (ISO 42010, SysML v2), and contemporary model‑based toolchains treat views as queries or projections over shared models rather than independent documents.

In FPF terms:

  • the things we talk about — systems, methods, services, epistemes — are U.Entity or U.Holon values in EntityOfConcernSlot;
  • descriptions and specifications of those things are U.Episteme instances (…Description or …Spec) with a DescriptionContext = ⟨EntityOfConcernRef, BoundedContextRef, ViewpointRef⟩;
  • episteme-lane views are U.View (U.EpistemeView) that slice ClaimGraphs under specific viewpoints and representation schemes.

What we lack without this pattern is a universal way to organise families of Description epistemes and specification-use Description epistemes under multiple viewpoints — for any entity of concern, not only for architecture, and without collapsing “view” into “document” or “diagram”.

Problem (informative, but sharp)

Without U.MultiViewDescribing:

  1. Viewpoints, views, publication face/form and interop publication form kinds, and carrier renderings collapse. In practice, “architecture view”, “diagram”, “spec”, and “published deck” are used interchangeably. This:

    • confuses episteme (U.View) with publication face/form or interop publication form kind or with a concrete carrier rendering,
    • hides which concerns and stakeholders a description is written for,
    • makes it impossible to check whether a given description family is “complete enough” for a chosen viewpoint library.
  2. Descriptions float without viewpoints. EntityOfConcern and Description-episteme boundary and specification use/refinement discipline distinguishes the EntityOfConcern from Description epistemes, including Description epistemes admitted for specification use, but does not, on its own, forbid “view‑from‑nowhere” descriptions (no declared viewpoint). That contradicts the pragmatic stance encoded in C.2.1: no episteme without concerns.

  3. Each domain reinvents multi‑view semantics. Architecture, safety cases, governance frameworks, and research engineering processes all use local notions of “view”, “viewpoint”, and “consistency between views”. Without a shared pattern:

    • E.TGA, MVPK, and discipline packs introduce their own “view” rules and invariants, duplicating work;
    • cross‑domain reasoning (e.g. mapping a safety view to an architecture view) becomes ad‑hoc;
    • we cannot give a single formal story for consistency, correspondence, and EpistemicViewing across families of descriptions.
  4. No place to attach correspondence. ISO 42010‑style correspondences and modern BX/consistency relations have nowhere canonical to live. We need a CorrespondenceModel over families of Description epistemes, including Description epistemes admitted for specification use that integrates with U.EpistemicViewing, U.EpistemicRetargeting, and C.2.1’s slot graph.

Forces (informative)

ForceTension
Universality vs domain idiomsOne pattern should handle engineering, safety, governance, research, etc. ↔ domain communities expect their own jargon (architecture description, safety case, dossier…).
Viewpoint locality vs reuseViewpoints must be local to families of descriptions (EntityOfConcernClass, Context) ↔ we want reusable viewpoint bundles (libraries) across projects and domains.
EntityOfConcern and Description-episteme boundary and specification-use strictness vs pragmaticsThe EntityOfConcern for this describing use is not the produced Description episteme or its specification use, although an episteme may itself be the current EntityOfConcern; Description is an episteme use and Specification is a checkability/formality/harness-gated use or refinement of a Description episteme with DescriptionContext ↔ engineers think in “views over a system”, not in pure slot-graph algebra.
Slot discipline vs approachabilityC.2.1 and A.6.5 give a clean SlotKind, ValueKind, and RefKind discipline ↔ working users need to talk about “functional view” and “safety view” without carrying all slot jargon in didactic explanatory text.
Epistemic versus publication-form and carrier lanesViews (epistemes) must be clearly separated from publication face/form and interop publication form kinds and carriers ↔ working practice often conflates “viewpoint”, “view”, and “document”.
Consistency vs incremental changeWe want tight correspondence between views ↔ views evolve asynchronously; partial inconsistency must be representable and repairable (BX‑style).

Solution — U.MultiViewDescribing as the universal multi‑view scaffold (normative core)

Overview

U.MultiViewDescribing organises families of Description epistemes and specification-use Description epistemes for a shared entity of concern into a multi‑view structure with:

  • explicit viewpoints (U.Viewpoint) as specifications of stakeholder families, concerns, allowed Description kinds and specification-use gates, and conformance rules;
  • episteme-lane views (U.View = U.EpistemeView) as view-epistemes over those Description epistemes and specification-use cases;
  • a CorrespondenceModel capturing correspondences between Description epistemes, including Description epistemes admitted for specification use and their views across viewpoints.

The pattern's EntityOfConcern class is explicit:

EntityOfConcern class: EntityOfConcernClass ⊑ U.Entity — the class of entities of concern (typical species: U.Holon for engineering holons, U.Morphism for morphism publication, U.Episteme for meta-describing epistemes).

All members of a U.MultiViewDescribing family for that EntityOfConcern class share:

  • EntityOfConcernSlot value in that EntityOfConcernClass, and
  • a BoundedContextRef (E.10.D1) forming a DescriptionScope together with the entity.

Informally:

  • Fix an entity T ∈ EntityOfConcernClass and a bounded context C.
  • The multi‑view family for <T,C> consists of a set of …Description / …Spec epistemes, each under a declared viewpoint, plus their U.View views, together with a correspondence model relating them.

Core constructs

EntityOfConcernClass and DescriptionScope
  1. EntityOfConcernClass. A U.MultiViewDescribing instance declares an EntityOfConcernClass ⊑ U.Entity that acts as a species constraint on the ValueKind of EntityOfConcernSlot.

    • In engineering species (TEVB) this is typically U.Holon restricted to U.System or U.Episteme.
    • In MVPK, EntityOfConcernClass = U.Morphism.
  2. DescriptionScope (informal). For a fixed T ∈ EntityOfConcernClass and C : U.BoundedContext, the DescriptionScope Scope(T,C) is the notional scope under which:

    • all Description epistemes and specification-use Description epistemes have EntityOfConcernRef = T and BoundedContextRef = C in their DescriptionContext;
    • all views (U.View) attached to this family preserve that EntityOfConcernRef and BoundedContextRef (for Description-derived or specification-use-derived views).

    Formal USM treatment of U.DescriptionScope is fixed in E.10/publication-face/form discipline; here we only rely on the intuition “we are describing this thing, in this context”.

U.Viewpoint (viewpoint specification)

U.Viewpoint is already introduced in C.2.1 as the ValueKind of ViewpointSlot; E.17.0 fixes its internal structure for describing families.

Definition (normative). A U.Viewpoint is a viewpoint specification:

  • EntityOfConcernClassSpec ⊑ U.Entity — the class of entities this viewpoint is defined for (must be compatible with the family’s EntityOfConcernClass);

  • StakeholderFamilies : FinSet(U.RoleEnactor) — stakeholder / RoleEnactor families the viewpoint speaks for (e.g. “safety engineers”, “operations teams”).

  • Concerns : FinSet(U.Concern) — concern set (qualities, risks, requirements) that matter under this viewpoint.

  • AllowedEpistemeKinds : FinSet(U.EpistemeKindId) — which Description-episteme kinds and Description-episteme kinds admitted for specification use are admissible as primary descriptions and as derived views under this viewpoint (e.g. system-behaviour description, test harness spec, safety case, CG-Spec slice).

  • ConformanceRules — a structured bundle of rules/tests describing when a Description episteme, Description episteme admitted for specification use, or view conforms to the viewpoint, including:

    • minimal content requirements (e.g. “must cover all safety‑critical functions”),
    • admissible U.EpistemicViewing pipelines to derive views from base descriptions,
    • allowed degrees of incompleteness and evidence requirements (link to GateProfiles/OperationalGate(profile) checks and Part F harnesses).

Slot alignment.

  • ViewpointSlot has ValueKind U.Viewpoint, RefKind U.ViewpointRef; episteme fields are named viewpointRef : U.ViewpointRef?.
  • For Description epistemes, including Description epistemes admitted for specification use in a U.MultiViewDescribing family, viewpointRef is mandatory as part of DescriptionContext.
U.View (episteme-lane views)

U.View is an alias for U.EpistemeView, a species of U.Episteme whose kind includes:

  • ClaimGraphSlot (often a sliced or projected ClaimGraph),
  • EntityOfConcernSlot,
  • ViewpointSlot,
  • ReferenceSchemeSlot (and usually a RepresentationSchemeSlot in C.2.1+).

Normatively:

  • A U.View in U.MultiViewDescribing is obtained via a U.EpistemicViewing morphism from some base Description episteme or Description episteme admitted for specification use in the family (see 4.3). It shares the same entityOfConcernRef and usually the same BoundedContextRef.
  • ViewSlot is reserved for references to such views in meta‑structures (e.g. correspondence models, MVPK view families), never for carriers.
U.CorrespondenceModel (view–view correspondence)

U.CorrespondenceModel is an episteme (typically a U.EpistemeCard) whose ClaimGraph expresses correspondence relations between Description epistemes, including Description epistemes admitted for specification use and/or views within a DescriptionScope:

  • cross‑viewpoint correspondences (e.g. “this safety requirement is realised by this design element”),
  • structural/behavioural consistency conditions (BX‑style consistency relations),
  • change‑impact links (which views must be revisited when some view changes).

CorrespondenceModel is used, but not defined, by A.6.3: species of U.CorrespondenceEpistemicViewing reference it when computing views that depend on multiple epistemes or representation regimes.

Multi‑view families and their rules/invariants (MVD‑0…MVD‑7) (normative)

We now fix the rules and invariants that any U.MultiViewDescribing[EntityOfConcernClass] instance must satisfy.

MVD‑0 - Family objects

For a fixed EntityOfConcernClass and bounded context C, a multi‑view family for an entity T ∈ EntityOfConcernClass consists of:

  • a (finite) set DescSpec(T,C) of Description epistemes, including Description epistemes admitted for specification use such that for each E ∈ DescSpec(T,C):

    • E : U.Episteme of some kind in AllowedEpistemeKinds of its viewpoint,
    • subjectRef(E) decodes to DescriptionContext(E) = ⟨EntityOfConcernRef = T, BoundedContextRef = C, ViewpointRef(E)⟩,
    • viewpointRef(E) lies in the family’s viewpoint set Σ ⊆ FinSet(U.Viewpoint);
  • a set Views(T,C) ⊆ U.View of view‑epistemes over those Description epistemes, including Description epistemes admitted for specification use, obtained by declared U.EpistemicViewing species (see MVD‑3);

  • zero or more U.CorrespondenceModel epistemes over {DescSpec(T,C), Views(T,C)}.

Families are scoped: the same entity in a different U.BoundedContext belongs to a different family.

MVD-1 - Viewpoint locality and totality for Description-episteme and specification-use cases

For any multi‑view family:

  1. Viewpoint-totality for Description-episteme and specification-use cases. Each Description episteme or Description episteme admitted for specification use in DescSpec(T,C) MUST have a viewpointRef either:

    • explicitly populated, or
    • deterministically derived from a U.ViewpointBundle the family declares (see E.17.1).

    There are no “viewpoint-free” Description epistemes or Description epistemes admitted for specification use inside a U.MultiViewDescribing family.

  2. Viewpoint locality. ViewpointRef values for DescSpec(T,C) must belong to a finite viewpoint set Σ declared for the family (locally or via a bundle). Cross‑family reuse happens via bundles and Bridges, not by silently sharing viewpoints across unrelated scopes.

  3. DescriptionContext alignment. DescriptionContext(E) for any Description episteme or Description episteme admitted for specification use in the family must use the same EntityOfConcernRef and BoundedContextRef as the family; any change of EntityOfConcern or context is outside this family and must be expressed via U.EpistemicRetargeting and/or Context Bridges.

MVD‑2 - Views are EpistemicViewing results

For any V ∈ Views(T,C):

  1. There exists a base episteme E ∈ DescSpec(T,C) and a morphism v : E → V such that:

    • v is a species of U.EpistemicViewing, i.e. an effect‑free, entityOfConcern‑preserving episteme morphism;

    • entityOfConcernRef(V) = entityOfConcernRef(E) = T,

    • BoundedContextRef(V) = BoundedContextRef(E) = C,

    • viewpointRef(V) is either:

      • the same as viewpointRef(E) (internal normalisation), or
      • a viewpoint in the same family Σ, with the change recorded in the family’s CorrespondenceModel (see MVD‑4).
  2. No view may be introduced “out of thin air”: every U.View in the family is traceable to at least one Description episteme or Description episteme admitted for specification use (or a finite diagram thereof) via a documented EpistemicViewing pipeline.

  3. Views do not introduce new EntityOfConcern commitments about T beyond what is licensed by EFEM & EpistemicViewing invariants (no new atomic claims about the same EntityOfConcern). Upgrading the EntityOfConcern-side commitment requires a new Description episteme or Description episteme admitted for specification use under A.7 and E.10.D2, not a view.

MVD‑3 - Applicability profiles for viewings

Any EpistemicViewing species used inside U.MultiViewDescribing MUST:

  • declare an Applicability profile as per EV‑6: permitted EntityOfConcernClass, grounding, viewpoint ranges, and representation schemes;

  • for Description epistemes, including Description epistemes admitted for specification use in a family:

    • preserve EntityOfConcernRef and BoundedContextRef of DescriptionContext,
    • either preserve ViewpointRef or change it within the family’s viewpoint bundle, with constraints recorded in CorrespondenceModel,
    • never widen ClaimScope beyond EFEM/EpistemicViewing allowances.

Any change of EntityOfConcern (even “small”, e.g. subsystem→system) must be expressed via U.EpistemicRetargeting and is not a MultiViewDescribing view refinement.

MVD‑4 - CorrespondenceModel for cross‑view correspondences

When views or Description epistemes, including Description epistemes admitted for specification use under different viewpoints are meant to be kept in correspondence (in ISO 42010 or BX sense), the family SHALL:

  1. Provide a U.CorrespondenceModel episteme whose ClaimGraph captures correspondences and consistency relations over {DescSpec(T,C), Views(T,C)}.

  2. Ensure that any U.CorrespondenceEpistemicViewing that depends on multiple epistemes or representation schemes:

    • references that CorrespondenceModel, and
    • publishes witnesses (proof objects, trace links) that make diagrams commute up to declared isomorphism (oplax naturality allowed).
  3. Treat temporary inconsistency explicitly: there may be states where some correspondences are violated; this is represented as facts in the correspondence ClaimGraph, not as hidden weakening of viewing invariants.

MVD‑5 - Separation from publication (MVPK)

U.MultiViewDescribing is purely epistemic:

  • Description epistemes, Description epistemes admitted for specification use, and views live entirely in Ep-space (U.Episteme);

  • it does not define publication face/form/interop publication form kind, carriers, or rendering;

  • MVPK (E.17) sits on top:

    • taking morphisms and/or Description epistemes, including Description epistemes admitted for specification use as input,
    • using U.EpistemicViewing plus publication‑specific viewpoints,
    • emitting U.View instances declared against publication face/form/interop publication form kind via publication-face/form discipline.

MultiViewDescribing therefore does not re‑define EntityOfConcern-to-Description or specification-use refinement (Describe_EoC_DescEp plus specificationUseRef when a neighbouring gate grants specification force) and does not introduce any U.Work on carriers; A.7 carries the describing boundary, A.6.2 and neighboring pattern governing the claiming gates carry specification-use refinement, and E.17 carries publication.

Explanation-facing renderings over the same source U.Episteme claims may later be classified by ExplanationFaithfulnessProfile on top of existing publication faces, but that profile does not create a second viewpoint calculus here. U.MultiViewDescribing continues to govern the epistemic distinction between viewpoints, views, and correspondences.

MVD‑6 - EntityOfConcern and Description-episteme boundary and specification-use alignment

For any U.MultiViewDescribing instance:

  1. Every …Description and …Spec episteme in the family must satisfy E.10.D2:

    • be an episteme with DescriptionContext = ⟨EntityOfConcernRef, BoundedContextRef, ViewpointRef⟩,
    • be linked to a unique EntityOfConcern via isDescriptionOf; when specification force is live, carry a specificationUseRef or exact granting-pattern/gate reference rather than a peer isSpecOf relation.
  2. Viewings and correspondence operations must not:

    • collapse the EntityOfConcern for this describing use into the produced Description episteme or Description episteme admitted for specification use,
    • confuse Description epistemes or Description epistemes admitted for specification use with publication face/form/interop publication form kind or carrier rendering,
    • reinterpret EntityOfConcern without going through A.6.4 retargeting.

MVD‑7 - Slot discipline

All constructs in this pattern SHALL respect U.RelationSlotDiscipline:

  • SlotKinds (EntityOfConcernSlot, ViewpointSlot, ViewSlot, GroundingHolonSlot, ClaimGraphSlot, ReferenceSchemeSlot) and their ValueKinds/RefKinds follow A.6.5 and C.2.1.
  • *Slot suffix is reserved for SlotKinds; *Ref for RefKinds/fields, never for Kinds or objects.
  • MultiViewDescribing patterns must not invent parallel slot disciplines for relation positions; they reuse SlotKind as the notion of position.

Archetypal grounding (informative)

  1. Engineering holon (TEVB).

    • EntityOfConcernClass = U.Holon (restricted to U.System/U.Episteme).
    • TEVB (E.17.2) supplies a viewpoint bundle with canonical engineering viewpoints: Functional, Structural, Role‑Enactor, Module‑Interface, etc.
    • For a particular system S in context C, Description epistemes, including Description epistemes admitted for specification use include functional descriptions, structural designs, role‑enactment models, and interface specs.
    • Views derived via EpistemicViewing include sliced safety views, performance‑focused views, and minimal runbooks.
    • CorrespondenceModel records how functional elements are realised structurally, where hazards map to components, etc.
  2. Morphism publication (MVPK).

    • EntityOfConcernClass = U.Morphism.
    • Description epistemes, including Description epistemes admitted for specification use capture the semantic characterisation of morphisms (pre‑/post‑conditions, CG‑Specs, CHR pins).
    • Viewpoints are publication‑oriented (PlainView, TechCard, InteropCard, AssuranceLane); views are MVPK faces over those morphisms.
    • CorrespondenceModel states how the same morphism appears as a simple narrative, a typed card with units, an interoperability card, and an assurance lane with evidence bindings — all without new claims.
  3. Safety case vs architecture vs operations.

    • EntityOfConcernClass = U.Holon.
    • Viewpoints: SafetyCase, Architecture, Operations.
    • Families tie together safety requirements, architectural structures, and operational procedures for the same plant P in context C.
    • Views: a safety‑focused slice of the architecture description, an operational runbook annotated with safety invariants, etc.
    • CorrespondenceModel expresses coverage and consistency between these views, enabling BX‑style repair when one side changes.

Conformance checklist (author’s quick use) (normative)

When defining a new U.MultiViewDescribing species or using it in a discipline pack:

  1. Declare the EntityOfConcernClass. Explicitly state EntityOfConcernClass ⊑ U.Entity and ensure all families restrict EntityOfConcernSlot accordingly.

  2. Define the viewpoint set Σ. List U.Viewpoint instances (possibly via a U.ViewpointBundle) with stakeholders, concerns, allowed EpistemeKinds, and conformance rules.

  3. Require DescriptionContext for Description-episteme and specification-use cases. Ensure every …Description/…Spec episteme in the family has DescriptionContext = ⟨EntityOfConcernRef, BoundedContextRef, ViewpointRef⟩ and that ViewpointRef ∈ Σ.

  4. Specify admissible EpistemicViewing species. List the U.EpistemicViewing profiles used to derive views; declare their Applicability profiles and assert they are entityOfConcern‑preserving (EV‑6).

  5. Attach CorrespondenceModel where needed. Whenever cross‑view consistency matters, introduce a U.CorrespondenceModel episteme and reference it from any U.CorrespondenceEpistemicViewing.

  6. Separate describing from publication. Check that pattern text does not treat EntityOfConcern-to-Description or specification-use refinement as “publication”, and that any talk of publication face/form/interop publication form kind or carriers is clearly delegated to MVPK/publication-face/form discipline.

  7. Respect SlotKind/ValueKind/RefKind discipline. Use *Slot only for SlotKinds, *Ref only for RefKinds/fields; avoid Subject/Object roots in episteme types; use EntityOfConcernSlot and viewpointRef instead.

Consequences (informative)

  • Unified multi‑view story across domains. Engineering descriptions, safety cases, governance dossiers, research epistemes/publications — all become instances of the same multi‑view pattern, enabling coherent tooling and education.

  • Explicit, testable viewpoints. Viewpoints move from vague labels (“architecture view”) to first‑class U.Viewpoint values with stakeholder families, concerns, allowed Description kinds and specification-use gates, and conformance rules. This allows OperationalGate(profile) checks and better review practices.

  • Views as disciplined projections, not new documents. U.View is an episteme generated by viewings, not a free‑floating PowerPoint. This constrains what tools are allowed to do when “generating views”, and prevents silent strengthening of commitments.

  • Correspondence as a first‑class episteme. Consistency and traceability between views are expressed via ClaimGraphs in U.CorrespondenceModel, not as scattered hyperlinks or spreadsheet columns.

  • Clean separation of describing vs publishing. U.MultiViewDescribing ends the long‑standing conflation between describing (EntityOfConcern-to-Description plus specification-use) and publication (Description episteme or Description episteme admitted for specification use -> publication face/form/interop publication form kind plus carrier rendering). MVPK becomes a clean specialisation on top, not a second EntityOfConcern and Description-episteme boundary and specification use/refinement discipline.

  • Slot-specific interoperability. C.2.1/A.6.5 slot discipline applies uniformly; new domains can introduce viewpoint bundles and multi‑view families without inventing new ontologies for view positions or relation positions.

Rationale & SoTA‑echoing (informative)

  • ISO 42010 and viewpoint libraries. ISO 42010 distinguished viewpoints (stakeholders + concerns + conventions) from views (descriptions under those viewpoints) and introduced viewpoint libraries. U.MultiViewDescribing generalises this beyond “architecture descriptions” to any Description episteme or specification-use Description episteme, with EntityOfConcernClass parameter and explicit viewpoint bundles used by TEVB and MVPK.

  • MBSE & SysML v2 views‑as‑queries. Modern MBSE treats views as queries over shared models with controlled rendering. That aligns with U.EpistemicViewing as a pure, entityOfConcern‑preserving morphism, and with U.View as an episteme view derived from Description epistemes or Description epistemes admitted for specification use under a viewpoint.

  • BX / model synchronisation. Bidirectional transformations literature treats consistency relations and repair as first‑class. U.CorrespondenceModel and U.CorrespondenceEpistemicViewing provide FPF-native correspondence objects for such relations, ensuring that consistency rules live in ClaimGraphs and respect episteme morphism invariants, rather than being buried in tool code.

  • Optics and displayed categories. With C.2.1 and A.6.3, epistemes form a category fibred over EntityOfConcern values; viewings act like optics over the episteme slot graph. U.MultiViewDescribing is the displayed‑category‑like organisation of families indexed by EntityOfConcernSlot and ViewpointSlot, making later categorical reasoning (e.g. structured cospans for view composition) straightforward.

  • Hybrid symbolic/latent representations. By treating U.RepresentationScheme and U.RepresentationOperation as episteme components, families can mix symbolic specs, diagrams, code, and latent representations (e.g. LLM‑based summaries) while staying within the same multi‑view discipline and EpistemicViewing invariants.

Relations (informative summary)

  • Builds on C.2.1 U.EpistemeSlotGraph. Uses EntityOfConcernSlot, ViewpointSlot, ViewSlot, ClaimGraphSlot, ReferenceSchemeSlot as the structural backbone for descriptions, views, and correspondence.

  • Builds on A.6.2A.6.4. Families rely on U.EffectFreeEpistemicMorphing for view‑producing morphisms, U.EpistemicViewing for entityOfConcern‑preserving views, and U.EpistemicRetargeting for moves that change the EntityOfConcern (outside a given family).

  • Constrains E.17 (MVPK). MVPK is a publication‑specialised MultiViewDescribing for morphisms: its viewpoints are publication viewpoints; its ViewFamily is a special case of Views(T,C) with T a morphism; its rules/invariants must respect MVD‑0…MVD‑7.

  • Constrains E.17.1 / E.17.2. U.ViewpointBundleLibrary and TEVB provide concrete viewpoint bundles populating Σ for particular EntityOfConcernClass (e.g. engineering holons), but they must treat viewpoints as U.Viewpoint values in ViewpointSlot, not as ad‑hoc tags.

  • Coordinates with E.10.D2 (EntityOfConcern and Description-episteme boundary and specification use) and E.10 LEX‑BUNDLE. Ensures every Description episteme or Description episteme admitted for specification use in a family has a DescriptionContext, keeps “Describe and specification-use” distinct from “Publish”, and respects lexical guards around View, Viewpoint, publication-face kind, ViewFamilyId, *Slot, *Ref.

  • Coordinates with B.5. / F‑cluster.* Viewpoints’ stakeholder families and concerns link naturally with RoleEnactment (B.5.*) and Part F role descriptions, assignments, harnesses — without overloading U.Role as a slot value in EntityOfConcern and Description-episteme boundary and specification use or episteme slot graphs.

E.17.0:End

U.ViewpointBundleLibrary - Reusable Viewpoint Bundles

Type: Architectural (A) Status: Stable Normativity: Normative unless marked informative

Plain-name. Viewpoint bundle library.

Builds on. A.6.2-A.6.4 (episteme morphism classes), A.6.5 U.RelationSlotDiscipline, A.7, E.7, E.10, E.10.D1, E.10.D2, E.17.0 U.MultiViewDescribing.

Used by. E.17.2 (TEVB engineering viewpoint bundles), E.18:5.12, and domain-specific viewpoint families for architecture, governance, safety, research, or assurance.

Problem frame

Selected-family discipline. Viewpoint bundles declare EntityOfConcernClassSpec constraints for the selected entities their viewpoints can describe. Bundle labels, aliases, annexes, files, and publication faces never select the entity by themselves.

U.MultiViewDescribing lets a description family state that one entity of concern is rendered through several viewpoints with declared correspondences. In practice many such viewpoint families recur across projects and schools: engineering teams reuse functional / procedural / structural / interface viewpoints; governance teams reuse risk / control / compliance / operations viewpoints; research teams reuse theory / experiment / inference / limitation viewpoints.

FPF therefore needs one explicit governing pattern for reusable viewpoint families so that authors can import them, name them stably, review them once, and keep viewpoint-family identity separate from document labels and publication faces/forms.

Problem

Without a viewpoint-bundle library pattern:

  1. Each domain invents local viewpoint families. Similar families reappear under slightly different labels, but no stable catalogue U.Episteme records whether the underlying viewpoints are actually the same.
  2. Viewpoint identity drifts. A family called functional, capability, or operational may differ only lexically, or may differ semantically, but there is no disciplined place to tell which is which.
  3. U.MultiViewDescribing cannot reuse a family cleanly. Every instance must restate its finite viewpoint family locally instead of importing an existing bundle.
  4. ISO 42010-style viewpoint libraries remain external. FPF lacks a native place where reusable viewpoint libraries can be expressed as first-class, reviewable objects.
  5. Reader-facing labels leak into semantics. Authors reuse the same name for viewpoints, views, publication faces, or folders, and the boundary between EntityOfConcern and Description episteme becomes unclear.

Forces

ForceTension
Reuse vs local fitAuthors want reusable viewpoint families, but a local project may still need a subset or a context-specific extension.
Stable identity vs evolutionBundles must stay stable enough for long-term reuse while still admitting editioned change.
EntityOfConcern clarity vs label convenienceViewpoint bundles are catalogue descriptions for viewpoint families, yet teams often prefer one reader-facing label across U.Viewpoint, U.View, publication-face, and folder entities.
Engineering vs publication disciplineEngineering viewpoints and publication viewpoints both matter, but they must not collapse into one id namespace.
Rich libraries vs cognitive economyA library should be rich enough for real reuse without becoming so large that authors cannot choose from it coherently.

Solution - U.ViewpointBundleLibrary

E.17.1 introduces U.ViewpointBundleLibrary as the reusable catalogue U.Episteme for reusable viewpoint families. The library is an episteme-record species: it packages named bundles of U.Viewpoint values and related metadata, but it does not define new kernel episteme kinds, new publication forms, or new publication carriers. A published library is a U.EpistemePublication, publication unit, publication form, face, or carrier only through the usual E.17 publication lane.

Core role

A conforming viewpoint-bundle library makes three things explicit:

  • which family is being named, via ViewFamilyId;
  • which U.Viewpoint values belong to that family;
  • under what entity of concern class and edition discipline the family is valid.

This lets U.MultiViewDescribing import a finite viewpoint family from a stable catalogue U.Episteme instead of restating it ad hoc in every local description family.

U.ViewpointBundleLibrary (catalogue episteme)

A U.ViewpointBundleLibrary is a catalogue U.Episteme of viewpoint bundles with at least:

  • libraryId : LibraryId
  • editionId : EditionId
  • bundles : FinSet(U.ViewpointBundle)
  • optional governance metadata such as responsibility role assignment, change-control note, or scope tags

Normative constraints:

  1. Within one library edition, each ViewFamilyId SHALL be unique.
  2. Libraries SHALL NOT define new kernel episteme kinds or publication-face/form kinds.
  3. Libraries MAY be specialized as core FPF libraries or organization-local extensions that preserve the same bundle discipline.

U.ViewpointBundle and ViewFamilyId

A U.ViewpointBundle is a finite, non-empty family of compatible U.Viewpoint values packaged for reuse.

Minimal structure:

  • viewFamilyId : ViewFamilyId
  • EntityOfConcernClassSpec <: U.Entity
  • viewpoints : FinSet(U.Viewpoint)
  • optional ArchetypalCards : FinSet(U.ArchetypalGroundingRef)
  • optional AlignmentNotes for ISO 42010 or domain-standard correspondences
  • optional typed annex references for lexical, bridge, routing, example, or SoTA companion material

ViewFamilyId names the bundle. It does not name a U.View, a publication face, or a file-system carrier.

Import discipline into U.MultiViewDescribing

When a U.MultiViewDescribing[EntityOfConcernClass] family declares a ViewFamilyId:

  • its finite viewpoint family Sigma SHALL be a subset of the referenced bundle's viewpoints;
  • every Description episteme or specification-use case in the family SHALL use viewpointRef values drawn from that imported family;
  • every associated U.View SHALL preserve viewpoint attribution rather than silently retyping or relabeling the imported viewpoints.

If more than one bundle is used, the family shall make the partition explicit rather than relying on unnamed mixture.

Guard and naming discipline

  • A viewpoint bundle is a family of viewpoints, not a bundle of views or documents.
  • ViewFamilyId is a lexical family id, not a publication-face/form kind.
  • Engineering viewpoint ids and publication viewpoint ids may coexist, but they SHALL remain disambiguated.
  • Bundle semantics come from the owned U.Viewpoint definitions, not from the spelling pattern of the family id.

Archetypal Grounding

Tell. A viewpoint bundle library lets FPF say "use this already-defined viewpoint family" without confusing that family with the concrete views or publication faces that later realize it.

Show (System). A TEVB engineering bundle can define a reusable family such as VP.Functional, VP.Procedural, VP.RoleEnactor, and VP.ModuleInterface for holon descriptions. Later U.MultiViewDescribing families import that bundle rather than redefining the same engineering viewpoints each time.

Show (Episteme). A governance-oriented bundle can package VP.Risk, VP.Control, VP.Compliance, and VP.Operations as one reusable family for service or program descriptions. Publication faces/forms may later expose that family, but the bundle itself remains a value inside a viewpoint-family catalogue U.Episteme, not the report publication face.

Bias-Annotation

The pattern biases FPF toward bundle-first reuse and against ad hoc local re-invention of recurring viewpoint families. That bias is intentional. The small cost of maintaining libraries and editions is lower than the long-term cost of unstable viewpoint identity.

Conformance Checklist

  • CC-VBL-0 Within one library edition, each ViewFamilyId SHALL identify exactly one U.ViewpointBundle.
  • CC-VBL-1 Every viewpoint in a bundle SHALL have EntityOfConcernClassSpec compatible with the bundle's declared EntityOfConcernClassSpec.
  • CC-VBL-2 A U.MultiViewDescribing family that declares a ViewFamilyId SHALL import only viewpoints from the referenced bundle.
  • CC-VBL-3 ViewFamilyId MUST NOT be used as a publication-face kind, publication-face kind, or carrier kind.
  • CC-VBL-4 Bundles intended for non-expert reuse SHOULD provide archetypal grounding coverage for their viewpoints.
  • CC-VBL-5 Changes to bundle membership or meaning SHALL be editioned rather than silently mutating an existing family id.
  • CC-VBL-6 If a family combines several bundles, the contributing ViewFamilyId values SHALL remain explicit.

Common Anti-Patterns and How to Avoid Them

Anti-patternWhat it looks likeHow FPF prevents it
Publication-face hijackA ViewFamilyId is reused as a publication-face name or document type.CC-VBL-3 keeps family ids lexical and bundle-local.
Bundle equals view collectionA folder or report pack is called a viewpoint bundle even though no U.Viewpoint family is declared.E.17.1 defines the bundle as a declared family of viewpoints, not a file grouping.
Silent local driftA local project keeps the old family id but swaps in different viewpoints.CC-VBL-5 requires editioning for semantic or membership change.
Namespace collapseEngineering viewpoint ids and publication viewpoint ids are mixed as if they were one namespace.The solution keeps id spaces distinct and requires explicit attribution.

Consequences

BenefitTrade-off / Mitigation
Reusable viewpoint families. Stable bundle ids let many projects reuse the same family without restating it.Libraries need governance and edition discipline.
Cleaner U.MultiViewDescribing. A family can import a reviewed bundle instead of spelling out every viewpoint locally.Local exceptions must be made explicit rather than hidden in prose.
Better architectural alignment. ISO 42010-style viewpoint-library practice gains a native FPF catalogue episteme.Initial bundle authoring requires care in naming and grounding.
Lexical hygiene. Bundle ids, viewpoint ids, views, and publication faces/forms stop collapsing into one label.Authors must learn the separation once and then keep it.

Rationale

U.MultiViewDescribing already assumes that viewpoint plurality exists. E.17.1 supplies the governing pattern for that plurality, including cases where viewpoints are used to re-express positions in U.LanguageStateSpace or trajectories in U.LanguageStateTransductionTrajectory. Without it, every domain can only improvise locally, and long-term correspondence between viewpoint families remains fragile.

SoTA-Echoing

The pattern aligns with post-2015 multi-view practice: ISO 42010 viewpoint libraries, model-based systems engineering viewpoint catalogues, assurance-oriented viewpoint families, and reusable concern bundles in architecture and governance work. FPF adopts the reusable-library idea, but keeps the ontology stricter by separating bundle ids, viewpoint ids, views, and publication faces/forms.

Relations

  • Builds on: C.2.1 slot discipline through ViewpointSlot / ViewSlot, A.6.2-A.6.4, A.7, E.7, and E.10.
  • Constrains: E.17.0 U.MultiViewDescribing whenever it imports viewpoint families from reusable bundles.
  • Coordinates with: C.2.2a, A.16.0, E.17, E.17.2, E.18:5.12, F.9, F.9.1, and any domain-specific viewpoint family that needs stable reuse.
  • Protects: lexical and ontological separation between viewpoint families, concrete views, and publication faces/forms.

Typed annex manifests for thin bundles

VF.* and other reusable viewpoint bundles may reference typed AnnexManifestRef assets with roles such as lexical, bridge, routing, examples, optional sota, and optional pilotTrace. This keeps the bundle itself thin while allowing routing notes, lexical baggage, and bridge annexes to remain explicit and typed rather than folded into the bundle core.

Bundle Anatomy and Member Discipline

A viewpoint-bundle library becomes thin and reusable only when the bundle itself stays stable while the member viewpoints remain explicit enough to review independently. The bundle therefore has two simultaneous obligations: coherence at the family level and clarity at the member level.

What a viewpoint member should make explicit

Each member U.Viewpoint inside a reusable bundle should make explicit at least:

  • the concern family it brings into focus,
  • the stakeholder families for whom that concern matters,
  • the entity of concern class for which it is admissible,
  • the allowed description and specification-useification kinds that usually realize it,
  • and any bundle-specific conformance or correspondence notes that later view families should preserve.

E.17.1 does not redefine the internals of U.Viewpoint. It states what must remain visible if a viewpoint is to be reused as part of a bundle rather than as an undocumented local label.

Bundle-level coherence

A bundle is not just a bag of viewpoints with one shared prefix. A coherent bundle should answer a recognizable family-level question, such as:

  • which engineering concerns are standard for holon description?
  • which governance perspectives are required for a service review?
  • which research-method viewpoints recur across inquiry reports?

If the member viewpoints do not share that family-level purpose, the result is not one bundle but an uncurated catalogue fragment.

Thin bundles, rich annexes

E.17.1 intentionally allows bundles to stay thin. Rich companion material such as:

  • lexical discipline notes,
  • bridge overlays,
  • routing notes,
  • worked examples,
  • or SoTA references

may live in typed annex manifests. This preserves a stable bundle core while still letting reuse packages carry enough didactic material and review help.

Import, Subset, and Multi-Bundle Coordination

The value of viewpoint bundles appears most clearly when they are imported, subsetted, and coordinated across several reused families. Those cases need explicit discipline so that a local project does not quietly mutate what it claims to be reusing.

Subset selection

A U.MultiViewDescribing family may legitimately import only a subset of a bundle's viewpoints. When it does so, it should declare:

  • which ViewFamilyId is the source,
  • which viewpoint members are actually in local use,
  • and whether the omitted members are simply unused or are intentionally excluded because the local scope does not require them.

The local family must not speak as if it had imported the whole bundle while silently dropping inconvenient viewpoints.

Local overlays vs new bundles

A local project often wants a small adaptation: one extra concern note, one narrower stakeholder emphasis, one local naming convention. E.17.1 prefers explicit overlays or new editions over silent mutation.

A practical rule is:

  • if the local project is merely selecting a subset or adding local didactic publications, keep the original bundle id and declare the overlay clearly;
  • if the local project changes viewpoint membership or meaning, publish a new local bundle or a new edition.

This is how bundle reuse remains trustworthy across organizations.

Multi-bundle coordination

Many real description families need more than one bundle, for example:

  • one engineering viewpoint family,
  • one safety or assurance family,
  • and one governance or publication-oriented family.

In such cases, E.17.1 expects the family to preserve the provenance of each member viewpoint rather than flattening everything into one unnamed Sigma. Cross-family correspondence should then cite both the participating viewpoint ids and their ViewFamilyId origins.

Engineering vs publication families

Some contexts need both engineering viewpoints and publication viewpoints. E.17.1 permits both, but it does not allow one family id to erase the distinction. A family that imports both kinds must keep the namespaces and bundle origins explicit so that authors do not confuse how the holon is being understood with how a publication face/form chooses to expose that understanding.

Worked Bundle Families

TEVB engineering family

A TEVB engineering bundle for holons may include viewpoints such as:

  • VP.Functional,
  • VP.Procedural,
  • VP.RoleEnactor,
  • VP.ModuleInterface.

The important point is not the vocabulary alone. The bundle states that these viewpoints are intended to recur together for one engineering family of concerns. A later description family then imports that engineering bundle rather than re-inventing a local list of "roughly similar" viewpoints.

Governance and risk family

A governance bundle may group viewpoints such as:

  • VP.Risk,
  • VP.Control,
  • VP.Compliance,
  • VP.Operations.

This bundle is valuable precisely because the four viewpoints recur together but are not interchangeable. Keeping them as one family id makes the reuse visible while still preserving the distinct member meanings.

Research-method family

A research-method bundle may include viewpoints such as:

  • VP.Theory,
  • VP.Experiment,
  • VP.Inference,
  • VP.Limitations,
  • and, where appropriate, VP.Reproducibility.

A local inquiry note might import only three of these viewpoints, but the import remains legible because the omitted ones still belong to a reviewed family rather than disappearing into ad hoc prose.

Cross-family description stack

A serious project may use TEVB engineering viewpoints for the design family, a governance bundle for program oversight, and a publication-oriented family for public publication faces/forms. E.17.1 keeps this stack admissible for review by preserving which bundle each viewpoint came from and by preventing the final publication face/form from masquerading as the viewpoint library itself.

Authoring and Review Guidance

For bundle authors

Bundle authors should ask:

  • what recurring family is being named,
  • which viewpoints truly belong together in that family,
  • what local didactic publications or examples belong in annexes instead of the bundle core,
  • and whether the bundle is stable enough to deserve a reusable ViewFamilyId.

A good bundle is not maximal. It is coherent, reviewable, and reusable.

For reviewers

Reviewers should inspect both levels:

  • member level - are the included viewpoints individually explicit enough to be reused?
  • bundle level - do they actually form one coherent family rather than one convenient list?

They should also check whether a local project has silently forked the bundle while still using the inherited family id.

For integrators and librarians

Integrators should keep libraries small, curated, and editioned. It is usually better to publish:

  • one stable core bundle,
  • one explicit local extension,
  • and one clear subset declaration

than to let one giant family absorb every recurring viewpoint a domain has ever used. Library sprawl destroys the cognitive advantage that reusable bundles are supposed to provide.

Edition and Migration Notes

Rename vs semantic change

A lexical rename that leaves viewpoint meaning and membership unchanged may be treated as a naming-layer migration. A change in membership, concern, admissibility, or member semantics is not just a rename; it requires a new edition or a new local bundle.

Migration from local Sigma lists

Legacy U.MultiViewDescribing families often publish only one local list of viewpoints. Migration should proceed by:

  1. identifying recurring families across several such local lists,
  2. publishing those families as explicit bundles,
  3. then rewriting the local families to import the new ViewFamilyId and declare any subset selection explicitly.

This sequence preserves provenance and avoids pretending that the reusable family had always existed.

Migration from publication-face/form-bound naming

If a legacy practice uses one label interchangeably for a viewpoint family, a report section, and a publication face, migration should separate those roles explicitly. ViewFamilyId remains at the bundle layer; U.Viewpoint ids remain at the viewpoint layer; publication-face names remain publication-layer vocabulary.

Boundary to annex growth

Annex manifests are useful, but a bundle should not become a thin shell hiding all of its meaning elsewhere. The core bundle still needs enough explicit member and family structure to stand on its own. Annexes deepen reuse; they do not replace the bundle's primary declaration.

Import Collision and Alias Discipline

Family id is not a synonym bag

A ViewFamilyId does not mean that all member viewpoints are interchangeable labels for one concern. It means that a reviewed family of viewpoints is intended to recur together. Authors should therefore resist the common drift where one convenient bundle name begins to substitute for all of its members.

Import collision rule

When two imported bundles contribute viewpoints with overlapping lexical names, the publication should preserve the originating viewpoint ids and bundle provenance rather than silently merging the members. Bundle reuse is admissible only if collisions remain inspectable.

Alias boundary

Local teaching aliases may be added for readability, but the alias must dock to explicit member viewpoints and must not erase bundle provenance. If the alias starts doing bundle-selection work by itself, it is making an unsupported bundle-selection claim and should be replaced by explicit member references.

Bundle Projection and Comparative Use

Projection to local subsets

A description family may project only a subset of a reusable bundle. This is admissible if the omitted members remain visible as omitted rather than disappearing into an ad hoc local list. Projection keeps bundle provenance intact while acknowledging that local publication rarely uses every member.

Comparative bundle use

Bundles may be compared across contexts only if the comparison preserves member ids, member meanings, and subset/projection decisions. Comparing two bundle labels alone is not enough, because similarly named families may contain materially different viewpoint sets.

Boundary to publication-face design

A publication face may render one composite presentation of several viewpoints, but the face is not the bundle. E.17.1 therefore requires the underlying member structure to remain recoverable even when a public-facing document flattens it for readability.

Review Matrix and Library Governance

A reviewer can test a viewpoint bundle library with five questions:

  1. Do the member viewpoints still have explicit standalone meaning?
  2. Does the bundle name describe one coherent recurring family rather than one convenience list?
  3. If a subset is imported, is the omitted remainder still visible as omission rather than silent deletion?
  4. If several bundles interact, is provenance preserved across collisions and local aliases?
  5. Has a publication face started impersonating the library itself?

Library governance should therefore prefer small, editioned, provenance-preserving bundles over lexical mega-families that are easy to name but hard to reuse truthfully.

E.17.1:End

TEVB — Typical Engineering Viewpoints Bundle

Tech‑name: TEVB (Typical Engineering Viewpoints Bundle, bundle id VF.TEVB.ENG) Plain‑name: typical engineering viewpoints bundle for holons Tag: Archetypal species of U.ViewpointBundle for engineering holons

Status. Stable; archetypal, notation‑agnostic species of U.ViewpointBundle / U.ViewpointBundleLibrary. It is an engineering‑level bundle over holons; it does not itself constitute an architecture framework or architecture‑specific viewpoint library. Architecture‑focused viewpoint bundles are introduced as separate U.ViewpointBundle species that may import TEVB.

Builds on.

  • E.17.0U.MultiViewDescribing. Supplies the generic notion of U.Viewpoint, U.View, and ViewFamily over an EntityOfConcernClass ⊑ U.Entity (here: EntityOfConcernClass = U.Holon).
  • E.17.1U.ViewpointBundleLibrary. Provides the generic U.ViewpointBundle/ViewFamilyId structure; TEVB is a concrete bundle (VF.TEVB.ENG) in the core library.
  • A.1 — Holon. Holon kinds U.System and U.Episteme as the typical engineering entities of concern.
  • A.6.2A.6.4 — Episteme morphisms. U.EffectFreeEpistemicMorphing, U.EpistemicViewing, U.EpistemicRetargeting as the generic morphism classes behind engineering views.
  • A.7 and E.10.D2 - Strict Distinction: EntityOfConcern, Description episteme, and Description episteme admitted for specification use. TEVB uses DescriptionContext; engineering descriptions and specifications under TEVB are Description epistemes and specification-use cases with explicit ViewpointRef.
  • C.2.1U.EpistemeSlotGraph. Provides EntityOfConcernSlot, ViewpointSlot, ViewSlot and the slot discipline (A.6.5) used by TEVB-aligned Description epistemes and specification-use Description epistemes.

Used by.

  • E.18:5.12 — E.TGA viewpoint map. As a canonical consumer, E.TGA binds its engineering transduction families (Functional, Procedural, Role-Enactor or Device-Structure, Module-Interface) to TEVB viewpoints VP.Functional, VP.Procedural, VP.RoleEnactor, VP.ModuleInterface.
  • E.17 (MVPK). Publication of engineering morphisms uses TEVB engineering viewpoints on the Description-episteme and specification-use side and separate publication-side viewpoints over publication faces and forms.
  • Engineering description and specification-use patterns. System, method, module-interface and role-related Description-episteme and specification-use patterns for holons (U.System, U.Episteme) refer to TEVB when declaring their ViewpointRef.
  • ISO‑aligned architecture‑description bundles. Future species patterns for architecture‑specific viewpoint bundles reuse TEVB as the canonical engineering view family (Functional vs Structural etc.) over systems and their epistemes.

Guard (lexical & ontological). Selected-family scope. TEVB's engineering viewpoints are scoped by EntityOfConcernClass = U.Holon with usual U.System and U.Episteme cases. ISO 42010 concern/viewpoint/view language is used as architecture-description practice alignment, not as imported FPF ontology.

  1. Engineering scope only. TEVB applies to EntityOfConcernClass = U.Holon with typical cases U.System and U.Episteme. Using TEVB viewpoints for non‑holonic entities (e.g., pure data structures, abstract theories) requires an explicit species‑level justification; by default it is a conformance violation.
  2. Viewpoint vs publication face/form/carrier. VP.Functional, VP.Procedural, VP.RoleEnactor, VP.ModuleInterface are viewpoints (U.Viewpoint specifications), not publication face, publication form, rendering, or carrier names. A conforming TEVB use keeps {PlainView, TechCard, NormsCard, InteropCard, AssuranceLane, ...} as publication faces/forms under MVPK and does not use VP.* ids as carrier or publication-form ids.
  3. EngineeringVPId vs publication-side viewpoint id. VP.* in this pattern are EngineeringVPId values (E.18:5.12). MVPK publication uses separate publication-side viewpoint ids, linked to TEVB viewpoints only through correspondences.
  4. No new role coordinates in EntityOfConcern and Description-episteme boundary and specification-use discipline. TEVB references stakeholder groups via U.RoleEnactor families but does not introduce U.Role as a coordinate in Description episteme or specification-use case signatures (E.10.D2). Role semantics remain confined to RoleEnactment patterns (A.15, F-R family).
  5. EntityOfConcern retention. In ordinary TEVB use, DescriptionContext.EntityOfConcernRef remains the holon selected by EntityOfConcernClassSpec. Capability, Method, procedure/control, role-enactor structure, structural architecture, module, interface, and allocation terms are viewpoint concern/content inside the Description episteme unless the text explicitly opens A.6.4 retargeting with a KindBridge and species-extension rule.
  6. No extra viewpoints inside TEVB. TEVB defines a fixed core set of four engineering viewpoints. Other labels such as “Assurance‑Oriented”, “Interop‑Oriented”, “Information/Data‑Oriented”, “Operational/Deployment”, “Mission/Context” may appear only as lexical aliases in E.18:5.12 (e.g. as ViewFamilyId / AliasInViewFamilies values for transduction species). They do not extend TEVB.EngBundle.viewpoints and are not additional U.Viewpoint kinds in this bundle; when SoTA or local practice demands explicit assurance, information, or mission viewpoints, provide them as separate U.ViewpointBundle species imported alongside TEVB rather than by mutating VF.TEVB.ENG.
  7. Not an architecture framework. TEVB is an engineering‑level viewpoint bundle; architecture‑specific viewpoint bundles and architecture frameworks MUST be introduced as separate U.ViewpointBundle species that may import TEVB. They keep VF.TEVB.ENG as the engineering viewpoint bundle and put architecture-only viewpoints in separate architecture-specific U.ViewpointBundle species.

Problem frame (informative)

Engineering teams almost always talk about systems and their models through a small set of recurring “views”:

  • What capabilities and behaviours does the system enact? — function‑oriented, transduction‑oriented talk.
  • What sequences, workflows, and control logics does it realise? — procedure/process/state‑oriented talk.
  • Who or what enacts which roles? — role‑enactment, organisational and socio‑technical talk.
  • How is the system decomposed into modules and interfaces? — physical/logical architecture talk.

In industry, these lenses show up under many names: functional view, logical view, behavioural view, process view, structural/physical view, deployment view, responsibility view, and so on. Modern standards and tools (ISO/IEC/IEEE 42010:2022, INCOSE SE Handbook, SysML v2 “views as queries”) all recognise that viewpoints should be reusable structures, not ad‑hoc labels.

In FPF, E.17.0 and E.17.1 give the generic machinery:

  • U.Viewpoint as a viewpoint specification (stakes/concerns/allowed Description kinds and specification-use gates),
  • U.View as an episteme‑level view (epistema under a viewpoint),
  • U.ViewpointBundle / ViewFamilyId as reusable collections of viewpoints.

E.TGA (E.18:5.12) already assumes a canonical engineering family with names like “Functional”, “Procedural”, “Role-Enactor (Device-Structure)”, “Module-Interface”. Without a formal bundle tying these together, those names drift and the mapping between E.TGA, MVPK, EntityOfConcern, Description-episteme boundary, and specification use becomes fragile.

TEVB addresses this by defining a single, explicit engineering bundle with a fixed ViewFamilyId and a small set of canonical engineering viewpoints over U.Holon.

Problem (informative)

Without TEVB, several failure modes recur:

  1. Inconsistent “functional”, “structural”, and “behavioural” vocabularies. Different teams define “functional view” or “process view” differently, even within one organisation; E.TGA E.18:5.12 then has to guess how to map transduction graphs onto whichever interpretation is currently in play.
  2. Architecture frameworks leak into the kernel. 4+1‑style and similar architectural frameworks get hard‑coded as if they were universal; FPF loses its holonic neutrality and becomes biased to a particular school.
  3. Viewpoints conflated with publication faces/forms and files. “Functional view” is used both for the underlying viewpoint and for a concrete document or dashboard; MVPK faces/forms, E.TGA transduction families, and EntityOfConcern and Description-episteme and specification-use distinctions become entangled.
  4. Role leakage into EntityOfConcern and Description-episteme boundary and specification-use discipline. Engineering views that are about role-enactors are written directly in terms of U.Role, blurring the boundary between RoleEnactment (A.15) and description and specification-use lanes, and breaking A.7 and E.10.D2.
  5. Poor reuse across systems. Even when organisations want to reuse the same engineering views across products, plants, or models, there is no canonical bundle to import; each programme recreates “its own” functional/structural views.

TEVB makes engineering viewpoint families first‑class reusable bundles and pins them to an explicit EntityOfConcernClass (engineering holons) so that E.TGA, MVPK and discipline‑packs can align on the same vocabulary.

Forces (informative)

ForceTension
Universality vs domain idiomsWe need engineering viewpoints that work for any holon (hardware, software, or socio-technical), yet remain recognisable to practitioners steeped in domain-specific frameworks.
Parsimony vs expressivenessA small, stable NQD-front set of engineering view families (Function, Behaviour and Process, Role-Enactor, Module-Interface) vs the temptation to proliferate specialised views for every stakeholder group or quality attribute.
Neutral core vs architecture frameworksFPF core must stay neutral and not encode a specific framework (4+1, DoDAF, etc.), while still being compatible with them.
Consistency vs organisational autonomyCentral TEVB definitions must be stable, yet individual organisations need room to refine concerns and episteme kinds within the bundle.
EntityOfConcern and Description-episteme boundary plus specification-use clarity vs convenient shortcutsViewpoints must not re-introduce Role as a coordinate in EntityOfConcern and Description-episteme boundary or specification-use discipline, nor blur Description-episteme and specification-use distinctions with publication face, form, or carrier distinctions, even though practitioners informally mix these.

TEVB resolves these by fixing a minimal engineering bundle and leaving customisation to species patterns and ViewpointBundleLibrary entries that refine concerns and allowed episteme kinds without changing the core families.

Solution — TEVB as a core U.ViewpointBundle for holons (normative)

TEVB bundle identity

TEVB is the core engineering viewpoint bundle over holons.

  • Bundle object. There exists a canonical U.ViewpointBundle instance:

    TEVB.EngBundle : U.ViewpointBundle
  • ViewFamilyId.

    TEVB.EngBundle.viewFamilyId = VF.TEVB.ENG

    VF.TEVB.ENG is reserved for “Typical Engineering Viewpoints (Engineering)” in the FPF core ViewpointBundleLibrary.

  • EntityOfConcernClassSpec (holon scope).

    TEVB is parameterised by

    TEVB.EngBundle.EntityOfConcernClassSpec =
      { h : U.Holon | holonKind(h) ∈ {U.System, U.Episteme} }

    That is, TEVB applies to holons that are either U.System or U.Episteme. Other holon kinds MAY be added by species patterns but MUST be justified and documented; the default conformance profile assumes systems and epistemes.

  • Library placement.

    TEVB lives in the core viewpoint library:

    TEVB.Library : U.ViewpointBundleLibrary
    TEVB.Library.libraryId = FPF.Core.Viewpoints
    TEVB.Library.bundles ⊇ { TEVB.EngBundle }

    Additional organisational libraries MAY import and specialise TEVB, but SHALL NOT redefine VF.TEVB.ENG with incompatible semantics.

  • Viewpoint set.

    TEVB defines a finite set of canonical engineering viewpoints:

    TEVB.EngBundle.viewpoints =
      { VP.Functional, VP.Procedural, VP.RoleEnactor, VP.ModuleInterface }

The selection {VP.Functional, VP.Procedural, VP.RoleEnactor, VP.ModuleInterface} is the current NQD-frontier for engineering holon viewpoints in Part G: it realises a Function-Behaviour-Structure-plus-Role (F-B-S+R) cut that is non-dominated against candidate families including explicit information or data, assurance or safety, and mission or context viewpoints under the N, U, C, and D characteristics (C.18, G.0). Part G records the SoTA candidate set and rejected alternatives; TEVB only fixes the core four where each VP.* : U.Viewpoint is defined below. These four are the only viewpoints in the core TEVB bundle.

Note. Other ViewFamilyId values used in E.TGA (e.g., Assurance‑Oriented, Interoperability‑Oriented, Information/Data‑Oriented, Operational/Deployment, Mission/Context) remain lexical families only for transduction species (E.18:5.12). They do not add viewpoints to TEVB; they are orthogonal to TEVB’s viewpoints set.

TEVB engineering viewpoints

Each TEVB viewpoint is a U.Viewpoint with:

  • viewpointId : ViewpointId (concrete identifier, e.g., VP.Functional);
  • EntityOfConcernClassSpec inherited from the bundle (U.Holon with System/Episteme kinds);
  • StakeholderFamilies : FinSet(RoleEnactorFamilyId) — families of U.RoleEnactor that are the primary audience;
  • Concerns : FinSet(ConcernId) — engineering concerns this viewpoint foregrounds;
  • AllowedEpistemeKinds : FinSet(U.EpistemeKindRef) — Description-episteme and specification-use kinds admissible under this viewpoint (all obeying EntityOfConcern and Description-episteme boundary, specification use, and C.2.1 slot disciplines);
  • ConformanceRules : FinSet(RuleId) — references to checklist items in conformance packs (CV/GF/engineering checklists).

The subsections below fix the normative intent and minimal field profiles for each TEVB viewpoint. Species patterns and discipline‑packs may refine Concerns, AllowedEpistemeKinds and ConformanceRules, but MUST preserve the intent.

VP.Functional — capability & transduction viewpoint

Intent. Look at a holon in terms of what it can do under roles: capabilities, transductions, and functional responsibilities, rather than in terms of modules or procedures.

  • viewpointId.

    VP.Functional : ViewpointId  // EngineeringVPId
  • EntityOfConcernClassSpec. Same as the bundle: U.Holon with System/Episteme kinds.

  • StakeholderFamilies (typical examples). Actual StakeholderFamilies : FinSet(U.RoleEnactor) values are defined in RoleEnactment discipline packs; labels below are informal.

    • System engineering leads and architects (e.g. SysEng‑lead enactors).
    • Product owners / capability owners.
    • Reliability / performance engineers when reading capability envelopes.
  • Concerns (typical).

    • Capabilities and functions provided by the holon (CapabilityConcerns).
    • Behaviour under roles (RoleBehaviourConcerns).
    • Non‑functional envelopes: throughput, latency, availability, energy, safety (NFPEnvelopeConcerns).
    • Compositional semantics of functions/transductions (TransductionCompositionConcerns).
  • AllowedEpistemeKinds (shape). VP.Functional admits Description epistemes and specification-use Description epistemes whose EntityOfConcernSlot remains the holon and whose viewpoint content foregrounds the holon's Capability, Method, Mechanism, or transduction claims under a role, e.g.:

    • SystemFunctionalDescription, SystemFunctionalSpec (species of U.EpistemeKind describing system‑level capabilities and their interconnection).
    • TransductionDescription, TransductionSpec (E.TGA functional lanes).
    • ServiceCapabilityDescription, ServiceCapabilitySpec (when a holon is in Service role).

    All such epistemes satisfy these admissibility checks:

    • obey EntityOfConcern and Description-episteme boundary plus specification-use discipline: …Description names a Description episteme about the holon and …Spec names specification-use case of that Description episteme for declared Capability, Method, Mechanism, or PromiseContent content;
    • make their DescriptionContext = ⟨EntityOfConcernRef, BoundedContextRef, ViewpointRef⟩ explicit, with ViewpointRef = VP.Functional.
  • ConformanceRules (examples).

    • Functional flows are total over their declared domain (no implicit dangling capabilities).
    • Transductions are typed at interfaces (A.6.0, A.6.1) and respect A.6.2/A.6.3 purity/conservativity.
    • When functional views participate in retargeting patterns (e.g. structural reinterpretation species based on U.EpistemicRetargeting), they MUST satisfy the relevant retargeting constraints from A.6.4; concrete consumer patterns (such as E.TGA structural reinterpretation, E.18) MAY impose additional rules.
  • SoTA echo (informative). VP.Functional corresponds to the “functional view” in ISO-aligned architecture descriptions and domain reference architectures (functional viewpoints in IoT and space reference architectures, functional and logical layers in sector frameworks), and to the Function concern in FBS-style design ontologies. It is also the natural viewpoint-family placement for SysML and SysML-v2 capability and logical architecture models and for “logical view” slices in 4+1-style frameworks, once recast into holon/capability terms.

VP.Procedural — process & control viewpoint

Intent. Look at a holon in terms of how behaviours are sequenced and controlled: workflows, state machines, operational procedures, and control logic.

  • viewpointId.

    VP.Procedural : ViewpointId  // EngineeringVPId
  • EntityOfConcernClassSpec.

    Same as the bundle.

  • StakeholderFamilies (typical).

    • Operations and run‑time owners (OperationsEnactorFamily).
    • Control engineers and automation specialists (ControlEngineerEnactorFamily).
    • Safety engineers concerned with procedural correctness (SafetyEngineerEnactorFamily).
  • Concerns (typical).

    • Control flow and ordering of actions (OrderConcerns).
    • State‑machine behaviour and lifecycle (StateLifecycleConcerns).
    • Concurrency, synchronisation, and error handling (ConcurrencyConcerns).
    • Operational modes and transitions (startup, shutdown, degraded modes) (OperationalModeConcerns).
  • AllowedEpistemeKinds (shape). VP.Procedural admits Description epistemes and specification-use Description epistemes where the EntityOfConcernSlot remains the holon and the viewpoint content foregrounds the holon's Method, procedure, control behaviour, or work-plan content, e.g.:

    • MethodDescription, MethodSpec for operational procedures (A.3.1–A.3.2).
    • ControlLogicDescription, ControlLogicSpec (IEC 61131‑3 style step diagrams/statecharts).
    • WorkflowDescription, WorkflowSpec (business processes, orchestration logic).

    These epistemes:

    • respect the order discipline (Γ_method, Γ_ctx) and A.15 (Role–Method–Work alignment);
    • carry E.10.D2-conformant DescriptionContext with ViewpointRef = VP.Procedural.
  • ConformanceRules (examples).

    • Pre/post‑conditions at step boundaries are explicit and type‑checked (A.3.1/A.3.2, Γ_method).
    • No embedding of Work or calendars inside procedural descriptions (A.7 and E.10.D2).
    • Failure modes and recovery actions are declared and traceable to safety analyses (F.15 harnesses where relevant).
  • SoTA echo (informative). VP.Procedural captures the dynamic/process dimension found in SoTA architecture and MBSE practice: process views in 4+1, operational/behavioural views in defence and enterprise frameworks, behaviour diagrams in SysML (activity, sequence, state, interaction), and procedure/control‑oriented models in industrial standards. TEVB abstracts this into a notation‑agnostic “behaviour over time” viewpoint for holons.

VP.RoleEnactor — role & device‑structure viewpoint

Intent. Look at a holon in terms of who/what plays which roles and how physical/organisational structure enables those role enactments. This viewpoint covers both socio‑technical role assignments and “device view” readings of transduction graphs (E.TGA).

  • viewpointId.

    VP.RoleEnactor : ViewpointId  // EngineeringVPId
  • EntityOfConcernClassSpec.

    Same as the bundle.

  • StakeholderFamilies (typical).

    • Organisational designers and operations managers (OrgDesignEnactorFamily).
    • Safety and compliance officers concerned with separation of duties (SegregationOfDutyEnactorFamily).
    • Hardware/system engineers concerned with which devices carry which functions (DeviceEngineerEnactorFamily).
  • Concerns (typical).

    • Which holons enact which roles under which contexts (RoleEnactmentConcerns).
    • Allocation of capabilities to devices/subsystems (CapabilityAllocationConcerns).
    • Organisational constraints: segregation of duties, responsibilities, escalation paths (GovernanceConcerns).
    • Device‑view readings of functional graphs (E.TGA Device‑View).
  • AllowedEpistemeKinds (shape). VP.RoleEnactor admits Description epistemes and specification-use Description epistemes where the EntityOfConcernSlot remains the holon and the viewpoint content foregrounds role structure, role enactment, or capability allocation associated with that holon, e.g.:

    • RoleDescription, RoleSpec (F.4, F.18) for human or system roles.
    • RoleEnactmentDescription for mappings Holder#Role:Context (A.15).
    • DeviceAllocationDescription mapping functions/transductions to physical modules or devices.

    As with other TEVB viewpoints, these are Description epistemes and specification-use cases with DescriptionContext.ViewpointRef = VP.RoleEnactor.

  • ConformanceRules (examples).

    • Role vs Method vs Work vs Capability separation is upheld (A.7, A.15).
    • Device‑view reinterpretation from functional flows MUST be expressed as U.EpistemicRetargeting with an explicit KindBridge witness (A.6.4). Specific retargeting schemes (for example, E.TGA’s structural reinterpretation in E.18) may add further constraints but are not fixed by TEVB itself.
    • No “role as behaviour” conflation: Roles are masks, behaviours remain Methods/Work.
  • SoTA echo (informative). VP.RoleEnactor aligns with the allocation/responsibility and resource/organisational view clusters seen across MBSE frameworks: allocation views in UAF/NAF, role-responsibility matrices and RACI-style artefacts, and “who/what plays which role” slices in usage and operational viewpoints. Many post-2015 reference architectures treat this concern implicitly; TEVB makes it explicit and holon-centred while remaining compatible with socio-technical and device-allocation practices.

VP.ModuleInterface — module & interface viewpoint

Intent. Look at a holon in terms of its modules, interfaces, and structural composition: what parts exist, how they connect, and how their interface specifications are stated.

  • viewpointId.

    VP.ModuleInterface : ViewpointId  // EngineeringVPId
  • EntityOfConcernClassSpec. Same as the bundle.

  • StakeholderFamilies (typical).

    • Hardware and software architects responsible for structure (StructureArchitectEnactorFamily).
    • Integration and test engineers (IntegrationEngineerEnactorFamily).
    • Lifecycle and maintenance planners looking at replaceable units (MaintenancePlannerEnactorFamily).
  • Concerns (typical).

    • Module decomposition and containment (mereology) (ModuleMereologyConcerns).
    • Interfaces and specifications — ports, APIs, physical connectors (InterfaceConcerns).
    • Dependency structures and allowed couplings (DependencyConcerns).
    • Replaceability and variation points (VariabilityConcerns).
  • AllowedEpistemeKinds (shape). VP.ModuleInterface admits Description epistemes and specification-use Description epistemes where the EntityOfConcernSlot remains the holon and the viewpoint content foregrounds the holon's structural architecture, modules, interfaces, and connector arrangements, e.g.:

    • SystemStructureDescription, SystemStructureSpec (module/connector descriptions).
    • ModuleInterfaceDescription, ModuleInterfaceSpec (signature, interface specifications, physical interface definitions).
    • E.TGA‑style interface/port descriptions over Signature/Mechanism graphs.

    These epistemes describe holon structure, module-interface arrangement, ports/connectors, or structural architecture as viewpoint content about the holon rather than replacing the holon as the EntityOfConcern. Functional↔physical reinterpretations between VP.Functional and VP.ModuleInterface are expressed via U.EpistemicRetargeting + KindBridge (A.6.4, E.18) when the EntityOfConcernRef changes.

  • ConformanceRules (examples).

    • Interfaces are typed and explicitly bound to standards where applicable (A.6.0, F‑specs).
    • No inlining of Methods/Work into structure (strict separation of structure vs behaviour).
    • Reinterpretations from functional views into structure MUST respect the applicable U.EpistemicRetargeting/Bridge constraints (A.6.4). When combined with a concrete retargeting scheme (e.g. E.TGA structural retargeting, CC‑TGA‑06‑EX), that scheme’s additional rules also apply.
  • SoTA echo (informative). VP.ModuleInterface matches the structural, implementation, and deployment families that dominate SoTA architecture descriptions: development and physical views in 4+1, construction and deployment viewpoints in IoT reference architectures, logical and physical architecture layers in UAF, NAF, and RASDS-style frameworks, and structural and interface-focused models in SysML-based MBSE. TEVB treats all of these as specialisations of a single holonic “modules and interfaces” viewpoint.

Archetypal grounding (informative)

A minimal TEVB instantiation looks as follows:

TEVB.EngBundle :
  U.ViewpointBundle {
    viewFamilyId   = VF.TEVB.ENG
    EntityOfConcernClassSpec   = { h : U.Holon | HolonKind(h) ∈ {System, Episteme} }
    viewpoints     = { VP.Functional, VP.Procedural, VP.RoleEnactor, VP.ModuleInterface }
    LibraryRef     = FPF.Core.Viewpoints
  }

Each VP.* viewpoint is a U.Viewpoint as in E.17.0, with:

  • viewpointId ∈ {VP.Functional, VP.Procedural, VP.RoleEnactor, VP.ModuleInterface},
  • EntityOfConcernClassSpec inherited from TEVB.EngBundle,
  • StakeholderFamilies, Concerns, AllowedEpistemeKinds, ConformanceRules aligned with the subsections above.

Engineering holon (example).

Let Plant_X : U.System be a production plant, and ControlStack_X : U.Episteme be its control and optimisation stack as a holon.

  • Under VP.Functional, Plant_X is viewed as a bundle of capabilities and transductions: material/energy/product flows, optimisation functions, safety envelopes.
  • Under VP.Procedural, Plant_X is viewed as sets of procedures and control sequences: startup/shutdown, normal operation, emergency handling.
  • Under VP.RoleEnactor, Plant_X is viewed as networks of role‑enactors: human operators, controllers, subsystems enacting roles in SOPs and safety cases.
  • Under VP.ModuleInterface, Plant_X is viewed as modules and interfaces: equipment units, pipelines, control modules, buses, and their interfaces and specifications.

Each of these is a family of Description epistemes and specification-use cases with DescriptionContext = ⟨EntityOfConcernRef(Plant_X or ControlStack_X), BoundedContextRef, ViewpointRef=VP.*⟩ and TEVB ensures that E.TGA and MVPK can rely on this common structure.

Conformance checklist (normative)

CC‑TEVB‑1 (Bundle identity). Any artefact claiming to be “TEVB engineering viewpoints” MUST:

  • refer to viewFamilyId = VF.TEVB.ENG,
  • have EntityOfConcernClassSpec = {h : U.Holon | HolonKind(h) ∈ {System, Episteme}},
  • enumerate viewpoints = {VP.Functional, VP.Procedural, VP.RoleEnactor, VP.ModuleInterface} and no others.

CC‑TEVB‑2 (Viewpoint definition). Each VP.* viewpoint MUST be a well‑formed U.Viewpoint per E.17.0:

  • viewpointId equal to one of the four engineering IDs,
  • EntityOfConcernClassSpec equal to the bundle’s,
  • StakeholderFamilies, Concerns, AllowedEpistemeKinds, ConformanceRules explicitly declared.

CC‑TEVB‑3 (DescriptionContext completeness). Every Description episteme or specification-use case participating in a TEVB‑managed multi‑view family for a holon MUST have a DescriptionContext = ⟨EntityOfConcernRef, BoundedContextRef, ViewpointRef⟩ with:

  • EntityOfConcernRef referencing a U.System or U.Episteme,
  • ViewpointRef ∈ {VP.Functional, VP.Procedural, VP.RoleEnactor, VP.ModuleInterface},
  • BoundedContextRef pointing to the engineering context (E.10.D1).

Capability, Method, procedure/control, role-structure, structural-architecture, module, interface, and allocation terms in those descriptions are viewpoint concern/content unless the text explicitly declares an A.6.4 retargeting, KindBridge, and species-extension rule that changes EntityOfConcernRef.

CC‑TEVB‑4 (Separation from PublicationVPs). VP.* identifiers from TEVB are engineering-viewpoint ids. They do not serve as MVPK publication-side viewpoint ids. Publication-side viewpoints live in MVPK and may correspond to TEVB engineering viewpoints through CorrespondenceModel, but they are separate symbols.

CC‑TEVB‑5 (No Role coordinate in EntityOfConcern and Description-episteme boundary or specification use). TEVB-aligned descriptions and specification-use cases MAY reference U.RoleEnactor families in StakeholderFamilies but SHALL NOT add Role or RoleEnactor as characteristics in Description episteme or specification-use case signatures beyond what A.7 and E.10.D2 already provides. Role semantics stay in RoleEnactment patterns; TEVB just selects concerns.

CC‑TEVB‑6 (Alignment with consumer viewpoint maps). When a pattern defines engineering viewpoint families named “Functional”, “Procedural”, “Role‑Enactor (Device‑Structure)”, or “Module‑Interface” over the same EntityOfConcernClass and claims TEVB alignment (for example, E.TGA E.18:5.12 viewpoint map), it MUST bind them to TEVB viewpoints as follows:

  • “Functional” → VP.Functional,
  • “Procedural” → VP.Procedural,
  • “Role‑Enactor (Device‑Structure)” → VP.RoleEnactor,
  • “Module‑Interface” → VP.ModuleInterface.

Any deviation MUST be explicitly documented as a species‑level extension and MUST NOT reuse VF.TEVB.ENG.

Rationale & SoTA echoing (informative)

NQD‑grounded choice of the core four

Part G’s NQD discipline treats candidate viewpoint families as points in an N/U/C/D quality space (Use‑Value, Constraint‑Fit, Novelty, Diversity_P). Applied to a SoTA‑harvested candidate set of engineering viewpoints (Functional, Behavioural/Procedural, Structural/Module, Allocation/Role, Information/Data, Assurance/Safety, Mission/Context, Deployment/Operational, Business/Usage), this yields a small Pareto frontier for engineering holon viewpoints. On that frontier, the F–B–S+R cut implemented by {VP.Functional, VP.Procedural, VP.RoleEnactor, VP.ModuleInterface} is the minimal set that:

  • spans the Function-Behaviour-Structure ontology used in contemporary design theory while adding an explicit allocation/responsibility concern;
  • aligns with the “functional”, “process”, “structural”, and “deployment” clusters recurrent in standards and architecture frameworks;
  • stays neutral with respect to domain‑specific qualities (‑ilities) and business/mission framing, which are captured in separate Q‑Bundles and governance-oriented viewpoint bundles rather than in TEVB itself.

Other candidates (e.g. dedicated information, assurance, or mission viewpoints) remain important but either duplicate concerns already captured by TEVB (when specialised to engineering holons) or are better modelled as orthogonal quality bundles (C.25) or non-engineering viewpoint bundles (business and governance viewpoint bundles). TEVB therefore pins only the core four and leaves the rest to specialised families.

Alignment with post‑2015 engineering practice

  • Modern architecture standards built on ISO/IEC/IEEE 42010 describe viewpoint libraries in which functional, behavioural/process, structural/deployment, and business/usage concerns are the dominant clusters; sector RAs such as IoT RA 30141 and space‑domain RAs provide explicit functional and construction/implementation viewpoints alongside business/usage and trustworthiness viewpoints. TEVB reuses the functional and construction/structural clusters as VP.Functional and VP.ModuleInterface, while treating business and trustworthiness as separate bundles.
  • Model-based systems engineering practice (INCOSE MBSE guidance, SysML v2 “views-as-queries”, UAF/NAF view grids) converges on a small set of core diagram families: structure vs behaviour vs allocation/responsibility vs requirements/mission. TEVB’s VP.Procedural and VP.RoleEnactor correspond to the behaviour and allocation/responsibility concerns, respectively, and are designed to be notation-neutral over SysML/UAF/UML/Capella-style models.
  • The FBS family of design ontologies (Function–Behaviour–Structure and extensions) provides a widely used conceptual source for separating what a system is for, what it does over time, and what it consists of. TEVB’s four viewpoints intentionally implement an FBS+R split at the holon level: VP.Functional ≈ Function, VP.Procedural ≈ Behaviour, VP.ModuleInterface ≈ Structure, with VP.RoleEnactor capturing the explicit mapping from functions/behaviours to role‑enacting carriers.
  • Within FPF itself, E.TGA’s “viewpoint families” (Functional, Procedural, Role-Enactor or Device-Structure, Module-Interface, plus assurance, interoperability, data, operational, and mission aliases) are harmonised by letting the core four be TEVB viewpoints and treating the rest as lexical or bundle-level overlays, not as new kernel viewpoints.

Why TEVB stays small

TEVB is deliberately not a complete architecture framework. It gives FPF a stable, holon‑centred engineering bundle that:

  • is small enough to keep in working memory and to govern via EpistemeSlotGraph discipline;
  • is expressive enough to represent mappings from SoTA architecture frameworks (4+1, domain‑specific RAs, UAF/NAF grids, SysML‑based MBSE method kits);
  • can be safely combined with additional U.ViewpointBundle species (safety/assurance packs, business/mission packs, information/data packs) without mutating the core four;
  • sits conceptually below architecture‑specific viewpoint libraries, which are introduced as separate U.ViewpointBundle species layering TEVB with mission/quality/business viewpoints instead of redefining TEVB.

As SoTA evolves, new bundles can be added or TEVB can gain a new edition with a revised NQD‑frontier, but the TEVB‑A edition fixed here remains the archetypal engineering bundle for holons.

Relations (informative)

  • Builds on. E.17.0 (U.MultiViewDescribing), E.17.1 (U.ViewpointBundleLibrary), A.7 and E.10.D2 (EntityOfConcern and Description-episteme boundary plus specification use), C.2.1 (EpistemeSlotGraph), A.6.2-A.6.4 (episteme morphisms).
  • Constrains. E.18:5.12 (E.TGA viewpoint map), engineering description and specification-use patterns, MVPK engineering publication profiles.
  • Coordinates with. MVPK publication face, publication form, publication unit, and publication carrier discipline; F-R family (Role, RoleDescription, RoleSpec); F.18 (naming discipline for ViewFamilyId, ViewpointId, EngineeringVPId, and publication-side viewpoint ids).
  • Non‑goals. TEVB does not prescribe modelling notations (SysML, BPMN, IEC 61131‑3, etc.), storage formats, or tool APIs. It only fixes the conceptual viewpoint bundle that such tools must respect when claiming FPF alignment.

E.17.2:End

Multi‑View Publication Kit

At a glance. Use E.17 when one source-backed episteme, episteme-lane view, morphism, or functional relation must be published in several readable faces for different readers without changing the underlying claim.

Use this when. The engineering team needs a plain view, technical card, interoperability card, or assurance lane that helps people read, inspect, exchange, or cite the same source-backed relation without turning the face into work occurrence, evidence, gate passage, engineering justification, control architecture, or release permission by presentation alone.

First output. One source-pinned publication face with the underlying U.Episteme, Description episteme, or Description episteme admitted for specification use, publication scope, face kind, admissible publication use, and any live downstream typed value named only as far as the current use needs, such as a GateDecision, evidence path, work occurrence, status source, or authority-reference relation.

Working action spine. Publish one source-pinned face -> separate source episteme or episteme-lane view, face, carrier, admissible publication use, and any live downstream typed value plus its governing FPF pattern/reference -> use the face for inspection, source-finding, review, exchange, or planning preparation -> output one source-pinned publication face -> apply the neighboring FPF pattern governing that claim if work, evidence, gate, engineering-justification, control, or release use becomes live.

Ordinary formality rule. If the face is used only for orientation, source-finding, review, comparison, or planning preparation, keep the publication light: one pinned face or compact card plus a clear admissible-use line is enough.

Load-bearing formality rule. Add the fuller MVPK record only when the face will be used for external-impact reliance, cross-context exchange, evidence citation, gate or release pressure, engineering-justification use, disputed interpretation, or another use where a concrete overclaim would change the next engineering move.

Stop condition. Do not create a new publication record merely because a face exists. Stop when the current face changes no next engineering move and blocks no concrete overclaim.

Admissible publication-use examples.

Admissible publication useSource-finding or bounded inspection with no downstream claim or effectNon-admissible publication use
A source-pinned MVPK face lets the team inspect one morphism, review it, exchange it, or prepare planning without changing the claim.A face helps planning preparation, but the team still needs to recover the method named by value, evidence, gate, control, or carrier source before work, evidence, gate, control, carrier, or other downstream use.A face, screen, export, or diagram is treated as performed work, gate passage, evidence, engineering justification, supervisory relation or control relation, or release permission by layout or readability alone.

Boundary aid pointer. If one encountered publication-facing item is easy to read as work, evidence, gate, approval, status, explanation, comparison, or narrower-use rendering, handle one claim being made or effect at a time using E.17:5.1d.

Here in the first-screen read, keep only the MVPK publication move: one source-pinned face, one admissible publication use, and neighboring FPF pattern governing that claims or typed downstream values only as far as the current use needs.

Not this pattern when. Not this pattern when the issue under repair is performed U.Work, a work plan, evidence path, provenance path, engineering justification, gate decision, control architecture, carrier work, OCR work, or a narrower-use rendering that needs its own source-bearing return. Use the FPF pattern that governs that issue.

Tech‑name: U.MultiViewPublicationKit (MVPK) Plain‑name: Multi‑view publication kit. The morphism-publication profile is the canonical formal profile. General publication-face form: one MVPK face is a U.View emitted over one source U.Episteme or episteme-lane U.View, under one publication U.Viewpoint, one U.PublicationScope, declared pins where needed, one face kind, and one admissible publication use. The face adds no claim by readable form. Evidence use, authority use, gate use, work use, release use, and engineering-justification use require the neighboring FPF pattern governing that claim and typed project-side value/reference that carry that downstream use, such as a GateDecision, evidence path, work occurrence, status source, or authority-reference relation. Canonical morphism profile (conceptual form): MVPK : (U.Morphism, Σ_viewpoints) ↦ U.ViewFamily with per‑viewpoint components ViewObj_s : U.Object → U.ViewObj_s and Emit_s(-) : U.Morphism → U.ViewMorph_s, such that (ViewObj_s, Emit_s) forms a functor U → View_s(U). For each s ⪯ t, a reindexing coercion PromoteView[s→t]_X : ViewObj_s(X) → ViewObj_t(X) exists and is natural in X: for every f : X → Y, PromoteView[s→t]_Y ∘ Emit_s(f) = Emit_t(f) ∘ PromoteView[s→t]_X (see Rules §6.2). Notation: Σ_viewpoints is abbreviated as Σ where convenient. Twin‑register aliases (naming discipline):Tech: Emit_PlainView, Emit_TechCard, Emit_InteropCard, Emit_AssuranceLane; PromoteView[s→t]_-. • Plain: PlainView(x), TechCard(x), InteropCard(x), AssuranceLane(x); “Promote to t”.

USM binding (overview): PublicationScope is a USM‑class object that parameterizes MVPK; see §5.0. Episteme lane. MVPK treats each face as a U.View in the sense of C.2.1 and E.17.0 (species U.EpistemeView). For any MVPK face, the source is a named U.Episteme or episteme-lane U.View; the face declares a publication U.Viewpoint (PublicationVPId) drawn from a U.ViewpointBundle (E.17.1 and E.17.2). In the morphism profile, every Emit_s(f) has EntityOfConcernSlot and DescriptionContext target f : U.Morphism. In a non-morphism publication, the face names the source episteme named by value, episteme-lane view, EntityOfConcern, or claim relation that the face publishes, and no functorial composition claim is live unless the corresponding FPF pattern supplies it. Slot discipline (ViewSlot and ViewRef) is inherited from C.2.1 and A.6.5 and is not redefined in MVPK.

Intent

Provide a disciplined way to publish one source episteme or episteme-lane view across multiple didactic faces without adding semantics, while keeping publication viewpoints explicit and auditable. The canonical formal profile is morphism publication: a small view-pack applied to any U.Morphism, including compositions, yields a family of views that commute with arrow composition and respect edition and measurement pinning.

Problem frame

  • Teams routinely need several faces of the same arrow: a TechCard for the catalog, an InteropCard for machine exchange, a PlainView for narrative, and an AssuranceLane for evidence.
  • Informal “renderings” quietly drift semantics; composite arrows are often published piecemeal, breaking traceability; evidence forgets unit, scale, and edition pins.
  • “View” and “viewpoint” are blurred in practice; authors conflate publication with mechanism.
  • publication-face/form discipline requires publication-face kind token discipline; Core allows only publication face/form or interop publication form; faces are named ...View, ...Card, or ...Lane (no ad‑hoc ...Surface kinds).

MVPK fixes this by making publication a typed projection from existing source epistemes or episteme-lane views via species of U.EpistemicViewing subject to explicit viewpoint specs and pinning guards. In the morphism profile, this projection is the functorial publication discipline for Description epistemes, including Description epistemes admitted for specification use, described below. Part E is conceptual: no machine-exchange formats are specified here.

Problem

  1. Semantic drift in publication. Unchecked “presentations” introduce claims not present in the Description epistemes about the arrow, including Description epistemes admitted for specification use (epistemes with DescriptionContext = ⟨EntityOfConcernRef, BoundedContextRef, ViewpointRef⟩ in the sense of E.10.D2 and E.17.0).
  2. Non‑compositionality. Publishing g∘f yields faces that do not match composing the faces of f and g.
  3. View vs viewpoint confusion. A single template is treated as “the view”, with no declared concerns or conformance rules.
  4. Unpinned numbers. Numeric claims lack unit, scale, reference‑plane, and edition pins from Part F or Part G, undermining auditability.

Forces

ForceTension
Compositionality vs legibilityPreserve arrow invariants across views ↔ keep each view didactic and audience‑appropriate.
Neutral naming vs domain idiomsUse vocabulary stable across domains ↔ allow local templates (SOPs, APIs, checklists).
Publication-face independence (A.7)Publication must not mutate I-, D-, and S-semantics ↔ authors expect rich presentations.
Evidence disciplineViews must cite CG‑Spec and CHR references ↔ authors want compact cards.

Solution — the MVPK Kit

USM scope binding (normative)

  • PublicationScope (USM). U.PublicationScope is defined in USM (A.2.6 §6.5) analogously to U.WorkScope and U.ClaimScope as a set‑valued scope object over U.ContextSlice. In MVPK, every emitted U.View SHALL declare a U.PublicationScope that bounds where that face is admissible.
    • Non‑overload rule. U.PublicationScope MUST NOT encode viewpoint choice, MVPK profile selection, or Publication Characteristics (PC); those are governed by PublicationVPId/U.Viewpoint and MVPK profile rules (§5.1/§5.2/§5.5).
  • Scope lineage. U.PublicationScope participates in the same USM lineage regime as U.WorkScope/U.ClaimScope (Δ‑moves, editioning and migration rules); MVPK emits faces under a declared PublicationScopeId.
  • MVPK profile (kit configuration). The canonical MVPK profiles (MVPK‑Min, MVPK‑Lite, MVPK‑SetReady, and MVPK‑Max) fix:
    • (a) the viewpoint index Σ and its partial order ,
    • (b) the admissible Publication characteristics (PC) and required pinning requirements,
    • (c) any cross‑Context or cross-plane constraints (Bridge and CL policies) applicable to emitted faces.
  • MVPK face-name quartet. The canonical MVPK-Max profile enumerates exactly four face kinds: PlainView (P), TechCard (T), InteropCard (I), AssuranceLane (A). MVPK face ids, publication-face kind values, claim quadrants, governingPatternRef, and local field values must not use an L-, P-, D-, and E-mnemonic; use the P-, T-, I-, and A-face-name initials only when an abbreviation is unavoidable.

Terminology (normative)

  • View (U.View): an episteme-lane view (U.EpistemeView in the sense of C.2.1 and E.17.0) produced under a publication viewpoint. In MVPK each face (PlainView, TechCard, InteropCard, AssuranceLane) is such a U.View. In the morphism profile its EntityOfConcernSlot and DescriptionContext target is a U.Morphism; in a non-morphism publication, the target is the source episteme named by value, episteme-lane view, EntityOfConcern, or claim relation named by the source. Every MVPK U.View SHALL declare: publication-face kind ∈ {publication face/form, interop publication form}, PublicationVPId : U.ViewpointRef, references to the underlying Description epistemes, including any Description episteme admitted for specification use selected by neighbouring gates, and a U.PublicationScope (USM §6.5). Any carrier rendering is separate U.Work on SCR and RSCR carriers and is not part of U.View.
  • Publication vs presentation vs rendering vs representation (guard):
    • Publication = typed projection from existing source epistemes or episteme-lane views into a U.View governed by a publication face/form or interop publication form publication-face kind via species of U.EpistemicViewing (A.6.3). In the morphism profile, the source epistemes are Description epistemes about a morphism, possibly under specification use when A.6.2, C.2.3, A.21, C.16, E.10, or another neighboring pattern governing the claiming gate grants that use. A.7 supplies the EntityOfConcern and Description-episteme boundary; publication expression does not turn that boundary into a three-member strict-distinction ontology.
    • Presentation = rhetorical arrangement of a published carrier; notation-neutral, adds no claims and is not a publication-face kind.
    • Rendering = display layout of a carrier, purely graphical formatting; U.Work on carriers (A.7), not a publication-face kind.
    • Representation = episteme↔referent relation (C.2.1, A.6.2 through A.6.4); not a publication operation and not a publication-face kind operation. Use publication and view here; treat presentation and rendering as U.Work on carriers (A.7).
  • ISO mapping note. ISO viewpointPublicationVPId (publication lane); engineering viewpointEngineeringVPId (E.TGA E.18:5.12). An ISO view may be a single MVPK face; “bundles” are packaging only.
  • No‑mechanism equivalence: MVPK is not a mechanism; any operational activity, such as build, render, or upload work, is separate U.Work by a system on carriers (A.7; see Rule 5 — No Γ-leakage in §6).
  • ViewpointSpec (U.Viewpoint) — a typed specification that declares stakeholders, concerns, conformance rules, allowed Publication Characteristics, and pinning requirements per profile. The index set Σ consists of identifiers of U.Viewpoint instances, typically drawn from U.ViewpointBundle species (E.17.1 or E.17.2) (see §5.3).
  • Explanation-use profile values. Existing faces may state an explanation-use profile value as SourcePinnedExplanation, SourceLinkedExplanationReconstruction, DidacticRetelling, or SpeculativeRetelling, but those are local profile values over already existing MVPK faces rather than new face kinds, explanation kinds, or carrier-rendering kinds. Per-face pins, provenance references, and no-new-A.6.B-boundary-claims discipline still apply.

Episteme-publication lane binding (normative)

For functional-description publications, MVPK governs the publication lane only.

Publication lane. A principle scheme, functional diagram, comparison table, screen, export, scenario, explanation, or code-like method description may help interpretation, source-finding, comparison, selected-method inspection, or work-planning preparation.

Unsupported neighboring claims. The publication does not by itself assert performed U.Work, gate passage, evidence, engineering justification, supervisory relation or control relation, release permission, or a new TGA kind.

Interface and protocol proximity. When interface, protocol, schema, boundary, or API wording appears beside a functional-flow description, keep the operational boundary, interface, or protocol claim with its own project claim set and typed project-side value named by value and reference, governed by the relevant FPF pattern such as A.6.B, A.6.C, or E.18. Do not absorb it into the functional-flow publication by layout proximity.

Retargeting. If the publication changes the EntityOfConcern or retargeting target from an already described component, process, material U.Entity, or source claim into a functional, control, or flow architecture claim, this is not a same-entity publication-use change. Use A.6.4, OntologicalReframing, or E.18 as applicable.

Source recovery. When a requested use requires an typed project-side value named by value and reference beyond the publication face, the engineer first recovers the corresponding existing project-side FPF value if one already carries the needed claim:

  • work-relevant source restoration under A.15.4;
  • project U.Method, U.WorkPlan, or work-result record under A.15;
  • evidence and provenance path under A.10;
  • engineering-justification record under B.3;
  • constraint or gate decision under A.20 or A.21;
  • supervisory or control architecture record under B.2.5;
  • carrier, export, OCR, or front-end record under A.7;
  • same-entity textual relation under A.6.3.CR;
  • representation relation under A.6.3.RT;
  • reduced-use-rendering relation under A.6.3.CSC.

No backdating. If no existing typed project-side value named by value and reference carries a claim that was supposed to already have a source relation, do not create a backdated source. Create only a prospective repair request, decision request, future work-plan entry, or explicit source-gap note, and treat the earlier claim or effect as unsupported until the required source exists.

Ordinary orientation and source-finding can stay as an inline note.

Functional-description guard (CC-MVPK-FD). A functional-description publication face must separate the source U.Episteme or episteme-lane U.View, the MVPK face, any live carrier or rendering work, the admissible engineering use, and non-admissible neighboring use. The guard applies only when a functional-description face is present; it is not the first universal MVPK conformance gate.

MVPK inherits the C.2.1 distinction between U.Episteme, U.EpistemePublication, publication form, U.View, carrier, and authority-reference relation. MVPK does not introduce a generic semio kind and does not let a publication face act as governingPatternRef, authoritySourceRef, or the source claim for a claim.

When a morphism publication is encountered or reused, name the relevant lane before relying on it:

  • the underlying U.Episteme, D episteme, or S episteme whose ClaimGraph is being projected;
  • the U.EpistemePublication or source U.Episteme publication when the episteme is available as a published episteme;
  • the publication form used by the local pattern, if one is live;
  • the U.View-typed MVPK face (PlainView, TechCard, InteropCard, AssuranceLane) that renders the publication for a viewpoint;
  • the SCR/RSCR carrier or rendering work that holds or displays it;
  • the typed project-side value named by value and reference or authority-reference relation when the next work or reliance claim depends on that named authority-reference relation, approval source, gate source, release source, or typed project-side value named by value and reference.

The practical payoff is that a reader can recover exactly what may be relied on: the episteme claim, the published form, the view, the carrier, the typed project-side value named by value and reference, or the authority-reference relation. A dashboard tile, generated explanation, card face, credential view, or carrier can guide source-finding, but it does not by itself become the source claim or effect, gate decision, evidence relation, assurance claim, role or status, work occurrence, or permission.

Source-exposure rule. A publication face, carrier, rendering, dashboard tile, credential view, status view, comparison unit, explanation rendering, signed decision memo, release decision record, approval speech-act publication, or gate dashboard may expose, cite, or carry an typed project-side value named by value and reference only when that value is recoverable under its governing FPF pattern and source relation named by value. It does not become that value by readability, layout, title, color, fluency, proximity, copying, generation, or reuse. When the exposed value is a real SpeechAct, GateDecision, evidence path, credential source, status source, U.Work occurrence record, U.Episteme, or U.EpistemePublication, rely on that typed and recoverable value and its FPF-governed source relation; otherwise treat the face, carrier, display, or rendering as orientation or source-finding only.

No retroactive source creation. When the required source relation is missing, a new entry can be only a prospective repair request, future decision request, prospective work-plan entry, or explicit source-gap note. It must not be read as earlier evidence, approval, gate passage, instituting speech act, U.Work occurrence, release permission, engineering justification, or assurance for the unsupported past claim or effect.

Shared source-relation and admissibility-status vocabulary

Use this vocabulary when a publication face, rendering, generated text, comparison note, narrower-use rendering, source-finding cue, or authority-looking display may be over-read as carrying a wider source relation or admissibility than it actually carries. The vocabulary names the source relation or claim-admissibility status for one claim or use. It does not instantiate evidence, gate, assurance, work, commitment, speech act, decision, release, or authority.

Source-relation or admissibility statusMeaning for the local claim or use
source-pointer-onlyThe item points to a possible source but does not show that the source is available, was used, or makes the claim recoverable.
source-relation-unknownThe item does not yet show whether the needed source relation exists or makes the local claim recoverable. This blocks the downstream use until checked; it does not show that the underlying world claim is false.
source-relation-not-neededNo operative work, reliance, evidence, gate, assurance, bridge, source-dispute, release, or durable-naming claim is live for this item. Orientation, learning, source-finding, review, or planning preparation may proceed without inventing a source relation.
source-not-recoverable-hereThe needed source relation may exist elsewhere, but it is not recoverable from this publication-facing item or its stated source refs. Treat the item as orientation or source-finding only, or reopen the source-bearing side.
source-relation-absentThe needed source relation is known absent from the current item and available source set for the stated use. Block that use; do not infer that the underlying world claim is false merely from this absence.
source-availableThe cited source can be recovered or inspected for the current use. This does not yet show that the rendering used it correctly.
source-retrievedThe cited source has actually been recovered for the current check. This still does not show that it was used correctly or makes the local claim recoverable.
source-usedThe inspectable generation, rewrite, rendering, comparison, work, or reliance source-use relation actually used the named source rather than only similar background. If that relation is unavailable, treat the item as pointer-only or orientation-only until a source-use relation is recovered.
source-faithfulThe item stays within the source claim relation for the stated use; omissions, declared source-loss modes, and additions are visible enough to inspect.
claim-recoverable-from-sourceThe local claim is recoverable from the source, declared correspondence relation, or required typed project-side value named by value and reference for the stated use.
claim-not-recoverable-from-sourceThe local claim is not recoverable from the source relation currently available.
claim-conflicts-with-sourceThe local claim conflicts with the available source relation.
claim-plausible-onlyThe claim may sound reasonable, but the source relation currently available does not carry it.
source-omittedRelevant source claim, source passage, qualifier, condition, alternative, caveat, or uncertainty is missing from the item.
source-loss-declaredThe item declares a source-loss mode such as omitted-detail, qualifier-loss, redaction, aggregation, scope-narrowing, recoverability-loss, representation-factor-loss, or coarsening-loss for the local source-to-rendering relation.
claim-widenedThe item turns a source possibility, hypothesis, bounded condition, low-confidence statement, narrower permission, or source-finding cue into a wider claim or use.
added-linkageThe item adds a causal, explanatory, bridge, comparison, work, evidence, gate, or authority relation not already carried by the source relation.
independent-verification-presentA separate check makes the local claim or use admissible independently of the item only through a named governing pattern and record named by value, such as an A.10 evidence path, B.3 assurance claim, A.21 GateDecision, A.20 constraint profile, A.15 U.WorkPlan, A.15.1 dated U.Work occurrence, or F.9 Bridge Card.
admissible-for-this-useThe item is admissible for the named use only; wider downstream use still needs the neighboring FPF pattern governing that claim and typed project-side value named by value and reference.
downstream-use-forbiddenThe item must not be used for the named downstream claim or effect because the needed source relation is absent, source-loss-declared, contradicted, or outside scope.
reopen-trigger-presentA stated change, dispute, use escalation, source update, context shift, missing source relation, or contradiction forces return to the source-bearing side or to the governing FPF pattern and typed project-side value named by value and reference.

Patterns may use shorter local field names such as sourceRelationStatus, explanationSourceStatus, or representationValidityStatus when the local object is clear. Comparative patterns split source-relation status from comparative-relation status instead of using one overloaded field. The local field must still be interpretable through the vocabulary above, and the admissible use must be named beside it when downstream reliance could change.

For ordinary use, only name the status distinction that changes the next admissible use. The common light states are source-pointer-only, source-relation-unknown, source-relation-not-needed, source-not-recoverable-here, admissible-for-this-use, downstream-use-forbidden, and reopen-trigger-present. The vocabulary is not an ordered scale, maturity ladder, source-record taxonomy, authority-reference source taxonomy, or project-side evidence and assurance/gate/work substitute. If a source relation is missing from the publication-facing item, only the unsupported downstream use is blocked; the missing relation does not by itself prove the underlying world claim false. If independent-verification-present is relied on, name the separate governing pattern and record named by value that performs that independent check: A.10 evidence path, B.3 assurance claim, A.21 GateDecision, A.20 constraint profile, A.15 U.WorkPlan, A.15.1 dated U.Work occurrence, or F.9 Bridge Card.

Shared use-boundary terms

Use these terms when a publication face, rendering, narrower-use rendering, explanation, comparison note, source-finding cue, or authority-looking display may be read beyond its named source relation. Define them once here and link back to this section from local patterns instead of minting local synonyms.

TermMeaning for FPF use
orientation useThe item helps a reader find, inspect, triage, compare, teach, discuss, or prepare planning while the item itself does not carry a downstream work, reliance, claim, or effect.
reliance useThe item is used as the source relation for an engineering claim or effect that changes a next work or reliance move, such as method choice, work plan, performed-work claim, release, gate, approval, role or status, evidence, assurance, or external-impact move.
work, reliance, claim, or effectA claim or instituted effect about method selection, selected method, U.WorkPlan, performed U.Work, work result, gate or release, role or status, evidence, assurance, boundary or policy effect, or another typed project-side value named by value and reference.
operative claimA claim whose acceptance would change the next admissible work or reliance move, the typed project-side value named by value and reference to recover, or the cross-context use of the item. Explanatory prose, examples, and source-finding cues are not operative claims unless they are used that way.
non-admissible downstream useA wider use that the current item source relation does not carry. It requires narrowing the use, returning to the source-bearing side, recovering the source relation named by value, or using the neighboring FPF pattern governing that claim and typed project-side value named by value and reference that governs the wider claim or effect.
reopen triggerA dispute, use escalation, missing, stale, or contradictory source relation, source update, context or window change, or wider claim or effect that requires source-bearing return, source refresh, re-expansion, or use of the governing pattern.
authority-looking caseA recognition phrase for an encountered item that may be over-read as permission, approval, evidence, gate passage, role or status, work occurrence, assurance, or release source relation. It is not a U.* kind, not an typed project-side value named by value and reference, and not a governing pattern.

Compact Boundary Aid For The Live Claim or Effect

When a publication-facing item, publication face, rendering, narrower-use rendering, explanation, comparison note, dashboard tile, credential view, status view, carrier, or generated item creates more than one possible reading, separate the claim being made or effect being used now and cite the source relation that evidences the operative claim for that claim or effect. This is a compact boundary aid, not a standing selection guide, project process order, software call path, or item taxonomy. The same encountered item may expose several typed records; handle one claim being made or effect at a time instead of pretending there is one overall governing relation for the encountered item.

Mixed-case precedence. When several publication-use patterns appear possible, repair the smallest unstable reading that changes the current admissible use before applying a neighboring pattern whose claim or effect is live:

  1. If one local head is the only unstable part, apply E.17.AUD.LHR or C.2.P and stop when the repaired sentence names the local kind, relation, and admissible use.
  2. If the bounded PublicationUnit or its primary EntityOfConcern reading is unstable, apply E.17.AUD or E.17.AUD.OOTD before using E.17.ID.CR or E.17.EFP.
  3. If the unit is stable and the live problem is comparison overread, apply E.17.ID.CR; use F.9, C.11, A.20, or A.21 only when equivalence, recommendation, selection, decision, gate, or release claim is actually being made.
  4. If the unit is stable and the live problem is explanation overread, apply E.17.EFP; use A.10, B.3, A.20, A.21, or A.15.4 only when evidence, engineering-justification, gate, release, work, or reliance claim is actually being made.
  5. If the live problem is a durable reusable name, UTS row, Core-facing term, or cross-context naming relation, apply F.18; otherwise keep the lighter local repair pattern.
Live claim or effect questionApply or recover
Is the item being used to guide a work or reliance move by appearance, while the acting user still needs the typed project-side value named by value and reference before proceeding?A.15.4 for the restoration step; the recovered value may then be A.15, A.15.1, A.10, B.3, A.20, A.21, A.2.8, A.2.9, A.6.B, or another typed project-side value named by value and reference. If that exact value is already the question under repair, use it directly.
Is the item being used as evidence, provenance, attestation, currentness, freshness, or claim-bound evidence relation?A.10 evidence, provenance, or currentness path for the claim named by value.
Is the item being used as engineering justification, assurance, confidence, readiness, or limitations relation?B.3 assurance or engineering-justification claim with evidence, limits, and decay explicit.
Is the item being used as gate passage, constraint validity, adjudication, or release decision source?A.20 or A.21 project records, including gate profile, constraint profile, decision record, log reference, scope, window, replay reference and freshness reference.
Is it the same EntityOfConcern with textual restatement only?A.6.3.CR Conservative Retextualization.
Is it the same EntityOfConcern with representation scheme or reasoning medium changed?A.6.3.RT Representation Transduction.
Is it deliberately reduced-use and useful only under narrower admissible use, non-admissible downstream use, and source-bearing reopen?A.6.3.CSC Controlled Semantic Coarsening.
Is the primary issue explanation-facing rendering class on an existing MVPK face?E.17.EFP ExplanationFaithfulnessProfile.
Is the primary issue one bounded comparative review unit over sources?E.17.ID.CR ComparativeReading.
Did the EntityOfConcern, target, ontology frame, or claim or relation record named by value change?A.6.4, OntologicalReframing, or the retargeting or reframing pattern named by value.
Is the item being used as bridge, substitution, equivalence, "same", "equivalent", "align", or "map" wording, or cross-context comparison relation?Use Part F and A.6.9 for repairing "same", "equivalent", "align", or "map" wording into explicit bridge work; use F.9 or F.9.1 for Bridge Cards, bridge kind, direction, CL, loss notes, admissible use, and stance overlays. Comparison alone is not a bridge.
Is the question under repair carrier, export, OCR, screen, front-end behavior, or work on carriers?A.7 and the exact carrier relation, front-end relation, or work-on-carrier record.

Evidence-path boundary. An A.10 evidence, provenance, attestation, freshness, or currentness path carries only the claim named by value it instantiates. It does not approve or authorize work, pass a gate, perform work, supply release permission, or raise assurance or engineering-justification use unless the typed project-side value named by value and reference that carries that downstream claim is also instantiated, such as A.15.4, A.15, A.20, A.21, or B.3.

Gate-display boundary. A dashboard tile, status view, or release screen may expose a gate decision only when the GateDecisionRef, gate or constraint profile version, target release or work scope, time window, currentness, freshness reference or replay reference, and evidence path are recoverable. Without that exact gate record, the display remains orientation or source-finding only; it is not a gate decision, gate passage, release permission, or performed-work record by color, label, layout, or proximity.

Local review fields are not FPF kinds

Local review fields and values in CR, RT, CSC, EFP, ID.CR, or a neighboring publication-use pattern are local review aids for one case. They are not U.Kind, publication-face kind, RelationKind, KindBridge, EvidenceKind, SlotKind, GateDecision, SpeechAct, Commitment, U.Work, publication face, authoritySourceRef target, or typed project-side value named by value and reference unless another governing FPF pattern explicitly instantiates that object. When a local field starts carrying one of those downstream claims, cite or apply the governing FPF pattern and typed project-side value named by value and reference that carry it.

Shared anti-overread invariants for publication-facing items

Use the FPF pattern that governs the claim being made or effect. Keep any local review field local, preserve reduced admissible use, and assign only the non-admissible wider claim or effect to its governing source relation.

Source-relation minimality. Name the smallest FPF source relation named by value sufficient for the use under repair. A source pointer, source-exposure relation, evidence path, engineering-justification record, gate decision, and release decision are different FPF relations; choosing one does not license another. Do not apply A.10, B.3, A.20, or A.21 when the use under repair only needs source finding, orientation, or inspection of an existing source U.Episteme, source U.EpistemePublication, or status-register entry.

Local repair vs publication redesign. A local epistemic precision repair is enough only when it can preserve the current publication face or PublicationUnit while fixing one head, boundary, source relation, admissible use, explanation class, or unsupported downstream claim. If layout, grouping, visual emphasis, comparison arrangement, generated explanation, hidden source limitation, or mixed EntityOfConcern packaging still induces overread after the local relation is repaired, create a redesigned publication face or PublicationUnit instead of adding warning text around the misleading form.

Most-likely careful reading constraint. Design and word a publication-facing item so its most likely careful reading does not exceed its named source relation, admissible use, and governing FPF pattern. A visible head such as Approved needs a visible GateDecision or a different head; a sorted comparison needs its comparator or sorting basis visible if no recommendation claim is intended; a generated explanation separates inferred links from pinned source claims by wording, label, or source reference.

Visual cue claim pressure. Layout, order, color, prominence, icon, grouping, and proximity are carrier or front-end cues that can carry publication-move pressure even when the words do not. Green color may imply readiness, top position may imply preference, grouping may imply equivalence, proximity to evidence may imply an evidence relation, a badge form may imply approval, and a lock or checkmark may imply verification. If the visual cue would make the reader treat the item as evidence, gate passage, decision, recommendation, reliance relation, bridge relation, or approval, recover the governing FPF pattern and project-side kind and reference named by value, or redesign the publication face so the overread is no longer invited.

Extraction survival. When a PublicationUnit is excerpted, quoted, screenshotted, summarized, copied into a tutorial, retold by a generator, or moved to a slide, it keeps only the claims, source pins, boundary line, references named by value, and admissible use carried in that extracted item. Any use that depended on hidden neighboring context is lost unless that context is carried by source pins, a boundary line, or an reference named by value. A dashboard screenshot does not carry the underlying gate record, a quoted comparison row does not carry the full comparison basis unless the basis is included or referenced, a copied explanation paragraph does not carry source pins unless pins remain recoverable, and a pattern excerpt does not carry the whole pattern boundary unless the excerpt states or cites it.

No-extra-pattern case. If a publication-facing item is admissible only for ordinary orientation, learning, source-finding, review, comparison, or planning preparation, and no operative work or reliance, evidence, gate, assurance, bridge, source-dispute, or release claim is live, keep the existing publication source relation and proceed with ordinary use. The visible closure may be: no operative work or reliance, evidence, gate, assurance, bridge, source-dispute, release, durable naming, or project-side source-relation claim recovered; ordinary publication wording remains admissible for the current use.

Pattern-inflation anti-pattern. Do not apply a neighboring pattern merely because the publication-facing item resembles a worked example. Apply the neighboring pattern only when a claim being made or effect changes the next admissible project move.

Strategic overread invariant. Apply the same anti-overread rules whether the misleading reading is accidental, conventional, incentive-driven, or intentionally induced by publication design. Green status color without GateDecisionRef, reviewed-looking wording without approval, selective source links without operative-claim source relation, comparison ordering without selection decision, hidden caveats behind a source link, or pins for trivial claims beside unpinned causal linkage do not create evidence, gate, decision, assurance, work, release, or bridge relation by design pressure.

Carrier-travel invariant. A copied, exported, screenshotted, summarized, generated, translated, or re-rendered publication-facing item may carry orientation or source-finding cues. It does not carry evidence relation, authority-reference relation, gate passage, approval, engineering-justification relation, work occurrence, currentness, or release source relation unless the governing FPF pattern and typed project-side value named by value and reference remain recoverable for that use named by value.

Derivative-chain decay. A second-order rendering inherits at most the admissible use that is explicitly carried from the prior source relation. It does not inherit source faithfulness, evidence relation, currentness relation, authority-reference relation, gate decision, work relation, or reliance relation by default.

Publication-face snapshot and refresh identity. A publication face may keep the same visible layout, face name, or carrier while its source pins, source data window, source-relation status, freshness or currentness relation, EditionId, or admissible use changes. Visual sameness across time is not source, evidence, or use-boundary sameness. When a refreshed, revised, translated, regenerated, screenshotted, or re-rendered face is used beyond orientation or source-finding, name the face edition or snapshot, the source pins or data window that still carry the claim, and any changed admissible use. If those cannot be recovered, treat the face as orientation or source-finding only, or reissue the face under the governing pattern before work, evidence, gate, assurance, release, or reliance use continues.

Claim-level source relation only. Do not assign one whole-item source-relation status unless every operative claim in that publication-facing item has the same source relation named by value for the same use and non-admissible downstream uses are explicit.

Modality and deontic-force preservation. Publication-facing transformations must preserve possibility, obligation, permission, recommendation status, decision status, confidence, scope, and temporal window when those are load-bearing. If one of these changes, narrow the admissible use or apply the governing pattern that carries the changed claim or effect. Comparison does not become recommendation or decision; explanation does not become evidence; a publication face does not become authority; a publication unit does not smuggle a downstream effect; source-linked does not mean source-admissible for reliance; ready-looking does not mean gate-passed.

This preservation rule also applies across extraction, translation, screenshotting, summary, and generated retelling. A translated permission is not wider permission, a screenshot of approval-looking display is not an approval record, a summary of evidence is not an evidence path, and a generated retelling of a decision is not the decision record unless the source relation that evidences the operative claim and source pins survive in the new publication-facing item.

Reader position is not project role. Reader position, audience, target user model, verifier position, reviewer position, and learner position do not become project roles, role assignments, decision authority, gate authority, issuer roles, or work roles unless a typed project-side value and reference instantiates that role relation.

Source-gap states. When the source relation is missing, say which source gap is present: source not named; source named but unavailable; source available but not used; source used but insufficient; source stale or outside its window; source contradicted; source accountable role or register mismatch. Block only the unsupported effect and keep any reduced admissible use available.

Measure and display overread. A number, score, percentage, color, rank, confidence value, similarity value, dashboard state, or measurement display is orientation only until the measurement source, aggregation rule, validity window, population or scope, calibration or evidence path, and intended use are governed by the typed project-side value named by value and reference. Evidence-like use applies A.10; assurance-like use applies B.3; gate-like use applies A.20 or A.21; work or reliance use applies A.15.4 and then the recovered typed project-side value named by value and reference; bridge or substitution use applies F.9 or F.9.1.

World-contact stop. Publication-facing items do not self-refresh after source update, revocation, policy change, system-state change, incident, model update, environmental change, or new external observation. A live outside change requires source refresh, reissued publication, or a new governed typed project-side value named by value and reference before work, evidence, gate, control, carrier, or other downstream use continues.

Functional-description boundary. A functional, architectural, descriptive, representational, or explanatory fit claim does not create permission, obligation, approval, gate passage, release source relation, performed-work evidence, or engineering justification. Those uses require the neighboring FPF pattern governing that claim and typed project-side value named by value and reference.

Mixed bundle no-shared-evidence-relation rule. A bundle with source-pinned, reduced-use, speculative, didactic, comparison, and evidence-facing parts cannot be read under one shared evidence relation or admissible-use status borrowed from another member. Each operative claim keeps its own source relation and non-admissible downstream use.

Educational usefulness. Didactic, onboarding, tutorial, and workshop usefulness is real orientation aid. It is not evidence, gate passage, approval, work occurrence, engineering justification, release permission, or bridge relation.

Comparison exposes conflict; it does not adjudicate it. A comparison note may expose contradiction, asymmetry, different foregrounding, or unresolved residue. It does not settle the conflict, select an option, approve release, pass a gate, or create bridge relation or substitution relation unless the neighboring FPF pattern governing that claim and typed project-side value named by value and reference carry that result.

Same publication-facing item, multiple readings. A green release dashboard can be one MVPK face for source-finding, an A.10 currentness path or evidence path when the evidence query is recoverable, an A.21 gate-decision view when the GateDecisionRef is recoverable, or an unsupported release cue when those sources are missing. A generated comparative explanation can be an E.17.EFP explanation-use case, an E.17.ID.CR comparison case, a A.6.3.CR generated-summary case, or source-finding only; it is never all of those under one shared evidence-relation class or admissible-use value by fluency alone.

Archetypal publication-use cases. Use these as quick recognition slices, not as a closed taxonomy:

  • Green dashboard tile. A tile says Model ready. Treat the tile as the PublicationUnit when that tile carries the live release overread. The useful action is source-finding and status orientation unless an exact GateDecisionRef, gate profile, source relation, and evidence or currentness relation are recoverable. Without those, the tile is not release permission or gate passage by green color or placement.

  • Generated explanation with source links. A generated text explains a method and cites sources. The explanation rendering is not source replacement. Source links carry only the pinned operative claims they actually carry. If work or reliance is live, use A.10 for the evidence path named by value or keep the rendering as reader help; if the rendering is deliberately reduced-use, use A.6.3.CSC.

  • Comparison table. A table compares two methods and places one first. Ordering is not selection. The comparison basis, source references, shared review frame, and unsupported downstream claim remain visible. Choice or decision needs C.11; equivalence or bridge relation needs F.9 or F.9.1.

  • Unrecovered source wording. A draft uses source-object wording, undeclared interpretive-view shorthand, or generic unit wording without naming the FPF kind. Recover the FPF kind stack instead of minting source-relation pseudo-kinds or undeclared interpretive-view pseudo-kinds. Use PublicationUnit only when a bounded reader-inspected unit inside a publication is live; otherwise use the exact episteme, view, publication, carrier relation, section of a named non-pattern FPF publication form whose reader-help function and reference are recoverable, A.6.P relation claim, or typed project-side value named by value and reference.

  • Translated tutorial. A translated tutorial may improve reader access to an FPF pattern. It is a derivative rendering, not the original source. Operative claims need source mapping for reliance, translated heads may need E.17.AUD.LHR or C.2.P, and F.18 is live only when durable naming, UTS, Core-facing, or cross-context naming work is intended.

Practical harm prevented by neighboring pattern. Use this map when the reader asks what the discipline buys in practice:

Blocked overread with useful action remaining.

  • A comparison table appears to select option B. Block the selection reading when no C.11 ChoiceResult, decision record, or visible selection basis exists. Useful action remains: use the table as a bounded comparison under E.17.ID.CR, or apply C.11 when selection is intended.

  • A green dashboard tile appears to permit release. Block the release or gate-passage reading when no GateDecisionRef, gate profile, evidence or currentness relation, and source relation are recoverable. Useful action remains: use the tile for source-finding and status orientation, then inspect the exact gate or evidence source if release work is intended.

  • A generated explanation appears to prove a causal relation. Block the evidence or assurance reading when source pins and evidence path are absent or insufficient. Useful action remains: use the explanation as reader help or source-finding, then apply A.10 or B.3 only for the evidence named by value or engineering-justification claim they govern.

  • C.2.P prevents the wrong object from being treated as source, the wrong relation from being treated as source relation, and a loose phrase from being treated as an FPF kind.

  • E.17.AUD and E.17.AUD.OOTD prevent action on a publication unit whose primary entity of concern, carried publication move, or outside boundary shifted silently.

  • E.17.ID.CR prevents a comparison unit from being used as decision, equivalence, bridge, evidence, or release basis.

  • E.17.EFP prevents fluent explanation from laundering unsupported claims into reliance, assurance, gate, or evidence use.

  • E.17 MVPK prevents a readable publication face from being treated as evidence, gate, work, authority, or release source relation by display quality.

  • F.18 prevents a local name from becoming global identity without context, kind, lineage, and bridge or cross-context naming relation.

Anti-escalation examples. Do not apply a neighboring pattern when its claim being made is absent:

  • Do not apply F.18 when a one-off local phrase repair restores the local kind, relation, and admissible use without minting a durable reusable name.
  • Do not apply A.10 when the publication-facing item is not being used for reliance, evidence, provenance, currentness, or claim-bound evidence relation.
  • Do not apply A.21 when a dashboard tile is merely status orientation and no GateDecisionRef or gate profile is live.
  • Do not apply F.9 when a comparison does not claim sameness, substitution, bridge relation, or cross-context equivalence.
  • Do not apply E.17.EFP when the text is only a same-entity rewrite or representation change governed by A.6.3.CR or A.6.3.RT.

Concrete reopen trigger. A reopen trigger must name the condition and the nearest source-bearing side or governing pattern. A vague "reopen if needed" does not preserve the source relation.

Allowed publication-face kind values at Part E (publication-face/form discipline discipline)

Part E restricts publication-face kind values to publication face/form and interop publication form. Concrete publication faces SHALL be named ...View, ...Card, or ...Lane.

USM linkage (normative). Every U.View SHALL declare a U.PublicationScope (USM §6.5). For a view about an episteme E: PublicationScope(view_E) ⊆ ClaimScope(E). For a view about a capability C: PublicationScope(view_C) ⊆ WorkScope(C). This is the publication scope of a capability description, not permission to perform work and not evidence that work occurred. Work admissibility still requires A.15.4 source restoration when the view is used for work or reliance, and the A.15 role, method, plan, and work source relation for the actor, target, context, scope, and time window in use. Cross‑context views SHALL cite Bridge + CL; CL penalties apply to R only (scope membership unchanged).

L‑PUBSURF naming discipline

  • Allowed publication-face kind values: publication face/form, interop publication form.
  • Concrete faces MUST be named ...View, ...Card, or ...Lane.
  • The tokens carrier, bearer, and holder MUST NOT name a U.View or any publication entity. Use U.View (PlainView, TechCard, InteropCard, or AssuranceLane) for conceptual publication faces. Reserve carrier exclusively for SCR/RSCR (symbol, document, or data carriers) and U.Work on carriers.
  • Avoid geometric metaphors such as axis or dimension for publication forms; use Characteristic or CharacteristicSpace only when referring to CHR‑MM entities.
  • Non‑collision guard. ViewFamilyId (lexical tag for viewpoint families) MUST NOT be used to name any U.View or publication-face kind; MVPK face kinds remain {PlainView, TechCard, InteropCard, AssuranceLane} only.

MVPK‑Max viewpoints (normative; exactly four; governed by the MVPK profile):

  • PlainView (explanatory prose view)
  • TechCard (typed catalog card)
  • AssuranceLane (evidence bindings and lanes)
  • InteropCard (conceptual interoperability view; mapping to concrete exchange formats lives in the interop annex; Part E does not specify schemas)

AssuranceLane may expose evidence bindings, evidence-carrier references, pins, and presence bits. It is not a B.3 assurance claim, readiness or confidence verdict, engineering-justification record, or evidence-sufficiency result. When a published face is used to raise or lower assurance, readiness, confidence, limitation, or engineering-justification result, the governing source relation is B.3; the lane only helps recover the cited evidence bindings.

Lean profiles (small‑team friendly, optional; as MVPK kit profiles):

  • MVPK‑Min (F0–F1): Σ = {PlainView, TechCard‑Lite}. AssuranceLane omitted. No interop face.
  • MVPK‑Lite (F1–F3): Σ = {PlainView, TechCard‑Lite, AssuranceLane‑Lite gated by crossing trigger}. InteropCard only if external consumers exist.
  • MVPK‑SetReady (F3–F5): add InteropCard when replayability or external interchange is required (details outside Part E).
  • Profile‑upgrade triggers: (i) cross‑Context reuse or ReferencePlane crossing; (ii) QD replay needs or OEE replay needs; (iii) external consumption.
  • “‑Lite” variants (definition): A ‑Lite face removes optional fields only (never claims), keeps the same typing as its full counterpart, and MUST retain pins for any numeric content. Upgrading from ‑Lite to full is a monotone add‑fields operation (no retractions).

The kit (constructs)

  1. Object component ViewObj_s for each viewpoint (see §5.1), to make types explicit.
  2. Viewpoint set Σ : FinSet(U.Viewpoint) with declared partial order for formality or refinement (default chain: PlainView ⪯ TechCard ⪯ InteropCard; AssuranceLane is an independent evidence-binding face and not ordered with respect to others).
  3. Emitters Emit_s(-) : U.Morphism → U.ViewMorph_s (one per s ∈ Σ).
  4. Coherence (rules and invariants §6) + Pin Characteristics policy (UnitType, ScaleKind, ReferencePlane, and EditionId) for any numeric or comparable content, grounded in CHR and UNM.
  5. Interop concern references (conceptual) for InteropCard (concerns and semantics only); any concrete schema or exchange mapping is outside Part E (Annex or Interop).

Result: MVPK(f, Σ) returns U.ViewFamily(f) whose components are Emit_s(f). Reindexing across s ⪯ t is mediated by total view-object coercions PromoteView[s→t]_X (see §6.2).

EntityOfConcern-side input and output vs publication (normative convention)

  1. Input and Output are signature-side declarations. The Input and Output sections of a morphism describe declared input and output data or episteme types under the morphism signature; they do not depend on any publication face.
  2. No duplication on faces. MVPK faces do not duplicate Input and Output lists; they publish a minimal profile: presence‑pins, CG‑Spec and CHR references, and EditionId only.
  3. Signature reserved to signature-governed entities. Use “Signature” only for entities already governed by signature patterns, such as U.Signature. On faces, avoid “signature” and use TechName or PlainName.
  4. Admissible orders, return sets. Whenever a face shows selection or comparison, it returns sets or admissible partial orders and never hides scalarization; cite a ComparatorSetRef for any total order.
  5. Bridge crossing penalties. Crossings cite Bridge and CL; publish Φ(CL) and Φ_plane ids; penalties apply to R only (never F or G).
  6. Carrier references and lanes. On first mention, name carrier references (SCR/RSCR); keep Work occurrences distinct from epistemic claims via lanes.
  7. Publication ≠ execution. No time or resource semantics on faces; any build, render, or upload work is separate U.Work.

Pin & Publication characteristics (normative; never “axes”)

Intent. Make pinning and publication-time measurement claims explicit, typed, and auditable without importing geometric metaphors. This section introduces Publication characteristics (PC) as CHR-grounded, publication-facing facets that can admissibly appear on MVPK faces.

Terminology (aligned with CHR‑MM & UNM).

  • Characteristic (U.Characteristic): a measured aspect as defined in CHR‑MM (entity characteristic or relation characteristic with a chosen Scale).
  • CharacteristicSpace (U.CharacteristicSpace): a CHR‑typed product of slots used by dynamics and measurement theories (A.19).
  • Publication characteristic (U.PubCharacteristic, PC): a declarative facet that a view, card, or lane may expose about a morphism under a stated Viewpoint. Each PC is backed by CHR and CG‑Spec publications and pinned by unit, scale, reference‑plane, and edition. PCs are not geometry and do not define “axes”.

PC catalog (initial set). MVPK defines a minimal open set of PCs that are frequently shown on publication faces:

  • PC.Number — numeric or comparable entries (thresholds, budgets, counts). Pins required: unit, scale, reference‑plane, edition.
  • PC.EvidenceBinding — bindings to evidence carriers and policies (e.g., PathSliceId, BridgeId, CL notes).
  • PC.ComparatorSetRef — an explicit comparator family for admissible partial orders on faces.
  • PC.CharacteristicSpaceRef? — optional pointer when a face needs to cite the space in which a claim is interpreted (e.g., dominance on a declared space). The catalog MAY be extended (see “Extensibility” below); PCs must remain declarative (no embedded mechanisms).

Norms (E17‑PC).

  • E17-PC-1 (CHR grounding). Every PC that yields numeric or comparable content SHALL cite CHR and CG-Spec references and carry pins {unit, scale, reference-plane, edition}.
  • E17‑PC‑2 (Lexical discipline — no geometry). Faces and PCs MUST NOT use “axis”, “dimension”, or geometric metaphors; use Characteristic, slot, CharacteristicSpace where applicable (E.10; see also A.19).
  • E17‑PC‑3 (No hidden arithmetic). Faces MUST NOT smuggle aggregation or normalization; any such logic lives in CG‑Spec (UNM or NormalizationMethod) and is cited by …Ref.edition.
  • E17‑PC‑4 (Plane & crossing). When a PC depends on ReferencePlane or crosses ReferencePlane crossings or Context crossings, the face SHALL cite BridgeId and CL policy‑ids; penalties apply to the R‑channel only.
  • E17‑PC‑5 (Edition pinning). PCs that rely on maps or distances SHALL pin DescriptorMapRef.edition, DistanceDefRef.edition, and, if used, both CharacteristicSpaceRef.edition and TransferRulesRef.edition.
  • E17‑PC‑6 (Viewpoint scope). Each PC instance declares the Viewpoint under which it is valid; promotion PromoteView[s→t] MUST NOT add or widen claims; at most, it reindexes or annotates.
  • E17‑PC‑7 (Comparator or SetSemantics edition). PC.ComparatorSetRef and any SetSemanticsRef SHALL carry edition identifiers; cards MUST be re‑emitted upon edition change with migration notes.

Publication faces and responsibilities.

  • PlainView MAY include PC.Number iff fully pinned; otherwise it uses compare‑only language.
  • TechCard SHOULD carry PC.Number, PC.ComparatorSetRef, and PC.CharacteristicSpaceRef? when faces enable admissible ordering.
  • AssuranceLane SHALL carry PC.EvidenceBinding and the pins for any numeric claims it relays.
  • InteropCard MAY reference PCs conceptually but SHALL remain notation‑neutral in Part E (schemas map in the interop annex).

Rationale. MVPK is a publication discipline, not a measurement calculus. By naming Publication characteristics and pinning them to CHR and UNM, we:

  1. prevent geometric leakage (no “axes”);
  2. keep publication neutral yet auditable;
  3. enable admissible set and ordering behavior on faces via explicit ComparatorSet;
  4. make plane-crossing requirements first-class and checkable by declared publication checks or OperationalGate(profile) GateChecks.

Extensibility.

  • E17‑PC‑Ext‑1 (Open catalog). New PCs MAY be added under U.PubCharacteristic provided they are declarative and CHR- and UNM-grounded.
  • E17‑PC‑Ext‑2 (Kinding). New PCs MUST declare kind ∈ {Number, EvidenceBinding, SelectorHint, ...} and a pinning requirement.
  • E17‑PC‑Ext‑3 (Twin‑register names). Supply Tech and Plain twins; avoid tokens that collide with E.10 bans; do not coin “…Space” names for publication forms.
  • E17‑PC‑Ext‑4 (Edition discipline). If a PC depends on a definition or specification publication, edition‑pin the reference (…Ref.edition) and document migration rules.

Adding invariants.

  1. Place new invariants for PCs in CG-Spec (specification lane), not on faces; supply acceptance tests.
  2. Version any affected CharacteristicSpace; publish embeddings if semantics change; never mutate slots in place.
  3. Update the relevant GateChecks or GateProfiles (A.21, including GateCrossing checks and crossing-visibility checks from E.18, F.9, and relevant Part G bridge or crossing wiring) to warn or block on invariant violations; never weaken functorial invariants.
  4. Document edition and migration rules; extend §9 with a conformance item and provide Lean‑profile downgrade (advisory vs block) where applicable.

Author ergonomics (non‑normative)

Quick author steps (three steps and a micro-template):

  1. Declare Σ and profile. Choose {PlainView, TechCard, …} and whether faces are full or ‑Lite.
  2. Pin once, reuse everywhere. Attach {UnitType, ScaleKind, ReferencePlane, EditionId} to the arrow; cards reference these pins by ID (no duplication).
  3. Emit & verify. Generate all faces from the arrow.

Guidance: treat ‑Lite as field‑drop only; never add claims in ‑Lite.

Rules and Invariants (normative)

Publication-composition local test bundle. A face that claims compositional publication passes only when five local tests are visible:

  1. identity: Emit_s(id_X) is the identity view for ViewObj_s(X).
  2. composition witness: the published face for g∘f matches the composition of the published faces for f and g, or the face is marked non-compositional or explanatory-only.
  3. no-new-claim diff: red-line against the governing Description episteme, including any Description episteme admitted for specification use, shows formatting, indexing, pinning, or view-refinement work only.
  4. monotone promotion: promotion from a plainer face to a richer face adds fields, pins, or typing without retracting or strengthening the source claim.
  5. scope non-widening: PublicationScope stays within the relevant ClaimScope or WorkScope, and promotion does not widen it.

For any composable arrows X —f→ Y —g→ Z in U, and any s, t ∈ Σ_viewpoints:

  1. Functoriality & typing (per‑viewpoint).
    • (a) Identity: Emit_s(id_X) = id_{ViewObj_s(X)}.

    • (b) Composition: Emit_s(g∘f) = Emit_s(g) ∘ Emit_s(f). A face that claims compositional status carries a local witness: compare the published face for g∘f with the composition of the published faces for f and g. If the witness is absent or fails, mark that face non-compositional or explanatory-only and do not use it to satisfy the composition rule.

    • (c) Typing (totality): if f : X → Y then Emit_s(f) : ViewObj_s(X) → ViewObj_s(Y) is total; ill-typed composites must be fixed via ViewObj_s, not by weakening invariants.

    • Intuition: every viewpoint acts functorially on arrows; publication does not break arrow algebra.

  2. Reindexing coherence (monotone refinement + naturality).
    • (a) If s ⪯ t then the t‑view refines the s‑view for the same morphism (no content extension; increased formality and typing only).
    • (b) For each s ⪯ t there are object‑components PromoteView[s→t]_X : ViewObj_s(X) → ViewObj_t(X) natural in X, i.e., for every f : X → Y PromoteView[s→t]_Y ∘ Emit_s(f) = Emit_t(f) ∘ PromoteView[s→t]_X.
    • (c) Coherence: PromoteView[s→s]_X = id_{ViewObj_s(X)}, and if s ⪯ t ⪯ u then PromoteView[s→u]_X = PromoteView[t→u]_X ∘ PromoteView[s→t]_X for all X.
    • Defaults: PlainView ⪯ TechCard ⪯ InteropCard.
    • Note: AssuranceLane is independent of the formality chain; it binds evidence‑about‑claims and MUST NOT introduce new claims of the morphism.
  3. Description-source and specification-use sourcing and EpistemicViewing compatibility (A.7 and E.10.D2, A.6.2A.6.3, E.17.0).
    • (a) Inputs to Emit_s(-) are existing Description epistemes about the same arrow (for example, MethodDescription, MethodSpec when specification use has been granted by neighboring pattern governing the claiming gates). MVPK does not redefine, collapse, or create EntityOfConcern-to-Description or specification-use mechanisms.
    • (b) Each Emit_s(-) SHALL be realised as a species of U.EpistemicViewing (A.6.3) over those Description epistemes: entityOfConcern‑preserving, effect‑free and conservative in the sense of A.6.2 and A.6.3. Publication adds no new commitments beyond what is present in the referenced Description episteme.
    • (c) Edition governance respects U.EditionSeries and UTS; rows remain the row identity handles for names; MVPK faces MUST be (re‑)emitted when the underlying Description-episteme or specification-use editions change.
  4. Pin discipline (Part F and Part G).
    • Any numeric or comparable content in a view SHALL pin {UnitType, ScaleKind, ReferencePlane}. EditionId MAY be coarse at Lean profiles; if units and scale are unknown, declare ordinal compare-only and forbid arithmetic until CHR pins are available. Pins upgrade monotonically with profile and risk.
  5. No Γ‑leakage (publication independence). Publication morphisms carry no Γ_method, Γ_time, or Γ_work semantics. Any build, render, or upload activity is separate U.Work by a system on carriers (A.7). Lean assurance lane: AssuranceLane‑Lite MAY expose only presence bits for {PathId or PathSlice?, Γ_time window?, BridgeId?}; unknowns propagate (tri‑state) with an explicit {degrade|abstain|sandbox} policy note.
  6. Carrier provenance. Every emitted view records its SCR/RSCR ids on first occurrence (A.7 §5.6).
  7. Isomorphism preservation.
    • If f is an isomorphism in U, then Emit_s(f) is an isomorphism in View_s(U); inverses map accordingly.
  8. Cross‑Context and ReferencePlane bridging.
    • If a view crosses contexts or reference planes, it SHALL cite the Bridge + CL policy ids (A.7 §5.8, bridge crossing). Such crossings MUST be explicit on TechCard and AssuranceLane.
  9. Totality of publication morphisms.
    • Publication maps are total on their domains; when a composition in a view would be ill‑typed, the author must fix the view-object mapping (via ViewObj_s) rather than weakening functoriality or reindexing rules.
  10. PublicationScope discipline (subset & composition).
    • (a) Subset rule: If a view v is about episteme E then PublicationScope(v) ⊆ ClaimScope(E); if about capability C then PublicationScope(v) ⊆ WorkScope(C) only as the publication scope of a capability description, not as work admissibility, gate passage, release permission, or evidence that U.Work occurred.
    • (b) No widening by refinement: If s ⪯ t, then promotion PromoteView[s→t] MUST NOT widen PublicationScope.
    • (c) Compositional bound: For composable arrows X —f→ Y —g→ Z, PublicationScope(Emit_s(g∘f)) ⊆ PublicationScope(Emit_s(g)) ∩ PublicationScope(Emit_s(f)).

Structure & participants

                 Σ_viewpoints

            ┌─────────┴─────────┐
            │                   │
        Emit_s(-)           Emit_t(-)      … (family)
            │                   │
U :  X ──f──▶ Y ──g──▶ Z    X ──f──▶ Y ──g──▶ Z
        U.ViewMorph        U.ViewMorph
            │                   │
        Emit_s(f),…         Emit_t(f),…
  • Author chooses Σ_viewpoints (declared concerns + conformance rules).
  • MVPK emits U.ViewFamily(f) for each arrow f.
  • Declared publication checks verify that pins, source references, and IDs are present and that MVPK invariants are respected. Use OperationalGate(profile) GateChecks only when a live project gate profile actually governs the next project move.

Examples (SoTA-aligned Local Tests)

Read these examples as local tests for MVPK invariants, not as source citations by reputation.

  1. Composite service pipeline (InteropCard + AssuranceLane). f: Parse → Normalize, g: Normalize → Score. InteropCard(g∘f) is an interoperability view whose path set equals the relational composition of the two cards; AssuranceLane(g∘f) cites test records as evidence carriers with edition pins. (Carriers, not semantics; concrete envelope formats are outside Part E.)

  2. Control loop morphism (TechCard + PlainView).

    • For h: Setpoint → Actuation, TechCard(h) is a typed card with units; PlainView(h) narrates the same mapping with no new claims. (Monotone formalization echoes refinement‑typed stacks.)
  3. Optics-informed composition witness.

    • Profunctor and optic accounts are useful only as a source idea for why compositional publication matters. The local FPF test is still the MVPK witness: emit the face for g∘f, compose the emitted faces for f and g, and compare them. If the comparison is not supplied or fails, the face stays non-compositional or explanatory-only; optics vocabulary does not carry the rule by analogy.
  4. Functional-description publication (PlainView + TechCard). A principle scheme or functional diagram can publish a readable relation from signature or principle episteme content to method-family selection, selected method, U.WorkPlan, performed U.Work, work-result record, and result measurement. The MVPK faces may help a team inspect that relation and prepare a work plan, but they do not turn the diagram, table, screen, or export into work occurrence, gate passage, evidence, engineering justification, or supervisory or control architecture. For those uses, the team first recovers the existing typed project-side value named by value and reference that carries the claim when available: work-relevant source restoration under A.15.4, project U.Method, U.WorkPlan, and dated U.Work occurrence under A.15 and A.15.1, evidence or provenance path under A.10, engineering-justification record under B.3, gate or constraint decision under A.20 or A.21, or supervisory or control architecture record under B.2.5. If no existing source carries the needed claim, create only a prospective repair request, future decision request, prospective work-plan entry, or explicit source-gap note; do not backdate evidence, gate passage, work occurrence, release permission, engineering justification, or assurance for the earlier claim.

Conformance checklist (normative)

CC-MVPK-FD is the functional-description guard in §5.1a. It is conditional on a functional-description publication face and must not read as the first universal MVPK gate.

A conformance check is retained only if it changes the next admissible use of the publication face, blocks a concrete overclaim, or preserves a source reference or reopen condition needed for the declared admissible use.

Core ordinary checks

IDRequirementPractical test
CC‑MVPK‑1 (Viewpoint explicit)Each view declares its Viewpoint (stakeholders, concerns, conformance) as a publication U.Viewpoint.Cards show PublicationVPId (or equivalent publication‑viewpoint field) and concerns.
CC‑MVPK‑3 (No content extension)PlainView, TechCard, and InteropCard add no new claims beyond the underlying Description epistemes, including Description epistemes admitted for specification use.Red‑line vs Description episteme, including any exact specification-use source, shows only formatting or indexing.
CC-MVPK-4 (Pins and source references)Numbers and thresholds pin {...}. Lean exception: at MVPK-Min or MVPK-Lite profiles, EditionId MAY remain coarse; ordinal claims are admissible only as compare-only (no means or z-scores).Validation shows pins present or compare-only mode engaged.
CC-MVPK-4j (PublicationScope present)Each view declares U.PublicationScope (USM §6.5).Field present; presence-bit green.
CC-MVPK-5 (Carrier reference)First mention includes SCR/RSCR ids when carrier work or rendering work is live.SCR ids visible on the card when used.

Conditional checks

IDRequirementPractical test
CC‑MVPK‑0 (Lean publication guard)For Lean profiles, a minimal guard runs: (i) set‑returning selection present; (ii) ReferencePlane present; (iii) any crossing cites BridgeId+CL with penalties applied to R only.Validation report shows presence bits; penalties apply to R only.
CC‑MVPK‑2 (Functoriality)Emit_s(id) is identity; Emit_s(g∘f) = Emit_s(g)∘Emit_s(f).Compose two cards and diff with the card of the composite.
CC‑MVPK‑3b (Boundary claim‑set integrity)If a published arrow is a boundary, interface, or protocol and an A.6.B claim set exists (L-*, A-*, D-*, and E-*), then any normative text on faces MUST be traceable to that claim set (prefer claim‑ID citations); faces MUST NOT become a second boundary specification.Lint flags uncited normative clauses; faces reduce to {claim‑ID citations + informative commentary}.
CC‑MVPK‑4b (Lean assurance)If AssuranceLane‑Lite is used, presence bits for {PathSliceId?, BridgeId?} suffice; full evidence-carrier lists stay with the governing evidence source.Presence bits visible; required evidence-carrier refs stay outside Lite.
CC-MVPK-4c (Input and Output vs publication)Faces do not restate Input and Output; they carry presence-pins, source references, and EditionId only.Face inspection shows no Input and Output duplication.
CC‑MVPK‑4d (Admissible orders)Any selection or comparison on faces returns sets or admissible partial orders with a ComparatorSet citation.No hidden scalarization; ComparatorSetRef present.
CC‑MVPK‑4e (Signature on faces — banned)The term “signature” is not used on faces; use TechName or PlainName.Token scan: no “signature” on faces.
CC‑MVPK‑4f (PC discipline)Any numeric or comparable publication uses Publication characteristics (PC) and carries pins {unit, scale, reference‑plane, edition}.Cards show PC fields + pins; validation passes.
CC‑MVPK‑4g (No axis or dimension)Faces avoid “axis”, “dimension”, and “plane” metaphors except ReferencePlane; use CHR terms (Characteristic, slot, or CharacteristicSpace).Lexical check flags none; only ReferencePlane appears.
CC‑MVPK‑4h (Edition pins on defs)Where maps, distances, or spaces are cited, the face pins DescriptorMapRef.edition, DistanceDefRef.edition, and CharacteristicSpaceRef.edition?.Validation shows edition fields populated.
CC‑MVPK‑4i (Crossings gated)ReferencePlane crossings or Context crossings cite Bridge + CL policies; penalties apply to R‑channel only.IDs present; R-channel penalty application verified in harness logs.
CC‑MVPK‑4k (Subset‑of underlier)For views about epistemes or capabilities, PublicationScope ⊆ ClaimScope or WorkScope; reindexing does not widen it.Subset witness passes; promotion diff shows no widening.
CC‑MVPK‑6 (Γ‑separation)No cost, time, or data-spend on publication morphisms.CI shows proof records or witness records; gate validation passes.
CC‑MVPK‑7 (Reindexing monotone)If s ⪯ t, then Emit_s(x) ⪯ Emit_t(x).TechCardInteropCard (more structure, same claims).
CC‑MVPK‑8 (publication-face kind discipline)Only publication face/form or interop publication form are used; faces are named ...View or ...Card.Token scan; no “rendering” or “presentation” as publication-face kind values.
CC‑MVPK‑9 (Reindexing naturality)Reindexing coercions PromoteView[s→t] exist, are total, and commute with composition.Witness shows PromoteView[s→t]_Z ∘ Emit_s(g∘f) = (Emit_t(g) ∘ Emit_t(f)) ∘ PromoteView[s→t]_X.
CC‑MVPK‑10 (Iso‑preservation)Isomorphisms in U remain isomorphisms under each viewpoint.Cards show mapped inverses or an iso‑witness.
CC‑MVPK‑11 (Typing & totality)Ill‑typed composites are rejected at ViewObj_s rather than weakening functoriality.Type‑check fails early; no “best‑effort” composition in cards.
CC‑MVPK‑12 (Bridge+CL on crossings)Any cross‑Context view or ReferencePlane-crossing view cites Bridge + CL policy ids.IDs present on TechCard or AssuranceLane.

Anti‑patterns (with fixes)

  1. “Presentation logic” as semantics. Fix: Move any logic to Describe_EoC_DescEp, an exact specification-use or episteme-refinement gate, CG‑Spec, or KD‑CAL; keep views declarative; publication adds zero claims.
  2. Publishing only view objects. Fix: MVPK acts on arrows. Always emit views for g∘f, not just for ViewObj_s(X), ViewObj_s(Y), and ViewObj_s(Z).
  3. Unpinned numbers. Fix: Reject card; supply pins plus CG and CHR references.
  4. Viewpointless views. Fix: Define Viewpoint; attach concerns + conformance; re‑emit.
  5. InteropCard equivalent to TechCard duplication. Fix: InteropCard may refine typing or shape but cannot contradict TechCard (reindexing monotone).

Consequences

BenefitWhy it mattersTrade-off and mitigation
Arrow traceability.Composition preserved across views enables chain‑of‑evidence on pipelines.Slight authoring overhead → MVPK templates.
Review-ready faces.Pins plus CHR references make numeric claims verifiable.Declared publication checks perform MVPK checks; project gates stay with the relevant OperationalGate(profile) or GateDecision source when the gate claim is live.
Terminology hygiene.Clear View vs Viewpoint, Publication vs Presentation.Enforce publication-face/form discipline tokens in CI.
Notation independence.Viewpoints talk concerns, not tools.Provide adapters to local stacks.

SoTA Alignment: Adopted And Adapted Invariants And Rejected Shortcuts

SoTA alignment rule. Read each row here as source idea -> local FPF invariant -> practical local test -> popular shortcut rejected. A source citation governs nothing by reputation; it counts only when the cited idea is translated into the Solution, conformance checks, boundary rules, worked slices, and Relations of this pattern.

Source idea and current sourceLocal FPF invariant and practical local testAdopted, adapted, or rejected shortcut
Joint ISO, IEC, and IEEE 42010:2022 architecture-description practice separates architecture description, stakeholder concern, viewpoint, view, model kind, correspondence, and correspondence rule instead of letting one readable model face stand in for all of them.MVPK publishes one source-pinned face over an existing source U.Episteme or U.View; every load-bearing face names its publication U.Viewpoint and the PublicationVPId reference when that reference is used, names concerns, keeps U.View, viewpoint, carrier work, rendering work, correspondence relation, concrete exchange envelope, and evidence envelope separate, and passes the no-new-claim diff before any work, evidence, gate, assurance, carrier, or bridge use is considered.Adopt explicit source, concern, view, viewpoint, correspondence, and model-kind separation; reject the shortcut where a readable architecture or model face becomes evidence, work occurrence, gate passage, release permission, bridge relation, or concrete exchange authority by presentation alone.
Profunctor and optic accounts (2017-2019; source maturity = research or theory line, not load-bearing without local witness) provide source material for compositional views that compose like arrows.MVPK adopts only local publication-composition tests: identity, composition witness, no-new-claim diff, monotone promotion, and scope non-widening.Adopt the five-test publication-composition bundle; reject optics vocabulary as proof by analogy or as a replacement for local witnesses.
Refinement-typed ecosystems (2016+; source maturity = widely used technical practice) keep units, scales, and type-like constraints attached to values.MVPK publication faces carry pins and CHR and CG references; local test: numbers, thresholds, and characteristic claims on faces have units, scales, reference-plane relation and edition relation where load-bearing.Adapt pin discipline; reject readable numbers as self-validating values.
Interoperability and evidence-envelope practice (source maturity = mature standards or practice, depending on concrete envelope) separates exchange format and carrier evidence from the claim being carried.MVPK faces may expose evidence carriers or exchange envelopes, but concrete formats live outside Part E; local test: the face adds no claim and points back to the governing source or evidence path.Adapt envelope discipline; reject treating envelope presence as semantic authority, evidence sufficiency, work occurrence, or gate passage.

(References are selected because they supply source material for local MVPK invariants and tests; MVPK remains notation-agnostic.)

Relations

  • Builds on: A.7 and E.10.D2 for carrier and front-end discipline plus the EntityOfConcern and Description-episteme boundary and specification-use gates; A.6.2-A.6.3 for episteme morphisms, U.EffectFreeEpistemicMorphing, and U.EpistemicViewing; E.17.0 for U.MultiViewDescribing; E.8 and E.10 for authoring and publication-language discipline; Part F and Part G for bridge, terminology, characteristic, and pin discipline.
  • Constrains: publication-face-emitting automation and hand-written publication faces. They remain species of U.EpistemicViewing over existing Description epistemes, including Description epistemes admitted for specification use, and may not become a second EntityOfConcern-to-Description mechanism, specification-use gate, evidence path, gate decision, work occurrence, assurance record, release source, or bridge declaration by readable form.
  • Current neighboring-pattern boundaries from E.17:5.1d: work or reliance relation applies A.15.4, with A.15 for role, method, plan, and work alignment and A.15.1 for one dated U.Work occurrence; evidence, provenance, attestation, currentness, and freshness apply A.10; engineering justification, assurance, confidence, readiness, and limitations apply B.3; gate passage, constraint validity, adjudication, and release decision relation applies A.20 or A.21; same-EntityOfConcern textual restatement applies A.6.3.CR; same-EntityOfConcern representation-scheme or reasoning-medium change applies A.6.3.RT; deliberately narrower-use rendering applies A.6.3.CSC; explanation-facing rendering applies E.17.EFP; bounded comparative review applies E.17.ID.CR; changed EntityOfConcern, ontology frame, or claim or relation record named by value applies A.6.4, OntologicalReframing, or the retargeting or reframing pattern named by value; carrier, export, OCR, screen, front-end behavior, or work on carriers applies A.7.
  • Part F bridge wording boundary: when the publication face uses or invites "same", "equivalent", "align", "map", substitutable, interchangeable, attribute, entity, or profile matching, or other bridge-wording claim pressure across contexts, the wording repair belongs to Part F and A.6.9; the bridge relation belongs to F.9 or F.9.1. E.17 does not create a local bridge taxonomy.
  • Coordinates with: B-operators for no Gamma-leakage, C-cluster selection or archive patterns where views remain publication faces rather than selections, CHR and UNM for measurement and normalization semantics, F.9 or F.9.1 for bridge relation, A.6.9 for sameness wording, and the neighboring source patterns named above. This section is a relation and neighboring-pattern boundary statement for publication use, not a standing decision tree or process order.

Minimal authoring template (Part E)

Header: MVPK v⟨edition⟩ — Σ = {PlainView ⪯ TechCard ⪯ InteropCard, AssuranceLane ⟂} For each arrow f: emit {Emit_s(f) | s ∈ Σ} (or use the plain aliases {PlainView(f), TechCard(f), …}) with: PublicationScope, ViewpointId, pins, CHR and CG references, SCR ids, Bridge+CL ids (if crossing), and—if composite—machine‑checkable witnesses that Emit_s(g∘f) = Emit_s(g)∘Emit_s(f) and for each s ⪯ t the naturality square PromoteView[s→t]_Y ∘ Emit_s(f) = Emit_t(f) ∘ PromoteView[s→t]_X.

Manager’s one‑page review (copy‑paste)

“We publish every morphism under a declared set of viewpoints using MVPK. Each view that claims functorial composition carries the local composition witness; without that witness it stays non-compositional or explanatory-only. Each face adds no new claims and pins unit, scale, reference-plane, and edition with CHR and CG references. InteropCard views clarify concerns and semantics only (concrete exchange lives outside Part E); AssuranceLane cites evidence carriers (SCR). Any cross-Context or cross-plane view cites Bridge+CL (Φ→R only). Publication build, render, or upload activity is U.Work on carriers, not a mechanism change.”

E.17:End

ExplanationFaithfulnessProfile — explanation-use discipline over existing MVPK faces

Type: Architectural (A) Status: Stable Normativity: Normative unless marked informative

One-line summary. ExplanationFaithfulnessProfile states how explanation-facing renderings over already available claims, traces, and pins on existing MVPK faces may be used. It helps a publication-side reviewer or explanation reader distinguish source-pinned rendering, source-linked reconstruction, didactic retelling, and speculative retelling without creating a second face family or a second semantic rule track.

Explanation-facing rendering in plain terms. One explanation-facing rendering on an existing MVPK face; not the whole face family, not the whole source U.Episteme or source U.EpistemePublication, and not a second semantic track.

Explanation-use relation in plain terms. State how that rendering relates to already available source U.Episteme or source U.EpistemePublication, source pins, traces, and provenance references, which explanation-use class it belongs to, and what downstream claim or effect still stays outside the profile.

Use this when. Use this profile when one note, memo, sheet, screen, table, or short section is trying to help a reader understand an already available source U.Episteme or source U.EpistemePublication on an existing face and you need to say what kind of explanation it is without turning that help into a second semantic rule track.

Start here when. The first decision is about one explanation-facing rendering on an existing MVPK face, and the real question is whether it stays source-pinned, becomes bounded reconstruction, is openly didactic, or has already shifted into speculation or non-admissible downstream claim or effect.

What goes wrong if missed. Helpful explanation quietly turns into a second semantic rule track, hidden bridge-comparison load, or unsupported downstream guidance because the rendering is read as if it were canonical content.

What this buys. One honest explanation class on an existing face with visible source references, admissible-use boundary, and explicit neighboring-pattern boundaries when the rendering has stopped being merely explanatory help.

Not this pattern when. Not this profile when the real job is same-entity rewrite (A.6.3.CR), representation change (A.6.3.RT), bounded comparative reading (E.17.ID.CR), changed EntityOfConcern (A.6.4), deliberately coarsened rendering that now needs narrower admissible claim or effect, non-admissible downstream claim or effect, and reopen to the source U.Episteme or source U.EpistemePublication (A.6.3.CSC), downstream work or reliance (A.15, A.15.4), assurance or engineering justification (B.3), or gate-bearing content (A.20, A.21).

First output. One compact explanation-use note: explanation class, source reference, admissible explanation-reader use, non-admissible downstream use, and reopen or boundary condition. MVPK face, pins, provenance, and source fields are inherited by reference unless ambiguity or a load-bearing source-relation question makes them relevant to the claim.

Ordinary-output claim inventory. After ExplanationFaithfulnessProfile, the author has claimed only that this explanation-facing rendering has this explanation class, this source relation, this source-reference state, and this admissible use. The author has not claimed model truth, evidence path, assurance, safe reliance, gate passage, work occurrence, release reliance, or source replacement unless the neighboring FPF pattern governing that claim and project-side FPF kind and reference named by value are named.

Working action spine. One explanation-facing rendering is helping a reader -> separate source-pinned rendering, bounded reconstruction, didactic retelling, and speculative retelling -> use the explanation for understanding, source navigation, bounded restatement, teaching, or exploration according to class -> output one class plus safe next action -> apply the neighboring FPF pattern if reliance, evidence, work, gate, engineering justification, comparison, narrower-use rendering, or new-claim load appears. Use E.17:5.1c for orientation use, reliance use, operative claim, non-admissible downstream use, and reopen trigger; use E.17:5.1d when the primary question under repair may be same-entity rewrite, representation change, coarsening, comparison, bridge or substitution, work or reliance, gate, evidence, assurance, retargeting, or carrier work or front-end work instead of explanation-facing rendering.

Ordinary use. If the explanation only helps reading, source-finding, review, comparison, or planning preparation, one compact review note naming the explanation class, source reference, and non-admissible downstream claim or effect is enough. Plain wording remains ordinary unless it changes admissible use, source relation, evidence, gate, assurance, work, decision, or neighboring-pattern exit.

Load-bearing use. Open the fuller explanation review only when the rendering will guide work or reliance, be externally relied on, be disputed, cross context, affect person or team status, or be cited as evidence, approval, engineering justification, gate, or release reliance.

Stop condition. Stop once the explanation class changes no next reading, review, source-finding, comparison, or planning-preparation move and blocks no concrete overclaim about source relation, work or reliance, evidence, approval, gate, or release.

Admissible explanation-use examples.

Admissible explanation useSource-finding check with no downstream claim or effectNon-admissible explanation use
A SourcePinnedExplanation or SourceLinkedExplanationReconstruction helps navigation, bounded restatement, or source inspection with pins and trace visible.A didactic explanation helps onboarding or helps the team find the source, while operative claims still return to the source-pinned face or A.10 evidence path.A fluent explanation is used as assurance, evidence, approval, gate passage, release permission, or work-occurrence evidence.

Neighboring project records and governing patterns. E.17.ID.CR governs bounded comparative reading; A.6.3.CR or A.6.3.RT govern same-entity rewrite or representation change; A.6.3.CSC governs a rendering that stays honest only through narrower admissible claim or effect, non-admissible downstream claim or effect, and reopen to the source U.Episteme or source U.EpistemePublication; A.6.4 or OntologicalReframing govern changed EntityOfConcern; A.15 and A.15.4 govern downstream work or reliance, B.3 governs assurance and engineering justification, and A.20 or A.21 govern gate-bearing claim or effect.

Common wrong escalations and boundary transfers. Do not use this profile to hide new claims, bridge-comparison load, action-selection pressure, or gate-bearing guidance inside helpful prose. If the rendering is really a bounded comparison, apply E.17.ID.CR; if it is only same-entity rewriting or representation shift, apply A.6.3.CR or A.6.3.RT; if it is a deliberately coarsened rendering whose narrower admissible claim or effect, non-admissible downstream claim or effect, and source-bearing reopen now govern the case, apply A.6.3.CSC; if it is already making world, work or reliance, assurance, or gate-bearing claims, leave E.17.EFP for the more exact downstream FPF pattern or project-side record.

Generated-explanation repaired case. Use this case when a generated explanation is being relied on beyond reading help. The first E.17.EFP move is to classify the rendering as source-pinned rendering, source-linked reconstruction, didactic retelling, or speculative retelling. The profile only states the explanation relation, source-finding state, source references, admissible explanation-reader use, non-admissible downstream use, and reopen condition for the current rendering. The explanation becomes usable for an operative claim only when an A.10-governed evidence path maps that claim to the exact source passage, carrier path, or project-side FPF kind and reference named by value that evidences it in the relying context. If the operative claim would raise assurance, release confidence, safety, trust, gate passage, work occurrence, work authorization, or approval, the governing pattern must be applied for that operative claim: B.3 for assurance, A.21 for gate decision, A.15/A.15.1 for work, A.2.8/A.2.9 for commitments or speech acts, or another source relation that evidences the operative claim when asserted for that operative claim. If the map or project-side FPF kind and reference named by value is missing, keep only a prospective repair request, source-gap note, or narrower explanation-use note; if operative reliance is still attempted, the applicable A.10, B.3, A.21, or other relation governing the asserted use may return evidence-needed, abstain, or no-admissible-current-use for that attempted reliance. Do not open an A.10 path for ordinary reader help; otherwise the generated explanation remains reader help, not approval, authorization, evidence, assurance, gate passage, release reliance, or work-occurrence evidence.

Common wrong first reading. A fluent, confident, source-linked, or reliable-looking explanation is evidence. First honest entry: classify the explanation rendering and use it for reading or source-finding; only an operative claim with an A.10 evidence path or another source relation that evidences the operative claim can carry downstream reliance.

Negative result: if a generated explanation says "reliable" but no operative claim maps to a source relation, the E.17.EFP result is source-finding only or reader help only. If an attempted downstream reliance is still raised, the receiving A.10, B.3, A.21, or other relation named by value may return evidence-needed or no-admissible-current-use for that attempted reliance. It is not weak evidence by style, confidence, fluency, or citation-like wording.

Generated-retelling survival. A generated retelling preserves only the reader help, source-finding cue, quoted source pins, explicitly repeated source relation, and explicitly repeated admissible-use boundary that remain inspectable in that retelling. It does not become or preserve the source U.Episteme, source U.EpistemePublication, evidence path, assurance, gate passage, decision status, permission, or source replacement merely by fluency, completeness-looking wording, or citation-like links. If the generated retelling compresses, omits, strengthens, or changes source claims, treat the result as a new explanation-use case, a narrower-use rendering under A.6.3.CSC, or reader help only.

Derivative rendering and adaptation source-link rule. A fork, adaptation, abridged guide, translated rendering, generated explanation, tutorial, access-format conversion, or other derivative rendering of a source U.Episteme or source U.EpistemePublication may improve access or teaching, but it is not equivalent to the source by usefulness, fluency, or local adoption. It may expose or cite a project-side FPF kind and reference named by value, but the admissible source relation belongs to the exposed value and source relation, not to the explanation rendering as a face. If the derivative rendering will guide work or reliance, A.10 must map every operative claim being relied on to the exact source passage, carrier path, or project-side FPF kind and reference named by value that evidences it; if the map or exact value is absent, only a prospective repair request, explicit source-gap note, or prospective evidence-work plan may be created. If simplification or format change narrows allowed use, forbids downstream use, or requires return to the source-bearing side, use A.6.3.CSC rather than treating the derivative as ordinary explanation.

Explanation-rendering identity over revision and regeneration. A generated, translated, revised, or regenerated explanation-facing rendering is not the same explanation rendering merely because it uses the same source face, prompt, template, carrier, or title. For use beyond ordinary reader help, the rendering must name the preserved source references, changed claims, generation or production basis when live, and admissible use for this rendering. A translation or adaptation preserves admissible use only when the operative claims and source links survive the change; otherwise it becomes a new explanation-use case, a narrower-use rendering under A.6.3.CSC, or reader help only.

Placement. Profile governed by E.17.0 and E.17 review. Builds on. E.17.0 U.MultiViewDescribing; E.17 MVPK; A.7; E.10.D2; A.6.B; F.9; F.18. Coordinates with. ConservativeRetextualization; RepresentationTransduction; E.17.ID.CR ComparativeReading; A.6.4; A.10; A.15; A.15.4; B.3; A.20; A.21.

Problem frame

The same underlying claim set often needs explanation-facing renderings on more than one existing face:

  • an engineer-manager-readable rendering of a technical claim set;
  • a technical explanation that makes source linkage more visible than the original source prose;
  • a didactic retelling for onboarding or review preparation;
  • a clearly marked speculative retelling that helps discussion but does not pretend to be canonical content.

FPF already has E.17.0 for viewpoints, views, and correspondences, and E.17 for typed publication faces. A compact review profile is still needed to say what kind of explanation-facing rendering is being published, how its source tether to the source U.Episteme or source U.EpistemePublication is stated, and where it is admissible.

Problem

Without a dedicated profile:

  1. source-pinned rendering, reconstruction, didactic simplification, and speculation blur together;
  2. explanation prose starts behaving like a second semantic rule track;
  3. publication-side reviewers cannot tell which faces remain admissible for a given explanation class;
  4. pins, provenance, and evidence binding become optional rhetorical extras instead of explicit publication conditions;
  5. explanation work quietly shifts into new claims, hidden bridge work, or gate-facing misuse.

Forces

  • Clarity vs semantic restraint. Explanation may help readers, but it must not mint new semantic commitments on publication faces.
  • Face discipline vs reader fit. The same source may need different renderings, but all of them still live on existing MVPK faces.
  • Traceability vs accessibility. Simpler renderings are useful only if readers can still recover how they relate to the source.
  • Didactic usefulness vs policy misuse. A didactic or speculative retelling may help humans, but it must not masquerade as assurance or gate-bearing content.
  • Explanation vs interpretation. Some moves still belong to explanation rendering; others should use interpretation, retargeting, or world or gate governing patterns or project-side FPF kinds and references named by value.

Solution — review profile for explanation renderings on existing MVPK faces

Informal definition

ExplanationFaithfulnessProfile is a review profile governed by E.17.0 and E.17 for explanation-facing renderings over already available claims, traces, and pins on existing MVPK faces.

It does not create a new face family. It states how an explanation relates to its source U.Episteme or source U.EpistemePublication, what kind of augmentation is allowed, which evidence binding remains source-bounded, and on which existing faces the rendering may admissibly appear.

Profile, case, and published rendering distinction

ExplanationFaithfulnessProfile is a review profile governed by E.17.0 and E.17. Concrete explanation-facing renderings are passive published renderings or reviewed cases classified under this profile; the profile itself does not act, decide, or publish.

This distinction matters because the profile governs how a rendering is related to its source and reviewed. It does not turn every explanatory paragraph into a giant standalone record, and it does not replace MVPK face governance with a second semantic track.

How to read this profile

This profile does not decide whether a claim is true. It says how an explanation rendering relates to already available source U.Episteme or source U.EpistemePublication, source pins, traces, and provenance references, and where that rendering may admissibly appear.

  • Faithfulness names the review question for the rendering, not a pass verdict for every class.
  • Class names are source-relation and admissible-use labels, not merit labels or proof that all classes are faithful in the same sense.
  • Faces stay governed by E.17; the profile only constrains what sort of explanation is admissible on them.
  • If a rendering begins to add new semantic commitments, it has left this profile even if the prose still looks explanatory.
  • It helps a publication-side reviewer state one published rendering's relation to the already pinned source U.Episteme or source U.EpistemePublication.

Local working vocabulary

This profile uses a small local vocabulary for review.

  • Source U.Episteme or source U.EpistemePublication = the already pinned source U.Episteme or source U.EpistemePublication, source claims, traces, notes, pins, or provenance references that the explanation rendering depends on. This is not the MVPK face, not the SCR/RSCR carrier, and not an arbitrary carrier or physical item.
  • Rendering = one published explanation-facing text on one existing face.
  • Class assignment = the explanation-class assigned to that rendering on that face.
  • Bundle-local class difference = a case where two renderings in one bundle admissibly carry different explanation classes.

These are review aids, not new governance kinds. Faces remain governed by E.17; this profile only qualifies explanation behaviour on those faces.

Core profile fields

Most renderings reviewed under this profile need only the compact review note:

Core fieldQuestion
explanationClassWhich local profile value is assigned to this one rendering?
source referenceWhich already available source U.Episteme or source U.EpistemePublication, pins, trace, or provenance reference does the rendering depend on?
admissible explanation-reader useWhat may the explanation reader do with this explanation now: understand, navigate, inspect, teach, or prepare review?
non-admissible downstream useWhat wider claim or effect is not carried by the explanation?
reopen or boundary conditionWhat source change, dispute, use escalation, missing source relation, or neighboring-pattern boundary condition ends this profile use?

The fuller field vocabulary below opens only when ambiguity or load-bearing use is live: different classes across faces, source linkage dispute, connective reconstruction, reader-fit dispute, interaction or statefulness, derivative rendering, cross-context reuse, cited reliance, work or reliance, evidence, gate, engineering justification, bridge, or coarsening boundary.

  • profilePlacementRef = profile governed by E.17 and E.17.0;
  • governingPatternRef = E.17 and E.17.0;
  • sourcePublicationOrRecordForm;
  • targetPublicationOrRecordForm;
  • changeTargetRef;
  • entityOfConcernPolicy = preserve for explanation renderings over the same underlying source U.Episteme or source U.EpistemePublication;
  • boundedContextPolicy;
  • viewpointPolicy;
  • referenceSchemePolicy;
  • representationSchemePolicy;
  • groundingPolicy;
  • referencePlanePolicy;
  • claimPolicy;
  • claimScopePolicy;
  • publicationScopePolicy;
  • reliabilityTransportPolicy;
  • pinningPolicy;
  • provenancePolicy;
  • lossProfile;
  • claimContinuityClass;
  • microtheoryContinuityClass;
  • onticContinuityClass;
  • bridgeRequirement;
  • worldContactPolicy;
  • evidencePolicy;
  • gatePolicy;
  • workCrossing;
  • upstreamGoverningPatternRef?, upstreamAuthoritySourceRef?, downstreamGoverningPatternRef?, and downstreamAuthoritySourceRef?;
  • admissibleFaces;
  • publication-face kind value when publication face/form or interop publication form discipline is live;
  • publicNamePolicy;
  • explanationSourceRelationClass using the shared E.17:5.1b vocabulary when source pointer, source availability or retrieval, source use, source faithfulness, claim-source relation, contradiction, omission, claim widening, added linkage, independent verification, admissible use, forbidden downstream use, or reopen trigger could diverge;
  • no generic source-relation field; source relation is recorded through explanationSourceRelationClass;
  • augmentationRelation;
  • addedLinkPolicy when SourceLinkedExplanationReconstruction adds bounded connective prose;
  • targetUserModel? when reader-fit materially shapes the rendering;
  • interactionMode? when the explanation is more than one static explanatory paragraph;
  • contrastiveQuestion? when the rendering is answering a specific user-facing contrast or why-question;
  • allowedUse? when downstream use must be bounded by intended reader and task;
  • misuseRisk? when over-reading pressure is part of the review load;
  • evidenceRelation;
  • noNewBoundaryClaims = true on explanation faces;
  • compositionRule;
  • reopenCondition.

These fields inherit the E.17:5.1e local-field rule. They classify one explanation-facing rendering for review; they do not create U.Kind, publication-face kind, RelationKind, KindBridge, EvidenceKind, GateDecision, SpeechAct, Commitment, U.Work, authority reference, publication face, or project-side FPF kind and reference named by value unless another governing FPF pattern explicitly instantiates that object. The explanationClass value is a local source-relation and admissible-use profile value, not ExplanationKind, not U.Kind, not EvidenceKind, not FaceKind, and not a truth certificate.

Where explanation crosses from source rendering into new claim production, hidden bridge work, gate-bearing semantics, world-changing claim or effect, or a source relation with declared source-loss mode, the profile no longer suffices and the case must leave this profile.

Working-model first

Ordinary reviewed renderings do not need to restate every field from scratch. When the governing MVPK face, pinned source U.Episteme or source U.EpistemePublication, and already published provenance references already fix a field honestly, the rendering may inherit that condition by explicit reference.

A source-bearing review record becomes necessary when:

  • explanation class differs across faces in the same publication bundle;
  • the rendering relies on bounded connective prose that is not obvious from the source wording alone;
  • didactic or speculative wording creates a real risk of policy, assurance, or gate misuse;
  • source linkage, provenance, or reliability transport would otherwise become unclear;
  • the rendering is a fork, adaptation, translation, generated explanation, tutorial, access-format conversion, or another derivative publication that may be mistaken for the source itself.

When one rendering needs its own narrower admissible claim or effect line, non-admissible downstream claim or effect line, or source-bearing reopen rule because distinctions were deliberately coarsened for reader fit, the issue is no longer only explanation class. Do not keep that case here as if it were merely one more helpful rendering style; apply A.6.3.CSC Controlled Semantic Coarsening.

What a publication-side reviewer checks first

A publication-side reviewer usually starts with four questions:

  1. What exactly is the source U.Episteme or source U.EpistemePublication for this rendering?
  2. Which explanation class is being claimed for this rendering on this face?
  3. Are the pins, provenance references, and evidence relation visible enough for that class?
  4. Has the rendering quietly begun to add new semantic commitments, new face-like behaviour, derivative-source replacement, or a deliberately coarsened source rendering that needs A.6.3.CSC?

If these questions are answered clearly, the rendering often remains lightweight. If they are not, a fuller face-by-face review record is usually warranted.

Interpretant-side block

This profile still governs explanation renderings on existing faces, not full interactive explanation systems.

However, when reader-help, onboarding, or contrastive explanation is doing real work, the rendering should also make visible:

  • who the rendering is fit for (targetUserModel);
  • whether the interaction is static, guided, contrastive, or another bounded mode (interactionMode);
  • what question the rendering is helping answer (contrastiveQuestion);
  • what interpretation or use remains admissible (allowedUse);
  • and what downstream claim or effect would be wrongful (misuseRisk).

These fields do not create a new governing source relation. Their current role is narrower: stop explanation prose from pretending that every rendering is audience-neutral, and make misuse boundaries explicit when reader-fit is part of the explanation case. allowedUse is a local reader-fit field under admissibleUse; it is not permission, evidence relation, or authority.

Explanation class set

The explanation-class set used in this profile is:

  • SourcePinnedExplanation
  • SourceLinkedExplanationReconstruction
  • DidacticRetelling
  • SpeculativeRetelling

In field form, the local assignment is explanationClass = SourcePinnedExplanation | SourceLinkedExplanationReconstruction | DidacticRetelling | SpeculativeRetelling.

Class assignment is a source-relation and admissible-use classification. SourcePinnedExplanation is source-bound rendering, SourceLinkedExplanationReconstruction is bounded reconstruction with explicit added-link policy, DidacticRetelling is teaching and onboarding help, and SpeculativeRetelling is exploratory help. The last two classes do not assert the same kind of source faithfulness as SourcePinnedExplanation; they state the limits under which reader help remains admissible.

Safe next action by class:

ClassSafe next action
SourcePinnedExplanationsource inspection, bounded restatement, and source navigation.
SourceLinkedExplanationReconstructionbounded explanation with explicit addedLinkPolicy.
DidacticRetellingonboarding or teaching only; return to source for reliance.
SpeculativeRetellingexploratory discussion only; no evidence, work, gate, assurance, or release reliance.

These classes are publication-behaviour labels for one rendering on one existing face. They are not U.Kind values, not MVPK faces, and not semantic merit grades. They state how the explanation relates to the source, how much augmentation is tolerated, what reliability transport is still honest, and which faces remain admissible.

Class assignment is per published rendering on a face, not one blanket label for a whole multi-face bundle. If a PlainView rendering stays source-pinned while a TechCard rendering adds bounded connective prose, the bundle must state that class difference explicitly.

Ordinary class-selection guidance

A practical reading order is:

  • start with SourcePinnedExplanation if the rendering stays close to the source wording and keeps direct pins visible;
  • choose SourceLinkedExplanationReconstruction when bounded connective prose is added but source linkage remains explicit;
  • choose DidacticRetelling when reader-help dominates and some phrasing is intentionally more pedagogical than canonical;
  • choose SpeculativeRetelling only when the rendering openly goes beyond source-backed explanation and remains confined to exploratory or didactic use.

The profile should not be used to make a rendering sound more respectable than its actual source relation warrants.

It should also not be used to keep one narrower-use rendering with declared source-loss mode inside explanation just because the prose is reader-friendly. If the rendering needs its own forbidden-use line and reopen rule to stay honest, explanation is no longer the primary question; use A.6.3.CSC Controlled Semantic Coarsening.

When a rendering claims SourceLinkedExplanationReconstruction, it should publish a compact addedLinkPolicy whenever the connective move is not already explicit in the source wording.

Minimum reading load:

  • addedLinkKind — what bounded connective move is being added;
  • sourceReferenceSet — which pinned claims, traces, or notes carry that move;
  • boundednessReason — why the added link does not become an unsupported relation theory, modality lift, causal claim, bridge-comparison load, or policy-bearing reading;
  • forbiddenLinkClass — which unsupported connective move is explicitly excluded;
  • reopenTrigger — what would force downgrade, source-bearing return, or source-bearing review.

Working rule:

  • if addedLinkPolicy cannot be stated plainly, the rendering should drop to a more restricted explanation class, use a more restricted MVPK face or named publication-face kind value, or leave E.17.EFP;
  • SourceLinkedExplanationReconstruction may not hide new relation theory, bridge equivalence, design-scope generalization, or policy-bearing guidance inside "bounded" connective prose.

Working admissibility matrix

ClassSource relationAugmentation relationEvidence relationUsually admissible facesUsually admissible publication face/form or interop publication form useUsually forbidden uses
SourcePinnedExplanationrenderingomission-onlytrace-boundPlainView, TechCardpublication face/form; interop publication form only when the governing face source explicitly permits source-pinned, structure-preserving export without added semanticsAssuranceLane or gate-bearing claim or effect if required pins or evidence are absent
SourceLinkedExplanationReconstructionreconstructionbounded link-additiontrace-backedPlainView, TechCardpublication face/form on bounded explanatory useInteropCard or AssuranceLane unless governing face policy explicitly allows it with source linkage kept visible
DidacticRetellingreconstructionomission + didactic additiontrace-backed for domain facts; trace-free only for analogy, scaffolding, or reader orientationPlainViewpublication face/form on didactic or onboarding use onlyTechCard, InteropCard, AssuranceLane, or policy-bearing use when it could be mistaken for canonical semantics
SpeculativeRetellingspeculationlink-addition or counterfactual augmentationtrace-free or low trace backingPlainViewpublication face/form on clearly marked exploratory or didactic use onlyTechCard, InteropCard, AssuranceLane, gate-adjacent, or policy-bearing use

ExplanationFaithfulnessProfile ordinarily stays on publication face/form. Any appearance on interop publication form must remain source-pinned and structure-preserving, and must never smuggle explanation-specific semantics into interop publication. Didactic or speculative restrictions are use-profile restrictions over existing faces, not new face kinds.

Source-pinned explanation on AssuranceLane-facing publication is exceptional rather than ordinary. Unless the governing face source explicitly permits that use with visible evidence carriers, source pins, and no added semantics, reviewers should treat AssuranceLane-facing explanation rendering as non-admissible.

DidacticRetelling and trace-free reader help are illustrative or analogical scaffolding only. Trace-free didactic material may carry analogy, scaffolding, or reader orientation, but any domain fact inside didactic prose must either be source-pinned or explicitly downgraded to non-canonical reader aid. It may not carry causal claims, policy claims, reliability claims, or canonical TechCard semantics. If didactic content appears near technical content, mark it as a boxed or otherwise clearly separated non-canonical reader aid rather than letting it merge into the technical source.

Every concrete explanation rendering must also publish the source claim IDs, pins, trace refs, or equivalent provenance references that justify its class on that face. If those anchors cannot be made visible on the chosen MVPK face or named publication-face kind value, the rendering must drop to a more restricted explanation class, use a more restricted use profile, or leave the face.

When reader-help, onboarding, or contrastive explanation is part of the case, the rendering should also publish or inherit its targetUserModel, interactionMode, contrastiveQuestion, allowedUse, and misuseRisk so that user-fit does not quietly become policy guidance, assurance guidance, or gate-bearing guidance.

Shared explanation rule set

E.17.EFP:4.5.a. Preservation rule

Explanation-facing renderings under this profile preserve the same underlying EntityOfConcern line, bounded context, and source-pinned U.Episteme or source U.EpistemePublication. Viewpoint, reference scheme, representation scheme, grounding, and reference-plane handling must stay explicit rather than being left to prose. SourcePinnedExplanation and SourceLinkedExplanationReconstruction are expected to remain claim-conservative; DidacticRetelling may omit or simplify source claims but must stay source-linked; SpeculativeRetelling may widen explanatory language only when kept clearly off canonical faces and off gate-bearing claim or effect.

E.17.EFP:4.5.b. Loss and reliability rule

A rendering assigned to one of these explanation classes declares what is omitted, reordered, simplified, or newly connected. Reliability transport may stay source-bounded or be explicitly downgraded, but it must never be silently widened by more persuasive prose. Didactic and speculative renderings also state forbidden downstream uses whenever omissions, declared source-loss modes, or trace-free additions occur.

When reader-fit is part of the explanation case, allowedUse and misuseRisk should be explicit enough that a didactic or contrastive rendering cannot be mistaken for assurance, policy, or gate-bearing guidance.

E.17.EFP:4.5.c. Downstream-use and boundary rule

This profile stays explanation-facing and episteme-facing. It does not govern bridge stance, retargeting, action selection, executable docking, gate-bearing claim or effect, assurance, engineering justification, or work enactment. If a case starts carrying one bounded comparative review case, rival interpretations, bridge-mediated comparison load, world consequences, work or reliance consequences, gate consequences, assurance, or engineering justification, apply the neighboring FPF pattern and name the project-side FPF kind and reference named by value that governs that claim or effect (E.17.ID.CR, F.9.1, B.5.2, A.6.4, A.15, A.15.4, B.3, A.20, A.21).

Interpretant-side fields do not weaken that boundary rule. They only bound reader use; they do not authorize unsupported downstream guidance.

If a coarsened explanation-like rendering needs narrower admissible claim or effect, non-admissible downstream claim or effect, and source-bearing reopen to remain honest, the case is governed by A.6.3.CSC Controlled Semantic Coarsening rather than staying in ordinary explanation-use discipline.

E.17.EFP:4.5.d. Composition and reopen rule

Repeated SourcePinnedExplanation over the same pinned source may be idempotent. SourceLinkedExplanationReconstruction and DidacticRetelling are order-sensitive and must reopen when the source claim set, pins, provenance, or admissible-face assumptions change. SpeculativeRetelling must reopen whenever source binding becomes available or whenever the rendering starts to look like a canonical explanation rather than a clearly bounded exploratory retelling.

Hard boundary rules

A rendering reviewed under this profile keeps the following explicit:

  • it does not create a second face family;
  • it does not turn faces into a second semantic rule track;
  • it does not license new A.6.B boundary claims on explanation faces: law claims, admissibility claims, deontic or commitment claims, and effect or evidence claims;
  • it does not replace bridge discipline, retargeting discipline, or world or gate boundary discipline;
  • it does not let publication face/form and interop publication form collapse into one undifferentiated explanation channel.

If explanation text starts carrying new semantic commitments instead of rendering or licensed explanation over existing ones, the case must leave this profile.

Archetypal grounding

Source-pinned explanation across multiple faces

Source claim slice. Claim D-14: Cooling loop CL-2 maintains the required temperature margin during standard load. Evidence pins: T-44, E-17.

PlainView rendering. Cooling loop CL-2 keeps the required temperature margin in standard operation. Source pins: T-44, E-17.

TechCard rendering. D-14 remains source-pinned to T-44 and E-17; this rendering only shortens and reorders the claim.

This stays within SourcePinnedExplanation because the rendering changes readability, not the semantic load.

Source-linked reconstruction

Source slice. Claims D-14 and D-18 jointly constrain the safe operating window, but the relation is left implicit in the original note.

Published reconstruction. Claims D-14 and D-18 jointly bound the safe operating window; see the pinned source notes for the original wording and evidence anchors.

This stays within SourceLinkedExplanationReconstruction if the connective prose remains bounded and does not add new claims.

A minimal addedLinkPolicy for this slice would say:

  • addedLinkKind = relation-explication only;
  • sourceReferenceSet = {D-14, D-18};
  • boundednessReason = makes an already implied joint constraint explicit without adding a new mechanism, policy conclusion, or unsupported modality lift;
  • forbiddenLinkClass = design-scope robustness or gate-sufficiency claim.

Selected-method explanation

Source slice. The method-selection note chooses method M-2 because the material stays below threshold T and resource window W is available. The same source says that work plan WP-17 and result measurement RM-4 are still required before and after execution.

Published explanation. Method M-2 is selected here because the material condition and resource window match the declared method family. Use WP-17 for planning and RM-4 for result measurement.

This may stay within SourceLinkedExplanationReconstruction when the explanation keeps its source references visible and only makes the already source-recoverable selection relation easier to inspect. It is admissible for interpretation, source-finding, and selected-method inspection. It is not evidence that work occurred, not a gate decision, and not engineering justification. Evidence or provenance use requires a project evidence path governed by A.10; engineering-justification use requires an engineering-justification record governed by B.3; method-selection use requires project U.Method, work-plan use requires U.WorkPlan under A.15, and work-occurrence use requires a dated U.Work occurrence under A.15.1; gate use requires the project gate or constraint decision governed by A.20 or A.21.

Mixed-face bundle with different explanation classes

Source slice. Claim D-31 and trace set T-8 jointly show that the reserve path remains available during the short overload interval.

PlainView rendering. The reserve path stays available during the short overload interval. Source pins: D-31, T-8.

TechCard rendering. D-31 and T-8 jointly evidence availability of the reserve path during the short overload interval; this rendering adds bounded connective prose to make the source relation explicit.

The PlainView rendering may stay SourcePinnedExplanation while the TechCard rendering is SourceLinkedExplanationReconstruction. The bundle is admissible only if that class difference is stated rather than hidden under one blanket label.

Didactic retelling

Source slice. The pressure-control condition is satisfied whenever the reserve valve opens within 80 ms.

Didactic rendering. For onboarding: the system stays safe here because the reserve valve opens quickly enough; the threshold and source claim named by value remain in the pinned technical note.

This stays in DidacticRetelling only if it is kept off TechCard or AssuranceLane faces where it could be mistaken for canonical semantics.

Speculative retelling

Source slice. The pinned source notes record the observed recovery, but they do not explain why the recovery was so rapid.

Speculative rendering. One possible reading is that a temporary coupling effect accelerated recovery, but this is a reflective aid for discussion, not a source-backed claim.

This is admissible only as a clearly marked exploratory or didactic use on an existing face; it must not appear as policy-bearing, gate-bearing, or assurance-bearing claim material.

Anti-example: explanation that quietly becomes a new claim

Source slice. The pinned source claims show the reserve path remained available during the short overload interval.

Overreaching rendering. The reserve-path design is therefore robust against short overloads.

This no longer stays inside explanation-use discipline. The rendering introduces a design-scope commitment that the pinned source does not state, so the case must reopen the appropriate source U.Episteme, source U.EpistemePublication, project record whose governing FPF kind is named, or apply the neighboring pattern that governs that commitment instead of hiding inside a face-local explanation label.

Anti-example: reader help that quietly becomes policy-bearing use

Source slice. The onboarding note explains, in simplified prose, that the reserve valve usually opens quickly enough to keep the local pressure condition inside the tolerated window.

Overreaching rendering on an AssuranceLane-facing use. Operators may rely on this explanation as sufficient assurance that short overloads stay inside the tolerated window.

This also leaves the profile. The rendering is no longer only reader help over existing claims; it starts acting like policy-bearing or assurance-bearing guidance. The case must reopen, drop the explanation class, or use the neighboring pattern and project-side FPF kind and reference named by value that govern that guidance rather than staying on an explanation face.

Boundary to lighter explanatory note with source-bearing return

Source slice. The technical incident note says the reserve path remained available during the measured load band, but it also keeps one unresolved ambiguity about recovery latency.

Lighter explanatory rendering. In plain terms: the reserve path stayed available during overload recovery.

This does not remain ordinary explanation profiling. The lighter note suppresses the load-band condition and the unresolved ambiguity, so it can stay honest only through narrower admissible claim or effect, non-admissible downstream claim or effect, and return to the source U.Episteme or source U.EpistemePublication. Once those narrowed-claim conditions become primary, the case must leave ordinary explanation-use discipline and be governed as a coarsened rendering rather than as ordinary reader help.

Class-specific reopen cues in the worked slices

  • SourcePinnedExplanation reopens when the pinned source claim set, source pins, or admissible-face assumptions change so that the rendering can no longer remain omission-only and visibly source-bound.
  • SourceLinkedExplanationReconstruction reopens when the connective prose begins carrying an unsupported relation, or when the source claim set changes enough that the bounded reconstruction is no longer plainly source-linked.
  • DidacticRetelling reopens when the rendering moves onto TechCard or AssuranceLane-facing use, or when reader-help prose starts functioning as policy-bearing, design-bearing, or gate-bearing guidance.
  • SpeculativeRetelling reopens when source binding becomes available, or when the rendering starts to behave like canonical explanation rather than clearly bounded exploratory help.

Boundary to interpretation and world or gate use

If the rendering starts generating one bounded comparative review case, rival interpretations, bridge-mediated comparative claims, new hypotheses, world consequences, gate consequences, assurance claims, or engineering-justification claims, it must leave this profile and apply the neighboring FPF pattern and project-side FPF kind and reference named by value that govern the claim or effect (E.17.ID.CR, F.9.1, B.5.2, A.6.4, A.15, B.3, A.20, A.21).

Bias-Annotation

Lenses tested: Gov, Arch, Onto and Epist, Prag, Did. Scope: Universal for explanation-facing renderings that claim ExplanationFaithfulnessProfile on existing MVPK faces inside FPF. This profile intentionally biases toward explanation restraint on existing faces and against face inflation, second semantic tracks, and reader-help authority overread. The main mitigation is explicit admissibility by face, explicit no-new-A.6.B-boundary-claims discipline, A.6.3.CSC use when narrowed-claim source relation becomes primary, and clear boundaries to interpretation, retargeting, work, and world or gate governing patterns or project-side FPF kinds and references named by value when explanation stops being only explanation.

Conformance Checklist

A conformance check is retained only if it changes the next admissible use of the explanation rendering, blocks a concrete overclaim, or preserves a source reference or reopen condition needed for the declared safe next action.

Use core ordinary checks first. Conditional rows open only when reader-fit, bundle-local class difference, bounded explanation class, connective reconstruction, derivative rendering, or downstream reliance use is live.

EFP-Core ordinary checks

  1. CC-EF-1 — Explanation class is explicit. The explanation class is explicitly named.
  2. CC-EF-3 — Source reference and non-admissible downstream use are explicit. The compact note states source reference, admissible explanation-reader use, non-admissible downstream use, and reopen or boundary condition.
  3. CC-EF-5 — No new A.6.B boundary claims on explanation faces. The no-new-boundary-claims rule is explicit on explanation faces; the blocked claims are A.6.B-governed law claims, admissibility claims, deontic or commitment claims, and effect or evidence claims.
  4. CC-EF-7 — No second face family. A publication-side reviewer can tell why the case remains explanation-facing rather than becoming a second semantic rule track.

EFP-Conditional checks

  1. CC-EF-4 — Interpretant-side block is explicit when reader-fit does real work. When onboarding, contrastive explanation, or other reader-fit shaping matters, targetUserModel, interactionMode, contrastiveQuestion, allowedUse, and misuseRisk are visible enough to review.
  2. CC-EF-2 — Face and publication-face kind boundary is explicit when live. When face placement, publication face/form, interop publication form, pinning, provenance, or reliability transport is not already inherited by visible source reference, the rendering states the admissible MVPK face, publication-face kind value, and required pinning or provenance boundary explicitly.
  3. CC-EF-6 — Boundary to interpretation, retargeting, coarsening, and world or gate use is explicit. The boundary is explicit, including A.6.3.CSC Controlled Semantic Coarsening when a narrower admissible claim or effect, non-admissible downstream claim or effect, or source-bearing reopen condition becomes primary.
  4. CC-EF-8 — Bundle-local class differences are explicit. When one publication bundle carries different explanation classes across faces, that difference is stated explicitly rather than hidden under one bundle-wide label.
  5. CC-EF-9 — Source-loss or downgraded-reliability classes publish forbidden downstream uses. Didactic or speculative renderings, and any rendering with downgraded reliability transport or declared source-loss mode, state their forbidden downstream uses explicitly.
  6. CC-EF-10 — Reopen triggers match the class. The published review note makes class-relevant reopen triggers visible when source claim set, pins, provenance, or admissible-face assumptions change.
  7. CC-EF-11 — SourceLinkedExplanationReconstruction publishes addedLinkPolicy when needed. When bounded connective prose is doing real review work, the rendering states what link is added, why it remains bounded, and which unsupported link class is explicitly forbidden.
  8. CC-EF-12 — Derivative renderings keep source links operative. A fork, adaptation, translation, generated explanation, tutorial, access-format conversion, or other derivative rendering that will guide work or reliance maps each operative claim to the exact source passage, carrier path, or project-side FPF kind and reference named by value that evidences it, or else downgrades to reader help or applies A.6.3.CSC as appropriate.
  9. CC-EF-13 — Generated explanation reliance boundary is explicit. A generated explanation used beyond ordinary reader help states its explanation class, source-finding state, operative claims, governing pattern for each relied-on claim, and non-admissible downstream use. The explanation itself is not evidence, assurance, approval, gate passage, release reliance, or work authority.

Common Anti-Patterns and How to Avoid Them

Anti-patternWhy it is wrongHow to avoid it
Treating every explanatory prose block as equally faithfulrendering, reconstruction, didactic work, and speculation have different review loadspublish the explanation-class set and admissibility matrix
Letting reader-fit stay implicit when explanation is clearly tailoreda didactic or contrastive rendering can be over-read as general or policy-bearing guidancepublish the interpretant-side block whenever user model, allowed use, or misuse boundaries are load-bearing
Using explanation faces as a second rule tracknew semantic commitments hide behind reader-friendly prosekeep explanation faces tied to existing claim IDs, pins, and provenance
Calling connective reconstruction "bounded" without naming the added linksource-linked explanation quietly imports unsupported relation theory or bridge-comparison loadrequire addedLinkPolicy with source references, boundedness reason, and forbidden link class
Letting speculative prose enter technical or assurance usespeculative retelling starts to look canonicalrestrict speculative retelling to clearly marked exploratory or didactic use on existing faces
Collapsing MVPK face and publication face/form or interop publication form disciplineexplanation appears to create a new publication familystay on existing MVPK faces and keep named publication face/form or interop publication form and carrier policy explicit
Derivative rendering as source replacementa fork, adaptation, generated explanation, tutorial, or access-format conversion is treated as the original source because it is easier to read or accesskeep it as a derivative rendering, publish source links for operative claims, and use A.10 or A.6.3.CSC when reliance or narrowed-use discipline is live
Explanation as evidence or assurancea fluent or source-linked explanation is cited as proof, approval, gate passage, release reliance, work authority, or assuranceclassify the rendering, keep ordinary reader help inside E.17.EFP, and open A.10, B.3, A.21, A.15, or another source relation that evidences the operative claim only for the operative claim being relied on

Consequences

  • Explanation classes become explicit and reviewable.
  • Existing MVPK face discipline stays intact.
  • Pins, provenance, and evidence-binding become structural, not rhetorical extras.
  • The boundary to interpretation, retargeting, and world or gate work becomes easier to review.

Rationale

Explanation help already appears on existing faces, and the nearest failure mode is to let helpful prose shift into hidden source claims, bridge-comparison load, or gate-bearing guidance. E.17.EFP gives the reader one practical benefit: they can tell whether a rendering is source-pinned, reconstructive, didactic, or speculative, and therefore whether it may stay as explanation help, must downgrade use, or must leave this profile because the rendering has stopped being only explanation-facing help.

SoTA Alignment: Adopted And Adapted Invariants And Rejected Shortcuts

SoTA alignment rule. Read each row here as source idea -> local FPF invariant -> practical local test -> popular shortcut rejected. A source citation governs nothing by reputation; it counts only when the cited idea is translated into the Solution, conformance checks, boundary rules, worked slices, and Relations of this pattern.

Traditions covered. This profile binds itself to architecture-description governance, explainability and reliability guidance, and faithfulness evaluation for natural-language explanations.

Claim needSource idea and current sourceCurrent source section or referenceLocal FPF invariant and practical local testAdopted, adapted, or rejected shortcut
Explanation renderings must remain subordinate to governed views, source U.Episteme or source U.EpistemePublication, source pins, and provenance references rather than quietly becoming a second semantic track.Architecture-description practice keeps views, viewpoints, correspondences, and architecture descriptions explicit instead of letting reader-help prose replace governed source.Joint ISO, IEC, and IEEE 42010:2022; source maturity = mature standardE.17.EFP adopts this by keeping explanation on existing MVPK faces, tying class assignment to the source U.Episteme or source U.EpistemePublication, and rejecting a second face family or second semantic rule track.Adopt.
Explanation quality is use- and audience-sensitive and must make knowledge limits visible rather than collapse all explanations into one generic mode.Explainable-AI guidance distinguishes explanation obligations by user, purpose, and stated limits instead of one universal explanation class.Phillips et al. (2021), Four Principles of Explainable Artificial Intelligence; source maturity = current government guidanceE.17.EFP adapts this into explicit explanation classes, admissible faces, and forbidden downstream uses, while keeping the E.17 face system unchanged.Adopt and adapt.
Faithfulness is not the same as plausibility; explanation evaluation must stay tethered to the underlying source or decision basis.Faithfulness work in interpretable NLP treats explanation as source-sensitive and warns against equating persuasive prose with faithful interpretation.Jacovi & Goldberg (2020), Towards Faithfully Interpretable NLP Systems; source maturity = research paper as source for evaluation useE.17.EFP adopts this by requiring source relation, E.17:5.1b source-relation class, evidence relation, pins, provenance, and class-per-rendering review rather than fluency alone.Adopt.
Natural-language explanation needs explicit checking for faithfulness or self-consistency rather than trust in stylistic coherence.Recent evaluation work treats natural-language explanation as a review problem with explicit faithfulness or self-consistency checks, not just readability.Parcalabescu & Frank (2024), On Measuring Faithfulness or Self-consistency of Natural Language Explanations; source maturity = research paper as source for evaluation useE.17.EFP adapts this into admissibility review, class downgrade, and reopen duties when source relation, evidence relation, or face assumptions no longer hold.Adapt.
Retrieval-augmented generated explanations and source-linked generated explanations need separate checks for retrieved context, answer faithfulness, answer relevance, and source-relation quality.RAG evaluation practice distinguishes context relevance for retrieval, answer faithfulness, answer relevance, and source-use dimensions instead of treating a retrieved context or citation-like link as reliability by itself.Es et al. (2023), RAGAS; Saad-Falcon et al. (2023), ARES; source maturity = evaluation-method input, conditional on retrieval-facing explanation use.E.17.EFP adapts this through E.17:5.1b distinctions such as source-retrieved, source-used, source-faithful, claim-recoverable-from-source, and claim-plausible-only; the practical test is that retrieved source, source-use relation, and operative claim recoverability remain separate before any explanation guides reliance.Adapt conditionally. Use only when retrieval-facing explanation behavior or source-link behavior is live; reject making RAG metrics an FPF ontology or authoritySourceRef target.
Interactive explanations create extra interaction and source-relation demands: repeated queries, changing models and data, traceability, responsiveness, and reader-action boundaries.Interactive-explanation work treats explanation as an information-systems architecture problem connecting reader interaction demands with system capabilities; source maturity = emerging arXiv preprint, not settled standard.Labarta et al. (2026), X-SYS: A Reference Architecture for Interactive Explanation Systems, arXiv:2602.12748v3.E.17.EFP adapts this narrowly through targetUserModel, interactionMode, contrastiveQuestion, allowedUse, and misuseRisk when reader interaction is live, while full interactive explanation systems remain outside this profile.Adapt with maturity label. Use as emerging source material for interaction-sensitive fields; reject treating it as a normative standard or as authority that static explanation prose is enough.

Architecture-description governance tradition. E.17.EFP adopts the rule that reader-helpful renderings stay subordinate to the already governed source U.Episteme or source U.EpistemePublication rather than replacing it. Explanation therefore remains on existing faces and is judged against source claims, pins, and provenance references.

Explainability and reliability traditions. E.17.EFP adopts the distinction between source-bound explanation and merely plausible explanation prose. It rejects the still-popular shortcut in which fluent or pedagogically useful language is treated as sufficient evidence of explanation faithfulness.

Local stance. Best-known current practice points to a narrow rule: explanation renderings are admissible only when their class, source relation, evidence relation, admissible faces, and forbidden downstream uses remain visible enough that reader help does not become a second semantic rule track.

Action result from the explanation-faithfulness and retrieval-evaluation practice basis: fluent, source-linked, generated, retrieved, didactic, or pedagogically useful explanations do not become evidence, assurance, approval, gate passage, release reliance, work authority, or operative-claim-source relation by fluency, plausibility, citation-like wording, or retrieved context. The local E.17.EFP result is explanation class, source reference, admissible explanation use or source-finding state, non-admissible downstream use, and operative-claim mapping to A.10 or another pattern governing the recovered claim only when reliance use is being made. Reopen the explanation-use result when the source claim set, pins, provenance, retrieved context, generated rendering, admissible face, use escalation, or source relation for an operative claim changes.

Relations

  • Builds on: E.17.0, E.17, A.7, E.10.D2, A.6.B, F.9, F.18
  • Coordinates with: ConservativeRetextualization, RepresentationTransduction, A.6.3.CSC Controlled Semantic Coarsening, E.17.ID.CR ComparativeReading, A.6.4, A.15, A.15.4, B.3, A.20, A.21
  • Primary governing-pattern relation and main neighboring-pattern boundaries: this profile stays governed by E.17.0 and E.17; any shift toward new semantics, coarsened narrowed-claim rendering, or gate-bearing claim or effect leaves the profile.
  • Boundary notes: comparative-interpretation cases apply E.17.ID.CR ComparativeReading; explanation-like renderings with declared source-loss mode whose narrower admissible claim or effect, non-admissible downstream claim or effect, and source-bearing reopen are primary apply A.6.3.CSC Controlled Semantic Coarsening; retargeting applies A.6.4; work and reliance consequences apply A.15 and A.15.4; assurance and engineering-justification consequences apply B.3; gate-bearing consequences apply A.20 or A.21.

C.29 mathematical-lens use relation

When an explanation-facing rendering uses a mathematical lens as part of an explanation, E.17.EFP still governs rendering class, source relation, evidence relation, admissible faces, and forbidden downstream uses. The applicable C.29 output for the stated use (MathLensUse.LensCandidateNote, MathLensUse.OneLine, MathLensUse.MiniCard, or MathLensUse.FullCard when required) may be cited only for the mathematical-lens use part: candidate mathematical object, lens mapping mode, preserved and lost structure, exposed invariant or distinction, lens-use admissibility value, admissible use, non-admissible use, and stop condition. It does not make the explanation faithful, evidence-bearing, or admissible for downstream use by itself.

E.17.EFP:End

ComparativeReading — bounded comparative reading over comparative review units

Status: Stable

Placement. Pattern for bounded comparative reading over comparative review units, coordinated with the neighboring A.6.3.*, F.9.1, and E.17.EFP patterns. Builds on. C.2.2a; A.16.0; F.9; E.14. Coordinates with. A.6.P; A.6.3; A.6.3.CR; A.6.3.RT; A.6.9; F.9; F.9.1; E.17.EFP; E.17.AUD.LHR; B.5.2.0; B.5.2; OntologicalReframing; A.6.4; C.11; A.15; A.20; A.21. Active governing pattern. ComparativeReading is the governing pattern here under the wider InterpretationDiscipline family. The public pattern name is ComparativeReading, not interpretation-in-general. Citation names. Cite this pattern as E.17.ID.CR, ID.CR, or ComparativeReading. Do not cite it as unqualified ID or CR; use A.6.3.CR when the intended pattern is ConservativeRetextualization. Family-specialization guard. InterpretationDiscipline is a naming-level family label only. It is not a U.* kind, not a publication-face kind, not a publication face, not a new episteme kind, not an authority reference, not a bridge taxonomy, not a second semantic track, and not a governing pattern by itself. The active governing pattern here is ComparativeReading; no publication or project record cites InterpretationDiscipline, ID, or CR alone as governingPatternRef or authoritySourceRef. Plain-name. Bounded comparative reading over comparative review units. One-line summary. ComparativeReading works over one bounded comparative review unit over already available source epistemes or source publications while the shared review frame stays preserved, one bounded contrast or a small set of bounded contrast rows is being made visible, and downstream claim or effect remains outside. The compared alternatives may be distinct entities when they stay under that shared review frame. Bounded comparative review unit in plain terms. The pattern works over the comparative review unit itself - the comparison note, small comparison sheet, or guided review aid that carries one bounded contrast or a small set of bounded contrast rows - not the whole source episteme or source publication set and not the wider decision or work process.

Early comparative lens. Read the comparative-reading case through one early formula: one comparative review unit over already available source epistemes or source publications keeps the shared review frame visible while making one bounded contrast or a small set of bounded contrast rows inspectable, with downstream claim or effect still left outside. The shared frame may be the same EntityOfConcernRef, review target, described situation, decision situation, release candidate, method family, control scope, problem frame, or source-set reference. Compared alternatives under that frame may be distinct objects. That is the whole early read. It does not govern interpretation in general, the whole source episteme or source publication set, or the wider decision or work process.

Use this when. Use this pattern when you need a small comparative review unit, such as a comparison note, comparison sheet, or guided review aid, over already available source epistemes or source publications so that a team can inspect one bounded contrast or a small set of bounded contrast rows while still keeping the shared review frame and compared alternatives explicit and without yet claiming equivalence, root cause, redesign, release approval, or another unsupported downstream claim or effect.

First-minute working moment. A team already has two or more source-pinned notes, sheets, views, or review aids on the table and needs one honest comparison unit that keeps the shared review frame visible while making one bounded contrast or a small comparison sheet inspectable. The compared items may be two design options for one release, two methods for one task family, two vendor bulletins for one control scope, or two programme strategies for one initiative. The real job is not yet action selection, approval, ontology repair, or wider work-process control. It is to help reviewers compare without pretending that the comparison note or sheet already became a decision.

First-screen questions.

  1. What source epistemes or source publications are being compared?
  2. What one contrast or small set of contrast rows is being made visible?
  3. What shared review frame remains preserved, and what compared alternatives stay distinct under it?
  4. What does this note not decide?
  5. What boundary condition would make it a decision, prompt, bridge, ontology, work or reliance, gate, assurance, or adjudication case?

Working action spine. When a comparison note or guided review aid is needed, separate compared sources, one bounded contrast or small row set, shared review frame, distinct alternatives when present, and undecided downstream claim or effect. Use the unit for bounded review, source-finding, contrast inspection, or planning preparation. The ordinary output is the seven-row ordinary working card or one compact note or sheet. If a decision claim, bridge claim, prompt claim, ontology claim, work claim, reliance claim, gate claim, assurance claim, or adjudication claim becomes live, apply the neighboring FPF pattern that governs that claim. Decision-making claims and decision records apply C.11; relation-precision claims apply A.6.P; bridge wording applies Part F with A.6.9, F.9, or F.9.1; gate and release claims apply A.20 or A.21. Use E.17:5.1c for orientation use, reliance use, operative claim, non-admissible downstream use, and reopen trigger; use E.17:5.1d when the primary question under repair may be same-entity rewrite, representation change, coarsening, explanation, bridge or substitution, work or reliance, gate, evidence, assurance, retargeting, or carrier or front-end work instead of bounded comparative reading.

Ordinary-output claim inventory. After ComparativeReading, the author has claimed only that these source epistemes, source publications, or project-side FPF kinds and references named by value have been compared under this bounded comparison basis, shared review frame, and declared source references. The author has not claimed equivalence, substitutability, bridge relation, selection, recommendation, decision, evidence path, assurance, gate passage, release readiness, work occurrence, or reliance relation unless the neighboring FPF pattern governing that claim and project-side FPF kind and reference named by value are named.

Primary working reader. The primary first-minute reader is an engineer-manager or programme lead using a bounded comparative review unit in ordinary project review. Architecture reviewers, release or compliance reviewers, research reviewers, and cultural or programme reviewers remain important secondary readers, but the first recognition block should still read engineer-manager-first rather than architecture-first.

Problem-owning practice reading. In ordinary practice, this pattern helps teams write design-review notes, release or compliance comparisons, incident triage comparisons, research review notes, and programme review aids when the real job is to compare already available source epistemes or source publications under one shared review frame without yet claiming equivalence, action selection, or decision authority. The job is not to settle the full review or downstream decision process. It is to make one bounded comparative review unit honest enough that reviewers can inspect one contrast or a small set of contrast rows, know what downstream claim or effect stays outside, and stop arguing as if the note had already become a decision.

What goes wrong if you miss this. If this pattern stays unnamed, teams often flip between two bad readings. Either the comparative review unit is dismissed as if it were only harmless prose, or it is over-read as if it already licensed equivalence, action selection, gate pressure, or work or reliance. The practical result is distrust and friction in review work because readers can no longer tell whether they are looking at one bounded comparison aid or at a disguised decision.

What this buys you in practice. Naming the pattern buys one smaller and more usable review unit. A team can compare already available source epistemes or source publications, inspect one bounded contrast or a small comparison sheet, and still keep downstream claim or effect outside. In practice that means review conversations move faster with less argument about whether the note already settled equivalence, approval, or the next work or reliance move.

Ordinary use. If the comparison only helps review, source-finding, contrast inspection, or planning preparation, keep one small comparison note or the seven-row ordinary working card; do not thicken it into a decision, bridge, release, or authority record.

Cheap stop after ordinary card. If the comparison note answers the seven-row card and no neighboring-boundary claim is live, stop. Do not open E.17.AUD.LHR, E.17.AUD.OOTD, E.17.EFP, A.6.3.CSC, bridge, prompt, work or reliance, gate, assurance, or authority patterns.

Assurance-section boundary. Read E.17.AUD.LHR, E.17.AUD.OOTD, interpretant-side fields, bridge boundaries, prompt boundaries, authority boundaries, and the heavier boundary tables as assurance or source-relation material after the seven-row ordinary card, not as the ordinary first screen for one comparison note.

Load-bearing use. Open the fuller comparative-relation and source-relation apparatus only when the comparison will be externally relied on, disputed, cited, used across context, used to affect person status or team status, or read as release, gate, bridge or substitution, action-selection, work or reliance, or engineering-justification input.

Stop condition. Stop once the comparison changes no next review, source-finding, contrast-inspection, or planning-preparation move and blocks no concrete overclaim about equivalence, decision, bridge or substitution, work or reliance, gate, or engineering justification.

Admissible-use examples.

Admissible comparative-useSource-finding or bounded inspection with no downstream claim or effectNon-admissible comparative use
A comparison note is admissible for one bounded review discussion when it names the compared sources, shared review frame, compared alternatives when present, one contrast, and what remains undecided.A comparison suggests the next source, method, or bridge claim to inspect without deciding substitution, method selection, release, or work reliance.A comparison table is used as equivalence, bridge licence, method-selection decision, release decision, evidence, gate passage, or adjudication authority.

Admissible comparative-unit forms.

  • Single-contrast note — one bounded contrast with one comparison basis, one shared review frame, unsupported downstream claim or effect, world-contact limit, and boundary trigger.
  • Small comparison sheet — a small set of bounded contrast rows under one shared review frame. Each row states its comparison basis; the sheet has one shared unsupported downstream claim or effect, one world-contact limit, and one boundary trigger. It must not add an aggregate recommendation, ranking, or action-selection conclusion unless another governing FPF pattern or project record named by value supplies that source relation or project record.

When one comparative note is itself lighter or simplified, it remains admissible here only while source-bearing return stays available and heavier bridge, action-selection, or work or reliance claim remains outside.

Not this pattern when. This is not the right pattern when the primary question is:

  • restating the same EntityOfConcern or shifting its representation rather than adding one bounded contrast under A.6.3.*;
  • carrying a controlled narrower-use rendering whose governing relation is source-bearing tether, narrower admissible claim or effect, non-admissible downstream claim or effect, and reopen duty rather than bounded comparative reading;
  • explicating an already-declared bridge stance rather than governing a comparative review unit under F.9.1;
  • deciding explanation-face use rather than carrying bounded comparative reading under E.17.EFP;
  • PublicationUnit EntityOfConcern stabilization after local repair;
  • abductive-prompt or action-selection pressure under B.5.2(.0);
  • ontology or target change under OntologicalReframing or A.6.4;
  • or downstream decision, work or reliance, gate, assurance, or adjudication authority under C.11, A.15, A.20, or A.21.

Neighboring-work boundary. If the live work is actually same-EntityOfConcern rewrite, relation-precision work, bridge wording, bridge-stance note over an existing Bridge Card, explanation-face use, abductive prompt, ontology change, decision work, gate or authority work, or local PublicationUnit repair, keep the current comparative review unit narrow and use the FPF pattern that governs that outside work (A.6.P, A.6.3.*, A.6.9, F.9, F.9.1, E.17.EFP, B.5.2(.0), OntologicalReframing or A.6.4, C.11, A.15, A.20, A.21, E.17.AUD.LHR, or E.17.AUD.OOTD). The engineer-manager action is to keep the comparison note from carrying that outside work; if the outside work is live, recover the existing project-side FPF kind and reference named by value for that work when available. If no existing source carries the needed load-bearing claim, create only a prospective repair request, future decision request, prospective work-plan entry, or explicit source-gap note and otherwise keep the comparison note to inline orientation or source-finding; the new request or note must not be treated as retroactive evidence, approval, gate passage, performed U.Work, release permission, or assurance.

Ordinary recovery reference. If the recognition block fits, keep three entries recoverable: the bounded comparative review unit, the seven-row ordinary working card in E.17.ID.CR:4.3.b.a, and the nearest ordinary worked slices in E.17.ID.CR:5.4.5 through E.17.ID.CR:5.4.6.c. Use E.17.ID.CR:4.1.d only if one pressure term still blocks the working read.

Quick kind-plus-lens reading. InterpretationDiscipline names the wider interpretation family and ComparativeReading names the active governing pattern here. Recover the case through the early comparative lens above: one comparative review unit over already available source epistemes or source publications, the shared review frame preserved, one bounded contrast or small row set made visible, and downstream claim or effect still outside. If that read no longer holds, handle the neighboring work under the pattern or governing FPF pattern and project-side FPF kind and reference named by value rather than widening this pattern into interpretation-in-general.

First-minute term reading. Read the early pressure terms this way. Shared review frame = the review target, described situation, decision situation, release candidate, method family, control scope, problem frame, or source-set reference preserved across the comparison. Compared alternatives = the distinct options, methods, bulletins, strategies, notes, source epistemes, source publications, or project-side FPF kinds and references named by value kept separate under that frame. Source epistemes or source publications, plus source references, = already available source epistemes or source publications plus the notes, views, or links that keep the comparison checkable. allowedUse and misuseRisk are local reader-fit fields under admissibleUse: they name what comparative use remains admissible for this unit and what unsupported downstream reading it may wrongly attract.

Quick working-fit check. Before you read the heavier harness, ask:

  1. Am I working over the comparative review unit itself?
  2. Does the shared review frame stay preserved, with compared alternatives still distinct if they are distinct, while one bounded contrast or small row set is being made visible?
  3. Is the main question still this bounded comparison rather than same-EntityOfConcern rewrite, PublicationUnit stabilization, decision, gate, action, approval, rollout, release, policy, assurance, adjudication, bridge, prompt, or ontology-shift claim?

If yes, stay here and use the ordinary working card. If no, use the neighboring-work boundary above and the fuller boundary table in E.17.ID.CR:4.5.

Worked-slice pointer. If you need one ordinary sentence fast, borrow the nearest admissible example from E.17.ID.CR:5.4.5 through E.17.ID.CR:5.4.6.c and then check it against the seven-row ordinary working card rather than treating the example itself as a second mini-harness.

Problem frame

Anti-fixed-process note. The quick checks, ordinary working card, worked-slice pointer, working order, and worked slices in this pattern are local aids and examples for one comparative review unit. They are not a canonical transduction process for the bounded comparative review unit here, not a mandatory fixed sequence for the wider review process, and not a promise that admissible cases move through one fixed graph in one direction. FPF fixes the local comparison unit, the local comparative move, the neighboring-pattern boundaries, and the inherited dynamic frame; actual work may reopen, back off, loop, or depend on outside observations and downstream constraints. Read the worked-slice bank sideways rather than as one required sequence: one admissible case may finish after a single bounded comparison, another may reopen after a new outside observation, and another may need the neighboring pattern once environmental change or downstream constraints make that neighboring pattern the exact locus for the live downstream question.

Engineer-managers, programme leads, and research or cultural reviewers repeatedly need to prepare or share a small comparative review unit that helps a team read two already available source epistemes or source publications together without overstating what downstream claim or effect that unit now carries. Typical moments include:

  • a design-review note that says one already available option write-up foregrounds coupling risk more than another;
  • a release or compliance comparison that says an internal control sheet and a vendor bulletin are not yet equivalent even though they speak to the same review task;
  • an operations comparison that says a dashboard view and a maintenance note foreground different operational pressures in the same service episode;
  • a research-review note that says one available synthesis foregrounds measurement uncertainty more than another without yet declaring a better method;
  • a program or cultural review note that says one available brief foregrounds participation continuity more than another without yet deciding funding, curation, or program direction.

These review units are useful precisely because they make the next review discussion more precise. They become dangerous when a reader starts treating them as if they already established equivalence, root cause, redesign priority, action selection, program choice, or approval.

Problem

Without a named comparative-reading discipline:

  1. a useful comparative review unit is dismissed as if it were only harmless prose;
  2. a cautious review aid is over-read as if it already licensed substitution, interoperability, or equivalence;
  3. a comparative review unit quietly becomes action-selection pressure or hidden hypothesis work while still sounding calm;
  4. same-entity viewing, explanation rendering, and bounded comparative reading collapse into one fuzzy review bucket;
  5. ontology-facing target shift or changed EntityOfConcern hides inside comparative wording;
  6. a review unit written to serve review is mistaken for work or reliance guidance, assurance shorthand, or release authority.

Forces

ForceTension
Engineer-manager usability vs governance precisionThe pattern must start from a recognisable review situation without hiding its neighboring patterns.
Middle-band realitySome comparative readings are more committed than a bridge-stance overlay over an existing Bridge Card but still below full action selection.
Source tether vs interpretive liftThe case must add a bounded interpretive lift without pretending to create a new free-floating semantics.
Comparison unit vs surrounding workThe pattern must keep the comparative review unit, the bounded comparative reading, and the larger review process distinct rather than sliding between them by style.
Viewing restraintInterpretation must not absorb same-entity viewing, conservative rewriting, or representation transduction whose main question is not comparative reading.
Bridge restraintInterpretation must not become a second bridge taxonomy.
Explanation restraintInterpretation must not become a shadow face-use discipline system next to E.17.EFP.
Abductive restraintInterpretation must stop before abductive-prompt or action-selection claim becomes live.
Ontology restraintInterpretation must not hide same-referent pressure, retargeted-EntityOfConcernRef pressure, or changed EntityOfConcernRef.
Interpretant-side boundednessReader-fit may matter, but it must remain explicit and bounded rather than silently rewriting authority.

Solution - comparative review units with bounded comparative reading, escalation, and boundary rules

Engineer-manager-first working use, comparison-unit distinction, and compact specialization definition

The solution opening here follows E.17.ID.CR:4.3's working-model-first discipline. A solution-side reader first meets the engineer-manager working use and the comparison-unit distinction, then the compact ComparativeReading definition that names the formal comparative read. That order keeps the governing pattern explicit without making the compact definition a substitute for the working review moment.

Engineer-manager-first use

In plain working terms, this pattern is for a review unit that says something like:

  • this option write-up foregrounds integration pressure more than that one;
  • these two available source epistemes or source publications are useful together, but they are not yet equivalent;
  • this dashboard view helps triage one contrastive question, but it is not yet a release decision or a root-cause claim;
  • this research synthesis foregrounds uncertainty more than that one, but it is not yet a method choice;
  • this program brief foregrounds continuity risk more than that one, but it is not yet a funding decision.

If that sounds like the review unit you need, keep the comparison unit bounded this way. If instead you are mainly restating source epistemes or source publications, explaining them, opening a new abductive prompt or action-selection question, changing the EntityOfConcern, or making a decision, handle that live work under the FPF pattern or governing FPF pattern and project-side FPF kind and reference named by value before the comparison unit carries the claim.

Pattern, case, and comparison-unit distinction

This pattern presents the ComparativeReading as the active governing pattern inside the broader InterpretationDiscipline family. The family name marks the wider interpretation zone. The governing pattern here is narrower and more concrete than interpretation-in-general. It works over one comparative review unit and only the bounded comparative reading carried by that unit. The wider review or decision work remains outside the pattern except where neighboring-work boundary or authority limits are needed.

The kind stack should therefore be read explicitly:

  • family name = InterpretationDiscipline as the wider naming-level family;
  • family-level move class = bounded interpretation work at that wider level;
  • governing pattern = ComparativeReading;
  • comparison unit = the bounded comparative review unit;
  • comparative move = bounded comparative reading over already available source epistemes or source publications;
  • wider work = the broader review or decision process that still sits outside this pattern.

The family name is only a naming aid for this specialization. It is not a U.Kind, publication-face kind, publication face, authority reference, or governing-pattern reference; when a record needs a governing pattern, cite E.17.ID.CR ComparativeReading or the more neighboring pattern governing that claim.

In ordinary use the bounded comparative review unit may appear as a short comparison note, comparison sheet, guided review aid, or guided comparative UI. Those are admissible unit forms, not rival comparison units.

This distinction matters because the pattern is not governing reading as such in the abstract and it is not governing the whole review or decision work. It is governing a small, reviewable unit that carries one bounded comparative lift over already available source epistemes or source publications. The pattern does not create a new practical publication-unit family of its own; it tells when such a comparative review unit can stay modest and when a downstream claim or effect or decision-bearing record already belongs to another neighboring pattern governing that claim.

Compact specialization definition

ComparativeReading is the active governing pattern inside the InterpretationDiscipline family.

It governs one comparative review unit over already available, source-pinned epistemes or source-pinned publications and carries one bounded comparative reading, or a small set of bounded contrast rows, over that unit.

It stays admissible only while the case preserves the shared review frame, keeps distinct alternatives distinct unless bridge or substitution relation exists elsewhere, keeps the source references visible, keeps the added comparative lift bounded, and does not turn into same-entity viewing, bridge claims, explanation-face governance, prompt-bearing abductive work, ontology-facing reframing, retargeting, or downstream work or reliance authority.

Read this blockquote as the compact governing-pattern reminder. It should stay nearby and early, but not stand in front of the engineer-manager-first use block or the comparison-unit distinction that working readers need first.

Why the comparative-reading specialization needs its own discipline

Teams already produce small comparative review units, often as comparison notes, comparison sheets, or guided review aids, that are more committed than a plain bridge-stance overlay over an existing Bridge Card but still below action selection, ontology reframing, retargeting, or approval guidance. Leaving that middle band unnamed creates two opposite failures: one reader dismisses the review unit as harmless prose, while another over-reads it as if it already carried substitution, action-selection pressure, or action authority.

This pattern gives teams a narrow way to prepare, share, and inspect that comparative review unit without smuggling a downstream claim or effect beyond what the source, bridge stance, and bounded use can honestly carry.

Local working vocabulary

This pattern uses a small local vocabulary for review.

  • Comparative review unit = a lightweight review unit such as a short comparison note, small comparison sheet, guided review aid, or guided comparative UI whose explicit job is one bounded comparative reading or a small set of bounded contrast rows under one shared review frame.
  • Base governing case = the primary source relation, pattern-governing case, or project work question that is already live before bounded comparative reading is added.
  • Reviewed source episteme or source publication = the already pinned or otherwise reviewable source episteme or source publication being comparatively read; in plain terms, the already available source episteme or source publication under review.
  • Source references = sourceAnchorSet or sourceRefs that make the interpreted source episteme or source publication inspectable.
  • Shared review frame = the review target, described situation, decision situation, release candidate, method family, control scope, problem frame, or source-set reference that remains preserved while the comparison is made.
  • Compared alternative = one distinct option, method, bulletin, strategy, note, view, source episteme, source publication, or project-side FPF kind and reference named by value kept separate under the shared review frame.
  • Same EntityOfConcernRef case = the special case where the compared sources describe the same entity. This is common, but it is not required when distinct alternatives remain under one shared review frame.
  • Interpretive lift = the bounded comparative or asymmetry-bearing reading added on top of already available source epistemes or source publications; in a small comparison sheet, each row has its own declared comparison basis while the unit keeps one shared unsupported downstream claim or effect and boundary trigger.
  • Bridge Card reference = required bridgeCardRef when the case depends on bridge-mediated correspondence rather than ordinary source reading alone; optional bridgeStanceRef may qualify that bridge only after the bridge card exists.
  • Allowed use = what this review unit may be used for while it remains only a bounded comparative review unit.
  • Misuse risk = how the review unit is most likely to be over-read into a bridge, action-selection, ontology, or authority claim that it does not carry.
  • Prompt boundary = the explicit U.AbductivePrompt publication that becomes the governing publication when abductive-prompt or action-selection claim becomes live.
  • Ordinary minimum block = the smallest ordinary record that keeps the review unit honest for working use.
  • Load-bearing extension = the fuller declaration record used when the case sits close to bridge, explanation, abductive, ontology, or authority boundaries.

These terms are local review aids. They inherit the E.17:5.1e local-field rule: they do not create U.Kind, publication-face kind, RelationKind, KindBridge, EvidenceKind, GateDecision, SpeechAct, Commitment, U.Work, authoritySourceRef target, publication face, or project-side FPF kind and reference named by value unless another governing FPF pattern explicitly instantiates that object. They do not replace source notes, bridge cards, explanation renderings, prompt publications, or gate-bearing source forms. Their role is to keep a bounded comparative review unit readable without silently upgrading its authority.

Scope and exclusions

In scope

  • bounded comparative asymmetry over already declared reviewed source epistemes or source publications;
  • reader-facing interpretive caution that stays source-tethered and preserves the shared review frame;
  • comparison of distinct alternatives under one shared review target, described situation, release candidate, method family, control scope, problem frame, or source-set reference;
  • comparative review units that answer one explicit contrastive question without opening a rival action-selection search;
  • bounded user-fit when that fit only limits use rather than widening authority.

Out of scope

  • same-entity restatement, conservative rewrite, or representation shift whose main question stays with A.6.3, A.6.3.CR, or A.6.3.RT;
  • bridge-stance overlay that only clarifies an already-declared bridge stance over an existing Bridge Card (F.9.1);
  • explanation-face use discipline, admissibility, or added-link review on existing faces (E.17.EFP);
  • abductive-prompt or action-selection cases (B.5.2.0 or B.5.2);
  • ontology-facing reframing or changed EntityOfConcern (OntologicalReframing or A.6.4);
  • policy, gate, adjudication, assurance, or work-facing use (A.15, A.20, or A.21).

Working-fit test

Use this discipline only when all of the following hold:

  1. the reviewed source episteme or source publication is already pinned or otherwise reviewable;
  2. the review unit adds one bounded comparative or interpretive lift, or a small set of bounded contrast rows with row-level comparison bases;
  3. the case is still answering a bounded contrastive question rather than selecting an action;
  4. the shared review frame stays preserved, and compared alternatives remain distinct unless an explicit bridge or substitution source supplies equivalence, substitution, or another named relation between them;
  5. the main question is not already better described as same-entity viewing, bridge-stance overlay over an existing Bridge Card, or explanation-face use discipline.

If any of those fail, handle the live work under the neighboring FPF pattern and project-side FPF kind and reference named by value that actually govern it.

Nearest neighboring work

Name the base source relation or work question before adding bounded comparative reading. The nearest neighboring work questions should be separated in this order:

  1. Same-entity rewrite or representation shift. If the project move is still mainly restatement, representation shift, or another same-entity viewing transform, keep it with A.6.3, A.6.3.CR, or A.6.3.RT.
  2. Bridge-stance clarification. If the review unit only makes an already-declared bridge stance more legible, it stays subordinate to F.9.1.
  3. Explanation-face use. If the main question is explanation class, face admissibility, or bounded connective prose on an existing face, it stays with E.17.EFP.
  4. Abductive prompt or action-selection pressure. If open-question pressure or action-selection pursuit becomes live, bounded comparative reading ends and B.5.2.0 or B.5.2 governs that work.
  5. Changed EntityOfConcern or decision-bearing use. If continuity witnesses, changed target, decision-bearing consequence, gate, approval, rollout, release, policy, assurance, or adjudication use is needed, the case has already left this discipline for OntologicalReframing, A.6.4, A.15, A.20, A.21, or another governing FPF pattern and project-side FPF kind and reference named by value.

Working-model first; plain questions first, ordinary minimum second, full declaration third

Most working users should not have to start with a long declaration block. This pattern therefore follows E.14's working-model-first discipline: the first usable block is a small set of plain questions that helps an engineer-manager keep the review unit bounded to the work it can honestly carry. The opening of E.17.ID.CR:4.1 follows that same order by value: engineer-manager working use and comparison-unit distinction come first, and the compact ComparativeReading definition stays nearby as a recovery reference rather than a gate before use. The ordinary minimum block comes next for ordinary use. The full declaration block remains available as a load-bearing assurance record.

Five plain working questions

The near-top quick working-fit check is the canonical first working block for this pattern. A working user should be able to answer these same five questions before touching the fuller blocks:

  1. What already available source epistemes or source publications am I comparing?
  2. What single contrast or small set of contrast rows am I trying to make visible?
  3. Am I still inside the same shared review frame, with compared alternatives kept distinct when they are distinct, or has the review target already shifted?
  4. What unsupported downstream reading must the team not take from this review unit?
  5. What would force this review unit to leave ComparativeReading for explanation, bridge work, prompt work, ontology work, or decision authority?

If these five answers are not visible, the case is not ready to stay here as a bounded comparative review unit.

Ordinary minimum block

For ordinary bounded comparative review units, it is usually enough that the unit or its surrounding review context keeps explicit:

  • what reviewed source episteme or source publication is being interpreted;
  • where the source references live;
  • that the shared review frame remains preserved and that distinct alternatives remain distinct unless another source supplies bridge or substitution relation;
  • what exact bounded comparative lift is being added, or which bounded contrast rows are included and what comparison basis each row uses;
  • what downstream claim or effect remains unsupported;
  • that the default worldContactPolicy here is review-only and non-executive;
  • and what neighboring FPF pattern becomes mandatory if the case crosses that neighboring boundary.

If those minimum answers cannot stay stable across the same note, sheet, or review aid without sliding between reviewed source episteme or source publication, bounded comparative review unit, bounded lift, and outside work, stop here. Repair local lexical-head kind pressure through E.17.AUD.LHR (Local Head Restoration); if the whole review unit still has unstable EntityOfConcern or carried-move reading after that repair, apply E.17.AUD.OOTD (PublicationUnit Primary EntityOfConcern Discipline) before adding more declaration weight.

Ordinary working card

An admissible ordinary comparative review unit should normally let a reader recover these seven rows without opening the heavier fuller declaration:

RowPlain questionMinimum answer
Reviewed sourceWhat already available source epistemes or source publications are being compared?one pinned source slice, one explicit source pair, or one explicit source set
Source referencesWhere can a reviewer inspect that source episteme or source publication?visible sourceAnchorSet or nearby sourceRefs
Shared review frame and alternative identitiesWhat review target, described situation, or source-set reference is preserved, and what alternatives remain distinct under it?preserved shared review frame; distinct alternatives are not treated as equivalent or substitutable without bridge relation
Bounded lift row(s)What single contrast or small row set is this unit making visible?one declared comparisonBasis or a small set of row-level comparisonBasis statements under one shared unsupported downstream claim or effect and boundary trigger
Unsupported downstream claim or effectWhat is this unit not yet claiming?no equivalence, prompt opening, ontology change, or decision authority
World-contact limitWhat may the unit not be used to do?review-only and non-executive
Boundary triggerWhat would end this pattern and require another governing pattern?one explicit bridge, explanation, prompt, ontology, or authority trigger

This working card may live inline in the comparative review unit or in its immediate review context. Read it as the ordinary recovery reference for the near-top working-fit check:

  • if rows 1-4 are still unstable because one pressured local lexical head or qualifier is doing too much work, stop and repair that local lexical-head pressure through E.17.AUD.LHR (Local Head Restoration) before you keep building the comparative review unit here;
  • if rows 3-7 cannot stay stable because the same review unit still has unstable reviewed-source, comparative-move, or outside-work reading after one honest local repair, apply E.17.AUD.OOTD (PublicationUnit Primary EntityOfConcern Discipline);
  • if rows 1-7 stay recoverable over one pinned source slice or source pair, one preserved shared review frame, distinct alternatives where present, and one bounded contrast or small row set, ComparativeReading remains the honest primary governing pattern.

The nearest stay-here worked slices for this reading are E.17.ID.CR:5.4.5 through E.17.ID.CR:5.4.6.b. The nearest stop-and-reopen worked slice is E.17.ID.CR:5.4.6.c.

Move to the load-bearing extension only when one of the boundary, reader-fit, or misuse conditions in E.17.ID.CR:4.3.c becomes true. ComparativeReading remains primary only while those seven rows stay recoverable and the same review unit is still mainly about one bounded comparative reading, or a small set of bounded contrast rows, over already pinned source epistemes or source publications. If the review unit first needs to restabilize what it is about, what move it carries, and what wider work remains outside, use E.17.AUD.OOTD (PublicationUnit Primary EntityOfConcern Discipline) to stabilize that PublicationUnit question before adding more declaration weight here.

Load-bearing extension guidance

A fuller declaration record becomes warranted when:

  • reader-fit is doing real work;
  • misuse risk is high;
  • the review unit sits close to viewing, bridge, explanation, abductive-prompt, ontology-shift, policy, assurance, gate, release, action-selection, or adjudication boundaries;
  • mixed composition with A.6.3.* or E.17.EFP is load-bearing;
  • the publication unit still has unstable EntityOfConcern, carried-move, or outside-work reading after local repair;
  • or the case would otherwise be too easy to over-read as more committed than a bounded comparative review unit.

The load-bearing extension may inherit already-declared case ids, source pins, and provenance references instead of restating them inline. When recorded as a load-bearing review unit, that extension normally captures the ordinary minimum block plus any neighboring-pattern fields that remain load-bearing for the mixed case. Do not answer PublicationUnit instability by stacking more local fields onto the load-bearing extension. If E.17.AUD.LHR (Local Head Restoration) has already repaired the local lexical-head pressure and the same review unit still has unstable reviewed-source, publication-unit, comparative-move, or outside-work reading, stabilize that PublicationUnit question with E.17.AUD.OOTD (PublicationUnit Primary EntityOfConcern Discipline) before deciding how much declaration weight should stay here.

Load-bearing declaration block

When the heavier declaration weight really stays here, the unit should still make at least these fields recoverable:

  • sourceRelationClass using the shared E.17:5.1b vocabulary when the comparison depends on source pointer, source availability or retrieval, source use, source faithfulness, claim recoverability, contradiction, omission, claim widening, added linkage, independent verification, admissible use, forbidden downstream use, or reopen trigger;
  • sourceAnchorSet or sourceRefs;
  • comparativeRelationClass = sameEntityComparisonClass | sharedFrameDistinctAlternativeClass | readerFitComparativeClass;
  • comparisonBasis;
  • addedClaimPolicy;
  • bridgeStanceVisibility;
  • required bridgeCardRef plus optional bridgeStanceRef when the case depends on bridge-mediated comparative relation;
  • targetUserModel when reader-fit is materially shaping the reading;
  • interactionMode when the review unit is not just one static comparative sentence;
  • contrastiveQuestion when the case is answering a specific contrast;
  • allowedUse;
  • misuseRisk;
  • promptWorthinessThreshold;
  • ontologyBoundaryTrigger;
  • worldContactPolicy;
  • downstreamAuthorityLimit;
  • baseCasePattern when the review unit is a mixed case layered over A.6.3.* or E.17.EFP.

sourceRelationClass is only source-relation or claim-admissibility class for the local claim or use. comparativeRelationClass is only the comparative-relation class of this review unit. Neither field is a RelationKind, KindBridge, Bridge Card, bridge relation, bridge stance, semantic identity, equivalence, substitution, evidence relation, gate decision, assurance claim, work relation, commitment, speech act, authority-reference relation, or decision record. The sameEntityComparisonClass value is a special case for comparisons where the compared sources really describe the same entity; it does not assert semantic identity. When the unit compares distinct alternatives, use sharedFrameDistinctAlternativeClass plus distinct alternative refs, and do not treat the alternatives as equivalent or substitutable without bridge relation. readerFitComparativeClass by itself does not open interpretation. Bounded correspondence wording that starts implying bridge relation is bridge-mediated comparative relation: it requires an explicit bridgeCardRef, or the case applies F.9 or F.9.1 before the comparison unit can carry that bridge-mediated source relation. When cross-context bridge semantics are live, the actual bridge kind and Bridge Card remain governed by F.9. If bridge-mediated reading is live, bridgeCardRef is required and any bridgeStanceRef remains optional and subordinate. The main comparison question plus the neighboring pattern boundaries still decide the selected FPF pattern or project-side FPF kind and reference named by value.

Interpretant-side block

The interpretant-side fields above do not turn this zone into a full interactive explanation system or a dialog-management system. Their current role is narrower:

  • keep bounded comparative reading from pretending it is audience-neutral when it is not;
  • make the contrastive question, guided review mode, and allowed use visible;
  • and stop interpretation prose from quietly becoming prompt-bearing guidance, assurance shorthand, or policy pressure.

Static note versus interactive aid

Use two comparison-relation forms.

  1. Static comparative review note. A static note, sheet, or short review unit normally needs only the reviewed source episteme or source publication set, source references, E.17:5.1b source-relation class when source relation is disputed, comparison basis, bounded lift, unsupported downstream claim or effect, world-contact limit, and boundary trigger. Do not import interactive-explanation vocabulary into this ordinary case.
  2. Interactive comparative aid. Add targetUserModel, interactionMode, state or history needed for the live comparison, misuseRisk, and admissible-use boundary only when the aid is actually interactive, stateful, adaptive, or user-model-bearing. These fields still do not authorize prompt selection, action selection, gate use, work or reliance, or approval; they only keep the interactive comparative aid from being mistaken for audience-neutral static prose.

A comparative review unit may expose or cite source epistemes, source publications, or project-side FPF kinds and references named by value being compared. It does not become those source epistemes, source publications, project-side FPF kinds and references named by value, a bridge card, a gate decision, or a work or reliance source by table layout, fluent contrast, side-by-side placement, or guided-review reuse. If the required source relation is missing, the repair request or source-gap note is prospective only; it does not backdate a source relation into the earlier comparison.

Comparative-reading identity over revision. A revised comparison table, regenerated comparison note, or updated guided review aid is not the same comparative reading merely because the layout, title, or compared-source family stayed familiar. If new source input, revised source references, changed comparison basis, changed shared review frame, or changed unsupported downstream claim or effect is live, publish the preserved comparative frame and the changed claims, or treat the result as a new comparative review unit before it is used for recommendation, selection, decision, gate, bridge, work, or reliance claims.

Representation ontology and modeling lens (informative)

The early canonical lens for this pattern is already stated near the top: one comparative review unit over already available, source-pinned epistemes or source-pinned publications, with the shared review frame preserved, one bounded contrast or small row set made visible, and unsupported downstream claim or effect kept outside.

This informative note only unpacks that same lens. It does not introduce a second one.

This pattern does not model interpretation in general. It models the ComparativeReading as the active governing pattern inside the broader InterpretationDiscipline family. In plain terms, the pattern works over the review unit itself. That unit may appear as a comparison note, comparison sheet, or guided review aid, but it is not the whole review process, it is not the source system, and it is not the hidden act of reading in the abstract. The bounded comparative reading is the interpretive lift carried by that review unit.

The minimum typed lens is a compact record of:

  • source references and source relation;
  • one declared source-relation class;
  • one declared comparison basis and added-claim policy;
  • one allowed-use boundary, one misuse-risk line, and one worldContactPolicy that remains subordinate to A.20 or A.21 when gate or adjudication claim appears;
  • the relevant prompt, ontology, and authority boundary triggers;
  • and which neighboring pattern still governs the base case when this remains a mixed overlay.

That lens is intentionally modest. It keeps the main read tied to the review unit and the problem-owning review domain, while leaving source, continuity, and boundary discipline under whichever neighboring pattern still governs the base case. This pattern therefore does not create a rival bridge taxonomy, a rival base-case discipline, or a publication with named authority-reference relation of its own.

Working read-out

A working reader should be able to say, in one short paragraph:

  • what reviewed source episteme or source publication is being comparatively read;
  • what bounded interpretive lift is being added;
  • what shared review frame remains preserved, and, in the special same-EntityOfConcern case, why the same EntityOfConcernRef remains preserved;
  • which neighboring pattern carrying bridge, prompt, ontology, action, gate, adjudication, authority, or downstream claim is still not yet active;
  • and what neighboring-pattern boundary would become mandatory if the case were read as carrying a bridge, prompt, ontology, action, gate, adjudication, authority, or downstream claim.

If that read-out becomes fuzzy, the review unit is no longer bounded enough to stay here and should be narrowed, clarified, or moved under the governing neighboring pattern.

Branch-discipline summary

This section is the compact governing-rule summary for ComparativeReading inside the Core. It keeps the ComparativeReading governing rule recoverable for ordinary users and engineer-manager-first review. In mixed cases, the neighboring pattern discipline still remains primary where the base case really belongs to A.6.3.*, F.9.1, or E.17.EFP.

Use the fuller solution, boundary table, worked slices, and relations section here when exact clause wording, full field set, or full reopen conditions matter. Keep this pattern to these summary rules.

  1. Preserve the shared review frame. Keep the review target, described situation, decision situation, release candidate, method family, control scope, problem frame, or source-set reference visible; keep distinct alternatives distinct unless bridge or substitution relation exists elsewhere; keep source references and one declared comparison basis per contrast row visible; keep contrastiveQuestion explicit when it is doing real review work.
  2. Keep the lift bounded and comparative. The review unit may add a bounded comparative or asymmetry-bearing reading, but it may not quietly intensify into theory claim, bridge licence, prompt-opening pressure, explanation governance, ontology shift, or a decision, gate, action, approval, rollout, release, policy, assurance, adjudication, bridge, prompt, or ontology-shift claim.
  3. Name the base source relation or work question. If the main question is really same-entity rewrite, bridge-stance overlay over an existing Bridge Card, explanation-face work, prompt opening, ontology reframing, retargeting, or a decision, gate, action, approval, rollout, release, policy, assurance, adjudication, bridge, prompt, or ontology-shift claim, this pattern should not stay primary.
  4. Keep neighboring patterns for downstream claims explicit. Bridge-mediated comparative relation still requires explicit bridgeCardRef; optional bridgeStanceRef may qualify only an existing bridge card. Prompt-worthy cases publish U.AbductivePrompt; ontology-shift claims apply OntologicalReframing or A.6.4; action, gate, or adjudication use applies A.15, A.20, A.21, or another governing FPF pattern and project-side FPF kind and reference named by value. If the primary question is reduced-use source rendering rather than bounded comparison, apply A.6.3.CSC Controlled Semantic Coarsening.
  5. Keep reader-fit bounded. targetUserModel, interactionMode, contrastiveQuestion, allowedUse, and misuseRisk may be stated when they are doing real work, but they do not authorize coaching, prompt selection, action selection, policy guidance, or an authority claim that the unit does not carry.

Neighboring-work boundary glance

This table is a compact boundary aid for separating the comparative review unit from neighboring project work and source requirements. For a fuller mixed-case read, read this table together with the neighboring pattern discipline.

If the case is really doing this...It should stay here or move elsewhere...
one local lexical head or qualifier is still doing too much work, but one honest repair would stabilize the same unitE.17.AUD.LHR (Local Head Restoration)
the same note is mostly rewriting, reframing, or re-rendering the same EntityOfConcern with no bounded comparative liftA.6.3, A.6.3.CR, or A.6.3.RT
the real job is only to make an already-declared bridge stance explicit over an existing Bridge CardF.9.1
the comparison wording is now making a relation-precision claim between compared itemsA.6.P
the comparison wording is now making sameness, equivalence, alignment, mapping, substitution, or cross-context bridge relationPart F with A.6.9, F.9, or F.9.1
the note is primarily a reduced-use source-pinned rendering with narrower-use, non-admissible downstream use, and source-bearing reopen disciplineA.6.3.CSC Controlled Semantic Coarsening
one review unit already keeps the same primary entity of concern, one bounded comparison, and one outside-work boundary stableComparativeReading within InterpretationDiscipline
the same unit still has unstable reviewed-source, comparative-move, or outside-work reading after local repairE.17.AUD.OOTD (PublicationUnit Primary EntityOfConcern Discipline)
the real job is explanation-face governance on existing facesE.17.EFP
the comparison is now opening an abductive prompt or action-selection questionB.5.2.0 or B.5.2
the target or ontology is changing and now needs continuity witnessesOntologicalReframing or A.6.4
the unit is now being used as a decision-making claim or decision recordC.11
the unit is now being used for execution, gate, or adjudication consequenceA.15, A.20, or A.21

For first-minute use, read the four boundary rows around the comparative-reading case itself as a compact mirror of the near-top working-fit check and the ordinary working card:

  • pressured local lexical head -> E.17.AUD.LHR (Local Head Restoration);
  • stable same-object comparative review unit -> stay with ComparativeReading;
  • same unit still unstable after local repair -> E.17.AUD.OOTD (PublicationUnit Primary EntityOfConcern Discipline);
  • neighboring pattern for bridge, prompt, ontology, action, gate, adjudication, authority, or downstream claim already primary -> move out of this pattern. If the comparison unit is already carrying neighboring work, use the boundary rows first and then read E.17.ID.CR:5.4.7 through E.17.ID.CR:5.4.10 as the nearest worked boundary examples.

Ordinary working order for the card

The shortest ordinary working order is:

  1. name the base source relation or work question if the case is mixed;
  2. pin the reviewed source episteme or source publication and make the shared review frame plus any distinct alternatives visible;
  3. state the bounded comparative lift, or the small set of contrast rows and their row-level comparison bases, in compact form;
  4. declare the unsupported downstream claim or effect and the review-only and non-executive world-contact limit;
  5. name the boundary trigger that would end interpretation.

That five-step order is not a second ordinary working card, and it is not a canonical review process. It is only one local working aid for this pattern. It is the shortest way to recover the seven-row ordinary working card in E.17.ID.CR:4.3.b.a. In ordinary use, publish the resulting seven-row card in compact form rather than a heavier load-bearing declaration block whenever boundary pressure still stays low. If the seven-row working card still cannot be completed plainly through that order, the review unit is not yet ready to stay here. If the note, sheet, or review aid first has to answer what it is about, what move it is carrying, and what wider work remains outside, stabilize that PublicationUnit question with E.17.AUD.OOTD (PublicationUnit Primary EntityOfConcern Discipline) before continuing comparative-reading work.

Archetypal grounding

Worked-slice status. Read the system case, episteme case, and boundary-bank cases as a heterogeneous example bank, not as one recommended progression. They show different admissible outcomes for the same governing pattern: some cases stay small and stop, some stay mixed with a neighboring pattern, and some reopen or apply another governing pattern when outside observations, environmental change, or downstream constraints change what the comparative review unit can honestly carry.

Tell

ComparativeReading names the bounded middle band where a team needs to prepare one explicit comparative reading over source epistemes or source publications with already declared references without yet opening prompt-selection work, action-selection work, ontology-facing reframing, gate, approval, rollout, release, policy, assurance, adjudication, or source-reliance use. The comparison unit is the bounded comparative review unit. That review unit must stay modest enough that a reviewer can still see the same EntityOfConcernRef, the declared comparison basis, the unsupported downstream claim or effect, and the boundary trigger that would end interpretation.

Show (System)

Source slice. Two pinned operating notes describe the same service episode from different operational responsibilities. One note has its source reference in the maintenance log, the other in the continuity dashboard for the same declared episode and the same EntityOfConcernRef.

Comparative review unit. Under the declared comparison basis, the maintenance note foregrounds operator-induced variance, while the continuity note foregrounds buffer-sensitive drift; each view exposes a blind spot in the other without granting direct substitution.

Why this stays here.

  • source relation and source references are explicit;
  • the same EntityOfConcernRef remains preserved;
  • one bounded comparative lift is added;
  • no substitution licence is added;
  • no rival action-selection question is yet being asked.

Show (Episteme)

Source slice. Two pinned analytic renderings over the same evidence set are already available for review. One rendering is a SourceLinkedExplanationReconstruction on a TechCard face; the other is a compact comparison sheet that preserves the same evidence set and the same described operational episode.

Comparative review unit. For maintenance reviewers, the reconstruction foregrounds operator load more than the comparison sheet, while the comparison sheet foregrounds recovery sequencing more than the reconstruction; this difference is useful for review, but it is not yet a design recommendation or an action-selection claim.

Why this stays here.

  • the base-case governing patterns remain identifiable;
  • the comparative lift is explicit and bounded to one reviewer task;
  • explanation-face governance and same-entity transform discipline remain with their neighboring patterns;
  • approval, rollout, release, gate, policy, assurance, or adjudication use, and prompt-bearing action-selection pressure remain negative.

Boundary bank

Lower-boundary bridge-stance overlay case

Bridge-stance overlay unit. The existing Bridge Card relates the local maintenance-pressure term to the partner continuity term; this overlay says the relation should be read as asymmetry-explicating rather than substitution-friendly.

Why it stays under F.9.1:

  • the bridge stance is already declared;
  • the review unit only makes that stance more legible;
  • no bounded interpretive lift beyond the bridge-stance overlay is added.
Mixed primary-pattern composition with A.6.3.RT

Base-case rendering. A same-entity comparison sheet retabulates one pinned incident note into columns for trigger, pressure, and recovery.

Comparative review unit. In the retabulated view, the recovery column makes the operator-induced asymmetry easier to inspect than the trigger column, but the table should not be read as establishing a new causal hierarchy.

Why this remains mixed rather than collapsing:

  • A.6.3.RT still governs the base representation shift;
  • bounded comparative reading is secondary and only adds a bounded comparative lift;
  • most restrictive forbidden-use constraint wins, so no new ontology or gate reading is licensed.
Mixed primary-pattern composition with E.17.EFP

Base-case rendering. A TechCard-face explanation rendering is already classified as SourceLinkedExplanationReconstruction and publishes a bounded connective policy.

Comparative review unit. For maintenance reviewers, this rendering foregrounds the difference between operator load and throughput pressure more than the original prose, but it should not be read as a design-level recommendation.

Why this stays mixed rather than collapsing:

  • E.17.EFP still governs explanation class and face admissibility;
  • bounded comparative reading only adds bounded comparative use for one reviewer task;
  • the review unit still does not own explanation-face governance, approval, rollout, release, gate, policy, assurance, or adjudication use.
Guided review aid with bounded interaction mode

Source slice. A reviewer UI presents two already pinned source notes side by side for the same described operational episode.

Guided comparative review unit. Question: which note foregrounds variance introduced by operator timing rather than environmental drift? Allowed use: bounded comparative triage only. Misuse risk: do not treat this aid as action selection or release guidance.

Why it stays here:

  • the interaction mode is explicit but still bounded;
  • the review unit answers one contrastive question rather than opening prompt pursuit or action-selection pursuit;
  • allowed use and misuse risk are visible instead of being smuggled into interface tone.
Product and design-review comparison case

Source slice. Two already available design-review notes describe the same integration boundary for the same planned release. One note foregrounds coupling and rollback pressure; the other foregrounds delivery simplicity and lower immediate implementation cost.

Comparative review unit. For architecture review, the first note foregrounds coupling risk more than the second, while the second foregrounds delivery speed more than the first; that asymmetry is useful for discussion, but it is not yet a recommendation to choose either option.

Working-boundary reading. This is the ordinary stay-here case: one honest local repair and one publication-unit stability check would already leave the review unit stable enough that the bounded comparative review move itself stays primary.

Why it stays here:

  • the same planned release remains the EntityOfConcernRef;
  • one bounded comparative lift is made explicit for a declared review task;
  • the unit helps design discussion without quietly becoming action selection or approval.
Compliance and release-review comparison case

Source slice. An internal control checklist and a vendor compliance bulletin are already available for the same release candidate and the same declared control scope.

Comparative review unit. For release review, the vendor bulletin foregrounds protocol conformance more than rollback evidence, while the internal checklist foregrounds rollback evidence more than protocol conformance; this comparison helps frame the review, but it is not yet a release gate or equivalence claim.

Working-boundary reading. This is the same stay-here case under a release or compliance load: the comparison unit is already stable enough, so the primary question is the bounded contrast rather than local repair or PublicationUnit stabilization.

Why it stays here:

  • the comparison basis is explicit and bounded to one review task;
  • the source references remain visible and the same release candidate stays in view;
  • the review unit helps an engineer-manager see a review asymmetry without laundering gate authority.
Research-review comparison case

Source slice. Two already available research syntheses discuss the same measured phenomenon and the same declared evidence slice. One synthesis foregrounds variance decomposition limits more; the other foregrounds protocol repeatability more.

Comparative review unit. For method review, the first synthesis foregrounds uncertainty-handling limits more than the second, while the second foregrounds repeatability evidence more than the first; this asymmetry helps frame the discussion, but it is not yet a method choice or a claim that one synthesis is globally better.

Why it stays here:

  • the same measured phenomenon remains the EntityOfConcernRef;
  • the comparative lift is bounded to one review task;
  • the unit helps research discussion without quietly becoming action selection or ontological reframing.
Program and cultural-review comparison case

Source slice. Two already available programme briefs discuss the same continuing initiative and the same declared participation scope. One foregrounds continuity of community engagement more; the other foregrounds short-term event visibility more.

Comparative review unit. For programme review, the first brief foregrounds participation continuity more than the second, while the second foregrounds short-term visibility more than the first; this comparison helps frame the discussion, but it is not yet a funding, curation, or programme-direction decision.

Why it stays here:

  • the same initiative remains the EntityOfConcernRef;
  • the comparison basis is explicit for one declared review task;
  • the unit helps programme discussion without laundering decision authority.
Exogenous-change stop-and-reopen case

Source slice. An internal release-review comparison sheet already compares one control checklist and one vendor bulletin for the same declared release candidate and the same control scope. Mid-review, an external incident bulletin arrives and changes the live rollback assumptions for that same candidate.

Initial comparative review unit. Before the new bulletin, the vendor bulletin foregrounds protocol conformance more than rollback evidence, while the internal checklist foregrounds rollback evidence more than protocol conformance; this comparison frames the review, but it is not yet a release gate or equivalence claim.

Working-boundary follow-through. This case begins on the same admissible stay-here case as E.17.ID.CR:5.4.6, but outside observation then changes the declared comparison basis, so the unit must stop and reopen instead of being carried forward by inertia.

Why this must stop and reopen.

  • the new outside observation changes the declared comparison basis;
  • the previous bounded comparison may remain traceable, but it cannot continue by inertia as if the same live review conditions still held;
  • the admissible next move is either to restate a fresh comparative review unit over the new declared basis or to apply a neighboring governing pattern if downstream gate or authority question has now become primary.
Lighter comparison note with source-return discipline

Source episteme and source publication set. A release team already has the full internal rollback worksheet, vendor bulletin, and incident-note bundle for one release candidate. A short comparison note is then prepared for the daily review stand-up.

Comparative review unit. For today's review, the vendor bulletin foregrounds protocol conformance more than rollback evidence, while the internal rollback worksheet foregrounds rollback evidence more than protocol conformance; this short note is only a review aid over the same release candidate, and the full source episteme or source publication set remains primary for any bridge, release, coarsening, or work or reliance reading.

Why it still stays here:

  • the comparison unit is still one bounded comparative review unit, not a replacement for the source episteme or source publication set;
  • the note remains source-pinned through the already available source episteme or source publication set and openly forbids bridge, gate, or work or reliance use that it does not carry;
  • any attempt to treat the short note as enough for equivalence, release approval, execution claim or effect, or a reduced-use source substitute requires source-bearing return, A.6.3.CSC Controlled Semantic Coarsening, or another neighboring pattern.
Functional versus constructive-description comparison

Source slice. A functional-description publication and a constructive publication or product-description publication describe the same pumping skid. The functional description foregrounds flow relation and method-selection relation; the constructive description foregrounds module composition and installed equipment.

Comparative review unit. For design review, the functional description foregrounds what the skid is supposed to do in the declared flow relation, while the constructive description foregrounds what parts are present. This contrast helps the engineer keep function and construction separate, but it is not a module-equivalence claim, a performed-work record, or a gate decision.

Why it stays here:

  • both source publications keep source references and remain inspectable;
  • the same pumping skid remains the EntityOfConcernRef;
  • the bounded comparative lift is the function-versus-construction contrast for one review task;
  • module equivalence, work occurrence, evidence, and gate claims remain non-admissible downstream uses.
Method-option comparison without method choice

Source slice. Two method descriptions are already pinned for the same fabrication task. One foregrounds lower setup cost; the other foregrounds tighter result-measurement discipline.

Comparative review unit. For method review, method M-1 foregrounds lower setup cost more, while method M-2 foregrounds result-measurement discipline more. This comparison helps prepare method discussion, but it is not yet the selected method, not a work plan, and not evidence that either method has been performed.

Why it stays here:

  • the reviewed source epistemes are pinned;
  • the comparison basis is explicit;
  • no selected-method, work-plan, performed-work, evidence, or engineering-justification claim is added;
  • if the team chooses a method or prepares a work plan, record the selected method as project U.Method, record the work plan as U.WorkPlan under A.15, and use A.15.1 only when a dated U.Work occurrence is live.

Nearest neighboring-work examples. The next four cases are the nearest worked boundaries for prompt pressure, same-entity viewing, ontology shift, and gate or authority misuse. Use them when the near-top negative-boundary rows fit and you need one worked cue for keeping the comparison unit from carrying outside work.

Upper-boundary prompt-bearing case

Prompt-bearing review unit. This contrast raises the question whether both systems are being constrained by the same hidden gating variable, so we should open a prompt around that shared control possibility.

Why ComparativeReading no longer governs:

  • abductive-prompt or action-selection claim has become live;
  • the review unit is now prompt-bearing rather than only interpretive;
  • the selected governing target is B.5.2.0 or B.5.2 through explicit U.AbductivePrompt publication.
Same-entity viewing boundary case

Viewing rendering. The source note is retabulated into a compact comparison sheet that preserves the same claims and entity but makes pressure, trigger, and recovery fields easier to inspect.

Why it does not enter interpretation:

  • the main question is representational reshaping rather than comparative reading;
  • no bounded asymmetry or interpretive claim is added;
  • the more precise governing pattern is A.6.3.RT.
Ontology-boundary anti-case

Ontology-pressuring review unit. The older maintenance note and the new field-observation note are best read as two observational cuts over the same latent failure mode, so we should recast both under a new operational kind and treat the source labels as legacy labels.

Why ComparativeReading no longer governs:

  • the case is now asking for a same-referent interpretation with continuity-witness demand or retargeted-EntityOfConcernRef interpretation;
  • continuity witnesses would now be needed;
  • bounded comparative interpretation is no longer enough, so the case applies OntologicalReframing.
Authority and gate misuse anti-case

Authority-pressuring review unit. Because this comparison consistently foregrounds the safer operating condition, reviewers may use the review unit directly as a release gate and do not need the underlying source episteme or source publication during triage.

Why ComparativeReading no longer governs:

  • the review unit is being over-read as gate-facing authority;
  • the bounded comparative reading has become a substitute for the source episteme or source publication;
  • the selected governing target moves toward A.15, A.20, A.21, policy, assurance, release, adjudication, or another governing FPF pattern rather than staying in interpretation.
Invalid publication and repair example

Invalid review unit. These two views describe the same entity for current operations, so the team can use whichever wording is easier.

Why it is invalid here:

  • no source references are visible;
  • bridge-mediated comparison is being implied without explicit bridge declaration;
  • unsupported substitution and authority claims are being smuggled in through soft phrasing.

Minimal repair. Under bridge card BC-12 and the stated comparison basis, both notes foreground the same operator-timing concern for this review task, but they are not substitution-equivalent and the source episteme or source publication set remains primary.

What the repair does:

  • restores the source references and bridgeCardRef;
  • narrows the claim back to bounded comparative reading;
  • reasserts the unsupported downstream claim or effect.

Bias-Annotation

Lenses tested: Gov, Arch, Onto and Epist, Prag, Did. Scope: bounded comparative review units governed under the ComparativeReading governing pattern inside InterpretationDiscipline, not a universal claim about all review or publication forms.

This pattern intentionally biases toward bounded comparative reading and away from hidden bridge inflation, explanation laundering, ontology shift, action-selection pressure, and hidden policy, assurance, gate, release, or adjudication claims. The main mitigations are explicit primary-governing-pattern naming, visible source references, explicit interpretant-side boundedness, explicit unsupported downstream claim or effect, explicit comparison-unit surfacing, and hard boundaries to bridge, abductive-prompt, ontology-reframing, retargeting, policy, assurance, gate, release, action-selection, and adjudication patterns. Under the governance lens, the pattern is deliberately conservative: it helps a user prepare or review a bounded comparative review unit without letting that unit quietly become policy, assurance, gate, or action authority.

Conformance Checklist

A conformance check is retained only if it changes the next admissible use of the comparative review unit, blocks a concrete overclaim, or preserves a source reference or reopen condition needed for the declared admissible use.

Use ID.CR-Core for ordinary comparison notes. Conditional rows open only when the note touches neighboring-pattern relation, bridge declaration, or reader-fit fields. For fuller mixed-case read, read this checklist together with the neighboring pattern discipline and the boundary conditions gathered in this section.

Assurance recovery note. Read this checklist as a heavier read-back of the already-declared ComparativeReading governing rule, not as a second rule list. If a row cannot be recovered through the ordinary seven-row card, the nearest worked slices, or the practical safeguards already named in the pattern, the case is not yet stable enough to rely on checklist prose alone.

ID.CR-Core ordinary checks

  1. CC-ID-1 - Bounded comparative review unit is explicit. The pattern makes clear that the comparison unit is a bounded comparative review unit rather than the whole review or decision work or a hidden mental act.
  2. CC-ID-2 - Source references and comparison basis are explicit. A reviewer can see what already-fixed source episteme or source publication is being read and what declared comparison basis or contrast is carrying the lift.
  3. CC-ID-3 - The lift stays bounded. The pattern keeps the comparative claim visibly narrower than bridge licence, explanation governance, prompt opening, ontology shift, or guidance carrying approval, gate, release, policy, assurance, adjudication, or authority-reference claim.
  4. CC-ID-6 - Neighboring-pattern boundaries stay visible. Prompt-worthiness, ontology-shift claim, or action, gate, approval, rollout, release, policy, assurance, or adjudication use leads to an explicit neighboring FPF pattern rather than staying hidden inside comparative prose.
  5. CC-ID-8 - The review unit does not over-claim authority. The unit is still review-only and non-executive and does not present itself as substitution licence, gate guidance, or action authority.

ID.CR-Conditional checks

  1. CC-ID-4 - Base-case governing-pattern relation is explicit. A reviewer can tell why the case does not really belong to A.6.3.*, F.9.1, E.17.EFP, B.5.2(.0), OntologicalReframing, or A.6.4.
  2. CC-ID-5 - Bridge declaration does not hide. If bridge-mediated comparative relation is live, bridgeCardRef is required; optional bridgeStanceRef remains visible and subordinate to that existing bridge card.
  3. CC-ID-7 - Reader-fit stays bounded. targetUserModel, interactionMode, contrastiveQuestion, allowedUse, and misuseRisk are visible when needed, but they do not open an authority claim that the unit does not carry.

Checklist recovery map. If an assurance-side reader needs to cash one checklist row out by value, use the nearest ordinary card row and worked recovery below before treating the checklist as self-sufficient:

Checklist rowRecover through firstNearest worked or practical recovery
CC-ID-1E.17.ID.CR:4.3.b.a rows Reviewed source and Shared review frame and alternative identitiesE.17.ID.CR:5.4.5, E.17.ID.CR:5.4.6, E.17.ID.CR:5.4.6.a
CC-ID-2E.17.ID.CR:4.3.b.a rows Reviewed source, Source references, and Bounded liftE.17.ID.CR:5.4.5, E.17.ID.CR:5.4.6, E.17.ID.CR:5.4.6.a
CC-ID-3E.17.ID.CR:4.3.b.a rows Bounded lift, Unsupported downstream claim or effect, and World-contact limitE.17.ID.CR:5.4.6, E.17.ID.CR:5.4.10, E.17.ID.CR:5.4.11
CC-ID-4near-top Neighboring-work boundary, Quick working-fit check, and E.17.ID.CR:4.5 - Neighboring-work boundary glanceE.17.ID.CR:5.4.7 through E.17.ID.CR:5.4.10
CC-ID-5E.17.ID.CR:4.3.d bridge-declaration fields plus E.17.ID.CR:4.2 neighboring patternsE.17.ID.CR:5.4.1, E.17.ID.CR:5.4.2, E.17.ID.CR:5.4.3
CC-ID-6E.17.ID.CR:4.3.b.a row Boundary trigger plus the near-top boundary corridorE.17.ID.CR:5.4.7 through E.17.ID.CR:5.4.10
CC-ID-7E.17.ID.CR:4.3.d interpretant-side fields, kept subordinate to the ordinary card and unsupported downstream claim or effectE.17.ID.CR:5.4.4, E.17.ID.CR:5.4.6, E.17.ID.CR:5.4.6.b
CC-ID-8E.17.ID.CR:4.3.b.a rows Unsupported downstream claim or effect and World-contact limitE.17.ID.CR:5.4.6, E.17.ID.CR:5.4.10, E.17.ID.CR:5.4.11

Common Anti-Patterns and How to Avoid Them

Anti-patternWhy it is wrongHow to avoid it
Comparison-unit instabilityThe text sounds as if it governs a note in one section, a publication unit in another, a reading move in a third, and a whole review process in a fourth.Stabilise one bounded comparative review unit early and keep note, sheet, UI, and rendering labels explicit as ordinary forms of that object rather than stylistic substitutes.
Bridge gloss inflationA helpful comparative sentence starts acting like a bridge licence the declared bridge card and stance do not allow.Keep bridge-mediated comparative relation tied to required bridgeCardRef; use optional bridgeStanceRef only as a subordinate overlay under F.9.1.
Soft prompt smugglingThe review unit is really opening a question or action-selection case, but hides it in gentle prose.If prompt selection or action-selection claim becomes live, publish U.AbductivePrompt with explicit promptSpecies, openQuestion, and cue or action-selection provenance instead of keeping it here.
Viewing captureSame-entity restatement or representation-shift work is pulled into interpretation just because the result is more readable.Name the base source relation or representation work first and use comparative reading only when bounded comparative lift is primary.
Explanation-face launderingInterpretation language is used to avoid explicit E.17.EFP class and admissibility review.If face class or bounded connective prose is primary, stay with E.17.EFP.
Gentle-tone advisory overreadA calm explanatory tone makes work or reliance, assurance, or gate guidance sound harmless.Publish allowedUse, misuseRisk, worldContactPolicy, and downstreamAuthorityLimit explicitly.
EntityOfConcern shiftA changed target is mislabeled as interpretation because the prose still sounds comparative.Exit to OntologicalReframing or A.6.4 once continuity witnesses or changed target become load-bearing.
Interface neutrality fictionA guided or contrastive aid pretends to be audience-neutral while steering non-admissible downstream use.Make targetUserModel, interactionMode, and contrastiveQuestion explicit and keep the non-admissible use forbidden.

Consequences

  • The middle band between bridge-stance overlay over an existing Bridge Card and prompt-bearing abduction becomes reviewable rather than rhetorical.
  • Reviewers get a cleaner way to distinguish comparative interpretation from same-entity viewing, explanation rendering, ontology shift, approval, rollout, release, gate, policy, assurance, and adjudication use.
  • Authors pay a small extra declaration weight, but the gain is fewer hidden neighboring-pattern boundary mistakes and less comparison-unit instability.
  • Guided comparative review units become easier to prepare honestly because allowed use, misuse risk, and world-contact limits can be declared without pretending that the unit already carries a broader guidance claim than it really does.
  • Users get an admissible way to keep bounded comparative review units modest: the unit can stay useful while its comparative reading remains below the boundary threshold for prompt publication, ontology-facing reframing, or gate-facing guidance.

Rationale

Teams already write small comparative review units, often as comparison notes or sheets, to move a review forward. What they usually lack is a disciplined way to keep that unit useful without letting it silently become an equivalence claim, a hidden hypothesis, a redesign push, or a release decision.

This pattern exists to protect that everyday bounded-comparison use. It keeps a comparative review unit usable by making five entries visible enough to inspect: the bounded comparative review unit, the source references, the bounded comparative lift, the unsupported downstream claim or effect, and the boundary trigger that would end interpretation. The gain is practical: a team can compare available source epistemes or source publications honestly without pretending that a helpful review unit already carries more authority than it really does.

SoTA Alignment: Adopted And Adapted Invariants And Rejected Shortcuts

SoTA alignment rule. Read each row here as source idea -> local FPF invariant -> practical local test -> popular shortcut rejected. A source citation governs nothing by reputation; it counts only when the cited idea is translated into the Solution, conformance checks, boundary rules, worked slices, and Relations of this pattern. Assurance recovery note. Read each row here as a heavier confirmation of one already-declared ComparativeReading governing rule. If a row cannot be recovered through the ordinary card, the interpretant-side block, the quick boundary corridor, or the nearest worked slices, do not let the citation carry the pattern by itself.

Traditions covered. This pattern binds itself to architecture-description governance, explainable-AI review discipline, interactive explanation-system practice, and design-space anti-scalarization practice. These rows are selected because they discipline recurrent review work in the problem-owning domains named in the case bank; they are not a decorative literature collage added after the governing pattern was chosen.

Claim needSource idea and current sourceCurrent source section or referenceLocal FPF invariant and practical local testNearest recovery referenceAdopted, adapted, or rejected shortcut
Comparative review units should stay tied to explicit source, view, and review structure rather than shifting through helpful prose alone.Architecture-description practice treats views, viewpoints, and comparison units as explicit review targets rather than letting reader-help prose replace structural review.Joint ISO, IEC, and IEEE 42010:2022; source maturity = mature standardThis pattern adopts explicit source references, declared comparison basis, and explicit boundary rules instead of letting comparative fluency define the case.E.17.ID.CR:4.3.b.a rows Reviewed source, Source references, and Bounded lift; E.17.ID.CR:5.4.5, E.17.ID.CR:5.4.6, E.17.ID.CR:5.4.6.aAdopt.
Interpretation and explanation use are use-sensitive and bounded by intended reader and knowledge limits rather than audience-neutral by default.Explainable-AI guidance distinguishes explanation, meaningfulness for intended users, explanation accuracy, and knowledge limits instead of treating all helpful prose as equally safe.Phillips et al. (2021), NIST IR 8312, Four Principles of Explainable Artificial Intelligence; source maturity = current government guidanceThis pattern adapts that stance into targetUserModel, interactionMode, contrastiveQuestion, allowedUse, and misuseRisk, while still keeping explanation-face use discipline with E.17.EFP.E.17.ID.CR:4.3.d interpretant-side block, kept subordinate to the ordinary card; E.17.ID.CR:5.4.4, E.17.ID.CR:5.4.6, E.17.ID.CR:5.4.6.bAdopt and adapt.
Static comparative notes and interactive comparative aids must not carry the same relation load.Static review notes need source references, comparison basis, bounded lift, unsupported downstream claim or effect, and boundary trigger; interactive explanation-system practice becomes relevant only when the aid is actually interactive, stateful, adaptive, or user-model-bearing.Labarta et al. (2026), X-SYS: A Reference Architecture for Interactive Explanation Systems, arXiv:2602.12748v3; source maturity = emerging preprint, not settled standard.This pattern keeps the ordinary seven-row card sufficient for static notes and adds targetUserModel, interactionMode, state and history, misuseRisk, and admissible-use boundary only for actual interactive comparative aids.E.17.ID.CR:4.3.b.a ordinary card; E.17.ID.CR:4.3.f static and interactive split; E.17.ID.CR:5.4.4, E.17.ID.CR:5.4.7Adapt conditionally. Reject importing XAI architecture into ordinary static notes.
Faithful source relation is not the same as merely plausible or persuasive prose.Current interpretation research distinguishes faithful source relation from attractive but low-source-relation narrative, especially in explanation-like publication.Jacovi and Goldberg (2020), Towards Faithfully Interpretable NLP Systems; source maturity = research paper as source for evaluation useThis pattern adopts explicit source references, E.17:5.1b source-relation class when live, unsupported downstream claim or effect, and bridge-claim visibility so that bounded comparative reading is not over-read as source relation or governing-pattern authority it does not carry.E.17.ID.CR:4.3.b.a rows Unsupported downstream claim or effect and World-contact limit; E.17.ID.CR:5.4.6, E.17.ID.CR:5.4.9, E.17.ID.CR:5.4.10, E.17.ID.CR:5.4.11Adopt.
Comparative review units must not become hidden ranking, aggregate recommendation, or false equivalence when a comparison sheet sorts or scores alternatives.Quality-diversity practice and multi-objective optimization practice preserve diverse candidate sets and non-scalar trade-offs when one scalar score would hide relevant differences.Mouret and Clune (2015), MAP-Elites; Deb et al. (2002), NSGA-II; source maturity = adapted design-space analogy, not naming or review standardThis pattern adapts only the anti-scalarization invariant: one comparison sheet may expose row-level comparison bases, trade-offs, and visible ordering bases, but it must not add equivalence, substitution, recommendation, method choice, gate passage, or decision authority unless C.11, F.9, A.20, A.21, another governing FPF pattern, or an project record named by value supplies that source relation or project record.E.17.ID.CR:4.3.b.a rows Bounded lift, Unsupported downstream claim or effect, and Boundary trigger; E.17.ID.CR:5.4.5, E.17.ID.CR:5.4.6.e, E.17.ID.CR:5.4.6.fAdapt conditionally. Reject treating optimization vocabulary, Pareto wording, benchmark tables, or sorted display order as proof of a governing FPF relation.

Row 1. The ISO row matters because this pattern is governing reviewable comparative units, not free comparative commentary. The pattern adopts the explicit-structure lesson directly: comparison basis, source references, and boundary rules must stay visible enough that a reviewer is not forced to infer the real comparison question from tone alone. Ordinary recovery: read the Reviewed source, Source references, and Bounded lift rows together before leaning on the citation. Engineer-manager payoff: a comparison note can help a review meeting move faster without being mistaken for a free-form equivalence judgement. Case linkage: see E.17.ID.CR:5.4.5, E.17.ID.CR:5.4.6, and E.17.ID.CR:5.4.6.a.

Row 2. The NIST row matters because this pattern is not really audience-neutral even when the review unit looks small. The pattern therefore adapts user-meaningfulness and knowledge-limit practice into explicit interpretant-side fields, while rejecting any move that would let those fields replace source or pattern discipline. Assurance recovery: keep those fields subordinate to the ordinary card and unsupported downstream claim or effect rather than letting them stand alone. Engineer-manager payoff: the note can be written for a real audience and task without pretending it is safe for every audience and every downstream use. Case linkage: see E.17.ID.CR:5.4.4, E.17.ID.CR:5.4.6, and E.17.ID.CR:5.4.6.b.

Row 3. The interactive-system row matters because bounded comparative aids can become more directive than static prose without crossing into a full new governing pattern of their own. The pattern adapts only the minimal architectural lesson it needs: if interaction mode is load-bearing, that fact must be explicit and must still stop before prompt, ontology, or authority escalation. Assurance recovery: read that pressure through the interaction fields plus the prompt and authority boundary rows rather than treating the source citation as a licence for action selection, coaching, prompt selection, approval, or other downstream guidance. Engineer-manager payoff: a guided comparative UI can stay useful for review without silently becoming coaching, prompt selection, action selection, or approval machinery. Case linkage: see E.17.ID.CR:5.4.4 and E.17.ID.CR:5.4.7.

Row 4. The faithfulness row matters because a comparative review unit can sound careful while still smuggling bridge, prompt, or authority claims. The pattern adopts the demand for explicit grounding, but rejects any shortcut where plausible comparative prose is treated as if it were already a semantic or operational licence. Ordinary recovery: use the Unsupported downstream claim or effect and World-contact limit rows before letting polished prose win the argument by tone. Engineer-manager payoff: polished prose is no longer enough to overrule the underlying source episteme or source publication set or to sneak in a decision claim. Case linkage: see E.17.ID.CR:5.4.6, E.17.ID.CR:5.4.9, E.17.ID.CR:5.4.10, and E.17.ID.CR:5.4.11.

Row 5. The anti-scalarization row matters because a comparison sheet often becomes a ranking by layout, sort order, or score aggregation before anyone states a decision. The pattern adapts only the design-space lesson it can honestly use: keep non-scalar trade-offs, row-level comparison bases, and visible ordering bases inspectable. It rejects any move where a benchmark table, Pareto label, or sorted order becomes equivalence, recommendation, method choice, gate passage, or decision authority. Ordinary recovery: read Bounded lift, Unsupported downstream claim or effect, and Boundary trigger before accepting any ordering as more than a review aid. Engineer-manager payoff: the team can compare alternatives without a quiet scalar score deciding the work. Case linkage: see E.17.ID.CR:5.4.5, E.17.ID.CR:5.4.6.e, and E.17.ID.CR:5.4.6.f.

Relations

  • Naming-level family: InterpretationDiscipline names the wider interpretation family for this governing pattern.
  • Governing pattern: ComparativeReading over comparative review units.
  • Inherited dynamic frame: C.2.2a and A.16.0, where what moves is a lineage of successive U.Episteme publications over U.CharacteristicSpace.
  • Comparative-review-unit and carrier use: the comparative review unit is one working review unit that may be carried by an admissible E.17 publication-face kind value publication face/form over that inherited frame; it is not the moving lineage itself, not a carrier, and not the whole review or decision work.
  • Builds on: C.2.2a, A.16.0, F.9, F.9.1, Part F, A.6.9, and E.14.
  • Mixed-case dependency rule: in mixed cases, this pattern stays subordinate to whichever neighboring pattern still governs the base case (A.6.3.*, F.9 or F.9.1, Part F with A.6.9, or E.17.EFP), including that pattern's source, continuity, bridge, wording-repair, and boundary constraints.
  • Primary rule here: this section carries the summary, checklist, worked slices, and boundary block for ComparativeReading; mixed-case neighboring pattern rule remains primary where the base case still belongs elsewhere.
  • Repair-only neighbors when local instability is real: use E.17.AUD.LHR (Local Head Restoration) when lexical-head kind or qualifier pressure is still local; use E.17.AUD.OOTD (PublicationUnit Primary EntityOfConcern Discipline) when the same review unit still has unstable reviewed-source, publication-unit, comparative-move, or outside-work reading after local repair. These neighboring patterns are not always-on prerequisites for ordinary ComparativeReading use.
  • Coordinates with: A.6.P, A.6.3, A.6.3.CR, A.6.3.RT, A.6.3.CSC, F.9, F.9.1, Part F, A.6.9, E.17.EFP, B.5.2.0, B.5.2, OntologicalReframing, A.6.4, C.11, A.15, A.15.4, A.20, A.21.
  • Nearest neighboring FPF patterns for outside work: A.6.P, A.6.3.*, F.9 or F.9.1, Part F with A.6.9, E.17.EFP, C.11, and B.5.2.0 or B.5.2.
  • Main neighboring-pattern boundaries: relation-precision claims apply A.6.P; sameness, equivalence, alignment, mapping, substitutability, interchangeability, or attribute, entity, or profile matching across contexts applies Part F and A.6.9 and, when bridge relation is live, F.9 or F.9.1; abductive-prompt claim applies B.5.2.0 or B.5.2; ontology or changed-target claim applies OntologicalReframing or A.6.4; decision-making claims and decision records apply C.11; downstream work or reliance, gate, assurance, and adjudication claims apply A.15.4, A.15, A.20, or A.21.
  • Boundary notes: same-entity transform rule stays with A.6.3.*; bridge-stance overlay stays with F.9.1 over an existing F.9 Bridge Card; "same", "equivalent", "align", or "map" wording repair and attribute, entity, or profile mismatch repair stay with Part F or A.6.9; explanation-face governance stays with E.17.EFP; reduced-use source-pinned renderings with narrower admissible use, non-admissible downstream use, and reopen discipline apply A.6.3.CSC Controlled Semantic Coarsening; bounded comparative reading does not by itself authorize downstream use it does not carry.
  • Non-goal: this pattern does not create a rival publication with named authority-reference relation, a rival bridge taxonomy, a rival sameness or equivalence repair pattern, or a rival base-case discipline of its own.

C.29 mathematical-lens use relation

When a bounded comparative review unit uses a mathematical comparison basis, rival lens, invariant, obstruction, or structural similarity, E.17.ID.CR still works over comparison unit, viewpoint, basis, review-unit boundary, and comparative-reading admissibility. The applicable C.29 output for the stated use (MathLensUse.LensCandidateNote, MathLensUse.OneLine, MathLensUse.MiniCard, or MathLensUse.FullCard when required) may be cited only for adequacy of the mathematical lens used in that comparison. It does not create the comparison record, adjudicate rival publications, or authorize bridge, evidence, selector, or benchmark claims outside the comparative-reading record.

E.17.ID.CR:End

PublicationUnit Stability Discipline - keep one publication unit stable enough to read honestly

Placement. First publication-unit stability pattern for publication units whose active problem must be handled by one existing governing FPF pattern or by one project-side record or publication whose governing FPF pattern is named: local lexical-head repair, whole-unit primary-EntityOfConcern stabilization, bounded comparison, or a neighboring non-publication-unit pattern.

Builds on. C.2.2a, A.16.0, A.7, E.10, F.18, E.14, E.19.

Coordinates with. E.17.AUD.LHR, E.17.AUD.OOTD, E.17.ID.CR, E.17.EFP, A.6.3, A.6.3.CR, A.6.3.RT, A.10, A.15, A.15.4, B.3, A.20, A.21.

Plain-name. Keep one publication unit stable enough to read honestly.

One-line summary. PublicationUnit Stability Discipline is the first stability discipline for notes, memos, sheets, tables, screens, and short sections whose primary-EntityOfConcern interpretation, carried publication move, or outside boundary to work, work planning, decision, gate, or reliance claim has become unstable while the unit still looks unchanged. It helps the reader decide whether the honest next repair is local lexical-head repair, whole-unit primary-EntityOfConcern stabilization, bounded comparison over already stable source publications, or leaving the publication-unit stability family for a neighboring non-publication-unit pattern. Primary EntityOfConcern discipline. Publication-unit stability uses primary EntityOfConcern as the plain head and routes claim-bearing cases to publicationUnitPrimaryEntityOfConcern when the bounded unit exposes a U.Episteme or episteme-lane U.View. When no claim-bearing episteme or episteme-lane view is live, the pattern names the non-claim-bearing kind named by value, topic, or subject without creating a false EntityOfConcernRef.

Publication unit under review in plain terms. The publication unit under review is the publication unit itself: one note, memo, sheet, table, screen, or short section that people are expected to read as one readable unit. When the unit carries or exposes a claim-bearing episteme or episteme-lane U.View, the primary EntityOfConcern is the EntityOfConcern value of that carried item. When no claim-bearing episteme or episteme-lane view is live, do not invent a EntityOfConcernRef; name the non-claim-bearing kind named by value, or use plain topic or subject only in non-normative explanatory prose. Keep those relations separate: this pattern keeps the unit stable as a readable unit, while the whole-unit repair pattern checks whether that unit still keeps one stable primary EntityOfConcern or subject named by value by value.

Minimal lens in plain terms. Use a four-part interpretation: one publication unit under review, one primary EntityOfConcern, one carried publication move over that primary EntityOfConcern, and one outside boundary to work, work planning, decision, gate, or reliance claim. That outside boundary usually needs one light boundary type too: neighboring pattern application, downstream claim or effect, or ongoing engineering-process continuation. If any of those interpretation relations changes quietly, the unit is no longer honest enough to read as one unchanged publication unit.

Local working vocabulary.

  • publication unit under review = the note, memo, sheet, table, screen, or short section being kept honest as one unit;
  • primary EntityOfConcern = the primary EntityOfConcern named by value of the claim-bearing episteme or episteme-lane view that the unit carries or exposes when such an item is live; otherwise use non-claim-bearing kind named by value, topic, or subject without creating a EntityOfConcernRef;
  • carried publication move = the publication-side claim, interpretation, comparison, or explanation move that the unit performs over that primary EntityOfConcern;
  • outside work boundary = downstream U.Work, U.WorkPlanning, decision, gate, or reliance claim that still remains outside the unit;
  • downstream claim or effect = an approval, assignment, go or no-go, gate, work, or reliance claim or effect that readers infer from the unit but that belongs outside this pattern unless explicitly handled by its governing pattern or by the project-side FPF kind and reference named by value that governs that claim or effect. A.6.P unpacking of overloaded local words. This pattern does not use route, branch, head, or unit as hidden ontology. Use these roles instead:
  • local lexical head = the head word or phrase inside one claim-bearing sentence or heading, such as review, interpretation, note, or text; it is not an FPF pattern head, not a package-family head, and not a language-state alternative;
  • publication-unit repair disposition = the current repair disposition: local lexical-head repair, whole-unit primary-EntityOfConcern stabilization, bounded comparison, explanation classification, representation change, controlled coarsening, changed primary EntityOfConcern, or downstream decision, gate, work, or reliance claim;
  • governing FPF pattern or project-side FPF kind and reference named by value = the named FPF pattern, or a project-side evidence record, gate record, decision record, work plan, work occurrence, method, action invitation, relation record, or U.EpistemePublication whose governing FPF pattern is named;
  • publication-unit stability family = the relation among E.17.AUD, E.17.AUD.LHR, E.17.AUD.OOTD, and neighboring comparison and explanation patterns; it is not a runtime path and not a transduction sequence;
  • presentation-form label = note, memo, sheet, screen, and similar form words; these are only form clues until the publication unit under review and primary EntityOfConcern are restored.

When any of those roles is claim-bearing, record the active entry in the working card rather than polishing the sentence with another generic word.

Use this when. Use this pattern when one note, memo, sheet, screen, table, or short section is no longer trustworthy as one stable interpretation unit. Use it when people keep arguing about a paragraph, but the real question is simpler: repair one local lexical head, stabilize the whole unit, treat the unit as bounded comparison, or stop using this pattern because another FPF pattern or project publication governs the claim being made.

First-minute working moment. A memo starts by naming one primary EntityOfConcern, then quietly makes a different publication move over it, or quietly becomes about a different primary EntityOfConcern. One reviewer wants to repair one vague local lexical head. Another wants to rewrite the whole memo. A third person thinks the unit is already a bounded comparison or a downstream decision or reliance publication. You need one honest stabilization decision before the unit gets patched in three incompatible ways.

What goes wrong if you miss this. Teams keep fixing sentences without agreeing on the publication unit under review. Local lexical-head repair gets asked to carry whole-unit stabilization. Whole-unit stabilization gets asked to carry bounded comparison. Comparison gets mistaken for approval or rollout. A more polished or official-looking format gets mistaken for downstream claim or effect. The text stays readable enough to circulate, but no longer honest enough to trust.

What this buys you in practice. It gives one quick publication-unit stabilization decision before the draft widens or needs a neighboring governing pattern or downstream publication. Teams can decide earlier whether to stay local, stabilize the whole publication unit, apply bounded comparison, or leave the publication-unit stability family entirely for a more honest neighboring pattern or downstream publication.

Cheap stop. If the four-part interpretation names one publication unit under review, one primary EntityOfConcern, one carried publication move, and one outside boundary clearly enough for the current reader, stop with that stabilization decision. Do not build a dossier or open the wider assurance sections unless the unit still attracts comparison, explanation, evidence, gate, decision, work, or reliance overread.

Not this pattern when. This is not the right pattern when:

  • one overloaded local lexical head is still the only real defect and Local Head Restoration is enough;
  • the publication unit is already stable and the active problem situation is one bounded comparison over already pinned source publications;
  • the main problem situation is explanation classification over an existing face, view, carrier, or publication discipline, or another neighboring semio pattern rather than publication-unit stability;
  • the text is already being used to approve, direct, assign, or adjudicate work and should use the more honest downstream decision, gate, work, or reliance publication.

Primary working reader. The first working reader is an author or reviewer who needs to stop one memo, note, sheet, table, screen, or short section from quietly changing its primary EntityOfConcern, carried publication move, or downstream claim or effect. Architects, managers, and program leads are important secondary readers when they need the same governing-pattern and project-side-reference boundary signal, but they are not the first-minute reader for this opening recognition block.

Quick kind stack. PublicationUnit Stability Discipline keeps the current publication-unit problem from being repaired at the wrong level. E.17.AUD.LHR governs the local lexical-head repair case: one word or phrase inside the unit is carrying too much semantic work while the unit otherwise stays stable. E.17.AUD.OOTD governs the whole-unit stabilization case: the same publication unit no longer keeps one primary EntityOfConcern, one carried publication move, and one outside boundary to work, work planning, decision, gate, or reliance claim visible. E.17.ID.CR governs the bounded-comparison case once the publication unit is stable and the primary move is comparison over available source publications. Other explanation, representation, bridge, gate, approval, work, or reliance problem situations belong to their own governing FPF patterns, or to project-side records and publications whose governing FPF pattern is named. This pattern names that working distinction; it does not create a path, call chain, fixed process, or runtime control path.

Quick recognition matrix.

SituationWhat is really happeningHonest next interpretation
An episteme-publication-heavy note keeps using vague lexical heads such as review, interpretation, or interpretationthe whole unit is mostly stable, but one overloaded local lexical head is doing too much semantic workstay local with Local Head Restoration
An architecture or status memo starts about one bounded question, then quietly starts sounding like rollout, approval, go or no-go, or assignment publicationthe publication unit now carries a quiet shift in primary EntityOfConcern or carried publication moveapply PublicationUnit Primary EntityOfConcern Discipline
A comparison sheet already keeps one stable primary EntityOfConcern and one clear boundary, but reviewers keep treating it as if it needed whole-unit rescuethe unit is stable enough; the active problem situation is bounded contrast over already available source publicationsapply E.17.ID.CR ComparativeReading
An onboarding explainer, dashboard card, or review note starts to act as if cleaner prose alone licensed a policy claim, assurance claim, work claim, or reliance claim that its governing FPF pattern has not made admissiblethe problem situation has left publication-unit stability and entered a neighboring explanation problem or downstream claim or effectapply the neighboring governing pattern instead of keeping the case inside publication-unit stability

Recognition-block note. The opening card above is the quick recognition block. The sections below carry the heavier assurance section: publication-unit boundary decisions, A.6.P unpacking, governing-pattern and project-side-reference boundary decisions, worked slices, and SoTA and domain grounding.

Problem frame

Anti-single-sequence note. The publication-unit checks, recognition matrix, and worked slices below are working aids for one publication unit under review. They are not a fixed engineering process and not a promise that every admissible case moves through one mandatory sequence.

This pattern is for real publication units used in review, design, architecture, coordination, onboarding, and similar interpretation situations. It is for the moment when one publication unit still sounds like one unchanged note even after its primary EntityOfConcern, carried publication move, or downstream claim or effect has already changed.

The recurring defect family is simple:

  • one publication unit begins as if it were about one primary EntityOfConcern or claim focus;
  • the unit then quietly changes its primary EntityOfConcern, carried publication move, or outside boundary to work, work planning, decision, gate, or reliance claim;
  • the surrounding team starts repairing different defect families at once because nobody first named the active publication-unit problem situation.

Typical moments include:

  • an episteme-publication-heavy note where one broad local lexical head starts carrying more semantic work than the sentence restored;
  • an architecture or status memo that starts about one bounded primary EntityOfConcern or question and ends by sounding like rollout or approval work;
  • a comparison sheet that is already stable enough locally, but is still being overworked as if it needed full publication-unit stabilization;
  • an onboarding aid, dashboard card, or review note that quietly shifts into explanation, policy, or decision language while still sounding like one unchanged unit.

Problem

Without a named publication-unit stability discipline:

  1. teams repair local wording when the real defect is whole-unit interpretation instability;
  2. teams open whole-unit stabilization when the real defect is still one overloaded local lexical head;
  3. teams keep thickening a publication-unit repair when the active problem situation is already bounded comparison;
  4. teams mistake note, sheet, table, or screen language for different publication unit under review kinds when the real publication unit under review is still one publication unit in different presentation forms;
  5. teams over-attribute engineering-process, approval, or rollout claim or effect to a text that never honestly became that kind of unit.

Forces

ForceTension
Recognisability vs precisionCold readers need a quick recognition block, but the unit still needs explicit primary-EntityOfConcern, carried-publication-move, and outside-work discipline.
Local repair vs whole-unit stabilizationIt is cheaper to fix one overloaded local lexical head, but sometimes the whole publication unit already carries a quiet shift in primary EntityOfConcern, carried publication move, or outside boundary to work, work planning, decision, gate, or reliance claim.
Stability vs governing-pattern boundary honestyTeams want to keep one unit usable, but they also need to admit when the case now belongs to comparison, explanation, or downstream claim or effect.
Form variety vs publication-unit fidelityNote, memo, sheet, table, and screen are convenient ordinary labels, but they must not silently replace the publication unit under review.
Readability vs downstream claim or effect launderingClearer or more polished prose helps readers, but it does not by itself mint approval, policy, gate, work, or reliance claim or effect.

Solution

PublicationUnit Stability Discipline is the first stabilization decision for one publication unit whose interpretation is unstable.

It names the current repair disposition: what the unit is mainly about, what move it is carrying, and which governing FPF pattern or project-side FPF kind and reference named by value governs the live case. It does not certify the unit or make a paperwork dossier.

Minimum admissible interpretation

A locally admissible interpretation keeps four entries visible enough to inspect by value:

  • one publication unit under review;
  • one primary EntityOfConcern;
  • one carried publication move over that primary EntityOfConcern;
  • one outside boundary to work, work planning, decision, gate, or reliance claim, with one light boundary type when that distinction matters: neighboring pattern application, downstream claim or effect, or ongoing engineering-process continuation.

If the publication unit changes any of those four without saying so, its interpretation has already shifted even when the sentences still look polished.

Publication-unit stability vs whole-unit requirement

Light ordinary output. The ordinary output is one repair disposition, not a dossier:

  • stable for current use: the four-part interpretation is explicit enough and no neighboring bridge, prompt, ontology, action, gate, adjudication, authority, or downstream claim is live;
  • local lexical-head repair: one overloaded local head should apply E.17.AUD.LHR;
  • whole-unit stabilization: the unit should apply E.17.AUD.OOTD;
  • bounded comparison: the stable unit should apply E.17.ID.CR;
  • leave publication-unit stability: the claim being made is work, work planning, decision, gate, evidence, explanation, reliance, carrier or front-end work, or another object governed by its neighboring FPF pattern governing that claim or project-side FPF kind and reference named by value.

PublicationUnit Stability Discipline is the first stabilization decision for one publication unit whose interpretation is unstable. Its job is to name the current repair disposition and then handle the case under the governing FPF pattern or project-side FPF kind and reference named by value that already governs that disposition: E.17.AUD.LHR for local lexical-head repair, E.17.AUD.OOTD for whole-unit stabilization, E.17.ID.CR for bounded comparison, or another neighboring pattern when the claim being made has left publication-unit stability.

It does not re-govern the narrower whole-unit admissibility check that already belongs to PublicationUnit Primary EntityOfConcern Discipline once the active question becomes: can this one unit still keep one stable primary EntityOfConcern, one carried publication move, and one outside boundary to work, work planning, decision, gate, or reliance claim by value?

Inherited dynamic frame

This pattern governs the publication-unit stability boundary over the inherited lineage and move frame already carried by C.2.2a or A.16.0. It is about how one publication unit speaks about that inherited moving lineage or carried publication move. It is not a standalone theory of documents, carriers, or publication forms.

Kind and boundary

This pattern governs one publication unit as a readable unit. It does not treat that unit as automatically identical with:

  • the U.Episteme or episteme species whose claims the unit carries, quotes, or describes;
  • the U.EpistemePublication that carries episteme-publication identity;
  • the primary EntityOfConcern inside the unit;
  • a generic publication face or MVPK face under E.17 constraints;
  • a carrier or evidence carrier;
  • proof, evidence record, assurance claim, or release admissibility;
  • a view or viewpoint;
  • an engineering-process stage;
  • a downstream decision, gate, work, or reliance publication.

Those may become relevant neighboring concerns, but they are not the problem situation being governed here just because the same note, sheet, or screen happens to mention them.

Publication-unit boundary choice. A PublicationUnit boundary is valid when a careful reader would naturally inspect that bounded item as carrying one primary publication move over one primary EntityOfConcern, with one visible outside boundary to work, work planning, decision, gate, reliance claim, or neighboring pattern application. Choose the bounded item that carries the claim being made or effect being repaired. Do not choose a smaller boundary merely to hide a downstream overclaim, and do not choose a larger boundary merely to absorb several primary EntityOfConcern values into one unit. A table row may be the unit when that row carries the claim; the whole table may be the unit when the table-level caption or comparison frame carries the claim. A dashboard tile, note, card, sheet, or screen block may be the unit only when that bounded item, not the whole carrier or interface, carries the live publication move.

Publication-unit snapshot identity. A PublicationUnit may remain the same bounded unit while its carrier rendering, export format, screenshot, or layout changes. It does not remain the same stabilized interpretation by visual or file continuity alone. If a revision, refresh, translation, regeneration, or dashboard update changes the primary EntityOfConcern, carried publication move, outside boundary, source pins, or admissible use, rerun the four-part interpretation for the new snapshot before the unit is used for comparison, explanation, evidence, gate, decision, work, or reliance claims.

Ordinary working card

Use this seven-row card before you widen the repair:

RowOrdinary prompt
1What is the publication unit under review being kept honest here?
2What is that unit mainly about right now?
3What carried publication move is it making over that primary EntityOfConcern right now?
4What downstream U.Work, U.WorkPlanning, decision, gate, or reliance claim still remains outside this unit, and is that boundary mainly a neighboring pattern application, downstream claim or effect, or ongoing engineering-process continuation?
5Is the active problem situation still one overloaded local lexical head, whole-unit primary-EntityOfConcern stabilization, bounded comparison, or another neighboring pattern altogether?
6Is the current form label (note, sheet, table, screen, and similar ordinary labels) naming only the presentation form, or is it quietly being used as if it changed the publication unit under review or the kind of downstream claim or effect readers are now inferring?
7Does the current interpretation depend on a modeling substrate or rationale to identify the primary EntityOfConcern or carried publication move, and if so has that substrate or rationale been published honestly enough for this unit?

Boundary and pattern-application rule

  • If row 5 still points to one overloaded local lexical head, apply Local Head Restoration.
  • If row 5 shows that the whole publication unit still cannot keep one stable primary EntityOfConcern, one carried publication move, and one outside boundary to work, work planning, decision, gate, or reliance claim visible, apply PublicationUnit Primary EntityOfConcern Discipline.
  • If the publication unit is already stable enough and the real move is bounded comparison over already available source publications, apply E.17.ID.CR ComparativeReading.
  • If the main problem situation is explanation classification over an existing face, apply the neighboring explanation pattern rather than keeping the case inside publication-unit stability by inertia.
  • If the active problem situation is publication form, bridge work, or downstream claim or effect, leave the publication-unit stability family and apply the more honest neighboring pattern or use the downstream publication.

Local naming and lexical-governance rule

Treat ordinary labels such as note, memo, sheet, table, screen, review, and status as presentation-form clues, not as self-authenticating unit kinds.

Working rule:

  • if one overloaded local lexical head is doing most of the semantic work, repair that local lexical head first through Local Head Restoration;
  • if the local lexical head is not the real issue, keep the publication unit stable in the whole-unit stabilization pattern instead of hiding the interpretation shift under one more qualifier;
  • do not let cleaner or more formal wording stand in for non-admissible downstream claim or effect or non-admissible comparison source relation.

Modeling-substrate-or-rationale surfacing rule

If the primary EntityOfConcern or the carried publication move depends on a modeling substrate or rationale, publish that substrate or rationale briefly in the unit or move the case to a heavier publication form or neighboring pattern that can carry it honestly. Do not let a formally loaded case pretend it is only prose hygiene.

Claim-bearing admissibility dock

When the publication unit carries claim-bearing explanation, comparison, or downstream claim or effect pressure, keep five quick admissibility relations visible enough to preserve the repair disposition:

  • evidence status and source-pin status when the unit leans on already available source publications;
  • current admissible reliance or work interpretation and forbidden non-admissible decision, work, or gate claim;
  • whether this unit is the governing publication unit or a derivative helper publication;
  • any claim-bearing modeling substrate or rationale;
  • and that the assurance section only tightens the opening recognition claim rather than silently broadening it into downstream claim or effect.

Worked slices

Local-head case

A semio note keeps saying this review and this interpretation, but nobody can tell which FPF kind or locally declared head those lexical heads name here. The rest of the publication unit under review is still locally stable once the local lexical head is repaired. The honest move is not broad publication-unit stabilization. It is Local Head Restoration.

Whole-unit interpretation-shift case

A memo starts about one bounded architecture question over an inherited lineage or move, then shifts into wider rollout or approval language without declaring the transition. Repairing one sentence does not stabilize the publication unit under review because the primary EntityOfConcern and the carried publication move have both widened. The honest move is PublicationUnit Primary EntityOfConcern Discipline.

Stable-unit comparison case

A comparison sheet already keeps one stable primary EntityOfConcern and one clear outside boundary to work, work planning, decision, gate, or reliance claim, but the team is using publication-unit instability language because the comparison is contentious. The honest move is not more publication-unit stabilization. It is E.17.ID.CR ComparativeReading.

Explanation-laundering case

An onboarding explainer starts from one stable source-pinned note, but then the simplified prose begins to sound like canonical assurance or policy. The publication unit may still be readable, yet the main problem situation is no longer publication-unit stability. The honest move is to leave publication-unit stability and apply E.17.EFP ExplanationFaithfulnessProfile.

Downstream decision and reliance case

A status card starts as one bounded summary of progress, then quietly becomes the place where people infer approval, assignment, or go or no-go claim or effect. The problem is no longer only publication-unit stability. The honest move is to stop treating the card as if it were still only one neutral note and use the downstream decision, gate, work, or reliance publication.

Compact scenario and anti-case pack

Use this quick contrast set when the first interpretation is still foggy:

Near-miss caseWhat to look forHonest governing pattern or project-side-reference boundary
LHR-onlyone overloaded local lexical head is doing most of the semantic work while the publication unit under review otherwise stays stableapply Local Head Restoration
whole-unit interpretation shiftthe publication unit under review quietly changes primary EntityOfConcern or carried publication moveapply PublicationUnit Primary EntityOfConcern Discipline
stable comparison -> CRthe unit is already stable and the live problem situation is bounded comparison over pinned source publicationsapply E.17.ID.CR ComparativeReading
downstream claim or effect overreadreaders are inferring approval, assignment, or go or no-go claim or effect from the publication unitleave the publication-unit stability family for the more honest downstream decision, gate, work, or reliance publication
modeling-lens hiddenthe unit only makes sense because of one unpublished model, formal substrate, or rationalepublish that substrate or rationale briefly or use a heavier publication form or neighboring pattern

Common Anti-Patterns and How to Avoid Them

Anti-patternWhy it failsHow to avoid it
Fixing one sentence while the whole unit already carries a quiet interpretation shiftlocal repair is asked to carry whole-unit stabilizationcheck primary EntityOfConcern, carried publication move, and outside boundary to work, work planning, decision, gate, or reliance claim before repairing the sentence
Treating form labels as if they changed the publication unit under reviewtable, sheet, or screen is used as if it already named a different ontology or downstream claim or effecttreat those as presentation forms first; only leave this pattern when the problem situation itself changes
Laundering comparison through stability languageteams keep saying the unit is unstable when the active problem situation is already bounded comparisonuse the governing-pattern and project-side-reference boundary rule and apply E.17.ID.CR ComparativeReading
Laundering downstream decision or reliance through clearer prosea better-written note is over-read as if it had become an approval, gate, work, or reliance textkeep the outside boundary to work, work planning, decision, gate, or reliance claim explicit and leave this pattern when downstream claim or effect appears
Letting three repair dispositions act at oncelexical-head repair, whole-unit stabilization, and neighboring governing-pattern application all get patched in parallel with no shared primary-EntityOfConcern interpretationuse the working card first and name one current repair disposition before patching the unit

Consequences

  • You slow down long enough to name the active publication-unit problem situation before patching the draft.
  • You reduce pointless escalation from one overloaded local lexical head into a whole-unit rewrite.
  • You reduce the opposite failure too: trying to solve whole-unit interpretation instability with one more qualifier on the same local lexical head.
  • You keep neighboring publication-unit repair patterns and neighboring non-publication-unit patterns explicit instead of letting one broad stability name quietly absorb them.
  • You make it harder for clearer prose, official-looking formatting, or wider circulation to masquerade as downstream claim or effect.

Rationale

PublicationUnit Stability Discipline is worth stating explicitly because local lexical-head repair and whole-unit primary-EntityOfConcern stabilization are both already real problem situations, but authors and reviewers still need one stabilization check that says when the case is local, when it is whole-unit, when it is already bounded comparison, and when it has left the publication-unit stability family entirely.

The pattern stays intentionally narrow. It does not turn every publication-unit problem into publication design or downstream decision, gate, work, or reliance work. Its job is simpler and more claim-bearing: keep one publication unit honest enough that readers can still tell what it is mainly about, which carried publication move it makes, and which downstream U.Work, U.WorkPlanning, decision, gate, or reliance claim remains outside.

SoTA-Echoing

Claim 1. Best-known current architecture-description practice keeps the entity of concern and the description expressing it explicit enough that one document does not silently change its concern while still sounding continuous.

Practice, source, alignment, and adoption. Joint ISO, IEC, and IEEE 42010:2022 distinguishes the architecture of an entity from the architecture description that expresses it and requires explicit structure and concern handling. PublicationUnit Stability Discipline adopts that explicit concern discipline, adapts it from architecture descriptions to publication units more broadly, and rejects silent primary-EntityOfConcern shift inside one readable unit. For a reviewer or architect, this is the practical guard behind worked slices 5.2 and 5.3: one publication unit must not quietly shift concern and still be treated as one unchanged note.

Claim 2. Best-known current information-for-use practice treats user-facing units as purpose-bound, structured information rather than as loose bundles that can mix explanation, instruction, warning, and decision or reliance effect by convenience.

Practice, source, alignment, and adoption. Joint IEC and IEEE 82079-1:2019 requires information for use to be purpose-directed, structured, and evaluated for usability. PublicationUnit Stability Discipline adopts purpose-bound publication units and explicit outside boundaries to work, work planning, decision, gate, or reliance claim, adapts that discipline from information-for-use to notes, memos, sheets, tables, and screens, and rejects the shortcut where a clearer or official-looking unit is treated as if it had already become approval, policy, gate, work, or reliance text. For a manager or operator, this is the practical guard behind worked slices 5.4 and 5.5: better explanatory form does not itself mint downstream claim or effect.

Claim 3. Best-known current pattern-writing and pattern-validation practice keeps patterns tied to recognisable situations, explicit problem, solution, and consequence structure, and reviewable rationale rather than elegant internal naming alone.

Practice, source, alignment, and adoption. Iba (2021) and Riehle et al. (2020) both treat pattern writing and validation as requiring recognisable situations, explicit structure, and reviewable reasoning rather than only elegant naming. PublicationUnit Stability Discipline adopts worked slices, recognisable entry cues, and explicit governing-pattern and project-side-reference boundary discipline, adapts those expectations to publication-unit stability work, and rejects a pattern text that is cleanly labeled but domain-thin or reader-thin. For the current working reader, this is the practical guard behind the recognition block and slices 5.1 through 5.5: the pattern should be usable before one has to reconstruct the surrounding rationale from scratch.

Local stance. The current SoTA claim is narrow. This pattern is not claiming one universal theory of documents. It claims a smaller and more practical point: one publication unit stays trustworthy only when its primary EntityOfConcern, carried publication move, and outside boundary to work, work planning, decision, gate, or reliance claim remain explicit enough for cold readers to recover, and when neighboring problem situations are handled by their governing patterns rather than hidden.

Conformance Checklist

  1. CC-AUD-1 — One publication unit under review is explicit. The case names one note, memo, sheet, table, screen, or short section as the publication unit under review rather than letting presentation-form labels stand in for the publication unit under review.
  2. CC-AUD-2 - Primary EntityOfConcern and carried publication move are explicit enough to identify the governing pattern. The case keeps visible which primary EntityOfConcern the unit is about and which carried publication move it performs over that primary EntityOfConcern right now.
  3. CC-AUD-3 — Outside-work boundary is explicit. The case states what downstream U.Work, U.WorkPlanning, decision, gate, or reliance claim still remains outside the publication unit under review, including neighboring pattern application, downstream claim or effect, or ongoing engineering-process continuation when that distinction matters.
  4. CC-AUD-4 — The active repair disposition is named honestly. The case makes explicit whether the live problem situation is local lexical-head repair, whole-unit primary-EntityOfConcern stabilization, bounded comparison, or another neighboring pattern rather than patching several problem situations at once under one vague stability claim.
  5. CC-AUD-5 - Repair-disposition and governing-pattern boundary choice is explicit. When the problem situation belongs with Local Head Restoration, PublicationUnit Primary EntityOfConcern Discipline, E.17.ID.CR ComparativeReading, a neighboring explanation-faithfulness pattern, or a downstream decision, gate, work, or reliance publication, that governing FPF pattern or project-side FPF kind and reference named by value is explicit rather than hidden inside broad-family wording.
  6. CC-AUD-6 — Presentation-form labels do not launder publication-unit kind or downstream claim or effect. note, memo, sheet, table, screen, and similar labels remain presentation-form clues and do not silently change the publication unit under review, create proof, create evidence, create release admissibility, or mint downstream claim or effect.
  7. CC-AUD-7 - Claim-bearing modeling substrate or rationale is published or handled by a governing publication form. If the primary EntityOfConcern or carried publication move depends on a modeling substrate or rationale, publish that substrate or rationale briefly enough for review or handle the case by a heavier publication form or neighboring pattern that can carry it honestly.
  8. CC-AUD-8 — Clearer prose does not silently widen downstream claim or effect. Readability, formatting, and wider circulation may improve the unit, but they do not by themselves turn the unit into approval, policy, assignment, gate, work, or reliance text.

Relations

  • Builds on: A.7, E.10, F.18, E.14, E.19, E.17, and C.2.1.
  • Coordinates with: E.17.AUD.LHR Local Head Restoration, E.17.AUD.OOTD PublicationUnit Primary EntityOfConcern Discipline, E.17.ID.CR ComparativeReading, E.17.EFP ExplanationFaithfulnessProfile, and E.21 when a pattern-quality card, table, status line, or generated summary is published as a bounded publication unit. E.17.AUD governs publication-unit honesty; E.21 governs the underlying pattern-quality claim. Also coordinates with project-side FPF patterns such as C.11, A.10, A.15, A.15.4, B.3, A.20, and A.21 when decision, evidence, gate, assurance, engineering-justification, work, or reliance claims become primary.
  • Boundary consequence: when the publication unit can no longer stay honest inside this publication-unit stability pattern, apply the neighboring FPF pattern or name the project-side FPF kind and reference named by value instead of treating publication-unit stability as a general explanation, comparison, decision, gate, work, or reliance discipline.

E.17.AUD:End

PublicationUnit Stability Discipline and Local Head Restoration - repair the overloaded local lexical head before the publication unit inherits it

Placement. Narrow local lexical-head repair pattern inside the broader PublicationUnit Stability Discipline.

Builds on. A.6.P, A.7, E.10, F.18, E.14.

Coordinates with. E.17.ID.CR, E.17.AUD.OOTD, E.17.EFP, A.6.3, A.6.3.CR, A.6.3.RT, A.10, A.15, A.15.4, B.3, A.20, A.21.

Plain-name. Repair the overloaded local lexical head before the publication unit inherits it.

One-line summary. Local Head Restoration is a narrow local lexical-head repair pattern for cases where one locally familiar word such as text, document, surface, review, or interpretation is being asked to carry more meaning than the sentence has honestly restored.

Local lexical-head repair object in plain terms. The local repair object here is one local lexical head inside one publication unit: the load-bearing word or phrase whose kind is no longer recoverable from the sentence. The local repair move is to restore the lexical-head kind, active local reading, active primary entity or relation named by value/claim when one is active, carried move or question under repair, and nearest outside-work boundary before the rest of the publication unit inherits ambiguity.

Use this when. Use this section when one note, memo, review unit, table, or episteme-publication-heavy paragraph starts leaning on one broad familiar word and you can no longer tell which FPF kind or locally declared head that word names here. Use it when the local lexical head has become the overload point, but the publication unit has not yet proved that it needs full EntityOfConcern stabilization.

First-minute working moment. A draft says this review, this text, this document, this publication, or this interpretation, and everyone in the room keeps reading a different FPF kind or locally declared head into the same local lexical head. You do not yet need a whole new publication-unit rule check. You need the local lexical-head repaired before the rest of the unit can be trusted.

What goes wrong if you miss this. One vague local lexical head quietly governs the next three sentences. Review then turns into an argument about taste while the real defect is simple: the unit never said whether it was naming a description, a carrier, a publication unit, a carried move, a governing pattern, or wider work.

What this buys you in practice. It lets a team stabilize the smallest honest unit first. You repair the overloaded local lexical head, keep local reading and question under repair visible, and avoid escalating into publication-unit stability review too early.

Naming boundary. F.18 is nearby because a repaired head may sometimes become durable reusable naming work. It is not the default output here. If the local sentence becomes honest after one head repair and no durable cross-context name, UTS row, Core-facing name, reusable FPF head, or high-risk label is being minted, do not open a full Name Card. Keep the LHR output as the repaired local head plus its recovered local kind, active local reading, active primary entity or relation named by value/claim when one is active, carried move or question under repair, and outside-work boundary.

Success condition. LHR succeeds when a careful reader can identify the local lexical-head kind, active primary entity or relation named by value/claim when one is active, carried move or question under repair, and outside-work boundary for this sentence or small unit. If that is enough and the publication unit no longer shifts, stop. Apply E.17.AUD.OOTD only when the whole publication unit still cannot keep one primary entity of concern, one carried move, and one outside boundary stable after the local repair.

Ordinary-output claim inventory. After LHR, the author has claimed only that this local head now has one recovered kind or locally declared head, one active local reading, and one admissible local use inside this publication unit. The author has not claimed that the whole publication unit is stable, that the name is reusable globally, that the term is admitted to FPF Core, that a Name Card is open, or that any downstream evidence path, gate decision, work record, decision result, approval effect, or reliance basis exists.

Not this pattern when. This is not the right pattern when:

  • the same publication unit still has unstable EntityOfConcern or carried-move reading after local repair and now needs one stable answer to what it is about, what move it carries, and what remains outside;
  • the question under repair is already one bounded comparative review move over an otherwise stable source episteme or publication;
  • the main issue is view, face, carrier, publication architecture, or downstream approval, gate, adjudication, or execution work rather than an overloaded local lexical head;
  • the text is already honest locally, and the unresolved problem is wider strategy, rollout sequencing, or architecture framing.

Primary working reader. The first working reader is an author, reviewer, architect, or manager who needs one quick way to repair an overloaded local lexical head before the whole text overclaims.

Problem-owning practice reading. In ordinary practice, this pattern helps teams editing review notes, status notes, decision memos, architecture notes, and episteme-publication-heavy paragraphs where one familiar local lexical head has become the overload point. The job is not to redesign the whole text. It is to make one local sentence honest enough that reviewers stop arguing past each other about what the local lexical head names here.

Quick recovery entry. If the recognition block fits, recover the local repair through the five-row ordinary card in E.17.AUD.LHR:3.2 and the nearest worked slices in E.17.AUD.LHR:5.1 through E.17.AUD.LHR:5.6. Use the quick worked-slice starter only while one overloaded local lexical head still stays primary; if that recovery already makes bounded comparison or publication-unit stabilization primary, name the governing FPF pattern or project-side FPF kind and reference named by value before you open the heavier extension.

Quick first check. Do not open the whole local repair pattern yet. Ask these five questions first:

  1. Which trigger word is carrying unresolved semantic load?
  2. What lexical-head kind is that word honestly naming here?
  3. Which local reading is actually primary here?
  4. What active primary entity or relation named by value/claim, carried move or question under repair, and outside work are actually in play here?
  5. After one honest repair, does the unit stabilize locally, or does its reading still shift into a neighboring reading?

Local-repair threshold. One honest local repair should restore the overloaded local lexical head, its lexical-head kind, the active local reading, the active primary entity or relation named by value/claim when one is active, and the carried move or question under repair the sentence is actually carrying. If the next sentence still borrows a different kind, a different local reading, or a different outside-work boundary from the same local lexical head, local repair is no longer the only primary question.

Neighboring-reading boundary check. If one honest local repair stabilizes the unit and the remaining question is one bounded comparative review move over already pinned source epistemes or publications, apply E.17.ID.CR (ComparativeReading) rather than thickening this local lexical-head repair pattern. If the same publication unit still cannot keep one stable primary entity of concern, one carried move, and one outside-work boundary visible after local repair, apply E.17.AUD.OOTD (PublicationUnit Primary EntityOfConcern Discipline) instead of stacking more qualifiers onto the overloaded local lexical head.

Quick kind stack. PublicationUnit Stability Discipline names the wider publication-unit stability discipline. Local Head Restoration names the local lexical-head repair pattern used when one overloaded local lexical head inside one publication unit still needs its lexical-head kind, active local reading, active primary entity or relation named by value/claim, carried move or question under repair, and any family and governing-pattern stack restored before the rest of the unit inherits ambiguity. When that broader stack is doing real work, write one explicit output line: repair disposition = ... | governing pattern = ... | primary entity/relation = ... | move = ... | outside work = .... This local repair works over the inherited frame; it does not redefine the moving lineage, carrier, face, or publication architecture that sits outside the current publication-unit repair. Publication-unit stability remains outside until local repair fails, in which case the case should apply E.17.AUD.OOTD. The canonical publication-unit rule and check section remains E.17.AUD.OOTD; this section governs only the narrower local lexical-head repair pattern.

If those five questions are the right questions, start here.

Problem frame

Anti-single-sequence note. The quick checks, ordinary card, worked slices, and governing-pattern and project-side-reference boundary rules in this section are local aids for one publication unit under review. They are not a canonical transduction sequence, not a mandatory sequence, and not a promise that admissible cases move through one fixed sequence. One case may stabilize after one lexical-head repair, another may reopen when outside observation changes the honest question, and another may apply E.17.AUD.OOTD when the publication unit still has unstable EntityOfConcern or carried-move reading.

The recurring defect is small but expensive:

  • one broad familiar word enters early;
  • the word is never restored to one kind or lane;
  • later sentences inherit its ambiguity as if nothing happened.

Typical load-bearing local heads include:

  • document
  • text
  • artifact
  • note
  • sheet
  • publication
  • surface
  • face
  • view
  • review
  • interpretation
  • reading

These words are not uniformly wrong. They become risky when one of them starts carrying primary-entity/relation load, lane load, move load, or governing-pattern boundary load without being restored first.

Problem

Without a named local restoration move:

  1. teams keep asking qualifiers to rescue an unstable local lexical head;
  2. one sentence names one FPF kind or locally declared head while the next sentence names the move over it;
  3. readers over-infer publication-unit meaning from one under-restored broad-family word;
  4. later publication-unit discipline is opened too early for a problem that was still local;
  5. or the opposite happens: a publication-unit reading-stability defect is hidden because nobody repaired the local lexical-head overload first.

Solution

Local Head Restoration repairs the overloaded local lexical head before the rest of the publication unit is allowed to inherit it.

It restores lexical-head kind, active local reading, carried move or question under repair, and any family, governing-pattern, and primary-entity/relation stack that the sentence is quietly relying on.

Pairwise plain glosses

  • Pressured local lexical head = the word doing more work than the sentence has honestly restored.
  • Lexical-head kind = what FPF kind or locally declared head that word names here: for example description, carrier, publication unit, EntityOfConcern, relation record, face, or view.
  • Active lane = where the local work is happening here: for example review, publication, comparison, process, or authority.
  • Active primary entity or relation named by value/claim = what the local sentence or publication unit is actually about here, when such an object is active.
  • Move or question under repair = what the sentence is doing with the active primary entity, relation named by value/claim, or local lexical-head repair object, if anything.
  • Family, governing-pattern, and primary-entity/relation stack = when a broader family or governing pattern is active, name the family, governing pattern, primary entity or relation named by value/claim, carried move or question under repair, and outside work separately rather than letting one familiar local lexical head carry them by implication.

Local reading lens. Treat the overloaded local lexical head as one typed local head inside one publication unit. This local lens restores one overloaded local lexical head; it does not settle publication-unit modeling-lens policy, redefine the inherited moving lineage or its publication-form lane, publication-face lane, and carrier lane, or replace neighboring semioarchitecture characteristics. The smallest honest local lens asks five entries: what lexical-head kind is named here, which lane is primary, what active primary entity or relation named by value/claim is in play, what carried move or question under repair is carried, and what still remains outside. If that local lens no longer stabilizes the same publication unit, local repair has already reached its limit; apply its governing FPF pattern or use the project-side FPF kind and reference named by value.

Ordinary working card

Use this five-row card for ordinary cases:

RowOrdinary prompt
1Which trigger word is carrying unresolved semantic load?
2What lexical-head kind is it honestly naming here?
3Which local reading is actually primary here?
4What active primary entity or relation named by value/claim, carried move or question under repair, and outside work are actually in play here?
5After one honest repair, is local restoration enough, or does another governing FPF pattern or project-side FPF kind and reference named by value now govern the case?

Treat that card as the recognition block. It is a local repair aid, not a universal sequence rail. Use it while one overloaded local lexical head remains the main defect.

When family or governing-pattern language is load-bearing, add one explicit conditional output line next to the card: repair disposition = ... | governing pattern = ... | primary entity/relation = ... | move = ... | outside work = ....

Read the card as a three-way recovery aid:

  • if rows 1-5 stabilize around one repaired local lexical head, one restored lane, one active primary entity or relation named by value/claim, and one honest local question, stay here;
  • if rows 1-5 stabilize locally and the remaining question is one bounded comparative review move over already pinned source epistemes or publications, apply E.17.ID.CR rather than thickening this local lexical-head repair pattern;
  • if rows 2-5 still cannot stay stable because the same publication unit keeps borrowing a different object, move, or outside-work boundary from the same local lexical head, apply E.17.AUD.OOTD instead of pretending one more qualifier will rescue the same unit.

The nearest worked slices for those three repair dispositions are:

  • ordinary stay-local: E.17.AUD.LHR:5.2;
  • admissible return to bounded comparison: E.17.AUD.LHR:5.4;
  • admissible application of whole-unit discipline: E.17.AUD.LHR:5.5.

Load-bearing extension

If the local case is close to a neighbouring-pattern boundary and the ordinary card already stabilizes the unit, add these checks:

  • overloaded local lexical head;
  • restored lexical-head kind;
  • restored active local reading;
  • restored primary entity or relation named by value/claim;
  • restored carried move or question under repair;
  • restored outside-work boundary;
  • any family, governing pattern, and primary-entity/relation distinction now made explicit;
  • governing-pattern and project-side-reference decision.

Use that extension as the assurance section only when ordinary repair is already holding and the remaining risk is misuse at a neighboring-pattern boundary. It is for the stay-local repair disposition, not for re-deciding whether the case really belongs in E.17.ID.CR or E.17.AUD.OOTD. If the ordinary card now shows one stable local repair plus one bounded comparative review question, apply E.17.ID.CR before opening the extension. If the ordinary card still shows publication-unit reading instability after local repair, apply E.17.AUD.OOTD before adding declaration weight here. Do not use it to rescue a unit whose publication-unit reading still shifts, and do not turn it into a second rule sheet.

Ordinary repair order

Use this order when one local lexical head is carrying too much:

  1. name the overloaded word;
  2. restore the lexical-head kind;
  3. restore the active local reading;
  4. restore the active primary entity or relation named by value/claim when one is active;
  5. restore the carried move or question under repair, if any;
  6. restore any family, governing pattern, and primary-entity/relation distinction and nearest outside-work boundary the sentence is relying on;
  7. decide which of three repair dispositions is honest: stay with local repair, return the case to bounded comparison, or apply publication-unit discipline.

A narrowing qualifier alone does not count as restoration. Treat this order as one local repair aid, not as a canonical flow. Steps 1-6 restore the overloaded local lexical head; step 7 classifies what the repaired unit can honestly do next. If step 6 keeps reopening because the same unit still cannot hold one stable primary entity of concern, one carried move, and one outside-work boundary, stop local repair and apply E.17.AUD.OOTD. If the local lexical head is now honest and the only remaining question is one bounded contrast over already available source epistemes or publications, apply E.17.ID.CR instead of escalating the local card into a heavier record by habit. If the local lexical head is honest and no neighboring reading has become primary, stop here rather than manufacturing extra extension weight.

Quick worked-slice starter

If you need one ordinary entry sentence fast, start from one of these:

Working momentSafe starter sentence
Architecture noteThis note is about the proposed service boundary as one review publication unit, not yet about rollout work.
Operations reviewThis review unit is about the incident episode and its timing contrast, not yet about action approval.
Semio-heavy paragraphThis paragraph is about the comparative review unit, not the wider architecture strategy.

Use these starters only as local examples. If outside observations or downstream constraints change what the sentence can honestly carry, reopen with the governing FPF pattern or project-side FPF kind and reference named by value instead of treating the starter as step one of a fixed flow.

Worked slices

Worked-slice status. Read the release-boundary, publication-face, episteme-publication-heavy, bounded-comparison, publication-unit stabilization move, and outside-observation cases as a heterogeneous example bank, not as one recommended repair sequence. They show different admissible repair dispositions for this local lexical-head repair pattern: some cases stabilize after one honest lexical-head repair and stop here, some apply E.17.ID.CR, some apply E.17.AUD.OOTD, and some stop and reopen when outside observation changes what the same local sentence can honestly carry. For quickest recovery of the three main repair dispositions, read E.17.AUD.LHR:5.2 as ordinary stay-local repair, E.17.AUD.LHR:5.4 as admissible return to E.17.ID.CR, and E.17.AUD.LHR:5.5 as admissible publication-unit apply E.17.AUD.OOTD. Then read E.17.AUD.LHR:5.6 as the separate stop-and-reopen or neighboring governing-pattern move case after outside observation changes what the same local unit can honestly carry.

Worked-slice mini-schema. When a case turns episteme-publication-heavy or boundary-heavy, recover the same compact output in this order: overloaded local lexical head | lexical-head kind | active local reading | primary entity/relation | carried move or question under repair | outside work | repair disposition.

review is really carrying two jobs

A note says: This review establishes the release boundary for the service.

Two sentences later it says: The review should therefore assign rollout responsibility to platform.

Local repair first:

  • overloaded local lexical head = review;
  • restored lexical-head kind = review publication unit;
  • active local reading = boundary review, not responsibility assignment;
  • primary entity/relation = the release boundary as made visible in this review unit;
  • carried move = make one boundary visible;
  • outside work = responsibility assignment.

The repaired unit can now either stay with the boundary review or explicitly become a responsibility-assignment publication. Without that repair, the note quietly overclaims.

text quietly shifts into carrier or document status

A paragraph says: This text is the policy.

But what it really means is one publication form that describes the policy rather than being the policy object itself.

Local repair:

  • overloaded local lexical head = text;
  • restored lexical-head kind = publication form;
  • active local reading = publication unit, not policy authority object;
  • primary entity/relation = the policy description visible in this unit;
  • carried move = describe the policy rather than claim authority for it;
  • outside work = approval, rollout, release, gate, policy, assurance, or adjudication status.

This is the ordinary stay-local case. One repaired local lexical head keeps later sentences from borrowing authority from the wrong local reading without forcing publication-unit stabilization.

Recovery reading. Stay in E.17.AUD.LHR: the local lexical head is now honest, the same local unit no longer shifts, and no neighboring reading has become primary.

Semio-heavy family name does too much work

A semio note says: This interpretation clarifies the package.

But the same paragraph is really about one bounded comparative-reading move over one review unit, not about InterpretationDiscipline as a whole and not about the whole package.

Local repair:

  • overloaded local lexical head = interpretation;
  • restored lexical-head kind = bounded comparative review unit inside one episteme-publication-heavy paragraph;
  • active local reading = bounded comparative reading, not wider-family package explanation;
  • primary entity/relation = comparative review unit;
  • stack restored = family InterpretationDiscipline, governing pattern ComparativeReading;
  • move = bounded comparative reading;
  • outside work = wider architecture strategy.

Now the local paragraph stops pulling package-level load it never declared.

Local repair returns to bounded comparison

A comparison note says: This review shows option A is safer than option B.

But the unit is really one comparative review note over already pinned source epistemes or publications, not a publication-unit reading-instability case and not yet a publication-unit stability case.

Local repair:

  • overloaded local lexical head = review;
  • restored lexical-head kind = comparative review unit;
  • active local reading = bounded comparative-reading unit, not whole release process;
  • primary entity/relation = the already pinned option contrast;
  • carried move = make one bounded contrast visible over already available source epistemes or publications;
  • outside work = rollout choice or approval.

Once that local lexical head is repaired, do not keep thickening this pattern by habit. The admissible next pattern application is E.17.ID.CR for the now-stable unit, because the remaining question is one bounded contrast rather than publication-unit EntityOfConcern instability.

Recovery reading. This is the honest return-to-bounded-comparison case: finish the local repair here, then let E.17.ID.CR carry the remaining bounded contrast over the now-stable unit.

Local repair exposes publication-unit reading instability and must apply whole-unit discipline

A release note says: This document records the release decision for the candidate.

After one sentence, the same unit starts talking as if it were:

  • the review publication unit that compares evidence;
  • the decision object itself;
  • and the rollout work that follows if approval is recorded.

Local repair can still restore the overloaded local lexical head:

  • overloaded local lexical head = document;
  • restored lexical-head kind = review publication unit;
  • active local reading = publication unit, not decision object or rollout work;
  • carried move = record the current release reasoning visible in this unit;
  • outside work = actual approval, rollout execution, release, gate, policy, assurance, or adjudication question.

But the repaired local lexical head does not keep the same publication unit stable. The next sentences still slide between the object being decided, the move of comparing evidence, and the wider work that happens after the decision. That means local lexical-head repair has done its job and shown the remaining defect honestly: the publication unit still cannot keep one stable object, one move, and one outside-work boundary visible.

Recovery reading. This is the admissible publication-unit stabilization move case: stop thickening the local repair, keep the restored local lexical head as the last honest local result, and apply E.17.AUD.OOTD because the same unit still has unstable reading after one honest repair.

Outside observation changes what the same head can honestly carry

A status note says: This note captures the current rollback state for the candidate.

Mid-review, a new vendor bulletin changes the live failure boundary and pushes the surrounding conversation toward approval pressure.

Local repair can still make the current sentence honest:

  • overloaded local lexical head = note;
  • restored lexical-head kind = review publication unit;
  • active local reading = current review publication unit, not downstream approval record;
  • carried move = capture the rollback state visible on the current evidence slice;
  • outside work = any new approval, adjudication, or widened authority step.

But this is the stop-and-reopen case. Once outside observation changes what the same local unit can honestly stay about, do not keep appending new pressure as if the same local repair simply continued. Stop, reopen with a newly declared question, or apply the governing pattern if approval, rollout, release, gate, policy, assurance, or adjudication use, or publication-unit stabilization has become primary.

Recovery reading. Do not keep thickening the local card here: outside observation has changed what the same local unit can honestly carry, so the admissible repair disposition is stop-and-reopen or application of the neighboring governing pattern, not one more local qualifier.

Boundary dispositions

Assurance-recovery note. Read these governing-pattern boundary dispositions as a heavier audit record over the same ordinary five-row card and the same three honest repair dispositions. They are not a second compact rule list. If a governing-pattern boundary disposition bullet starts carrying the case by itself, recover the local-repair threshold, E.17.AUD.LHR:3.2 Row 5, and the nearest worked slice first.

Use a different governing pattern when:

  • the repaired local lexical head is no longer the real problem and the publication unit still has unstable EntityOfConcern or carried-move reading;
  • the same unit is already stable enough and the remaining question is one bounded comparative review move over already pinned source epistemes or publications;
  • the problem is really view, face, or carrier architecture;
  • the unit has already become downstream approval, gate, adjudication, or execution work;
  • outside observation or environmental change has changed what the same local unit can honestly carry, so the case now needs stop-and-reopen or application of the neighboring governing pattern rather than one more local qualifier.

Governing-pattern boundary recovery map.

If this pattern boundary becomes primaryRecover this ordinary question firstNearest worked recovery
The repaired local lexical head is no longer the real problem and the publication unit still has unstable EntityOfConcern or carried-move reading.E.17.AUD.LHR:3.2 Row 5: one honest local repair no longer stabilizes one object, one move, and one outside-work boundary.E.17.AUD.LHR:5.5
The same unit is already stable enough and the remaining question is one bounded comparative review move over already pinned source epistemes or publications.E.17.AUD.LHR:3.2 Row 5: the local lexical head is now honest and the remaining question is the bounded comparison, not one more local repair.E.17.AUD.LHR:5.4
Outside observation or environmental change has changed what the same local unit can honestly carry.The local-repair threshold plus the stop-and-reopen safeguard: do not keep appending new pressure to the same unit.E.17.AUD.LHR:5.6
The unit has already become downstream approval, gate, adjudication, or execution work.E.17.AUD.LHR:3.2 Row 4 plus the outside-work field: the sentence is no longer naming one overloaded local lexical head inside one review publication unit.E.17.AUD.LHR:5.5 and E.17.AUD.LHR:5.6

The comparison-side neighbor is E.17.ID.CR ComparativeReading: use that governing pattern when the local lexical head is now honest, the unit already stays about the same EntityOfConcern, and the remaining question is one bounded comparative reading over already available source epistemes or publications.

The main publication-unit neighbor is E.17.AUD.OOTD PublicationUnit Primary EntityOfConcern Discipline: use that governing pattern when local lexical-head repair is no longer enough and the whole publication unit still cannot keep one stable primary entity of concern, one carried move, and one outside-work boundary visible.

Treat those as neighboring recoveries, not as a required sequence. Some cases will stop after one local repair, some will apply bounded comparison under E.17.ID.CR, and some will apply publication-unit stabilization under E.17.AUD.OOTD once the honest question changes.

Consequences

Used well, this pattern:

  • prevents one vague local lexical head from governing a whole section by accident;
  • keeps local repair cheap instead of escalating too early;
  • makes later publication-unit stability review cleaner because the local lexical head question has already been restored;
  • gives authors and reviewers one common language for saying the problem is still local.

Used badly, it can become one more vocabulary exercise. If the publication unit still has unstable EntityOfConcern or carried-move reading after local repair, do not keep polishing the overloaded local lexical head forever. Move the case to the governing pattern.

SoTA-Echoing

Assurance-recovery note. Use these rows only after the ordinary five-row card, the local-repair threshold, and the nearest worked slices already tell you which repair disposition is primary. Each row must recover back into the same local question, repair disposition, or safeguard; if a citation starts carrying the case by itself, recover the ordinary card first.

Claim this pattern needsRelevant practicePrimary sourcePractitioner implication herePopular shortcut rejectedNearest recovery sectionAdoption status
One overloaded word should not silently switch concerns, viewpoints, or object readings inside one publication unit.Architecture-description practice treats explicit concerns and consistency across descriptions as first-class obligations.Joint ISO, IEC, and IEEE 42010:2022In E.17.AUD.LHR:5.2 and E.17.AUD.LHR:5.5, repair the local lexical head by making explicit whether the sentence names a publication unit, an active primary entity or relation named by value/claim, or outside work before later sentences inherit the wrong local reading.Reject the shortcut that a familiar word can carry several concerns merely because the surrounding document feels coherent.E.17.AUD.LHR:3.2 Rows 2-4; E.17.AUD.LHR:5.2; E.17.AUD.LHR:5.5Adopt and adapt. Adopt viewpoint accountability; adapt it to one overloaded local lexical head inside one publication unit.
One local lexical head should not be repaired by synonym taste alone.Terminology work separates designation, concept, definition, and term-formation practice.ISO 704:2022 and ISO 1087:2019In E.17.AUD.LHR:5.1 and E.17.AUD.LHR:5.3, repair the local head by naming the FPF kind or locally declared head it designates here, without importing an ISO concept system as FPF ontology.Reject synonym substitution, dictionary taste, and global vocabulary rows as local head restoration.E.17.AUD.LHR:3.2 Rows 1-3; E.17.AUD.LHR:5.1; E.17.AUD.LHR:5.3Adapt lightly. Use designation discipline, not a new global vocabulary.
The common sense of a word is not enough when the local context points to a rarer or narrower reading.Word-sense disambiguation practice treats sense recovery as context-sensitive; long-tail WSD work shows why common-sense defaulting fails.Blevins and Zettlemoyer (2020); Blevins et al. (2021); source maturity = analogy-only source useIn E.17.AUD.LHR:5.2 and E.17.AUD.LHR:5.4, do not assume that review, interpretation, text, or document has its common local reading when the FPF context selects a narrower kind or neighboring pattern.Reject common-usage defaulting as proof that the local FPF sense has been recovered.E.17.AUD.LHR:3.2 Row 2; E.17.AUD.LHR:5.2; E.17.AUD.LHR:5.4Adapt as analogy. Do not import machine-learning benchmarks as authoring rules.
Human-readable local heads should improve comprehension rather than merely sound tidy.Identifier and label clarity practice treats names as comprehension aids whose bad choices can mislead readers.Hofmeister et al. (2017), identifier-name comprehension study; source maturity = empirical analogy onlyIn E.17.AUD.LHR:5.1 and E.17.AUD.LHR:5.6, choose the lightest local head that lets the reader recover kind, active local reading, active primary entity or relation named by value/claim, move, and outside work.Reject a nicer label when it changes kind, scope, authority, or downstream use.E.17.AUD.LHR:3.2; E.17.AUD.LHR:5.1; E.17.AUD.LHR:5.6Adapt lightly. Use clarity to aid local repair, not to justify renaming stable FPF heads.
A working pattern should make the first useful move teachable and critique-ready, not merely correct in hindsight.Pattern-writing practice emphasizes clear template usage, concrete consequences, and critique-ready worked guidance.Iba (2021), “How to Write Patterns …” (PLoP 2021)The ordinary card and worked slices are here so a practitioner can repair one overloaded local lexical head in E.17.AUD.LHR:5.1 or E.17.AUD.LHR:5.4 without opening publication-unit discipline too early.Reject a skeleton-only pattern that leaves the actual local repair move to reviewer intuition.E.17.AUD.LHR:3.2; E.17.AUD.LHR:5.1; E.17.AUD.LHR:5.4Adopt. Keep the move teachable through one small card plus concrete slices.
Review quality improves when criteria are explicit instead of left to taste.Pattern-validation practice pushes toward explicit criteria and documented review checks.Riehle et al. (2020), “Pattern Discovery and Validation Using Scientific Research Methods”.The local-repair threshold and the three repair dispositions keep review from collapsing into style debate: see E.17.AUD.LHR:5.2 for stay-local, E.17.AUD.LHR:5.4 for return-to, and E.17.AUD.LHR:5.5 for apply the governing pattern.Reject style-debate closure when the repair disposition is still not named.local-repair threshold; E.17.AUD.LHR:3.2 Row 5; E.17.AUD.LHR:5.2; E.17.AUD.LHR:5.4; E.17.AUD.LHR:5.5; E.17.AUD.LHR:5.6Adopt. Keep the criteria lightweight but explicit.

Read E.17.AUD.LHR:6 - Boundary dispositions through this table only after the repair disposition is already visible by value. The citations do not choose the repair disposition for you; they discipline why the already-recovered repair disposition is reviewable and teachable.

Relations

Builds on

  • A.6.P Relational Precision Restoration (RPR)
  • E.10 Unified Lexical Rules for FPF
  • F.18 Local-First Unification Naming Protocol
  • A.7 Strict Distinction

Nearest neighbors

  • E.17.AUD.OOTD PublicationUnit Primary EntityOfConcern Discipline
  • E.17.ID.CR ComparativeReading

E.17.AUD.LHR:End

PublicationUnit Stability Discipline and PublicationUnit Primary EntityOfConcern Discipline - publication-unit stability over one primary EntityOfConcern

Placement. Narrow publication-unit stability pattern inside the broader PublicationUnit Stability Discipline.

Builds on. A.6.P, A.7, E.10, F.18, E.14, E.19, C.2.2a, A.16.0.

Coordinates with. E.17.AUD.LHR, E.17.ID.CR, E.17.EFP, A.6.3, A.6.3.CR, A.6.3.RT, A.10, A.15, A.15.4, B.3, A.20, A.21.

Plain-name. Keep one publication unit about one primary EntityOfConcern at a time.

One-line summary. PublicationUnit Primary EntityOfConcern Discipline governs one bounded publication unit at a time and keeps that unit explicit about what it is mainly about, what move it is carrying over that entity, and what wider work, non-admissible downstream decision, or reliance claim remains outside. Primary EntityOfConcern discipline. The live technical field is publicationUnitPrimaryEntityOfConcern: the primary EntityOfConcern, non-claim-bearing kind named by value, topic, or subject that this bounded publication unit is mainly about for the current use. When no claim-bearing episteme or episteme-lane view is live, the pattern names the non-claim-bearing kind named by value, topic, or subject without creating a false EntityOfConcernRef.

Publication unit under review in plain terms. The publication unit under review is one bounded publication unit that other people are meant to read as one unit: a note, memo, sheet, review aid, screen, table, or short section. The carried publication move is to keep that unit explicit about one publicationUnitPrimaryEntityOfConcern, one carried move over that entity, and one outside-work boundary.

Use this when. Use this pattern when one note, memo, sheet, screen, table, comparison aid, or other publication unit starts being interpreted as if it is still about one primary EntityOfConcern while it is quietly shifting into a different primary EntityOfConcern, a different concern, or a wider process. Use it when local word repair is not enough anymore and the publication unit needs one stable answer to: what is this unit about, what move is it making, and what still remains outside?

What goes wrong if you miss this. One publication unit starts by talking about one primary EntityOfConcern and quietly ends by licensing a different interpretation, a different concern, or wider work. Review then gets trapped in sentence-level wording arguments while the real defect is publication-unit interpretation instability, and readers over-attribute decision weight or scope to a unit that never declared it.

What this buys you in practice. It lets a team stop publication-unit interpretation instability before one memo, note, or review unit quietly starts carrying rollout, approval, wider architecture strategy, or another wider concern by habit. In practice that means reviewers can name the real stabilization job earlier, keep downstream work outside, and decide faster whether the current unit is stable enough to keep using at all.

Not this pattern when. This is not the right pattern when:

  • the problem is still local lexical-head kind or qualifier repair and E.17.AUD.LHR (Local Head Restoration) is enough;
  • the same publication unit is already stable enough, and the question under repair is one bounded comparative review move over already available source epistemes or publications under E.17.ID.CR;
  • the question under repair is still same-entity rewrite, representation shift, explanation-face work, bridge-explication, or another neighboring pattern whose move is already primary;
  • the question under repair is view, face, carrier, or publication architecture rather than publication-unit interpretation instability;
  • the unit is already being used to approve, assign, adjudicate, or direct work and should use the more honest downstream decision, work, or reliance publication.

Quick recovery entry. If the recognition block fits, recover the working question through the ordinary six-row card in E.17.AUD.OOTD:4.3 and the nearest worked slices in E.17.AUD.OOTD:5.1 through E.17.AUD.OOTD:5.5. If that ordinary card plus one nearest worked slice already settles the case, stop there rather than climbing into the heavier assurance sections by habit.

Quick boundary bank. If the recognition block no longer fits, stop at the right boundary instead of opening the heavier stack by habit. One overloaded local lexical head or qualifier only -> E.17.AUD.LHR (Local Head Restoration). Same stable publication unit, but the question under repair is one bounded comparison over already pinned source epistemes or publications -> E.17.ID.CR. View, face, carrier, same-entity rewrite, or downstream approval, work, or reliance question -> the neighboring pattern or the more honest downstream decision publication.

Quick kind-plus-lens interpretation. PublicationUnit Stability Discipline names the broader publication-unit discipline family. PublicationUnit Primary EntityOfConcern Discipline names the publication-unit stability pattern used when one publication unit needs its primary EntityOfConcern, carried move, and outside-work boundary made explicit together. The inherited moving lineage still remains successive U.Episteme publications over U.CharacteristicSpace; this pattern keeps explicit how one publication unit speaks about that lineage or a move over it, not a rival moving lineage.

Primary working reader. The first-minute reader is an engineer-manager, architect, reviewer, or programme lead who needs to stop one publication unit from quietly changing what it is about. Secondary readers may include people polishing or reviewing the text itself, but the top recognition block should still read as ordinary review and writing discipline first.

Problem frame

Anti-single-sequence note. The quick checks, ordinary six-row card, heavier extension, and worked slices in this section are local aids for one publication unit under review. They are not a canonical sequence for publication-unit repair and not a promise that admissible cases follow one fixed graph in one direction. Use the worked slices sideways rather than as one required sequence: one admissible case may stop after one publication-unit declaration, another may reopen when outside observations change the honest primary EntityOfConcern, and another may apply the governing pattern once downstream approval, work, reliance, or a neighboring-pattern question becomes primary.

Teams repeatedly write one publication unit that begins by talking about one primary EntityOfConcern and ends by talking about another while still sounding like one unchanged text.

Typical moments include:

  • an architecture note that starts about a system boundary and ends about rollout work;
  • an operations review note that starts about an incident episode and ends about action approval;
  • a requirements or policy note that starts about a primary EntityOfConcern and ends about its carrier or document status;
  • an episteme-publication-heavy note that starts about one pattern section or publication form and ends about wider architecture strategy;
  • a comparison sheet that starts about one primary EntityOfConcern and quietly shifts into engineering-process, approval, work, or reliance pressure.

That interpretation instability is usually not caused by one bad sentence alone. It is caused by one whole publication unit no longer holding a stable answer to what it is about, what move it is carrying, and what wider work still stays outside.

Problem

Without a named publication-unit discipline:

  1. authors repair one vague phrase at a time but still leave the unit unstable as a whole;
  2. reviewers argue about wording while missing that the unit has already shifted from primary EntityOfConcern to process or from description to decision pressure;
  3. teams quietly read one note as if it licensed a downstream move the unit never declared;
  4. local lexical discipline (A.6.P, E.10, F.18) gets blamed for publication-unit interpretation instability it was never meant to solve alone;
  5. unit-form confusion is mistaken for view, face, carrier, or publication architecture even when the immediate problem is simpler and closer.

Forces

ForceTension
Local repair vs publication-unit stabilityThe pattern must not replace local precision repair, but it must become available when local repair no longer stabilizes the unit.
Primary EntityOfConcern clarity vs surrounding-work convenienceThe unit must keep one primary EntityOfConcern without forcing the whole surrounding work process into the same text.
Interpretation clarity vs overgrowthThe section must distinguish primary EntityOfConcern, description, carrier, publication unit, process, and downstream decision use without turning into a giant ontology lecture.
User-facing discipline vs hidden assurance weightThe ordinary recognition block must stay light enough for practice while still surviving neighboring-boundary claim-kind and review.
Publication-unit stability vs architecture replacementThe pattern must not replace view, face, carrier, publication, or moving-lineage architecture.

Solution - stabilize one publication unit, one primary EntityOfConcern, one move, and one outside-work boundary

Manager-first entry

PublicationUnit Primary EntityOfConcern Discipline keeps one publication unit explicit about what it is mainly about, what move it is carrying over that entity, and what wider work remains outside.

It becomes necessary when local repair is no longer enough and the publication unit still has unstable interpretation across primary EntityOfConcern, description, carrier, publication unit, process, or downstream decision use while sounding unchanged.

In plain working terms, this section is for moments like:

  • this memo is about the architecture boundary, not yet about the rollout plan;
  • this review note is about the incident episode, not yet about the action decision;
  • this comparison sheet is about the primary EntityOfConcern under review, not yet about approval or the downstream decision;
  • this semio note is about one pattern section or publication form, not the wider architecture policy around it.

If that is the clarification you need, start here. If the real problem is still only one vague local lexical head word, start with E.17.AUD.LHR (Local Head Restoration).

Pairwise plain glosses

  • Publication unit = one written or displayed bounded unit others are meant to read as one unit, such as a note, memo, sheet, table, or guided screen.
  • Primary EntityOfConcern = the local stabilization interpretation for what that unit is mainly about when it carries or exposes a claim-bearing episteme or episteme-lane U.View; it is not a new C.2.1 slot. If no claim-bearing episteme or episteme-lane view is live, name the non-claim-bearing kind named by value, topic, or subject instead of inventing a EntityOfConcernRef.
  • Carried move = what the unit is doing over that entity, or that it is only stabilizing it without adding a new move.
  • Outside-work boundary = what wider review, execution work, non-admissible downstream decision, or reliance claim stays outside the current unit.
  • Explicit transition = the unit openly says it has moved from one interpretation or primary EntityOfConcern to another instead of pretending nothing changed.

Minimal modeling lens

Treat the publication unit under review here as one publication unit carrying one primary EntityOfConcern interpretation over one current working concern or lineage slice. That interpretation does not make the unit itself a U.EpistemePublication; it stabilizes the unit's interpretation over the already identified item it carries or exposes. The smallest honest lens asks five entries:

  1. what publication unit is under review;
  2. what primary EntityOfConcern is active;
  3. what move over that entity is being carried;
  4. which interpretation is active;
  5. what wider work still stays outside.

If that lens cannot stay stable after local repair, do not patch over the interpretation shift with a heavier declaration; reopen the unit or apply the governing pattern instead.

Scope and exclusions

In scope

  • one publication unit with unstable interpretation across multiple primary EntityOfConcern values;
  • one unit mixing move and outside work;
  • one unit quietly shifting between primary EntityOfConcern, description, carrier, publication unit, process, or downstream decision use;
  • episteme-publication-heavy texts where repair disposition, governing pattern, primary EntityOfConcern, carried move, and outside work must stay explicit across one publication unit.

Out of scope

  • local lexical-head repair only;
  • pure view, face, or carrier architecture work;
  • entityOfConcernRef-preserving transform, explanation, bridge, ontology, or comparative-review questions whose neighboring patterns already govern the main move;
  • downstream gate, approval, execution, or decision pressure.

Ordinary stop rule. If the ordinary six-row card plus one nearest worked slice already settle the case, stop there. Do not climb into heavier assurance just to prove that one unit now keeps one primary EntityOfConcern, one carried move, and one outside-work boundary honestly in place.

Ordinary working card

For ordinary use, keep at least these six rows visible:

RowOrdinary prompt
1What single publication unit am I asking people to read as one bounded unit?
2What is it mainly about?
3What move is it making over that primary EntityOfConcern, or is it only stabilizing it?
4What wider work or engineering process is outside this unit?
5Is any transition between interpretations or primary EntityOfConcern values explicit?
6If this remains unstable after local repair, which governing pattern applies?

If those six rows can stay stable across the same publication unit, ordinary use is usually enough. Treat that six-row card as the recognition block.

If local repair is still enough, go back to E.17.AUD.LHR (Local Head Restoration) instead of adding more structure here. If the unit remains one publication unit but neighboring-boundary claim-kind, misuse risk, or cross-interpretation ambiguity becomes claim-bearing, use the heavier extension as the assurance section. If the same unit is already stable as one primary EntityOfConcern, one carried move, and one outside-work boundary, and the remaining question is one bounded comparative review move over already available source epistemes or publications, apply E.17.ID.CR before thickening this publication-unit card. If the unit cannot keep one stable primary EntityOfConcern, one carried move, and one outside-work boundary even after local repair, do not solve that by stacking more fields onto the heavier extension; apply or reopen the neighboring-pattern check first.

Claim-bearing extension and quick boundary summary

Use the heavier extension only when the ordinary six-row card already stays stable and the case is close to important seams. It is for heavier declaration, not for rescuing a unit that still cannot keep one primary EntityOfConcern, one carried move, and one outside-work boundary in place.

Then add:

  • publicationUnitFormCue;
  • primaryInterpretation;
  • transitionPolicy;
  • modelingLensPolicy;
  • downstreamDecisionPolicy.

These fields do not create a rival rule track. publicationUnitFormCue names words such as note, sheet, screen, and table as form clues only; it does not make those clues primary-entity kinds or claim named by value/relation kinds. The fields only make the heavier neighboring-boundary claim-kind visible once the ordinary card already holds.

Quick governing-pattern and project-side-reference boundary summary

  • use E.17.AUD.LHR (Local Head Restoration) when the instability is still local to one local lexical head, qualifier, or interpretation word;
  • use E.17.ID.CR when the same publication unit already holds one stable primary EntityOfConcern, one carried move, and one outside-work boundary, and the question under repair is one bounded comparative review move over already available source epistemes or publications;
  • use this pattern when one publication unit still has unstable primary EntityOfConcern, carried-move, or outside-work interpretation after honest local repair;
  • use the neighboring pattern or the project-side FPF kind and reference named by value when view, face, carrier, entityOfConcernRef-preserving transform, explanation, bridge, ontology, gate, approval, or execution claim becomes primary.

Boundary-rule summary

This section is the canonical governing-pattern boundary summary for PublicationUnit Primary EntityOfConcern Discipline inside the Core. Companion notes may elaborate admissibility checks and review scaffolding, but they may not override this section.

The practical summary is:

  1. keep one primary EntityOfConcern unless a transition is explicit;
  2. do not collapse primary EntityOfConcern, description, carrier, publication unit, process, and downstream decision use into one unchanged interpretation;
  3. keep the carried move distinct from the wider work around it;
  4. use local E.17.AUD.LHR (Local Head Restoration) first, and open this pattern when publication-unit interpretation instability remains after that;
  5. apply E.17.ID.CR when publication-unit stability already holds and the remaining question is one bounded comparative review move over already available source epistemes or publications;
  6. move out when the unit starts carrying downstream decision pressure or another neighboring pattern question.

Archetypal grounding

Worked-slice status. Read the architecture, operations, episteme-publication-heavy, comparison-return-to, and changed-EntityOfConcern cases as a heterogeneous example bank, not as one recommended progression.

Architecture note shifting into rollout work

A short architecture memo begins with: This note is about the proposed service boundary between catalog and checkout.

Three paragraphs later it says: We should therefore assign rollout responsibility to platform and stage migration in two sprints.

The fix is not only lexical. The publication unit changed its primary EntityOfConcern from architecture boundary to rollout process and decision responsibility. This section forces the author to either:

  • keep the note about the boundary and push rollout outside;
  • or make the transition explicit and use a downstream decision or rollout publication.

Operations note shifting into approval

An incident note begins as a comparative review of timing variance and operator context. It ends as if it already recommends a production action.

This section makes the author keep the review unit about the episode and the contrast it is surfacing, while forcing work approval into an explicit outside-work or downstream decision text.

Semio-heavy text mixing one local section and wider architecture strategy

A semio note starts about one selected pattern section and ends as if it had decided the packaging strategy for the whole overlay.

This section forces the unit to say:

  • what the note is about now;
  • what move it is making over that primary EntityOfConcern;
  • and what wider architecture strategy remains outside the current unit.

Unit stabilizes and bounded comparison becomes primary

A review note first shifts between the selected interface boundary, the move it is making over the current evidence, and the rollout implications around that boundary. After one honest publication-unit repair it now says: This review unit is about the interface boundary options and the contrast they make visible under the current incident evidence; rollout responsibility and approval remain outside this note.

At that point the same unit already holds one stable primary EntityOfConcern, one carried move, and one outside-work boundary. PublicationUnit Primary EntityOfConcern Discipline has done its job. If the remaining question is now one bounded comparison between the already pinned options over the same evidence, the honest next pattern application is E.17.ID.CR rather than keep thickening publication-unit discipline.

Outside observation changes the honest primary EntityOfConcern

A release-readiness note is already explicit that it is about one candidate publication or view and the risk state visible from the current evidence. Mid-review, an external vendor bulletin and a new field observation change the live failure boundary for that same candidate.

The honest move is not to keep appending the new question while pretending the same unit still carries the same primary EntityOfConcern unchanged. This section forces the author to either:

  • stop the current unit at the originally declared primary EntityOfConcern and open a new downstream record for the changed question;
  • explicitly reopen the same unit with a newly declared primary EntityOfConcern, move, and outside-work boundary;
  • or apply the governing pattern once approval, execution, or another downstream decision publication becomes the more honest primary question.

Bias-Annotation

Lenses tested: Arch, Onto and Epist, Prag, Did. This section intentionally biases toward explicit publication-unit stability and against quietly letting one unit absorb wider work or decision pressure by habit. The main mitigation is explicit primary EntityOfConcern, move, and outside-work surfacing, early return to E.17.ID.CR when publication-unit stability is already solved, and explicit governing-pattern boundary dispositions once a downstream claim becomes primary.

Conformance Checklist

  1. CC-OOTD-1 - One publication unit is explicit. The publication unit under review is explicitly identifiable as one note, memo, sheet, screen, table, or section meant to be read as one unit.
  2. CC-OOTD-2 - Primary EntityOfConcern is explicit. The unit makes its primary EntityOfConcern recoverable enough that readers are not left to infer it from tone alone.
  3. CC-OOTD-3 - Carried move is explicit. The unit states what move it is making over that primary EntityOfConcern, or explicitly says that it is only stabilizing the primary EntityOfConcern without a new move.
  4. CC-OOTD-4 - Outside-work boundary is explicit. Wider work, approval, execution, or non-admissible downstream decision, work, or reliance pressure is either declared outside or handled by its governing pattern rather than smuggled into the same unchanged unit.
  5. CC-OOTD-5 - Any transition is explicit. If the unit shifts between primary EntityOfConcern, description, carrier, publication unit, process, or downstream decision use, that transition is explicit rather than quietly absorbed.
  6. CC-OOTD-6 - Local vs publication-unit repair choice is honest. Apply E.17.AUD.LHR (Local Head Restoration) first when local repair is enough; apply this pattern only when publication-unit interpretation instability remains after local repair.
  7. CC-OOTD-7 - Neighboring-pattern boundary is explicit. If entityOfConcernRef-preserving transform, explanation, bridge, comparative-review, ontology, gate, approval, or execution claim becomes primary, its governing pattern is applied rather than pretending this pattern still carries the case.
  8. CC-OOTD-8 - Claim-bearing lens is stated when needed. If a minimal modeling lens or downstream-decision policy is materially claim-bearing, it is stated rather than silently assumed.

Common Anti-Patterns

  • Local-repair inflation. Opening publication-unit discipline when one overloaded local lexical head or qualifier is still the real defect.
  • Work-process smuggling. Letting a note begin as architecture, incident review, or comparison work and end as rollout, approval, or execution guidance without naming the transition.
  • Admissibility-pattern replacement. Treating this pattern as if it replaced view, face, or carrier architecture, entityOfConcernRef-preserving transform rules, explanation governance, bridge rules, or downstream decision texts.
  • Overgrowth by declaration. Stacking heavier fields onto a unit that still cannot keep one stable primary EntityOfConcern, one move, and one outside-work boundary in place.

Consequences

Used well, this section buys three main gains:

  • authors stop smuggling wider work into one unit by accident;
  • reviewers can name publication-unit interpretation instability instead of only arguing about wording;
  • neighboring patterns and downstream decision texts stop getting blamed for confusion created one layer earlier.

The cost is that some notes must become shorter, split earlier, or reopen more honestly when the primary EntityOfConcern really changes. That cost is deliberate.

Rationale

The point of this pattern is not to create a second architecture of views, faces, carriers, or downstream decision texts. It is narrower: one publication unit can become misleading even when every single sentence looks locally acceptable.

A.6.P, A.7, E.10, and F.18 already keep kinds, distinctions, and naming precise. This pattern adds the missing publication-unit discipline that asks whether the same publication unit is still honestly about one primary EntityOfConcern, carrying one move, with one explicit outside-work boundary.

The pattern also stays intentionally close to E.14 and E.19. Recognition comes first through a manager-usable entry block and the ordinary six-row card. Heavier declaration comes only after the ordinary card already holds.

SoTA-Echoing

Publication-unit obligationDomain or practice traditionWorking implication hereNearest recovery section
One publication unit should keep one explicit concern or primary EntityOfConcern unless it declares a transition.Architecture-description and viewpoint practice, Joint ISO, IEC, and IEEE 42010:2022In E.17.AUD.OOTD:5.1, keep the memo about the service boundary and push rollout sequencing or responsibility assignment outside before later paragraphs inherit the wrong concern.E.17.AUD.OOTD:4.3, E.17.AUD.OOTD:5.1
Under-restored local lexical heads and cross-disciplinary ambiguity should be repaired at the level where readers actually reconstruct meaning, not left to reviewer guesswork.Terminology work, ISO 704:2022 and ISO 1087:2019, used as external practice for object, concept, definition, designation, and term-formation discipline without importing an ISO concept system as FPF ontologyIn E.17.AUD.OOTD:5.3, restore the FPF primary EntityOfConcern, publication unit, carried move, and outside boundary before the next paragraph borrows the wrong primary EntityOfConcern or wider architecture strategy.E.17.AUD.OOTD:4.3, E.17.AUD.OOTD:5.3
Fluent prose should not be over-read as if it already licensed work, reliance, assurance, or downstream decision claim that the unit did not declare.Faithfulness and explanation cautionIn E.17.AUD.OOTD:5.2 and E.17.AUD.OOTD:5.5, stop the note at one declared primary EntityOfConcern and move, then reopen or apply the governing pattern once approval, changed evidence, or downstream decision claim becomes the honest primary question.E.17.AUD.OOTD:4.3, E.17.AUD.OOTD:5.2, E.17.AUD.OOTD:5.5

Relations

Builds on

  • A.6.P
  • A.7
  • E.10
  • F.18
  • E.14
  • E.19
  • C.2.2a
  • A.16.0

Nearest neighbors

  • E.17.AUD.LHR for local lexical-head kind or qualifier repair;
  • E.17.ID.CR when the same unit is already stable and the remaining question is one bounded comparative review move;
  • E.17.EFP when explanation-face governance on existing faces is primary;
  • A.6.3, A.6.3.CR, and A.6.3.RT when the question under repair is same-entity rewrite or representation change;
  • A.10 when evidence or provenance becomes primary;
  • A.15 and A.15.4 when work, reliance, or execution claim becomes primary;
  • B.3 when assurance or engineering justification becomes primary;
  • A.20 and A.21 when approval, gate, or adjudication becomes primary.

E.17.AUD.OOTD:End

Transduction Graph Architecture (E.TGA)

Tech‑name: E.TGA (pattern label) Plain‑name: Architecture of the transduction graph Twin labels: Tech / Plain per E.10; faces emitted via E.17 MVPK (no schemas in Part E).

Intent

Provide a notation-independent architecture for transduction graphs. The EntityOfConcern is a TransductionGraph: a typed, editioned directed multigraph whose nodes are morphisms, whose edges are one typed U.Transfer relation, and whose flows are valuations over paths or path slices inside the same graph object. Crossings appear at gates; publication faces appear through MVPK; comparable claims pin editions, reference planes, Bridge/CL notes, and refresh scope.

Use this when. Use E.TGA when the question under repair is whether a project description needs one graph object, path, path slice, crossing, gate, flow valuation, or refresh locus over U.Transfer rather than an ordered work narrative, method narrative, or wording-use cue.

First useful move. Name the graph object, the node kinds, the single U.Transfer edge kind, and the exact crossing, path, or path slice whose pins are required. For the ordinary case, this is enough: TransductionGraph, active PathId or PathSliceId when a path or slice is live, node kinds, one U.Transfer, and only the crossings or pins that are live.

Graph ontology. E.TGA keeps these distinctions primary:

ConstructWhat it carriesBoundary
TransductionGraphthe graph object, node kinds, one U.Transfer edge kind, and graph-wide budgets or edition pinsnot a work procedure or method sequence
flow valuationa path, path slice, state, guard, comparator, or budget over the graphnot a second graph kind
crossing or gatea context, plane, edition, launch, or work-boundary changenot internal step validity or gate-decision publication by itself
MVPK facepublication of selected graph, path, or crossing materialnot the graph semantics and not evidence by itself
refresh locusthe smallest path slice, crossing, edition pin, or publication face affected by changenot a whole-flow rewrite unless the whole flow is the changed locus

Not this pattern when. Use A.20 for internal step validity, A.21 for gate-decision publication, E.20 for mechanism-governing-definition placement, the A.15 family for work planning or performed work, E.17 for publication faces, and E.10 for wording-use repair when the graph, path, crossing, or flow valuation is not live.

What goes wrong if missed. A practitioner may treat a reference flow, a wording-use cue such as transition, or a tool pipeline as a new graph kind or a hidden prescribed workflow, then lose comparability, crossing evidence, and slice-local refresh boundaries.

What this buys. E.TGA lets the practitioner keep graph structure, publication pins, crossings, CV/GF separation, and refresh locality in one current architecture without turning every domain path into its own flow doctrine.

Problem frame

Teams can produce many valid flow valuations for the same holon under VP.Functional, for example for a declared U.Capability or transduction claim. The P2W reference path is: U.Signature(profile=FormalSubstrate) → U.PrincipleFrame → U.Mechanism → U.ContextNormalization (UNM) → U.SelectionAndTuning ↔ U.WorkPlanning → U.Work → U.EvaluatingAndRefreshing is one path among many possible domain paths. Without a common graph architecture:

  • flows look ad‑hoc and non‑comparable;
  • cross‑Context crossings (plane/Context changes) are undocumented;
  • MVPK faces carry hidden arithmetic or restate I/O;
  • set‑returning selection is silently replaced by single scores;
  • cycles lack budget discipline; refresh is out‑of‑band.

MVPK already fixes publication drift at the single-arrow scope; E.TGA lifts those publication and comparability laws to the graph as a whole.

Problem

  1. Morphisms ≠ Graph. A catalog of morphism-scoped patterns (e.g., UNM, Selector, Work, Refresh) does not, by itself, explain how the whole graph is built, constrained, and audited.
  2. Flow proliferation. Multiple “reference flows” can be declared; practitioners need one graph discipline that keeps them admissible and comparable without privileging any single flow.
  3. Unsafe publication. Faces re‑list I/O, hide scalarization, or omit edition/plane pins; cross‑Context reuse lacks Bridge/CL citation; plane penalties appear in F/G instead of R.
  4. Cycles without norms. Selection↔Planning loops run without explicit budget (Γ_time), FreshnessRequest, or slice‑scoped refresh; FinalizeLaunchValues (launch‑value slot filling) is performed too early (outside U.Work (U.WorkEnactment)).

Forces

ForceTension
Universality vs specializationOne architecture needs to cover supply chains, water networks, ML functionals, and the P2W first-principles-to-work path, without baking in any one morphism set.
Publication neutrality vs auditabilityKeep faces notation‑neutral and non‑mechanistic ↔ require pins, ComparatorSet, Bridge/CL, and PublicationScope.
Set-return discipline vs business pressure for totalsPreserve return sets and declared partial orders ↔ stakeholders demand single numbers.
Cross‑Context reuse vs safetyEnable reuse across U.BoundedContext ↔ require Bridge/CL with R‑only penalties.
Agility vs reproducibilityPermit evolving CG‑Spec/UNM/Comparator editions ↔ require edition pins and re‑emission on change.
Cycles vs convergenceAllow Selection↔Planning iteration ↔ impose budget and slice‑scoped refresh to prevent thrash.

Solution - E.TGA graph model and relation disciplines

Dominant Solution moves. In ordinary E.TGA use, keep five moves primary: name one graph object; distinguish the graph from a flow valuation; place gates only on crossings or the U.WorkEnactment boundary; preserve normalize-before-compare and set-return discipline; and keep cycles under budget plus PathSlice refresh. S12 viewpoint mapping remains conditional viewpoint-mapping input when engineering or publication viewpoint mapping is live.

S1 - Graph object (conceptual)

Define a typed, editioned, directed multigraph TransductionGraph := (V, E, τ_V, τ_E, Γ_time, Bridge, CL, TransportRegistry^Φ) with:

  • Vertices V: instances of U.Morphism (open world). Common specialisations include but are not limited to the P2W illustrative set: U.Signature(profile=FormalSubstrate), U.PrincipleFrame, U.Mechanism, U.ContextNormalization (UNM), U.SelectionAndTuning, U.WorkPlanning, U.Work, U.EvaluatingAndRefreshing. This list is illustrative, not exhaustive—the graph does not depend on this particular set.
  • Edges E: a single edge kind U.Transfer (typed) carrying carrier refs and token refs; all plane/Context/edition changes occur only at nodes via OperationalGate(profile) with Bridge + CL annotations; penalties → R only. Transport conversions pin Φ‑policies and editions.
  • Scopes: Γ_time (budgets, horizons), PublicationScope for faces (E.17), and slice ids for refresh (G.11).

CtxState (PS‑projection; closed slots): CtxState = ⟨L, P, E⃗, D⟩ is the projection of E.17 Publication Scope. Slot definitions (normative):L := Locus — an element of a partially ordered ContextSlice poset; addresses where claims apply (disciplinary / organizational / holonic slice). • P := ReferencePlane — the reference plane/units registry id; no plane/unit declarations or translations occur in CV; crossings remain gated (A.21). • E⃗ := Edition vector — a partial map edition_key ↦ EditionId over named families {CG‑Spec, ComparatorSet, UNM.TransportRegistryΦ} and optional {DescriptorMapRef, DistanceDefRef, CharacteristicSpaceRef} when cited. • D := DesignRunTagdesign(T^D) or run(T^R), used by LaunchGate and acceptance/telemetry duties. Invariants. Raw U.Transfer preserves CtxState (⟨L,P,E⃗,D⟩): it does not write/update any CtxState slot; any CtxState write/update (or entry to U.WorkEnactment) occurs at OperationalGate(profile). Extension discipline. A conforming use registers any extra slot beyond ⟨L,P,E⃗,D⟩ in the E.17/LEX “CtxState Extension Registry” with slot‑id, intent, partial‑order law (neutral/absorbing), and SquareLaw compatibility; unregistered extensions are non‑conformant. Data-shape location. E.TGA names the graph and valuation obligations for PathId, PathSliceId, Γ-pins, and lineage: flow is a valuation over U.Transfer, raw transfer preserves CtxState, and path or slice evidence is carried through this pattern plus A.20, with G.6 or G.11 where evidence-path visibility or refresh wiring is live. Use these current loci for path and slice currentness.

  • Kinds: U.Transduction(kind∈{Signature, Mechanism, Work, Check, StructuralReinterpretation}). Exact identification (no TGA‑local taxonomy):Signature A.6.0 U.Signature (universal, law‑governed declaration). — Mechanism A.6.1 U.Mechanism (law‑governed application over a SubjectKind/BaseType). — Work A.15 U.WorkEnactment (world‑contact; FinalizeLaunchValues only here). — Check OperationalGate(profile) (universal gate; A.21 governs gate profile, check aggregation, decision, and publication minima). — StructuralReinterpretation the E.TGA placement of A.6.4 U.EpistemicRetargeting as a graph node; it is not a new retargeting kind. All retargeting semantics (slot-scoped discipline, EntityOfConcernSlot/GroundingHolonSlot behaviour, invariants, Bridges, witnesses) come from C.2.1 and A.6.2A.6.5; E.TGA does not introduce a TGA-local variant of retargeting.

OperationalGate ≔ U.Transduction(kind=Check) with DecisionLog aggregation. The only extra discipline E.TGA adds for StructuralReinterpretation is graph-local: CtxState and GateCrossing behaviour are governed by CC-TGA-06-EX and CC-TGA-11 (projection-preserving w.r.t. ⟨L,P,E⃗,D⟩, PathSlice-local, and "no plane/unit change without a gate"). StructuralReinterpretation is not a gate exception; it carries a recorded witness condition for saying no GateCrossing occurred. If any CtxState slot, plane/unit, edition, or design/run boundary changes, the case is a GateCrossing again.

MVPK integration (import). Every vertex with an external publication face is published via MVPK faces (PlainView, TechCard, AssuranceLane, InteropCard) under a declared PublicationScope (E.17). E.TGA reuses MVPK’s publication laws (pins, declared-order discipline, “no new numeric claims / no I/O re‑listing”) and only adds graph-scope constraints in S3 and CC‑TGA‑09/10; it does not define a second, local publication semantics.

GateCrossing (normative) Definition. A GateCrossing is the typed transition at a node that writes/updates any of: (i) U.BoundedContext (Context), (ii) ReferencePlane, (iii) any member of the Edition vector E⃗ (e.g., CG‑Spec, ComparatorSet, UNM.TransportRegistryΦ, DescriptorMapRef, DistanceDefRef, CharacteristicSpaceRef), (iv) DesignRunTag (T^D↔T^R), or (v) Kind/EntityOfConcernRef (only under StructuralReinterpretation subject to CC‑TGA‑06‑EX). Invariants. Raw U.Transfer preserves CtxState; a GateCrossing occurs at exactly one OperationalGate(profile) (SquareLaw applies). Required pins (minimum). BridgeCard + UTS row; CL for scope bridges; CL^plane for plane crossings; CL^k with bridgeChannel=Kind for kind transitions; PublicationScopeId; PathSliceId; Γ‑pins on compare/launch faces. Canonical reference. CrossingRef := ⟨GateId, channel, from, to, UTS.RowId, PathSliceId⟩. Any DecisionLog entry whose rationale depends on a crossing cites CrossingRef. CrossingBundle (normative) Definition. A CrossingBundle is the published bundle that makes a GateCrossing auditable and replayable (crossing visibility). It includes:

  • the canonical CrossingRef;
  • the matching UTS row (UTS.RowId) for the crossing;
  • the required pins PublicationScopeId and PathSliceId;
  • where a Bridge is involved: the BridgeCard (F.9) and its disclosed fields (BridgeId, bridgeChannel, CL and loss notes; CL^k when bridgeChannel=Kind; ReferencePlane(src,tgt));
  • where planes differ: CL^plane and the active Φ_plane as a PolicyIdRef (policy-id + resolvable refs; F.8:8.1);
  • the active penalty policy identifiers Φ(CL) (and Ψ(CL^k) if used) as PolicyIdRef bundles (policy-id + PolicySpecRef + MintDecisionRef?; F.8:8.1);
  • any additional pins mandated by the active GateProfile / GateChecks (A.21) for this crossing.

CrossingBundle rule. Every GateCrossing publishes its CrossingBundle. Missing or non-conformant CrossingBundle is a blocking defect for downstream uses that rely on the crossing (selectors, acceptance, audits). A local descriptive graph with no downstream crossing consumption is not over-penalized by this CrossingBundle rule.

Term separation. Transfer denotes the sole edge kind U.Transfer (graph edges). Transport denotes Φ‑governed conversion policies/registries (TransportRegistry^Φ under UNM). Wording “reuse via Transport” refers to registries/policies, not to an additional graph edge.

S2 - Flows as valuations (paths + state + guards)

  • A Flow is a valuation ν over U.Transfer edges and cut-sets, paired with an admissible path p = v0 -> ... -> vk. The valuation assigns tokens or states under CtxState and records publication events under a declared PublicationScopeId. The concrete pins and identifiers (PathId, PathSliceId, Γ_time on compare and launch faces) are governed here as path and slice publication obligations and by A.20 when CV witnesses are live; use G.6 for evidence-path visibility and G.11 for refresh wiring. This reflects the “graph != flow” norm (flow = valuation), with gates placed exactly on GateCrossings.

  • Multiple coupled flows. One TransductionGraph may contain several coupled flow valuations, such as a development flow that creates or repairs a specification, pattern, process description, mechanism description, method set, tool, or work plan; an application flow that uses that product for another EntityOfConcern; and an evaluation or refresh flow that detects a problem and returns to the smallest affected development or application locus. The graph unites those flows through U.Transfer, PathSlice, edition-change, refresh, return, or feedback relations, but it does not merge their governed objects, records, launch values, evidence, gates, or performed work. The same product may be a run result of one flow and a design-side input, tool, or contextual object for another flow; that flow-local relation-position change is recorded by the current flow relation and any live DesignRunTag crossing, not by silently changing the object's kind.

  • Admissible path (definition). A path p is admissible iff: (a) node/edge types match the declared τ_V, τ_E; (b) any write/update to any member of ⟨L,P,E⃗,D⟩ (or kind‑retargeting under StructuralReinterpretation) appears at exactly one OperationalGate(profile); (c) each GateCrossing on p has a SquareLaw witness (CC‑TGA‑23) and, where applicable, a SquareLaw‑retargeting witness (CC‑TGA‑06‑EX); (d) no hidden crossings occur across raw transfers; (e) Γ‑pins are present on compare/launch faces; (f) T^D↔T^R occurs only at LaunchGate.

  • U.Transfer preserves CtxState (⟨L,P,E⃗,D⟩) and carries Assurance‑operations only (see S3b); any crossing of locus/plane/editions or T^D↔T^R is placed at OperationalGate(profile).

  • A PathSlice is a slice‑scoped execution window used for refresh/telemetry; faces pin PathSliceId; re‑emission happens when any pinned edition changes or SliceRefresh is triggered by sentinel rules.

Consequences. The P2W reference flow is simply one p in TransductionGraph. Other domains (supply chain, water network, NN functional) instantiate different p on the same architecture.

Why "flow = valuation" doesn't kill the "something is flowing" intuition There are two complementary perspectives:

  • Lagrangian (intuitive): "water particles" run through pipes; you "track" tokens.
  • Eulerian (architectural): you define a function on edges ("how much/what passes through each edge under a given regime"), with gate laws. E.TGA deliberately fixes the Eulerian semantics of flow at the architectural scope: "flow (= valuation) + publication log", while the dynamics of "movement" show up as re-valuation over a PathSlice (the execution/republishing window) under gate rules and the SquareLaw. This yields comparability, reproducibility, and slice-local refresh.

S3 - Publication discipline (faces)

E.TGA imports E.17 wholesale and associates MVPK faces with PublicationScope (USM). MVPK remains the normative source for:

  • the set of face kinds (PlainView, TechCard, InteropCard, AssuranceLane),
  • pin discipline and Publication Characteristics (PC),
  • “no new numeric claims / no I/O re‑listing / no Γ‑semantics on faces”.

E.TGA does not re‑specify these laws; it only adds graph-scope obligations for faces emitted over transduction paths:

  1. Crossings on faces. When a face participates in a GateCrossing (S1.b/S9), it cites BridgeId + UTS row + CL and publishes Φ(CL)/Φ_plane RuleId; penalties remain in R‑lane.
  2. Gate requirement on cited editions. Any face that references editions of CG-Spec, ComparatorSet, or UNM.TransportRegistryPhi includes BridgeCard + UTS row; faces without this are treated as non-consumable downstream. Bridge and terminology-synchronization checks are governed by F.9, F.17, E.17, and E.18; selection and comparator pressure stays with A.19.SelectorMechanism, C.18, C.19, G.5, or G.11 when live.
  3. ComparatorSet & set returns (graph‑scope). Any ComparatorSet and SetSemanticsRef used along a transduction path carries edition identifiers; flows re‑emit faces on edition change; faces with comparison return sets and declared partial orders (no hidden scalarization), reusing MVPK’s declared-order discipline.
  4. Γ_time on compare and launch faces. All compare and launch faces on E.TGA paths pin Γ_time; implicit latest is not admissible. A.21 carries current GateProfile binding and minimum profile semantics; E.TGA paths include the pin. CHR avoids acceptance thresholds (NoThresholdsInCHR); thresholding and launches are carried by A.21, Part G, and U.Work where live. Unknowns remain tri-state (pass|degrade|abstain) and fold per the active GateProfile (A.21).

Reminder. MVPK already bans “signature” on faces, I/O re‑listing, arithmetic on faces, and unpinned numeric content (E.17 §5.4–5.5). E.TGA does not weaken or override those rules; it only constrains how they are used along transduction paths.

Lean publish‑mode (AssuranceLane‑Lite). Lean changes publication faces only (PlainView/AssuranceLane minimal), not checks; publication shows GateProfile, GateCheckRef[], and DecisionLogRef; the underlying GateChecks list remains unchanged.

Decision stability & idempotency (gate-local). Gate decisions are stable under a declared equivalence relation over the pins used by A.21; the witness is recorded as DecisionLog or EquivalenceWitnessRef, with G.6 or G.11 used when evidence-path visibility or refresh implications are live. E.TGA does not prescribe storage formats, key shapes, or hashing schemes.

KindBridge admissibility (publication). Treat a step as a EntityOfConcernRef/kind transition (including StructuralReinterpretation under CC‑TGA‑06‑EX) iff the UTS row: — satisfies the minimal bridge and terminology-synchronization obligations of F.9, F.17, E.17, and E.18 where live (identity, ReferencePlane, CL/CL^plane, edition pins for CG-Spec, ComparatorSet, UNM.TransportRegistryPhi, ComparatorSetRef, BridgeId, and Phi-RuleIds), and — is additionally marked as a KindBridge per C.3 (bridgeChannel=Kind, CL^k, mapping or signature‑translation, order‑preservation claims, loss notes, definedness area, determinism). Otherwise this KindBridge explanation does not apply (the step falls back to a gated crossing). When the crossing is gate-mediated, CrossingRef is cited and linked from the DecisionLog.

S4 - Assurance‑operations on U.Transfer (counterfactual admissibility)

On U.Transfer edges, an operation is interpreted as a declarative assurance‑operation iff it is one of ConstrainTo(rule) - CalibrateTo(calibrationReference) - CiteEvidence(evidenceRef) - AttributeTo(provenanceReference); otherwise this explanation does not apply. Under this interpretation, CtxState⟨L,P,E⃗,D⟩ is preserved. If a claimed assurance operation would change plane or units, the assurance-operations explanation does not apply and the step is handled as a gated crossing (OperationalGate(profile)+Bridge+UTS).

If Φ assigns penalties, they appear in the R‑lane; otherwise no penalties appear here.

S5 - Comparability & aggregation (normalize‑then‑compare; counterfactual form)

The comparison explanation applies under the following admissibility conditions:

  • If a path segment intends to compare/aggregate, it is admissible as a comparison only when UNM precedes it; UNM is method‑independent, publishes TransportRegistry^Phi and CG-Spec references, and faces cite those editions; otherwise this comparison explanation does not apply.
  • If the comparator defines a declared partial order, then returns are sets/archives (Pareto/Archive); if a total order is declared, it is the one provided by the comparator; otherwise set semantics apply and covert scalarization is out of scope here.
  • If a claim is ordinal‑only, then only comparison results are published; arithmetic transforms (e.g., means/z‑scores) are out of scope of this explanation and belong to declared comparators or downstream policy.

Edition-aware set/archive publication records (e.g., QD archives) pin DescriptorMapRef.edition, DistanceDefRef.edition, and CharacteristicSpaceRef.edition when applicable; refresh is slice-local. Comparator, archive, and refresh checks are governed by A.19.SelectorMechanism, C.18, C.19, G.5, G.9, and G.11 when live.

S6 - Cycle discipline (Selection ↔ Planning)

  • The architecture centers the loop between U.SelectionAndTuning and U.WorkPlanning.
  • The loop operates under a local budget / max_iter in Γ_time; at expiry, the selector emits the current CandidateSet and MethodTuning with a partial‑optimality flag; further improvement rolls into the next PathSlice.
  • UNM occurs before the loop; if measurements are missing/stale, UNM emits a FreshnessRequest which is planned in U.WorkPlanning and executed in U.Work. Transfers, units, and calibrations are published as CalibrateTo(calibrationReference) and pinned to TransportRegistry^Φ (R‑channel only for penalties).
  • WorkEnactment is the only site for launch‑value slot filling (FinalizeLaunchValues / FinalizeLaunchValuesOnlyInWork).

Refresh orchestration. Telemetry from U.WorkEnactment and publications are slice‑scoped, editions re‑pinned, faces re‑emitted.

S7 - Selector semantics (G.5) & parity harness (G.9)

E.TGA checks that set-return, archive preservation, and comparator refs remain visible along the path. It does not define selector, archive, dominance, or comparator semantics; those remain with A.19.SelectorMechanism, C.18, C.19, G.5, G.9, and G.11 where live.

  • Selectors return sets. Default DominanceRegime is ParetoOnly; IlluminationSummary (telemetry summary) and any coverage/regret telemetry quantities are report-only telemetry (reported), excluded from dominance unless a CAL policy promotes them as declared dominance inputs (policy-id in SCR).

If PortfolioMode=Archive, a QD archive can be returned; when generation is in scope, pairs {environment, method} are managed under declared EnvironmentValidityRegion and TransferRulesRef; parity records and PathSliceId are pinned on publication. Comparator semantics and archive pinning are governed by A.19.SelectorMechanism, C.18, C.19, G.5, G.9, and G.11 when live.

S8 - Guard aggregation assignment and handling (USM §1.2)

  • USM.CompareGuard/USM.LaunchGuard publish GuardOwnerGateId. Guard failures are events aggregated by the declared gate (not GateChecks).
  • Aggregation-assignment rules: (i) USM.LaunchGuard.aggregationGate = LaunchGateId(U.WorkEnactment); (ii) inside a Subflow, USM.CompareGuard.aggregationGate = OperationalGate(InSentinel); Join-nodes cannot be assigned as guard-pin aggregation gates.

GateProfile data shape (cross-reference). A.21 carries the current GateProfile binding and minimum profile semantics. E.TGA names the structure only where graph crossings need it; fuller profile-matrix material is not a separate current authority unless a current governing pattern explicitly admits it.

Bridge-aware guards (cross-reference). USM guards apply bridge-translation semantics (translate(Bridge, Scope)) with CL penalties in R-lane; guard vocabulary is governed by A.2.6, while gate aggregation remains in A.21.

Error/timeout/unknown (profile-bound). GateCheck errors/timeouts fold to degrade under Lean\|Core and to block under SafetyCritical\|RegulatedX; unknown follows the GateCheck's governing rule (safety-default: degrade). The A.21 DecisionLog record and equivalence witness carry decision stability; E.TGA does not define storage or key structures.

S9 - Transport & crossings

  • Cross‑Context or cross‑plane edges appear as GateCrossings that include a Bridge with CL policy; Φ(CL)/Φ_plane are published; penalties appear in R only; Scope membership (USM) is unchanged by crossings. SquareLaw is checked within a single DesignRunTag; a T^D↔T^R change is modelled as a pair of coordinated gates with DesignRunTagFrom/To and the selected A.15 work or publication locus for the live case.
  • When EntityOfConcernRef/kind changes across a boundary, declare an explicit KindBridge (CL^k) in addition to plane/context CL; cross-context reuse of UNM uses Transport, with any CL^plane penalties published in R-lane only.

S10 - Non‑mechanism boundary

  • Publication is a typed projection, not execution. Any build/render/upload is Work on carriers; faces do not carry Γ-semantics.

S11 - Coordination wording labels (when live)

Coordination wording may be published as LexicalView labels over U.TransductionFlow__P2W; it is orientation-only unless a bridge, crossing, work, or gate relation is explicitly live. It adds no current graph node kind, checks, or mechanisms. Crossings with production flow use Bridge+UTS and the current bridge or crossing loci.

S12 - Viewpoint families → E.TGA constructs (neutral, holonic)

S12 status. S12 is secondary viewpoint-mapping input for a live viewpoint-family mapping claim. It is not the ordinary E.TGA core for naming a graph object, flow valuation, path slice, or crossing.

E.TGA does not mint new viewpoint or view kinds. It imports the generic multi‑view machinery of E.17.0 U.MultiViewDescribing, bundles from E.17.1, and the TEVB engineering bundle from E.17.2. S12 only describes how these existing U.Viewpoint / U.ViewpointBundle ids are used in transduction graphs and in UTS.ViewpointMap; intent/concern semantics are governed by E.17.0E.17.2.

Two-part use of TEVB and MVPK (ISO 42010 summary, no local re‑definition).

  • Engineering viewpoints. For engineering holons, E.TGA assumes a TEVB bundle with ViewFamilyId = VF.TEVB.ENG. EngineeringVPId is one of {VP.Functional, VP.Procedural, VP.RoleEnactor, VP.ModuleInterface}, and TEVB is the normative source for their semantics. E.TGA does not refine these viewpoints.
  • Publication viewpoints. Publication viewpoints come from MVPK (E.17); PublicationVPId is a MVPK.ViewpointId that governs faces under a PublicationScope.
  • Architecture relation. E.TGA can describe a flow/transduction-structure view of an ArchitectureOf@Context claim when DescriptionContext, described holon, bounded context, and structure kind are explicit. It does not define architecture itself, and a TGA graph is not the functional architecture by default. Use C.30, C.30.ASV, and C.30.TGA-FLOW-REL when the graph is used in an architecture-flow relation. Crossings and penalties follow E.TGA gating rules (S9; CC-TGA-11/23) but do not change viewpoint semantics.
  • Separation of roles. VP.* from TEVB are EngineeringVPId values only; they are not publication faces. PublicationVPId values live in MVPK. The mapping between them is entirely via ISO‑style correspondences and the UTS.ViewpointMap; E.TGA does not define a second notion of viewpoint.

EntityOfConcern scope (summary).

  • Engineering EntityOfConcern. The engineering entity described by TEVB/E.TGA is a holon (U.System or U.Episteme) per TEVB’s EntityOfConcernClassSpec. E.TGA does not broaden or narrow this set. Transformation, method, procedure/control, role-enactor structure, structural architecture, module, interface, and allocation terms are viewpoint concern/content about that holon unless a concrete E.TGA use explicitly opens A.6.4 retargeting with KindBridge (CL^k), retargeting witness, and the applicable species rule.
  • Publication EntityOfConcern. MVPK can treat the architecture description itself as an EntityOfConcern; publication viewpoints for that AD are defined in MVPK, not here. E.TGA only checks that such faces honour MVPK discipline and E.TGA’s crossing rules.

Naming rules (aligned with E.17.0/E.17.1/E.17.2).

  • ViewFamilyId is the U.ViewpointBundle.viewFamilyId (e.g. VF.TEVB.ENG for TEVB); its lexical and ontological discipline is governed by E.17.1.
  • EngineeringVPId : ViewpointId is always a U.ViewpointId drawn from some bundle (for TEVB, one of {VP.Functional, VP.Procedural, VP.RoleEnactor, VP.ModuleInterface}). E.TGA never defines new VP.* ids.
  • PublicationVPId : ViewpointId is a MVPK.ViewpointId defined in E.17; TEVB viewpoints are never reused as publication viewpoints (per TEVB guard and MVPK).
  • The unqualified field name ViewpointId is not valid in S12 rows. Use EngineeringVPId and/or PublicationVPId explicitly; any imported row with an unqualified ViewpointId is normalized to PublicationVPId before the row is used.

Terminology guards (no local semantics).

  • Within S12, “viewpoint”, “view” and “correspondence” have exactly the meanings given in E.17.0; “publication face” means an MVPK face (PlainView, TechCard, InteropCard, AssuranceLane) under some PublicationVPId.
  • Faces are carriers for views: a face is part of a view only when linked via an ISO‑style CorrespondenceRef to an engineering U.View under some EngineeringVPId; S12 does not add extra conditions beyond E.17.0/E.17.2.
  • Labels such as “Functional view”, “Procedural view”, “Role‑Enactor view”, “Module‑Interface view” in this section are lexical aliases for TEVB viewpoints; they are not interpreted as extra viewpoint kinds or as publication-face types.

Purpose. Provide a neutral (F.18) mapping from TEVB engineering viewpoint families - bundle VF.TEVB.ENG with VP.Functional / VP.Procedural / VP.RoleEnactor / VP.ModuleInterface - to E.TGA constructs so that the same holon can be described through functional, procedural, role-enactor, or module-interface viewpoints while the E.TGA construct scope remains explicit. S12 does not introduce new U.Viewpoint or U.View kinds, and it does not claim that all such views share one underlying graph unless the graph, EntityOfConcernRef, and correspondence refs are declared.

Holon target. The mapping applies to any holon, with the constraint that only U.System enacts U.Work (A.3/A.15). Supervisory and structural hierarchies remain distinct (B.2.5).

Viewpoint family → primary E.TGA constructs (TEVB‑aligned) All four families referenced below are TEVB engineering viewpoints; the “what …” clauses are interpretive glosses for how they use E.TGA constructs. Formal intent/concerns/allowed episteme kinds remain in TEVB (E.17.2).

  1. Function‑Oriented View (EngineeringVPId = VP.Functional, capability and transduction viewpoint) — “what transformation is achieved under roles”
    • Flow valuation example: U.TransductionFlow__P2W through nodes U.Signature(profile=FormalSubstrate) → U.PrincipleFrame → U.Mechanism → U.ContextNormalization (UNM) → U.SelectionAndTuning ↔ U.WorkPlanning → U.Work → U.EvaluatingAndRefreshing.
    • Publication: MVPK publication faces per E.17; comparable claims pin to CG‑Spec/ComparatorSet editions; crossings are published through Bridge+UTS and CL/CL^plane (penalties → R‑lane only).
    • Checks: A.20 (CV) inside transformations; A.21 (GateFit) at gates; comparator, set-return, and No-Hidden-Scalarization discipline is carried through A.19.SelectorMechanism, C.18, C.19, G.5, G.9, and G.11 when live.
    • Holonic note: U.Episteme does not act; it is used by systems acting on carriers; U.Work appears only for U.System.
  2. Procedure‑Oriented View (EngineeringVPId = VP.Procedural, step/time storyboard) — “what steps occur and when”
    • FPF constructs: U.WorkPlan (A.15.2) for intent/schedule; U.WorkEnactment for enactment.
    • Boundary: entry into U.WorkEnactment is via OperationalGate(profile) with USM.LaunchGuard; DesignRunTag separates design time from run time; DesignRunTagFrom/To appear only at gates.
    • Holonic note: Applies to any U.System scope (single holon or a supervised sub‑holon cluster); supervisory structure is handled by roles rather than structural mereology (B.2.5).
  3. Role‑Enactor / Device‑Structure View (EngineeringVPId = VP.RoleEnactor) — “what carrier/ports/constraints exist; who typically enacts it”
    • FPF constructs: Module interfaces are Signature nodes; module realizations are Mechanism nodes; inter‑module dependencies traverse U.Transfer, with gates on crossings.

    • Publication: MVPK faces are typed projections, not U.Work records or execution carriers; faces add no new numeric claims (E.17). Constraints and compatibility appear as CV checks (A.20).

    • Holonic note: Structural mereology (part/whole of the carrier) is modeled in Part A; E.TGA ties interface/exposure semantics to morphisms and gates.

    • Device‑View structural reinterpretation (Transduction↔Transductor). The same transduction flow valuation can be described as a device that performs the transduction (transductor) without changing the declared E.TGA graph object: model with Signature + Mechanism only; do not introduce extra edge kinds. If EntityOfConcernRef retargets (function↔element), use StructuralReinterpretation with a KindBridge (CL^k) on UTS and a SquareLaw‑Retargeting witness; preserve ⟨L,P,E⃗,D⟩ and treat it as a non‑crossing (CC‑TGA‑06‑EX; witness shape §4.7).

    • Role‑label guard. TypicalEnactorRoleName is pedagogical only and is not used as a GateFit role; GateFit uses U.Role (A.21).

  4. Module‑Interface View (EngineeringVPId = VP.ModuleInterface, physical/logical module structure) — “what modules exist and how they specify commitments and constraints across interfaces”
    • FPF constructs: Module interfaces are Signature nodes; module realizations are Mechanism nodes; inter‑module dependencies traverse U.Transfer, with gates on crossings.
    • EntityOfConcernRef note: Functional-view-to-element-structure reinterpretation follows the Device‑View structural reinterpretation rule above (Role‑Enactor family) and CC‑TGA‑06‑EX; see §4.7 for the retargeting witness shape and CV witness linkage.
    • Holonic note: The same module can appear as a holon in multiple views; supervisory loops (B.2.5) remain orthogonal to structural composition. This is an expandable list of viewpoint families; TGA is intentionally viewpoint‑neutral. Additional engineering bundles beyond TEVB (safety, mission, information, …) are introduced as separate U.ViewpointBundle species via E.17.1/E.17.2; S12 does not define them.

Alias families for transduction species (LEX‑only). Scope. A pattern or domain profile can declare AliasesInViewFamilies[] for U.Transduction species so practitioners can recognise familiar engineering view families. All semantics come from the referenced bundles (typically TEVB) and MVPK; aliases are purely lexical.

Norms.

  1. Each U.Transduction species can publish AliasesInViewFamilies[] — an open list of records { ViewFamilyId, EngineeringVPId?, Alias : TechASCII }.

    • If ViewFamilyId = VF.TEVB.ENG, then EngineeringVPId is one of {VP.Functional, VP.Procedural, VP.RoleEnactor, VP.ModuleInterface} (TEVB; CC‑TEVB‑1/6).
    • Other ViewFamilyId values denote U.ViewpointBundle instances defined elsewhere (e.g. safety/assurance/information bundles), not ad‑hoc local families.
  2. Aliases are LEX‑only: no arithmetic, no new claims, no check participation, no CtxState slot writes/updates (incl. DesignRunTag). They do not create MVPK faces.

  3. Aliases are not used as PublicationVPId; publication viewpoints remain in MVPK.

  4. Twin registers are allowed (Tech/Plain) per E.10; naming follows F.18 local‑first discipline.

  5. Do not name transductions by operands or output states (operation != operand or output state).

  6. TypicalEnactorRoleName can be added for pedagogy; it is not used as a GateFit role (GateFit uses U.Role only).

  7. Morphology: ASCII TitleCase; conjunctions via And; for composite actions use XingAndYing (or XAndYing if grammar calls for it).

  8. The P2W illustrative species row (U.Signature(profile=FormalSubstrate)U.EvaluatingAndRefreshing with functional/procedural aliases and TypicalEnactorRoleName) is informative and does not change kind or viewpoint semantics.

Conditional deliverable — UTS.ViewpointMap (TEVB-aligned when live). Publish a UTS block named ViewpointMap only when an engineering or publication viewpoint-family mapping claim is made or consumed. Ordinary E.TGA use does not require UTS.ViewpointMap when the question under repair is only the graph object, flow valuation, path slice, or crossing.

Minimum row schema (per row, when ViewpointMap is live).

  • ViewFamilyIdU.ViewpointBundle.viewFamilyId (e.g. VF.TEVB.ENG for TEVB, or another bundle id).
  • EngineeringVPId : ViewpointId — a viewpoint from that bundle (for TEVB, one of {VP.Functional, VP.Procedural, VP.RoleEnactor, VP.ModuleInterface}).
  • PublicationVPId : ViewpointId? — MVPK publication viewpoint id that governs faces implementing this engineering view (optional if not publishing).
  • TargetHolon ∈ {U.System, U.Episteme} (extended species can add {U.PromiseContent|U.MethodFamily}; if TargetHolon ≠ U.System, no U.Work enactment appears).
  • PrimaryTGAConstructs — nodes/edges/gates actually used for this (ViewFamilyId, EngineeringVPId, TargetHolon) (typically one of the four families above).
  • Crossings{BridgeId, CL/CL^plane?} — crossings involved; penalties appear in R-lane only.
  • EditionPins{...} whenever comparable claims appear (bind to CG-Spec/ComparatorSet editions; any face citing editions includes BridgeCard + UTS row per MVPK/UNM).
  • SenseCells[] (at least two per row), each citing Context name + edition (F.17/E.10 discipline; UTS-wide coverage rules still apply).
  • (REQUIRED when publishing) CorrespondenceRef[] — ISO 42010 correspondences linking emitted faces to the engineering view(s) they implement; can cross architecture descriptions.
  • Optional relation field ConcernsCovered[] — ISO 42010 stakeholder concerns addressed by this row via GateProfiles/check catalogues.

Conformance (S12-scoped, only when ViewpointMap is live). (i) UTS.ViewpointMap exists when a viewpoint-family mapping claim is made or consumed. (ii) For each holon that claims TEVB alignment, there are at least four rows whose {ViewFamilyId, EngineeringVPId} cover {VF.TEVB.ENG × {VP.Functional, VP.Procedural, VP.RoleEnactor, VP.ModuleInterface}} (per CC-TEVB-1/6). (iii) Rows that carry edition identifiers also include BridgeCard + UTS rows through F.9, F.17, E.17, and E.18; edition-bearing faces that lack such rows are not admissible for downstream consumption. (iv) Each row has at least two SenseCells and the sheet meets global UTS coverage rules. (v) Any TargetHolon = U.System that reaches U.Work shows LaunchGate with DesignRunTag consistency. (vi) Crossings referenced in ViewpointMap follow CC-TGA-11; comparability along the mapped paths follows CC-TGA-10. (vii) Rows do not use an unqualified ViewpointId; they use EngineeringVPId and/or PublicationVPId explicitly. (viii) When faces are published, CorrespondenceRef[] is present and resolvable to U.Viewpoint ids. (ix) Additional bundles (e.g. assurance, information, mission) can appear as extra ViewFamilyId values but are declared as U.ViewpointBundle species; they do not extend VF.TEVB.ENG.

Archetypal Grounding (Tell–Show–Show; concise)

Tell (P2W reference path). A first-principles-to-work path is one path through the graph, not the graph itself: U.Signature(profile=FormalSubstrate) declaration, principle frame, mechanism, normalization, selection, planning, work enactment, and refresh become nodes linked by one U.Transfer edge kind, with crossings pinned where context, plane, edition, or design/run state changes.

Show-A (Supply chain). Nodes: procurement -> inbound QC (UNM) -> selection (supplier set; declared order) <-> planning (lotting/schedule; budget) -> execution (receipts; WorkEnactment enacts (world-contact)) -> refresh (quality telemetry; re-emit faces). Crossings: vendor Context via Bridge/CL; penalties appear in R only; comparators pinned to CG-Spec edition.

Show-B (Neural-net functional). Nodes: U.Signature(profile=FormalSubstrate) declaration (typed tensor-operation declaration) -> mechanism (combinator algebra) -> UNM (dataset normalization; TransportRegistry^Phi) -> selection (architecture/hyperparam set; Pareto set over accuracy@ratio and FLOPs@ratio) <-> planning (compute budget horizon) -> Work (training runs; Delta recorded) -> refresh (parity inserts; slice-scoped). Faces pin DescriptorMapRef.edition and DistanceDefRef.edition when QD telemetry values are shown; illumination remains report-only telemetry by default.

Show-C (Developed product, then application). One flow develops a specification, pattern, process description, mechanism description, method set, or tool through drafting, checks, projection, build, or publication. A later flow uses that product in project work or analysis. A further flow may use the result again: a tool is made, then used to make a chair, then the chair supports a person writing a text. The graph can join all these flows through transfers and feedback, while each flow keeps its own governed object, DesignRunTag, flow-local relation position for the carried object, work occurrence, evidence, and reopened slice.

Show-D (FPF pattern development and use). The development flow creates, evaluates, projects, publishes, and later repairs a pattern. The use flow applies that pattern to its own EntityOfConcern. An evaluation or use-found defect can return to the smallest development slice for repair. E.TGA keeps the common graph visible while separating the developed pattern, the use of the pattern, the evidence found during use, and the edition or slice that is reopened.

Cross-pattern boundary slice (QD archive). A QD selector emits an archive. E.18 says: this is one PathSlice in one TransductionGraph; selection returns a set/archive, not a hidden scalar. A.20 says: the archive insertion or update step has a live CV class, CV.Status, and witness or refusal; no acceptance is inferred. A.21 says: a comparability gate or LaunchGate can publish a GateDecision only when that gate relation is live and consumes the relevant CV result. E.20 says: if a new selector mechanism-governing definition is introduced, the mechanism-governing definition is the locus for the meaning while suites and wiring only cite or bind it. These are four governed loci, not one prescribed work order.

Post-2015 SoTA echoes (illustrative): TAMP and MPC, MAP-Elites / QD (incl. CMA-ME), refinement-typed stacks, profunctor optics. Worked examples and Tell-Show-Show vignettes for P2W, comparator/archive, coupled development/application flows, and refresh specializations stay outside this graph-architecture core unless a current pattern explicitly selects them.

Conformance — Unified checklist (normative)

Conformance use. This checklist is evidence for the graph/flow/crossing action guidance already stated in the Solution. It is not the first entry text for ordinary use and not a full audit regime by default; an item is applied only when its corresponding graph, crossing, publication, gate, refresh, or assurance move is live. Before applying any item, name the Solution move it tests; if no such practitioner move is live, treat the item as auxiliary-only or not applicable rather than expanding the applied assurance or conformance material.

Conformance groups. Ordinary graph/path use starts with graph object, single edge kind, node typing, CtxState preservation, and flow valuation. Crossing/launch items apply only when a GateCrossing, LaunchGate, StructuralReinterpretation, or work-boundary crossing is live. Publication/assurance items apply only when MVPK faces, edition pins, evidence carriers, decision logs, or replay are live. Extension/change items apply only when node-kind scope, budget/refresh behavior, or UNM/comparator editions are being changed or consumed downstream.

IDRequirementPractical test
CC‑TGA‑01 — Single edge kindThe graph uses exactly one edge kind U.Transfer; all plane/Context/edition transitions occur only at nodes via OperationalGate(profile).Model lint finds no auxiliary edge kinds for unit/plane changes; crossings sit on declared gates.
CC-TGA-02 — Nodes are morphismsNodes are declared U.Transduction(kind in {Signature, Mechanism, Work, Check, StructuralReinterpretation}) definitions. This enumeration is a minimal kind baseline. Domain-specific species are open-world and non-exhaustive; they bind to one of these kinds. Adding a new kind uses an explicit E.TGA update. StructuralReinterpretation nodes are projection-preserving (no mutation of ⟨L,P,E⃗,D⟩) and carry CV/GF obligations per A.20, A.21, A.6.4, and E.TGA. The enumeration is not a TGA-local taxonomy: Signature -> A.6.0, Mechanism -> A.6.1, Work -> A.15, Check -> A.21 OperationalGate, and StructuralReinterpretation -> A.6.4 plus E.TGA/A.20 where CV is live.Type registry shows at least the listed kinds; additional species map to one of them; checks realized as OperationalGate (see CC-TGA-06-EX/11). Lint: registry/table exposes {species -> {kind, KindDefinition}}; missing or mismatched KindDefinition fails.
CC‑TGA‑03 — Identity, composition, functorial facesIdentities exist; path composition associative; publication is functorial: Emit_s(t₂∘t₁)=Emit_s(t₂)∘Emit_s(t₁).Pick two‑step path; MVPK faces commute (Square witness).
CC‑TGA‑04 — Graph specSpec declares τ_V, τ_E, Γ_time, Transport/Bridge registries.Spec file shows typed registries and Γ policy.
CC‑TGA‑05 — CtxState pinsCtxState=⟨L,P,E⃗,D⟩ is pinned on ports/tokens; raw U.Transfer does not write/update it.Along a raw transfer, ⟨L,P,E⃗,D⟩ is preserved.
CC‑TGA‑06 — Operational gates onlyAny write/update to any member of ⟨L,P,E⃗,D⟩ or entry into U.WorkEnactment is mediated by OperationalGate(profile) with aggregated DecisionLog.Diff CtxState across edges; if any member differs, exactly one gate exists with DecisionLog.
CC‑TGA‑06‑EX (strictly limited) — Projection retargeting without gateA node of kind StructuralReinterpretation retargets the published projection without invoking OperationalGate only if all hold: (a) ⟨L,P,E⃗,D⟩ is preserved; (b) any EntityOfConcernRef change has a KindBridge (CL^k) entry on MVPK/UTS; (c) a SquareLaw‑retargeting witness is present (on UTS); (d) the operation is PathSlice‑local (PathSliceId pinned); (e) no plane/unit change occurs (plane/unit changes remain gated); (f) CV.ReinterpretationEquivalence (A.20) is pass; (g) NoHiddenScalarization — if the step concerns a comparable return shape, set/partial‑order semantics are preserved and comparators remain ref‑only (current comparator and set-return loci).UTS row includes bridgeChannel=Kind and CL^k; SquareLaw‑retargeting witness present; PathSliceId pinned; CV status recorded; no scalarization detected.
CC‑TGA‑07 — CV⇒GF activation predicateUntil aggregated ConstraintValidity = pass, all GateFit checks return abstain.Simulate CV failure ⇒ GateFit abstain.
CC‑TGA‑08 — LaunchGate discipline (incl. pre‑run barrier)Each U.WorkEnactment has exactly one LaunchGate assigned as the aggregator for USM.LaunchGuard; mandatory checks: FreshnessUpToDate, DesignRunTagConsistency. If preceding step’s CV ≠ pass, LaunchGate decision is block (cause logged).Aggregation assignment GuardOwnerGateId = LaunchGateId(U.WorkEnactment); CV≠pass ⇒ block with log.
CC‑TGA‑09 — MVPK publication disciplineEvery published node uses MVPK; faces carry PublicationScopeId, presence‑pins, edition ids, Γ pins; no I/O duplication or arithmetic; faces add no new numeric claims.Cards show PublicationScopeId; pins present; no “signature”/math on faces.
CC‑TGA‑10 — Normalize→Compare (CSLC)Any comparison cites UNM/CG‑Spec editions and ComparatorSetRef; ordinal claims are compare‑only; partial orders return sets; edition‑aware set/archive publication records (QD/archives) pin {DescriptorMapRef, DistanceDefRef, CharacteristicSpaceRef?}.edition; any face citing editions includes BridgeCard + UTS row. NoHiddenScalarization — detection criteria: (1) return shape is set/poset, not scalar; (2) ComparatorSetRef is present and edition‑pinned; (3) MVPK faces add no new numeric claims; (4) any summarisation is order‑preserving & set‑valued; otherwise conformance fails.Faces show comparator pins; archive pins present; linter rejects edition cites without UTS; scalarisation checks pass.
CC‑TGA‑11 — Crossings gatedCross-Context or cross-plane crossings publish BridgeId + UTS + CL/CL^plane and are mediated by OperationalGate(profile); Φ/Φ_plane penalties appear in R-lane only; EntityOfConcernRef change publishes KindBridge (CL^k). Exception (StructuralReinterpretation): a projection‑only EntityOfConcernRef retargeting is recorded without a gate iff CC‑TGA‑06‑EX holds; then the UTS row includes bridgeChannel=Kind, CL^k, and a retargeting witness; any plane/unit change falls back to a gated crossing; PathSliceId is pinned; UNM reuse cross‑context continues via Transport.The crossing record shows Bridge/UTS/CL pins; penalty placement audited.
CC‑TGA‑12 — Set‑returning selectionU.SelectionAndTuning returns sets/archives under declared comparators (ParetoOnly by default) — no covert scalarization.Selector output is a set/archive; policy id present if escalated.
CC‑TGA‑13 — Budgeted Selection↔Planning loopThe loop declares budget / max_iter; on expiry selector publishes partial‑optimal set + MethodTuning; next PathSlice scheduled.Logs show budget stop and slice rollover.
CC‑TGA‑14 — UNM before loop and FreshnessTicket state changeUNM runs before selection; stale/missing inputs produce FreshnessTicket/FreshnessRequest planned in WorkPlanning and executed in WorkEnactment; calibrations appear as CalibrateTo(calibrationReference) with Φ pins.Ticket state machine Issued→Planned→Executed→Closed; calibrations pinned.
CC‑TGA‑15 — FinalizeLaunchValues only in WorkEnactmentOnly U.WorkEnactment performs FinalizeLaunchValues and fills launch‑value slots.Any earlier attempt blocks at LaunchGate; a FinalizeLaunchValues witness is present in Work.
CC‑TGA‑16 — Guard aggregation assignment & semanticsUSM.CompareGuard/USM.LaunchGuard publish the gate assigned to aggregate guard failures; guards are events, not GateChecks; failures are aggregated by that gate per profile.Guard pins show the assigned gate; GuardFail recorded in that gate's DecisionLog.
CC‑TGA‑17 — Assurance ops on TransferOn U.Transfer only ConstrainTo/CalibrateTo/CiteEvidence/AttributeTo; none write/update ⟨L,P,E⃗,D⟩.Edge audit shows ops; CtxState unchanged across the edge.
CC-TGA-17a — Assurance operation specifications (normative)ConstrainTo(region/policy): tightens declared region/policy; pre: region subset current; post: ⟨L,P,E⃗,D⟩ unchanged; idem. and monotone under composition. CalibrateTo(calibrationReference): attaches an editioned calibration reference, such as a map or standard, with Phi-policy id; admissible per cited CG-Spec; post: ⟨L,P,E⃗,D⟩ unchanged; idem. on same edition; penalties appear in R only. CiteEvidence(evidenceRef): binds evidence references via SCR/RSCR; adds no numeric claims; idem.; missing carriers => abstain. AttributeTo(provenanceReference): provenance only; decision algebra unaffected; idem. Hidden GateChecks, plane/unit changes, or edition writes on edges are forbidden.Operation specifications visible on edge audit; violations fail lint.
CC-TGA-18 — Flow = valuation, coupled-flow unity/separation, and slice-local refreshEach flow declares valuation ν over U.Transfer plus PublicationScopeId and PathSliceId; when several flows are coupled in one graph, development, application, evaluation, refresh, and repair flows are joined by transfer, feedback, return, or edition-change relations while keeping separate governed objects, role assignments, records, evidence, gates, work occurrences, flow-local relation positions for carried objects, and DesignRunTag boundaries; refresh is bounded to the addressed slice; re-emit on edition change or selected refresh rule.Flow publication shows ν; a coupled-flow case names which flow is being valued, which flow-local relation position the carried object fills, and which slice is reopened; refresh trigger causes slice-local recompute.
CC‑TGA‑19 — Γ_time on compare/launchAll compare/launch faces pin Γ_time; no implicit latest.Face audit shows Γ pins; LaunchGate blocks on stale.
CC‑TGA‑19a — Γ_time pin shape (normative)The Γ_time pin is one of: snapshot(t), interval[t1,t2] (closed), or policy(Γ_timeRuleId) that resolves to either; CV computations record the resolved time reference in DecisionLog and do not widen Γ at publication time.DecisionLog shows the resolved reference; linter rejects missing/implicit Γ.
CC‑TGA‑20 — Lean publish‑mode ≠ weakenAssuranceLane‑Lite changes publication faces only; required GateChecks for the active profile remain intact.Gate in Lean/Core shows minimal pins; GateChecks list unchanged.
CC-TGA-21 — Decision stability & idempotency witnessGate decisions are stable under the equivalence relation recorded by A.21; a witness of equivalence is present on the DecisionLog record; any change that breaks equivalence triggers re-aggregation. Minimum lexeme (CV-relevant witness): EquivalenceWitness := { keys, E⃗, Γ_time(reference), PathSliceId?, ReturnShapeClass, ComparatorSetRef?, profile }.Modify any input outside the declared equivalence => re-aggregation; DecisionLog records the witness; lexeme present.
CC‑TGA‑21a — Decision join (publication algebra)Aggregation over GateChecks is the idempotent, commutative, associative join on the lattice abstain ≤ pass ≤ degrade ≤ block with neutral = abstain and absorbing = block. The algebra is conceptual; publications carry only (i) the aggregated GateDecision and (ii) its GateDecisionRationale recorded in the DecisionLog. A GateDecisionExplanation is an optional human‑readable narrative derived from the GateDecisionRationale; it is not a decision and is not used as one. If aggregated ConstraintValidity ≠ pass or the active profile suppresses narratives, any GateFit‑oriented GateDecisionExplanation does not apply.Review a gate with multiple GateChecks: the aggregated decision matches the lattice join; no per‑check arithmetic is introduced on faces.
CC‑TGA‑22 — Errors/unknowns fold by profileErrors/timeouts fold to degrade under Lean/Core and to block under SafetyCritical/RegulatedX; unknown folds per GateCheck policy (safety‑default: degrade).DecisionLog shows folds; profile switch changes fold behavior accordingly.
CC‑TGA‑23 — SquareLaw on crossingsFor every GateCrossing, gate_out ∘ transfer = transfer' ∘ gate_in; LaunchGate case is mandatory.MVPK shows commuting square; inconsistency yields block/degrade per profile.
CC‑TGA‑24 — UNM declaration locusCG‑Spec, ComparatorSet, UNM.TransportRegistryΦ editions are declared only through the UNM governing locus (others ref‑only).Declaration records show UNM as the governing locus; others have refs only.
CC‑TGA‑25 — Evidence lanes & DecisionLogsAssuranceLane carries GateProfile, GateCheckRef list, edition pins, aggregated decision, DecisionLogRef; evidence pins follow a two-part scheme: carriers are pinned via SCR/RSCR, and value annotations are carried under VALATA (VA/LA/TA).Gate publication faces include these pins; logs retrievable.

Coupling note. CC‑TGA‑07 (CV⇒GF) and CC‑TGA‑21a (Decision join) together ensure that any GateFit‑scoped GateCheckRef returns abstain until the aggregated CV status equals pass; CV/GF separation remains intact. Scope note (E.TGA vs neighbor patterns): Detailed mechanism-scoped checks and publication obligations are governed by the current neighbor patterns named in this pattern's Relations. E.TGA fixes only graph-architecture obligations: single U.Transfer edge kind, gate crossings, valuation, publication pins, CV/GF boundary, and slice-local refresh.

Glossary (additions)

  • Open‑world species — non-exhaustive domain-scoped specializations of U.Transduction that map to the minimal kind set.

  • Signature (TGA kind)U.Transduction(kind=Signature); identical to A.6.0 U.Signature (universal block). Not a C.3.2 KindSignature.

  • KindSignature (C.3.2) — definition of a U.Kind by intent, extent, and formality; unrelated to TGA kinds; never a genus.

  • Species (domain-scoped) — typed specialisations speciesOf(kind=...) that declare KindDefinition=<current governing pattern id> (e.g., kind=Mechanism; KindDefinition=A.6.1).

  • KindBridge (CL^k) — a compatibility note on UTS for EntityOfConcernRef/kind transitions; required by CC‑TGA‑06‑EX and crossings (CC‑TGA‑11).

  • Eulerian interpretation — operational stance where a flow is treated as a valuation over U.Transfer and edges perform assurance‑only operations (no token‑passing semantics).

  • GateCheckKind boundary. GateCheckKind is a publication/check lexeme used inside GateCheckRef, not a TGA node kind. No GateCheckKind becomes U.Transduction(kind=Check) unless an OperationalGate(profile) node is actually present.

  • GateCheckRef shape (publication lexeme governed by A.21). Where graph faces carry GateChecks, a GateCheckRef is a record defined by A.21; E.TGA constrains only where graph faces carry such refs along TGA paths.

GateCheckRef := { aspect, kind, edition, scope } with: aspect ∈ {ConstraintValidity, GateFit}, kind ∈ GateCheckKind, edition ∈ Editions, and scope ∈ {lane | locus | subflow | profile}.

  • GateDecision / GateDecisionRationale / GateDecisionExplanation (terminology).GateDecision — the aggregated lattice value produced by OperationalGate(profile) for a specific {GateProfile, GateCheckRef[]}. — GateDecisionRationale — the minimal structured rationale for that GateDecision: per‑check outcomes, profile‑bound folds, and published evidence or witness references on the DecisionLog; it records why the GateDecision is admissible under the active profile. — GateDecisionExplanation — an optional human‑readable narrative derived from the GateDecisionRationale; it does not carry decision status. While aggregated ConstraintValidity ≠ pass, GateFit‑scoped checks return abstain; any GateFit‑oriented GateDecisionExplanation does not apply.

Clarity note. GateDecision ≠ GateDecisionExplanation; narratives are optional and derivative of GateDecisionRationale.

  • GateFit (aspect, not an entity). GateFit names the aspect of checks that evaluate profile‑fit; there is no separate GateFit entity. “Gate decision under GateFit” means “the gate’s decision computed from GateChecks with aspect=GateFit”.

    This shape is publication-only; it introduces no new execution steps and no arithmetic on faces. (Couples to A.20 or A.21 without duplicating their check catalogs.)

  • VALATA (VA/LA/TA) — value-annotation scheme used on AssuranceLane; carriers are referenced via SCR/RSCR; detailed evidence obligations live in A.10 and the named evidence, publication, or crossing pattern for the live case. Included here so evidence pins are self-describing in Part E texts.

  • Transfer vs TransportTransfer = the sole graph edge kind U.Transfer. Transport = Φ‑policy/registry‑defined conversions (TransportRegistry^Φ) referenced by UNM; “reuse via Transport” refers to the latter.

  • GateCrossing — a typed node transition that writes/updates a CtxState slot or the kind‑channel; see S1.b for the normative list and required pins.

  • Admissible path — a typed path obeying the GateCrossing discipline (no hidden crossings; witnesses present), Γ‑pinned on compare/launch, and T^D↔T^R only at LaunchGate; see S2.

Gating Profiles (applied to E.TGA)

This table is an architectural coverage table for E.TGA graph crossings and path slices. It is not the source of GateProfile semantics. A.21 governs gate decision semantics, folds, DecisionLog minima, and the GateFit check-catalog boundary.

Gating is expressed as publication‑gating per E.17 profiles. The graph model aligns with the CC items listed for the chosen profile; broader obligation profiles include all narrower-profile items.

ProfileRequired CC‑itemsAdditional notes
Lean01–06, 08–09, 11–12, 15, 19–21, 25Minimal MVPK presence; LaunchGate keeps FreshnessUpToDate & DesignRunTagConsistency.
CoreLean + 07, 10, 13–14, 16–18, 22–23, 24Adds CV⇒GF order, CSLC pins, budgeted loop, guards, valuation/sentinel refresh, error folds, SquareLaw, and the UNM declaration locus.
Safety‑Critical / RegulatedXCore + profile‑specific GateChecks (safety envelope, regulator id/editions) with stricter folds per CC‑TGA‑22; SquareLaw audits tightened

Recommended defaults (non-normative, tie-in to A.21 and G.11). Profiles inherit along a PathSlice; local overrides only add GateChecks; weakening uses a new PathSlice and refresh wiring through the current G.11 locus when live.

TGA LEX discipline (registration)

Register Tech tokens (ASCII) used by this architecture with twin‑labels: U.TransductionGraph, U.TransductionFlow, StructuralReinterpretation, OperationalGate, GateProfile, GateCheckRef, GateCheckKind, DecisionLog, USM.CompareGuard, USM.LaunchGuard, KindBridge, SubflowRef, FlowEmbed, SentinelId, PathSliceId, SliceRefresh, FinalizeLaunchValues, VALATA. Add an ASCII alias CLKind ↔ Plain CL^k (cf. CLPlaneCL^plane). Reference MVPK E.17 naming for faces. CtxState Extension Registry. Register any extra CtxState slot beyond ⟨L,P,E⃗,D⟩ with: slot id, informal intent, partial‑order law (with neutral/absorbing), SquareLaw compatibility note, and the owning Gate profile(s) that may change it. Absence of registration ⇒ non‑conformant.

Consequences

Benefits.

  1. Universality with discipline: one edge kind and explicit gates eliminate second hidden work and method orders and make cross-domain flows (ML, supply-chain, TAMP and MPC, scientific work graphs) uniformly analyzable and auditable.
  2. Comparability & replayability: CSLC and edition‑pinned comparators prevent covert scalarization and enable declared set returns and reproducible decisions.
  3. Locality of change: sentinel subflows restrict refresh to affected PathSlices; large graphs remain stable under frequent edition bumps.
  4. Clean DesignRunTag fold: LaunchGate and DesignRunTagConsistency stop premature launch‑value slot filling; acceptance and telemetry live where they occur (U.Work).
  5. Assurance visibility: MVPK makes GateProfile/DecisionLog records locally checkable and cacheable for the same {PathSlice, GateChecks, Editions}.

Trade‑offs. a) Higher upfront modeling cost: explicit Bridge/UTS pins and GateProfiles demand care; mitigated by Lean profile and templates. b) Longer edge face sets: MVPK faces are verbose by design; lean face sets can be used for low‑risk segments. c) Tooling alignment: some incumbent DAG‑only orchestrators conflict with budgeted cycles and set‑return semantics; adapters project E.TGA semantics to their interop boundary (never the other way round).

Rationale

E.TGA states strict separation of concerns (graph-architecture scope only); specialized semantics are governed by the patterns named below for those live relations:

  • What the graph is: typed morphism definitions and the single graph edge kind U.Transfer.
  • Where/when it crosses contexts: only at OperationalGate(profile), with Bridge+UTS, CL/CL^plane, and Φ published in R-lane.
  • How comparability works: UNM is the single governing locus for unit, plane, and transport declarations, and selectors operate only on normalized, edition-pinned comparators, returning sets or archives rather than totals. Edition-aware pins and archive semantics are checked through A.19.SelectorMechanism, C.18, C.19, G.5, G.9, and G.11 when live.
  • How change propagates: sentinel‑bounded PathSlice refresh; editions are monotone; LaunchGate is the only binder of launch‑values.

This arrangement gives checkable conditions for functorial publication (commuting squares on crossings) and orthogonality of inner technical validity (ConstraintValidity) to context fit (GateFit), which in turn keeps gate aggregation order-independent under the CV=>GF activation predicate.

SoTA‑Echoing (post‑2015, multi‑Tradition)

Each row states the source idea, the FPF invariant E.TGA adopts, the practitioner move it changes, and the shortcut it rejects. Vendor, tool, and literature tokens are informative; the invariant and practitioner move carry the pattern explanatory work.

SoTA source ideaFPF invariantPractitioner moveRejected shortcut
Applied category theory / compositional open systems (Fong & Spivak, Seven Sketches in Compositionality, 2019)Use one TransductionGraph whose nodes are typed morphism/transduction bindings and whose edges use the single graph edge kind U.Transfer; publication faces preserve composition rather than inventing a second publication meaning.Name the graph object, node kinds, one U.Transfer, and any live path or crossing before drawing an ordered work and method sequence.Treating category-theory prestige, tool pipelines, lineage packages, or work and method narratives as graph semantics.
Operads, wiring diagrams, and hypergraph categories (Spivak, Operads of Wiring Diagrams, 2021; Baez & Fong, A Compositional Framework for Passive Linear Circuits, 2015)Typed ports and interface junctions motivate Bridge/CL/Phi pins at crossings; E.TGA adapts the math by requiring publication pins that the math alone does not supply.When an interface or boundary crossing matters, publish the Bridge, UTS row, CL/CL^plane, and R-lane penalty placement instead of leaving an unpinned junction.Treating an interface diagram, wiring diagram, or decorated cospan as sufficient crossing evidence.
Open-graph and string-diagram rewriting (Bonchi et al., Graphical Linear Algebra, 2019; Kissinger survey lineage)Rewrites and subflow refactors are admissible only with edition bumps, sentinel scopes, and PathSlice locality sufficient for replay.Localize the rewrite to the affected subflow or slice, pin editions, and re-emit the affected faces.Treating a global rewrite as replay-safe because the diagram still looks equivalent.
Research-package portability / RO-Crate-style research packaging (RO-Crate 1.2; Soiland-Reyes et al., Packaging research artefacts with RO-Crate, 2022, as lineage)Portable package descriptions belong in MVPK faces and InteropCards; packages and lineage metadata do not define graph semantics.Publish package, provenance, and source refs as publication references while keeping graph meaning in the node/gate definitions.Treating a crate, package, file bundle, or lineage record as the semantic authority for the graph.
Reproducibility and content addressability (Di Cosmo et al., Referencing Source Code Artifacts: a Separate Concern in Software Citation, 2020)Stable identifiers become edition pins and entries in E⃗; they make references checkable but do not decide node, gate, or mechanism meaning.Pin the exact editions of code, comparator, transport registry, descriptor map, or distance definition used by a face or path.Treating an identifier, hash, or content-addressed source ref as semantic authority.
TAMP and MPC planning and control practice (Garrett, Lozano-Perez, Kaelbling 2021 as lineage; Zhao et al., A Survey of Optimization-based Task and Motion Planning, 2024, as a TAMP survey source reference; named MPC survey or named reference used when MPC is the claim being made)Iteration is allowed only as a budgeted Selection-Planning loop with freshness checks and launch values bound in U.WorkEnactment.Declare the loop budget, freshness/request boundary, next PathSlice, and Work-only launch-value filling.Turning E.TGA into an ordered work-method narrative, an unbounded loop, or pre-Work launch-value filling.
Quality-Diversity / illumination search (MAP-Elites and CMA-ME as lineage; QDax JMLR 2024 as QD library source reference; QDHF 2023/ICML 2024 or QDAIF 2023 refs only when feedback-guided QD is live)Set and archive returns stay visible; E.TGA treats covert scalarization to one winner as non-conformant while leaving selector, archive, dominance, and comparator semantics to neighboring loci.Return the set/archive, pin comparator and descriptor/distance editions, and cite the selector/comparator loci when live.Collapsing a partially ordered or archive-like result into a single best score.
Profunctor optics / modular projection practice (Pickering, Gibbons, Wu, Profunctor Optics, 2019)MVPK faces are projections of graph/morphism information; they carry views without adding new numeric or mechanism claims.Publish views as MVPK faces with correspondence refs and pins, while leaving transformations and checks in their governing patterns.Treating a view, projection, screen, or explanation as a transformation, evidence result, or gate decision.

Cross-tradition note. Rows 1-3 (compositional graph practice), rows 4-5 (publication and reproducibility practice), row 6 (controls/robotics), row 7 (evolutionary search), and row 8 (PL/semantics) jointly position E.TGA across multiple traditions per E.8, but each row is retained only because it changes a practitioner move or rejected overread.

Bias‑Annotation (per E.8 SG‑bias slot)

  • Acyclic‑bias risk. Tooling accustomed to DAGs may discourage admissible feedback loops; E.TGA explicitly permits loops with budget/sentinel controls (CC‑TGA‑13,‑18).
  • Scalarization-bias risk. Cultural defaults to single-score rankings can suppress Pareto/QD sets; E.TGA keeps declared order relations and return sets visible (CC-TGA-10, CC-TGA-12).
  • Interop‑dominance risk. File/format ecosystems (CWL/RO‑Crate/lineage) can be mistaken for semantic sources; E.TGA places them in InteropCard and keeps governing semantics in nodes/gates.
  • Over‑formalization risk. Category‑theoretic formalisms can obscure operational guard‑rails; E.TGA grounds crossings in Bridge/UTS/CL/Φ pins and SquareLaw audits (CC‑TGA‑11,‑17).
  • Retrospective rewrite risk. Global rewrites break replay; E.TGA confines them to edition bumps and slice‑local refresh (CC‑TGA‑16).

Mitigations. Profile‑gated publication, audit of DecisionLog, mandatory edition pins, Lean‑to‑Core upgrade paths, and conformance tests tied to PathSlice replay.

Relations (explicit pattern‑to‑pattern edges)

Directed edges (→) are typed as builds_on / constrains / coordinates / specializes / publishes_on / requires / provides_checks_for.

Foundations

  • E.TGA →builds_on→ E.17 MVPK (for Morphisms). Faces, pins, lanes, functorial publication, Lean/Core/Regulated profiles.
  • E.TGA →builds_on→ A.6.0 U.Signature / A.6.1 U.Mechanism. Node kinds and governing-definition content boundaries.
  • E.TGA -> builds_on -> A.7 Strict Distinction (EntityOfConcern, Description episteme, Description episteme admitted for specification use, and publication/carrier separation). No new claims on faces; publication faces project graph, crossing, or flow-valuation information without becoming the governed graph object, Description episteme, specification use, evidence, gate decision, work occurrence, or carrier.

Flow semantics & checks

  • E.TGA →coordinates→ A.20 U.Flow (ConstraintValidity scope). CV checks live inside transformations; no declaration/translation of planes/units in CV; error/timeout/unknown folds follow CC‑TGA‑22 as the minimum default (profiles can be stricter). Terminology discipline (A.20 boundary). In CV scope, publications use status/witness language; GateDecisionRationale/GateDecisionExplanation are reserved for gating and do not apply to CV.
  • E.TGA →coordinates→ A.21 GateProfilization (GateFit scope). GateFit-scoped GateChecks are aggregated by OperationalGate(profile) with CV⇒GF activation; the enumeration and publication shape of GateChecks live in A.21. Equivalently: a GateFit decision different from abstain appears only when aggregated ConstraintValidity = pass; otherwise the GateDecisionExplanation (GateFit‑oriented) does not apply.
  • E.TGA →uses→ USM.CompareGuard and USM.LaunchGuard. Guards publish scope and responsible gate; guard failures are handled by the declared gate.
  • E.TGA -> constrains -> F.9/F.17 bridge and terminology-synchronization loci (Bridge+UTS, CL/CL^plane, Phi -> R). A transition is treated as a Crossing iff Bridge+UTS and the appropriate CL/CL^plane are published; otherwise this crossing explanation does not apply. Where Phi defines penalties, they appear in the R-lane only.
  • Operational interpretation (default): Eulerian. A flow is a valuation over U.Transfer; edges carry assurance‑only operations (see CC‑TGA‑17); no token‑passing semantics are assumed.

UNM & comparability

  • E.TGA →constrains→ UNM declaration and use loci. CG‑Spec, ComparatorSet, and UNM.TransportRegistryΦ declarations are governed by UNM; normalize-then-compare is mandatory.
  • E.TGA →constrains→ G.5 SelectionAndTuning. Set‑returning, comparator‑pinned decisions, no hidden scalarization; MethodTuning without launch‑value slot filling.
  • E.TGA →constrains→ G.11 EvaluatingAndRefreshing. EditionBumpProposal, two-phase update through the UNM declaration locus, path-local refresh.

Work boundary

  • E.TGA →coordinates with→ A.15 U.WorkEnactment (FinalizeLaunchValuesOnlyInWork). Single point of FinalizeLaunchValues; FreshnessUpToDate hard at LaunchGate; acceptance/telemetry published here.

Structure & reuse

  • E.TGA →specializes→ U.TransductionFlow (and its family). The graph architecture is the common graph-architecture base on which flow patterns (e.g., P2W, EvaluatingAndRefreshing) are defined; E.TGA provides coherence checks for their crossings, guards, and MVPK faces.
  • E.TGA -> coordinates with -> C.30.TGA-FLOW-REL. When a TGA graph is used in an architecture-flow relation, C.30.TGA-FLOW-REL records the relation between flow/transduction structure and ArchitectureOf@Context; E.TGA keeps graph, crossing, and flow-valuation discipline.
  • E.TGA →publishes_on→ E.17 MVPK views (PlainView, TechCard, InteropCard, AssuranceLane) for every edge/node where publication occurs; Lean mode allowed only as per profile.

Conformance Use Checks

  1. Model lint: run static checks for CC‑TGA‑01…25 (edge kind, gates on crossings, CV⇒GF, guard aggregation assignment, UNM declaration locus, SquareLaw).
  2. Publication audit: sample a commuting square and a sentinel‑bounded subflow; verify pins and DecisionLog behavior on block/degrade.
  3. Replay test: hold editions fixed; re‑run selection on a PathSlice; observe identical return‑sets; apply a bump; see only affected PathSlices refresh.
  4. StructuralReinterpretation probe: construct a minimal reinterpretation step; confirm CL^k with bridgeChannel=Kind on UTS, a SquareLaw‑retargeting witness on UTS, PathSliceId pinned, CV.ReinterpretationEquivalence=pass, and absence of hidden scalarization.

Relation boundary: E.18 governs transduction graph architecture. When a graph use raises work planning, performed work, evidence, assurance, gate, decision, architecture, structural-view, mechanism, selector, comparison, refresh, publication, or wording-use claims, name the governing pattern for that relation before relying on the graph.

E.18.1 P2W Child-Pattern Relation

E.18.1 is a child pattern for principles-to-work carry-through. It inherits this pattern's graph, path, flow-valuation, transfer, crossing, and gate minimum, then adds the local P2W relation from accepted problem-side output to the next FPF kind named by value, relation, record, or application. Pilot examples for one specialization belong in the selected child pattern that uses them; E.18 keeps only the graph-architecture law and this short child-pattern relation.

E.18:End

Principles-to-Work Transduction Path

Tech-name: PrinciplesToWorkTransductionPath Plain-name: principles-to-work carry-through path Type: Architectural pattern (E) Status: Stable Normativity: Normative unless explicitly marked informative Placement: Part E -> E.18 child pattern Builds on: E.18 Transduction Graph Architecture, C.22.2 ProblemCard@Context, A.6.0 U.Signature, A.6.1 U.Mechanism, the A.15 work family, C.29, C.16, F.9, A.20, A.21, and Part G comparison, selection, and refresh patterns. Purpose: carry an accepted problem-side output toward the next FPF kind named by value, relation, record, or pattern application while preserving the useful first-principles move.

Problem frame

Use this pattern when an accepted ProblemCard@Context is ready enough to guide work, but the next FPF use is not yet settled. The practitioner has an unsettled carry-through question: which problem-side distinction can be carried into the next FPF relation or record named by value?

The primary EntityOfConcern is the P2W carry-through relation: the relation between accepted problem-side material and the next admissible FPF use. P2W keeps first-principles material usable by turning it into one recoverable next move instead of letting an inspiring explanation become an all-purpose project claim.

Use this when

  • an accepted ProblemCard@Context names a working problem and the team needs a disciplined next move toward method, planning, performed work, or result interpretation;
  • a first-principles, U.Signature(profile=FormalSubstrate), PrincipleFrame, mechanism, method, WorkPlanning, performed-work, result-record, or source-currentness cue is present, but the FPF kind or relation to use next is still unsettled;
  • a TGA graph, P2W path, flow diagram, principle scheme, scenario, functional description, or source publication helps the team think, while the next move must still be recovered as an accepted FPF kind or relation;
  • a result artifact, telemetry line, acceptance record, quality-evaluation record, done-state update, feedback pin, or integration claim needs to be unpacked before it can guide the next move.

What goes wrong if missed

The team jumps from a convincing problem-side formulation into downstream language without naming the FPF relation being used. The work then looks connected to first principles, but the next record is unclear, the result phrase becomes too broad, and measurement or source-currentness changes have no honest return path.

What this buys

The practitioner gets one admissible next move: write a P2W carry-through record, recover the next FPF kind or relation, write or use the governed record, stop with a reduced-use cue, or return to the earlier application whose assumption changed. The payoff is practical: first-principles thinking remains action-guiding without becoming a hidden project authorization.

Not this pattern when

  • there is no accepted problem-side record; use C.22.2 or the problem-side pattern named by value first;
  • the FPF kind under repair, relation, and record to write are already settled; use that pattern directly and do not add a P2W layer;
  • the requested work product is a local project procedure, schedule, or work-management method; use the relevant work, planning, method, gate, or operational-management pattern;
  • the requested record or claim is an evidence case, assurance case, gate record, decision record, architecture description, publication-use claim, or wording-use repair; use the recovered relation and its governing pattern directly.

Problem

First-principles work often becomes useful exactly when a problem-side formulation is ready to move toward work. The accepted problem card may expose an invariant, mathematical lens, functional role, mechanism candidate, method family, planning constraint, result cue, or changed measurement assumption. Without P2W, that useful material is either overcompressed into "we have a solution" or scattered across several related FPF patterns before the working distinction is preserved.

P2W solves a carry-through problem. It takes accepted problem-side material, states the distinction it can carry, selects the next admissible FPF node, and records what was written, stopped, split, or reopened. The pattern succeeds only when a practitioner can replay the move from source problem to next record without importing the law of another pattern into P2W.

Forces

ForceWhat P2W must preservePressure to manage
First-principles usefulnessA strong problem-side insight may guide method, planning, work, or result interpretation.The insight is tempting to treat as a completed downstream claim.
Governing-kind precisionThe next FPF kind or relation must be recoverable before the path continues.Path words, diagrams, and sources can look sufficient without a record to write.
Practical readabilityFirst use needs a compact record and a quick next action.Too much boundary prose can hide the actual P2W move.
Non-linear useP2W may skip, branch, split, stop, or reopen nodes.A readable graph can be mistaken for a required project sequence.
Result usefulnessResult phrases often point to artifacts, telemetry, acceptance, measurement, refresh, or role enactability.One broad result word can hide several different records.
Neighbor economyNeighboring patterns keep their own law.Repeating their non-use doctrine inside P2W creates content fanout.

Solution

Use P2W as a declarative graph of admissible carry-through moves from an accepted ProblemCard@Context to accepted FPF applications. The graph is not a prescribed FPF-development workflow. It can describe or join project workflows only when the workflow is the EntityOfConcern of the TGA use being made: a U.MethodDescription, U.WorkPlan, U.TransductionFlow, or flow valuation over U.TransductionGraph. It shows what can be carried, split, written, stopped, or reopened after a problem-side result becomes useful for work.

P2W declarative graph

The graph has eight recurring node classes. A concrete use can skip nodes, branch into several applications, split one source phrase into several records, stop with a reduced-use cue, or reopen an earlier node when measurement or source currentness changes.

NodeQuestion answeredOutput of the P2W move
AcceptedProblemSideOutputWhat accepted problem-side material is being carried?Problem-card reference plus carried distinction.
NextFPFUseQuestionWhat is the next unsettled FPF kind or relation?One question stated in FPF vocabulary.
FirstPrinciplesLensWhat structure, invariant, loss, or payoff makes the next move worth formal treatment?Preserved structure, lost structure, payoff, and stop condition.
DeclarationStackWhich U.Signature(profile=FormalSubstrate), PrincipleFrame, ontology, CHR, measurement, normalization, or bridge relation is needed?Declaration or reference to the declaration relation named by value.
MechanismMethodCandidateIs the next work-facing issue mechanism meaning, mechanism-method stabilization, method selection, or retained-set handling?Mechanism cue, comparison cue, selector cue, or retained-set cue.
WorkPreparationIs a planning record, slot-filling plan item, feasibility note, evidence hook, or freshness request needed?U.WorkPlan, PlanItem, or SlotFillingsPlanItem application.
PerformedWorkAndResultHas dated U.Work occurred, and what result-related records appeared?Work occurrence plus unpacked artifact, telemetry, acceptance, measurement, source, or role-enactability relation.
ReturnAndRefreshDid measurement, source currentness, reference plane, or problem-side wording change an earlier assumption?Return to the affected application with the changed relation named.

Admissible edges are carry, recover, write, split, stop, and return. Carry preserves a distinction from the problem side. Recover names the FPF kind or relation. Write creates or amends the governed record. Split separates one source phrase into several applications. Stop preserves a reduced-use cue when no admissible continuation is available. Return reopens the smallest earlier application whose assumption changed.

Carry-through record

For first-minute use, fill only ProblemCardRef, CarriedDistinction, NextFPFUseQuestion, and either RecoveredFPFKindOrRelation or StopCondition. Use the remaining fields only when the move continues, splits, writes a record, or returns after a changed assumption.

Use one filled record when applying P2W. It is the local work product of the pattern. Do not copy an empty form into project material; if a field cannot be filled with recovered claim content, state the stop condition or leave the field out.

P2W carry-through record:
  ProblemCardRef: ProblemCard@Context PC-FAB-042, accepted for a cooling-fixture deformation problem.
  CarriedDistinction: the deformation is not one more tuning defect; the problem card identifies a conserved heat-flow structure that must survive method choice.
  NextFPFUseQuestion: does the team need mathematical-lens use or a `U.Signature(profile=FormalSubstrate)` declaration before method selection?
  P2WNode: FirstPrinciplesLens -> DeclarationStack.
  RecoveredFPFKindOrRelation: mathematical-lens use plus `U.Signature(profile=FormalSubstrate)` and `PrincipleFrame` declaration relation.
  SelectedApplication: `C.29` for preserved and lost structure; `A.6.0` for `U.Signature(profile=FormalSubstrate)` and `PrincipleFrame` when the declaration is written.
  WrittenRecordOrApplication: a short `U.Signature(profile=FormalSubstrate)` declaration naming the heat-flow invariant, the boundary conditions being preserved, the deformation factors left outside the model, and the payoff for later method comparison.
  NotCarried: no method is selected by this record.
  StopCondition: stop before method selection until comparator, measurement, and selected-set relations are named.
  ReturnTrigger: later result measurement shows that the planned interface constraint used the wrong reference plane.
  SourceCurrentnessCheck: source restoration and refresh reopen the measurement, normalization, planning, and method-comparison applications; the earlier U.Work occurrence is cited but not rewritten by P2W.

ProblemCardRef and CarriedDistinction locate the accepted problem-side material and the distinction being carried. NextFPFUseQuestion, P2WNode, and RecoveredFPFKindOrRelation keep the next FPF kind or relation explicit before the path continues. SelectedApplication and WrittenRecordOrApplication name what is actually used or written.

NotCarried is a compact field, not a place to repeat boundary doctrine from other governing patterns. It names only the local overread that would change this P2W move. StopCondition, ReturnTrigger, and SourceCurrentnessCheck keep stopping and reopening tied to a changed relation, measurement, source-currentness, or problem-side assumption.

This record shows the complete P2W mechanism: problem-side distinction, first-principles value, selected FPF application, written record, stop condition, and return after measurement and source-currentness change.

Positive action spine

Node reachedP2W actionRecord or continuation
Accepted problem-side outputState what is carried from the problem card and what question under repair remains.P2W carry-through record begins.
First-principles or mathematical cueName preserved structure, lost structure, payoff, and stop condition.Mathematical-lens use or U.Signature(profile=FormalSubstrate) declaration.
Ontology, UTS, CHR, or PrincipleFrame cueOrder ontology, UTS, characteristic, measurement, and principle-frame declarations before downstream use.Declaration-stack application.
Mechanism or method cueSeparate mechanism meaning from method selection and retained-set handling.Mechanism, method-comparison, selector, or retained-set application.
Planning cueWrite or amend a planning record, plan item, evidence hook, freshness request, or planned constraint.WorkPlanning application.
Dated performed U.WorkRecord the work occurrence and relation to plan, gate, launch values, provenance, and later result records.Performed-work application plus any separate entry or provenance relation.
Result phraseSplit the phrase into artifact, resource, launch-value, telemetry, acceptance, quality, done-state, feedback, measurement, parity, refresh, source, or role-enactability relation.One or more result-related applications.
Changed measurement or source currentnessReturn to the smallest earlier application whose assumption changed.Measurement, normalization, source-restoration, refresh, planning, method-comparison, or problem-side correction.

Node use details

Problem-side input: P2W starts only from accepted problem-side material. The record carries the distinction that matters for the next move, not the whole problem-side pattern.

First-principles and declarations: mathematical-lens use, U.Signature(profile=FormalSubstrate), ontology, UTS, CHR, measurement, normalization, bridge, and PrincipleFrame material are handled as declaration-stack work. The P2W record names which declaration or neighboring relation is being written or cited, what structure is preserved, what is lost, and which downstream relation is still unsettled.

When mathematical wording points both to a formal declaration and to a mathematical lens, P2W does not decide by vocabulary. Use the slot discipline in A.6.0:10a.1: A.6.0 owns U.Signature(profile=FormalSubstrate) declaration, C.29 owns mathematical-lens use, A.6.1 owns mechanism consumption or realization, and E.18.1 owns only the carry-through cue and next-relation selection. Mechanism and method: mechanism wording names operation algebra, law set, admissibility condition, effect realization, or mechanism-description need. Method wording names candidate sets, comparison, selector, retained-set, or selected-record need. P2W keeps the question visible until the method or mechanism application is actually used.

Planning and performed work: WorkPlanning writes planning records, plan items, evidence hooks, feasibility notes, freshness requests, and planned constraints. Performed work is a dated U.Work occurrence. P2W records which side of that boundary the carry-through record uses and which later result records have appeared.

Result carry-through: a result phrase is treated as a bundle of possible records. The P2W action is to unpack it before it guides any next move.

Graph, publication, function, interface, and integration cues: a graph or publication can help classify the P2W move. A functional description, interface constraint, protocol, port, connection, resource limit, or integration statement can shape the next relation. The P2W record names the recovered relation and then uses the relation selection aid in E.18.1:4.6.

Boundary and relation discipline

P2W is not a catalogue of boundary doctrines from other governing patterns. It has one local boundary rule: carry only the distinction accepted on the problem side, recover the next FPF kind or relation, and stop everything else as named source material until that relation is being made.

Source pressureLocal P2W decisionAdmissible continuation
Problem-side materialCarry only the accepted distinction and the next FPF-use question.Continue when the next FPF kind or relation is named; otherwise stop before P2W begins.
First-principles or mathematical wordingState preserved structure, lost structure, payoff, and stop condition.Continue as mathematical-lens use through C.29, or as a U.Signature(profile=FormalSubstrate) declaration through A.6.0, only when those relations are being made.
Declaration-stack wordingKeep PrincipleFrame, ontology, UTS, CHR, measurement, normalization, bridge, and comparison declarations separate.Continue through the declaration whose relation changes the P2W move being made.
Mechanism, method, planning, work, or result wordingRecover the concrete mechanism, selection, planning, performed-work, or result-related relation.Continue through the matching work-facing application; split one source phrase when several relations are being made.
Evidence, assurance, gate, release, decision, publication, architecture, interface, function, or wording-use wordingPreserve the cue without importing law from the governing pattern for that relation into P2W.Continue only through the relation that changes the P2W move being made; leave the rest as stopped cues.

Return and refresh rule

P2W can reopen earlier work without becoming a required work procedure. Reopen only the smallest application whose assumption changed:

Changed assumptionSmallest reopened application
measurement value, unit, scale, reference plane, or transport relationmeasurement, normalization, bridge, or comparison application
source record, source edition, source reference, or publication-use relationwork-relevant source restoration, publication-use, or refresh application
result artifact, telemetry, acceptance, done-state, or role-enactability recordresult-related split plus the evidence named by value, measurement, quality, role, or refresh relation
method set, comparator, selector, retained set, or selected recordmethod-comparison, selector, retained-set, or selected-record application
problem-side statement or accepted carried distinctionproblem-side correction in the problem-card application

The earlier dated U.Work occurrence remains a dated occurrence. P2W may cite it during return, but the changed assumption determines which application is reopened.

Relation selection aid

Use this aid after the carry-through record when several cues compete for the continuing FPF application. It names the relation family P2W must recover before another pattern can carry the claim.

Cue familyRelation to recover before continuationLocal P2W action
accepted problem-side outputaccepted ProblemCard@Context material plus one unsettled next relationState what is carried and what question remains.
first-principles or mathematical wordingmathematical-lens use, near-sameness condition, or U.Signature(profile=FormalSubstrate) declarationName preserved structure, lost structure, payoff, and stop condition.
postulate or observability wordingPrincipleFrame, ontology, UTS, CHR, measurement, normalization, bridge, comparison, or threshold declarationWrite or cite only the declaration relation that changes the P2W move being made.
mechanism or method wordingmechanism law, mechanism-method stabilization, candidate set, comparator, selector, retained set, or selected recordKeep mechanism meaning distinct from method selection and set return.
planning or performed-work wordingU.WorkPlan, PlanItem, SlotFillingsPlanItem, dated U.Work, launch value, gate, release, or provenance relationWrite or cite the work-family record that is actually being made.
result wordingartifact, telemetry, acceptance, done-state, feedback, measurement, parity, source, quality-evaluation, or role-enactability relationSplit generic result wording before it guides the next move.
evidence, assurance, gate, release, decision, publication, architecture, interface, function, or wording-use wordingthe relation named by value carried by the source phrasePreserve the cue, recover the relation, and stop any relation not used by this P2W move.
graph, flow, diagram, scenario, view, or publication wordinggraph law, path note, flow valuation, description episteme, publication face, or work occurrenceUse the source as classification material; do not let the artifact type select the next relation by itself.

Pattern names for these relation families are listed once in E.18.1:12.

Lowering and reopen block

Use this block when the carry-through record cannot carry the stronger-looking source cue. P2W succeeds when it leaves one admissible move. If the move is not recoverable by value, lower the cue, stop, or reopen the smallest affected application.

Claim familyLowering or stop conditionReopen or continue target
Problem-side materialNo accepted ProblemCard@Context, or the accepted problem-side statement changes the carried distinction.Stop before P2W begins, or return to the problem-side record named by value that changed.
First-principles, mathematical, or formal claimPreserved structure, lost structure, payoff, or stop condition cannot be named.Lower to a reduced-use source cue; continue only after mathematical-lens use or U.Signature(profile=FormalSubstrate) declaration is being made.
Declaration-stack claimPostulates, CHR observability, units, planes, comparators, thresholds, ontology editions, or CHR editions are merged into one container.Split the declaration-stack relations; reopen the declaration, measurement, normalization, bridge, ontology, or CHR application named by value that changed.
Mechanism, method, or selected-set claimMechanism meaning, candidate set, comparison relation, selector, retained set, or selected record cannot be separated.Stop before method choice; continue only for the recovered relation.
Planning or performed-work claimPlanned constraint, plan item, dated U.Work, launch value, actual, substitution, variance, telemetry, or result record is blurred.Split planning, plan-item, performed-work, and source-restoration relations; do not rewrite the earlier dated U.Work occurrence unless the work record itself changed.
Result or source claimA generic result phrase or source cue cannot recover artifact, telemetry, acceptance, measurement, refresh, evidence, role-enactability, architecture, or source-reference relation.Treat the phrase as source material for restoration; continue only through the result-related or source-restoration relation named by value recovered.
Evidence, gate, assurance, conformance, release, entry, or decision claimThe source gives only a label, signal, color, approval word, or readiness phrase.Preserve the cue and stop local authority; continue only when the governed relation is being made.
Graph, interface, architecture-description, publication, or wording-use claimA diagram, port, interface phrase, architecture view, publication, or wording phrase does not name the relation it carries.Use it as classification material; continue only after relation recovery.

Replay and currentness record

Use this compact record after source restoration, changed measurement, changed problem-side material, FPF pattern change, or a use-found defect. The record keeps replay local: it says what changed, what still carries, what no longer carries, and which application reopens.

P2W replay and currentness check:
  OriginalRecordRef:
  ChangedInput:
  ChangedAssumptionKind:
  StillCarried:
  NoLongerCarried:
  SmallestReopenedApplication:
  GoverningRelationChecked:
  CurrentnessResult:
  NextMove:

ChangedAssumptionKind names the assumption kind, such as measurement, unit, reference plane, source record, problem-side statement, method set, comparator, interface relation, publication-use relation, or FPF pattern change. StillCarried and NoLongerCarried prevent a source-currentness change from silently rewriting the whole path. SmallestReopenedApplication keeps the repair local, and NextMove states whether to continue, stop, split, lower to a reduced-use cue, or return to the problem-side pattern.

Archetypal Grounding

E.18.1 is grounded in a simple System and Episteme contrast. In System-facing work, accepted problem-side material may lead toward method choice, planning, performed work, result records, and result measurement. In Episteme-facing work, the same material may lead toward a U.Signature(profile=FormalSubstrate) declaration, mathematical-lens use, description, publication, evidence, or gate-related claims. The P2W move asks one question in both cases: which FPF kind or relation can carry the next claim being made?

ArchetypeSystem-side groundingEpisteme-side grounding
TellA manufacturing team accepts a problem card showing that a fabrication issue is caused by a missing functional constraint.A research team accepts a problem card showing that two descriptions may be almost the same only under a declared U.Signature(profile=FormalSubstrate).
Show without P2WThe team treats the principle scheme as method selection, work plan, performed work, and acceptance evidence at once.The team treats mathematical equivalence as real-world identity, measurement validation, evidence, and decision authority.
Show with P2WThe team writes a carry-through record, separates method comparison from WorkPlanning, records dated U.Work, and unpacks result records.The team writes a carry-through record, separates mathematical-lens use, U.Signature(profile=FormalSubstrate), bridge, measurement, evidence, and provenance relations, and keeps equivalence bounded by the declared formal relation.

Worked slices

  1. Thin first-principles start. An accepted ProblemCard@Context says the problem is not one more local tuning task because a conserved structure is being ignored. P2W records the carried distinction, recovers mathematical-lens use and U.Signature(profile=FormalSubstrate) declaration only if needed, and stops before method selection until comparator, measurement, and selected-set relations are named.

  2. Planning from selected enough method. A method family is selected enough for planning. P2W carries the planning relation; the plan records planned constraints, planned fillers, evidence-reference hooks, and freshness requests.

  3. Performed work after planning. A dated work occurrence has appeared. P2W carries the performed-work relation and records which gate, release, provenance, or launch-value relation is separate from the occurrence.

  4. Result interpretation without generic result. A source says the work result proves that the approach worked. P2W unpacks artifact, telemetry, measurement, evidence, acceptance, quality-evaluation, refresh, and role-enactability candidates before any one of them guides the next move.

  5. Functional explanatory order. A source diagram places U.Signature(profile=FormalSubstrate), principle frame, mechanism, normalization, method selection, planning, performed work, and result measurement in one readable order. P2W uses the diagram to classify applications while keeping material time and performed-work chronology with their own patterns.

  6. Interface split before P2W use. A source says a port-throughput limit makes a solution feasible after integration. P2W first splits the phrase: module-interface relation (A.6.M), flow or throughput relation (E.18 or A.6.F when function use is being claimed), WorkPlan constraint (A.15.2), performed-work actual (A.15.1), evidence or gate claim (A.10, G.6, A.20, or A.21), or architecture and structural-view claim (C.30 family). The carry-through record writes only the relation that changes the P2W move being made and leaves the other readings as stopped cues.

  7. Result measurement returns to planning. A performed U.Work occurrence produced telemetry and an artifact. Later measurement shows that the planned interface constraint was interpreted against the wrong reference plane. P2W splits measurement, reference-plane repair, source restoration, refresh, planning revision, and method-comparison claims. If the original ProblemCard@Context no longer states the right problem, the problem-side correction returns to the problem-side pattern.

Additional worked situations

SituationP2W moveWhat changes
First-minute useA practitioner has only an accepted ProblemCard@Context and the sentence "the cooling fixture violates the heat-flow invariant." Fill ProblemCardRef, CarriedDistinction, NextFPFUseQuestion, and RecoveredFPFKindOrRelation or StopCondition.The next action becomes a C.29 and A.6.0 application, not method selection or evidence writing.
Diagram and approval note in the same sourceThe same source contains a diagram, a test photo, and a manager note saying "approved." Keep P2W focused on the distinction carried from the problem-side result.Diagram, evidence-looking material, and gate-looking material are separated by relation recovery; the P2W record keeps only the carried distinction and next relation.
Principle story without accepted problem-side materialA source has an inspiring principle story but no accepted ProblemCard@Context.P2W stops before it begins; the material remains a reduced-use cue until C.22.2 or the problem-side pattern named by value accepts problem-side material.
Acceptance label hides wrong measurementA dashboard shows a green acceptance label, but the measurement used the wrong reference plane.Acceptance color does not guide the next move; P2W returns to measurement, normalization, source restoration, planning, and method comparison.
Changed unit after source restorationLater source restoration changes only the unit and reference plane used by the planning constraint.P2W reopens the smallest affected applications; the earlier dated U.Work occurrence is cited, not rewritten.
Near-sameness under a formal declarationA mathematical near-sameness claim preserves heat-flow structure but loses deformation factors outside the model.P2W uses C.29 for mathematical-lens use and A.6.0 for U.Signature(profile=FormalSubstrate), names preserved and lost structure, and prevents the lens from settling empirical truth or work authorization.
FPF relation law changes after a P2W recordA governing FPF pattern changes the boundary for architecture-description, evidence, or source-restoration use. Fill the replay and currentness check: changed law, still-carried distinction, no-longer-carried cue, smallest reopened application, and next move.The earlier carry-through record is replayed rather than trusted by age; only the affected architecture-description, evidence, source-restoration, or P2W field changes.
Relation selection would over-select from one phraseA source says "the new port contract proves integration readiness." P2W splits module-interface relation, flow relation, performed-work actual, evidence cue, gate cue, and architecture-description cue.Only the relation that changes the P2W move being made is written; the remaining readings stop as named cues until their governed relations are being made.
Formal claim loses payoffA U.Signature(profile=FormalSubstrate) declaration preserves a neat invariant, but no practical payoff or downstream stop condition can be stated for the accepted problem-side material.The mathematical phrase lowers to a reduced-use cue; P2W does not open method selection, evidence, gate, or work planning from mathematical prestige alone.
Result source becomes staleA result-looking source is later replaced by a fresher source with a different artifact reference and measurement reference.P2W uses A.15.4-style source restoration before result carry-through; stale result wording cannot continue as evidence, acceptance, or quality evaluation.

Pilot examples for coupled development and application flows

The old TGA assignment supplied a broad example bank. Use these pilots as grounding checks, not as old terminology to import. They exercise the same common shape: one graph can join several transduction flows, one flow may develop or select a usable product, another flow may apply it, and an evaluation or refresh flow may return to the smallest affected development or application locus. The joined graph does not merge the flow objects, DesignRunTag boundaries, evidence, gates, work occurrences, or the relation position that the carried object fills inside each flow. Use each pilot to check whether the P2W use being made can name the joined flows, the carried object's flow-local relation position, the DesignRunTag boundary, and the smallest reopened slice.

PilotP2W use being madeWhat it tests
Coffee service STFAn accepted service-quality problem carries heat or mass-balance structure through U.Signature(profile=FormalSubstrate), declaration-stack, mechanism, normalization, method-selection, WorkPlanning, dated U.Work, telemetry, measurement, and refresh relations.Positive whole-chain readability, freshness, set-return selection, launch values only in performed work, and path-local refresh.
Compiler design and runToolchain construction, compiler use, and product execution are separate applications; design and run changes pass through the gate and work relations being used.DesignRunTag, launch gate, reproducible build currentness and source currentness, and no collapse of build, run, and product work.
TAMP and MPC roboticsSelection and WorkPlanning may iterate under a declared progress or budget condition before performed work.Branching and cycle use without imposing one mandatory workflow, and no launch-value binding before performed work.
AutoML and QDMethod selection returns a Pareto, QD, front, or archive set under comparator and descriptor editions, not a hidden scalar winner.Set-return discipline, comparator currentness, no hidden scalarization, and retained-set refresh.
Freshness or material-transport caseWork planning and execution depend on freshness windows, transport relations, units, reference planes, and source-currentness.No implicit latest, no unbridged unit or plane comparison, and smallest affected refresh.
Integration under interface constraintsAfter assembly, a result phrase may mean role-enactability under interface constraints, evidence, gate, architecture, function, or work relation.Result carry-through is not artifact-only or telemetry-only; interface and integration wording must recover the relation being claimed.
Tool-product-use chainA design-tagged flow makes a tool; a later run or use flow uses the tool to make a chair; another flow uses the chair as context for writing a text.One graph can unite all flows, but the same carried object may fill a run-result position in one flow and a design-side input, tool, context, or constraint position in another. The relation-position shift is explicit, tied to the flow relation and any DesignRunTag being used, and does not change the object's kind by wording.
FPF pattern-development / self-evolving specificationA development flow creates or repairs a pattern, specification, or process description through drafting, quality evaluation, publication projection, and admitted publication; a later use flow applies that product to its own EntityOfConcern; a defect found in use returns to the smallest development slice for repair.Development, application, and evaluation flows are joined by transfer and return relations while keeping objects and DesignRunTag boundaries separate; evaluation records or use-found evidence change the product through edits to the smallest development slice, not by entering the used publication's practitioner-facing prose.

Bias-Annotation

Lenses tested: Gov, Arch, Ontological and epistemic, Prag, Did. Scope: accepted problem-side output moving toward FPF applications.

  • Governance bias (Gov): permission, gate, release, assurance, and decision cues are preserved only as local cues until the relevant FPF relation is recovered.
  • Architectural bias (Arch): diagrams, selected structures, and interface language help classify the next move; they do not displace the P2W carry-through relation.
  • Ontological and epistemic bias: U.Signature(profile=FormalSubstrate), near-sameness, source publication, and evidence-looking language are turned into recovered FPF kinds and relations.
  • Pragmatic bias (Prag): the graph is useful for action without becoming a required project procedure.
  • Didactic bias (Did): the positive graph and filled record come before the boundary table, so precision does not bury the working move.

Conformance Checklist

  • CC-E18.1-1 The P2W use starts from an accepted ProblemCard@Context or stops before P2W begins.
  • CC-E18.1-2 The carry-through record states ProblemCardRef, CarriedDistinction, NextFPFUseQuestion, RecoveredFPFKindOrRelation, SelectedApplication, WrittenRecordOrApplication, NotCarried, StopCondition, ReturnTrigger, and SourceCurrentnessCheck.
  • CC-E18.1-3 The positive graph is recoverable: accepted problem-side output, question under repair, first-principles lens, declaration stack, mechanism or method, planning, performed work, result records, and return or refresh.
  • CC-E18.1-4 One source phrase may split into several FPF applications; the record does not compress them into one generic token.
  • CC-E18.1-5 Result wording is unpacked into concrete result-related relations; a generic WorkResult kind is not admitted.
  • CC-E18.1-6 PrincipleFrame material keeps postulates and CHR observability distinct from units, planes, comparators, thresholds, ontology editions, CHR editions, plans, work, evidence, and gates.
  • CC-E18.1-7 Measurement, source currentness, reference-plane, method-set, comparator, or problem-side changes return to the smallest affected application.
  • CC-E18.1-8 Non-P2W governing law appears only as a recovered relation in E.18.1:4.6 and as a pattern list in Relations, not as repeated local doctrine.
  • CC-E18.1-9 Local boundary wording remains only where it names a near-miss that changes the next P2W action.
  • CC-E18.1-10 The pattern leaves one useful admissible action: write the carry-through record, write or use the governed record, split a source phrase, stop with a reduced-use cue, or return to a changed application.
  • CC-E18.1-11 Archetypal grounding can replay at least one coupled-flow pilot from E.18.1:5.3; the pilot joins development, application, evaluation, and repair flows in one graph while keeping their objects, flow-local relation positions, DesignRunTag boundaries, and evidence distinct. The self-evolving-spec pilot keeps development-flow or use-found evidence outside the used pattern, specification, or process description.
  • CC-E18.1-12 Every carried claim family can be lowered, stopped, split, or reopened through E.18.1:4.7; a source cue that cannot name the recovered FPF kind or relation remains a reduced-use cue.
  • CC-E18.1-13 Every replay after changed source, measurement, problem-side material, or FPF relation law names the changed assumption kind, what is still carried, what is no longer carried, the smallest reopened application, the governing relation checked, and the next move.

Common Anti-Patterns and How to Avoid Them

Anti-patternRepair
Boundary fanout. The pattern repeats long lists of what P2W is not.Keep relation discipline in E.18.1:4.4; make local sections state the next P2W action.
Path-as-procedure. The graph is read as a required project sequence.Treat the graph as carry-through over FPF applications; use stop, split, and return edges.
ProblemCard-as-solution. The accepted problem card is treated as method, plan, work, evidence, or result.Write the carried distinction and next FPF-use question before selecting an application.
Math-as-authority. A U.Signature(profile=FormalSubstrate) declaration, mathematical lens, or near-sameness does all downstream work.Record preserved structure, lost structure, payoff, and stop condition; continue through the recovered relation.
Generic result token. "Result" becomes one local kind.Split the phrase into artifact, telemetry, acceptance, quality, measurement, refresh, source, evidence, or role-enactability relation.
Interface shortcut. Interface, port, protocol, connection, resource, or integration wording selects function, method, work, evidence, gate, or architecture by itself.Recover the FPF relation before continuing.

Consequences

ConsequenceBenefitCost or mitigation
The carry-through record becomes the local work product.A practitioner can replay the move from problem-side output to continuing FPF application.The record adds a small step before downstream work.
Positive graph comes before boundary.First use is readable before the heavier relation aid.Boundary checks are still available in one canonical section.
Result language becomes unpackable.Artifacts, telemetry, acceptance, measurement, refresh, and role enactability can be handled by their own records.More than one application may be needed for one source phrase.
P2W stays non-procedural.The pattern can be used in many project situations without prescribing one local procedure.Teams that want a work procedure must add method or work-planning material outside P2W.
Related patterns keep their authority.P2W avoids duplicating evidence, gate, decision, architecture, publication, mechanism, and work-family doctrine.Users consult the pattern named by the recovered relation when that relation is being made.

Rationale

E.18.1 is a child of E.18 because P2W uses inherited transduction-graph architecture as its setting. It does not define graph law. It defines a local carry-through pattern for turning accepted problem-side material into a next admissible FPF use.

The design puts the positive mechanism first because repeated negative distinction sets can make a pattern whose primary EntityOfConcern is P2W behave like reference policing. P2W needs precision, but precision is useful here only when it leaves a surviving action: write the carry-through record, recover the FPF kind or relation, use the governed record, stop, split, or return.

SoTA-Echoing

SoTA alignment rule. P2W borrows useful distinctions from practice traditions only after they can be stated as a P2W carry-through move: accepted problem-side material, carried distinction, recovered FPF relation, written record, stop condition, and local return. Currentness has two sources. A project source can become stale or be replaced. An FPF pattern can also change the relation law used by the carry-through record. In both cases P2W reopens only the smallest affected application.

Practice traditionDistinction kept for P2WP2W invariantPractitioner implicationReopen if
Model-based engineering and systems practice separates model, view, requirement, evidence, and execution records because each has different authority.A useful diagram or view can classify the next relation without changing the governed kind.P2W separates graph, view, publication, evidence, gate, and work applications before the next move.The practitioner can use a diagram as thinking material without letting the diagram authorize work, prove readiness, or settle evidence.The project source, architecture-description relation, evidence relation, gate relation, or release relation changes.
Traceability and digital-thread practice values continuity from problem, rationale, method, plan, work, and result while keeping record kinds distinct.A trace is useful only when each record kind remains named.P2W carries problem-side material through a replayable carry-through record while keeping problem card, work plan, performed work, evidence, provenance, result, and refresh relations distinct.The team can replay a path from problem to work without treating trace continuity as evidence, approval, or performed work.Source restoration, provenance, refresh, or work-family law changes the currentness relation.
Formal-methods and mathematical-modeling practice uses U.Signature(profile=FormalSubstrate) declarations to preserve invariants, expose lost structure, and make equivalence conditions explicit.Mathematical value is recoverable only through preserved structure, lost structure, payoff, and stop condition.P2W separates mathematical-lens use from the U.Signature(profile=FormalSubstrate) declaration and from empirical, work, evidence, or authorization claims.A mathematical idea helps choose the next disciplined move without becoming proof of real-world identity or permission to act.Mathematical-lens, signature, bridge, measurement, normalization, comparison, or source-currentness assumptions change.
Assurance, safety, evidence, gate, and decision practice treats confidence, acceptance, validation, approval, and release as distinct relations.Labels and readiness phrases are cues, not local authority.P2W preserves the cue, recovers the relation, and stops local authority until the governed relation is being made.A warning, green label, or approval note remains useful without becoming an evidence case, gate record, decision, or release.Evidence, assurance, gate, conformance, release, work-entry, or decision relation changes.

Relations

  • E.18 governs inherited transduction graph architecture, transfer annotations, flow valuation, ConstraintValidity, GateFit, gate profile, design tags, and run tags.
  • C.22.2 governs the accepted problem-side record and problem-side claims related to the carried distinction.
  • C.29, A.6.0, E.14, F.17, F.9, C.16, A.19.UNM, and Part G govern mathematical-lens use, U.Signature(profile=FormalSubstrate), principle-frame, ontology, UTS, bridge, measurement, normalization, and comparison relations.
  • A.6.1 and E.20 govern mechanism and mechanism-method stabilization relations.
  • G.5, G.9, A.19.SelectorMechanism, C.18, and C.19 govern candidate-set, comparison, selector, retained-set, and selected-record relations.
  • A.15, A.15.1, A.15.2, A.15.3, and A.15.4 govern role-method-work alignment, performed work, planning, planned baselines, and work-relevant source restoration.
  • A.10, B.3, G.6, E.19, A.20, A.21, and C.11 govern evidence, assurance, provenance, conformance, gate, release, work-entry, and decision claims.
  • C.30, C.30.AD, C.30.ASV, C.31, A.6.M, A.6.F, E.10, E.17, and E.17.EFP govern architecture, architecture-description, structural-view, reusable-structure, module-interface, function, wording-use, publication, and publication-use claims.

E.18.1:End

Pattern Quality Gates: Review and Refresh Profiles

Type: Architectural pattern Status: Stable Normativity: Normative

Use this when

Use E.19 when you need to decide whether one new, substantially revised, or aging FPF pattern is ready for admission, refresh, or return for repair. It turns quality review into a repeatable pattern-quality run rather than a matter of reviewer taste.

Use it especially when a draft looks structurally compliant but may still fail on first-minute usability, primary EntityOfConcern stability, terminology, SoTA grounding, related-pattern boundaries, examples, anti-patterns, or shipping-facing authority claims.

Not this pattern when. Use E.8 to write the pattern body. Use E.9 to record the content decision that explains why FPF should change. Use E.9.DA when the question is whether one concrete DRR is adequate for a declared downstream authoring use before drafting or host amendment. Use E.23 when the aim is repeated quality improvement against an object-under-improvement evaluation rather than one admission or refresh review profile. Use local patterns for the domain rule or constraint being reviewed. Use project gate or release patterns when the question is whether a project publication, work-result record, or release candidate passes a delivery gate rather than whether an FPF pattern is mature. E.19 reviews whether an FPF pattern remains useful action guidance; it does not certify the world, the project, the publication, or the release.

What goes wrong if missed

Review collapses into heading compliance or personal taste. A draft can pass because it has the right headings while still being hard for a practitioner to recognise, too thin against current practice, unclear about its primary EntityOfConcern, relation record, or claim record, or misleading about related governing patterns and authority claims.

What this buys

E.19 gives authors, reviewers, and stewards a shared review profile: what must be checked, how deep the check should go, which defects block admission or refresh, and what evidence is needed before a pattern-quality claim is made. It also makes the recognition text visible before the heavier assurance machinery begins.

First useful move. Name the pattern-quality review or refresh claim, run baseline triage over the reviewed pattern or subset, and add only the risk-selected profiles needed by the present ontology, usability, SoTA, boundary, naming, or authority risk.

Local-repair boundary. If baseline triage shows that the current review question has no present ontology, usability, SoTA, boundary, naming, or authority risk beyond a small mechanical repair, close with that repair direction. Do not run every profile just because E.19 exists, and do not claim an E.21 quality value unless E.21 has evaluated the pattern version over its required coordinate set.

Primary EntityOfConcern in plain terms. The primary EntityOfConcern is one FPF pattern-quality review or refresh claim: the reviewed pattern text, the selected profile, the defects found or cleared, and the boundary of the admission or refresh decision.

Primary working reader. The first reader is an FPF reviewer, with the pattern author close behind. The review must still be answerable to the eventual practitioner or manager who will rely on the admitted pattern.

Problem frame

FPF evolves by adding and revising patterns. Over time, the framework accumulates two kinds of risk:

  1. Admission risk — a newly authored pattern can be structurally compliant yet still fail on ontology, semantics, terminology conflicts and vagueness, scope, SoTA in related disciplines, or cross-context hygiene.

  2. Staleness risk — older patterns can remain internally consistent while drifting away from contemporary practice and newer parts of FPF, current internal vocabulary, or updated related governing patterns. The result is “quiet decay”: the pattern still appears clear, but becomes misleading, incomplete, or incompatible.

FPF already contains many checklists and constraints, but they are distributed across patterns and suites. Authors and reviewers therefore lack a single, repeatable way to answer: What should be checked, and how deep, before a pattern is admitted or kept?

Problem

Without a unified, explicit review pattern:

  • Different reviewers optimize for formal/template compliance and miss deeper ontological, semantic, and naming issues, producing bureaucratic output that does not improve the enforceable Conformance Checklist.
  • Authors “optimize for the visible checklist” and miss hidden requirements (lexical discipline, Bridge hygiene, SoTA‑Echoing quality, scope claims, delta‑class impact).
  • Older patterns accumulate conceptual staleness and diverge from current practice, current terminology, or current internal invariants.
  • The specification's normative content becomes harder to trust: compliance becomes a matter of reviewer taste rather than a repeatable gate.

Forces

ForceTension
Uniformity vs FitOne universal checklist is simple ↔ different pattern kinds carry different risks.
Rigor vs Editorial costDeep audits increase quality ↔ they must remain feasible for routine updates.
Stability vs EvolutionCanon should stay stable ↔ it must absorb new SoTA and correct mistakes.
Conceptual purity vs EnforceabilityCore must stay implementation-agnostic ↔ gates must still be actionable and auditable.
Local meaning vs ReusePatterns must remain context-bound ↔ authors want to reuse ideas across domains.
Freshness vs timelessnessSome claims should be evergreen ↔ others decay and must be refreshed on cadence.

Solution — Profile-based gates for admission and refresh

Establish Pattern Quality Gates (PQG): a conceptual review mechanism that applies profiles of checks rather than a single monolithic checklist.

A Pattern Check Profile (PCP) is a named bundle of check families. Profiles are additive: every review applies a baseline profile, then adds risk-driven profiles as needed.

Terminology note (disambiguation). PQG and PCP are editorial review constructs in the authoring plane (Part E). They are distinct from enactment and runtime gating constructs such as OperationalGate(profile), GateProfile, and GateDecision (A.21), which govern Work transitions and gate decision policies elsewhere in FPF.

Mint vs reuse. This pattern mints PQG, PCP, and the profile IDs PCP-BASE, PCP-MOD, PCP-PRAG, PCP-NORM, PCP-SOTA, PCP-BRIDGE, PCP-SUITE, PCP-P2W, PCP-TERM, PCP-DEONT, PCP-REFRESH, and PCP-ENTRY. It reuses existing FPF terms (e.g., Delta‑Class, DRR, Bridge, CL, SoTA Synthesis Pack) without changing their meanings.

Define the reviewed pattern or subset

A review SHOULD leave one findings-first run record against a named reviewed pattern or landing subset. The run MAY propose didactic restructuring or compact repair direction, but its primary requirement is to leave an independent review record that improves downstream usage and interoperability without relying on chat memory or reviewer taste.

A nontrivial pattern-quality review SHOULD state its quality-evaluation purpose before depth is selected. Use E.22 or an equivalent compact question frame to say whether this run is a floorEvaluation, exceptionalImprovementEvaluation, paretoTradeoffEvaluation, openQuestionDiscoveryEvaluation, absorptionEvaluation, or a declared combination. If the purpose is absent, E.19 treats the run as an admission-refresh blocker read, not as a request to raise every evaluated coordinate toward exceptional expression. When coordinate values, PatternQualityStatus, or all-4/all-5 claims are needed for one pattern version, the run opens or consumes an E.21 result instead of assigning those values inside E.19.

When the run opens or consumes E.21, E.19 treats E.21 as a hard pattern-quality evaluation, not as a selectable profile. The run record must reject an E.21 claim that omits required coordinates, omits ShortRationale, omits PrecisionRestorationProfile, uses inactive/triggered-coordinate language, narrows the requested use to make the result pass, or replaces coordinate values with blocker triage. Baseline triage can close an E.19 review-boundary result only when no E.21 quality value, all-4/all-5 claim, landing-quality claim, or pattern-improvement movement claim is being made.

If the aim is repeated improvement against an object-under-improvement evaluation, use E.23 for the repeated method. E.19 may supply a review profile and findings inside that loop, but the profile is not the loop method and the review result is not a quality value until the object-under-improvement evaluation evaluates the changed pattern version.

E.19 reviewer and reviewed-pattern wording is FPF pattern-quality gate wording. It governs FPF admission, refresh, return-for-repair, blocker, and review-profile claims, not E.21 coordinate assignment and not project-side publication interpretation, explanation interpretation, comparative review-unit use, or participation in a named project-side review relation. When those project-side relations are used, use the publication or project-side pattern that names the object being interpreted or reviewed.

Project-side reuse boundary. Use this boundary when an E.19 pattern-quality result is being reused as project certification, project evidence, safety-assurance material, gate input, release justification, compliance-assurance material, assurance material, work authority, or publication truth. The first E.19 move is to return the result to the governing FPF pattern-quality claim it reviews: admission, refresh, repair return, or selected pattern-quality boundary. If that result is cited for a project-side claim, the project-side governing relation must be opened for that claim named by value: A.10 for evidence/currentness, B.3 for assurance, A.20 for local CV status, A.21 for gate decision, A.15 for work, or another governing pattern when that claim needs one. The review result may be evidence about FPF pattern quality; it is not certification of the project world. Plain wording in the reviewed text remains ordinary unless it changes admissible use, evidence, gate, assurance, work, decision, or FPF pattern application.

Common wrong first interpretation. Pattern review passed means the project, release, publication, safety claim, or compliance claim is certified. First honest entry: E.19 returns only a pattern-quality result; any project-side reuse must name the project-side governing relation and its evidence or assurance source.

Misuse guard. A pattern-quality caution, return-for-repair result, or selected pattern-quality boundary result cannot be reused as project refusal or project approval unless a project-side governing relation states admissible and non-admissible use for that relation.

Formal/template defects (e.g. non-compliance with E.8 structure or not conforming to RFC deontic terminology) have lower review priority than semantic/ontological defects or non-SoTA Solutions, but they also MUST be recorded with the active repair boundary named.

E.g. if the header block is missing or incomplete, continue with ontology and semantic review first. Treat missing header fields as one mechanical defect to record with concrete repair direction (PCP-BASE #7), not as a reason to stop.

The run SHOULD give best-known Delta-Class (Δ-0…Δ-3) and record an initial impact radius (dependent patterns/tests/relations that need be changed due to pattern norms), using existing definitions where available (e.g., the LEX-AUTH protocol).

If the local process separates review from repair, direct reviewed-text patching, unified-diff output, or immediate remediation edits are optional local tactics rather than part of the core E.19 run record. The core requirement is one findings-first run record plus sufficiently precise repair direction.

Apply the baseline profile to every run

Every run MUST include PCP‑BASE as a triage baseline. Full-depth checking is selected only where the relevant risk is present; reviewer depth SHOULD prioritize the FPF-governed sections and enforceable requirements in E.19:4.2.1.

  1. Internal coherence (problem <-> conformance claim <-> solution) The Conformance Checklist matches Problem statement and the Solution (no "orphan requirements" and no "unclaimed requirements").
  2. Lexical discipline & reserved vocabulary Terms and registers follow lexical rules; ambiguous "everyday" synonyms do not silently replace kernel vocabulary.
  3. SoTA-Echoing minimum compliance (E.8) SoTA-Echoing satisfies the E.8 authoring requirements applicable to the pattern kind (Architectural vs Definitional), including explicit adopt/adapt/reject stances and the E.8 two-part SoTA test: current best-known problem-solving practice for the named practice question, and by-value incorporation into FPF-governed pattern loci. If a SoTA Synthesis Pack exists for the topic, SoTA-Echoing binds to it rather than forking an untracked narrative; any divergence of pattern norms from contemporary practice is explicitly stated as such. SoTA-Echoing MUST be non-decorative, MUST reflect best-known current practice rather than official status, source recency, institutional adoption, or merely popular defaults for the declared problem, and MUST govern the Solution and other FPF-governed sections, or those sections MUST justify divergence explicitly.
  4. Cross-pattern compatibility & impact radius Relations are consistent with declared dependencies and dependents; declared scope/impact is compatible or explicitly limited.
  5. Didactic grounding Archetypal Grounding is present and teaches the concept with concrete cases or references, not only abstractions.
  6. Reader-role fit The pattern body stays addressed to the intended FPF user rather than to FPF developers, package architects, reviewers, evaluators, or release/projection carriers. FPF-governed sections explain admissible use, costs, boundaries, FPF governing patterns named by value, project-side FPF kinds and references named by value, and related relation named by values in user terms. Architecture-placement, freeze/merge state, package-boundary rationale, reference boilerplate, quality/projection evidence, corpus-entry evidence, PatternQualityStatus, monolith-parity evidence, landing evidence, and broader package-development rationale stay in DRR, architecture documents, review handoff, E.21 result, E.19 run record, README/ToC/E.11/I.2, cards, retrieval/projection carriers, release/landing evidence carriers, companions, or ordinary reference apparatus unless they change the working reader's first admissible move.
  7. Template & section integrity This is lowest priority for review depth and SHOULD NOT consume effort that would displace ontology/semantics/modularity/slots/SoTA checks.
  8. Modularity & contradiction hygiene The pattern SHOULD NOT be overloaded or significantly expand requirements or dependencies without an explicit reason and impact record. Checks include: scope containment, split/refactor recommendations when warranted, and contradiction scans against neighbor patterns in Relations. The pattern SHOULD balance cohesion and coupling across FPF. If the pattern defines specialization or an abstraction stack, it SHOULD NOT mix slot interfaces or parameters from different abstraction positions; use explicit ⊑/⊑⁺ or Uses cuts instead.
  9. Substantive solution and locus adequacy Baseline triage includes a small reviewed-pattern-specific question set about the actual problem and current change: does the pattern still solve the stated problem, are decision loci and governing-pattern applications correct, are kind boundaries and selected companion or projection roles preserved, did anything get worse, are SoTA rows current enough for the claim they discipline, and is the applied apparatus neither too thin nor too heavy for that claim?
Triage: spend depth on FPF-governed sections without making reviews heavier

PQG is meant to increase semantic and ontological trust, not to turn every review into an exhaustive editorial audit on form. To keep reviews feasible while improving the important parts:

  • Treat FPF-governed sections and deontic requirements as the primary depth loci:

    • the pattern’s Problem frame, Rationale, and worked slices when a new family/profile/specialization would otherwise be intelligible only from project context,
    • reader-role fit in Problem, Solution, Consequences, Rationale, and worked slices whenever the draft risks mixing user guidance with package-development rationale,
    • the pattern’s Conformance Checklist (the enforceable conformance check set): keep items universal, cognitively ergonomic, not overly prohibitive, and avoid duplicating checks that belong to other patterns (modularity),
    • deontic clauses (MUST/SHALL/SHOULD/MAY) that define requirements on the authoring/validation plane (not laws of nature or mathematical facts; ensure an explicit conformance subject),
    • admissibility constraints (Invariant: / Well-formedness constraint:) that define valid models (cardinality, typing/kinds, totality) and are written as non-deontic predicates (no RFC keywords inside the predicate),
    • definitions and mint/reuse decisions (new terms, renamed terms, scope claims baked into names, names that are not overloaded and are properly chosen),
    • cross-context and cross-plane claims (Bridge hygiene and “sameness” assertions),
    • SoTA (when the pattern claims state-of-the-art rather than a popular-but-outdated solution or vocabulary),
    • substantive solution and locus adequacy: one reviewed-pattern-specific content pass checks whether the repaired text still solves the stated problem, assigns claim-bearing material to the correct governing loci named by value, preserves kind boundaries and selected companion or projection roles, keeps quality/projection evidence and role-turn correspondence out of the pattern unless the pattern's own EntityOfConcern and user move are that evaluation/projection work, and has not become either under-grounded or over-bureaucratic,
    • modularity and Slot discipline of A.6.5 that provide evolvability of FPF,
    • absence of contradictions in a pattern,
    • Relations that define compatibility and impact radius.
  • Treat low-signal text as “quick-pass” unless it changes meaning: headings, micro-typos, stylistic polish, and non-FPF-governed narrative refactors, including RFC-form deontic cleanup.

  • Do not block semantic review on template and RFC compliance defects. Missing header block fields (E.8 H-5), missing canonical sections, or a missing footer marker are fixable integrity defects. Record them as repair items and continue with the FPF-governed section checks in the same run.

  • Sentence-level precision matters on FPF-governed prose. Reviewers SHOULD inspect FPF-governed sentences for generic heads, claim-bearing qualifiers, overloaded trigger words, bare relation shorthand, and hidden process/API metaphors. The default repair order is: restore head kind, then qualifier claim kind or admissible-use boundary, then comparison criterion or escalation condition homogeneity, and only then judge whether a later Plain or coarsened rendering is admissible.

  • Precision-restoration distribution must be preserved. When an E.10 scan selects a non-local precision-restoration path, the run checks that E.10 remains the trigger and applicability pattern, E.10.ARCH carries the shared recovery architecture, the relevant realization pattern (A.6.P, C.2.P, C.30.P, C.16.P, C.16.Q, A.19.SPR, or another selected restoration pattern) performs the ontological unpacking, and affected patterns keep thin declarative pointers rather than local trigger registries or duplicate recovery algorithms.

  • EntityOfConcern and precision-restoration questions travel with the same triage. When the reviewed change touches EntityOfConcern, same-referent, slot/reference, alignment-path, role-boundary, consumer-disposition wording, description/publication-use guards, phrase apparatus, repeated boundary doctrine, architecture-placement rationale, package-boundary rationale, or quality/projection evidence, the run asks before acceptance: what is the pattern's own EntityOfConcern and first useful move; does the text state this pattern's own subject kind, action spine, practical delta, and bounded non-use before auxiliary material; which governing pattern carries any outside claim/relation/boundary; does the prose need F.19 before word/head/use restoration; do remaining word/head/use problems apply E.10, E.10.ARCH, F.18, or another relation named by value pattern; do role, method, work, evidence, assurance, gate, and decision claims remain with their governing patterns; and has every current-host consumer of the selected-family repair received a semantic, mechanical, compatibility, or not-triggered disposition. When E.21 is active, these questions are recorded through its PrecisionRestorationProfile rather than as separate local E.19 rows.

  • Design-time and run-time both count. The same precision discipline applies to FPF pattern prose and to any reviewed publication text, worked slice, or performed-work exemplar when that text is being assessed for admissibility, guidance, reuse, gating, release, policy, assurance, or action-selection use.

  • Report ordering (impact-first). In run outputs and remediation direction, prioritize findings on ontology, semantic, modularity and SoTA-related FPF-governed sections first; group low-signal formatting/typos into one compact tail finding unless they change meaning.

Add risk-driven profiles

PCP‑PRAG (Pragmatic utility & adoption) — Trigger: the pattern is Normative and claims practice guidance. Checks include: a visible first-reading recognition text early enough for a cold working reader; a recognisable first-minute working situation; one short Use this when or equivalent entry; a plain statement of what goes wrong if the pattern is missed; a plain statement of what the pattern buys in practice; the first admissible action-guiding move the user should take; a visible ordinary not this pattern when boundary; a minimally viable example; non-decorative Consequences/Anti-Patterns; at least one worked slice when the pattern is easy to misuse; a visible assurance text carrying declaration, guidance/check, modeling, and review/check scope; reader-fit consistency so that the assurance text does not silently widen or universalize the recognition-text claim; explicit practical payoff in user-facing prose; a short user-facing statement of the primary EntityOfConcern, relation record, or claim record and any minimal modeling lens when typed declaration material has FPF-governed use; nearby pairwise plain glosses for FPF-governed technical terms that appear before the heavier harness; a short working-reader implication for any SoTA-Echoing rows that carry explanatory work plus visible linkage to the worked cases or boundary slices they discipline; explicit primary working reader, concern, and viewpoint fields when several working-reader situations are being served; an explicit So what? adoption test; and, when the pattern claims universal or transdisciplinary reach, at least three heterogeneous recognition-text situations with F.16 preferred as the compact example-matrix template. If an E.10 trigger scan selects epistemic precision restoration during admission or refresh, PCP-PRAG treats type-correct-but-inert wording as a usability defect governed by E.2 P-2 and E.12: the run must name the remaining admissible reader move or the FPF pattern application and governing ontology that carry the claim, and must confirm any Plain recognition line maps back to the recovered Tech reading when both registers are used. A more expressive recognition line or intentional didactic metaphor may stay ordinary when it carries no FPF-governed use; when it carries ontological, evidence, causal, assurance, bridge, gate, work, decision, or admissibility claim kind or admissible-use boundary, that claim kind or admissible-use boundary must be recoverable through the recovered Tech reading or named FPF pattern application.

For a broad cleanup across several patterns, or any cleanup that touches FPF-governed Problem frames, Problem sections, first-use recognition text, archetypal grounding, examples, or worked slices, the run must leave a short didactic change account: improved, preserved, or harmed. Harmed blocks admission or refresh unless the same pass restores the working situation and first useful move, or names the FPF pattern application and governing ontology that carry the claim.

PCP‑MOD (Modularity and abstraction-boundary discipline) — Trigger: the reviewed pattern or subset shows scope creep or abstraction-boundary mixing (e.g., one pattern bundles universal core rules with frame-specific content and discipline-specific method semantics; or it mixes EntityOfConcern/Description/Spec roles in one object).

Checks include:

  • an explicit core vs extensions cut (universal invariants are factored into one stable “core”, and extensions reference it rather than re-stating or mutating it),
  • no conflation of specialization vs dependency: use ⊑/⊑⁺ for refinement/extension and Uses for pipelines; do not mix their semantics,
  • no conflation of package-form, governing-pattern relation, and package-relation roles: Pack vs Kit vs Suite vs Family vs Bundle vs Cluster vs Profile vs Overlay vs Record vs Umbrella are not interchanged, and the review states carrier status, governing-pattern relation, and package relation explicitly instead of leaving it implicit or varying it for style,
  • description-lane descriptions and their publications do not grow mechanism semantics; MVPK faces remain projections and do not become "the place of truth",
  • slot-discipline hygiene for any ordered specialization set: SlotKind invariance is preserved and inherited operations do not gain new mandatory inputs (A.6.5 / A.6.1 specialization discipline).

PCP‑REFRESH (Staleness & compatibility refresh) — Trigger: staleness signals are present (e.g., outdated SoTA rows, renamed/superseded Relations entries, terminology drift, or an explicit refresh window in LAT/DRR). Checks include:

  • refresh‑sensitive claims are identified (time‑bounded or ecosystem‑bounded) and either (a) updated with post‑2015 evidence and matching Solution changes, or (b) explicitly scope‑limited and labeled as historical lineage,
  • Relations are updated to current pattern IDs; deprecations/renames are handled via explicit continuity notes (no silent relabeling),
  • when one new or substantially revised pattern subset is being prepared for send or landing, the run explicitly checks which related governing patterns, governing-pattern constraints, companion patterns, Relations entries, or monolith-backed pattern sections require aligned edits so the subset does not land as one isolated local improvement; the run record states which of those updates are inside the claimed boundary now and which therefore remain outside that claimed boundary,
  • any long-lived companion, profile, check sheet, pattern-local companion row, review harness, or analogous selected non-pattern FPF kind-reference pair kept with the reviewed pattern or subset states its use question, governing pattern or selected non-pattern FPF kind-reference pair, admissible companion-only use, one real breakage if absent, and demotion or deletion condition when no such breakage exists.
  • the run records a Delta‑Class and impact radius; if the refresh causes Δ‑2/Δ‑3, it emits/updates a DRR pointer and triggers any required refresh and Bridge requirements defined elsewhere (E.15/F.15/F.9).

Trigger overrides are permitted but intentionally rare: a run MAY override a triggered profile only when it can show the trigger’s risk is genuinely absent in this case, and the record MUST name (a) why the trigger is a false positive here and (b) what compensating check(s) were applied instead.

PCP‑NORM (Normative guidance integrity) — Trigger: the pattern introduces or changes normative requirements, introduces new conformance items, or shifts downstream requirements. Checks include:

  • Delta‑Class (Δ‑0…Δ‑3) and impact radius are explicit (what breaks, who depends on this),
  • requirements are testable in principle (conceptually), scoped, and non-contradictory,
  • downstream patterns cited in Relations are compatible with the new guidance.
  • where the change is Δ‑2/Δ‑3 or a new normative pattern is being admitted: a DRR exists and references the PQG findings (pointer is sufficient; no duplicated prose).

PCP‑SOTA (Evidence and SoTA alignment) — Trigger: the pattern’s Solution asserts “best practice”, “state-of-the-art”, or introduces new synthesis claims. Checks include:

  • each “best practice” claim or SoTA claim in the Solution is explicitly bound to SoTA‑Echoing rows (or to SoTA Synthesis Pack identifiers when used), rather than floating as ungrounded prescription, and those rows identify best-known current practice rather than popularity alone,
  • the selected SoTA practice or source set answers the declared working problem and the relevant domain or practice tradition rather than merely justifying package placement, naming neatness, or pattern clustering,
  • each SoTA row changes at least one FPF-governed outcome for the pattern: what the user may do, what the user must not over-read, which FPF pattern application must be named, or which claim cannot be raised to release, policy, assurance, gate, action-selection, or adjudication use,
  • novel synthesis is not presented as established SoTA: it is either (a) framed as a scoped hypothesis with explicit limits, or (b) promoted into or registered as a SoTA Synthesis Pack entry before the pattern is admitted as normative guidance; a merely explanatory SoTA note that leaves the FPF-governed sections untouched is non-conforming,
  • where traditions disagree substantively, the pattern makes the disagreement visible and states whether it adopts, adapts, or rejects each relevant source idea instead of silently selecting one tradition,
  • retrieval or benchmark methods are used only when the relevant evidence relation is present; their dimensions do not become universal pattern-quality benchmarks,
  • refresh‑sensitive claims (those likely to decay) are explicitly marked with scope limits, timespan notes, or lineage labeling when appropriate.

PCP‑BRIDGE (Cross-context or cross-plane reuse integrity) — Trigger: the pattern imports claims, terms, or norms across contexts, disciplines, or reference planes. Checks include:

  • explicit Bridge usage where required (no silent identity by spelling),
  • Congruence / loss is made explicit where applicable,
  • any cross-plane reuse is explicitly acknowledged and its penalties do not leak into unrelated assurances.

PCP‑SUITE (Mechanism-suite integrity) — Trigger: the reviewed pattern or subset introduces or revises a suite-level Description that enumerates multiple distinct mechanisms (e.g., MechSuiteDescription or a suite specialization) and/or changes suite requirements, conformance pins, or suite protocols. Checks include:

  • the suite remains a Description-level object: it enumerates member U.Mechanism.EntityOfConcern refs and declares shared requirements/pins, but does not define mechanism blocks (OperationAlgebra, Transport, Audit, …) and is not used as a mechanism node,
  • membership has set semantics: mechanisms is duplicates-free and order carries no semantics; any intended ordering is expressed only in suite_protocols,
  • suite protocols are closed over membership: if suite_protocols is present, each protocol step references a member mechanism (no “step points outside the suite”),
  • the suite is not a family of implementations: it MUST NOT be encoded as a MechFamilyDescription (families remain “many realizations of one mechanism”, not “many mechanisms”),
  • the suite does not mint transport exceptions: any cross-context, cross-plane, or cross-kind requirement remains Bridge-only; loss or penalty handling stays with R/R_eff only; the suite does not embed CL/Φ/Ψ/Φ_plane tables (references/pins only),
  • CG/CN authority pins remain explicit references to the single governance card and legality gate: if suite protocols include numeric comparison/aggregation/scoring, they cite CG‑Spec (SCP + Γ-fold + MinimalEvidence) and (where applicable) CN‑Spec, rather than duplicating “local CG‑Spec-like” content,
  • suite protocols contain no hidden tails: if UNM/UINDM/ULSAM are required, the protocol expresses them as explicit Uses steps and suite audit requirements cite the chosen mechanism ids/refs (no “implicit normalization/aggregation inside score/compare/select”),
  • gate separation is preserved: mechanisms and guards use tri-state GuardDecision := {pass|degrade|abstain} and MUST NOT publish GateDecision or DecisionLog; block remains gate-level only (OperationalGate(profile)),
  • defaults remain single-sourced: portfolio mode, dominance regime, and unknown/failure behavior are either pinned in TaskSignature or one policy-assignment record, or not claimed; the suite does not define competing defaults,
  • when the suite claims reusable outputs, publish/telemetry is explicit and terminates via existing publication forms/faces (e.g., G.10 and/or PTM), not as a hidden tail inside a selection step.

PCP‑P2W (Planned baseline & slot-fillings seam integrity) — Trigger: the reviewed pattern or subset introduces or revises WorkPlanning records or publications that pin planned fillers for a slot-bearing description object's slots (e.g., SlotFillingsPlanItem or specializations), or introduces view projections of those records or publications. Checks include:

  • the PlanItem remains a WorkPlanning baseline (U.WorkPlan.PlanItem, kind = SlotFillingsPlanItem), not an execution log and not a mechanism,
  • planned slot filling stays WorkPlanning-only: plan items publish planned fillers/pins (ByValue or <RefKind>) and MUST NOT include launch values, FinalizeLaunchValues witnesses, gate decisions, or decision logs (these are U.WorkEnactment / gate-level only),
  • target and scope are explicit and non-leaky:
    • the item targets exactly one slot-bearing description via target_slot_bearing_description_ref,
    • target_slot_bearing_description_ref is a description-lane, edition-addressable slot-bearing ref (kit/suite) and MUST NOT be a U.Mechanism.EntityOfConcernRef,
    • the item carries explicit P2W references (bounded context; and CG-frame/path-slice/scope references when used for legality/selection baselines),
  • time is explicit: the item includes Γ_time_selector or Γ_time_rule_ref (XOR); implicit “latest/current” is nonconformant,
  • planned_fillings is the authority: duplicate slot_kind rows are nonconformant unless the slot-bearing description declares the slot multi-valued; any “indices” are derivable projections and are not maintained independently,
  • crossing information is referenced, not duplicated: the plan item (and any associated views) cite CrossingBundle/Bridge/policy-id pins rather than embedding CL/Φ/Ψ/Φ_plane tables or defining transport edges,
  • MVPK projections remain projections: any U.View face (TechCard, PlainView, InteropCard, or AssuranceLane) over a plan item MUST NOT add new claims, MUST NOT introduce “shadow defaults”, and MUST avoid “signature” language (signatures belong to EntityOfConcerns),
  • if a view publishes edition pins or makes claims about crossing/comparability/selection/launch, it MUST also carry the required audit/slot-target pins (UTS + Path pins, crossing pins, applicable guard-source pins); missing pins are treated as downstream fail-closed nonconformance.

PCP-TERM (Terminology & naming protocol) — Trigger: the pattern introduces new terms, new U.Types, new “unified names”, redefines existing labels, leans on FPF-governed phrases whose head kind or qualifier claim kind or admissible-use boundary is not yet restored, or uses FPF-governed trigger wording as if the word itself carried the needed kind. Checks include:

  • “mint vs reuse” decision is explicit,
  • naming follows the local-first naming protocol and avoids scope smuggling (roles/metrics/stages baked into labels; overloaded words used as terms with a local sense). Remediation SHOULD use F.18,
  • when PCP-TERM is selected, F.18 winner selection and A.6.P follow-through are one mandatory chain rather than two optional passes: the run records candidate heads or phrases reviewed, any kind-conflict findings and lexical-conflict findings, the provisional F.18 winner plus rejected candidates, and the resulting A.6.P survival result on the repaired phrase,
  • FPF-governed trigger wording must be classified before acceptance by semantic area, not by a local forbidden-word list. Typical classes include admissibility/deontic terms, evidence and review-check terms, action-invitation terms, characteristic/scale and stratification source labels, state-family terms, lifecycle/process terms, pattern-application wording, publication-form terms, and local equivalents. The run names the exact admissibility, deontic, evidence, review-check, reader-task, action-invitation, characteristic or scale, state-family bearer and value frame under A.19.SPR, EntityOfConcern and Description-episteme boundary, specification-use gate, control-layer relation, method, work-plan, work occurrence, authority reference, declarative FPF pattern application with governing ontology named by value or conformance claim or section, publication face, publication form, publication unit, or publication carrier, or selected companion role or base declaration named by the sentence,
  • generic heads and claim-bearing qualifiers are not accepted at face value in FPF-governed prose: the review restores the head kind first, and a narrowing qualifier by itself does not count as that restoration; only then does the review restore the qualifier claim kind or admissible-use boundary before deciding whether the phrase is admissible,
  • if a sentence compares, escalates, downgrades, or otherwise puts pressure on a phrase after that restoration, the review checks that the comparison criterion is ontologically homogeneous,
  • the run leaves one explicit account of the resulting primary EntityOfConcern, first useful move, outside work, and any role-word or package-form decision when the repaired wording still carries architectural claim kind or admissible-use boundary,
  • source-side old wording and continuity rules are respected.

PCP‑DEONT (Deontic clause hygiene: RFC keywords) — Trigger: the pattern conflates admissibility/validity constraints with deontic obligations (e.g., uses RFC keywords where a non-deontic Invariant: predicate is required). Checks include:

  • Deontic requirements are expressed with RFC-style keywords (see H-8);
  • obligations are not smuggled into prose as informal imperatives. Admissibility/validity constraints are stated non‑deontically as Invariant: / Well‑formedness constraint: predicates and referenced from the Conformance Checklist when enforceable.
  • Subject discipline for RFC keywords. If a sentence uses RFC keywords, its grammatical subject MUST be an agent or a specified published record/model whose required content is being constrained (author, reviewer, record, published model). RFC keywords MUST NOT modify modeled-world entities (e.g., “Earth”, “RoleAssignment”, “Role”, “holon”) — express those as Invariant: / Well‑formedness constraint: predicates instead, and (if needed) reference them from CC items.

PCP-ENTRY (Pattern-entry discoverability and entry-orientation changes) — Trigger: one change substantively affects how one reader recognizes, selects, rejects, or reclassifies one applicable governing pattern body, applicable projection role, first-entry pattern-comparison set, Problem-frame recognition signature, expanded entry-disambiguation case, or entry lexical-query cue.

Trigger classification:

PCP-ENTRY is an explicit profile identifier under the existing Pattern Check Profile family. It reuses the PCP profile kind; it is an editorial review profile, not a runtime gate, not GateProfile, not a workflow state, and not a new route registry. PCP-ENTRY is risk-triggered rather than universal. Use one lead review profile for the change, and import other profiles only for their specific failure mode.

Use this risk-trigger model:

  • Trigger class 0 — micro-edit punctuation, formatting, typo repair, grammar, or meaning-preserving compression with unchanged pattern-selection effect. No PCP-ENTRY, no compact pattern-local note, no evidence mode, and no parity scan are required.

  • Trigger class 1 — local recognition wording repair one improved Use this when, Not this pattern when, or one removed sequence-implying phrase with unchanged candidate-pattern set and unchanged governing-entry or applicable-projection-role boundary. Only the four-question core check is required.

  • Trigger class 2 — substantive entry, companion, or projection change one new or changed README scenario, ToC query cue, E.11 entry-distribution locus, I.2 expanded entry-disambiguation case, pattern, or applicable projection role newly treated as entry-bearing, one changed wrong-pattern or governing-entry or applicable-projection-role boundary, one changed local first-entry selection effect, or one substantive lexical-query cue change. The author leaves one compact pattern-local note, runs the core check, and adds at most one selected risk check if needed.

  • Trigger class 3 — multi-role or high-risk public entry change one change affecting several selected projection or companion roles together, one public-entry rewrite, one often-misclassified entry-recognition role, or one newly introduced first-entry pattern-comparison set. The author runs the core check and adds only the relevant selected risk check, usually parity, wrong-pattern, public-entry, or expanded-entry-disambiguation-case adequacy.

  • Trigger class 4 — retrieval-facing, observed-failure, or measured-improvement change one retrieval-facing companion or projection role changes, one observed misretrieval or repeated search failure is being repaired, or the patch itself claims measured discoverability improvement. One selected evidence mode may be required, but benchmark-style reporting is not the default.

  • Trigger class 5 — normative authority, kind, or durable-name change one entry-selection split, stable-name settlement, label-family change, or other normative architectural rewrite is in scope. DRR, PCP-TERM, and PCP-MOD are the lead decision or review profiles as applicable; PCP-ENTRY reviews only the entry-facing effects.

Ordinary non-triggers include:

  • punctuation, formatting, and typo fixes;

  • meaning-preserving prose tightening;

  • one bare mention of a pattern without changed entry-selection effect;

  • local wording repair that preserves the current first honest entry-recognition role, candidate-pattern set, governing-entry or applicable-projection-role boundary, and first-entry pattern-comparison-set membership.

PCP-ENTRY stays one narrow additive review profile, not one super-profile that absorbs PCP-PRAG, PCP-MOD, PCP-TERM, PCP-NORM, and every other review/check scope. It composes with PCP-PRAG, PCP-TERM, and PCP-MOD; it does not replace them. Its distinctive object is changed pattern-selection effect, changed first-use entry-recognition role, changed first-entry pattern-comparison-set membership, changed tempting-wrong-pattern boundary, changed Problem-frame recognition role, changed expanded entry-disambiguation case effect, changed entry lexical-query cue, and changed semantic companion-or-projection role parity.

Its default review scope is one small core triggered check:

  1. No workflow implication Entry text does not imply mandatory sequence, control transfer, handoff, or publication, carrier, or record sequence unless another governing entry or applicable projection role explicitly governs that semantics.

  2. Governing-entry boundary preserved Entry, index, and lexical-query companion roles do not redefine the governing pattern body's Problem or Solution.

  3. First honest entry-recognition role preserved The change does not make the first entry-recognition role or case signal misleading.

  4. No duplicate high-detail companion or projection role The change does not create one new stale echo or one second high-detail companion or projection role outside the one applicable governing pattern body or applicable projection role already named for the claim.

A change pays only the review cost of the concern it actually changes. Learning-order edits do not trigger PCP-ENTRY unless they also change candidate-pattern set, governing-entry or applicable-projection-role boundary, first honest entry-recognition role, or first-entry pattern-comparison-set membership. Lexical-only edits do not trigger extra entry-review scope unless they change pattern-selection effect or entry recognition. Retrieval fixtures are not required unless retrieval-facing behavior is explicitly claimed, one machine-consumed projection is in scope, or one observed misretrieval is being repaired.

When the risk warrants more than that core check, the run may add only the relevant selected risk checks:

  • one parity check when more than one pattern-entry discoverability-bearing projection changes;
  • one wrong-pattern check when known misclassification is present;
  • one lexical check when subject-language divergence is substantive;
  • one expanded-entry-disambiguation-case check when I.2 changes or one high-risk first-entry pattern-comparison set still lacks depth;
  • one public-entry check when coarse public entry wording substantively changes entry-selection effect or carries high public-entry risk;
  • one retrieval check when the change is retrieval-facing or repairs one observed retrieval failure.

Substantial discoverability changes leave one compact pattern-local note in the current DRR, PCP record, patch note, or run record. That pattern-local note may stop at one explicit rationale when the risk is already controlled by governing-entry or applicable-projection-role inspection, companion-or-projection role partition, or one local wording repair. It is not a separate review record unless the change is high-risk, disputed, public-facing with substantive entry risk, or retrieval-facing.

When one compact pattern-local note is needed, it names only the changed companion or projection role, the affected first-entry pattern-comparison set or pattern, the changed first-use entry-recognition role or recognition signature, the governing entry or applicable projection role for the claim or projection role, and the selected check if any.

One compact risk-triggered gate is enough here:

Change shapeDefault checkAcceptance signal
typo, grammar, formatting, meaning-preserving compressionno evidence run beyond ordinary reviewcurrent entry-recognition role, governing-entry or applicable-projection-role boundary, and companion or projection role remains unchanged
one Problem-frame recognition-signature wording change or one wrong-pattern clarificationreviewer-only entry checkno workflow implication and no governing-entry or applicable-projection-role drift
one README scenario, ToC query cue, E.11 entry-distribution locus, I.2 expanded entry-disambiguation case, or changed candidate-pattern setpattern-selection or wrong-pattern checkintended applicable governing pattern body or one admissible candidate-pattern set is recoverable without one false mandatory sequence
one lexical-hook changelexical query checksubject-domain phrasing recovers the governing entry or applicable projection role without uncontrolled alias drift
two or more projection or companion roles change togethercompanion-or-projection role parity checkone governing entry or applicable projection role stays unique and the changed companion or projection roles agree on first-use entry-recognition role, wrong-pattern boundary, projection-only status, and no claim beyond the Core pattern body's admitted use; they need not share identical wording or examples
one high-risk public-facing or substantively changed first-entry companion or projection role changescold-reader recognition taskone reader can recover the intended applicable governing pattern body or admissible candidate-pattern set under the named first honest entry-recognition role
one retrieval-facing companion or projection role changes or one observed misretrieval is repairedretrieval or RAG fixtureretrieval returns the governing entry or intended projection cue before one stale echo, and answer-to-governing-entry faithfulness remains intact

Empirical evidence is required only when the change is:

  • high-risk;
  • disputed;
  • retrieval-facing;
  • repeatedly misclassified;
  • public-facing with substantive entry-selection change, repeated failure, or one measured-improvement claim;
  • or itself claims measured discoverability improvement.

PCP-ENTRY-E4 is selected only when retrieval-facing behavior is explicitly claimed, one machine-consumed projection is in scope, or one observed misretrieval is being repaired. Public-facing changes with substantive entry-selection risk usually select PCP-ENTRY-E1. Lexical-hook changes usually select PCP-ENTRY-E3. Changes across multiple projections or companion roles usually select PCP-ENTRY-E5. Observed search or query failures usually select PCP-ENTRY-E6, optionally together with PCP-ENTRY-E3 or PCP-ENTRY-E4 when the failure is lexical or retrieval-facing.

The following evidence modes are selected high-risk tools, not one suite to exhaust on ordinary authoring passes. Selected evidence modes may include:

  1. PCP-ENTRY-E1 — cold-reader recognition or pattern-selection task Given one real case signal, can one reader recover the intended applicable governing pattern body or one admissible candidate-pattern set? One tiny micro-task is enough:

    Given this entry-recognition phrase, name:
    1. the first candidate pattern,
    2. one tempting wrong pattern,
    3. the admissible entry stop,
    4. the governing entry or applicable projection role.
  2. PCP-ENTRY-E2 — wrong-pattern and wrong-entry trap Does the companion or projection role actively prevent the most tempting wrong pattern or wrong family?

  3. PCP-ENTRY-E3 — lexical query check Does subject-domain phrasing retrieve the governing entry or applicable projection role without uncontrolled aliases?

  4. PCP-ENTRY-E4 — retrieval or RAG fixture Does retrieval recover the governing entry or applicable projection role under exact-ID or keyword phrasing, under semantic paraphrase phrasing, and under projection-vs-governing-entry ambiguity, while keeping retrieved companion material, source faithfulness, stale echoes, and post-rationalized citation-like material distinct from the applicable governing pattern body?

  5. PCP-ENTRY-E5 — companion-or-projection role parity check Do the companion or projection roles, plus any explicit absence note, preserve the same first-use entry-recognition role, governing entry or applicable projection role, wrong-pattern boundary, projection-only status, and no-claim-beyond-Core claim without requiring identical wording, rows, or examples?

  6. PCP-ENTRY-E6 — observed failure or query-log capture Does one observed misretrieval, wrong-pattern loop, or repeated query miss still survive after the repair, or has the failure actually been removed?

Tiny golden case bank for regression and worked examples

One tiny golden case bank is enough here. It is a review-regression echo, not the canonical entry inventory: rows 1-4 mirror README scenarios, E.11 entry-distribution loci, and I.2 expanded entry-disambiguation cases that already carry entry companion or projection roles, while rows 5-6 add review-specific search and retrieval stress cases. E.11 and I.2 remain the governing entry companions; this bank only tests whether a change preserved them. It is not one benchmark suite and does not require universal empirical review for ordinary wording or companion-or-projection role edits. A run may cite one relevant golden case or state that none is relevant. It does not need to execute the whole bank. It keeps a stable set of recurring entry-recognition roles recoverable across hardening passes:

Casecase_signalexpected_first_entry_pattern_comparison_setcandidate_patternstempting_wrong_pattern_or_wrong_relationadmissible_entry_stopcompanion_or_projection_roles_that_helpprojections_that_do_not_define_semantics
1“we need a shortlist, not one winner”comparison / pool / selected-set publication pattern-comparison setA.19.CN, A.17-A.19, C.18, C.19, G.0, and G.5 when selected-set publication is claimedtreating C.11 as one one-off choice when the real entry-recognition role is selected-set publication or candidate-set stabilizationadmissible candidate-pattern set stabilised or selected-set publication openedREADME scenario or E.11 entry-distribution cue, one pattern Problem frame, one expanded entry-disambiguation case if compact cues still failone README blurb, one thin echo, one lexical-query row alone
2“we have a vague cue, not yet a claim”pre-articulation cue pattern-comparison setC.2.LS, A.16, A.16.1, B.4.1, B.5.2.0forcing the cue into one endpoint-claim, quality, or assurance pattern too earlyentry-recognition-reclassified or cue preserved for the admissible next entry-recognition roleREADME scenario or E.11 entry-distribution cue, one pattern Problem frame, one case-linked I.2 expanded entry-disambiguation case when neededone coarse public entry projection alone
3“this is the same EntityOfConcern re-expressed for another audience”same-EntityOfConcern rewrite pattern-comparison setA.6.3.CR, A.6.3.RT, E.17.EFP, E.17.ID.CRminting one second U.Episteme for the same claim or one second competing explanatory lane instead of one same-EntityOfConcern rewritewrong-pattern-rejected or same-EntityOfConcern rewrite openedone expanded entry-disambiguation case, one pattern Problem frame, governing-entry pointerone parallel explanatory blurb treated as one second governing pattern
4“the API says X”boundary-claim unpacking pattern-comparison setA.6, A.6.B, A.6.C, A.6.P, C.16.Q, A.6.A, E.17treating one boundary phrase as one agent duty, promise, quality verdict, or generic agreement paragraph without atomic claim assignment or quality-term repair with recovered characteristic and scaleboundary-claim-pattern-opened, quality-term-repair-exited, or atomic claim set openedone boundary-focused E.11 entry-distribution cue, one pattern Problem frame, one expanded entry-disambiguation case where interface/access/confused-quality wording is commonone query cue or public entry projection treated as the governing entry
5“I found a pattern by search, but I am not sure it is the right one”one pattern-local recognition-signature case under the selected pattern-comparison setone candidate applicable governing pattern body plus one case-near governing pattern when neededone lexical near-match or same-family pattern without governing-entry fitnon-use-confirmed or pattern-selectedone pattern Problem frame, one E.11 entry-distribution cue, one lexical-query hookone search-query row alone
6“the LLM retrieved a helpful-looking paragraph but not the pattern”one retrieval-facing first-entry pattern-comparison caseone applicable governing pattern body plus one applicable projection roleone stale thin echo or one projection-only companion role answered as if it were the governing entrygoverning-entry-opened or expanded-entry-disambiguation-case-neededone governing-entry reference, one projection-only status marker, one retrieval-facing pointer to the applicable governing pattern bodyone thin echo chunk without governing-entry reference or projection-only cue

These six cases are enough to keep:

  • entry-recognition consistency;
  • wrong-pattern or wrong-entry rejection;
  • admissible entry-stop honesty;
  • lexical-query discipline;
  • thin-echo retrieval hygiene;
  • and governing-entry and projection separation recoverable as the amendment lands.

When one empirical or retrieval evidence run is actually selected, the run makes recoverable only the fields needed by that run, such as:

viewpoint_class
task_prompt_or_query
expected_governing_entry_or_admissible_candidate_set
near_miss_patterns_or_projection_roles_if_any
time_budget_if_relevant
success_criterion_if_relevant
success_or_failure_note
observed_failure_mode_if_any
rationale_or_repair_action

When retrieval evidence is selected, keep retrieval result, answer faithfulness, and stale-echo result distinct without forcing benchmark-style reporting on ordinary edits. One minimal retrieval fixture checks exact ID or keyword retrieval, semantic paraphrase retrieval, projection-vs-governing-entry disambiguation, and, when thin echoes are used, thin-echo governing-entry reference presence. Ordinary local guidance stays prose-only rather than minting one stable governing-entry reference by default.

Common hardening accounts are triggered by review need

When one common hardening concern has FPF-governed use, is disputed, or is explicitly invoked by the reviewed pattern or subset, the run record names the checked source and finding. Otherwise absence is ordinary and does not require a by-value absence recital.

Use triggered accounts only for the selected entry-recognition role:

  1. Usability and working-reader fit. Record this when first-reading recognition text, assurance text, first-minute working-reader usability, practical payoff, worked slices, primary-reader fit, or E.8 / E.12 / E.13 / E.14 / E.17.* / F.16 checks carry the finding or acceptance decision.
  2. Scenario / anti-case / utility-fit source set. Record this when a scenario pack, anti-case corpus, pilot bank, utility tree, fitness catalog, or analogous source is actually used or substantively disputed.
  3. Packaging, governing-pattern relation, package relation, and shipping-fit. Record this before any send-facing, landing-facing, monolith-facing, or governing-pattern relation or package-relation state claim. Do not require it for ordinary local wording repairs.
  4. Domain-tightened profile depth. Record this when a domain-specific profile-depth note actually tightens a selected profile or resolves a finding.
  5. Accepted-decision or accepted source-material carry-through. Record this when the review work states that accepted decisions from an accepted DRR, returned-finding set, accepted intake, architecture source material, or other accepted source material named by value are implemented in or discharged by the E.19 reviewed pattern or subset. The run record assigns accepted decisions and conformance subjects to loci inside that reviewed pattern or subset or to a named governing FPF pattern, companion document, record, or accepted source material, and classifies each as expressed sufficiently, expressed partially, not expressed and blocking, carried by a direct accepted-source-material consultation condition, correctly absent because rejected or not triggered, inherited unchanged, or outside the reviewed pattern or subset with a named governing FPF pattern, companion document, record, or accepted source material. This account does not rename an E.17.ID.CR comparative review unit, PublicationUnit, publication form or face, source-pinned interpretation case, document whose accepted-source-material, evidence-source-material, architecture-source-material, or review-source-material role is named, or project-side review relation as an E.19 reviewed pattern or subset; when those are present, name the governing-pattern kind and reference and assign carry-through to it or to a named governing FPF pattern, companion document, record, or accepted source material.

For PCP-ENTRY, the ordinary compact pattern-local note remains enough unless one of the triggered concerns above is genuinely present.

Decision outcomes

A PQG run MUST end with (a) one compact list of blocking findings and (b) one concrete remediation-direction account.

Remediation payload. The run MUST provide repair direction precise enough that one independent repair pass can adopt it into the reviewed text without reinventing the diagnosis. The core requirement is findings-first traceability, not direct patch emission.

Precision-remediation order. When a defect sentence combines a generic head, a claim-bearing qualifier, and mixed comparison-criterion pressure, remediation SHOULD repair them in that order: restore head kind, then qualifier claim kind or admissible-use boundary, then comparison-criterion homogeneity. A narrowing qualifier does not by itself repair the head-kind defect. Only after those repairs may the run keep or reintroduce a Plain, didactic, or coarsened restatement, and only if the more precise upstream interpretation remains recoverable.

Kind-restoration closure. A remediation direction or accepted repair does not close a precision-restoration finding merely because the old trigger word disappeared. For every wording, naming, or phrase-apparatus repair that changes FPF-governed text, the run record must recover the pre-repair kind, relation or claim kind, admissible use, and scope, then the post-repair kind, relation or claim kind, admissible use, and scope. If the repair narrows, widens, splits, or changes the kind, the run records the accepted decision or leaves the finding blocking. A lexical substitution without this account is still an open finding.

Report ordering (impact-first). The blocking findings are the primary review output. Remediation directions accompany them and SHOULD be listed in descending order of expected impact on semantic trust (FPF-governed sections first). Template-only issues belong at the end unless they hide missing content.

Budget discipline (anti-form-only review). If the run identifies semantic defects in FPF-governed sections, remediation direction MUST prioritize those fixes; purely mechanical edits (formatting, micro-typos) MUST be minimized and MUST NOT dominate the review by volume.

Noise discipline. The run record is a human-facing audit trail. It SHOULD stay sparse: list findings, boundary exceptions when any exist, repair direction, and decisions; no per-check pass recital is needed when no defect was found.

Archetypal Grounding — Tell–Show–Show: System / Episteme

ScenarioU.System groundingU.Episteme grounding
TellA safety-critical engineering team proposes a new pattern describing how to gate a subsystem before deployment. The draft looks polished, but it quietly imports domain terms, assumes cross-team equivalences, and introduces requirements that are not listed in the pattern checklist.A research group refreshes an older pattern that summarizes how to evaluate evidence-sufficiency class. The pattern still appears clear, but its SoTA references and terminology no longer match current practice, and its Relations point to patterns that were renamed or superseded.
Show (failure without PQG)Reviewers focus on whether the idea is good and whether the template exists. The pattern is admitted, but later users disagree on what it requires because the Conformance Checklist is incomplete and key constraints are only in prose.The pattern remains unchanged because “nothing looks broken”. Over time, it becomes a conceptual fossil: newcomers treat it as current guidance, but it encodes an outdated stance and stale vocabulary.
Show (repair with PQG profiles)PCP‑BASE finds missing internal coherence (requirements in prose not reflected in CC). PCP‑TERM finds naming drift and scope-smuggling in new terms. PCP‑BRIDGE finds implicit cross-context identity claims without explicit alignment. The findings-first run record then names one repair pass before admission, and the final CC becomes the canonical conformance body.The run record leaves one explicit decision: update SoTA‑Echoing with post‑2015 guidance and appropriate Solution changes, limit the scope to “historical lineage” where appropriate, and update Relations to current dependencies. The refreshed pattern becomes trustworthy again, and any remaining historical content is clearly labeled as such.

Bias-Annotation

Lenses tested: Gov, Arch, Onto/Epist, Prag, Did. Scope: Universal (applies to all patterns and all clusters).

Bias risks and mitigations:

  • Governance bias (Gov): reviewers may over-prioritize compliance signals and under-prioritize teaching value. Mitigation: PCP‑BASE includes didactic grounding and internal coherence checks and priority for ontology and semantics, not to form.
  • Epistemic monoculture (Onto/Epist): SoTA‑Echoing can become single-tradition name-dropping. Mitigation: require explicit multi-tradition coverage and usage of F.18 for neutral naming.
  • Pragmatic bias (Prag): a pattern can be “correct” yet unusable. Mitigation: consequences and anti-patterns remain mandatory sections, surfacing trade-offs and misuse paths.
  • Didactic bias (Did): narrative quality can be mistaken for truth. Mitigation: conformance and SoTA‑Echoing sections bind claims to explicit requirements and lineage.

Conformance Checklist

IDRequirementPurpose
CC-E19-1 (Baseline triage is mandatory).Every PQG run MUST apply PCP-BASE to the reviewed pattern or subset as baseline triage. If that triage shows no present ontology, usability, SoTA, boundary, naming, or authority risk beyond a small mechanical repair, the run may close with that repair direction without opening a full-depth audit or every risk-selected profile family. This closure is an E.19 review-boundary result, not an E.21 quality value. It cannot support an E.21 coordinate value, PatternQualityStatus, all-4/all-5 claim, landing-quality claim, or improvement-movement claim unless a complete E.21 result with required coordinates, ShortRationale, evidence basis, and PrecisionRestorationProfile is also produced or consumed.Ensures one shared triage floor across pattern kinds without turning every run into a full audit or a substitute quality measurement.
CC-E19-2 (Profile selection is auditable).The run record MUST state (a) the selected PCPs, (b) the risk reason for each non-BASE profile, and (c) any override decisions. Any override of a risk-indicated profile MUST record why the risk is genuinely absent and what compensating check(s) were applied instead. The run record MUST account for the whole current profile set rather than only the selected profiles or the easiest visible risk family; a deontic-only or selected-stack-only recital is nonconforming.Makes depth decisions repeatable and reviewable.
CC-E19-3 (Delta-Class & impact for breaking change levels).If the run proposes or accepts a change that is Δ-2/Δ-3 (per E.15), the run record MUST include Delta-Class, an impact radius, and a DRR pointer; it MUST confirm that required refresh and Bridge requirements are triggered where applicable.Keeps evolution controlled and compatible with downstream dependencies.
CC-E19-4 (Conformance-claim coherence is enforced).Remediation MUST eliminate “orphan” requirements and “unclaimed” requirements by aligning the reviewed pattern’s Conformance Checklist, deontic clauses, and admissibility constraints with its Solution.Preserves the CC as the enforceable conformance check set.
CC-E19-5 (Triage & noise discipline).The run SHOULD prioritize FPF-governed sections and deontic requirements (e.g. CC, content of deontic clauses and content of admissibility constraints, definitions, Relations, SoTA, modularity) and keep purely mechanical edits (e.g. RFC-form deontic cleanup) minimal. Template defects MUST be fixed before admission (or before closing a refresh run) but MUST NOT be used to skip semantic review.Improves semantic trust without turning review into form-only compliance.
CC-E19-6 (Findings-first remediation direction).The run output MUST include one compact list of blocking findings plus concrete remediation direction, ordered by semantic impact (FPF-governed sections first). Findings stay primary; direct patch text is optional local process tactic, not the core E.19 run record.Ensures actionability and independent repeatability without collapsing review into repair.
CC-E19-7 (Recognition text, assurance text, and self-containment).Admission or refresh runs for new and substantially revised patterns MUST check that a first-reading recognition text appears early enough for the intended reader, that the heavier assurance text remains visibly second rather than becoming the first real point of entry, and that the assurance text does not silently shift the recognition-text claim. The run MUST check for a recognisable working situation, what goes wrong if the pattern is missed, what the pattern buys, the first admissible action-guiding move the user should take, and an ordinary not this pattern when boundary; for any FPF-governed typed declaration or modeling lens, the run MUST confirm that a short user-facing statement exposes the primary EntityOfConcern, relation record, or claim record and the minimal lens that keeps it reviewable; the run MUST also check that the primary EntityOfConcern, relation record, or claim record keeps one stable kind across title, opening role, declaration role, worked slices, and related-pattern or companion guidance named by value rather than drifting between the named primary EntityOfConcern, an act, a work-result record, and carrier-placement labels. When a broader umbrella name and a narrower operative branch are both used, the run MUST check that the recognition text makes that stack explicit enough to identify the umbrella, the active branch, the primary EntityOfConcern, the move, and the wider work or process that still remains outside. The recognition text MUST start from a recognisable problem-owning domain or practice moment whenever that can be done without loss of precision, rather than opening first with internal package architecture or taxonomy language. Early FPF-governed technical terms MUST receive nearby pairwise plain glosses; transform-like families MUST carry concrete worked slices plus ordinary-vs-FPF-governed wording guidance where needed; and any SoTA-Echoing used as explanatory grounding MUST state a short practitioner or manager implication plus visible linkage to the worked cases or boundary slices it disciplines. If SoTA or practice tradition has FPF-governed use, the run MUST check that primary-EntityOfConcern choice, narrowed-branch choice, and practical payoff remain answerable to the relevant domain or practice rather than only to internal package architecture. If a pattern claims universal or transdisciplinary usefulness, the run MUST check that this breadth is already demonstrated in the recognition text through at least three heterogeneous situations, with F.16 preferred as the example-matrix template.Prevents architecturally correct but reader-opaque patterns and keeps broad claims from appearing only late in the assurance text.
CC-E19-7a (Epistemic precision cleanup cannot leave inert recognition).If admission or refresh includes E.10-triggered epistemic precision restoration, the run MUST check that the recognition text remains useful after overread removal under E.2 P-2 and E.12. The run fails this check when repaired wording is typed and precision-repaired but no longer tells the intended working reader why the distinction matters, what remaining admissible reader move exists, or which FPF pattern application and governing ontology carry the claim. When the cleanup touches FPF-governed Problem frames, Problem sections, first-use recognition text, examples, or worked slices, the run MUST also state whether the didactic function was improved, preserved, or harmed. When both Tech and Plain registers are used, the run MUST check that Plain or didactic recognition wording either stays ordinary because it carries no FPF-governed use, or maps back to the recovered Tech reading under E.10:6.2 when it carries ontological, evidence, causal, assurance, bridge, gate, work, decision, or admissibility claim kind or admissible-use boundary. The run must preserve intentional didactic metaphors when they are ordinary recognition aids or when their claim kind or admissible-use boundary remains recoverable from the recovered Tech reading. The run also fails this check when more expressive recognition wording carries such claim kind or admissible-use boundary without recovery through the recovered Tech reading or named FPF pattern application.Prevents pattern admission or refresh from accepting precision-repaired but practically inert prose, and prevents readability repair from reintroducing overread.
CC-E19-8 (Sentence-level precision restoration).FPF-governed sentences MUST be reviewed for generic heads, claim-bearing qualifiers, overloaded trigger words, bare relation shorthand, hidden slot/use-position shorthand, and hidden process/API metaphors. An E.10 trigger scan closes sentence-level precision only for not-triggered and local lexical-repair outcomes. When the scan selects episteme/publication/source-use wording: episteme, publication, view, face, carrier, source text, FPF transfer, pattern application, or project-side claim kind or admissible-use boundary, the run MUST apply C.2.P or record the false-positive reason by value; E.10 alone is then not a closed check. When the scan selects state-family wording such as state, status, posture, readiness, stance, or currentness, the run MUST apply A.19.SPR or the already-recovered governing pattern and state-like field; E.10 alone is then not a closed check. A narrowing qualifier does not by itself restore head kind. The default repair order is head kind first, qualifier claim kind or admissible-use boundary second, slot/use-position third when the object appears inside a relation/signature/lens position, and comparison-criterion homogeneity fourth. A changed wording closes only with a KindRestorationCheck: pre-repair kind/relation/slot-or-use-position/admissible use/scope, post-repair kind/relation/slot-or-use-position/admissible use/scope, or not triggered/ordinary prose/already satisfied/blocker disposition with loci. When broad umbrella words such as interpretation, reading, review, surface, document, or artifact carry architectural claim kind or admissible-use boundary or other FPF claim kind or admissible-use boundary, the run MUST also restore whether the text names an umbrella, a narrowed branch, a primary EntityOfConcern, a first useful move, or wider work/process outside that selected EntityOfConcern or claim before that wording is allowed to carry architectural claim kind or admissible-use boundary. When naming or terminology repair has FPF-governed use, the run record MUST leave one explicit F.18 -> A.6.P account on disk: candidate heads or phrases reviewed, mint-vs-reuse decision, provisional F.18 winner plus rejected candidates, any kind-conflict findings and lexical-conflict findings, the A.6.P survival result on the repaired phrase, and the resulting primary EntityOfConcern, first useful move, slot/use-position when live, and outside-work interpretation if the wording still carries architectural claim kind or admissible-use boundary.Keeps controlled technical writing from collapsing into free shorthand or false precision.
CC-E19-9 (Package-form, governing-pattern relation, and package-relation role-word discipline).Reviews MUST check that role words such as primary carrier, specialization, profile, overlay, family, bundle, cluster, suite, pack, kit, record, and umbrella match the actual ontology of the case and do not drift by stylistic substitution. When naming or ontology repair introduces or retains one head already occupied elsewhere in FPF, the run MUST explicitly account for that occupied-kind / occupied-head conflict and say whether the same occupied meaning is intentionally reused or instead blocked as a collision.Keeps governing-pattern relations and package relations, review roles, and package forms semantically legible.
CC-E19-10 (Reader-role discipline).Reviews MUST check that every pattern host or monolith section is written for the intended FPF user, that any multi-reader draft makes its primary working reader, concern, and viewpoint explicit enough, and that package-development reasoning about isolation, landing form, freeze or merge state, later promotion, safest move, blast radius, deferral state, developer/reviewer/executor correspondence, or quality/projection state stays in separate companion, architecture, evaluation, review, projection, release, or landing carriers. The run record MUST name the pattern sections scanned for this leak family and any repaired or still-informative exceptions.Keeps reviews from accepting conceptually correct but role-confused patterns.
CC-E19-10a (Quality/projection carrier leakage).Reviews MUST check whether any pattern text, including notes, appendices, Relations, Rationale, SoTA-Echoing, worked slices, examples, tables, and Conformance Checklist, contains corpus projection, README/ToC/E.11/I.2 alignment, retrieval/cold-reader evidence, monolith parity, landing evidence, PatternQualityStatus, all-4/all-5 posture, developer/reviewer/executor correspondence, or other quality-carrier evidence as pattern content. This is a role-based check, not a lexical search: if the sentence role is developer, reviewer, executor, evaluator, projection, landing, or release evidence about the pattern version, it belongs outside the pattern even when the words are ordinary. If the evidence does not constitute the pattern's own admissible user move, the run MUST return it to the E.21 result, E.19 run record, README/ToC/E.11/I.2, card/retrieval/projection carrier, or release/landing evidence carrier, and name the remaining user-facing move or boundary if one exists.Prevents review and projection proof from becoming pattern prose.
CC-E19-11 (Precision before relaxation).If remediation preserves or introduces a Plain, didactic, or coarsened restatement of a repaired FPF-governed sentence, the run MUST keep a more precise upstream interpretation recoverable and must not let the softened form become the only wording with authority-reference claim kind or admissible-use boundary.Keeps later readability aids subordinate to an explicit more precise interpretation.
CC-E19-12 (Integration impact is accounted for).Before send or monolith-facing motion for one new or substantially revised pattern subset, the run record MUST explicitly account for related governing patterns, governing-pattern constraints, companion notes, Relations entries, or current monolith sections that now require aligned edits. The run MUST say which such updates are inside the claimed boundary now and which therefore remain outside that claimed boundary.Prevents one local pattern carrying release, gate, or authority-reference claim kind or admissible-use boundary from landing as an isolated mismatch in the wider FPF pattern set.
CC-E19-13 (Usability account is explicit).For one new or substantially revised pattern subset, the run record MUST leave one explicit usability / working-reader-fit account by value: recognition text vs assurance text verdict, first-minute working situation, practical payoff, ordinary boundary, worked-slice coverage, primary reader or viewpoint, and the applicable pattern-side human-facing checks used (E.8, E.12, E.13, E.14, E.17.*, F.16, or clearly named local equivalents).Prevents cold-reader usability from being treated as something the reviewer “just kept in mind”.
CC-E19-14 (Scenario / anti-case / utility-fit account is explicit).When the current domain or workstream has a scenario pack, anti-case corpus, pilot bank, utility tree, fitness catalog, or analogous common check source, the run record MUST explicitly state which of those sources were consulted, which scenarios or anti-cases were actually checked, which qualities or fitness pressures carried claim kind or admissible-use boundary, and what remains outside the claimed review boundary.Prevents scenario, anti-case, and fitness checks from disappearing into reviewer memory or external-review folklore.
CC-E19-15 (Packaging, governing-pattern relation, package relation, and shipping-fit account is explicit).Before any send-facing, landing-facing, or monolith-facing state claim, the run record MUST explicitly account for governing-pattern relation and package relation, package form, publication role with named authority-reference relation, send state, landing state, monolith state, and other shipping-facing claims that matter for this reviewed pattern or subset. It MUST say what was checked, what was blocked, what was cleared, and why the claimed boundary is valid now.Keeps packaging and shipping checks from being inferred loosely after one local text improvement.
CC-E19-16 (Domain-tightened profile depth is explicit).When a domain-specific profile-depth note exists under E.19 (for example semio FIT-* or equivalent local depth checks), the run record MUST explicitly state which such local checks were used, which PCP check scope they tightened, and what they found or explicitly did not find.Keeps local review depth auditable and prevents domain-specific checks from becoming optional folklore around the PCP stack.
CC-E19-17 (Companion-material retention is justified).When a new or refreshed pattern subset keeps a long-lived companion, profile, check sheet, pattern-local companion row, review harness, or analogous selected non-pattern FPF kind-reference pair, the result MUST make its companion role explicit: companion use question, governing pattern or selected non-pattern FPF kind-reference pair, admissible companion-only use, one real breakage if absent, and retention, accepted-source-material-only, or removal condition when no such breakage exists.Prevents companion material from remaining by inertia or becoming hidden authority after the pattern body already carries the usable guidance.
CC-E19-18 (Substantive solution and locus adequacy is explicit).A pattern-quality closure claim over a new, refreshed, or materially repaired pattern or subset MUST include one reviewed-pattern-specific substantive adequacy pass unless the change is purely mechanical and no content-bearing claim changes. The account MUST name the local questions and checked loci, then state whether the text still solves the stated problem, assigns claims to the correct governing loci named by value, preserves kind boundaries and selected companion or projection roles, keeps SoTA grounding current enough for the claim it disciplines, remains usable without excess apparatus, and did not make any content relation worse. If the check exposes a needed wider edit, the declared boundary is widened by value or a named governing FPF pattern, companion document, record, or accepted source material is recorded.Prevents clean checklists, clean terminology, or successful profile selection from hiding wrong content, shadow authority, lost selected companion or projection roles, or accidental regression.
CC-E19-19 (Accepted-decision carry-through is explicit).If the review work states that accepted decisions from an accepted DRR, returned-finding set, accepted intake, architecture source material, or other accepted source material named by value are implemented in or discharged by the E.19 reviewed pattern or subset, the run record MUST include a decision-carry-through discharge. It assigns accepted decisions, accepted-source-material slices, terminology/ontology repairs, rejected or not-triggered options, selected validation banks, and conformance subjects to loci inside that reviewed pattern or subset or to a named governing FPF pattern, companion document, record, or accepted source material. Each item is classified as expressed sufficiently, expressed partially, not expressed and blocking, carried by a direct accepted-source-material consultation condition, correctly absent because rejected or not triggered, inherited unchanged, or outside the reviewed pattern or subset with a named governing FPF pattern, companion document, record, or accepted source material. A generic statement that the DRR or accepted source material was used is nonconforming. If the case is an E.17.ID.CR comparative review unit, PublicationUnit, publication form or face, source-pinned interpretation case, document whose accepted-source-material, evidence-source-material, architecture-source-material, or review-source-material role is named, or project-side review relation, the run MUST name that governing-pattern kind and reference rather than collapsing it into E.19 reviewed-pattern wording.Prevents accepted decisions or accepted-source-material requirements from disappearing after later wording, profile, or release checks focus only on the text that happened to be changed, without letting E.19 swallow other review or interpretation patterns.
CC-E19-20 (Pattern-quality review is not project certification).If an E.19 result is reused outside FPF pattern-quality review, the run record MUST state the project-side claim and the project-side relation that carries it. E.19 alone MUST NOT be treated as project evidence, safety-assurance material, gate input, release justification, compliance-assurance material, assurance material, work authority, or publication truth.Prevents pattern-quality conformance from supplying false project-world certification, gate passage, evidence sufficiency, or safety acceptance.
CC-E19-21 (Precision-restoration distribution is preserved).When the reviewed change applies or edits E.10-triggered precision restoration, the run MUST check that the selected precision-restoration architecture remains distributed: E.10 states trigger and applicability, E.10.ARCH states shared recovery architecture, realization patterns perform ontological unpacking for the EntityOfConcern, relation, claim, characteristic-space item, state-family field, or other selected ontological neighborhood named by value, and affected patterns carry only thin pointers named by value unless they themselves work over the recovered primary entity, relation, claim, characteristic-space item, state-like field, or phrase or record named by value. A review fails this row when an affected pattern silently grows a second trigger registry, a duplicate recovery algorithm, or a local architecture that contradicts the selected restoration pattern.Prevents pattern admission or refresh from re-centralizing wording-use restoration or duplicating E.10.ARCH inside affected patterns.
CC-E19-22 (EntityOfConcern and precision-restoration triage is explicit).When a reviewed change touches EntityOfConcern wording, old selected-family aliases, same-referent preservation, slot/reference migration, alignment-path claims, role/method/work boundaries, description/publication-use guards, semio-bias repair, phrase apparatus, architecture-placement rationale, package-boundary rationale, corpus-projection or quality-status evidence, or repeated/distributed boundary doctrine, the run record MUST state the pattern's own EntityOfConcern, first useful move, positive subject-kind/action spine, old-source-wording disposition if any, same-EntityOfConcern or retargeting result, exact alignment path or blocked-transfer result, ordinary reference apparatus used or architecture-note/evaluation-carrier locus when applicable, and the governing patterns for role, method, work, evidence, assurance, gate, decision, release, and publication-pragmatics claims. When E.21 is active, its PrecisionRestorationProfile carries the collapsed word/head/use, phrase-apparatus, repetition/distribution, role-carrier, and pattern-application assessment. If E.21 is not the evaluation pattern, the row names the object named by value-under-review evaluation instead; no preliminary substitute or grouped statement may replace the required evaluation result. A grouped statement such as "E.10/E.19 passed" does not close this row when the touched rows themselves are not recoverable.Keeps precision restoration auxiliary to the pattern claim and prevents selected-family migration from creating a second ontology or weakening user-facing action guidance.

Common Anti-Patterns and How to Avoid Them

Anti-patternSymptomWhy it failsHow to avoid / repair
Primary-EntityOfConcern driftThe draft appears to govern one thing in the opening, another in the declaration block, and a third in the examples or related-pattern or companion guidance named by value.Review cannot tell whether the pattern governs a PublicationUnit, an interpretive move, a work-result record, or a whole process, so later naming and boundary decisions become unstable.Stabilise one primary EntityOfConcern early, keep its head kind explicit, and mark note, sheet, UI, rendering, or process labels as either examples of that object or separate related entities rather than stylistic substitutes.
Role-clean but pragmatically foggyThe draft is addressed to the right reader in principle, but cold working readers still cannot recognise the situation, practical payoff, primary EntityOfConcern, relation named by value, claim record, or first useful move early enough.The run passes role hygiene while still failing pragmatic fit and first-minute usability.Pull a recognisable working situation upward, add one minimally viable worked case, make the practical payoff explicit in nearby user-facing prose, expose the primary EntityOfConcern and any minimal modeling lens in plain terms, add plain glosses for early claim-bearing terms, and require SoTA-Echoing rows that carry claim kind, admissible-use boundary, or explanatory work to name the practitioner or manager implication plus the case they discipline.
Architecture-clean but domain-thinThe text is internally well placed in the package, but the primary EntityOfConcern, narrowed branch, or practical payoff are justified mainly through package architecture while the problem-owning domain, practice, or SoTA appears late or decoratively.The pattern passes internal architecture checks while drifting away from the domain whose work it claims to improve.Pull the problem-owning domain moment into the recognition text, make the narrowed branch and primary EntityOfConcern answerable to the relevant domain or practice, and require FPF-governed SoTA-Echoing to discipline the practical cases rather than merely bless them after the fact.
Type-correct but inert epistemic precision cleanupAn E.10-triggered epistemic precision restoration removes the overread and restores kind language, but the recognition text no longer tells the reader why the distinction matters, what move remains, which FPF pattern application now carries the claim, or how a Plain recognition line maps back to the recovered Tech reading when both registers are used.The review accepts typed wording while losing action guidance.Return the draft to same-boundary repair: restore a remaining admissible reader move, name the FPF pattern application and governing ontology, repair the Tech-to-Plain mapping, or demote the phrase to reduced-use cue, quote-only wording, blocked transfer, or rewrite incomplete.
Expressive overread rebound after epistemic precision cleanupThe pass makes the text more engaging after cleanup, but the added Plain or didactic wording carries ontological, evidence, causal, assurance, bridge, gate, work, decision, or admissibility claim kind or admissible-use boundary not recoverable from the Tech reading or named FPF pattern application.The review mistakes readability for recovered semantic work.Rewrite the expressive line as ordinary recognition aid, recover its claim kind or admissible-use boundary through the Tech fields under E.10:6.2, name the FPF pattern application and governing ontology that carries the claim, or demote the phrase to reduced-use cue, quote-only wording, blocked transfer, or rewrite incomplete.
Verdict-only reviewThe run ends with “pass/fail” and prose complaints, but no precise findings-first repair direction.Raises editorial cost; reduces repeatability.Require one findings-first run record plus concrete remediation direction; do not rely on direct patch text as the primary review output.
Single giant checklistReview becomes a long, unfocused ritual that few complete.Increases cost; reduces fit and rigor in practice.Use a minimal baseline plus risk-selected profiles; use E.21 only when a pattern-version quality value is being evaluated.
Template-only complianceAll headings exist, but requirements are vague and untestable.Looks uniform; fails enforceability and auditability.Enforce normative clause hygiene and CC/Solution coherence.
SoTA name-droppingSoTA-Echoing is a list of buzzwords with no stance.Breaks evidence lineage; invites monoculture.Require adopt/adapt/reject with reasons per item.
Terminology drift by “synonym”Authors swap kernel terms for nicer-sounding words.Increases ambiguity; harms cross-pattern composability.Apply PCP-TERM and require explicit mini-definitions on first use.
Lexical substitution accepted as repairThe reviewed text no longer contains the trigger word, but the replacement changes the FPF kind, relation, slot or use-position, admissible use, or scope.The review rewards surface cleanup while ontology drift remains or gets worse.Require a KindRestorationCheck; if pre/post kinds or slot/use-positions do not match or an accepted split/change decision is absent, keep the finding blocking.
Form-only reviewReview time goes to formatting and micro-edits while the normative content, terms, Bridges, modularity, slot discipline and SoTA stance are barely checked.Raises editorial cost without raising semantic trust.Use the triage rule: treat FPF-governed sections as depth loci and keep mechanical cleanup subordinate to semantic correction.
Checklist-clean but content-wrongThe named profiles, lexical checks, and conformance rows are marked complete, but the repaired text no longer solves the stated problem, sends a claim to the wrong locus, creates shadow authority, loses a selected companion or projection role, or adds needless apparatus.Review accepts a locally tidy pattern while weakening the actual FPF guidance.Apply substantive solution and locus adequacy: name local content questions, check the actual problem and governing loci named by value, ask what became worse, and widen the declared boundary by value when the fix belongs outside the initial reviewed pattern or subset.
Architecturally right, didactically thinThe family is admissible, but readers still need project notes to understand what the pattern really governs.Trust in the monolith depends on external context rather than the pattern text.Add the missing problem frame, worked slices, local definitions, and governing-pattern or project-side FPF kind and reference named by value guidance before admission.
Scenario-name groundingGrounding names a situation but does not show what the source and resulting publication actually look like.Readers cannot tell why the case stays in the family or where it leaves the family.Add concrete source and resulting-publication slices, especially for transform families and easy boundary confusions.
Generic-head underspecificationAn FPF-governed phrase uses a generic head such as note, view, guidance, output, or artifact, but the run leaves that head uninterpreted.Review discusses the sentence before the object kind is even stable.Restore the head kind first in pattern-local terms before accepting or comparing the sentence.
Qualifier-smuggled claim kind or admissible-use boundaryA modifier such as comparative, safe, interactive, reliable, or faithful is doing the semantic work while the run treats the phrase as already precise.The review blesses apparent precision without recovering the actual claim kind or admissible-use boundary.Unpack the qualifier into explicit claim kind or admissible-use boundary, comparison criterion, or downstream-use boundary before acceptance.
Mixed comparison criterionOne sentence compares or ranks publication-form, carrier, process, authority-reference, or project-record values on one comparison criterion.The sentence remains ontologically incoherent even after local wording is polished.Restore head kind, then qualifier claim kind or admissible-use boundary, then rewrite the comparison through a homogeneous claim-kind criterion, threshold, or named governing-pattern/source-relation condition.
Sentence-level shorthand driftA few innocent-looking words (“species”, “branch”, “flow”, “input/output”) quietly carry the claim kind or admissible-use boundary.Review passes while key relations remain implicit or wrong.Inspect FPF-governed sentences one by one and replace shorthand with explicit governing-pattern relations and package relations or publication language.
Package-form, governing-pattern relation, and package-relation driftThe text slides between family, bundle, cluster, profile, overlay, suite, kit, or record without showing that the ontology changed.Reviews miss governing-pattern or authority-reference blur because each local sentence still sounds plausible.Require one intended role word, check governing-pattern relation and package relation explicitly, and treat stylistic noun-swapping as a semantic defect.
Reader-role leakagePattern sections explain why the pattern was isolated, what landing form is safest, or why merge/freeze is premature.Review accepts a package memo disguised as a user pattern.Move package-development reasoning to companions; rewrite pattern sections in terms of what the user may do, must avoid, and which governing FPF pattern or named project-side FPF kind and reference governs the release, policy, assurance, gate, action-selection, or adjudication case.
Quality-carrier leakageAny pattern host or monolith text explains corpus projection, README/ToC/E.11/I.2 alignment, retrieval or cold-reader evidence, monolith parity, landing evidence, PatternQualityStatus, all-4/all-5 posture, or developer/reviewer/executor correspondence as if this were pattern content.Review accepts quality proof, projection evidence, or role-turn communication disguised as user guidance.Move quality/projection evidence to the E.21 result, E.19 run record, README/ToC/E.11/I.2, card/retrieval/projection carrier, or release/landing evidence carrier; keep only the user-facing move or boundary justified by that evidence.
Apparatus overwrapA simple claim, relation, object, action, or placement is wrapped in role/carrier/locus/flow/state/status/text/package/process language that adds no new kind or user move.Review accepts bureaucratic prose as precision, or replaces it with prettier prose that loses the FPF kind.First ask whether the extra word changes a recoverable kind, relation, claim kind, admissible use, evidence value, or user move. If yes, use precision restoration. If no, rewrite in plain FPF terms and verify kind preservation: same EntityOfConcern, head kind, relation or claim kind, and established FPF term.
Companion material retained by inertiaA companion note, profile, check sheet, companion row, or review harness remains attached to a pattern family after the pattern body already carries the usable guidance, but the text does not say what real breakage returns if that companion material is absent.Companion material becomes permanent local folklore, hidden authority, or reader cost without a corresponding use gain.State the companion-use question, governing source, companion-only use, real breakage if absent, and retention, accepted-source-material-only, or removal condition; otherwise fold the useful example into the pattern or keep it only in the accepted source material.
Pattern-quality result as project certificateAn E.19 pass is cited as proof that a project release, safety claim, compliance state, work result, publication, or gate has passed.Collapses FPF pattern-quality review into project-world evidence or gate authority.Keep E.19 as pattern-quality review; open A.10, B.3, A.20, A.21, A.15, or another governing pattern for the project-side claim being made.

Consequences

BenefitsTrade-offs / Mitigations
Repeatable admission decisions — reviewers share a common review language.More explicit editorial work; mitigated by a small baseline and risk-selected profiles.
Higher trust in normative content — CC becomes the enforceable conformance check set.Authors must align prose and CC carefully; mitigated by coherence checks.
Controlled evolution — runs prevent conceptual bit-rot.Periodic workload; mitigated by prioritizing high-dependency and high-risk patterns first.
Less hidden drift — terminology and cross-context reuse become explicit.Some drafts will be delayed; mitigated by early profile selection during authoring.

Rationale

Patterns are both teaching publications and normative guidance publications. A specification that grows without explicit quality gates becomes a patchwork: locally good, globally inconsistent. A profile-based gate is the smallest structure that keeps reviews repeatable while remaining sensitive to risk and pattern kind.

The baseline profile protects cross-pattern comparability and editorial sanity. Risk-selected profiles keep depth where it matters: norms, SoTA claims, cross-context reuse, terminology changes, staleness refresh, and reader-role fit. A pattern that is admissible in package terms but speaks to the wrong reader is still a review defect.

SoTA-Echoing - post-2015 review and validation practice alignment

Evidence binding note. If a SoTA Synthesis Pack exists for review and validation discipline or refresh discipline in your Context, cite it and keep this section consistent with it. Otherwise, use the table below as the current source-use basis for this pattern revision; do not duplicate it elsewhere as a seed list or treat reference sources as automatic SoTA.

Claim (E.19 need)SoTA practice (post-2015)Source-use rolePrimary source (post-2015)Alignment with E.19Adoption status
A stable structure improves comparability and reduces ambiguity.Standards specify required viewpoints, concerns, consistency rules, and description structure.Current-standard and reference-only source use. This source supplies the conformance-vs-tooling and structured-description analogy; it is not imported as FPF pattern ontology or as the current-best answer for pattern review.ISO/IEC/IEEE 42010:2022, Software, systems and enterprise - Architecture description.PCP-BASE includes structural integrity, internal consistency, and named profile scope without turning review into one architecture-description process.Adopt and adapt. Adopt conformance mindset; adapt to pattern-language template and didactic grounding.
Pattern writing benefits from explicit guidance plus critique culture.Pattern-language communities emphasize clear template usage, consequences, examples, and critique for quality.Current practice and writing-guidance source use. This row contributes recognition-text and section-quality review, not FPF ontology.Iba (2021), “How to Write Patterns: A Practical Guide for Creating a Pattern Language on Human Actions” (PLoP 2021 PLoPourri).Baseline checks enforce meaningful sections; anti-patterns make critique concrete; E.19:7 checks recognition text, worked slices, consequences, and SoTA row usefulness.Adopt. Directly improves admission quality.
“Living” guidance needs refresh discipline.Reporting and review guidance is updated and versioned; reviewers track changes and report deltas clearly.Current reporting-reference source use. PRISMA supplies transparent updated-guidance and delta-reporting discipline; it is not imported as a mandatory FPF review workflow.Page et al. (2021), “The PRISMA 2020 statement: an updated guideline for reporting systematic reviews”; Page et al. (2021), “PRISMA 2020 explanation and elaboration: updated guidance and exemplars for reporting systematic reviews”.Runs require explicit decisions and deltas in SoTA-Echoing; PCP-REFRESH asks whether stale SoTA, renamed relations, terminology drift, or refresh windows change the pattern.Adapt. Use the versioned-guidance and explicit-delta principle without importing medical-review reporting forms or process mandates.
Retrieval-facing entry changes need selected evidence dimensions, not universal benchmarks.RAG evaluation practice separates context relevance, answer faithfulness, answer relevance, and retrieved-context adequacy.Current practice source use for retrieval-facing evidence dimensions. RAGAS and ARES are representative current RAG evaluation source refs for the selected retrieval fixture only; they are not current-best source material for all pattern entry or pattern quality.Es, James, Espinosa-Anke, Schockaert (2023 arXiv; 2024 EACL demo), “RAGAS: Automated Evaluation of Retrieval Augmented Generation”; Saad-Falcon, Khattab, Potts, Zaharia (2023 arXiv; 2024 NAACL), “ARES: An Automated Evaluation Framework for Retrieval-Augmented Generation Systems”.PCP-ENTRY-E4 and related evidence modes select tiny retrieval fixtures only when retrieval-facing behavior or observed misretrieval is present; the row does not authorize a universal benchmark for every pattern entry.Adopt lightly. Keep retrieval hit, source-material relevance, authority, and faithfulness dimensions only when retrieval-facing behavior is present; ordinary entry prose remains prose-only.

Action result from the pattern-review and validation practice grounding: an E.19 pass, caution, return-for-repair result, clean checklist, or clean retrieval-entry check does not become project certification, project evidence, safety-assurance material, gate input, release justification, compliance-assurance material, assurance material, work authority, publication truth, or project refusal or approval. The local E.19 result is a pattern-quality review or refresh claim over the named reviewed pattern, selected profile, defects found or cleared, admission, refresh, repair-return, or selected pattern-quality boundary. Reopen the pattern-quality result when the reviewed text, accepted-source-material decision, SoTA grounding, related governing pattern, selected companion or projection role, profile trigger, review boundary, or attempted project-side reuse changes.

Relations

  • Builds on:

    • E.8 (authoring conventions; canonical section order; SoTA‑Echoing authoring requirements)

    • E.10 (lexical discipline, trigger detection, and applicability)

    • E.10.ARCH (distributed precision-restoration architecture and realization/governing-pattern split)

    • E.9 (design rationale records for changes that affect semantics)

    • E.9.DA (scoped DRR decision-adequacy evaluations before pattern drafting or host amendment; an E.19 finding may expose that an upstream DRR did not decide enough, but E.19 keeps the pattern-review finding while E.9.DA evaluates only the upstream DRR decision-adequacy claim. An E.19 pass, return, or absence is not E.9.DA coordinate evidence.)

    • E.22 (improvement-oriented quality-evaluation question framing; distinguishes floor blocker review, exceptional-improvement review, Pareto trade-off inspection, open-question discovery, and absorption impact before the E.19 review result is formed.)

    • E.23 (repeated quality-improvement method; an E.19 profile can supply findings inside such a loop, but E.23 governs repeated absorption, object-under-improvement evaluation re-evaluation, method-family selection, and stop, continue, switch method, open-new-frame, or hold decisions.)

    • E.15 (authoring/evolution protocol; harness mindset; refresh planning)

    • A.6.5 (slot discipline; SlotKind/ValueKind/refMode invariants)

  • Coordinates with:

    • F.8 (mint vs reuse decisions)
    • F.18 (local-first naming protocol)
    • F.9 (cross-context alignment discipline)
    • F.15 (conceptual harness and regression framing)
    • E.17 (MVPK / U.View projection discipline)
    • E.11 (pattern-entry discoverability discipline, for PCP-ENTRY only as a review hook, not as a semantic prerequisite)
    • E.21 (scoped pattern-quality characteristic space, coordinate evidence discipline, PatternQualityStatus, and stop condition; E.19 findings may supply evidence for a later E.21 value only when they identify content defects or strengths in the reviewed pattern version, but final coordinate values and PatternQualityStatus are assigned by E.21, not by E.19)
    • A.6.7 (MechSuiteDescription suite-level semantics)
    • A.15.3 (SlotFillingsPlanItem P2W planned-baseline seam)
    • G.11 (refresh/decay orchestration principles, where applicable)

E.19:End

Mechanism Introduction Protocol

Type: Architectural pattern Status: Draft Normativity: Normative

Problem frame

FPF is intentionally open-ended: new U.Mechanism definitions, suite compositions, and SoTA-driven wiring modules can be added over time. This flexibility creates a recurrent authoring problem: introducing a new mechanism (or revising an existing one) tends to touch multiple governing patterns, specification loci, and extension blocks across Parts A/E/F/G and can easily create drift:

  • semantics appear in the wrong governing locus (e.g., Part G wiring starts carrying mechanism meaning),
  • suites degrade into “meta‑mechanisms” or hidden gates,
  • planned baselines (WorkPlanning) are conflated with execution witnesses (WorkEnactment),
  • token drift breaks public references, or
  • the corpus accumulates dangling references and non-normative drafting commitments without a governing definition.

This pattern provides a repeatable, governing-definition assignment protocol for introducing mechanisms. It supports kernel coherence by keeping extension points and governing definitions explicit.

Use this when. Use E.20 when a proposed FPF change introduces or revises mechanism meaning, suite denotation, suite closure, suite obligations, suite pins, suite protocol semantics, planned-baseline pins, wiring semantics, governing-definition assignment, or what a citeable token denotes.

First useful move. Classify the edit with MIP trigger triage: MIP not triggered, local wording or alias-docking only, or MIP-run manifest required. If a manifest is required, name exactly one governing definition for each changed item before writing the pattern text.

Smallest sufficient governing-definition assignment guidance. Use the lightest governing-definition assignment guidance that preserves the next admissible reader move. Add MIP-run manifest fields, canonical mechanism card stubs, suite fields, planned-baseline pins, wiring refs, RSCR triggers, PQG coverage, or deprecation-continuity material only when the live mechanism-definition or citeable-token claim would otherwise become false, unsafe, non-replayable, or lack a named governing-definition locus.

Minimum sufficient next move. If the edit does not change citeable-token denotation, mechanism meaning, suite denotation, suite closure, suite obligations, suite pins, suite protocol semantics, planned-baseline pins, wiring semantics, or governing-definition assignment, a MIP-run manifest is not opened; name the current governing locus or alias-docking relation and stop.

Do not escalate when. Do not create a MIP-run manifest when alias docking or local wording repair preserves denotation. Do not treat a suite, plan, wiring module, or lexical cleanup as mechanism meaning unless the changed item needs a new or revised governing definition.

Same problem, different question under repair. For a TGA-looking problem, use E.18 for graph/flow/crossing, A.20 for internal step validity, A.21 for gate-decision publication, and E.20 for mechanism-meaning placement; do not open the other three until their own claim is live.

Semantic repair return. When E.20 blocks a misleading word, face, alias, or source label, the repair must return to the enabled authoring move: name the governing definition, canonical location, alias-docking relation, or non-trigger stop that remains admissible. Do not stop at a classification of vocabulary or publication faces.

Governed-object and relation separation. Keep the graph object and path or crossing relation (E.18), MVPK publication faces (E.17), internal CV status and witness (A.20), gate decision and DecisionLog (A.21), evidence or provenance relation (A.10/G.6), work plan or work occurrence (A.15), and mechanism-governing definition assignment (E.20) distinct. An MVPK face, DecisionLog, evidence carrier, MIP manifest, or work witness does not carry another pattern's project-side value unless that governing pattern consumes it for that relation.

Smallest affected locus. Localize the change to the smallest live locus: PathSlice or crossing in E.18, CV step in A.20, GateDecision equivalence class in A.21, or mechanism-governing definition in E.20. Do not widen to a whole flow or unrelated claim being made, locus, or EntityOfConcern when that locus is enough.

Ordinary success. For ordinary E.20 use, success is that the edit is classified, the current governing locus or alias-docking relation is named, and no MIP-run manifest is opened unless denotation, mechanism meaning, suite denotation, suite closure, suite obligations, suite pins, suite protocol semantics, planning pins, wiring semantics, or governing-definition assignment actually changes.

Locality asymmetry. E.18 is graph-local, A.20 is step-local, A.21 is gate-local, and E.20 is trigger-local. Do not normalize the four patterns into one assurance regime.

Do not merge these pairs. Keep CV.Status distinct from GateDecision, TGA Check distinct from GateCheckKind, MIP manifest distinct from DecisionLog, ViewpointMap distinct from graph semantics, PathSlice distinct from a work run, and GateProfile=Lite distinct from PublishMode=Lite.

Field liveness. Always core for E.20: trigger triage and the current governing locus or alias-docking relation. Conditional-live: MIP-run manifest fields, canonical mechanism card stubs, suite fields, planned-baseline pins, wiring refs, RSCR triggers, PQG coverage, and deprecation continuity; open them only when the corresponding denotation, mechanism-meaning, suite, planning, wiring, lexical, refresh, review, or retirement claim is live.

Retrieval trap guard. When excerpted alone, E.20 manifest language must not be read as requiring a full MIP-run for every mechanism-adjacent edit. Pure currentness cleanup, alias docking, optional suite-member citation of an already-defined mechanism, and local wording repair stop at the current governing locus unless denotation, mechanism meaning, suite closure, suite obligations, suite pins, suite protocol semantics, planning pins, wiring semantics, or governing-definition assignment changes.

Anti-Goodhart guard. A complete MIP-run manifest is not a substitute for the governed mechanism result: the mechanism-governing definition must still carry the operation, law, admissibility, slot, transport, applicability, and audit meaning needed for the claim.

Generative side. E.20 preserves open-ended action by allowing new mechanism definitions, suite variants, wiring, and citeable tokens to enter FPF with a named governing definition; the discipline prevents semantic drift so new work can be added rather than merely blocked.

What goes wrong if missed. A suite can start defining mechanism meaning, a plan item can start carrying enactment witnesses or gate decisions, a wiring module can carry kernel semantics, or a token rename can break citations while looking like harmless cleanup.

What this buys. E.20 gives the reader one current authoring move: assign the change to the right governing definition and keep mechanism, suite, planning, wiring, and lexical continuity distinct.

Not this pattern when. If the edit is only pure currentness, typo, reference, or old-label cleanup and changes no semantics or citeable-token denotation, record the current governing locus and stop. If the question under repair is runtime gate passage, gate decision, approval, suite-as-mechanism, plan-as-enactment, or performed work, use the gate, suite, planning, or work loci that own that question. A MIP-run manifest is not a runtime gate, gate passage, approval packet, or binary pass/fail decision.

Problem

When a new mechanism (or mechanism family) is introduced without an explicit authoring protocol:

  1. Governing-definition ambiguity causes partial changes: a suite enumerates a new ...MechanismDefinitionRef, but the canonical U.Mechanism definition card is missing or inconsistent.
  2. Boundary erosion occurs: suite descriptions start to define mechanism semantics; method wiring starts to redefine kernel meaning; publication/telemetry becomes a hidden tail.
  3. Plan/enactment confusion appears: planned slot fillings start to carry launch values, witnesses, or gate decisions.
  4. Terminology drift breaks citations: renames happen silently; tokens fragment across registers; downstream references become unstable.
  5. Review becomes non‑local: every introduction is a bespoke scavenger hunt across patterns, making training, review, and refresh unreliable.

Forces

ForceTension
Extensibility vs Kernel stabilityNew mechanisms need to be addable ↔ kernel reference loci need to remain citeable and minimal.
One governing definition vs cross-locus reachEach mechanism meaning, suite change, plan item, wiring module, or token migration needs one governing definition while a mechanism introduction often spans suites, plans, wiring, and lexicon.
Didactic usability vs auditabilityHumans need clear “cards” and examples ↔ obligations and pins need to remain checkable and governing-locus bounded.
SoTA evolution vs semantic integrityMethods evolve fast ↔ mechanism meaning SHALL NOT silently shift via wiring updates.
Local naming freedom vs global reference continuityContext-local labels are necessary ↔ references need to remain stable across editions and refactors.

Solution — the Mechanism Introduction Protocol (MIP)

Terminology note (disambiguation)

This protocol and any MIP-run manifest are authoring-side semantic-governing-definition assignment maps. A manifest is not an approval packet, gate, runtime decision, or pass/fail result. It names where mechanism meaning lives and what must not be inferred from suites, plans, wiring, aliases, or gates.

MIP governs how changes are assigned to their governing definitions, not how systems execute.

MIP trigger triage. Not every reference cleanup is a MIP-run. Classify the proposed edit before requiring a manifest:

  • MIP not triggered: pure currentness, reference, typo, or old-label cleanup that changes no mechanism, suite, planned-baseline, wiring, governing-definition, or citeable-token semantics.
  • Local wording or alias-docking only: wording clarifies an already-governed mechanism relation, or F.18 alias docking preserves citeability of an old token without changing what the token denotes.
  • MIP-run manifest required: the edit changes mechanism meaning, suite denotation, suite closure, suite obligations, suite pins, suite protocol semantics, planned-baseline pins, wiring semantics, governing-definition assignment, or what a citeable token denotes.

Only the third outcome uses the manifest in E.20:4.2. The first two still name the current governing locus or alias-docking relation when the text will be published. When the only live result is no denotation change, the published content should not carry MIP-run vocabulary except as a short non-trigger note.

Mint vs reuse

Mints:

  • MIP — Mechanism Introduction Protocol (this pattern).
  • MIP-run — an authoring event that applies this protocol to a concrete change set, captured as a short manifest (recorded as a DRR-linked change record or an equivalent, explicitly citeable change record).

Reuses:

  • U.Mechanism definition cards and MechanismDefinitionRef, suite descriptions (MechSuiteDescription and specializations), WorkPlanning plan items (SlotFillingsPlanItem and specializations), alias docking (F.18), RSCR triggers (G.Core), and PQG profiles (E.19).

Step 1: Classify the introduction

A MIP-run SHALL first classify the change, because different classes have different governing definitions:

  1. New mechanism family, species, or archetypal grounding (new U.Mechanism archetypal definition).
  2. New mechanism definition within an existing A.6.1 mechanism kind (new MechanismDefinitionRef, new canonical card).
  3. Mechanism revision (signature/laws/slots/transport/audit semantics change).
  4. Suite change (membership, obligations, spec pins, suite protocols, suite audit obligations).
  5. Planned-baseline change (new or revised SlotFillingsPlanItem specialization, or changes to its pins).
  6. Wiring change (new or revised Part‑G extension modules, SoTA method packs, selectors).
  7. Terminology migration (renames, token splits/merges, register changes).
  8. Deprecation / supersession / retirement (marking mechanisms/suites/plan items as deprecated, declaring successors, and preserving citeability; apply E.20:4.9.1).

Mechanism kind boundary. A MIP-run may introduce a new MechanismDefinitionRef. It does not introduce a new U.Transduction(kind=...) unless E.18 is explicitly updated, and it does not introduce a new C.3 U.Kind unless C.3 and A.6.5 discipline is explicitly live.

A.6.1 compatibility. MIP assigns mechanism meaning to A.6.1-governed mechanism definitions: operation algebra, law set, admissibility conditions, slot interface, transport or bridge regime, applicability, and audit. Suites, planned-baseline records, and Part-G wiring modules may cite or bind that meaning; they do not supply or redefine it.

New mechanism-family criterion. Treat a change as a new mechanism family, species, or archetypal grounding only when the existing mechanism-governing pattern cannot express the operation algebra, law set, admissibility conditions, slot interface, transport boundary, or audit semantics without changing its kind invariants. Otherwise classify the change as a new mechanism definition or MechanismDefinitionRef within an existing A.6.1 mechanism kind.

A single MIP-run MAY span multiple classes, but SHALL treat each class with its correct governing-definition assignment (below).

Step 2: Declare the governing-definition assignment map (mandatory)

For every new or modified change item, the MIP-run SHALL name exactly one governing definition and assign the change there. In FPF, that governing definition is a citeable, patchable PatternId, PatternId:SectionPath, PatternScopeId = G.x:Ext.*, or DRRId (E.9). The core MIP-run manifest in a citeable change record is limited to:

  • each changed item,
  • its governing definition,
  • its canonical location (expressed as PatternId:SectionPath, PatternScopeId, or DRRId, not as prose), and
  • the forbidden overread or forbidden move blocked by that assignment.

Conditional support fields appear only when live:

  • the change class(es) from E.20:4.1 when needed to disambiguate the assignment,
  • new or changed citeable tokens (MechanismDefinitionRef, SlotKind tokens, PatternScopeId, etc.) when token denotation or citeability changes,
  • the best-known Delta-Class (Δ-0 to Δ-3) and impact radius estimate (E.15) when the run is plausibly Δ-2 or Δ-3,
  • intended RSCR trigger types when refresh or regression wiring is live, and
  • the PQG (E.19) profile set when the run crosses an E.19-governed review boundary.

Note (normative). If the canonical location is a Part‑G wiring module, it SHALL be cited as a PatternScopeId (G.x:Ext.*) and the module SHALL declare GoverningPatternId (wiring is binding-only; meaning remains governed by its cited pattern).

Canonical governing-definition map (normative):

Change kindGoverning definitionCanonical locationForbidden move
Mechanism meaning (operations, laws, invariants, admissibility, slot interface, transport, audit semantics)Mechanism-governing patternDesignated mechanism-governing patternSHALL NOT “define” the mechanism inside a suite or a wiring module.
Suite membership, obligations, spec pins, and suite protocolsSuite-governing patternA.6.7 or A.6.7.<FamilyKey>SHALL NOT carry mechanism semantics, acceptance thresholds, gate criteria, DecisionLogs, or publication tails into the suite.
Planned baseline pins (planned slot fillings, edition-pinned refs, explicit time selector)WorkPlanning governing patternA.15.3 plus suite-specific specialization when neededSHALL NOT embed launch values, witnesses, or gate decisions in planning.
SoTA method, comparator, or generator definitions, including provenance and evaluation semanticsSoTA-pack governing patternG.2 (SoTA synthesis packs)SHALL NOT rephrase SoTA evolution as kernel semantics.
Wiring that binds SoTA packs into flows or tasksExtension module governing definitionG.x:Ext.* (GPatternExtension with explicit PatternScopeId)SHALL NOT mint new semantics; SHALL bind only.
Token renames and drift managementLexical governing patternF.18 (alias docking) plus registers per E.10/F.17SHALL NOT silently rewrite tokens or break citations.
Change-cause taxonomy and regression triggersRSCR governing patternG.CoreSHALL NOT invent ad hoc “reason kinds” scattered in patterns.
Project specializations of a mechanismProject specialization patternP.* patterns (using ⊑/⊑⁺)SHALL NOT mutate kernel membership to express project variants.

Guard (normative). Any proposed change that cannot name a governing definition from the table above SHALL be treated as a non-normative drafting note or candidate intake and SHALL NOT be relied upon as an FPF architectural commitment. Such material may exist only in an explicitly marked non-normative source carrier until assigned to its governing definition.

Step 3: Card-first canonicalization (eliminate dangling refs)

If the introduction adds a new MechanismDefinitionRef anywhere (especially inside a suite):

  1. The MIP-run SHALL first create a canonical mechanism card at the governing pattern location that publishes the MechanismDefinitionRef and the minimal identity fields (names, intent, and "this is a distinct mechanism").
  2. The card MAY be a stub initially, but SHALL reserve:
  • the stable MechanismDefinitionRef (and its lexical register entry per E.10/F.17),
  • the intended mechanism family or species placement, and
  • a DRR pointer for completing semantics (including any missing register/twin-label work).

Only after (1) is in place MAY suites or protocols enumerate the new MechanismDefinitionRef.

Step 4: Mechanism semantics completion (what “done” means)

Definition-of-done note (delegated). MIP uses two completion checkpoints for mechanism cards:

  • Stub done - a citeability stub for a MechanismDefinitionRef: a resolvable canonical target created only to prevent dangling references (E.20:4.3), not semantic completion.

A stub SHALL (i) exist at the mechanism-governing pattern's canonical location, (ii) reserve and publish the stable MechanismDefinitionRef (and its lexical/register entries), (iii) set MechanismDefinitionHeader.status = draft, and (iv) carry an explicit DRR pointer for completing semantics. A stub SHALL also list the A.6.1 conformance checklist item IDs it does not yet satisfy (without duplicating that checklist here). A stub may preserve citeability for suite or protocol enumeration, but it does not authorize suite closure, gate checks, planned baselines, wiring consumption, reuse, or import unless the fields required for that use are present and marked current.

  • Introduced done - a mechanism card that can be relied upon as a U.Mechanism definition. "Introduced done" is defined by A.6.1 conformance: the card SHALL satisfy the applicable A.6.1:7 Conformance Checklist items (CC-UM.*), with the baseline items designated by A.6.1 (e.g., CC-UM.0 and CC-UM.1) being the minimum requirement.

The list below is informative only (semantic orientation); the normative structure and “done” criteria are delegated to A.6.1’s CC items to avoid drift between this protocol and the canonical mechanism definition.

For an “introduced” mechanism beyond a stub, the useful completion target is to make the following semantic fields explicit:

  • Operation field: the named operations that the mechanism provides (signature-scoped intent).
  • Law/invariant field: the invariants that govern the operations, including admissibility constraints when applicable.
  • Admissibility field: preconditions or eligibility predicates for admissible operation (not a gate decision log, and not per-run outcomes).
  • Slot interface: required input and output slot kinds, with stable kinds and explicit ref modes.
  • Specialisation discipline (when ⊑/⊑⁺ is declared): explicit parent+morphism kind; SlotKind invariance; monotone ValueKind narrowing; no new mandatory inputs to inherited operations (per A.6.1:4.2.1 / CC‑UM.8).
  • Transport: declarative transport semantics (no hidden crossings; crossings are published via Bridges where required).
  • Audit obligations: which evidence anchors are required when the mechanism is used.

If the mechanism introduces new slot kinds shared across a family/suite, apply E.20:4.5.

Step 5: Suite-scoped slot-token lexicon discipline (prevent slot drift)

If the mechanism belongs to a suite or family where multiple member mechanisms share slot vocabulary:

  1. The suite-governing pattern SHALL provide a suite-scoped slot-token lexicon referencing A.6.5 SlotSpecs (or update it if already present) in the suite-governing pattern's canonical location (A.6.7 / A.6.7.<FamilyKey>), or as a dedicated lexicon card explicitly referenced from there. The lexicon cites and organizes SlotKind tokens; it does not create new SlotKind semantics.

  2. Mechanism cards SHALL cite slot kinds from that lexicon (rather than minting local near-duplicates).

  3. New slot kinds SHALL be introduced into the lexicon first, then referenced by member mechanisms. If any citeable SlotKind tokens are minted/renamed, apply E.20:4.9.

This step is specifically intended to prevent the “same idea, different slot token” drift that makes planned baselines and audits non‑portable.

Step 6: Suite integration (if the mechanism is a suite member)

If the introduction changes a suite (MechSuiteDescription or specialization):

  1. Membership set semantics (WF‑MS‑1). mechanisms is a set: duplicates are nonconformant and list order carries no semantics.
  2. Ordering is only in protocols. If ordering matters, express it only in suite_protocols.
  3. Protocol closure (WF‑MS‑2). If suite_protocols is present, then for every ProtocolStep in every SuiteProtocol, step.mechanism ∈ mechanisms.
  4. No hidden tails. Required stages (e.g., normalization/aggregation/Γ‑fold) are explicit protocol steps; do not hide them inside other steps.
  5. Guard/gate separation. Suites and mechanisms SHALL NOT publish GateDecision/DecisionLog. AdmissibilityConditions and tri‑state GuardDecision remain governed by the mechanism definition; OperationalGate(profile) acceptance thresholds and pass/fail criteria remain gate/acceptance concerns.
  6. Suite is descriptive only (WF‑MS‑3/4). Any publish/telemetry continuation is outside the suite protocol and terminates via publication faces, packs, or modules; suites SHALL NOT define mechanism blocks (OperationAlgebra, LawSet, Transport, Audit, …).

Kernel stability rule (recommended). If the suite is a kernel suite, and the change adds a new required stage, prefer creating a suite variant rather than mutating the kernel membership. If mutation is unavoidable, pair it with terminology continuity (E.20:4.9) and RSCR triggers (E.20:4.10).

Step 7: Planned baseline & P2W planning-to-work boundary (if planning changes)

If the mechanism introduction changes what a WorkPlanning baseline pins (e.g., selected comparator specs, method descriptions, time selector, guard pins):

  1. Introduce or revise a SlotFillingsPlanItem specialization under the WorkPlanning governing pattern.
  2. The plan item SHALL remain planning-only:
    • pins/refs only (ByValue or <RefKind>),
    • no launch values,
    • no FinalizeLaunchValues witnesses,
    • no gate decisions or decision logs.
    • time is explicit: include Γ_time_selector or Γ_time_rule_ref (XOR); implicit “latest/current” is nonconformant.
  3. The plan item SHALL target exactly one Description-scoped, edition-addressable slot-bearing description via target_slot_bearing_description_ref (typically a kit or suite) and SHALL NOT target a MechanismDefinitionRef. If a "standalone mechanism baseline" is needed, introduce an explicit Description-scoped slot-bearing description wrapper (e.g., a mech kit or a suite-of-one) and target that.

This step exists to keep the P2W planning-to-work boundary crisp: planning defines planned fillers, enactment witnesses actual runs.

Step 8: Wiring & SoTA updates (keep method evolution out of kernel)

If the introduction involves methods, comparators, selectors, or other SoTA-sensitive choices:

  1. Put method/comparator family semantics in SoTA packs (G.2) and reference them by edition-pinned refs.
  2. Pin the chosen SoTA refs for a baseline in WorkPlanning plan items (E.20:4.7); wiring consumes pins rather than silently overriding them.
  3. Put flow/task binding logic in wiring modules (GPatternExtension), with an explicit PatternScopeId and declared governing pattern.
  4. Wiring may bind, select, dispatch, or cite SoTA method packs; it may not redefine the operation, law, admissibility, transport, slot, or audit meaning of the mechanism it wires.
  5. If a SoTA update changes a mechanism's signature/laws, that semantic change SHALL be performed in the mechanism-governing pattern, under the A.6.1 mechanism-definition template; the change SHALL emit RSCR triggers (E.20:4.10).

Step 9: Terminology continuity (alias docking)

If the introduction renames any public token or changes canonical naming:

  1. Use lexical alias docking (F.18) so old tokens remain citeable.
  2. Update registers and twin labels per lexical discipline.
  3. Avoid silent rewrites: the MIP-run SHALL make the alias relation and successor relation explicit.

Deprecation / supersession / retirement (preserve citeability)

If the change class includes deprecation/supersession/retirement (E.20:4.1 #8), the MIP-run SHALL preserve reference continuity while making the status change explicit:

  1. Preserve the canonical target. The deprecated mechanism card, suite description, plan item, or wiring module SHALL remain resolvable at its canonical location; deprecation MUST NOT be implemented by removal that would break citations.
  2. Keep the public token citeable. The deprecated token (MechanismDefinitionRef, suite token, plan-item token, etc.) SHALL remain citeable. If a successor token/name is introduced, the old token SHALL be alias-docked per F.18 (E.20:4.9).
  3. Declare successor (or “no successor”). The deprecated mechanism card, suite description, plan item, or wiring module SHALL declare a successor pointer (or explicitly declare that there is none) using the project’s established deprecation/supersession fields.
  4. Assign downstream updates to governing definitions. Any needed suite denotation, closure, obligation, pin, protocol-semantic, WorkPlanning-pin, or wiring-semantic change SHALL be performed in its respective governing definition (E.20:4.2), preferably by introducing a suite variant rather than silently swapping kernel membership.
  5. Emit RSCR triggers. Deprecation/supersession SHALL emit typed RSCR triggers and extend the regression envelope (E.20:4.10), including checks for dangling refs and alias coverage.

Step 10: RSCR triggers + regression envelope

A MIP-run that changes any of:

  • mechanism signatures,
  • suite membership/protocols,
  • planned baseline pins,
  • slot vocabulary / SlotKind lexicon,
  • terminology/alias docking that changes citeable tokens,
  • or other reference loci

SHALL emit typed RSCR triggers via the RSCR governing pattern and SHALL extend the regression envelope to include, at minimum:

  • no dangling MechanismDefinitionRef enumerations,
  • suite membership set semantics + protocol closure,
  • guard/gate separation preservation,
  • P2W planning-to-work boundary preservation (planning vs enactment).

Guard (normative). Trigger kind identifiers (e.g., RSCRTriggerKindId) SHALL be selected from the RSCR trigger catalogue governed by G.Core. A MIP-run SHALL NOT mint ad hoc trigger kinds (“reason kinds”) scattered in arbitrary patterns/modules.

Manifest hook (recommended). The MIP-run manifest SHOULD list emitted trigger types and the regression envelope deltas as checkable items.

Step 11: Apply PQG profiles (E.19) and close the run

Every MIP-run SHALL be reviewed using PQG (E.19) with:

  • PCP‑BASE always, and
  • the triggered profiles implied by the change class (at least):
    • PCP‑SUITE if any suite locus changed,
    • PCP‑P2W if any planned-baseline locus changed,
    • PCP‑TERM if any new terms/renames are introduced,
    • PCP‑SOTA if SoTA packs are introduced/modified,
    • PCP‑NORM if the run introduces/changes normative requirements or conformance items,
    • PCP‑DEONT if RFC keyword clauses are introduced/modified (or if invariant/predicate vs deontic form is ambiguous),
    • PCP‑BRIDGE if cross-context reuse, crossings, or bridges are introduced or changed,
    • PCP‑REFRESH if refresh-sensitive claims (SoTA lists, “current practice”, enumerations) are touched,
    • plus any applicable modularity / boundary / normativity profiles required by the delta.

MIP-run outcomes (normative set). A reviewed MIP-run SHALL be closed as one of:

  1. Proceed (single change set).
  2. Proceed via governing-definition split (mandatory when semantics were placed under the wrong governing definition; the change is split into governing-definition-correct edits).
  3. Proceed via suite variant (preferred when kernel stability is threatened by adding new required stages).
  4. Block with explicit missing condition (insufficient semantics; stub exists but completion condition is DRR-tracked).
  5. Reject (violates invariants such as suite-as-gate, plan-as-enactment, or governing-definition ambiguity).

Archetypal Grounding (Tell–Show–Show)

Show 0 (suite member, no new mechanism meaning). A suite adds an already-defined MechanismDefinitionRef as an optional member and changes no operation, law set, admissibility condition, slot interface, transport boundary, audit semantics, planned-baseline pins, or wiring semantics. E.20 records the suite-governing locus and stops; no new mechanism-governing card and no MIP-run manifest are opened.

TellShow #1 — add a mechanism to an existing suite variantShow #2 — introduce a new mechanism family + suite
SceneMechanisms evolve: new stages appear, methods mature, and planning records need to remain citeable.A team wants an additional “stage” in a characterization pipeline, but does not want to mutate the kernel suite.A new domain needs a mechanism family or species not yet present in any existing mechanism-profile cluster (for characterization: A.19.*), plus a suite that composes several distinct mechanisms with a P2W hook.
Governing-definition assignmentEach change item has one governing definition; changes are assigned there, not smeared.1) Add the new mechanism card under the mechanism-governing pattern. 2) Add a suite variant under the suite-governing pattern. 3) Pin the variant via a planned-baseline specialization. 4) Wire the variant via a GPatternExtension.1) Add a new archetypal grounding under the governing pattern. 2) Add A.6.7.<FamilyKey> describing the suite. 3) Add a suite-specific SlotFillingsPlanItem specialization. 4) Add SoTA packs and wiring modules.
Card-firstNo suite enumerates a missing MechanismDefinitionRef.Create the new MechanismDefinitionRef card stub first; then update the suite variant membership.Create the new mechanism-governing card(s) first; then publish suite membership by MechanismDefinitionRef.
Suite disciplineSuites are descriptive: membership, obligations, pins, protocols; not mechanisms and not gates.The variant’s suite_protocols explicitly names the new stage; publish/telemetry remains outside the suite.The new suite defines shared obligations and allowed pipelines without embedding mechanism semantics.
P2W planning-to-work boundaryPlanning pins refs; enactment witnesses runs.The plan item pins the chosen suite variant and any method/spec refs; no launch values or decision logs.The plan item specialization defines the planned fillers/pins that downstream flows cite.
SoTA updatesMethods change faster than kernel meaning; wiring is where choices live.A GPatternExtension selects a post-2015 scoring method by edition‑pinned ref; no kernel mutation required.The family ships method packs and wiring modules; kernel cards remain the semantic source of mechanism meaning.

Bias-Annotation

Lenses tested: Governance (governing-definition assignment, continuity), Architecture (boundary hygiene and modularity), Onto/Epist (meaning placement and type discipline), Pragmatic authoring (reviewability, governing-definition split handling), Didactic (Tell-Show-Show training support).

Conformance Checklist (normative)

Conformance use. This checklist is evidence for the governing-definition assignment guidance already stated in the Solution. It is not the first entry text for ordinary use and not a full audit regime by default; an item is applied only when its corresponding trigger triage, manifest, card, suite, planning, wiring, lexical, RSCR, PQG, or deprecation move is live. Before applying any item, name the Solution move it tests; if no such reader move is live, treat the item as support-only or not applicable rather than expanding the applied assurance or conformance material.

Conformance groups. Ordinary E.20 use starts with trigger triage and stops at the current governing locus when no denotation or mechanism-meaning change is live. Manifest-core items apply only when a MIP-run is actually triggered. Publication/assurance items apply only when citeability, card stubs, alias docking, RSCR, PQG, or deprecation continuity are live. Crossing, launch, and work-enactment checks are not governed by E.20; if they become live, use the gate, planning, or work loci and keep E.20 to governing-definition assignment.

IDRequirementPurpose
CC-E20-0 (MIP trigger triage).Every proposed mechanism, suite, planned-baseline, wiring, governing-definition, or citeable-token edit is classified as MIP not triggered, local wording or alias-docking only, or MIP-run manifest required before E.20 is cited to start a MIP-run.Prevents pure currentness cleanup from becoming a false runtime gate or expanded authoring event.
CC-E20-1 (Governing-definition assignment declared).Every MIP-run SHALL provide a MIP-run manifest that lists each changed item, exactly one governing definition, and the canonical location; each changed item SHALL be written in that canonical location.Prevents “floating commitments” and semantic placement errors.
CC-E20-2 (Card-first canonicalization).Any new MechanismDefinitionRef enumerated anywhere SHALL resolve to a canonical mechanism card (stub allowed) before suite/protocol enumeration.Eliminates dangling refs.
CC‑E20‑3 (Suite discipline preserved).If a suite is edited, it SHALL preserve: membership set semantics, protocol closure, no hidden tails, no gate decisions/logs, no publication records.Prevents suite-as-gate and suite-as-mechanism drift.
CC‑E20‑4 (SlotKind lexicon used when shared).If mechanisms share slot vocabulary in a family/suite, a suite-scoped lexicon SHALL exist and member mechanisms SHALL cite it.Stops slot token drift.
CC-E20-5 (P2W planning-to-work boundary preserved).If planned baselines are edited, plan items SHALL remain WorkPlanning-only (pins/refs only), SHALL target exactly one Description-scoped slot-bearing description via target_slot_bearing_description_ref (and SHALL NOT target a MechanismDefinitionRef), and SHALL NOT contain enactment witnesses, launch values, or gate decisions.Keeps planning and enactment separable and auditable.
CC‑E20‑6 (Kernel stability handled).If a kernel suite would gain a new required stage, the change SHOULD be expressed as a suite variant; if mutation occurs, it SHALL include continuity measures (alias docking and explicit delta).Minimizes E.15 impact radius of kernel edits.
CC‑E20‑7 (SoTA wiring, not kernel semantics).Method/comparator choices SHALL be represented via SoTA packs and wiring modules; if a SoTA update changes mechanism semantics, that change SHALL be made in the mechanism-governing pattern and not by wiring.Prevents silent semantic shifts.
CC‑E20‑8 (Terminology continuity).Any rename changing citeable tokens SHALL use alias docking and register updates; silent rewrites are non‑conformant.Preserves reference stability.
CC‑E20‑9 (RSCR triggers + regressions).Any semantic or reference-change SHALL emit RSCR triggers and extend the regression envelope to cover dangling refs + suite closure + guard/gate separation + P2W planning-to-work boundary.Makes changed loci and regression obligations explicit and testable.
CC‑E20‑10 (PQG coverage).Every MIP-run SHALL be reviewed under PQG (E.19) with PCP‑BASE and the triggered profiles implied by the change.Normalizes review and refresh.
CC‑E20‑11 (Deprecation preserves citeability).Any deprecation/supersession/retirement action SHALL preserve citeability of the deprecated token (alias docking if renamed), keep the canonical mechanism card, suite description, plan item, or wiring module resolvable, and declare a successor pointer or “no successor” explicitly (E.20:4.9.1).Prevents broken citations and orphaned semantics during evolution.

Common Anti-Patterns and How to Avoid Them

Anti-patternSymptomWhy it failsRepair
Wiring carries semanticsPart G extensions start redefining what a mechanism “means”.Meaning becomes edition-fragile and non-local.Move semantics back to the mechanism-governing pattern; keep extensions as binding only.
Suite becomes a meta-mechanismSuite text defines ops/laws or embeds thresholds/decisions.Collapses suite, mechanism, and gate kinds; creates hidden gate behavior.Restore suite as description-only; push thresholds to acceptance/gate kind.
Plan becomes enactmentPlan items contain launch values, witnesses, or decisions.Destroys the P2W planning-to-work boundary; breaks audit semantics.Strip enactment content; pin only refs/policies/time selectors.
Kernel churn by convenienceNew required stage is added directly to kernel suite membership.Expands the E.15 impact radius; destabilizes citations.Prefer suite variant; if not possible, pair with alias docking and explicit deltas.
Token drift by silent rename“Just rename UNM to ...” without aliasing.Breaks citations and downstream reasoning.Use F.18 alias docking; update registers explicitly.
MIP as gate surrogateA MIP-run manifest is treated as a runtime pass/fail result or gate passage.Governing-definition assignment is being mistaken for project execution or gate decision.Keep MIP as authoring-side governing-definition assignment; use A.21 for gate decisions and A.15 for work or enactment claims.
Governing-definition ambiguity“We’ll put it somewhere later.”Leaves incompleteness and drift invisible.Name the governing definition up front; otherwise treat as non-normative.

Consequences

Benefits

  • Mechanism introductions become trainable and reviewable (a repeatable governing-definition map).
  • Reduces drift by requiring one governing pattern for each mechanism meaning and keeping semantics in their governing pattern.
  • Keeps suites descriptive and the P2W planning-to-work boundary crisp, improving auditability.
  • Supports SoTA evolution without destabilizing kernel meaning.

Costs

  • Introductions use more explicit assignment records (governing-definition map, PQG coverage).
  • Some changes will be split into multiple governed edits (by design), which increases authoring overhead.
  • Kernel stability discipline can feel “slow” when a team wants a quick mutation.

Rationale

Mechanisms are high-leverage semantic units: a small change can touch suites, planned baselines, wiring modules, and audits. Without a protocol, the corpus tends toward semantic duplication across governing loci and non-local correctness (you can’t know what changed without reading everything).

Governing-definition-directed authoring is a pragmatic compromise: it does not depend on tooling, yet it gives a stable governing-definition map that supports subsequent review and refresh.

SoTA-Echoing

SoTA source ideaFPF invariantReader moveRejected shortcut
Mechanism semantics in A.6.1, effects-handler practice, and refinement-style signature discipline require an explicit operation/signature/law/admissibility locus.Mechanism meaning is assigned to A.6.1-governed mechanism definitions: operation algebra, law set, admissibility conditions, slot interface, transport/bridge regime, applicability, and audit.When a mechanism is introduced or changed, name the mechanism-governing definition that carries those semantic fields before suites, plans, or wiring cite it.Treating suite text, wiring prose, or a MIP manifest as mechanism semantics.
SoTA method evolution is carried by SoTA synthesis packs, shipping boundaries, and refresh wiring rather than silent kernel mutation.G.2, G.10, and G.11 own method-evolution support: SoTA packs, release/shipping boundary, and refresh wiring. If the SoTA change alters mechanism meaning, the mechanism-governing definition changes. Current-source examples are only admissible through named pack refs, such as SLSA v1.2 for provenance and attestation support, RO-Crate 1.2 for research-package publication support, QDax JMLR 2024 for QD-library support, or a named current domain survey or source when that domain is live.Tie a mechanism-changing SoTA update to the SoTA pack or source ref named by value and the refresh or shipping locus
, then edit the mechanism-governing pattern if semantics changed.Rephrasing a fashionable method update as kernel semantics or hiding it in wiring.
Open-ended and set-valued method evolution may return candidate sets, archives, or selector outputs.C.18, C.19, and G.5 preserve set-return and selection boundaries; MIP must not force one approved mechanism too early.Keep candidate mechanisms, selected sets, abstain/reject states, and archive semantics in their receiving loci until a mechanism-governing definition is actually selected for introduction.Collapsing open-ended exploration or selector output into one prematurely approved mechanism.
Mechanism-related refresh uses explicit pins and trigger kinds rather than restating method semantics.G.11-style refresh uses edition pins, policy pins, PathSliceId, and RSCR trigger kinds; refresh wiring supports comparable reruns but does not redefine the method.When a mechanism change affects refresh, name the pins and RSCR trigger kinds and keep method semantics in the mechanism or SoTA-pack locus.Letting refresh wiring become a second method definition.
Stable identifiers and modular vocabularies preserve reference continuity.Names, aliases, lexicons, and stable identifiers preserve citeability; they do not establish mechanism law, admissibility, evidence, or gate fit. Mechanism meaning and admissibility belong in governing definitions, signature/law/admissibility patterns, suite boundaries, SoTA packs, and wiring modules according to their role named by values.Use alias docking and lexicon updates to keep references alive, then return mechanism meaning to the governing definition that governs it.Treating ontology or vocabulary modularity as sufficient mechanism introduction.

Relations

Builds on:

  • E.8 (pattern structure and normative authoring discipline)
  • E.10 / F.17F.18 (lexical registers, twin labels, alias docking)
  • E.19 (PQG/PCP profile-based review)
  • E.15 (evolution discipline; DRR/edition thinking)

Coordinates with:

  • A.6.1 (U.Mechanism definition template governance)
  • A.6.7 (MechSuiteDescription integrity)
  • A.15.3 (SlotFillingsPlanItem and planned baseline seam)
  • E.18 (E.TGA flows that cite planned baselines)
  • G.Core (RSCR trigger catalogue)
  • G.2 (SoTA synthesis packs)
  • G.x:Ext.* (wiring modules via GPatternExtension)

Constrains:

  • Any change set that introduces or revises mechanisms, suites, planned baselines, or wiring in a way that changes citeable loci.

E.20:End

FPF Pattern-Quality Evaluation CharacteristicSpace

Status: Core.

Problem frame

Use E.21 when one authored FPF pattern of concern must be evaluated for quality under the use required by the governing evaluation frame: ordinary practitioner use, authoring input, landing input, release input, external-review input, high-assurance reuse input, canonization input, or another explicitly requested pattern-quality use. The evaluator does not replace the required ClaimScope with an easier one. If the pattern fails the required use, the result is repairBeforeUse, holdForArchitectureDecision, or refreshNeeded; a different use needs a different evaluation frame and does not rescue the current result.

Not this pattern when the evaluated object is one DRR, an FPF-level corpus object, a single wording repair, a source-use decision, or a project-side evidence, assurance, gate, release, safety, compliance, work, or decision claim. Use E.9.DA, E.2.DA, E.10 and precision-restoration neighboring patterns named by value, or the project-side pattern governing the claim for those objects.

First useful move: recover the required scope from the governing request, E.22 frame, campaign seam, landing check, release check, or review assignment; then name the governing pattern of concern, required scope, working reader, intended use, and qualification window; then evaluate every coordinate in RequiredPatternQualityCoordinates with a value and short rationale.

floorEvaluation changes the declared floor and expected evidence economy. It never creates a partial E.21, inactive coordinates, overlay-trigger shortcuts, narrowing to an easier use, blocker-only substitution, or a permission to skip precision-restoration discharge. Fragmentary, wrong-shaped, or weak pattern text is still evaluated under the required scope; weakness receives low coordinate values, repair status, architecture hold, or refresh status.

What goes wrong if missed: pattern quality becomes taste, checklist closure, source count, review state, landing state, or length. Short patterns can pass while missing mature content; long patterns can pass while hiding the first user move; semio material can take over a non-semio pattern.

Primary EntityOfConcern in plain terms: the quality claim of one governing FPF pattern of concern for a declared use.

Problem

FPF patterns need a quality evaluation that is stronger than a style checklist and lighter than a project assurance audit. Earlier review habits produced two opposite failures:

  1. Too weak. A reviewer marks a pattern "ready" because no blocker is obvious, because it landed, or because headings exist.
  2. Too heavy. A reviewer adds more warnings, evidence cards, source rows, boundary notes, and process residues until the pattern becomes harder to use.

E.21 solves this by measuring the pattern of concern against one complete coordinate set. The coordinates ask whether the pattern is usable, coherent, current, precise, affordable, mature enough for its claim, and safe from proxy improvement.

Forces

ForceTension
Comparability vs false precisionPattern versions must be comparable, but ordinal qualities cannot be averaged.
Completeness vs affordabilityEvery coordinate is evaluated; rationale and evidence can stay compact.
Maturity vs lengthA short pattern is mature only when selected mature-pattern ingredients are present in the body or neighboring pattern governing the claims.
Ontology vs usabilityNames and kinds must be exact without burying the first user move.
Semio precision vs semio-biasEpisteme and publication distinctions matter, but non-semio patterns still lead with their own EntityOfConcern.
Open-ended improvement vs stopImprovement can continue forever, while one version needs a scoped stop condition.

Solution

E.21 is the FPF pattern-quality specialization of A.19.ECS. It evaluates one pattern of concern under one declared quality claim.

There is one evaluation shape:

  1. frame the object and use;
  2. apply the ordinal scale to every required coordinate;
  3. justify each value with ShortRationale;
  4. assign PatternQualityStatus;
  5. state stop, repair, architecture hold, or refresh condition;
  6. when improvement is requested, return proposal rows without changing the coordinate result into a work plan.

There is no separate pre-check result. If a pattern lacks frame, first move, source basis, mature comparison, or naming clarity, the relevant coordinates fall.

Local names and kind settlement

Local nameKind and role
PatternQualityEvaluationAuthored quality evaluation record over one pattern of concern.
PatternOfConcernRefFPF pattern named by value that this E.21 evaluation makes the pattern of concern: host, monolith section, edition, or pinned version. PatternOfConcern is role-relative: the same pattern can also be the pattern of concern for another role in another flow, for example when a reader selects, applies, or reviews that pattern. This row names the concern of the quality-evaluation flow, not a special kind of pattern and not a second text. The evaluated pattern also has its own primary EntityOfConcern: the subject that its Problem/Solution/guidance is about. FPF patterns are applied to situations, claims, texts, or work objects. Use governing pattern only in the typed form governing pattern for <claim/relation/boundary> when the pattern actually governs that specific item; use related pattern for a looser pattern relation; use relation only for the relation itself.
ClaimScopeQuality claim boundary recovered from the governing frame: ordinary use, authoring input, landing input, release input, external-review input, high-assurance reuse input, canonization input, or another explicitly requested pattern-quality use. It is not chosen by the evaluator to make a failing request pass.
WorkingReaderScopeReader role and first-use situation the pattern must serve.
IntendedUseAction that may use the result: continue drafting, admit for declared use, repair, refresh, or compare candidates.
QualificationWindowEdition, SoTA, related-pattern, release, time, or comparison window in which the evaluation is current.
EvaluationEvidenceBasisEvidence loci named by value for the evaluation: pattern body version, host or monolith section, README scenario, ToC row, E.11 entry-distribution locus, I.2 expanded entry-disambiguation case when corpus-facing, card or retrieval cue when claimed, source-currentness locus when SoTA/currentness is valued, mature comparator set when maturity is valued, and worked case or absence of worked case when case coverage is valued.
QualityEvaluationQuestionFrameRefE.22 frame when purpose, floor, trade-offs, absorption, or proposal expectation needs to be declared.
CoordinateValueRationalesOne row for every required coordinate: Coordinate, Value, ShortRationale.
CoordinateEvidenceRefsPer-coordinate text, case, relation, SoTA, mature comparator, projection, or review refs where the short rationale depends on evidence outside the pattern body row being discussed.
PrecisionRestorationProfileCompact profile over five precision-restoration layers: word/head/use precision, phrase-level apparatus, repeated or distributed material, role/carrier separation, and pattern-application ontology. It collapses those layers into one scalar effect for the E.21 result, not one coordinate per defect. The profile names present or bounded issues, checked absence scope when clean, affected coordinates, and the selected restoration or governing pattern such as E.10, E.10.ARCH, F.18, F.19, or an object-specific pattern.
DominanceSetCoordinates used to compare already evaluated candidate versions. It never changes the required coordinate set.
PatternQualityStatusScoped pattern-quality result assigned by E.21; it is not an E.19 admission or refresh decision by itself.
StopConditionWhy improvement may stop, continue, refresh, or hold.
Names are local to pattern-quality evaluation unless F.18 promotes a durable name. They are not project evidence, release state, review state, or assurance.

Evaluation record

PatternQualityEvaluation:
  PatternOfConcernRef: <governing pattern of concern>
  ClaimScope: <declared quality claim>
  WorkingReaderScope: <reader and first-use situation>
  IntendedUse: <what may consume the result>
  QualificationWindow: <edition/source/neighbour/release/comparison window>
  EvaluationEvidenceBasis: <checked pattern, corpus, source, comparator, case, and projection loci; missing or unchecked loci named explicitly when they affect values>
  PrecisionRestorationProfile: <collapsed profile: word/head/use, phrase-apparatus, repetition/distribution, role-carrier, pattern-application; scalar effect, affected coordinates, and selected restoration or governing pattern>
  CoordinateValueRationales: <all required coordinates, values, short rationales>
  PatternQualityStatus: <status>
  StopCondition: <local stop, first repair, hold, or refresh>

Ordinal scale, result row, and adjacent-value rationale

ValueLabelMeaning
0absentThe characteristic is not expressed for the declared scope.
1namedOnlyIt is named or implied but not usable as quality evidence.
2partiallyExpressedForDeclaredUseIt is present but incomplete, fragile, or insufficient for the declared use.
3sufficientlyExpressedForDeclaredUseIt is usable for the declared scope, with limits visible.
4wellExpressedForDeclaredUseIt is clear, evidenced, and bounded for the declared scope.
5exceptionallyExpressedForDeclaredUseIt is exceptional for the declared use across reinforcing loci and cases, without hidden cost or neighbour loss.

Values are ordinal content evaluations. They are not U.Measures, averages, percentages, maturity-ladder steps, review votes, or landing status.

The result-bearing coordinate row has exactly this shape:

CoordinateValueShortRationale
<E.21 coordinate><0..5><assigned-value basis; why the lower adjacent value would understate the evidence; why the higher adjacent value would overstate the evidence, or for 5 what evidence makes 4 too weak and what would lower/reopen>

A two-column coordinate/value table, a narrative paragraph, a table whose comment lacks adjacent-value comparison, or a result whose value depends on unchecked external loci is not an E.21 result. It is only draft evaluation material until every coordinate has a ShortRationale row and the result names the EvaluationEvidenceBasis used for values that depend on source, comparator, corpus, projection, or worked-case evidence.

A ShortRationale is allowed to be compact, but it is not allowed to be evidenceless. When the value depends on a source-currentness row, mature comparator, README scenario, ToC row, E.11 entry-distribution locus, I.2 expanded entry-disambiguation case, card, retrieval cue, monolith section, worked slice, near-miss, or anti-case, the rationale names that locus by value or says that the locus was missing or unchecked. "By value" means a recoverable section, row, case, checklist item, relation, source row, projection row, comparator id plus selected ingredient, or exact absent locus; a category list such as "entry, first move, boundaries, SoTA, checklist, relations" is not by-value discharge. Missing or unchecked evidence lowers the value for the coordinate that needs it; it does not create a separate "not evaluated" result.

A 5 is not a reward for clear early wording, named neighbour relations, or a well-formed field set alone. It needs exceptional expression for the declared use: reinforcing loci, a worked or otherwise replayable slice where the coordinate demands one, and no hidden cost or neighbour loss. When the evaluator cannot say why 4 would understate the evidence, assign 4 or lower.

When a coordinate's 5 meaning names a filled case, replayable slice, near-miss, anti-case, worked comparison, projection evidence, currentness basis, or exact-neighbour replay, absence of that evidence caps that coordinate at 4 even if the prose is otherwise strong. Do not hide the same absence only in CaseCountercaseAndTransferCoverage; lower every coordinate whose own 5 meaning needs that missing evidence. A 5 rationale names the reinforcing evidence loci that make 4 too weak.

For MaturePatternParityAndSelectedContentSufficiency, the rationale names a mature-pattern comparison set and the selected mature ingredients being claimed. For non-epistemic patterns, include at least one mature non-epistemic comparator when one exists: work, method, role, system, control, architecture, selection, engineering-action, or another pattern whose primary EntityOfConcern is not an episteme or publication. Value 4 requires by-value discharge of selected ingredients in the body or neighboring pattern governing the claims; comparator IDs plus a generic "main ingredients are present" sentence are only value 3. The comparison is not a length target and not permission to copy semio apparatus.

For a 4 or 5 on MaturePatternParityAndSelectedContentSufficiency, include a compact maturity-discharge payload in the rationale or CoordinateEvidenceRefs: comparator=<pattern id>; selectedIngredient=<ingredient name>; currentLocus=<section, row, case, checklist item, relation, or neighboring pattern governing the claim>; missingOrLowering=<absent or weak ingredient, if any>. A category list such as "frame, first move, neighbour relations, CC, SoTA, relations" without current loci is still value 3, even when the listed categories are plausible mature ingredients.

Precision-restoration profile

Before assigning the coordinate table, record one PrecisionRestorationProfile. This is not an optional scan and not a lexical grep result. It is a role-based attention discharge: the evaluator asks what work the sentence, table, section, or repeated content family is doing in the pattern of concern.

Use this compact shape:

PrecisionRestorationProfile:
  overallEffect: <clean | boundedLocal | lowersCoordinates | repairBeforeUse>
  wordHeadUsePrecision: <clean | E.10/E.10.ARCH/F.18/governing pattern needed | lowers coordinates>
  kindRestorationCheck: <pre-repair kind/relation/slot-or-use-position/admissible use -> proposed post-repair kind/relation/slot-or-use-position/admissible use; preserved | split | intentionally changed | blocker>
  phraseApparatus: <clean | F.19 needed | lowers coordinates>
  repetitionAndNegativeDistribution: <clean | bounded-local | lowers coordinates>
  roleCarrierSeparation: <clean | quality/development/projection carrier leakage | lowers coordinates>
  patternApplicationOntology: <clean | application relation unclear | lowers coordinates>
  checkedLoci: <sections/rows/cases/relations checked>
  affectedCoordinates: <coordinates lowered or protected>
  repairProposal: <repair, no-repair disposition with loci, or owning locus>

This profile deliberately collapses several small subreadings into one scalar effect. The scalar is the strongest quality effect that any layer requires: clean, bounded local repair, coordinate lowering, or repair-before-use. The layers are diagnostic, not extra coordinates, checklists, or proposal quotas. A new precision-restoration symptom is classified into one of these layers or assigned to the selected restoration or governing pattern; it does not mint a new [E.21](/generated/patterns/E.21) coordinate. Details belong in the patterns that govern those objects: word/head/name problems apply [E.10](/generated/patterns/E.10), [E.10.ARCH](/generated/patterns/E.10.ARCH), or [F.18](/generated/patterns/F.18); phrase-level boilerplate and plain-technical rewriting apply [F.19](/generated/patterns/F.19); claim, relation, evidence, work, decision, assurance, publication, or pattern-application problems apply the pattern that governs that object. [E.21](/generated/patterns/E.21) consumes only the result: which coordinates fall, which stay protected, and what repair would make the quality claim true.

The kindRestorationCheck is required whenever a precision-restoration finding or repair proposal changes wording. It records the meaning-bearing object, kind, relation, slot or use-position, admissible use, and scope before and after the proposed repair, then names the governing pattern when another pattern governs the affected kind, relation, claim, or position ([A.6.0](/generated/patterns/A.6.0)/[A.6.5](/generated/patterns/A.6.5), [A.6.P](/generated/patterns/A.6.P), [C.29](/generated/patterns/C.29), [A.15](/generated/patterns/A.15), [E.10.ARCH](/generated/patterns/E.10.ARCH), or another governing pattern). [E.21](/generated/patterns/E.21) does not restate slot discipline or mathematical-lens ontology; it only checks that the repair preserved or deliberately changed them by value. The check is a bounded complete preservation proof, not a blanket demand to formalize every sentence and not a license to do the least visible work. Complete means every field whose value can drift because of the changed wording receives one explicit disposition: not triggered/ordinary prose/no FPF-governed phrase changed with checked loci, preserved, split, intentionally changed by accepted decision, or blocker. A no-repair result is valid only as one of those dispositions with loci; "nothing to do" without that discharge is a missing repair. Expand the row only when a kind, relation, claim, slot/use-position, or admissible use can drift. A lexical replacement is not a repair when it only removes a trigger word, substitutes one umbrella for another, narrows a graph or method into a work sequence, widens a work occurrence into a method, turns a publication or evidence carrier into the object itself, or otherwise changes kind or slot/use-position without an accepted decision. If the kind or slot/use-position cannot be recovered, the profile is at least lowersCoordinates; if the proposed repair would change kind or slot/use-position and no accepted DRR or governing pattern justifies that change, the result is repairBeforeUse or holdForArchitectureDecision.

When the profile is not clean, lower every affected coordinate named by the profile. Do not hide a present precision-restoration issue only in EntityOfConcernPrimacyAndSemioBiasResistance, and do not raise the result through related-pattern-boundary praise, projection evidence, or "correct but true" guards when the profile shows that those materials compete with the positive subject/action spine.

RequiredPatternQualityCoordinates

Every E.21 evaluation of an FPF pattern of concern evaluates every coordinate below.

CoordinateWhat it evaluates
WorkingSituationAndUseBoundaryRecognizabilityWhether the reader recognises the situation, ordinary use, non-use, harm if missed, and boundary early.
EntityOfConcernAndClaimScopeStabilityWhether the primary EntityOfConcern and quality-claim scope stay stable across title, Problem frame, Solution, cases, checklist, relations, and status.
ActionPathGuidanceWhether the Solution gives a usable action path after the first move is recovered.
ClosureAndBoundedNonUseRecoverabilityWhether stop conditions, repair conditions, bounded non-use, and any governing pattern for <claim/relation/boundary> statements are recoverable.
SemanticKindAndNameRecoverabilityWhether names, kinds, relations, qualifiers, and claim boundaries recover the same FPF interpretation.
NeighborAuthorityAndBoundedUseFitWhether evidence, assurance, measurement, naming, work, gate, decision, publication, release, and project claims stay with the pattern that governs each claim, relation, or boundary.
EntityOfConcernPrimacyAndSemioBiasResistanceWhether the pattern leads with its own EntityOfConcern and action move instead of letting description, publication, source, evidence, review talk, standard non-use warnings, precision-repair material, quality/projection evidence, package rationale, or cross-pattern reference apparatus take over. The PrecisionRestorationProfile supplies the collapsed diagnosis across word/head/use precision, phrase apparatus, repetition/distribution, role/carrier separation, and pattern-application ontology. This coordinate consumes that profile by lowering the value when those materials compete with the positive subject/action spine. Semio-bias is one special case when the displaced content concerns descriptions, sources, publications, notes, records, diagrams, or evidence-like artifacts.
PracticalUseDeltaAndHarmPreventionWhether the pattern changes a real reader move, prevents a named misuse, reduces a named cost, or preserves a named boundary.
UseAffordabilityAndApparatusProportionalityWhether ordinary first use stays affordable and heavier apparatus appears only when it buys admissible use.
RepairLocalityAndChangeImpactPredictabilityWhether repairs have the smallest locus and predictable downstream impact.
ProxyForValueSubstitutionResistanceWhether the evaluation asks what became worse when visible quality coordinates improved.
ClaimJustificationTraceabilityCurrentnessAndReplayabilityWhether the claim is replayable from pinned text, scope, evidence, currentness basis, limitations, status, and stop reason.
CaseCountercaseAndTransferCoverageWhether positive cases, near-misses, anti-cases, and transfer cases match the breadth claimed.
MaturePatternParityAndSelectedContentSufficiencyWhether selected mature-pattern ingredients are present in the body or related patterns for this EntityOfConcern and use.
SoTABindingAndCurrentnessWhether current best-known practice changes the pattern and has reopen/currentness discipline.
FormalClaimLegalityAndLensFitWhether measurement, scale, comparison, formal model, simulation, causal, mathematical, QL, or learned-lens claims are legal and bounded, or correctly absent.
FalsifiabilityAndLoweringConditionWhether coordinate values, status, and stop claims say what would raise, lower, or reopen the evaluation.
CorpusEntryProjectionAndEcologyFitWhether README scenarios, ToC query cues, Preface cues, E.11 entry-distribution loci, I.2 expanded entry-disambiguation cases, cards, summaries, retrieval snippets, durable names, relations, and corpus ecology preserve the scoped quality result without becoming authority faces, stale echoes, or pattern content. Corpus-entry and projection evidence belongs in the E.21 result, E.19 run record, README/ToC/E.11/I.2, retrieval/card carrier, or other quality carrier unless the pattern of concern's own EntityOfConcern and user move are that projection or evaluation work.
EvolutionFrontAndRefreshDisciplineWhether variants, fronts, archives, refresh windows, and smallest-reopen rules preserve open-ended evolution without endless polishing.

Constraint, harm, safety, security, compliance, deontic, self-application, recursion, and high-assurance questions do not add a second coordinate family. Evaluate them through the coordinate that owns the content: related-pattern authority, traceability, formal legality, falsifiability, affordability, corpus ecology, or evolution/refresh.

Coupled-flow unity/separation for pattern quality. An E.21 run evaluates a PatternOfConcernRef inside a development, refresh, or admission flow. Another flow may make the same pattern a pattern of concern for a different role, for example a practitioner selecting and using it, a reviewer applying it to another text, or a later evaluator reopening it. One TransductionGraph may join pattern development, pattern use, use-found evaluation, and repair or refresh flows through transfer, feedback, return, edition-change, or projection relations. Keep three roles distinct in each sentence: the pattern as concern of the current flow, the intended reader addressed by the pattern, and the pattern's own primary EntityOfConcern inside its Problem/Solution/guidance. E.21, E.19, handoffs, ledgers, README/ToC/E.11/I.2/retrieval checks, and landing evidence are checking operations or carriers in the development or evaluation flow. They can cause edits to the pattern, but they are not automatically user-facing content for the role addressed by the pattern. DesignRunTag stays on the subject-context, claim, work, trace, or artifact relation inside the TGA graph; it does not decide whether a pattern is current, obsolete, under development, or being used. Treat FPF pattern development as the local pilot case: quality-loop proof changes the pattern through edits, not by being copied into the pattern.

Frequent 3/4/5 calibration points

These rows calibrate common disagreements. They do not replace the coordinate definitions above.

Coordinate family3 is typical when4 is typical when5 is typical when
WorkingSituationAndUseBoundaryRecognizabilityThe use situation is recoverable but late, abstract, or missing harm/payoff/non-use detail.The situation, first move, harm, payoff, and non-use are early and clear.Early recognition is reinforced by a filled or replayable first-use slice showing that a cold practitioner can enter correctly.
EntityOfConcernAndClaimScopeStabilityThe primary object is named but related record, evidence, lens, or project claims keep pulling the scope.The primary EntityOfConcern and claim scope stay stable, with bounded related-pattern material.Scope stability is reinforced across title, recognition text, Solution, worked or replayable case material, checklist, relations, and non-use without any local apparatus stealing attention.
ActionPathGuidanceThe move is named but only partly executable, or the Solution mostly assigns governing loci instead of giving this pattern's own action.The first move and continuation are executable in this pattern's own subject terms; related-pattern statements are declarative, compact, and late.The action path is demonstrated by a filled worked slice or equivalent replayable evidence.
ClosureAndBoundedNonUseRecoverabilityNon-use or related-pattern statements are present but not tied to stop, repair, or lowering conditions.Stop, repair, bounded non-use, and governing-pattern statements for specific claims, relations, or boundaries are recoverable for declared use.A worked stop, overturn, or non-use case shows how closure changes status or the next applicable pattern relation.
NeighborAuthorityAndBoundedUseFitRelated patterns are named but some authority split remains generic, future-pattern-like, ambiguous, role-nicknamed, or too early in the Solution.Related patterns named by value and limited declarative relations are clear enough for declared use and do not replace the pattern's own content.Related-pattern authority is replayable across examples, relations, and overread cases, with pattern application and authority kept explicit.
EntityOfConcernPrimacyAndSemioBiasResistanceThe pattern is about its object but one or more precision-restoration layers lead or leak into the pattern in a developer/reviewer/evaluator role.The pattern leads with its own object and action path; auxiliary material is compact, declarative, and late; role/carrier/locus/flow/status words are used only when they add a real kind, relation, evidence value, or user move; quality/projection evidence about the pattern stays outside the pattern.The primary object and action spine are first recoverable across recognition text, Solution, cases, and checks even when auxiliary material is present, and any precision-restoration or quality/projection material is in its proper carrier rather than in the pattern.
PracticalUseDeltaAndHarmPreventionThe prevented harm is named but not demonstrated.The pattern changes a recoverable move and blocks named misuse for declared use.A worked or near-miss case shows the practical delta, cost of the missed pattern, and prevented harm.
UseAffordabilityAndApparatusProportionalityThe first move exists but apparatus is heavy for ordinary readers.Ordinary first use is affordable and heavier apparatus opens only when useful.A minimal first-use example shows the thin path works before heavy apparatus.
RepairLocalityAndChangeImpactPredictabilityRepair conditions or related-pattern relations are named but downstream impact is not shown.Repairs have local loci and predictable impact for declared use.A worked repair or downstream-impact slice shows the smallest locus and changed related-pattern relation.
ProxyForValueSubstitutionResistanceProxy risks are named but "what got worse" is not applied.The pattern blocks visible proxy substitutions and asks what worsened.A proxy-failure case shows a visible improvement damaging intended value, and the pattern prevents that stop.
ClaimJustificationTraceabilityCurrentnessAndReplayabilityFields or sources exist but replayability/currentness basis is incomplete.The claim can be replayed from pinned text, evidence, currentness basis, status, and stop reason.A filled evidence/currentness slice shows how the claim is replayed and when it reopens.
CaseCountercaseAndTransferCoverageArchetypes are listed, but no filled worked case or near-miss exercises the claim.At least one filled worked case plus a near-miss or anti-case covers the declared use.Heterogeneous cases, countercases, and transfer slices cover the breadth claimed.
MaturePatternParityAndSelectedContentSufficiencyMature comparators are named or implied, but selected mature ingredients are not discharged by value.Mature comparators are named and selected ingredients are discharged by value in the body or related patterns named by value.Mature parity is shown across reinforcing body sections, related patterns, omissions, cases, and lowering conditions without copying irrelevant apparatus.
SoTABindingAndCurrentnessSources are relevant and not decorative, but currentness, source-use status, or reopen conditions are compact or incomplete.Load-bearing sources state adopt/adapt/reject, content mutation, currentness window, and reopen condition.The pattern compares current best-known practice against popular, official, or lineage alternatives and carries the resulting source decisions into solution, cases, boundaries, and refresh.
FormalClaimLegalityAndLensFitFormal, scale, lens, or measurement terms are bounded but not exercised.Formal/lens/measurement claims are legal, bounded, and governed by related patterns governing the pattern makes those claims.A worked formal/lens/scale comparison shows what is preserved, lost, admissible, and not proved.
FalsifiabilityAndLoweringConditionStop, waiver, or non-use fields exist, but lowering and reopen triggers for the main claims are mostly implicit.The pattern states explicit lowering/reopen triggers for its main claims; named fields alone do not reach 4 unless they say what evidence change lowers, overturns, rejects, or reopens the claim.Worked lowering or overturn cases show how values, status, or use change.
CorpusEntryProjectionAndEcologyFitHost text is coherent, but README, ToC, E.11, I.2, card, retrieval, monolith, or projection evidence is absent for a corpus-facing claim, or that evidence is placed anywhere in the pattern as method, note, appendix, relation, rationale, or quality-status content about the pattern.Corpus-facing entry/projection loci are named and aligned enough for the declared use, and their evidence stays in the evaluation/result/projection carrier rather than entering the pattern.Retrieval, stale-projection, cold-reader, or projection-update evidence shows corpus ecology stays aligned after change without leaking into the pattern.
EvolutionFrontAndRefreshDisciplineReopen is delegated to related patterns or implied by source-return.The smallest reopen locus, source/currentness trigger, or variant/front condition is explicit.Variant/front/archive or ongoing refresh discipline is replayable for the declared use.

For EntityOfConcernPrimacyAndSemioBiasResistance, do not compensate a bad PrecisionRestorationProfile with NeighborAuthorityAndBoundedUseFit or CorpusEntryProjectionAndEcologyFit. This is a role-based evaluation, not a lexical search: ask what role the sentence plays. Material about developing, reviewing, projecting, landing, evaluating, or proving this pattern's quality belongs in the carrier that owns that work, not in the pattern. Related-pattern statements named by value can be true and still damage the pattern of concern when they appear before the pattern's own EntityOfConcern and action spine are recoverable. If the opening Problem frame or Solution starts with precision-restoration material before the pattern's own subject and move, this coordinate is at most 2; if a positive action exists but the reader must traverse that material across sections to find it, it is at most 3. Compact related-pattern statements belong in Relations or short late boundary rows and must preserve kind. Local boundary prose is admissible only when it states a documented local confusion and local stop condition not already carried by the owning pattern for that specific distinction or claim boundary. Also lower ActionPathGuidance, WorkingSituationAndUseBoundaryRecognizability, PracticalUseDeltaAndHarmPrevention, and UseAffordabilityAndApparatusProportionality when the profile shows that precision-restoration issues displace first-use content. If the declared use is Stable, landing-input, release-input, external-review-ready, or another corpus-facing use, the evaluation must use evidence for corpus entry and projection coordinates. A host-only body evaluation can still evaluate the pattern body, but it cannot silently turn missing README, ToC, E.11, I.2, card, retrieval, monolith, or projection evidence into a high CorpusEntryProjectionAndEcologyFit value.

Status and stop condition

StatusMeaning
admissibleForDeclaredUseEvery coordinate meets the declared floor for the scoped use, and bounded non-use is stated.
repairBeforeUseOne or more coordinate floors fail for the declared use.
holdForArchitectureDecisionThe defect is not local prose; EntityOfConcern, neighbour authority, split, merge, or placement must be decided.
refreshNeededA SoTA, neighbour, terminology, retrieval, telemetry, use-scope, or corpus change invalidates a previous evaluation.

Default floor is 4 wellExpressedForDeclaredUse on every coordinate for ordinary practitioner use, authoring-input use, landing-input use, Stable, external-review-ready, release-input, canonization-input, stop-improving claims, and ordinary improvement-loop use. A diagnostic or exploratory request still measures every coordinate and reports values; it does not create an admissible-use shortcut. If the assignment asks for corpus-facing, landing-input, Stable, release, or external-review use, the evaluator measures that required use and returns repairBeforeUse, holdForArchitectureDecision, or refreshNeeded when the floor is missed.

An all-5 result is a local exceptional result under the declared scope and qualification window. It is not a permanent end of development. E.23 can reopen improvement when use, source, comparison set, front, affordability, or payoff changes.

Compact result form

An E.21 result uses this result-bearing form:

E.21 result:
  Pattern of concern: <PatternOfConcernRef>
  Declared scope/use/reader/window: <ClaimScope, IntendedUse, WorkingReaderScope, QualificationWindow>
  Evidence basis checked: <EvaluationEvidenceBasis>
  Status: <PatternQualityStatus>
PrecisionRestorationProfileOverallEffectKindRestorationCheckLociAffectedCoordinatesRepairProposal
<word/head/use / phrase-apparatus / repetition-distribution / role-carrier / pattern-application profile>`<cleanboundedLocallowersCoordinatesrepairBeforeUse>`<pre/post kind, relation, slot/use-position, and not-triggered/ordinary/preserved/split/changed/blocker disposition>
CoordinateValueShortRationale
<all RequiredPatternQualityCoordinates rows><0..5><assigned-value basis; why not lower; why not higher or what would lower/reopen>
First repair or stop: <repair | hold | local stop>
Reopen if: <smallest changed locus or condition>

Status is not assigned from a two-column table, a prose summary, a checklist count, an [E.19](/generated/patterns/E.19) pass/fail row, a table missing ShortRationale, a result missing the required PrecisionRestorationProfile, or a result missing the evidence basis needed for the values it claims. Such material can support a later evaluation, but it is not the [E.21](/generated/patterns/E.21) result. Conversely, an [E.21](/generated/patterns/E.21) status is a pattern-quality status, not a release crossing: [E.19](/generated/patterns/E.19) or the release named by value/admission process still checks gate-specific carry-through, projection, monolith, packaging, authority, and non-overread conditions.

Finding and proposal rows

E.21 finding:
  Pattern of concern: <PatternOfConcernRef>
  Coordinate or status affected: <coordinate | status | stop>
  Pattern locus: <section, row, example, relation, source row, projection>
  Value or status effect: <value/status/floor/stop impact>
  Correction direction: <what should change>
  Closure test: <what changed pattern text would show>

When [E.22](/generated/patterns/E.22), [E.23](/generated/patterns/E.23), returned-finding absorption, or exceptionalImprovementEvaluation asks for improvements, add proposal rows for every below-target coordinate, status weakness, stop-condition weakness, or open question that can be improved within the declared scope. One proposal may cover several coordinates only when it names all affected coordinates and the shared repair.

Worked slices

Names named by value, no first move. A pattern has precise Tech names and current source rows but no first user move. WorkingSituation..., ActionPathGuidance, and PracticalUseDelta... fall; source currentness does not rescue ordinary use.

Short architecture pattern. A compact pattern has a triage form but no worked slice and no mature-pattern comparison. It can be useful as local expert reference material, but MaturePatternParity... and CaseCountercase... stay below exceptional until selected mature content is present.

Precision-restoration profile in a non-semio pattern. A pattern about architecture, work, system levels, method, P2W, or another non-semio EntityOfConcern tries to introduce the subject through a catalog of other claim kinds or objects that are outside its own subject. That catalog is unbounded because every EoC is outside infinitely many other EoCs. If copied boundary doctrine leads the Problem frame or Solution, EntityOfConcernPrimacyAndSemioBiasResistance falls to 2 or 3 even when every individual boundary is true. Repair by leading with this pattern's own EntityOfConcern and action spine, and replace copied boundary doctrine with one governing pattern id or one governing pattern for <claim/relation/boundary> statement unless a documented local confusion needs an local stop condition not already carried there. If the same doctrine is spread across Problem frame, Solution, anti-patterns, checklist, and Relations, classify the aggregate under the profile's repetition/distribution layer and repair the distribution, not just each local sentence.

Reference apparatus before Solution content. A pattern's first Solution paragraph assigns other patterns or related-pattern mappings before it unfolds the ontology, method, norm, worked action, or other positive solution for the pattern of concern's own EntityOfConcern. Even if the related pattern id is correct, ActionPathGuidance, EntityOfConcernPrimacyAndSemioBiasResistance, PracticalUseDeltaAndHarmPrevention, and sometimes NeighborAuthorityAndBoundedUseFit fall. Repair by moving discoverability to README, ToC, E.11, I.2, or retrieval/projection carriers, moving compact pattern-id or governing pattern for <claim/relation/boundary> statements to Relations or a late boundary row, moving architecture-placement rationale to DRR or architecture documents, and rewriting the Solution to answer "what do I do with this pattern's EoC?" before any statement about another pattern.

Overformalized precision. A pattern uses correct FPF kinds, slots, references, and governing-pattern pointers so densely that the working reader cannot recover the first useful move, practical delta, or generalizing insight without doing an internal audit. Precision is then present but not usable. Lower UseAffordabilityAndApparatusProportionality, WorkingSituationAndUseBoundaryRecognizability, and sometimes ActionPathGuidance. Repair by keeping the ontology named by value only where it carries a live FPF-governed claim, moving restoration evidence to the evaluation or DRR carrier, and adding a short worked slice or plain recognition sentence that preserves the same kind without extra apparatus.

QualityCarrierLeakage in the pattern. The pattern says that corpus projection, README/ToC/E.11/I.2 alignment, retrieval/cold-reader evidence, monolith parity, external-review readiness, landing evidence, PatternQualityStatus, all-4/all-5 posture, or another quality-carrier result is what the user should do with the pattern's EntityOfConcern, or records developer/reviewer/executor correspondence as if it were pattern content. The defect is not limited to Problem frame, Solution, examples, or checklist; notes, appendices, Relations, Rationale, SoTA-Echoing, tables, and conformance rows are also parts of the pattern in hosts and the monolith. That evidence may be required for E.21, E.19, landing, or retrieval carriers, but it is not automatically a user action in the pattern of concern. Lower EntityOfConcernPrimacyAndSemioBiasResistance, ActionPathGuidance, UseAffordabilityAndApparatusProportionality, and CorpusEntryProjectionAndEcologyFit when this evidence enters the pattern. Repair by moving the evidence to the E.21 result, E.19 run record, README/ToC/E.11/I.2, card/retrieval/projection carrier, or release/landing evidence carrier, and keeping in the pattern only the user-facing move or boundary that follows from that evidence.

Quality table without rationale. A result gives values but no adjacent-value rationale. Values are unsupported. Add ShortRationale or lower.

Goodharted improvement. A rewrite improves source refs and proof sketches but becomes hard to use. Re-evaluate affordability, repair locality, proxy-for-value, and corpus ecology before stopping.

Conformance checklist

CheckRequirement
CC-E21-1Recover ClaimScope from the governing request, E.22 frame, campaign seam, landing check, release check, or review assignment; then name PatternOfConcernRef, ClaimScope, WorkingReaderScope, IntendedUse, QualificationWindow, and EvaluationEvidenceBasis.
CC-E21-2Evaluate the full RequiredPatternQualityCoordinates set.
CC-E21-2aBefore assigning coordinate values, record one PrecisionRestorationProfile with word/head/use, phrase-apparatus, repetition/distribution, role-carrier, and pattern-application layers. A missing, grouped, or memory-only profile makes the E.21 result incomplete.
CC-E21-3Use the result-bearing three-column table: coordinate, value, and ShortRationale; a two-column coordinate/value table is not an E.21 result.
CC-E21-4Let floorEvaluation change floor and evidence cost only, not the coordinate set.
CC-E21-5Assign values from checked pattern content and named content evidence, not review, landing, popularity, praise, or absence of prior use.
CC-E21-6For corpus-facing values, name the checked README, ToC, E.11, I.2, card, retrieval, monolith, or projection loci, or lower the affected coordinate when those loci are missing or unchecked.
CC-E21-6aKeep corpus-projection, README/ToC/E.11/I.2 alignment, retrieval/cold-reader, monolith-parity, PatternQualityStatus, developer/reviewer/executor correspondence, and other quality-carrier evidence out of the pattern unless the pattern's own EntityOfConcern and user move are that evaluation/projection work. This is a role test, not a word-list test. If such material appears anywhere in the pattern, including notes, appendices, Relations, Rationale, SoTA-Echoing, examples, tables, conformance rows, or any other host/monolith pattern section, as development, review, projection, or quality-status content about the pattern, lower CorpusEntryProjectionAndEcologyFit, EntityOfConcernPrimacyAndSemioBiasResistance, and the affected action/usability coordinates.
CC-E21-7For any 5, name the reinforcing evidence loci required by that coordinate's 5 meaning; otherwise lower the coordinate to 4 or below.
CC-E21-8For MaturePatternParityAndSelectedContentSufficiency = 4 or 5, include a compact maturity-discharge payload: comparator id, selected ingredient, current locus, and missing/lowering item if any; category lists without loci cap the coordinate at 3.
CC-E21-9Make SoTA rows adopt, adapt, or reject current practice and change the pattern.
CC-E21-10Keep measurement, score, scale, formal, causal, mathematical, QL, simulation, representation, or learned-lens claims under C.16, A.17, A.18, A.19, or the pattern that governs the claim when the evaluated pattern makes those claims.
CC-E21-11State floor satisfaction, remaining bounded non-use, and lowering or reopen conditions in any stop claim.
CC-E21-12Keep coordinate rationale separate from improvement proposal rows.
CC-E21-13Keep quality results out of project evidence, assurance, gate, work, safety/compliance, release, and publication truth claims.
CC-E21-14Do not raise a pattern with a bad PrecisionRestorationProfile through related-pattern-boundary, projection, or quality-carrier praise. When the profile shows defects before the pattern of concern's primary subject action is recoverable, or enough volume to compete with the Solution, lower EntityOfConcernPrimacyAndSemioBiasResistance and the affected action/usability coordinates; do not offset that loss with generic related-pattern-boundary praise or correct corpus projection evidence.

Common anti-patterns and repairs

Anti-patternRepair
Score illusion. Pattern quality = 87/100.Use ordinal coordinate values; no arithmetic aggregation.
Two-column table. Coordinate/value table has no rationale.Add ShortRationale for every coordinate.
Floor as omission. A floor evaluation omits maturity, SoTA, formal, corpus, or evolution coordinates.Keep floor low if needed; evaluate all coordinates.
Scope laundering. A landing-input, corpus-facing, Stable, release, or external-review request is reported under an easier use, local-only use, diagnostic pass, or evaluator-selected use.Re-evaluate under the governing scope; if it fails, return repairBeforeUse, holdForArchitectureDecision, or refreshNeeded with the missed coordinates and repairs.
Administrative proxy. "4 because landed" or "3 because not externally reviewed".Evaluate pattern content.
Comparator-free or locus-free maturity. MaturePatternParity... = 4 by impression, comparator IDs only, or category list such as "frame, first move, checklist, SoTA, relations".Name mature comparison patterns and use the maturity-discharge payload: comparator, selected ingredient, current locus, and missing/lowering item. Without that payload, cap at 3.
Omission account as maturity. A note explaining absence raises the value.Add content to body/neighboring pattern governing the claim, lower value, or mark the current request repairBeforeUse.
Semio-biased maturity. Non-semio pattern is judged by episteme/publication exemplars only.Include non-epistemic mature comparators and score action on the primary EntityOfConcern.
Quality-carrier leakage. Corpus projection, retrieval evidence, README/ToC/E.11/I.2 alignment, monolith parity, PatternQualityStatus, developer/reviewer/executor correspondence, or other quality evidence is written anywhere in the pattern as method, problem, note, appendix, relation, rationale, or status content about the pattern.Move the evidence to the E.21 result, E.19 run record, README/ToC/E.11/I.2, card/retrieval/projection carrier, or release/landing evidence carrier; keep only the user move or boundary that the evidence justifies.
Apparatus overwrap. A simple FPF claim is wrapped in extra role, carrier, locus, flow, state, status, text-state, package, or process words, such as live pattern text, current object, active record, field when live, or route-like pattern talk where no real state/use-position is named, so the reader sees a bureaucratic apparatus instead of the object, relation, action, or boundary.Apply F.19; record the scalar effect in PrecisionRestorationProfile, then lower the affected coordinates or name the completed repair.
Apparatus maximalism. Every pattern gets evidence cards, telemetry, archives, and companions.Keep evidence compact unless it changes value, status, stop, or candidate comparison.
Quality veto theatre. "Not ready" has no E.21 coordinate named by value, evidence, status effect, and repair.
Rewrite as an E.21 finding or remove the veto.

Consequences

BenefitTrade-off or mitigation
Pattern quality becomes inspectable without a fake score.Authors must name scope and all coordinate values.
Compact evidence remains possible.The coordinate table is still complete.
Maturity claims become harder to fake.Mature-pattern comparison adds cost where maturity or corpus-facing use is claimed.
Semio-bias becomes visible.Semio distinctions remain auxiliary unless they are the pattern's own EntityOfConcern.
Stop decisions become less taste-based.Open-ended improvement remains possible through E.23 when a stronger aim is requested.

Rationale

E.21 keeps the measuring device simple: one object kind, one ordinal scale, one required coordinate set, one status set, and one stop condition. The evaluation never asks whether a coordinate is active. It asks what value the current pattern and its named evidence basis earn under the declared use.

The mature-pattern parity coordinate is deliberately strict because recent short patterns looked formally clean while lacking the worked slices, source carry-through, lowering conditions, and transfer coverage present in mature FPF patterns. The repair is not "make everything long"; it is "carry the selected mature ingredients that the declared use needs."

SoTA-Echoing

ClaimSource-use dispositionConcrete E.21 effect
Feedback connects desired state, current state, and next action.Adopt from feedback-for-learning lineage such as Sadler and Hattie/Timperley.ShortRationale and proposal rows are separated: value now, next improvement when requested.
Questions and metrics derive from the goal.Adopt from GQM-style measurement discipline.Scope, reader, use, and window precede coordinate values.
Multi-criteria improvement needs explicit trade-offs.Adopt from MCDA, Pareto, ATAM, and current QD/OEE lines.Dominance comparisons and protected trade-offs replace one-score closure.
Proxy optimization can make intended value worse.Adopt from Goodhart/proxy-risk lines.ProxyForValueSubstitutionResistance and stop condition ask what got worse.
Evaluation results are not governance, safety, or compliance proof.Adopt as non-overread boundary from current evaluation-governance practice.Neighbour authority and status boundaries keep project claims outside E.21.

Relations

NeighbourRelation
A.19.ECSConstructs or repairs the general evaluation CharacteristicSpace; E.21 is one specialization.
E.8.ECSPFPublishes an evaluation CharacteristicSpace as an FPF pattern when that form is selected.
E.8Authors the pattern body whose quality E.21 evaluates.
E.19Runs admission and refresh review profiles; it can consume or request E.21, but it does not assign E.21 coordinate values or replace the required pattern-quality table.
E.22Frames purpose, floor, trade-offs, and proposal expectation before an evaluation.
E.23Runs repeated improvement using E.21 values and stop meanings for pattern versions.
E.9.DAEvaluates upstream DRR decision adequacy when pattern-quality defects trace to decisions.
C.16, A.17, A.18, A.19Govern scale, coordinate, and measurement legality.
F.18, E.10, A.6.P, C.2.P, C.16.P, C.16.QGovern naming and wording-use precision when quality defects are lexical or ontological.
A.10, B.3, A.20, A.21, A.15Govern project evidence, assurance, local CV state, gates, and work authority.
E.11 and I.2Govern entry-distribution and expanded entry-disambiguation cues; E.21 supplies only the scoped quality result.

E.21:End

Improvement-Oriented Quality Evaluation Question Framing

Status: Core.

Problem frame

Use E.22 when someone is about to ask for a quality evaluation, quality review, returned-finding absorption, improvement proposal, or next-move hypothesis over an object version named by value, and the question needs to say what kind of evaluation is wanted before the evaluator starts.

E.22 frames the question. It does not evaluate the object. The values, coordinates, statuses, and stop meanings come from the named object-under-improvement evaluation: for example E.21 for one pattern version, E.9.DA for one DRR, E.2.DA for an FPF-level object, C.25 for an engineering quality bundle, or another declared characteristic space, scale set, rubric, or review profile. E.19 is different: it supplies an admission or refresh review gate and findings profile. Use E.19 as the object-under-improvement evaluation only when the object being evaluated is an E.19 review-profile result itself. For one FPF pattern version, E.21 supplies the coordinate values and PatternQualityStatus; E.19 may later check that the E.21 result is valid, sufficient for the release seam, and not overread as project evidence, release, gate, assurance, or work.

Not this pattern when the question is already scoped and one direct evaluation is enough. Run the object-under-improvement evaluation directly. Use E.23 when repeated improvement across passes is needed.

First useful move: write a QualityEvaluationQuestionFrame naming the object version, the object-under-improvement evaluation, the purpose, the floor or improvement aim, protected trade-offs, expected evidence basis, and expected result form.

What goes wrong if missed: "review this" can mean too many different things. A floor check may be mistaken for exceptional improvement, a review may suggest work without naming quality movement, absorption may count closed rows without re-evaluating the changed object, or a next-move suggestion may be overread as a decision, work plan, gate, evidence, assurance, or release.

Primary EntityOfConcern in plain terms: the framed quality-evaluation question for one object version.

Problem

Quality evaluations fail when the evaluator has to infer the question. The same object can be checked for floor adequacy, improved toward exceptional expression, compared across trade-offs, mined for open questions, or evaluated after finding absorption. Those purposes produce different findings.

The defect is not that reviewers need more ceremony. The defect is that an unframed question hides the object under improvement, the evaluation that supplies values, and the allowed shape of returned work.

Forces

ForceTension
Cheap readiness vs ambitious improvementA floor evaluation should be short; exceptional improvement needs richer proposals.
Explicit purpose vs reviewer discoveryThe request names the purpose, while the reviewer can still report important unasked questions.
Evaluation vs next moveA useful evaluation may suggest a next move, but the suggestion remains a hypothesis until the pattern that governs the claim, relation, or boundary is applied.
Multi-coordinate gain vs Goodhart riskRaising one visible value can damage usability, affordability, locality, source preservation, or corpus ecology.
Proposal portfolio vs selected resultSeveral candidate improvements may be useful without becoming a selected set, pool policy, front insertion, parity, or refresh result.

Solution

E.22 gives one compact declaration for improvement-oriented quality evaluation questions. It keeps the question from replacing the evaluation and keeps the evaluation result from becoming a decision or work product beyond its authority.

Local names and kind settlement

Local nameKind and role
QualityEvaluationQuestionFrameCompact declaration of the requested quality evaluation before it runs.
ObjectVersionUnderQualityEvaluationExact object version being evaluated.
ObjectUnderImprovementEvaluationRefExact evaluation pattern, characteristic space, scale set, rubric, review profile, or quality bundle that supplies values.
QualityEvaluationPurposeSelectionRequested evaluation purpose or combined purposes.
DeclaredQualityFloorMinimum acceptable coordinate or status floor when the frame declares a floor claim.
DesiredImprovementAimRequested movement beyond the floor when improvement beyond the floor is requested.
TradeoffProtectionSetQualities that must not silently worsen while visible values improve.
ExpectedEvaluationEvidenceBasisEvidence loci the named evaluation must check or name for the requested purpose: object version, corpus/projection loci, source-currentness loci, comparator loci, worked cases, returned findings, or missing loci named by value.
ExpectedQualityEvaluationResultFormThe result-row shape required by the named evaluation, including coordinate/value/short-rationale rows, mandatory attention-discharge profiles such as E.21 PrecisionRestorationProfile, and any evidence-locus or coordinate-specific payload fields. For E.21, this profile collapses word/head/use, phrase-apparatus, repetition/distribution, role-carrier, and pattern-application layers into affected-coordinate effects.
QualityReviewFindingRowActionable row for a returned finding, expected movement, correction direction, and closure test.
KindRestorationCheckRequired field for any finding or proposal whose correction direction changes wording, naming, or precision-restoration content: pre-repair kind/relation/slot-or-use-position/admissible use/scope, proposed post-repair kind/relation/slot-or-use-position/admissible use/scope, or not triggered/ordinary prose/already satisfied/blocker disposition with loci.
CandidateImprovementProposalPortfolioBounded set of proposal rows returned by the evaluation when alternatives are useful.
NextAdmissibleMoveHypothesisStop, repair, proposal, trade-off warning, outside-evaluation statement, new-frame statement, or governing pattern for a specific claim, relation, or boundary suggested by the evaluation. This is the proposed next improvement move, not a substitute for the evaluation result.

These names frame and report quality evaluation. They do not select candidates, publish sets, plan work, certify evidence, approve release, or create new values.

Quality evaluation purposes

Purpose valueUse whenExpected result
floorEvaluationThe question is whether the object reaches a declared floor.Values below floor, first repair, architecture hold, refresh, new-frame assignment, or admissible stop.
exceptionalImprovementEvaluationThe floor is reached and the requester wants non-dominated improvement toward exceptional expression.Per-coordinate proposal or no-candidate disposition.
paretoTradeoffEvaluationA candidate change may improve some values while worsening protected qualities.Trade-off account and non-dominated comparison.
candidateImprovementProposalEvaluationThe requester needs candidate-change proposals before changing the object or generating variants.Proposal row or bounded proposal portfolio with expected evaluation movement.
openQuestionDiscoveryEvaluationThe requester wants important unasked questions surfaced.Question classified as existing-coordinate issue, candidate future coordinate, or outside-evaluation issue.
absorptionEvaluationReturned findings or suggestions have been applied or rejected.Quality-impact account over the changed object.

Purposes can be combined, but the result keeps them distinguishable. A floor result does not answer exceptional improvement. Absorption count is not quality movement. A proposal is not a selected work item.

Question frame

QualityEvaluationQuestionFrame:
  Object version under quality evaluation: <object version named by value>
  Object-under-improvement evaluation: <exact evaluation>
  Evaluation purpose selection: <floor | exceptional | tradeoff | proposal | open-question | absorption | combined>
  Declared quality floor: <floor and scope, or evaluation default>
  Desired improvement aim: <floor-only | raise toward exceptional | compare variants | propose candidate changes | discover questions | absorption impact>
  Protected trade-offs: <usability | affordability | locality | corpus ecology | neighbour fit | source preservation | other property named by value>
  Expected evidence basis: <object, corpus, source, comparator, worked-case, returned-finding, projection, or missing loci named by value required by the named evaluation and purpose>
  Expected result form: <named evaluation's result-row shape | finding rows | proposal rows | trade-off table | open-question list | absorption-impact account | next-move hypotheses>
  Non-use boundary: <what this result must not decide, certify, publish, plan, execute, or prove>

The shortest floor frame may name only object version, object-under-improvement evaluation, purpose floorEvaluation, and declared floor. The named evaluation still runs its required coordinate set and returns the result-row shape, evidence basis, rationales, coordinate-specific payloads, and mandatory attention-discharge profiles required by that evaluation. For one FPF pattern version under [E.21](/generated/patterns/E.21), compactness never permits omitted coordinates, missing ShortRationale, absent PrecisionRestorationProfile, inactive/triggered-coordinate shortcuts, scope narrowing, or a blocker-only substitute result.

The frame does not authorize post-hoc scope replacement. If the requested floor is landing-input, corpus-facing, Stable, release, external-review, or another stated use, the evaluator measures that use. If a different use becomes interesting, open a new QualityEvaluationQuestionFrame; do not report the current request as passed under an easier scope.

Finding and proposal rows

An actionable finding has this shape:

QualityReviewFindingRow:
  Review locus: <where the issue was found>
  Object locus: <where the object would change>
  Evaluation effect: <coordinate/status/floor/protected quality/outside evaluation>
  Current value or status: <if known>
  Expected movement: <repair floor | raise toward exceptional | prevent loss | classify outside>
  Correction direction: <what should change>
  Kind restoration check: <required when wording, naming, or precision restoration changes text; otherwise `not triggered`, `ordinary prose`, or `already satisfied` with loci>
  Closure test: <what evidence would close the row>

A proposal row uses the same shape plus expected trade-offs and the governing pattern for any outside claim, relation, or boundary when needed. One edit may close several rows, but each row keeps its own disposition and closure evidence.

For wording, naming, and precision-restoration proposals, the correction direction is not "replace X with Y". It must state the recovered object kind, relation, slot or use-position when live, admissible use, and scope before and after the change, or state not triggered, ordinary prose, already satisfied, or blocker with loci. A proposal that only removes the suspicious word, that leaves the text unchanged without by-value discharge, or that narrows one kind into another without an accepted decision, is a finding, not a closed repair.

Absorption impact values

Absorption impactMeaning
coordinateImprovedA named coordinate or status has stronger content evidence after the change.
floorOnlyClosureA below-floor defect was repaired enough for the floor but not exceptional expression.
unchangedBecauseAlreadySatisfiedThe suggestion was already satisfied by value, with loci named by value and the evaluation property it already satisfies.
tradeoffIntroducedA repair raised one property and damaged another.
qualityLossDetectedThe applied or proposed change lowers a value or protected quality.
outsideObjectUnderImprovementEvaluationThe suggestion belongs under another exact evaluation or pattern.
notAdmissibleForDeclaredUseThe suggestion is rejected for the declared purpose and boundary.

The absorption result is quality movement under the object-under-improvement evaluation, not a count of accepted rows.

OEE/NQD and proposal portfolios

When the object is a candidate, archive/front member, selected set, parity report, refresh report, or declared transduction result, E.22 can frame the quality question and return proposal rows. C.17, C.18, C.19, G.5, G.9, and G.11 keep authority over candidate characteristics, archive/front semantics, pool policy, selected-set publication, parity, and refresh.

Worked slices

Floor evaluation. A reviewer is asked whether one pattern is ready for ordinary use. The frame names E.21, purpose floorEvaluation, the declared floor, and the expected E.21 result form. The result is a complete E.21 coordinate table with ShortRationale and EvaluationEvidenceBasis, not a narrative "looks fine."

Exceptional improvement. A pattern already passes the floor. The frame asks for non-dominated improvements toward 5 while protecting usability and related-pattern fit. The result returns proposal rows for missing worked cases and source-currentness, plus no-candidate dispositions for coordinates already strongly expressed.

Absorption. External review returns many suggestions. The frame asks for absorptionEvaluation. The result says which changes improved coordinates, which were already satisfied, which introduced trade-offs, and which belong outside the evaluation.

Proposal portfolio. A candidate improvement campaign needs alternatives before editing. The frame asks for candidateImprovementProposalEvaluation. The result returns bounded proposal rows; selection or generation stays with the pattern that governs that claim and is not decided by the evaluation frame.

Bias annotation

This pattern biases FPF toward asking the quality question by value. The bias is useful because unframed review requests often produce plausible but wrong answers.

The bias is bounded. E.22 does not supply quality values, run repeated improvement, publish selected sets, decide work, or certify project claims.

Conformance checklist

CheckRequirement
CC-E22-1Name the object version and object-under-improvement named by value evaluation.
CC-E22-2State purpose, declared floor or improvement aim, protected trade-offs, and expected result form.
CC-E22-3Keep the object-under-improvement evaluation as the source of values and required coordinates.
CC-E22-4Represent actionable returned work as row-level findings or proposal rows with expected quality movement, closure tests, and KindRestorationCheck when the row proposes wording, naming, or precision-restoration repair. When a relation/signature/lens slot or use-position is live, the row cites the governing pattern named by the evaluation or restoration result; E.22 frames the improvement question and does not restate that ontology.
CC-E22-5For absorption, report quality impact on the changed object, not only applied/not-applied disposition.
CC-E22-6State a compact declarative non-use boundary when the result might be overread as decision, work, evidence, assurance, gate, release, certification, publication, parity, refresh, or selected-set authority. Keep the result on the evaluation question and name only the specific outside claim plus the pattern that governs it when one is needed; precision-restoration or phrase-apparatus issues belong to the named evaluation profile and F.19, not to a local boundary catalogue.
CC-E22-7State what became worse when a proposed or applied improvement raises visible values.
CC-E22-8Send repeated improvement to E.23 after one framed evaluation returns findings or proposals.
CC-E22-9Name the expected evidence basis and result-row shape from the object-under-improvement evaluation; E.22 cannot authorize omitted coordinates, missing rationales, missing mandatory attention-discharge profiles, missing PrecisionRestorationProfile when E.21 is used, unchecked loci, inactive/triggered-coordinate shortcuts, scope narrowing, or a weaker result form.

Common anti-patterns and repairs

Anti-patternRepair
"Review this" prompt. The evaluator infers purpose.Add a QualityEvaluationQuestionFrame.
Floor pass sold as excellence. Readiness is mistaken for exceptional improvement.State exceptionalImprovementEvaluation if wanted.
Frame replaces result. The question frame names a purpose but returns prose, a two-column value table, or proposal rows without the named evaluation's result form.Re-run the named evaluation and return its required coordinates, evidence basis, rationales, and payload fields.
Scope laundering. The frame asks one use, but the result answers an easier, local-only, diagnostic, or evaluator-selected use.Re-run the named evaluation under the requested use; if another use is needed, open a new frame rather than saving the current result.
Applied-count absorption. Closure count replaces quality movement.Re-evaluate the changed object and classify impact.
Goodharted improvement. Visible values rise while protected qualities worsen.Add trade-off protection and reject dominated changes.
Recommendation as decision. A next-move hypothesis is treated as chosen work.Open the exact decision, work, publication, parity, refresh, evidence, or assurance pattern if that claim is needed.
Lexical repair request. A finding says only "replace this word" or "avoid that wording."Rewrite the row as a precision-restoration finding with pre/post kind, relation, admissible use, and scope; if no kind-preserving repair is recoverable, leave it blocking.

Consequences

ConsequenceBenefitCost
Review requests become typed.Evaluators answer the intended quality question.Requesters must name the object and evaluation.
Exceptional improvement becomes explicit.Reviews can propose non-dominated improvements rather than stopping at floor defects.Protected trade-offs must be named.
Absorption becomes quality-aware.Follow-up says what improved or worsened.Row discharge alone is not enough.

Rationale

There is no neutral generic request when a quality result is wanted. The useful artifact is the framed question: object version, evaluation, purpose, expected evidence basis, expected result form, and boundary. This keeps review helpful without turning it into process control or project authority.

SoTA-Echoing

ClaimCurrent or retained source lineLocal adoption
Quality evaluation should be multidimensional, diagnostic, and actionable.Current rubric and long-form evaluation work, including multidimensional LLM rubric evaluation and meta-evaluation lines, treats rubric validity and actionable feedback as current problems.Findings name evaluation effects, expected movement, correction direction, and closure tests.
Feedback needs desired condition, current condition, and next action.Hattie/Timperley and Sadler lineage, retained through current feedback-evaluation work.The frame states floor or desired aim, current evaluation object, and expected result form.
Evaluation questions must derive from purpose.GQM lineage and current task-specific rubric evaluation work.QualityEvaluationPurposeSelection precedes values.
Multi-criteria improvement needs trade-offs and non-dominated alternatives.MCDA, Pareto, ATAM lineage plus current architecture trade-off evaluation work.paretoTradeoffEvaluation and TradeoffProtectionSet prevent one-score closure.
Proxy optimization can degrade intended value.Goodhart taxonomy and current proxy/reward/rubric failure work.Findings ask what became worse and keep popularity, review count, and discharge count out of values.
OEE/NQD needs proposal-shaped quality pressure before candidate change.Current quality-diversity and open-ended exploration lines.Proposal rows name expected quality movement before generation or selection neighbours consume them.

Relations

PatternRelation
E.21Supplies pattern-quality values and required coordinates.
E.9.DASupplies DRR decision-adequacy values and required coordinates.
E.2.DASupplies FPF Pillar-adequacy values.
E.19Supplies admission or refresh review profiles when that is the evaluation.
E.23Governs repeated improvement after framed evaluations return findings or proposal rows.
E.10, A.6.P, C.2.P, F.18Repair load-bearing wording and names introduced by frames or findings.
C.16, A.17, A.18, A.19, C.25Govern characteristics, scales, measurements, characteristic spaces, and quality bundles.
C.17, C.18, C.19, G.5, G.9, G.11Govern OEE/NQD candidate, archive/front, pool, selected-set, parity, and refresh claims.
C.11, C.24, A.15, A.20, A.21, A.10, B.3Receive decision, call-planning, work, gate, release, evidence, and assurance claims when a quality result is reused beyond evaluation.

E.22:End

Quality Improvement Loop Method

Status: Core.

Problem frame

Use E.23 when an object version will be improved through repeated passes under a declared object-under-improvement evaluation. The object can be a pattern, DRR, FPF corpus object, engineering quality object, naming candidate, OEE/NQD candidate, archive/front member, selected set, parity report, refresh report, or declared transduction result, if an exact evaluation supplies values and stop meanings for that object kind.

Not this pattern when one direct quality evaluation is enough. Use E.22 to frame one evaluation and then run the named object-under-improvement evaluation. Use A.19.ECS first if the needed evaluation characteristic space does not exist.

First useful move: name the object version under improvement, the exact evaluation that will re-evaluate it, the improvement aim, protected trade-offs, cost and risk account, and local stop condition.

What goes wrong if missed: teams close discharge rows instead of improving quality, retry blindly, optimize visible values while damaging protected qualities, stop forever after a local all-5 result, or let a review recommendation become decision, work, evidence, selected-set publication, parity, or refresh by stealth.

Primary EntityOfConcern in plain terms: the repeated quality-improvement method for one object version under one declared evaluation.

Problem

FPF often improves artifacts by repeated review, repair, and re-evaluation. The loop is useful only when the changed object is evaluated again by the same object-under-improvement evaluation or by a declared stronger one. Without that discipline, repeated passes become checklist closure, agentic retry, source citation, or process state.

The loop must also avoid the maturity-ladder trap. A floor or all-5 result can close this loop under current use, comparison set, source state, and cost boundary; it is not proof that the object cannot improve under a new use, source, front, or payoff.

Forces

ForceTension
Improvement ambition vs costExceptional improvement can be valuable; ordinary floor work must stay affordable.
General adaptive methods vs specialized cyclesBroad loops scale, while specialized cycles can be cheaper when the characteristic space fits.
Feedback vs self-confirming retryFeedback helps only when re-evaluation checks changed quality.
Operation hardening vs bureaucracyVerification, memory, decomposition, and supervision can help but must justify cost.
Visible improvement vs protected trade-offsOne coordinate can rise while use, source preservation, locality, or ecology worsens.
Proposal portfolio vs selector overreadProposals can guide improvement without becoming selected results or work plans.

Solution

E.23 is the general method for repeated improvement of an object version under an object-under-improvement evaluation named by value. It changes the object, re-evaluates the changed version using that evaluation's required evidence basis and result-row shape, checks trade-offs and cost, and decides whether to stop, continue, switch method family, open a new frame, or hold for exact information.

Local names and kind settlement

Local nameKind and role
QualityImprovementLoopMethodRepeated improvement method for one object version under one evaluation.
ObjectUnderImprovementRefExact object kind and version being changed.
ObjectUnderImprovementEvaluationRefExact evaluation pattern, characteristic space, Q-Bundle, rubric, or review profile that supplies values.
LoopEvaluationEvidenceBasisEvidence loci checked or named for the current loop evaluation result, including missing loci that lower values.
LoopEvaluationResultFormResult-row shape required by the object-under-improvement evaluation for the current pass.
ImprovementAimDesired movement: floor repair, exceptional improvement, trade-off inspection, absorption impact, open-question discovery, source-front reach, or another exact aim.
MethodFamilySelectionSelected method family for the current object and evaluation.
OperationFamilySelectionSetOptional operation families selected because they can move the evaluation enough to justify cost.
ObjectUnderImprovementReEvaluationRe-run or cited result of the evaluation on the changed object version.
CostAndRiskAccountCost and risk account used to judge another pass or operation.
StopContinueSwitchFrameHoldDecisionLocal loop decision after re-evaluation.
QualityImprovementLoopRecordRecord of object versions, applied rows, re-evaluation, trade-offs, cost/risk, and loop decision.
QualitySideMovementClaimLocal claim that a changed object moved on declared Q components under NQD/OEE comparison.
SourceComposedResultClaimResult produced by composing accepted source or practice lines and readable by the evaluation.
KindRestorationCheckRequired precision-repair check that records pre-repair kind, relation, slot or use-position, admissible use, and scope, proposed post-repair kind, relation, slot or use-position, admissible use, and scope, and whether each live field is not triggered, ordinary prose, preserved, split, intentionally changed by accepted decision, or blocking.

These names belong to loop method. They do not create quality values, project evidence, release state, selected-set publication, parity, refresh, or proof of quality.

Loop method

For one quality-improvement loop:

  1. Declare ObjectUnderImprovementRef, object version, and ObjectUnderImprovementEvaluationRef.
  2. Declare ImprovementAim, floor or target, protected trade-offs, cost and risk account, and local stop condition.
  3. Use E.22 to frame the first quality evaluation when the purpose is not already explicit.
  4. Run the object-under-improvement evaluation in its required result form. For one FPF pattern version, this is an E.21 result with every required coordinate, every ShortRationale, the PrecisionRestorationProfile, evidence basis, coordinate-specific payloads, and status. A loop record, profile pass, blocker summary, two-column table, or "no blockers" note is not a substitute.
  5. Record row-atomic findings or proposal rows when work is returned. A step is closed only after its finding or proposal row is written; do not rely on memory or a later grouped summary.
  6. Apply repairs or variants to the object. When generation, selection, publication, parity, refresh, decision, planning, work, evidence, or assurance claims leave quality improvement, keep the pattern that governs that claim, relation, or boundary in the loop record or Relations. Do not let loop-method prose replace the object's positive content. For precision-restoration defects, use the selected restoration or governing pattern named by the evaluation: E.10, E.10.ARCH, F.18, F.19, or an object-specific pattern. Also record a bounded complete KindRestorationCheck before closing the finding: the repair must say what kind, relation, slot or use-position, admissible use, and scope were present before the edit and what kind, relation, slot or use-position, admissible use, and scope the changed text now carries when those items are live. No-op closure is admissible only as not triggered, ordinary prose, or already satisfied with loci; otherwise unchanged text remains a live finding. When another pattern governs the kind under repair, relation, claim, or position, cite that pattern; E.23 records the repair and reruns the evaluation, it does not duplicate the restoration algorithm.
  7. Re-evaluate the changed object version through the object-under-improvement evaluation, using that evaluation's required coordinate set, evidence basis, result-row shape, short rationales, mandatory attention-discharge rows, and coordinate-specific payloads.
  8. Record what improved, what stayed floor-only, what was unchanged by value with loci, what became worse, and which rows moved outside the evaluation.
  9. Decide stop, continue, switchMethodFamily, openNewFrame, or holdForExactInformation.
  10. Leave a QualityImprovementLoopRecord sufficient for the next reader to replay the object versions, evidence basis, evaluation result, trade-offs, cost/risk, and loop decision.

Stop, continue, and reopen

Stop when the current object version meets the declared floor or improvement aim and no feasible non-dominated proposal remains worth its cost under the current use, comparison set, source state, and protected trade-offs.

Continue only when the next pass has an expected evaluation movement and acceptable cost/risk. Switch method when the current method family is not moving the object, is too costly, or no longer fits the evaluation. Hold when object, evaluation, authority, evidence, source condition, or comparison set is too under-specified.

An all-5, all-exceptional, current-front-reaching, or current-front-improving result closes this loop locally. It does not say that future development is impossible. A new use, Q component, source line, SoTA front, comparison set, affordability boundary, or higher-payoff proposal can open a later loop.

Method-family selection

Method familyUse when
PDSAorPDCAFamilyLearning quality, baseline comparison, measuring instruments, or standardize/repeat action matter for the improvement loop.
POOGIFamilyThe evaluation problem is throughput-shaped or constraint-shaped.
OODAFamilyOrientation quality and feedback under changing conditions affect the evaluation.
RalphLikeGeneralAdaptiveFamilyA broadly capable agent can improve the object through repeated specification, feedback, memory, and verification under C.19.1 cost/risk discipline.
FixedPerformerObjectVersionUnderImprovementOptimizationFamilyThe performer or harness stays fixed while the object version is edited and re-evaluated.
NQDQualitySideImprovementFamilyThe evaluation supplies the Q side for a declared NQD/OEE comparison and loop changes seek non-dominated Q movement.
SoTAReachAndMaintainFamilySeveral accepted source or practice lines must be composed to reach or maintain an externally assigned front.
SpecializedObjectFamilyCycleA specialized method family fits a declared characteristic space and is BLP-compatible.

The selected family is justified by characteristic-space fit, expected evaluation movement, cost/risk, and protected trade-offs. Familiarity, automation, or current popularity is not enough.

Operation-family selection

An operation family is selected only when the loop record names:

  1. expected movement under the object-under-improvement evaluation;
  2. failure mode addressed;
  3. cost or risk reason;
  4. protected trade-offs;
  5. stop or removal condition.

Typical operation families are specification articulation, task decomposition, context refresh with carry-forward evidence, failure-context retry, verification against specification, memory or distillation, external critic or co-regulation, proposal portfolio use, search breadth or variants, bounded object-change budget, held-out evaluation, rejected-change memory, optimizer-memory separation, source-line contribution assignment, agent-tool-interface hardening, and task-family adaptation signature. They remain selectable only for the loop that justifies them.

Cost and BLP discipline

C.19.1 governs the preference for broad, scale-amenable methods when safety, legality, and practical fitness are comparable. E.23 uses that preference but still evaluates end-to-end accepted-work cost:

AcceptedWorkCost ~= token_or_compute_cost + tool_cost + adaptation_attempt_cost + human_supervision_cost + rework_cost - avoided_loss_value

This is not a hidden quality score. It is a prompt for cost/risk reasoning. If avoided loss is large, an expensive loop can be right. If the object is simple, a human edit, small direct repair, lower-cost model, specialized cycle, or one-shot evaluation can be better.

Harness improvement is usually the first high-leverage move when it reduces blind retry: better frames, row shapes, test cases, source references, local tools, memory, verification, and stop conditions.

Source-bearing and OEE/NQD improvement

Accepted SoTA is the working external front only when assigned by the object-under-improvement evaluation, accepted source-use decision, or declared comparison set. E.23 can govern a loop that reaches, maintains, or improves relative to that front; it does not self-assign SoTA.

When several source lines are used, the loop records each line's contribution: value semantics, operation family, boundary, comparison discipline, failure mode, protected trade-off, or stop discipline. The changed object version then states the SourceComposedResultClaim and is re-evaluated.

For NQD/OEE, E.23 can change one object version or candidate to improve declared Q movement. C.17, C.18, C.19, G.5, G.9, and G.11 keep authority over novelty, diversity, descriptors, distances, archive/front insertion, pool policy, selected-set publication, parity, and refresh.

Worked slices

Affordable floor evaluation. A pattern needs admission readiness. E.22 frames floorEvaluation; E.21 evaluates all required coordinates. If the result is admissible and no improvement aim is requested, E.23 stays closed. If an admission, refresh, landing, or release crossing is claimed, E.19 and the release named by value/admission process still check the gate conditions; the E.21 status is necessary quality evidence, not the gate itself.

Pattern exceptional improvement. A pattern already passes floor but lacks worked slices and source-currentness. E.22 frames exceptional improvement. E.23 applies proposal rows, re-evaluates by E.21, checks what became worse, and stops locally when no non-dominated improvement remains under the declared use.

DRR improvement. A DRR needs drafting adequacy for multi-locus authoring. E.9.DA supplies coordinates; E.23 applies decision repairs and re-evaluates. The improved object is still a decision record, not prewritten pattern prose.

NQD quality-side improvement. A generated candidate has declared Q components and a comparison set. E.22 returns proposal rows. E.23 may change the candidate and re-evaluate Q; archive/front insertion, selected-set publication, parity, and refresh remain under the pattern that governs each claim and are not quality-loop decisions.

Bias annotation

This pattern biases FPF toward adaptive improvement with explicit re-evaluation. The bias is useful because many real objects improve only through feedback and revision.

The bias is bounded. One direct evaluation can close without a loop. Repetition is justified only by expected evaluation movement and acceptable cost/risk.

Conformance checklist

CheckRequirement
CC-E23-1Name object version and object-under-improvement named by value evaluation before claiming quality movement.
CC-E23-2Use E.22 or an equivalent frame when the evaluation purpose is not already explicit.
CC-E23-3Represent returned work as row-atomic findings or proposal rows with expected evaluation movement and closure tests; a step is not closed until its row is written, and grouped memory summaries do not discharge skipped rows.
CC-E23-4Re-evaluate the changed object version before claiming coordinate, status, Q, or front movement.
CC-E23-5Record what became worse and protected trade-offs.
CC-E23-6Continue only with expected evaluation movement and cost/risk reason.
CC-E23-7Treat all-5, exceptional, or front-reaching results as local loop stops, not permanent maturity endings.
CC-E23-8Keep candidate generation, pool policy, selected-set publication, parity, refresh, decision, planning, work, evidence, assurance, gate, release, safety, and compliance claims with the pattern that governs each claim, relation, or boundary. State those pattern relations declaratively in loop records or Relations; keep loop-method and architecture-placement prose out of the object under improvement unless that prose is the object's own user-facing content.
CC-E23-8aWhen the evaluation names a precision-restoration defect, apply the selected restoration or governing pattern named by that evaluation. For E.21, use its PrecisionRestorationProfile to decide whether the repair is word/head/use precision (E.10, E.10.ARCH, F.18), phrase-level plain rewriting (F.19), or a governing-pattern repair. The repair row is not closed until it includes a KindRestorationCheck: pre-repair kind/relation/slot-or-use-position/admissible use/scope, post-repair kind/relation/slot-or-use-position/admissible use/scope, or not triggered/ordinary prose/already satisfied/blocker disposition with loci.
CC-E23-9Apply E.10 to load-bearing loop names, status values, examples, stop conditions, and result wording introduced or repaired by the loop.
CC-E23-10Preserve the named evaluation's required evidence basis, result-row shape, short-rationale rule, mandatory attention-discharge rows, and coordinate-specific payloads in every re-evaluation.

Common anti-patterns and repairs

Anti-patternRepair
Checklist closed, quality improved. Discharge count replaces re-evaluation.Re-evaluate the changed object.
Loop result without evaluation form. The loop says the object improved but records only prose, applied rows, or values without the named evaluation's evidence basis.Re-run the object-under-improvement evaluation in its required result-row shape.
Agentic retry as method law. Repetition continues without expected movement.Add evaluation movement, cost/risk, trade-offs, and stop/switch condition.
Operation-family creep. Verification, memory, supervision, or search is added everywhere.Keep only operations that can move the evaluation enough to justify cost.
Goodharted pass. Visible values rise while protected qualities worsen.Use trade-off inspection and reject, repair, split, or hold dominated changes.
Lexical substitution closure. A trigger word disappears, but the replacement narrows, widens, or changes the object kind; for example a graph-shaped method/workflow cue becomes a work sequence without a selected ontology decision.Reopen the row, recover the pre/post kind through E.10, F.19, F.18, or the governing pattern, and leave the repair blocking if the kind cannot be preserved or explicitly changed by accepted decision.
Maturity-ceiling stop. All-5 is treated as end of development.Close this loop locally and record reopen conditions.
SoTA citation as self-assignment. Sources are cited as proof of frontier quality.State source contributions and re-evaluate the composed result.

Consequences

ConsequenceBenefitCost
Repeated improvement has one method locus.FPF no longer relies on hidden authoring habits.Users must name object and evaluation.
Row discharge is separated from quality movement.Improvement claims become replayable.Re-evaluation is required.
General and specialized loops are comparable.BLP can be applied without craft folklore.Cost/risk and characteristic-space fit must be explicit.
Exceptional stop remains local.All-5 or front-reaching closure no longer freezes future development.Reopen conditions must be recorded.

Rationale

The shared method is simple: change an object version, re-evaluate it by the exact evaluation that gives values, check trade-offs and cost, then stop, continue, switch method, open a new frame, or hold. Classical improvement cycles, agentic loops, fixed-performer optimization, MCDA, Goodhart, and OEE/NQD lines contribute useful operations and boundaries, but they do not replace this method.

SoTA-Echoing

ClaimPractice or source lineLocal adoption
Improvement needs desired condition, current condition, next action, and learning.PDSA/PDCA lineage and feedback traditions.The loop names aim, current evaluation, applied changes, re-evaluation, and stop/continue decision.
Broad adaptive loops are useful but costly.Ralph-like current technique signal, Reflexion/Self-Refine/ReAct/LATS/SWE-agent lineage.General adaptive methods are selectable under C.19.1 cost/risk and re-evaluation discipline.
Fixed-performer object-version optimization is a useful current line.SkillOpt-like work with fixed performer and mutable external skill/document object.FixedPerformerObjectVersionUnderImprovementOptimizationFamily, bounded change budget, held-out evaluation, rejected-change memory, and optimizer-memory separation.
Multi-coordinate improvement needs trade-offs.MCDA, Pareto, ATAM, Goodhart, and current proxy-failure work.Re-evaluation includes what became worse and rejects dominated changes.
OEE/NQD improvement is relative to declared Q, comparison sets, and fronts.Current quality-diversity and open-ended exploration survey lines.NQDQualitySideImprovementFamily changes object versions while OEE/NQD neighbours keep archive/front and selected-set authority.
Source-bearing improvement must synthesize contributions.Current source-currentness discipline in FPF plus source-composition practice.The loop records contribution strata and SourceComposedResultClaim before claiming front reach or maintenance.

Relations

PatternRelation
A.19.ECSConstructs or repairs an object-under-improvement evaluation when none exists.
E.22Frames each quality evaluation and can return finding or proposal rows.
E.21Supplies pattern-quality values for pattern-improvement loops.
E.9.DASupplies DRR decision-adequacy values for DRR loops.
E.2.DASupplies FPF Pillar-adequacy values for corpus-level loops.
F.18Supplies durable-name evaluation for naming loops.
C.25, C.16.QGovern engineering quality bundles and quality-word precision repair.
C.19.1Governs BLP and cost/risk comparison for method-family choice.
C.22.1, C.24Govern durable task-family adaptation and tool-call planning when the loop makes those claims.
C.17, C.18, C.19, G.5, G.9, G.11Govern OEE/NQD candidate characteristics, archive/front, pool, selected set, parity, and refresh.
C.11, A.10, B.3, A.15, A.20, A.21Govern decision, evidence, assurance, work, gate, and release claims when a loop result is reused beyond quality improvement.
E.10, A.6.P, C.2.P, F.18Repair load-bearing wording and names introduced by loop records.

E.23:End

Contextual Lexicon Principles

One‑sentence summary. All meanings in FPF are local to a U.BoundedContext (“Context of meaning”); terms are spoken with their Context, and any relation across Contexts exists only as an explicit Alignment Bridge with stated loss/fit.

Status. Architectural pattern. Builds on: A.1.1 U.BoundedContext (formal frame); A.7 Strict Distinction (C‑6); A.8 Universal Core (C‑1); A.11 Ontological Parsimony (C‑5); A.4 Temporal Duality (C‑7); E.10.D1 D.CTX (lexical discipline for “Context”). Coordinates with. F.1 (Context Map via Context Cards), F.2 (local term capture), F.3 (intra‑Context clustering), F.7 (Concept‑Set Table), F.9 (Alignment & Bridge), B.3 (Trust & Assurance; CL penalties).

Didactic note. In the Tech register, Context ≡ U.BoundedContext (per E.10.D1). “Context of meaning” is a metaphor only; Context remains the normative short form for U.BoundedContext. The word anchor is not used in FPF, and the bare word plane is reserved to CHR:ReferencePlane.

Terminology guard (normative, Part F). The row classifier is senseFamily: {Role | Status | Measurement | Type‑structure | Method | Execution}. Characteristic (MM‑CHR) names measurable aspects only (A.17A.19) and MUST NOT be used for row typing in Part F. Avoid the generic word facet in Part F; when unavoidable, reference C.3.5 KindAT (informative facet) or Compose‑CAL U.Facet explicitly. Only CHR:ReferencePlane is permitted (no bare “plane”); use EntityOfConcern / Description episteme / specification-use boundary for entity-description-specification-use discipline; use stance for design vs run.

Problem Frame

Trans‑disciplinary modelling fails without an explicit discipline for where words mean what.

  • Semantic drift. The same string (“process”, “role”, “service”) slides between domains and editions.
  • Homonym collisions. One label carries incompatible senses across fields.
  • Hidden synonymy. Different labels point to the same local sense, but the identity is unstated.
  • Implicit globalism. Meaning is treated as universal; integration silently re‑writes models.

FPF resolves this by localising meaning first, then explicitly translating across locales.

The Three Principles (normative)

P‑S - Source Localisation Principle — Speak with the Context.

Rule. Every term in a normative FPF publication unit MUST be bound to a specific U.BoundedContext (its “Context of meaning”). The binding is explicit in text, notation, or table headers (e.g., process (BPMN 2.0)).

Implications.

  • No free‑floating “global terms”.
  • A finite Context Map (see F.1) is chosen before naming work starts.
  • If a source intrinsically fixes time stance, the DesignRunTag is carried by the Context (C‑7).

Reasoning move (conceptual). Context(C) ∧ says(C, term t) ⊢ usable(t@C)

Illustration (Enactment line). activity @ PROV‑O (run) vs task @ IEC 61131‑3 (run) vs process @ BPMN 2.0 (design).

P‑L - Local Meaning Principle — Meaning lives inside the Context.

Rule. The intended sense of a term is established inside its Context as a SenseCell: a small, reconstructible unit of local meaning with Tech/Plain labels and a concise gloss. SenseCells are lexical only (C‑6): no behaviours, no deontics, no equations.

Implications.

  • SenseCells are Context‑scoped; they do not cross Contexts.
  • Minimal generality (G‑1) and contextual specification (G‑2) govern naming inside the Context.
  • Intra‑Context clustering of raw mentions precedes any Cross‑context act (see F.3).

Reasoning move (conceptual). usable(t@C) ∧ fits(gloss, C) ⊢ SenseCell⟨t@C⟩

Illustration (KD‑CAL). observation @ SOSA/SSN: Tech “observation”, Plain “measurement act”; gloss “Result‑bearing act applying a Procedure…”.

P‑B - Explicit Bridge Principle — across Contexts, only with a bridge.

Rule. Any relation between terms from different Contexts MUST be stated as an Alignment Bridge (see F.9): a named mapping between SenseCell⟨-⟩ items with a declared relation kind (e.g., overlaps, broader‑than, near‑equivalent) and a Congruence Level (CL) for trust calculus (B.3).

Implications.

  • No by‑name identity across Contexts; string equality ≠ sense equality.
  • Bridges carry loss/fit notes and are auditable; they can be revised by edition.
  • Concept‑Sets (F.7) are built from bridged cells, not from lexical strings.
  • When the prose wording uses umbrella sameness/alignment tokens (“same/equivalent/align/map/…”), treat it as an RPR trigger and repair it via A.6.9 (RPR‑XCTX) before granting any naming or substitution licence.

Reasoning move (conceptual). SenseCell⟨x@A⟩ ↔⟨rel, CL⟩ SenseCell⟨y@B⟩ ⊢ translatable(x@A, y@B, rel, CL)

Illustration (Sys‑CAL × Enactment). actuation @ CTRL‑Text ↔⟨near‑equiv, CL=2⟩ control‑output @ IEC 61131‑3.

Minimal Conceptual Objects (conceptual, notationally neutral)

These conceptual objects are thought‑objects; they specify what must exist conceptually, not how it is stored.

Context Card (for each U.BoundedContext)

A terse descriptor used in the Context Map (F.1):

  • id (stable local handle) - title - edition/year
  • family (discipline family; informal) - scope gist
  • timeStance? (design / run, if inherent)
  • trip‑wires (few lexical caveats that often mislead, e.g., “process≠thermo process”)

SenseCell (unit of local meaning, inside one context)

  • label.tech / label.plain (two registers)
  • gloss (minimal generality, Context‑true)
  • notes? (warnings, edition shifts)
  • No behaviour/deontics/equations (C‑6)

Where it comes from. F.2 describes how SenseCells can be derived from local term evidence; F.0.1 only requires that local meaning be expressible as a SenseCell.

Alignment Bridge (between SenseCells from different Contexts)

  • left: SenseCell⟨-@A⟩, right: SenseCell⟨-@B⟩
  • relation (e.g., equivalent‑under‑assumptions, overlaps, broader‑than)
  • CL (Congruence Level; feeds B.3 Trust & Assurance)
  • loss/fit (explicit statement of what is lost or assumed)

Invariants (normative)

  1. I‑1 - Context‑qualified usage. Every normative use of a term is Context‑qualified (directly or via table/section headers).
  2. I‑2 - Local‑only cells. A SenseCell belongs to exactly one Context.
  3. I‑3 - senseFamily hygiene. SenseCells are lexical; behaviour, deontics, measurements, proof steps live in their respective patterns (C‑6).
  4. I‑4 - Time stance fidelity. If a source fixes a DesignRunTag, the Context Card carries it and SenseCells inherit it.
  5. I‑5 - No implicit Cross‑context identity. Cross‑context relations exist only as F.9 Bridges with relation and CL.
  6. I‑6 - Parsimony & heterogeneity hook. The Context Map is finite, heterogeneous (≥ 3 families per unification line), and parsimonious (F.1).

Reasoning Primitives (judgement schemata; pure, side‑effect‑free)

These capture allowable mental moves; they do not prescribe storage, APIs, or workflow.

  • Context qualification Context(C) ∧ mentions(C, s) ⊢ uses(s@C) Reading: If a string s is used under Context C, we treat it as the local term s@C.

  • Local sense formation uses(t@C) ∧ gloss_C(t) ⊢ SenseCell⟨t@C⟩ Reading: A Context‑true gloss yields a SenseCell for t inside C.

  • Admissible Cross‑context relation SenseCell⟨x@A⟩ ∧ SenseCell⟨y@B⟩ ∧ declare(rel, CL) ⊢ Bridge(x@A, y@B, rel, CL) Reading: Only an explicit declaration generates a Bridge; no name‑matching inferences.

  • Bridge‑to‑Concept‑Set hint (for F.7) Bridge(x@A, y@B, rel≈equiv, CL≥k) ⊢ candidate_same_row(x, y) Reading: High-CL, near‑equivalence bridges can nominate cells for one Concept‑Set row (final decision in F.7).

Didactic Metaphor (informative)

  • Contexts. Each U.BoundedContext is a Context; its Context Card is a published boundary marker (name, edition, time stance, trip‑wires).
  • Words in a Context. A SenseCell is a dictionary entry pinned to that Context’s wall.
  • Door‑to‑door links. An Alignment Bridge is a labelled passage connecting two Contexts; a CL placard says how trustworthy that passage is.

We first speak inside Contexts; only then decide which doors to connect—and with what warnings.

Placement & Flow

F.0.1 is the front door of Part F. It enables: F.1 (choosing Contexts with Context Cards) → F.2 (deriving SenseCells inside each Context) → F.3 (stabilising local senses) → F.7 (building Concept‑Set rows) → F.9 (stating Bridges).

Anti‑patterns & remedies

#Anti‑pattern (what goes wrong)Symptom in modelsWhy harmful (conceptual)Remedy (this pattern’s clause)
A1Global term (Contextless usage)“process”, “service”, “role” used without a Context markMeaning drifts; integration silently rewrites senseP‑S: Always speak term@context; qualify via section/table headers if repeated
A2String‑match identityEquating service (ITIL) with service (web‑API) by nameString equality ≠ sense equalityP‑B: Cross‑context relations exist only as Bridges with relation+CL
A3senseFamily mixing in SenseCellLocal glosses include behaviours, deontics, equationsViolates Strict Distinction (C‑6); blocks reuseP‑L: SenseCell is lexical only; behaviour/deontic math belongs to FPF patterns
A4Edition blurCiting “BPMN” or “ITIL” without editionUnderspecified Context; un‑auditable sense shiftContext Card carries edition/year; treat materially changed editions as distinct Contexts
A5Context as typeDeclaring “PROV‑O is‑a BPMN”Implies inherited meanings between ContextsContexts aren’t types; no is‑a on Contexts (E.10.D1). Use Bridges only
A6Bridge without loss/fitBridge declared as “equivalent” with no assumptionsUsers infer total identity; trust calculus blindP‑B: Bridge must state relation and CL, plus a brief loss/fit note
A7Row from stringsConcept‑Set rows built from lexical formsHomonyms/synonyms contaminate rowsBuild rows from SenseCells; add only cells connected by acceptable Bridges (F.7)
A8Transitivity overreachChaining low-CL near-equivalences as if exactInflates sameness; hides mismatchBridge composition (Sec. 10): compose with min-CL and keep the relation downgrade declared
A9Domain ≡ Context“Domain” name used as if it were a U.BoundedContextDomain families are informal; Contexts are formalKeep Domain family informative on Context Cards; meanings bind to Contexts only
A10Time‑stance confusionTreating design and run senses as identicalCrosses senseFamilies; erases execution/spec splitCarry time stance on Context Cards; prefer design‑spec‑of / run‑trace‑of Bridges

Compact worked examples

Each vignette shows (1) two Context Cards (abridged), (2) SenseCells inside Contexts, (3) the Bridge with relation & CL, and (4) a Concept‑Set hint (if any).

F.0.1:9.1 Enactment × Provenance — process vs activity

  • Context A: BPMN_2_0 - Business Process Model and Notation v2.0 (2011) - design SenseCell⟨process@BPMN⟩: Tech “process”; Plain “workflow process”; Gloss “graph of flow nodes/events executed by participants.”

  • Context B: PROV_O_2013 - W3C PROV‑O (2013) - run SenseCell⟨activity@PROV⟩: Tech “activity”; Plain “provenance activity”; Gloss “time‑bounded occurrence using/generating entities.”

  • Bridge: ⟨process@BPMN⟩ ↔⟨design‑spec‑of, CL=2, loss: “no concurrency semantics in trace”; fit: “maps to execution plan”⟩ ⟨activity@PROV⟩

  • Concept‑Set hint: No same‑row nomination (relation ≠ near‑equiv); instead, record a design↔run linkage.

Control × PLC runtime — actuation vs control output

  • Context A: CTRL_Text_Classic - control theory primers - design SenseCell⟨actuation@CTRL⟩: Tech “actuation”; Plain “control output”; Gloss “signal applied to plant actuators.”

  • Context B: IEC_61131_3 - PLC languages - run SenseCell⟨q‑output@IEC⟩: Tech “control‑output”; Plain “PLC output”; Gloss “program‑produced output variable to field I/O.”

  • Bridge: ⟨actuation@CTRL⟩ ↔⟨near‑equivalent, CL=2, loss: “hardware/scan‑cycle specifics absent in CTRL”; fit: “semantics align under linear regime”⟩ ⟨q‑output@IEC⟩

  • Concept‑Set hint: Candidate same‑row (F.7) with note: “merge permitted at CL≥2 threshold.”

F.0.1:9.3 Measurement × Service — observation vs service metric

  • Context A: SOSA_SSN_2017 - sensing/observations - run SenseCell⟨observation@SOSA⟩: Tech “observation”; Plain “measurement act”.

  • Context B: ITIL4_2020 - services - (mixed) SenseCell⟨slo‑metric@ITIL⟩: Tech “service‑level metric”; Plain “service measure”; Gloss “quantity used to evaluate SLOs.”

  • Bridge: ⟨observation@SOSA⟩ ↔⟨provides‑value‑for, CL=2, loss: “organizational context not in SOSA”; fit: “metric results are measurement results.”⟩ ⟨slo‑metric@ITIL⟩

  • Concept‑Set hint: Not a same‑row case; this is a role‑in‑use relation (measurement feeds status evaluation).

F.0.1:9.4 Type reasoning — subclass‑of (OWL) vs is‑a (plain)

  • Context A: OWL2_Profiles - description logics SenseCell⟨subclass@OWL⟩: Tech “subclass‑of”; Plain “is‑a”.

  • Context B: ENG_Glossary - engineering plain usage compendium SenseCell⟨is‑a@ENG⟩: Tech “is‑a (engineering)”; Plain “kind‑of”; Gloss “informal subsumption in specs.”

  • Bridge: ⟨subclass@OWL⟩ ↔⟨near‑equivalent, CL=1, loss: “OWL formal constraints absent in ENG”; fit: “intended subsumption semantics.”⟩ ⟨is‑a@ENG⟩

  • Concept‑Set hint: Keep separate rows unless the consuming artefact demands formal semantics.

F.0.1:9.5 Deontics × Access — permission vs role (RBAC)

  • Context A: ODRL_2_2 - policy/deontics SenseCell⟨permission@ODRL⟩: Tech “permission”; Plain “allowed action”.

  • Context B: NIST_RBAC_2004 - access control SenseCell⟨role@RBAC⟩: Tech “access‑role”; Plain “permission set”.

  • Bridge: ⟨permission@ODRL⟩ ↔⟨member‑of‑set‑in, CL=2, loss: “contextual obligations not preserved”; fit: “RBAC roles aggregate permissions.”⟩ ⟨role@RBAC⟩

  • Concept‑Set hint: Not same row (different kinds); useful linkage for Enactment when binding duties to sessions.

Extended reasoning moves (pure judgement schemata)

Judgements are conceptual entailments over Contexts, SenseCells, and Bridges. They carry no storage, workflow, or governance semantics.

Context‑qualified use

Context(C) ∧ mentions(C, s) ⊢ uses(s@C) If s is used under Context C, we treat it as the local term s@C.

Sense formation (local)

uses(t@C) ∧ gloss_C(t) ⊢ SenseCell⟨t@C⟩ A Context‑true gloss yields a SenseCell inside C.

Admissible Bridge (creation predicate)

SenseCell⟨x@A⟩ ∧ SenseCell⟨y@B⟩ ∧ A≠B ∧ rel∈R ∧ cl∈{0,1,2} ⊢ Bridge(x@A,y@B,rel,cl) Only explicit relation rel with Congruence Level cl constitutes a Bridge.

Canonical relation set R (didactic catalogue): equivalent‑under‑assumptions - near‑equivalent - overlaps - broader‑than - narrower‑than - design‑spec‑of - run‑trace‑of - representation‑of - member‑of‑set‑in - provides‑value‑for.

Bridge composition (minimum CL and relation loss)

Bridge(a,b,rel₁,cl₁) ∧ Bridge(b,c,rel₂,cl₂) ⊢ Bridge*(a,c,rel*,cl*)

  • cl* := min(cl₁, cl₂) (do not inflate confidence)
  • rel* := conservativeRel(rel₁, rel₂) (e.g., near‑equiv composed with overlaps yields overlaps)

Reading: Chained passages inherit the minimum CL and the relation that remains admissible after composition.

Non‑identity by stance

SenseCell⟨x@A(design)⟩ ∧ SenseCell⟨y@B(run)⟩ ∧ ¬declared(Bridge(x,y,near‑equiv,_)) ⊢ ¬same‑row(x,y) Different time stances forbid same‑row unless an explicit near‑equiv Bridge exists.

Row viability (Concept‑Set candidacy)

Cells = {c₁…cₙ} ⊢ row‑viable(Cells) ⇔ connected(Cells, Bridges_{rel∈{equiv,near‑equiv}, cl≥k}) ∧ ¬contradiction(Cells)

Reading: A row is viable if its cells form a connected subgraph via Bridges with sufficient CL and contain no mutually exclusive links.

Contradiction sieve

Bridge(a,b,broader) ∧ Bridge(a,b,narrower) ⊢ contradiction(a,b) Incompatible relations across the same pair flag a contradiction for review (conceptually).

Non‑bridge implication ban

name(x) = name(y) ∧ A≠B ⊢ ¬Bridge(x@A, y@B, _, _) String equality across Contexts never implies a Bridge.

SCR/RSCR acceptance checks (conceptual)

These checks are content‑oriented; they validate that a manuscript/model respects Part F principles. No process/tool assumptions are implied.

SCR — Static conformance

  • SCR‑F01 (Context‑qualified). Every normative term is Context‑qualified (directly, or via a scoped header that unambiguously fixes the Context).
  • SCR‑F02 (Local cells). Each SenseCell belongs to exactly one Context; no cell aggregates Cross‑context senses.
  • SCR‑F03 (senseFamily hygiene). SenseCell glosses contain no behaviours/deontics/equations; those appear only in their patterns.
  • SCR‑F04 (Bridges explicit). Every Cross‑context relation appears as a Bridge with relation and CL and a short loss/fit note.
  • SCR‑F05 (No string identity). There is no use of string equality to stand in for Cross‑context identity.
  • SCR‑F06 (Time stance fidelity). Where a Context fixes a DesignRunTag, the SenseCells and any Bridges reflect that stance explicitly.
  • SCR‑F07 (Row viability). Any Concept‑Set row shown is supported by a connected subgraph of Bridges with CL ≥ threshold and no contradictions.

RSCR — Regression & evolution

  • RSCR‑F01 (Edition split). When a source edition changes materially, SenseCells tied to the old edition remain; new cells bind to the new Context; Bridges are re‑assessed.
  • RSCR‑F02 (Bridge stability). If any Bridge endpoint changes gloss/stance, downgrade or retire the Bridge, documenting the loss/fit change.
  • RSCR‑F03 (Composition guard). When composing Bridges in a chain, the resulting CL never exceeds the minimal link; relation CL drops monotonically.
  • RSCR‑F04 (Heterogeneity + QD guard): requires ≥3 domain‑families AND MinInterFamilyDistance ≥ δ_family (per the active F1‑Card edition), with QD‑triad evidence (publish Diversity_P and IlluminationSummary on the declared grid/kernel). Near‑alias pairs (per dSig rule) SHALL be flagged and excluded or merged before the guard is evaluated. Record the F1‑Card edition id.

Publish‑ready summary

An artefact is ready with respect to F.0.1 when:

  1. SCR‑F01…F07 hold for all terms, cells, rows, and bridges it presents;
  2. RSCR‑F01…F04 hold under simulated edition/stance changes;
  3. Every Cross-context statement can be read as a Bridge or as a composition of Bridges with stated CL and relation loss.

Quick reference (didactic)

  • Context = a U.BoundedContext with edition, scope, and (if inherent) time stance.
  • SenseCell = the minimal, lexical unit of meaning inside a Context (Tech/Plain labels + gloss).
  • Bridge = the only Cross‑context relation, labelled with relation and CL, plus a short loss/fit note.
  • Concept‑Set row = a didactic table row collecting SenseCells that are sufficiently the‑same‑thing under declared Bridges.

Mental checklist: Name the Context → speak in the Context → connect Contexts only by labelled bridges → build rows from bridged cells.

F.0.1:End

Domain‑Family Landscape Survey

“Fix the context of meaning before you name anything.” Status. Architectural pattern. Depends on. E.10.D1 Lexical Discipline for “Context” (D.CTX); F.0.1 Contextual Lexicon Principles; A.7 Strict Distinction (Clarity Lattice); A.11 Ontological Parsimony. Coordinates with. F.2 Term Harvesting & Normalisation; F.3 Intra‑Context Sense Clustering; F.4 Role Description; F.9 Alignment & Bridge Across Contexts; G.0G.1 (Scope/entityOfConcern handoff). (Bridges live only in F.9.)

Aliases (informative). Contexts‑first survey; Context cut.

Intent & applicability

Intent. Establish a finite set of U.BoundedContext (“context of meaning”), each tied to an authoritative source or canon within a domain family, so that all later moves (term harvesting, clustering, role naming, cross‑context bridges) operate on local meanings rather than on drifting, globalised words.

Applicability. Use at the start of any unification effort for any FPF pattern (Enactment (U.RoleAssignment + U.RoleEnactment), Sys-CAL, KD-CAL, Kind-CAL, LCA-CAL…) and whenever a discipline canon materially changes (new edition, re-framing, seminal result).

Non‑goals. No tooling, workflow, or editorial roles. No global ontology. No cross‑context equations. This pattern describes how to think, not how to store.

Problem frame

Without explicit context of meaning:

  1. Word‑drift. Common words (process, role, service, model) silently change sense across disciplines.
  2. Scope mirages. One influential standard is mistaken for the domain.
  3. Retro‑lock. Old editions become the implicit truth simply because they were “there first”.
  4. Category bleed. Behavioural roles, epistemic statuses, deontic permissions mix because their contexts were never fixed.
  5. Name inflation. New U.Types appear just to “stabilise” unstable words.

Forces

ForceTension to resolve
Universality vs localityWe want cross‑domain unification, but meaning is local to a U.BoundedContext.
Breadth vs parsimonyWide coverage prevents bias; too many Contexts defeats understanding.
Recency vs continuityNew editions matter; but working knowledge often trails by years.
Didactics vs fidelityPedagogically simple summaries must remain faithful to the source.

Core idea (didactic)

Think in Contexts, not in words. A Context of meaning is a U.BoundedContext (per D.CTX) that encloses a coherent vocabulary and its rules from a specific, citable canon (standard, BoK, seminal paper, textbook tradition). You name and reason inside the Context. When you must step between Contexts, you will declare a bridge later (F.9) with explicit losses or mismatches.

Minimal vocabulary (this pattern only)

  • U.BoundedContext (short: Context in Tech register). The formal Context of meaning.
  • Context (Tech register alias for U.BoundedContext). Use Context for pedagogy, U.BoundedContext for formal references.
  • Domain family. An informative shelf‑label grouping related Contexts (e.g., workflow & provenance; services & deontics; sensing & measurement; types & taxonomies; control & actuation). No semantics attach; Domain ≠ Context.
  • Context Card. A one‑screen conceptual sketch of a Context (see §7.2).
  • SenseCell (appears downstream). A (Context × Local‑Sense) address; F.3 will mint these after clustering. Mentioned here only to keep the destination in view.

Solution — the Contexts‑first survey (conceptual, notation‑free)

Step 1 — Declare your unification line(s). State which FPF pattern threads are in play (e.g., Enactment + KD‑CAL sensing + Sys‑CAL execution). This keeps the cut purposeful.

Step 2 — Cut the landscape by domain families. For each line, select at least three distinct domain families (heterogeneity guard). Examples:

  • Workflow & provenance (BPMN 2.0; W3C PROV‑O)
  • Services & deontics (ITIL 4; ODRL 2.2)
  • Sensing & measurement (SOSA/SSN; ISO 80000‑1)
  • Types & taxonomies (OWL 2; FCA corpus)
  • Control & actuation (state‑space control texts; IEC 61131‑3)

Step 3 — For each family, sketch 1–3 Context Cards. Prefer canonical, widely cited canons. If a field is fragmented, choose one exemplar and one counter‑voice to surface heterogeneity.

Step 4 — Make locality explicit. Treat words as context‑local. Process (BPMN)process (thermodynamics)process (PROV). Do not reconcile. Do not average. Just fix the Contexts.

Step 5 — Bound the set. Small enough to hold in working memory. As a rule of thumb:

  • per unification line: ≥ 3 families;
  • per family: 1–3 Contexts. More only if a missing Context hides a known sense‑split you will certainly need.

Step 6 — Postpone bridges. If two Contexts seem “close”, resist collapsing. Note the tension and leave any bridge claim to F.9 Alignment & Bridge.

What to record (conceptual, not clerical)

7.1 The two‑minute memory. Everything you need to think correctly later fits on an eight‑line card. No registries, no workflows, no storage choices.

7.2 The Context Card (one‑screen sketch). (Each bullet is a thought, not a field.)

  • Name & edition. “BPMN 2.0 (2011)”“W3C PROV‑O (2013)”“ITIL 4 (2020)”.
  • Domain family. workflow / provenance / services / deontics / sensing / types / control(informative only; never used to infer meaning).
  • Scope gist (didactic; ≠ USM.ScopeSlice(G)). One line that marks the inside/outside (“workflow graphs & participants”, “provenance entities/activities/agents”).
  • Time stance (if inherent). Does the canon speak design (specifications, models) or run (occurrences, acts)?
  • Lexical trip‑wires. Known homonyms or false friends in this Context (“process ≠ thermodynamic process”, “role (RBAC) ≠ behavioural role”).
  • Neighbour Contexts (informative). Close cousins that people often conflate (BPMN ↔ PROV‑O, ITIL ↔ ODRL).
  • Recency note. Current / superseded / candidate (only as a reminder to yourself which text you mean).
  • Why this Context matters here. One sentence linking to your unification line (“we will name Executions later; PROV‑O keeps them run‑time”).
  • Diversity signature (dSig). A 5-characteristics discrete signature for U.BoundedContext: [Sector, Function, Archetype, Regime, MetricFamily]. Authors SHOULD pick from local discipline taxonomies. Publish a dSigSource list (five refs/URIs, one per characteristic) on every Card, falling back to free-text only where no canonical term exists. Two Contexts are flagged as Near-Duplicate when ≥3 characteristics match. Publish dSig and dSigSource on every Card.

If your Card spills beyond a screen, you are collecting facts, not fixing meaning.

F1‑Card (normative artefact): { taxonomyRef, embeddingRef, DistanceDef, δ_family, confidenceBand, calibrationSet, edition, subFamilyDef? }. subFamilyDef (optional): declares the stable partitioning below a domain‑family (e.g., taxonomic sub‑fields or CVT clusters with parent family anchors). When HET‑FIRST quotas refer to “sub‑family”, they MUST use this declared subFamilyDef. Declare DomainDistance policy (cosine or transport) and δ_family threshold; version as part of DescriptorMapRef. Publish confidenceBand (e.g., CI90%) for the calibrated δ_family; treat numbers in examples as illustrative, not normative.

Invariants (normative, lightweight)

  1. Context ≡ U.BoundedContext. In this pattern, Context always means U.BoundedContext (per E.10.D1).
  2. Locality. Words are local to their Context; no global meaning is implied or imported.
  3. Heterogeneity. Each unification line considers ≥ 3 distinct Domain families (labels are informative only).
  4. Parsimony. Prefer few, canonical Contexts per family (1–3) that jointly expose the key sense splits.
  5. No bridging here. No equivalence or mapping is asserted between Contexts in F.1. (Bridges live in F.9.)
  6. DesignRunTag honesty. If a canon fixes a DesignRunTag, note it. Do not reinterpret.
  7. Didactic primacy. Each Context Card must be readable by a thoughtful engineer in under two minutes.
  8. Domain‑family neutrality. Domain families carry no semantics; they SHALL NOT be used for inheritance, inference, or bridge implication.
  9. Scope naming separation. Scope gist on Cards is didactic only; formal Scope/entityOfConcern (=USM.ScopeSlice(G)entityOfConcern(GroundingHolon, ReferencePlane)) is declared in G.0G.1, not in F.1.
  10. Diversity signature present. Each Context Card PUBLISHES a dSig in the 5‑characteristics form.
  11. Collision rule. If any pair of Cards has dSig matching on ≥3 characteristics, mark Near‑Duplicate and either merge into one slot or replace one by a Context from a different domain‑family. Record action in SCR.

Self‑checks (mental, not procedural)

  • The mirror test. Can you explain why each Context is inside your cut in one breath? If not, you are surveying for comfort, not for meaning.
  • The homonym ping. For each frequent word (process, role, service, model, execution), can you immediately list the Contexts where it differs? If not, add the missing Context.
  • The bridge itch. Feel the temptation to say “these are the same”? Good. Write the itch down and refuse to scratch it here. That’s F.9’s job.
  • The memory rule. If your entire survey cannot be recalled without opening a document, it is too large.

Micro‑examples (illustrative only)

One unification line: Enactment (U.RoleAssignment + U.RoleEnactment) with sensing and execution.

  • BPMN 2.0 (2011)workflow family. Scope gist: flow nodes, sequence flows, participants (design‑time). Trip‑wires: “process” here is a graph; not a run.
  • W3C PROV‑O (2013)provenance family. Scope gist: Activity that uses/generates entities (run‑time). Trip‑wires: “activity/process” here is a temporal occurrence.
  • ITIL 4 (2020)services family. Scope gist: service as value co‑creation; SLO/SLA (deontic talk nearby). Trip‑wires: “incident/problem/practice” don’t equal workflow tasks.
  • ODRL 2.2deontics family. Scope gist: permissions, prohibitions, duties (design). Trip‑wires: “duty/obligation” ≠ service guarantee mechanics.
  • SOSA/SSN (2017)sensing family. Scope gist: Observation as an act yielding a Result for a property. Trip‑wires: “observation” ≠ “state”; it’s an act with a procedure.
  • IEC 61131‑3control languages family. Scope gist: tasks that execute programs (run‑time). Trip‑wires: “task/execution” ≠ “workflow process”.

With only these Contexts fixed, later steps become almost mechanical: F.2 harvests terms inside each Context; F.3 clusters within each Context; F.4 names roles or statuses pointing to SenseCells; F.9 draws the bridges you refused to draw here.

Anti‑patterns & remedies

#Anti‑patternSymptom in practiceWhy it harms thinkingRemedy (conceptual move)
A1“One‑Book Domain”Everything is justified from a single canon (“X is the domain”).Projectionism; blinds heterogeneity; brittle to new editions.Enforce heterogeneity: pick ≥ 3 distinct domain families per unification line (§6 Step 2, §8‑3).
A2Context‑less talkingWords like process, role, service used without naming a Context.Global words drift; later steps must guess meaning.Always prefix with the Context in thought and prose: process (BPMN), activity (PROV), service (ITIL) (§4, §7.2).
A3Edition blur“BPMN” or “ITIL” cited with no year or profile.Inadvertent sense shifts; debates about “what the book says.”Cards keep name + edition on the first line; think with the exact edition (§7.2).
A4Phonebook surveyDozens of Contexts; no one can recall the cut.Violates didactic primacy; people default to global talk.Parsimony rule: 1–3 Contexts per family, just enough to reveal key sense‑splits (§6 Step 5, §8‑4, §9 “memory rule”).
A5Bridge‑by‑stealthPhrases like “these are basically the same” inside the survey.Hides losses; imports meaning across Contexts without scrutiny.No bridging here; write the itch to bridge down as an F.9 bridge question (§6 Step 6, §8‑5).
A6Role/status conflationRole (RBAC) treated as behavioural mask; duty (ODRL) treated as service runtime.Category bleed across families.Cards carry lexical trip‑wires (“RBAC role ≠ behavioural role”; “duty ≠ runtime guarantee”) (§7.2).
A7Temporal fudgeActivity or execution discussed without run/design stance.Misplaced assertions; design-time descriptions treated as occurrences.Cards note time stance when inherent (design vs run) (§7.2, §8‑6).
A8Domain = ContextA “domain” label used as if it were a Context (e.g., “control” == one context).Shelf label mistaken for a canon; sense becomes fuzzy.Domain family is informative only; Contexts are U.BoundedContext tied to specific canons (§5, §7.2).
A9Context inheritanceArranging Contexts in is‑a hierarchies (“PROV is‑a BPMN”).Suggests meaning flows by inheritance; erases locality.No is‑a among Contexts; relations between Contexts live in F.9 bridges (§8‑5).
A10Didactic bloatContext Card spills into pages of notes.Teaching load overwhelms the core idea.One-screen Card; everything else belongs to later patterns (§7.1-§7.2).
A11Family‑based inferenceTreating Domain‑family membership as implying similarity/equivalence.Smuggles semantics via shelf labels; breaks locality.Domain family is informative only; locality and any Cross‑context relation must be explicit (F.9).

Worked examples

Each example shows the cut (the Contexts you keep in view) and the thinking pay‑off you get before any harvesting, clustering, or bridging.

F.1:12.1 Enactment (U.RoleAssignment + U.RoleEnactment) with sensing & execution (service acceptance)

Unification line. Enactment + KD‑CAL (sensing) + Sys‑CAL (execution).

Contexts (six Cards).

  1. BPMN 2.0 (2011) — workflow family; design; graph of flow nodes, participants.
  2. PROV‑O (2013) — provenance family; run; Activity uses/generates Entities; Agents.
  3. ITIL 4 (2020) — services family; design; service, SLO/SLA vocabulary.
  4. ODRL 2.2 — deontics family; design; permission / prohibition / duty.
  5. SOSA/SSN (2017) — sensing family; run; Observation as act with Result.
  6. IEC 61131‑3 — control languages; run; tasks execute control programs.

Thinking pay‑off (examples).

  • You stop saying “process uptime” and think Execution (IEC) measured by Observation (SOSA) compared against SLO (ITIL)—three Contexts, three senses.
  • You mark a trip‑wire: RBAC role (not in this cut) is not a behavioural role (BPMN participant).
  • You resist equating PROV Activity with BPMN workflow; later F.9 may relate them with explicit loss.

F.1:12.2 Method quartet with types & measurement (model state graph)

Unification line. Method‑CAL + Kind-CAL + KD‑CAL.

Contexts (five Cards).

  1. SPEM 2.0 / ISO 24744 — methods family; design; Method and MethodDescription language.
  2. OWL 2 (profiles) — types family; design; class, subclass, equivalent class.
  3. FCA corpus — types family; design; concept lattices.
  4. SOSA/SSN (2017) — sensing family; run; Observation / Procedure.
  5. ISO 80000‑1 (2022) — metrology family; design; quantity kinds, units.

Thinking pay‑off.

  • You keep Method (abstract how‑to) separate from MethodDescription (epistemic recipe) and Execution (run) because the Contexts already split design vs run.
  • You avoid treating FCA “concept” as a U.Type; later F.9 can bridge OWL classes to FCA concepts with cautions.

F.1:12.3 Control & actuation with services (operational SLOs in plants)

Unification line. Sys‑CAL + LCA‑CAL (planned) + services/deontics.

Contexts (five Cards).

  1. State‑space control texts — control family; design; controller/plant, feedback.
  2. IEC 61131‑3 — control languages; run; task, program execution.
  3. ISA‑95 — integration family; design; levelled layers, interfaces.
  4. ITIL 4 (2020) — services family; design; SLO/SLA.
  5. SOSA/SSN (2017) — sensing family; run; Observation.

Thinking pay‑off.

  • Actuation” is recognised as control output (Sys‑CAL), not a service promise.
  • Incident” (ITIL) is not a plant fault (Sys‑CAL); Contexts deter category errors.

Reasoning primitives (judgement schemas, notation‑free)

These are mental moves, not queries. They read “given these thoughts, this conclusion is safe to hold (conceptually).”

  1. Context set for a line line L declared ⊢ Contexts(L) = {C₁,…,Cₙ} Reading: For a unification line L, the Contexts you deliberately keep in view are {C₁,…,Cₙ} (from your Cards).

  2. Heterogeneity check families(L) = F ⊢ heterogeneous(L) ≡ (|distinct(F)| ≥ 3) Reading: Your cut is heterogeneous if it spans at least three domain families.

  3. Parsimony check Contexts(L)=R, families(L)=F ⊢ parsimonious(L) ≡ (∀f∈F: 1≤|R∩f|≤3) Reading: Each family contributes a few Contexts, not a phonebook.

  4. Locality assertion term w, C∈Contexts(L) ⊢ meaning(w)@C is local Reading: A word’s sense is context‑local; no global meaning is implied.

  5. Time‑stance guard C has stance s∈{design,run} ⊢ claims@C must respect s Reading: If a Context is design‑time, do not make run‑time claims in it (and vice versa).

  6. Trip‑wire recall C lists tripWires T ⊢ for any w∈T, require Context‑prefix when speaking Reading: Words on the trip‑wire list must be spoken with the Context name.

  7. Bridge embargo C₁≠C₂ ⊢ no‑equivalence(C₁,C₂) within F.1 Reading: F.1 never asserts equivalence across Contexts; postponement is principled, not procrastination.

  8. Context sufficiency probe common‑word w used in L ∧ w not covered by any trip‑wire ⊢ consider adding a Context that makes w differ Reading: If a frequent word has no deliberate sense‑split in your cut, you may be missing a Context.

  9. Memory rule |Contexts(L)| too large ⊢ reduce until a careful mind can recite them unaided Reading: The survey should live in memory, not in a registry.

F1‑Card example (informative)

F1-Card v2025‑Q3:
  taxonomyRef: OpenAlex topics/fields (snapshot 2025‑08)
  embeddingRef: SPECTER2(2023) fine‑tuned@OA‑2025‑08
  DistanceDef: cosine on centroid embeddings (window 36 mo)
  δ_family: 0.35 (calibrated on control set; CI90% [0.33,0.37])
  calibrationSet: 120 labeled pairs (same vs different families)
  edition: 2025‑Q3

Relations (with other patterns)

Builds on: E.10.D1 Lexical Discipline for “Context” (D.CTX) — ensures ContextU.BoundedContext and reserves “Problem Frame” for narrative use. A.7 Strict Distinction — guards EntityOfConcern/Description-episteme/publication-carrier and DesignRunTag splits while you cut Contexts. A.11 Ontological Parsimony — motivates the small cut.

Constrains: F.2 (Term Harvesting): harvest inside Contexts named here; every occurrence carries a Context name. F.3 (Intra‑Context Sense Clustering): cluster per Context; no Cross‑context sense claims. F.4 (Role Descriptions): any role template or status template must cite a SenseCell that lives in a Context from this cut. F.9 (Alignment & Bridge): only F.9 may relate Contexts; never F.1F.4.

Used by. Extention patterns in Part C (Sys‑CAL, KD‑CAL, Kind-CAL, Method‑CAL, LCA‑CAL) as the lexical starting grid for their examples and definitions.

Migration notes (conceptual)

  1. New edition appears. Keep the old Card; add a new Card with the new edition. If the sense shifts, treat it as a new Context; if it is strictly editorial, mark recency but keep one context.
  2. New family emerges. If a missing family explains recurrent confusion in your line, admit it with one exemplar Context; remove a less informative Context to keep parsimony.
  3. Language variants. Treat language editions as separate Contexts unless the canon itself declares a single normative bilingual mapping.
  4. Trip‑wire growth. When you notice a recurring confusion, add a crisp trip‑wire to the relevant Card (one line; no essays).
  5. Bridges discovered later. Do not back‑port bridges into F.1; leave the Cards untouched and record the mapping in F.9.
  6. Dormant Contexts. If a Context no longer contributes to any active line, move it to a parking shelf (informative note on the Card) rather than deleting it.

Acceptance tests (SCR/RSCR — concept‑level)

Static conformance checks (SCR)

  • SCR‑F1‑S01 (Heterogeneity). For each unification line, the set of Cards spans ≥ 3 distinct domain families.
  • SCR‑F1‑S02 (One‑screen Cards). Each Card fits on one screen: name+edition; family; scope gist; time stance (if inherent); 1–3 trip‑wires; neighbour Contexts (optional); recency note.
  • SCR‑F1‑S03 (Locality pledge). Nowhere in F.1 are Cross‑context equivalences or merges asserted.
  • SCR‑F1‑S04 (Parsimony). In every family, 1–3 Contexts are kept; if more, a clear sentence justifies each extra Context’s unique sense contribution.
  • SCR‑F1‑S05 (Context discipline). “Context” is used only as a synonym of U.BoundedContext; “domain” appears only as an informative family label.
  • SCR‑F1‑S06 (Temporal honesty). If a canon fixes DesignRunTag, the Card states it.
  • SCR‑F1‑S07 (Family neutrality). No claim, classification, or relation in F.1 relies on Domain‑family membership; families appear only as shelf labels on cards.
  • SCR‑F1‑S08 (dSig present). Every Context Card has a 5‑characteristics dSig.
  • SCR‑F1‑S09 (Collision policy). Any pair with dSig match on ≥3 characteristics is either merged or replaced; SCR records the action.

Regression checks (RSCR)

  • RSCR‑F1‑E01 (Edition churn). When a new edition is added, prior Cards remain; no silent replacement.
  • RSCR‑F1‑E02 (Family balance). Adding/removing Cards does not drop any line below three families.
  • RSCR‑F1‑E03 (Trip‑wire coverage). After introducing a new Context, the trip‑wire lists of neighbouring Contexts are reconsidered and updated if needed.
  • RSCR‑F1‑E04 (No creep). Periodically apply the memory rule: if the cut no longer fits in working memory, shrink it.

Didactic distillation (90‑second teaching script)

“Before you name anything, fix the context of meaning. A Context is a U.BoundedContext tied to a specific canon—BPMN 2.0, PROV‑O, ITIL 4, SOSA/SSN, IEC 61131‑3, OWL 2. Words are local to Contexts: process (BPMN) is a workflow graph, activity (PROV) is a run‑time occurrence, service (ITIL) is a promise vocabulary. Cut the landscape so each unification line sees at least three domain families, with one‑screen Cards per Context (scope gist, time stance, trip‑wires). Do not bridge Contexts here—just write down the itch to bridge as an F.9 bridge question. Keep the cut small enough to remember. With Contexts fixed, harvesting (F.2), local clustering (F.3), role template or status templates (F.4), and explicit Cross‑context bridges (F.9) become straightforward—and you avoid naming ghosts that come from words floating without walls.”

F.1:End

F.2 — Term Harvesting & Normalisation

“Harvest words inside Contexts, name them in the Context’s own idiom, and stop there.” Status. Architectural pattern. Depends on. E.10.D1 Lexical Discipline for “Context” (D.CTX); F.0.1 Contextual Lexicon Principles (Source - Local Meaning - Bridge‑Only Crossing); A.7 Strict Distinction; A.11 Ontological Parsimony. Coordinates with. F.1 Context Map via Context Cards; F.3 Intra‑Context Sense Clustering; F.4 Role Description; F.9 Alignment & Bridge Across Contexts. Aliases (informative). context‑local harvesting; Local normalisation.

Intent & applicability

Intent. Provide a conceptual (notation‑free) discipline for turning Context‑internal usage into context‑local lexical units ready for later reasoning—without Cross‑context merging and without slipping into governance or tooling. The result is a small, auditable set of context‑local names and glosses that faithfully reflect how the canon speaks.

Applicability. Use whenever a unification line (from F.1) needs actual words to be referenced by patterns in Part C (Extention patterns) or by Role Descriptions (F.4). Re‑enter F.2 when a canon/edition changes or when a new Context is admitted in F.1.

Non‑goals. No global labels; no Cross‑context equivalence; no workflow or role descriptions; no storage/API talk. F.2 specifies how to think, not how to “run a pipeline”.

Problem Frame

Even with Contexts fixed (F.1), three mistakes recur:

  1. Word‑centrism. Treating a string as if it carried its meaning across Contexts (process, role, service).
  2. Over‑normalisation. Forcing one spelling/morphology across different canons, erasing Context‑specific cues.
  3. Premature structure. Smuggling behaviour, deontics, or type structures into what should remain lexical.

F.2 prevents these by localising meaning and naming strictly inside each Context.

Forces

ForceTension to resolve
Uniformity vs localityDesire for consistent names vs Context‑specific idioms that must be preserved.
Parsimony vs recallKeep the harvested set small vs keep rare but pivotal terms that unlock bridges.
Didactics vs fidelityTwo‑register labels (tech/plain) vs fidelity to the canon’s own phraseology.
Speed vs safetyMove fast to enable F.3/F.4 vs avoid any Cross‑context conclusion in F.2.

Core idea (didactic)

Harvest inside each Context; name in that Context’s idiom; do not cross Contexts. For every Context (a U.BoundedContext from F.1), you gather attested phrases as thought‑cues, choose a Local Normal Form (LNF) that matches the Context’s idiom, attach a two‑register label (Tech/Plain), and write a one‑sentence gloss. That’s all. You do not claim sameness with any other Context; you do not embed behaviour or deontics; you do not mint U.Types here. These local lexical units will become Local‑Senses in F.3 and later addressable SenseCells (Context × Local‑Sense).

Minimal vocabulary (this pattern only)

  • Context — Tech‑register alias for U.BoundedContext (per E.10.D1).
  • Attested phrase — A short, verbatim cue from the canon that shows how a word is used in this Context (citation idea, not a record format).
  • Local Normal Form (LNF) — The Context‑specific canonical surface you will use when referring to the term in this Context (minimal editing: spelling/hyphenation/casing per the canon).
  • Two‑register labelTech (engineer‑facing) and Plain (pedagogic) forms for the same Context‑local meaning.
  • Gloss (one‑sentence) — A Context‑faithful description of how the canon uses the term, at minimal generality.
  • Local lexical unit — The quintet (Context, LNF, Tech, Plain, Gloss). This is F.2’s only outcome.
  • Homonymy (signal) — Awareness that the same string has different local lexical units across Contexts (no relation asserted).
  • SenseCell (appears downstream) — Address (Context × Local‑Sense) minted in F.3; mentioned here so you know what you’re preparing.

Everything above is a way of thinking. None of it implies a database, statuses, or roles.

Solution — three mental moves (notation‑free)

Move A — Localise the word

Question to ask. “In which Context am I hearing this word?” Action (mental). Point to a specific Context (from F.1). Grab 1–2 attested phrases that are representative in this Context. Outcome. You stop thinking “global word” and start thinking “context‑local usage”.

Micro‑cue. If you cannot name the Context, do not harvest the word.

F.2:6.2 -Move B — Name it in the Context’s idiom

Question to ask. “How would this Context itself write it?” Action (mental). Choose the LNF (Context‑conformant spelling/hyphenation). Then write the two‑register label and a one‑sentence gloss that says what the canon means here—nothing more. Outcome. You have a local lexical unit (Context, LNF, Tech, Plain, Gloss).

Micro‑cues. • Prefer the canon’s head noun; keep canonical hyphens; avoid invented compounds. • The Plain label should help a non‑specialist; the Tech label should match engineers’ eyes. • The Gloss must fit on a single line; put details in F.3.

Move C — Fence it off

Question to ask. “What must I refuse to conclude here?” Action (mental). Explicitly refuse to: (1) compare across Contexts, (2) fold morphology that the canon treats as meaningful, (3) embed behaviour, deontics, or type structure. Outcome. A clean, context‑local lexical unit that will be safe to cluster in F.3 and safe to bridge (or not) in F.9.

Guard‑rails (normative, lightweight)

  1. context‑locality. Every local lexical unit MUST cite a Context (U.BoundedContext from F.1).
  2. Context‑idiom normalisation. LNF MUST respect the Context’s idiom (spelling/hyphenation/casing) and use minimal edits.
  3. Two registers. Each unit SHOULD carry both Tech and Plain labels for didactics; if one is missing, justify.
  4. Minimal generality (G‑1). The gloss MUST be as specific as the Context’s canon requires—no broader.
  5. EntityOfConcern / Description / specification-use hygiene (A.7). MUST NOT include behaviour equations, deontic rules, measurement math, or type axioms; those belong to patterns.
  6. No Cross‑context claims. MUST NOT assert equivalence, subsumption, or similarity with terms in other Contexts (F.9 only).
  7. Edition honesty. If the Context’s canon has multiple editions with shifting usage, treat them as distinct Contexts in F.1 before harvesting.
  8. Parsimony. Prefer few, telling lexical units over long tails; keep head terms that will power F.3/F.4/F.9.

Micro‑examples (illustrative, context‑local)

Each line is one local lexical unit. No relations are implied across lines.

  • Context: BPMN 2.0 (2011)LNF: process Tech: process - Plain: workflow process Gloss: “Directed graph of flow nodes and sequence flows enacted by participants.”

  • Context: PROV‑O (2013)LNF: activity Tech: activity - Plain: temporal occurrence Gloss: “Time‑bounded occurrence that uses and generates entities and is linked to agents.”

  • Context: ITIL 4 (2020)LNF: service‑level‑objective Tech: service‑level‑objective - Plain: service target Gloss: “Target value for a service characteristic within a service promise vocabulary.”

  • Context: NIST RBAC (2004)LNF: role Tech: access‑role - Plain: permission role Gloss: “Named grouping of permissions assignable via sessions.”

  • Context: SOSA/SSN (2017)LNF: observation Tech: observation - Plain: measurement act Gloss: “Act applying a procedure to a feature of interest to produce a result.”

  • Context: IEC 61131‑3LNF: task Tech: task - Plain: runtime program execution Gloss: “Cyclic or event‑driven execution unit for control programs.”

Didactic heuristics (informative)

  • Keep the Context prefix in your inner speech. Say “process (BPMN)”, “activity (PROV)”.
  • Prefer head nouns. If the canon says “service‑level objective”, do not shorten it to “objective”.
  • Resist elegance that erases signal. Hyphens and case often carry the Context’s culture; keep them.
  • Gloss from use, not from opinion. Quote in your mind, then compress; avoid importing definitions from neighbouring Contexts.

Anti‑patterns & remedies

#Anti‑patternSymptom (in thought or prose)Why harmfulRemedy (conceptual move)
A1Global normal formOne “canonical” label reused across Contexts.Erases local meaning; invites stealth bridges.Keep LNF per Context; any Cross‑context relation belongs to F.9 only.
A2String = meaningAssuming identical strings denote one concept across Contexts.Homonym collision (process, role, service).Always prefix mentally with the Context; treat same string in different Contexts as different units.
A3Over‑normalisationFolding hyphens/case/morphology “for consistency”.Loses the canon’s idiom; breaks citations.Minimal edits toward the Context’s idiom; never toward a global house‑style.
A4Headless multiwordTruncating to a head (“objective” for “service‑level objective”).Ambiguity; collapses scope.Preserve canonical head‑modifier as LNF when meaningful.
A5Premature structureEmbedding behaviour, deontics, units, or type axioms into the gloss.EntityOfConcern / Description / specification-use mixing (violates A.7); biases later patterns.Gloss usage, not calculus; structural content belongs to Extention Patterns in Part C.
A6Cross‑context folding“BPMN workflow ≈ PROV activity” written inside F.2.Hidden bridge; unpriced losses.No Cross‑context claims in F.2; write the itch to bridge for F.9.
A7Edition blur“BPMN” without year/profile; mixing excerpts across editions.Silent sense shift; unrepeatable reasoning.Treat distinct editions as distinct Contexts in F.1, then harvest.
A8Vendor‑dialect elevationTreating a DSL/keyword list as “the domain”.Projectionism; narrow idiom dominates.If needed, model the DSL as one context among others; keep heterogeneity from F.1.
A9Tail chasingHarvesting hundreds of rare terms.Cognitive overload; dilutes signal.Keep head terms that feed F.3/F.4/F.9; justify rare units by their bridging value.
A10Fake symmetryTech and Plain labels are identical jargon.Didactic failure.Make Plain genuinely explanatory; keep Tech faithful to the canon.
A11Temporal fudgeUsing run‑time words in design Contexts (or vice versa).Category drift; later contradictions.Respect the Context’s DesignRunTag from its Card (F.1 §7.2).
A12Cross‑language collapseMerging bilingual terms as one unit.Erases idiom‑specific signals; hides normative mapping gaps.Treat each language edition as its own Context unless the canon declares a normative mapping.
A13Alias inflationInventing new local names “for clarity”.Strays from the canon; hinders bridging.Prefer the canon’s idiom; keep invented phrasings to the Plain register only.
A14Role/status conflationRBAC “role” glossed as behavioural role.Cross‑family bleed; wrong assignment later.Call out the Context in the label: access‑role (RBAC) vs participant (BPMN); keep senses disjoint.

Worked examples (context‑local only)

Each line is a local lexical unit (Context, LNF, Tech, Plain, Gloss). No Cross‑context relation is implied. Later clustering (F.3) and bridges (F.9) may connect them.

F.2:11.1 Enactment + sensing

  • Context: BPMN 2.0 (2011)LNF: process Tech: process - Plain: workflow process Gloss: “Directed graph of flow nodes and sequence flows enacted by participants.”

  • Context: PROV‑O (2013)LNF: activity Tech: activity - Plain: temporal occurrence Gloss: “Time‑bounded occurrence that uses and generates entities and links to agents.”

  • Context: SOSA/SSN (2017)LNF: observation Tech: observation - Plain: measurement act Gloss: “Act applying a procedure to a feature of interest to produce a result.”

  • Context: ITIL 4 (2020)LNF: service‑level‑objective Tech: service‑level‑objective - Plain: service target Gloss: “Target value for a service characteristic within a service promise vocabulary.”

Thinking pay‑off: you can phrase “compare observation to service‑level‑objective” without importing workflow or provenance semantics.

F.2:11.2 Sys‑CAL / LCA‑CAL + services

  • Context: State‑space control textsLNF: actuation Tech: actuation - Plain: control output Gloss: “Signal applied to the plant to influence state or output.”

  • Context: IEC 61131‑3LNF: task Tech: task - Plain: runtime program execution Gloss: “Cyclic or event‑driven execution unit for control programs.”

  • Context: ITIL 4 (2020)LNF: incident Tech: incident - Plain: reported disruption Gloss: “Unplanned interruption or reduction in the quality of a service.”

Thinking pay‑off: avoids calling a plant fault an “incident” unless you cross Contexts later with an explicit bridge.

F.2:11.3 Kind-CAL + Method‑CAL + KD‑CAL

  • Context: OWL 2 (profiles)LNF: subclass‑of Tech: subclass‑of - Plain: is‑a (type hierarchy) Gloss: “C ⊑ D: every instance of C is an instance of D.”

  • Context: FCA corpusLNF: formal‑concept Tech: formal‑concept - Plain: extent–intent node Gloss: “Maximal (objects, attributes) pair under a Galois connection.”

  • Context: SPEM 2.0 / ISO 24744LNF: method Tech: method - Plain: abstract way of doing Gloss: “Abstract how‑to independent of specification or execution.”

  • Context: SOSA/SSN (2017)LNF: procedure Tech: procedure - Plain: measurement recipe Gloss: “Specification guiding how an observation is produced.”

Thinking pay‑off: discourages treating an FCA “concept” as a U.Type, or a procedure as a method without later proof.

Reasoning primitives (judgement schemas, notation‑free)

Read each as a permitted mental move over the outcomes of F.2. Symbols: R = Context (U.BoundedContext), u = local lexical unit, s = lexical string.

  1. Localisation heard(s) ∧ R chosen ⊢ localize(s,R) You decide to hear s only in Context R.

  2. Context‑idiom normalisation localize(s,R) ⊢ LNF_R(s) = ℓ Within R, the Local Normal Form for s is .

  3. Unit formation LNF_R(s)=ℓ ∧ labelTech=t ∧ labelPlain=p ∧ gloss=g ⊢ unit(u) = ⟨R,ℓ,t,p,g⟩ A local lexical unit is formed (quintet).

  4. Lexical‑only guard unit(u) ⊢ lexicalOnly(u) No behavioural/deontic/type math is attached to the gloss.

  5. Homonymy signal (Cross‑context) LNF_Ra(s)=ℓa ∧ LNF_Rb(s)=ℓb ∧ Ra≠Rb ⊢ homonymy(s) ⊇ {Ra,Rb} Same string across Contexts is flagged as different by default.

  6. Minimal generality check unit(u) ⊢ minimal(u) ⇔ gloss(u) says no more than the Context’s usage requires The gloss fits the Context; broader claims are withheld.

  7. Two‑register adequacy unit(u) ⊢ didactic(u) ⇔ (tech(u) faithful) ∧ (plain(u) explanatory) Tech stays canonical; Plain helps non‑specialists.

  8. No Cross‑context conclusion unit(u@Ra), unit(v@Rb), Ra≠Rb ⊢ ¬(u ≡ v) (within F.2) F.2 never asserts Cross‑context equivalence.

  9. Ready‑for‑F.3 signal lexicalOnly(u) ∧ minimal(u) ∧ didactic(u) ⊢ readyF3(u) A unit is suitable input for intra‑Context clustering in F.3.

Relations

Builds on: F.1 (Contexts fixed; heterogeneity/parsimony in place). E.10.D1 D.CTX (Context ≡ U.BoundedContext; “Problem Frame” reserved for narrative). F.0.1 (Source - Local Meaning - Bridge‑Only Crossing).

Constrains: F.3 (Intra‑Context Sense Clustering): operates only on units from one Context; produces Local‑Senses and addressable SenseCells. F.4 (Role Description Definition): may cite SenseCells, not raw strings. F.9 (Alignment & Bridge): consumes homonymy signals; declares explicit Cross‑context mappings with loss policies.

Used by. Extention patterns in Part C when referencing domain idioms (labels stay context‑local).

Migration notes (conceptual)

  1. New edition appears. Add a Context in F.1; harvest afresh in F.2 using that Context; do not overwrite earlier units.
  2. Idiomatic update discovered. If your LNF fought the canon’s idiom, re‑LNF within the same context; keep labels/glosses steady unless the canon itself differs.
  3. Ambiguity inside a Context. If use splits, mint two units with distinct glosses; F.3 will sort their relation (same/different Local‑Sense).
  4. Language split. Treat each language canon as its own Context; resist cross‑language merges in F.2.
  5. Tail pruning. If units accumulate without feeding F.3/F.4/F.9, drop them from the working set; keep head terms that carry bridges.
  6. DSL quarantine. If a tool dialect is unavoidable, keep it as one context among others; never let it define the idiom for other Contexts.

Acceptance tests (SCR/RSCR — concept‑level)

Static conformance (SCR)

  • SCR‑F2‑S01 (context‑locality). Every unit cites a Context from F.1.
  • SCR‑F2‑S02 (Idiomatic LNF). Each LNF reflects the Context’s spelling/hyphenation/casing with minimal edits.
  • SCR‑F2‑S03 (Two registers). Each unit carries both Tech and Plain labels; if not, a reason exists tied to didactics.
  • SCR‑F2‑S04 (Lexical‑only). No gloss contains behaviour, deontics, measurement math, or type axioms.
  • SCR‑F2‑S05 (No Cross‑context claims). Nowhere does F.2 assert equivalence/similarity/subsumption across Contexts.
  • SCR‑F2‑S06 (Minimal generality). Glosses match the Context’s use; no globalisation.
  • SCR‑F2‑S07 (Temporal honesty). For Contexts with fixed DesignRunTag, units and glosses respect it.

Regression (RSCR)

  • RSCR‑F2‑E01 (Edition split). Introducing a new edition yields new units under a new Context; earlier units persist unchanged.
  • RSCR‑F2‑E02 (Normaliser stability). Adjusting an LNF does not silently widen/narrow the gloss.
  • RSCR‑F2‑E03 (Language split). Adding a second language yields a second Context; no bilingual collapse in F.2.
  • RSCR‑F2‑E04 (No stealth bridges). After updates, F.2 still contains zero Cross‑context identity claims; any mapping appears only in F.9.
  • RSCR‑F2‑E05 (Head‑term focus). Periodic check shows the unit set remains small and oriented to F.3/F.4/F.9 needs.

Didactic distillation (60‑second script)

“In F.2 you harvest inside Contexts. For each Context, pick the canon’s own phrasing, choose a Local Normal Form in that idiom, add Tech and Plain labels, and write a one‑sentence Gloss that matches how that Context talks. Stop there. No bridging, no behaviour, no equations. If the same string appears in another Context, treat it as a different unit. These units feed F.3, where you’ll sort senses within a Context, and F.9, where you’ll relate Contexts explicitly. This keeps meaning local, names faithful, and later reasoning clean.”

F.2:End

Intra‑Context Sense Clustering

“Within one context, decide what ‘the same sense’ really is—before you ever cross Contexts.” Status. Architectural pattern. Depends on. F.1 Domain‑Family Landscape Survey; F.2 Term Harvesting & Normalisation; E.10.D1 Lexical Discipline for “Context” (D.CTX); A.7 Strict Distinction; A.11 Ontological Parsimony. Coordinates with. F.4 Role Description; F.7 Concept‑Set Table; F.8 Mint or Reuse Decision; F.9 Alignment & Bridge Across Contexts. Aliases (informative). context‑local clustering; Sense consolidation.

Intent & applicability

Intent. Consolidate the context‑local lexical units from F.2 into a small set of Local‑Senses that actually operate in that one context (U.BoundedContext). Each Local‑Sense receives a crisp, didactic label pair (Tech/Plain) and a short sense statement. The result is an addressable basis for later uses (Role Assignment, tables, bridges) that is still strictly context‑local.

Applicability. Apply after F.2 for any Context that will feed naming (F.4/F.5), decision gates (F.8), Cross‑context bridges (F.9), or exemplars in Part C. Use again whenever the canon (edition) shifts usage enough to split or merge senses within the same context.

Non‑goals. No Cross‑context comparison or merging. No behaviour/deontics/type mathematics. No storage schemas or workflows. This is pure sense‑making inside one context.

Problem Frame

context‑local units (LNF + labels + gloss) from F.2 often over‑ or under‑differentiate meaning:

  1. Over‑split: superficial variants (service‑level‑objective vs SLO) treated as different “things”.
  2. Under‑split: one gloss covering two selectional frames or incompatible use‑cases.
  3. Drift within a canon: multi‑chapter texts use the same head differently unless the reader consolidates the intended sense.
  4. Didactic mismatch: engineer‑friendly label and plain label drift apart when units remain too granular.

F.3 repairs this inside the Context by clustering “same sense” and distinguishing “different sense”, with parsimony.

Forces

ForceTension to resolve
Parsimony vs fidelityFew Local‑Senses ease teaching; too few dilute real distinctions the canon relies on.
Usage vs definitionGlosses should reflect how the canon uses the word, not an imported dictionary definition.
Labels vs idiomTech label must stay in the canon’s idiom; Plain label must help newcomers—without inventing a new sense.
Stability vs opennessConsolidated senses must be stable enough for Role Descriptions and tables, yet revisable when the canon’s use clearly splits.

Core idea (didactic)

Cluster by usage, not by string. Inside one context:

  • Same senseLocal‑Sense: a small, coherent usage‑region the canon treats as one idea (even if it has aliases or minor surface variation).
  • Different sensetwo Local‑Senses: incompatible selectional frames, entailments, or role in the canon’s own statements.

Each Local‑Sense becomes addressable when paired with its Context: SenseCell = (Context × Local‑Sense). SenseCells are context‑local coordinates; they do not pre‑judge any Cross‑context mapping.

Minimal vocabulary (this pattern only)

  • Context — short for U.BoundedContext (per D.CTX).
  • Unit — a context‑local lexical unit from F.2 (LNF + Tech/Plain + gloss).
  • Local‑Sense — the conceptual cluster of Units deemed “same sense” within that Context.
  • SenseCell — the address for a Local‑Sense: (Context, Local‑Sense). This is what later patterns will cite.
  • Counter‑example — a short, canonical sentence or use that must not be covered by the Local‑Sense; it sharpens the boundary.
  • Usage cue (informative) — a clue from usage (collocational patterns, paraphrases, entailments in the canon) that suggests merge or split. Cues do not decide; the canon’s intent does.

Solution — how to think the clustering (notation‑free)

What follows are mental moves, not steps for a team. Use them as probes until the Context’s usage partitions itself naturally.

6.1 Consolidate aliases into one Local‑Sense. If Units differ only by orthography, abbreviation, or canon‑blessed synonymy and are used interchangeably in the Context’s own sentences, treat them as one Local‑Sense. Example (ITIL): service‑level‑objective and SLO → one Local‑Sense.

6.2 Split on incompatible selectional frames. If the same head pairs with different kinds of arguments or plays different roles in the canon’s statements (and those roles cannot both be true at once), split. Example (BPMN): event as node type vs as occurrence narrative in a tutorial → two Local‑Senses; adopt the node type sense if that is the normative layer.

6.3 Split on entailments that pull apart. If paraphrases lead to different entailments (e.g., one implies temporality, another structural position), you have two senses. Example (PROV): activity implies time‑bounded use/generate; it cannot be the same sense as a static capability.

6.4 Prefer sense minimality. If two candidate Local‑Senses never lead to different conclusions in the Context’s own use, merge them. If they sometimes do, split them—and record a counter‑example to keep the boundary crisp.

6.5 Keep Tech label idiomatic; Plain label helpful. Tech label stays as the canon speaks; Plain label conveys the function of the sense to a careful newcomer. Neither label may broaden the sense beyond usage.

6.6 Name only as much as you will use. If a fine-grained split has no downstream consequence (Role Descriptions, tables, bridges), prefer the coarser Local-Sense.

Outputs (conceptual, not clerical)

F.3 yields, per Context:

  1. A small set of Local‑Senses, each with:

    • Label pair: Tech (idiomatic) - Plain (didactic).
    • Sense line: one‑sentence usage statement, in the Context’s voice.
    • Inside list (informative): which Units from F.2 it consolidates.
    • Counter‑example (optional but powerful): a short use that must not be included.
  2. A SenseCell address for each Local‑Sense: (Context, Local‑Sense).

These are thinking reference points (cognitive only), not records or files. Later patterns cite SenseCells by name; nothing about storage is implied.

Invariants (normative, lightweight)

  1. context‑locality. Every Local‑Sense belongs to exactly one context. No Cross‑context clustering.
  2. Parsimony. Local‑Senses are few; prefer the coarsest partition that preserves the canon’s distinctions.
  3. Idiomatic Tech. The Tech label must stay in the Context’s idiom; no house‑style overrides.
  4. Didactic Plain. The Plain label must aid comprehension without adding scope.
  5. Usage‑first. Sense lines reflect the canon’s usage, not imported taxonomies or external theories.
  6. Counter‑examples rule. If a counter‑example exists that the sense would wrongly include, split.
  7. No behaviour math. Sense lines contain no behavioural, deontic, metrological, or type calculus; those live in Part C.
  8. Temporal honesty. If the Context fixes DesignRunTag, the sense line respects it (e.g., PROV activity is run‑time).

Self‑checks (mental probes)

  • Same‑conclusion test. Do two candidate senses ever lead to different conclusions in the canon? If not, merge.
  • Argument‑slot probe. Replace arguments in canonical sentences; do both candidates still read true? If one fails, split.
  • Label inversion. Read the Plain label alone: does it tempt you to over‑generalise? If yes, tighten it.
  • Counter‑example ping. Can you state a ten‑word use that the sense must exclude? If you can, write it; if you cannot, your sense may be too broad.
  • Memory rule. Can you recall the Context’s Local‑Senses without notes? If not, you split too finely.

Anti‑patterns & remedies

#Anti‑patternSymptom in thoughtWhy it harmsRemedy (conceptual move)
A1String = SenseTreating surface identity (service, SLO) as sameness of meaning.Collapses distinct uses; hides selectional differences.Compare selectional frames and entailments inside the Context; merge only if conclusions never diverge.
A2Cross‑context creepFolding BPMN process with PROV activity while clustering inside BPMN.Imports foreign usage; violates locality.Constrain attention to one context; postpone Cross‑context talk to F.9.
A3Over‑granulationSplitting minor orthographic variants (service‑level‑objective vs SLO).Adds friction; no conceptual gain.Consolidate canon‑blessed aliases into one Local‑Sense.
A4Under‑granulationOne sense for incompatible roles (event as node‑type vs occurrence).Causes contradictory inferences later.Split on role/entailment conflict; add a counter‑example to sharpen the cut.
A5Imported definitionsBorrowing dictionary glosses not used in the canon.Drifts from the Context’s idiom; confuses labels.Ground every sense line in statements the canon actually makes.
A6Label driftTech label in canon idiom; Plain label broadens scope.Teaches the wrong thing; leaks meaning.Keep Tech idiomatic; make Plain helpful yet strictly within the same usage.
A7Behaviour/math leakageSense lines include runtime metrics, deontic rules, type axioms.Mixes EntityOfConcern, Description episteme, and specification-use positions; duplicates Part C work.Sense lines are usage‑only; no equations, no policies.
A8Edition blendMixing 2011 and 2020 usage under one Local‑Sense.Hidden shifts; brittle bridges later.If usage changed with edition, treat as different Contexts (F.1) or distinct Local‑Senses with edition note.
A9Collocate worshipDeclaring sameness solely from similar nearby words.Correlates ≠ causes; misses entailments.Use collocates as cues, then decide by entailment/role checks.
A10Temporal fudgeTreating a design‑time sense as if it were run‑time (or vice versa).Category errors at enactment.Respect the Context’s time stance; keep senses aligned to design or run as declared in F.1.

Local‑Sense Cards (one‑glance form)

A Local‑Sense Card is a one‑glance sketch per sense in a Context. It teaches faster than prose lists and keeps senses crisp.

Fields (thought‑items, not fields to fill):

  • Context (U.BoundedContext, edition)
  • Label pairTech (idiomatic) - Plain (didactic)
  • Sense line — one sentence in the Context’s voice
  • Inside — which F.2 Units it consolidates (names only)
  • Counter‑example — a short use that must not be included

Worked examples (all intra‑Context)

BPMN 2.0 (workflow Context)

Card A — “process (graph)”

  • Label: Tech process - Plain workflow graph
  • Sense line: A BPMN graph of flow nodes and sequence flows specifying orchestration among participants (design‑time).
  • Inside: process, process model, business process (when used as diagram).
  • Counter‑example: “This process took 5 minutes”runtime occurrence, not this sense.

Card B — “event (node‑type)”

  • Label: Tech event (node) - Plain event symbol
  • Sense line: A node-type that marks starts, ends, and intermediates; typed by trigger and result.
  • Inside: start event, message event, end event.
  • Counter‑example: “The outage event happened at 13:05” ← narrative occurrence, not the node‑type.

Outcome: “Process uptime” is rejected as a BPMN sense; Execution belongs to another Context.

PROV‑O (provenance Context)

Card C — “activity (run)”

  • Label: Tech activity - Plain time‑bounded execution
  • Sense line: An occurrence that uses and generates entities; linked to agents; has start/end.
  • Inside: activity, execution (when PROV authors use it).
  • Counter‑example: “Sorting algorithm” ← capability/method, not an occurrence.

Card D — “agent (provenance)”

  • Label: Tech agent - Plain provenance actor
  • Sense line: Thing that bears responsibility for an activity’s effects (person, org, software).
  • Inside: agent.
  • Counter‑example: “RBAC role” ← access status, not a PROV agent.

ITIL 4 (services Context)

Card E — “service‑level objective”

  • Label: Tech SLO - Plain service target
  • Sense line: A target value/range for a service characteristic used to define acceptable service.
  • Inside: service‑level objective, SLO.
  • Counter‑example: “Actual availability 99.5%” ← observation, not the target.

Card F — “incident”

  • Label: Tech incident - Plain service disruption
  • Sense line: An unplanned interruption or reduction in quality of a service.
  • Inside: incident.
  • Counter‑example: “Fault in plant sensor” ← Sys‑CAL fault; different Context.

SOSA/SSN (sensing Context)

Card G — “observation (act)”

  • Label: Tech observation - Plain measurement act
  • Sense line: An act applying a Procedure to a FeatureOfInterest to yield a Result for a property.
  • Inside: observation.
  • Counter‑example: “Temperature is 20 °C”result value, not the act.

OWL 2 (types Context)

Card H — “subclass‑of”

  • Label: Tech subclass‑of (⊑) - Plain is‑a (class)
  • Sense line: A class inclusion: every instance of C is an instance of D.
  • Inside: SubClassOf, is‑a (when authors use it for classes).
  • Counter‑example: rdf:type (instance‑of) — not class inclusion.

Card I — “equivalent‑class”

  • Label: Tech equivalent‑class - Plain same class extension
  • Sense line: Mutual class identity by extension; two labels for the same set of instances.
  • Inside: EquivalentClasses.
  • Counter‑example: owl:sameAs (individual identity), different predicate.

IEC 61131‑3 (control‑runtime Context)

Card J — “task (runtime)”

  • Label: Tech task - Plain program runner
  • Sense line: A cyclic or event‑driven execution unit that invokes programs on schedule or trigger.
  • Inside: task.
  • Counter‑example: “Control algorithm” ← design/method, not the runtime task.

Reasoning primitives (judgement schemas, notation‑free)

Each schema captures a safe mental move. It implies no storage, API, or workflow.

  1. Alias‑to‑sense consolidation Context C ⊢ interchangeable(U₁,…,Uₖ) ⇒ Local‑Sense σ Reading: If Units are used interchangeably by the canon in C, consolidate them into one Local‑Sense σ.

  2. Selectional‑frame split C ⊢ frames(U) = F, frames(V) = G, F ∩ G = ∅ ⇒ split(U,V) Reading: In C, if the argument/role patterns do not overlap, treat as different senses.

  3. Entailment divergence C ⊢ entail(U) ≠ entail(V) on canonical paraphrases ⇒ split(U,V) Reading: If paraphrases lead to different conclusions in the canon, split.

  4. Parsimony merge C ⊢ no‑test distinguishes {U₁,…,Uₖ} ⇒ merge(U₁,…,Uₖ) Reading: If no canonical test yields a difference, merge into one sense.

  5. Counter‑example trigger C ⊢ ∃e: e should not be covered by σ ⇒ refine(σ) Reading: A crisp counter‑example forces a narrower sense (split or relabel).

  6. Idiomatic Tech, faithful Plain C ⊢ labelTech(σ) in idiom(C) ∧ labelPlain(σ) ⊆ usage(σ) Reading: Tech label speaks the canon; Plain label does not widen the sense.

  7. SenseCell address C ⊢ σ ⇒ SenseCell ⟨C,σ⟩ Reading: Pair each Local‑Sense with its Context to form an address used downstream.

  8. Temporal guard stance(C)=design ⇒ forbid(run‑claims in σ) (and symmetrically) Reading: Sense lines must not cross the Context’s DesignRunTag.

  9. Edition guard C≠C′ (different editions with usage shift) ⇒ no‑merge(σ@C, τ@C′) Reading: Do not merge senses across Contexts when editions shift usage.

  10. Completeness ping (optional) frequent head w in C ∧ no Local‑Sense on w ⇒ consider(sense for w) Reading: If a common head lacks a sense, you may be missing a useful consolidation (within C).

Relations

Builds on: F.1 Domain‑Family Landscape Survey (Contexts fixed); F.2 Term Harvesting (Units ready); E.10.D1 D.CTX (Context discipline); A.7 Strict Distinction.

Constrains:

  • F.4 Role Description. Role Descriptions cite SenseCells; they do not invent senses.
  • F.7 Concept‑Set Table. Rows are built from SenseCells (later Cross‑context assembly); intra‑Context clarity here prevents row bloat.
  • F.8 Mint or Reuse Decision. Decisions compare proposed names to existing SenseCells to avoid type inflation.
  • F.9 Alignment & Bridge. Bridges connect SenseCell ↔ SenseCell across Contexts; F.3 provides the stable endpoints.

Is used by. Part C Extention Patterns to ground examples and invariants in Context‑true language.

Migration notes (conceptual)

  1. Usage clarifies → merge. If two Local‑Senses never lead to different conclusions in the Context’s canon, merge and keep the narrower sense line.
  2. Usage diverges → split. If new reading reveals incompatible roles/entailments, split and attach a counter‑example to each side.
  3. Edition change → new Context. When a new edition reframes usage, treat it as a separate Context (F.1) and re‑cluster there.
  4. Label upkeep. If the Plain label tempts broadening, tighten it; if the Tech label drifts from idiom, restore the canon term.
  5. Dormant sense. If a Local‑Sense ceases to matter for any active line, leave it listed but mark it low‑use in your own notes; do not fold it into another unless rule 1 holds.
  6. Bridge temptation. Record tensions to bridge elsewhere; F.3 never resolves Cross‑context relations.

Acceptance tests (SCR/RSCR — concept‑level)

Static conformance (SCR)

  • SCR‑F3‑S01 (context‑locality). Every Local‑Sense is paired with exactly one context; no Cross‑context clustering appears.
  • SCR‑F3‑S02 (Label pair). Each Local‑Sense has Tech (idiomatic) and Plain (didactic) labels; neither widens usage beyond the sense line.
  • SCR‑F3‑S03 (Sense line fidelity). Each sense line is grounded in canonical statements of the Context; no behaviour/deontic/math content.
  • SCR‑F3‑S04 (Parsimony). The set of Local‑Senses per Context is small enough to recall unaided by a careful mind.
  • SCR‑F3‑S05 (Counter‑example presence). For any ambiguous head, at least one counter‑example is recorded to guard the boundary.
  • SCR‑F3‑S06 (Temporal honesty). Where the Context has a declared stance, sense lines respect the DesignRunTag.

Regression (RSCR)

  • RSCR‑F3‑E01 (Merge soundness). Every merge is justified by a failed distinction test (no selectional or entailment difference).
  • RSCR‑F3‑E02 (Split necessity). Every split cites a role/entailment conflict or a concrete counter‑example.
  • RSCR‑F3‑E03 (Edition guard). No Local‑Sense spans Contexts that differ by edition with usage shift.
  • RSCR‑F3‑E04 (Label stability). Changes to labels do not change sense; if they do, the change is treated as a split/merge per E01/E02.
  • RSCR‑F3‑E05 (Downstream continuity). After splits/merges, SenseCell references in F.4/F.7/F.9 remain referentially clear (new addresses are explicit; no silent aliasing).

Didactic close (60‑second recap)

Within one context, collect how the canon actually uses a head, not how we wish it did. Merge aliases that never lead to different conclusions; split uses that do. Give each consolidated use a crisp Tech label in the Context’s idiom and a faithful Plain label. The pair (Context, Local-Sense) is your SenseCell—the address later cited by Role Descriptions, tables, and bridges. No Cross‑context mergers here; that job belongs to F.9. Keep senses few, boundaries sharp, and labels honest.

F.3:End

Role Description (RCS + RoleStateGraph + Checklists)

“Name the mask or the badge — and say what it commits to — but only inside a Context.” Status. Architectural pattern. Depends on. E.10.D1 Lexical Discipline for “Context” (D.CTX); E.10.D2 EntityOfConcern, Description Episteme, and Specification-Use Discipline; F.1 Domain‑Family Landscape Survey; F.2 Term Harvesting; F.3 Intra‑Context Sense Clustering; A.2.1 U.RoleAssignment; A.7 Strict Distinction; A.11 Ontological Parsimony. Coordinates with. F.5 Naming Discipline for U.Types & Roles; F.7 Concept‑Set Table; F.9 Alignment & Bridge Across Contexts; B.3 Trust & Assurance Calculus (for later status evaluation). Aliases (informative). Mask/Badge card; role card (plain only).

Intent & applicability

Intent. Provide a conceptual template for two kinds of assignables:

  • Role Template — a behavioural mask that a holder can wear in a specific Context (U.BoundedContext), shaping how it acts (via Method/Execution relations).
  • Status Template — an epistemic or deontic badge that a holder (or artefact, event, claim) can bear inside a Context, shaping how it is treated (evaluation, permission, standing).

Each template is grounded in a SenseCell ⟨Context, Local‑Sense⟩ from F.3 and declares minimal invariants that later assignments must satisfy. No Cross‑context meaning is imported here.

Applicability. Whenever you need to speak precisely about what it means to be a Participant (BPMN), hold an access‑role (RBAC), be an Incident (ITIL), or carry a Verified status (evidence line), before minting U.Types or drawing Cross‑context bridges.

Non‑goals. No workflows, no storage, no editors. No equations for assurance or control; those live in Part B/C. This pattern describes how to think and speak about assignables — not how to manage files.

Problem frame

Without explicit Role Descriptions:

  1. Role/status conflation. Access role (RBAC) treated as behavioural mask (BPMN participant); deontic duty treated as runtime effect.
  2. Context drift. A “role” quietly starts meaning different things across canons; later assignments contradict each other.
  3. Hidden commitments. We name a role assignment or status assertion but never state what must hold when it is assigned; downstream reasoning becomes arbitrary.
  4. Premature unification. A single template tries to straddle several Contexts; losses remain implicit.

Forces

ForceTension to resolve
Behaviour vs knowledgeA role changes how the holder acts; a status changes how the holder is treated/assessed. Keep EntityOfConcern, Description episteme, and specification-use positions distinct (E.10.D2; A.7).
Locality vs reuseWe want reusable templates, yet meanings are context‑local (E.10.D1, F.1).
Minimality vs sufficiencyInvariants must be few and decisive; too many become pseudo‑procedures.
Didactics vs fidelityA one‑screen card must be teachable without betraying the canon.

Minimal vocabulary (this pattern only)

  • ContextU.BoundedContext (per E.10.D1).
  • Local‑Sense — a consolidated sense in a Context (F.3).
  • SenseCell — the address ⟨Context, Local‑Sense⟩.
  • Role Template — behavioural mask defined in a Context, later bound by U.RoleAssignment.
  • Status Template — epistemic/deontic badge defined in a Context, later asserted as a claim about a holder/artefact.
  • Holder — the thing that may wear a mask or carry a badge (e.g., a U.System, U.MethodDescription, U.Work, U.Episteme).

Core idea (didactic)

A Role Description is a small card that says: (i) which Context’s sense it relies on (SenseCell), (ii) what label we use to speak about it (Tech & Plain), and (iii) what must hold when someone wears the mask (Role) or bears the badge (Status).

It is not a definition by prose alone; it is a pledge of invariants — minimal, Context‑true, and later checkable.

The Role Description Card (one‑screen sketch)

Each bullet is a thought‑item, not a file field.

Header

  • Template kind: Role | Status
  • Label pair: Tech (idiomatic) - Plain (didactic) (naming discipline in F.5)
  • SenseCell: ⟨ContextId, Local‑Sense label⟩

Applicability

  • Holder scope: what can wear/bear it (e.g., U.System, U.Work, U.MethodDescription, U.Episteme).
  • Time stance: design / run aligned to the Context (F.1).
  • Preconditions (Context‑true): crisp conditions that must already be true in the Context’s idiom.

Invariants (minimal)

  • Behavioural invariants (Role) or Evaluation invariants (Status) — 2–5 short lines stating what must hold after assignment/assertion, using the Context’s vocabulary and SenseCells where needed.
  • Separation guard: a one‑line reminder of what this template does not imply (prevents senseFamily mixing).

Consequences (informative)

  • Typical interactions: which Method/Execution/Observation constructs (by SenseCell) this template usually touches — names only.
  • Common misreads (trip‑wire): 1–2 bullets to prevent known confusions.

Memory rule: If your card can’t be read in under two minutes, you are writing a manual, not a template.

Autonomy hooks (when Role may act autonomously)

  • RCS additions (illustrative): AgencyLevel ∈ {None, Assisted, Delegated, Autonomous}, SafetyCriticality ∈ {SC0..SC3}.
  • RSG gate: mark which states are enactable under autonomy (cf. A.2.5); link to AutonomyBudgetDeclRef.
  • References: If autonomy is claimed for this Role, the Role Description MUST reference: AutonomyBudgetDeclRef (id, version), Aut-Guard policy-id (PolicyIdRef), OverrideProtocolRef.
  • Checklist: include a pre‑enactment checklist item “Autonomy Green‑Gate passed” (guard verdicts present).

Normative invariants (template discipline)

  1. context‑local grounding. Every Role Description MUST cite exactly one SenseCell as its semantic anchor.
  2. EntityOfConcern / Description / specification-use separation.
    • A Role Template MUST NOT encode deontic, access, or measurement rules.
    • A Status Template MUST NOT encode behaviour or control flow.
  3. Time honesty. The card’s stance (DesignRunTag) MUST match the Context’s stance (F.1).
  4. Minimality. Invariants SHOULD be the fewest that decide the assignment; avoid procedural sequences.
  5. No Cross‑context smuggling. A single card MUST NOT import foreign semantics; if two Contexts are needed, the relation is handled later in F.9.
  6. Label fidelity. Tech label MUST be idiomatic to the Context; Plain label MUST not widen the sense (F.3).
  7. Binding Standard (roles). A Role Template is the design‑time mask; at run‑time, a U.RoleAssignment creates System‑in‑Role instances that are subject to the card’s invariants.
  8. Assertion Standard (statuses). A Status Template is a badge; asserting it commits to the card’s evaluation invariants and to the Context’s way of checking them (later anchored via SenseCells, not formulas here).

Reasoning primitives (judgement schemas, notation‑free)

Conceptual moves only; no APIs, no data stores.

  1. Template grounding Template T cites SenseCell ⟨C,σ⟩ ⊢ meaning(T) is local to C Reading: The template’s meaning is context‑local.

  2. Role assignability holder h, RoleTemplate T, preconds_T(h) ⊢ assignable(h,T) Reading: If the preconditions hold for h, it is eligible to wear the mask T.

  3. Role assignment obligation assignable(h,T) ∧ bind(h,T: C) ⊢ invariants_T(h) must hold Reading: Once bound (via U.RoleAssignment), h must satisfy T’s behavioural invariants.

  4. Status assertability StatusTemplate S, evidence_in_C supports S for x ⊢ assertable(x,S) Reading: If evidence in the Context C supports S for x, the badge is assertable (details of evidence logic live in Part B).

  5. Status consequence assertable(x,S) ∧ assert(x,S) ⊢ evaluation_invariants_S(x) Reading: Once asserted, S’s evaluation invariants constrain how x is treated.

  6. Separation guard RoleTemplate T ⊢ not(deontic_implied(T)) - StatusTemplate S ⊢ not(behaviour_implied(S)) Reading: Wearing a mask doesn’t grant permissions; carrying a badge doesn’t define behaviour.

  7. Bridge embargo T cites ⟨C,σ⟩ ∧ C≠C′ ⊢ no‑equivalence(T@C, −) inside F.4 Reading: No Cross‑context equivalence is asserted here; use F.9 later.

Worked examples (Context‑true)

Illustrative cards only; names are tech/plain labels, not final U.Type IDs (F.5 will govern naming).

Role Template: participant (workflow actor) — Context: BPMN 2.0 (2011)

  • Kind: Role

  • Label: Tech participant - Plain workflow actor

  • SenseCell: ⟨BPMN_2_0, participant (actor in workflow)⟩

  • Holder scope: U.System (organisation, team, service)

  • Time stance: design

  • Preconditions: Holder is addressable as a lane/pool in the workflow model.

  • Behavioural invariants:

    1. Activities assigned to the participant appear in its lane/pool.
    2. The participant interacts through message flows at its boundaries.
    3. The participant does not define run‑time occurrence; it structures the model.
  • Separation guard: No permissions implied; no execution logs implied.

  • Typical interactions (informative): BPMN process (graph); message event (node).

  • Common misreads:RBAC role; ≠ PROV Activity.

Status Template: access‑role membership — Context: NIST RBAC (2004)

  • Kind: Status

  • Label: Tech access‑role - Plain permission role

  • SenseCell: ⟨NIST_RBAC_2004, role (permission grouping)⟩

  • Holder scope: U.System (user/session)

  • Time stance: run

  • Preconditions: A defined set of permissions exists for the role.

  • Evaluation invariants:

    1. If x carries this badge, x’s session inherits exactly the role’s permissions.
    2. The badge does not describe behaviour in a workflow; it determines access.
  • Separation guard: No commitment about BPMN assignment; no deontic duties.

  • Typical interactions (informative): permission, session (RBAC).

  • Common misreads:participant (BPMN); ≠ person as an ontological type.

Status Template: incident (service disruption) — Context: ITIL 4 (2020)

  • Kind: Status

  • Label: Tech incident - Plain service disruption

  • SenseCell: ⟨ITIL4_2020, incident (service quality drop)⟩

  • Holder scope: U.Work (recorded occurrence affecting a service)

  • Time stance: run

  • Preconditions: A service exists with declared SLOs/quality metrics.

  • Evaluation invariants:

    1. The occurrence reduces service quality below acceptable levels.
    2. It triggers restoration activities per service practice (names only).
  • Separation guard: Not a plant fault; not a BPMN event node.

  • Typical interactions: SLO (ITIL), Observation (SOSA) — names only.

  • Common misreads:problem (root cause category).

Role Template: task runner (control runtime) — Context: IEC 61131‑3

  • Kind: Role

  • Label: Tech task - Plain program runner

  • SenseCell: ⟨IEC_61131_3, task (runtime execution unit)⟩

  • Holder scope: U.System (controller CPU/task scheduler)

  • Time stance: run

  • Preconditions: A program is registered for cyclic/event execution.

  • Behavioural invariants:

    1. Invokes assigned program according to cycle/trigger.
    2. Provides schedule constraints (period/priority) to its program.
  • Separation guard: No claim about deontic guarantees or service targets.

  • Typical interactions: Execution (A.15 family), Actuation (Sys‑CAL).

  • Common misreads:workflow task; ≠ algorithm (design).

Anti‑patterns & remedies

#Anti‑patternSymptom (in a card)Why it harms thinkingRemedy (conceptual move)
A1Role⇄Status blurA Role card says “grants permission”; a Status card dictates behaviour.senseFamily mixing (Role vs Status); incoherent assignments.Move permission talk to a Status; keep Role invariants purely behavioural. Add a separation guard line.
A2Pan‑Context templateOne card cites several canons implicitly (“BPMN/PROV process”).Imports meaning across Contexts; hides losses.Keep one SenseCell per card. If Cross‑context relation is needed, apply F.9 Bridge.
A3Silent time flipCard defined in a design Context asserts run‑time facts (or vice versa).Violates F.1 time stance; produces category errors.Align Time stance to the Context; relocate run‑facts to status/evidence lines or to another Context.
A4Procedural templateLong “steps” instead of minimal invariants.Becomes a method recipe, not an assignable mask/badge.Replace sequences with decisive invariants (2–5 lines) that must hold regardless of procedure.
A5Permission leakageA BPMN Role claims access rights “by wearing the mask”.Conflates access with behaviour; misstates RBAC semantics.State explicitly: no permissions implied. Bind access via a Status in the RBAC Context.
A6Evidence bake‑inStatus card encodes metrics/formulas.Smuggles Part B maths; reduces portability.Keep only evaluation invariants in Context language; actual checks live in Part B/C via SenseCells.
A7Global labelTech label chosen for cross‑discipline appeal (“Actor”) not Context idiom.Loses local meaning; harms F.3 clustering.Use Context‑idiomatic Tech label; provide a Plain label for teaching (F.5 governs labels).
A8Concept inflationMultiple near‑duplicate cards for the same SenseCell.Noise; brittle naming.Prefer refinement (see §11) or a single card with tighter invariants; avoid duplicates.
A9Holder sprawlHolder scope lists unrelated kinds (“U.System or U.Work or U.Episteme”).Ambiguity at binding time.Shrink Holder scope to the real carriers; if truly different, split cards.
A10Anchor relapseCard talks about “anchors” or “global context.”Re‑introduces banned jargon; confuses D.CTX.Replace with Context / SenseCell; never use “anchor”.
A11Tooling creepMentions manifests, pipelines, editors.Violates E.5 guard‑rails; notational dependency.Remove all process/tool talk; keep card concept‑only.
A12Bridge‑by‑labelUsing identical labels to imply Cross‑context sameness.Stealth equivalence; no loss policy.Labels do not bridge. Any Cross‑context claim goes to F.9 with a declared CL policy.

Concept‑level operators (refinement & compatibility)

Judgement schemas — pure reasoning moves over cards. No APIs, no storage, no workflow.

Let sense(T) denote the SenseCell cited by template T. Let inv(T) denote the set of invariants on T. Let senseFamily(T) ∈ {Role, Status}. Let stance(T) ∈ {design, run} (from the Context).

Same‑Context equivalence

Form. sense(T₁) = sense(T₂) ∧ inv(T₁) ⇔ inv(T₂) ⊢ T₁ ≡ T₂

Reading. Two cards in the same Context with logically equivalent invariants co‑designate the same assignable.

Tech cue. Use this to merge duplicates conceptually without changing labels.

Refinement (strictness order)

Form. sense(T₁) = sense(T₂) ∧ inv(T₁) ⇒ inv(T₂) ⊢ T₁ ⪯ T₂

Reading. T₁ is a refinement of T₂ if its invariants imply those of T₂ (same Context).

Effects. Assigning T₁ automatically satisfies T₂; the converse need not hold.

Incompatibility (mutual exclusion)

Form. sense(T₁) = sense(T₂) ∧ (inv(T₁) ∧ inv(T₂) ⇒ ⊥) ⊢ incompatible(T₁,T₂)

Reading. Two cards in the same Context are mutually exclusive if their invariants cannot co‑hold.

Use. A conceptual Separation‑of‑Duty signal without governance.

Co‑wearability / co‑bearability

Form. senseFamily(T₁)=senseFamily(T₂)=Role ∧ stance(T₁)=stance(T₂) ∧ ¬incompatible(T₁,T₂) ⊢ coWearable(T₁,T₂) senseFamily(T₁)=senseFamily(T₂)=Status ∧ ¬incompatible(T₁,T₂) ⊢ stackable(T₁,T₂)

Reading. Within a Context, two Roles can be worn together (or two Statuses carried) when they do not conflict.

Time‑stance alignment

Form. stance(T)=design ⊢ inv(T) may not assert run‑facts stance(T)=run ⊢ inv(T) may not assert design‑commitments

Reading. Invariants must respect the Context’s DesignRunTag (F.1).

Binding/Assertion admissibility

Form. (Roles) holder h ∧ preconds_T(h) ⊢ assignable(h,T) assignable(h,T) ∧ bind(h,T) ⊢ inv(T)(h)

Form. (Statuses) evidence_in_Context(C) supports S for x ∧ sense(S)=⟨C,σ⟩ ⊢ assertable(x,S) assertable(x,S) ∧ assert(x,S) ⊢ inv(S)(x)

Reading. Preconditions and evidence gate the act of wearing a mask or bearing a badge; once done, invariants apply.

Cross‑context embargo (inside F.4)

Form. sense(T₁)=⟨C,−⟩, sense(T₂)=⟨C′,−⟩, C≠C′ ⊢ no‑relation(T₁,T₂) here

Reading. F.4 never asserts Cross‑context relations. If a relation is desired, it becomes a Bridge in F.9.

Relations (where this card sits)

Builds on: E.10.D1 D.CTX (Context ≡ U.BoundedContext); F.1 (Contexts cut); F.2 (harvested terms); F.3 (Local‑Sense → SenseCell); A.2.1 U.RoleAssignment; A.7 Strict Distinction.

Constrains: F.5 (Naming): pairs Tech/Plain must reflect the Context idiom and avoid Cross‑context overreach. F.7 (Concept-Set Table): rows reference SenseCells; Role Description cards point to those rows but never create cross-context identity. F.8 (Mint or Reuse?): prefer refinement (⪯) over new cards; split cards rather than mixing senseFamilies. F.9 (Alignment & Bridge): any relation across Contexts is declared there; Role Description cards remain context-local.

Is used by. A.15 family (Role–Method–Work alignment) to interpret System‑in‑Role and Work; Part B evidence/status checks to interpret evaluation invariants.

Migration notes (conceptual playbook)

  1. Context update (edition split). If the Context’s Local‑Sense changes, fork the card per new SenseCell; keep the old card as historically valid.
  2. Family correction (Role and Status). If a card mixes behaviour and deontics, split into one Role and one Status; move permission language to the Status.
  3. Tighten by refinement. When practice reveals a stricter understanding, prefer T′ ⪯ T over replacing T; this preserves existing assignments conceptually.
  4. Rename safely (labels only). If F.5 revises labels, change Tech/Plain wording; SenseCell and invariants remain untouched.
  5. Scope correction. If Holder scope was too wide, split into parallel cards with disjoint Holder scopes; avoid complex conditional invariants.
  6. Bridge discovery. Do not inject Cross‑context text into cards; record the relation as an F.9 Bridge (with CL policy), leaving the cards as they are.

Acceptance tests (SCR/RSCR — concept‑level)

Static conformance (SCR)

  • SCR‑F4‑S01 (Uni‑Context grounding). Each card cites exactly one SenseCell.
  • SCR‑F4‑S02 (Family honesty). senseFamily(T) is either Role or Status; invariants match the family; a separation guard line is present.
  • SCR‑F4‑S03 (Time honesty). stance(T) matches the Context’s stance; no opposing‑stance claims appear.
  • SCR‑F4‑S04 (Minimality). Card lists 2–5 invariants; none are procedural step lists.
  • SCR‑F4‑S05 (Label fidelity). Tech label is idiomatic to the Context; Plain label does not widen meaning.
  • SCR‑F4‑S06 (No Cross‑context import). Invariants reference only the Context’s idiom or other SenseCells by name (no identity claims).
  • SCR‑F4‑S07 (Holder clarity). Holder scope is a single coherent kind (e.g., U.System or U.Work), not a grab‑bag.
  • SCR‑F4‑S08 (No tooling/governance). Card contains no mentions of manifests, pipelines, editors, or workflows.

Regression (RSCR)

  • RSCR‑F4‑E01 (Edition churn). When a Context edition changes, existing cards are not overwritten; new cards are added per SenseCell.
  • RSCR‑F4‑E02 (Refinement safety). If T′ ⪯ T is introduced, prior usages of T remain conceptually valid; no backward contradictions arise.
  • RSCR‑F4‑E03 (senseFamily integrity). No card changes senseFamily across revisions (Role↔Status) without an explicit split noted.
  • RSCR-F4-E04 (Bridge discipline). After adding an F.9 Bridge, Role Description cards remain unchanged; cross-context meanings do not seep back into cards.
  • RSCR‑F4‑E05 (Label updates). Label changes per F.5 preserve SenseCell and invariants; tests treat them as renames, not semantic edits.

Didactic distillation (60‑second close)

A Role Description card is a Context-true way to speak about an assignable: a Role (behavioural mask) or a Status (epistemic/deontic badge). Each card names one SenseCell, gives a Tech/Plain label, states minimal invariants, and declares what it does not imply. Cards never mix Role and Status senseFamilies and never cross EntityOfConcern, Description episteme, and specification-use positions, never flip time stance, and never import other Contexts. Inside one context, you can compare cards by equivalence (≡), refinement (⪯), incompatibility, and co‑wearability. across Contexts, say nothing in the card; use a Bridge later. Keep cards one‑screen simple: enough to decide assignments; nothing procedural; no tools; just clear thought.

F.4:End

Naming Discipline for U.Types & Roles

Status. Definitional pattern. Depends on. E.10.D1 Lexical Discipline for “Context” (D.CTX); E.10.D2 EntityOfConcern, Description Episteme, and Specification-Use; F.1 Domain‑Family Landscape Survey; F.2 Term Harvesting & Normalisation; F.3 Intra‑Context Sense Clustering; F.4 Role Description Definition; A.7 Strict Distinction; A.11 Ontological Parsimony; F.0.1 context‑local Lexicon Principle (RLP). Coordinates with. F.7 Concept‑Set Table; F.8 Mint or Reuse?; F.9 Alignment & Bridge; F.13 Term Registry & Deprecation. Aliases (informative). Context‑true naming; Two‑register labels.

Intent & applicability

Intent. Provide a small, normative code of naming so that U.Types (Cross‑context categories) and Role Descriptions (context‑local Roles or Statuses) are labelled clearly, locally faithful, and globally stable, without importing tooling, workflows, or editorial process. Names are consequences of meaning fixed earlier (F.1F.4), not badges invented to “stabilise” drifting words.

Applicability. Use whenever you (a) mint or revise a U.Type name from a Concept‑Set row (F.7), or (b) assign labels to a Role Description (F.4). This pattern governs what a good name must be, not how a team produces it.

Non‑goals. No registries, reviews, or hand‑offs. No style‑police for punctuation beyond conceptual clarity. No bridging or synonym decisions across Contexts (F.9 does that).

Problem frame

Naming errors cause structural errors:

  1. Context denial. A label hides its Context, inviting Cross‑context misuse (“process” used for both BPMN and PROV senses).
  2. senseFamily blur. Names conflate Role (behavioural mask) with Status (epistemic/deontic badge).
  3. Over‑reach. U.Types inherit jargon from one canon and sound global while being parochial.
  4. Under-reach. Role Description labels sound so generic that they pretend to be U.Types.
  5. Unstable synonyms. Labels drift to placate readers rather than reflect meaning fixed in SenseCells.

This code resolves these by Context fidelity, senseFamily‑aware morphology, and two‑register pedagogy.

Minimal vocabulary (this pattern only)

  • Tech label — the Context‑idiomatic name engineers expect inside that Context.
  • Plain label — a teaching gloss in simple English that does not broaden the sense.
  • Symbolic alias (optional) — conventional symbol if the canon uses one (e.g., “≤”).
  • SenseCell — the (Context × Local-Sense) address cited by a Role Description card (F.3F.4).
  • Concept‑Set row — the Cross‑context table row that supports minting a U.Type name (F.7).

Core idea (didactic)

Name what the invariants already make true.

For Role Descriptions, speak like the Context (Tech), then teach it (Plain). For U.Types, speak like nobody’s Context: pick the neutral, minimal‑generality label that best fits the intersection shown by your Concept‑Set row.

Normative rules — Role Descriptions (context‑local labels)

Let T be a Role Description in Context C with SenseCell sense(T)=⟨C,σ⟩.

R‑RD‑1 (Two registers). Provide both: Tech(T) = the Context‑idiomatic phrase (exact canon wording if possible). Plain(T) = a brief, neutral explanation that does not broaden meaning. Symbolic alias is optional and purely informative.

R‑RD‑2 (No Context tags in labels). Do not embed the Context name in the label (avoid “(BPMN)” in the label itself). Context is already carried by the SenseCell; keep labels clean.

R‑RD‑3 (senseFamily‑aware morphology).Role names are countable nouns for masks (e.g., Participant, Operator, Reviewer). Avoid verbs and gerunds. Add the suffix “Role” only if the Context idiom risks confusion with a substance or a status (e.g., “Reviewer Role” in a Context that also has a “Reviewer Status”). — Status names are state nouns or adjectival‑noun collocations (e.g., Approved, Compliant, In‑Service, Access Role (RBAC)). If a family of levels exists, encode the level (Assurance L1, Readiness L2) rather than inventing decorative adjectives.

R‑RD‑4 (Local idiom first). Prefer the canon’s term of art even if it sounds narrower than a cross‑discipline cliché. The Plain label handles pedagogy; the Tech label honours the Context.

R‑RD‑5 (Minimal generality). Choose the narrowest label whose invariants you actually assert. Do not “upgrade” Task to Activity or Process just to sound universal.

R‑RD‑6 (No permissions by stealth). Role labels must not imply entitlement (“Privileged Operator” is a Status+Role mashup). Keep deontics in Status names in the deontics Context.

R‑RD‑7 (Edition‑neutral labels). Do not bake edition/profile into labels. Edition lives in the Context; the card binds to a SenseCell that already encodes edition where needed.

R‑RD‑8 (Short and stable). Favour 1–3 words. Avoid rhetorical adjectives (“robust, optimal, best‑practice”).

Normative rules — U.Types (Cross‑context labels)

Let U be a U.Type minted from a Concept‑Set row (F.7) satisfying A.8 (≥3 domain families) AND MinInterFamilyDistance ≥ δ_family (from F1‑Card).

R‑UT‑1 (Witnessed neutrality). The Tech label must not be a term bound to one context when alternatives exist. Prefer discipline‑neutral head nouns (Result, Reading, Execution, Evidence, Requirement, State, Type Node). Use Characteristic/Scale/Value/Level/Coordinate/Score/ScoringMethod only when the U.Type denotes a measurement‑sense kind anchored in a declared CharacteristicSpace; otherwise avoid these measurement‑canon terms to prevent semantics bleed.

R‑UT‑2 (Minimal generality). Name the least upper sense that all row witnesses share. If Observation and Measurement disagree, perhaps the U.Type is Result or Reading, not Observation.

R‑UT‑3 (No senseFamily mixing in names). Do not name a U.Type with deontic or behavioural language (“PermittedService”, “ResponsibleAgent”). Role, Status, Method, and Execution belong to Role Descriptions (F.4) or local senses; U.Types are what‑it‑is kinds, not what‑it‑does or what‑is‑allowed.

R‑UT‑4 (Head–modifier discipline). Prefer head nouns with light modifiers over stacked compounds. Good: Evidence Status, Requirement Status, Type Node. Risky: Multi‑stage‑workflow‑execution‑record (compresses a scenario into a name).

R‑UT‑5 (No Context tags in names). U.Types are Context‑agnostic; never append “(BPMN)”/“(PROV)”. Provenance for the row lives in F.7, not in the name.

R‑UT‑6 (Alias only for pedagogy). Allow Plain aliases for teaching; Tech label is unique and stable. Synonym management belongs to F.13; do not invent alternates ad hoc.

R‑UT‑7 (Family coherence). When minting a family, use parallel shapes (… Status, … Level, … Characteristic only for measurement families with a declared CharacteristicSpace) so related U.Types signal relation by form.

R‑UT‑8 (Symbolic names sparingly). Symbols may be listed as aliases for readers of formal sections; they are never the U.Type’s Tech label.

R‑UT‑9 (No edition/version in name). Versions live in the Concept‑Set evidence; the name denotes a time‑robust kind.

Twin rules

Mandatory Tech name. Every U.Type/Role MUST declare a Tech name; plain twin is optional. Role suffix invariant. Role Tech names MUST end with Role; plain twin MUST keep “(role)” on first use. No head elision. Head terms MUST NOT be dropped in a way that changes expected Kind (e.g., “Approval”“Approver (role)”). One twin, one context. At most one plain twin per Context; register in E.10.P.

Invariants (normative, lightweight)

INV-F5-1 (Pair). Every Role Description card and every U.Type MUST carry Tech and Plain labels; symbol is optional and informative.

INV-F5-2 (Context fidelity for Role Descriptions). Tech(T) MUST be idiomatic for its Context; Plain(T) MUST NOT broaden sense(T).

INV‑F5‑3 (Neutrality for U.Types). Tech(U) MUST be discipline‑neutral with respect to the witness Contexts in its Concept‑Set row.

INV‑F5‑4 (senseFamily honesty). Role Description Role labels are behavioural masks; Role Description Status labels are states/badges; neither sneaks in the other senseFamily.

INV‑F5‑5 (Minimality). Labels MUST reflect the minimal generality supported by invariants (F.4 for Role Description, F.7 for U.Types).

INV-F5-6 (No Context tags). Names MUST NOT embed Context/edition tags; that information resides in SenseCells (Role Description) and Concept-Set rows (U.Types).

Reasoning primitives (judgement schemas, notation‑free)

Pure mental checks; no tools implied.

  1. Context-idiom check (Role Description). T in Context C ⊢ idiomatic(Tech(T), C) Reading: The Tech label reads like the Context’s own term of art.

  2. Plain‑safety check. sense(T)=⟨C,σ⟩ ⊢ ¬broadens(Plain(T), σ) Reading: The Plain label explains without enlarging the sense.

  3. Neutral‑witness check (U.Type). witnessContexts(U)=R ⊢ neutral(Tech(U), R) Reading: The Tech label doesn’t privilege one witness Context’s jargon.

  4. senseFamily form check (Role Description). senseFamily(T)=Role ⊢ nounMask(Tech(T)) senseFamily(T)=Status ⊢ stateForm(Tech(T)) Reading: The morphology matches the senseFamily.

  5. Minimality proof. inv(T) ⇒ nameScope(Tech(T)) ⊆ senseScope(sense(T)) (Role Description) rowWitnesses(U) ⇒ nameScope(Tech(U)) ⊆ intersectionScope(row) (U.Type) Reading: The name’s scope is no wider than what the invariants/witnesses support.

  6. Collision ping. similar(Tech(X), Tech(Y)) ∧ senseFamily(X)≠senseFamily(Y) ⊢ requireDisambiguatorOrSplit Reading: If two labels nearly coincide across senseFamilies, either add a minimal disambiguator (Role Description only, within Context idiom) or split concepts.

Micro‑examples (illustrative)

Role Description (BPMN Context). Tech: Participant - Plain: actor in a workflow - senseFamily: Role (No “BPMN” in label; behaviour mask, not entitlement.)

Role Description (RBAC Context). Tech: Access Role - Plain: named permission set - senseFamily: Status (Deontic badge; not a behavioural mask.)

Role Description (ITIL Context). Tech: Service‑Level Objective - Plain: service target value - senseFamily: Status (Levelable family: SLO [target], SLI [indicator] handled in F.10/F.12 semantics, not in the label.)

U.Type (from Concept‑Set row: SOSA Observation, PROV Activity (result‑bearing), ML Metric Reading). Tech: Result - Plain: the produced value or record of a measurement/assessment (Neutral head noun when “Observation” is too Context‑coloured.)

U.Type (from OWL class, FCA concept, taxonomy nodes). Tech: Type Node - Plain: a node in a type hierarchy or lattice (Neutral across DL and FCA.)

Anti‑patterns & remedies

#Anti‑patternSymptom in labelsWhy it harms thinkingRemedy (rule‑backref)
A1Context tag leakageParticipant (BPMN), Activity (PROV) baked into the labelLabels pretend to carry provenance; duplicates appear across ContextsNo Context tags in names. Context is in the SenseCell / Concept‑Set, not the label. (R‑RD‑2, R‑UT‑5)
A2Globalised jargonU.Type named Observation because SOSA uses itPrivileges one context; misleads DL/FCA readersPick neutral head noun (e.g., Result, Reading) when witnesses diverge. (R‑UT‑1, R‑UT‑2)
A3senseFamily mixingPrivileged Operator, Compliant Reviewer RoleRole + deontic Status fused; category errorKeep Role nouns for masks; put deontics in Status names, often in a deontics Context. (R‑RD‑3, R‑RD‑6)
A4Verbified rolesObserving, Controlling, Approving as Role namesAction words hide mask semantics; temporal confusionUse countable nouns for Roles: Observer, Controller, Approver. (R‑RD‑3)
A5Edition codingSLO‑v4, Task‑IEC61131Names fossilise an edition; brittle across timeEdition belongs to the Context; keep labels edition‑neutral. (R‑RD‑7, R‑UT‑9)
A6Over-reachRole Description Activity for a BPMN task, U.Type Process for run-time actsLabel outruns invariants; invites cross-context misuseChoose minimal generality that the invariants actually support. (R-RD-5, R-UT-2, INV-F5-5)
A7Under‑reach / vaguenessItem, Thing, Record for specific kinsNo discriminative power; low teaching valuePrefer discipline‑neutral yet informative heads (Type Node, Result, Requirement Status). (R‑UT‑1, R‑UT‑4)
A8Symbol as nameU.Type named λ or Unsearchable; Context‑coloured conventionsKeep symbols only as aliases; Tech label is words. (R‑UT‑8)
A9Synonym sprayMultiple Tech labels for one U.TypeFragmentation; alias driftOne Tech label; further lexical forms live in the registry (F.13). (R‑UT‑6, INV‑F5‑1)
A10Compound overgrowthmulti‑stage‑workflow‑execution‑recordEncodes scenario in a name; unreadableUse head + light modifier: Execution Record (if that is the U.Type at all). (R‑UT‑4)
A11Context-idiom denialRole Description in BPMN named Actor (imported from other Contexts)Readers misapply foreign semanticsUse the Context’s term of art in the Tech label; teach via Plain label. (R-RD-4)
A12Status as eventApproval status labelled ApproveMorphology hides state vs actStatus labels are state nouns / adjectival‑noun collocations: Approved, In Service. (R‑RD‑3)
A13Bracketed twinsParticipant/Agent, Service/SLO as single labelTwo senses slipped into one cardPick one label per concept; the other lives as alias (F.13) or as a different card. (INV‑F5‑1, R‑UT‑6)
A14Family driftAssurance Rank, Assurance Tier, Readiness Level mixedReaders fail to see relatednessKeep family shape parallel: … Level, … Status. (R‑UT‑7)
A15Decorative adjectivesRobust Process, Best‑practice MethodMarketing words displace semanticsDrop rhetoric; name the kind, not its quality. (R‑RD‑8)

Worked examples

Each example shows the reasoning move that leads to the label; no procedures, no tooling.

Role Description labels (context-local)

(a) BPMN Context — behavioural mask vs node word

  • SenseCell.BPMN 2.0, local‑sense: lane/pool actor that enacts tasks⟩
  • Decision. Tech = Participant (Context idiom); Plain = actor in a workflow
  • Why. Participant is the mask; it is not the node (Task, Event). (R-RD-3, R-RD-4)

(b) RBAC Context — deontic badge

  • SenseCell.NIST RBAC, local‑sense: named permission set assigned to sessions⟩
  • Decision. Tech = Access Role; Plain = named permission set
  • Why. It’s a Status, not a behavioural mask; deontic plane kept explicit. (R-RD-3, R-RD-6)

(c) ITIL Context — service target

  • SenseCell.ITIL 4, local‑sense: target value for a service characteristic⟩
  • Decision. Tech = Service‑Level Objective; Plain = service target value
  • Why. Family will carry … Level, … Indicator in adjacent cards; avoids jargon drift. (R-RD-3, R-UT-7)

(d) IEC 61131-3 Context — run-time execution notion as Role Description?

  • SenseCell.IEC 61131‑3, local‑sense: cyclic/event‑driven task unit⟩
  • Decision. For a Role Description Status of a run, label Completed, Failed, Skipped (Context idiom); avoid naming the Work itself here.
  • Why. The record of work is a U.Type elsewhere (A.15.1); Role Description in this Context carries badges of runs. (A.7 stance split; R-RD-3)

U.Type labels (from Concept‑Set rows)

Row R₁ (measurement‑sense): SOSA: Observation • ML practice: metric reading • Metrology: measurement result

  • Witness Contexts. sensing; ML metrics; metrology
  • Decision. U.Type Tech = Result; Plain = the produced value or record of a measurement/assessment
  • Why. Neutral head noun covering all witnesses; avoids privileging SOSA’s Observation. (R‑UT‑1, R‑UT‑2)

Row R₂ (type‑structure): OWL: class / subclass • FCA: formal concept (node in concept lattice)

  • Witness Contexts. DL; FCA
  • Decision. U.Type Tech = Type Node; Plain = a node in a type hierarchy or lattice
  • Why. Neutral over DL vs FCA; head‑modifier shape is stable. (R‑UT‑1, R‑UT‑4, R‑UT‑7)

Row R₃ (status family): ITIL: incident status • Safety cert.: assurance level • QA: readiness level

  • Witness Contexts. services; assurance; QA
  • Decision. Two U.Types: Assurance Level, Readiness Level (family‑coherent), plus Requirement Status (for normative clauses)
  • Why. Separates families; preserves level vs status distinction. (R‑UT‑7, R‑UT‑3)

Mixed scenario (service acceptance over execution traces)

Contexts in play. IEC 61131‑3 (run), SOSA/SSN (sensing), ITIL 4 (services).

  1. Role Description (ITIL) — Tech: Service-Level Objective; Plain: service target value.
  2. U.Type (from R₁) — Tech: Result (to carry measured values).
  3. Role Description (IEC) — Tech: Completed / Failed (Status on a run).
  4. Name discipline payoff. The sentence “Compare IEC run Results against the ITIL Service‑Level Objective” is Context‑true without tags, because each label encodes its senseFamily and neutrality.

Migration notes (conceptual)

  1. When a Context changes edition. Names stay; the SenseCell shifts to the new edition. Only change a label if the sense has changed; then split the card rather than mutate the name. (INV‑F5‑2, R‑RD‑7)

  2. When a Concept‑Set row gains a new witness Context. Re‑ask neutrality: if the Tech label now privileges a Context, refactor to a more neutral head (e.g., ObservationResult). (R‑UT‑1, R‑UT‑2)

  3. Collision emergence. If a Role card and a Status card converge phonetically (Approver vs Approved), keep both but add the minimal morphological disambiguator only where the Context idiom demands it (Reviewer Role). (R-RD-3)

  4. Family hygiene. As families grow, keep parallel shapes (… Level, … Status). If a legacy label breaks shape, add a Plain alias for teaching; don’t rename the Tech label without Concept‑Set pressure. (R‑UT‑7, R‑UT‑6)

  5. Language variants. Non-English canons keep their own Tech labels (idiomatic in that Context); the Plain label remains English in FPF unless the Part mandates localisation. (R-RD-4, INV-F5-1)

  6. Symbol addition. You may add a symbolic alias later for readers of formal sections; never promote a symbol to the Tech label. (R‑UT‑8)

  7. De‑jargonising the Plain label. If readers stumble, adjust Plain wording only; do not widen the sense. (Plain‑safety check)

  8. Deprecation path. If a label must change, publish the new Tech + Plain, keep the old as an alias in the registry (F.13), and leave the reasoning trail in the Concept‑Set row that forced the rename. (R‑UT‑6, F.13 linkage)

Acceptance tests (SCR/RSCR — concept‑level)

Static conformance (SCR)

  • SCR-F5-S01 (Two registers). Every Role Description card and U.Type has both Tech and Plain labels; any symbol is marked alias.
  • SCR-F5-S02 (Context fidelity for Role Descriptions). For any Role Description T in Context C, Tech(T) appears idiomatic in C; Plain(T) does not broaden sense(T).
  • SCR‑F5‑S03 (Neutrality for U.Types). For any U.Type U, its Tech label does not coincide with a witness Context’s proprietary term when alternatives exist.
  • SCR‑F5‑S04 (senseFamily morphology). Role labels are countable nouns; Status labels are state nouns / adjectival‑noun forms.
  • SCR-F5-S05 (Minimal generality). For each label, there exists a reading where the name’s scope ⊆ invariant scope (Role Description) or ⊆ row intersection (U.Type).
  • SCR‑F5‑S06 (No Context tags). No label embeds Context or edition strings.
  • SCR‑F5‑S07 (Family coherence). Families that claim parity (e.g., Levels) show parallel shapes across members.

Regression checks (RSCR)

  • RSCR‑F5‑E01 (Witness drift). When a Concept‑Set row gains/removes a witness Context, re‑evaluate neutrality; if violated, refactor the Tech label to a more neutral head.
  • RSCR-F5-E02 (Edition churn). When a Context updates, Role Description labels remain stable unless the sense changed; if sense changed, split the card and keep aliases in F.13.
  • RSCR‑F5‑E03 (Collision guard). If two labels become confusable across senseFamilies, either add the minimal disambiguator (Role Description only, Context‑idiom) or separate the concepts.
  • RSCR‑F5‑E04 (Rhetoric creep). Periodic skim for decorative adjectives; remove them unless they encode formal levels or families.

Didactic distillation (60‑second recap)

Name what is already true. Role Description labels speak like the Context (Tech) and teach without widening (Plain). U.Type labels speak like nobody’s Context: neutral head nouns at minimal generality, shaped in parallel families. Never glue Context tags or editions into names. Never mix senseFamilies in morphology. If witnesses change, reconsider neutrality; if senses split, split names, don’t stretch them. The label is the last step of understanding, not the first.

F.5:End

Role Assignment & Enactment Cycle (Six-Step)

“Assign only what you can later justify by local meaning and observable facts.” Status. Architectural pattern. Depends on. E.10.D1 Lexical Discipline for “Context” (D.CTX); F.1 Domain‑Family Landscape Survey; F.2 Term Harvesting & Normalisation; F.3 Intra‑Context Sense Clustering; F.4 Role Description; F.5 Naming Discipline. Coordinates with. F.7 Concept‑Set Table; F.8 Mint or Reuse?; F.9 Alignment & Bridge; F.10 Epistemic Status Mapping; A.2.1 U.RoleAssignment; A.15.* Role–Method–Work alignment; KD‑CAL (observations, results). Aliases (informative). Assign-and-verify mental loop; six-step role cycle.

Intent & applicability

Intent. Provide a minimal set of reasoning moves that turn a Role Description (F.4), anchored in a SenseCell, into a sound claim about a concrete holder—either a Role assignment or a Status assertion—with local meaning (within one context) and a clear path to evidence (KD‑CAL). These are mental moves, not workflows or tools.

Applicability. Any time you (a) bind a system to a Role mask, or (b) assert a Status about a system/artefact, inside one U.BoundedContext. Use when drafting models, reconciling vocabularies, or reading external canons.

Non‑goals. No process charts, no registries, no governance roles. No Cross‑context equivalences (that is F.9). No operational runbooks—only conceptual judgements.

Problem frame

Without disciplined Role Assignment & Enactment reasoning:

  1. Sense‑family slippage. Behavioural Roles and deontic/epistemic Statuses get mixed (keep them on distinct senseFamilies, per F.0.1).
  2. Context drift. A label is lifted from one canon and used as if universal.
  3. Evidence vacuum. Assignments are asserted with no thought to what could show they hold.
  4. Time blur. Design‑time masks are judged by run‑time traces (or vice versa).
  5. Name inflation. New labels are minted to patch noisy assignments.

Forces

ForceTension to resolve
Locality vs reuseKeep meaning inside one context while still naming things once across examples.
Clarity vs completenessState enough to be checkable without burying the reader in conditions.
Design vs runKeep stance coherent: design-time bindings are judged by design-time descriptions and their carriers; if you need run-time verification, express it as a run-Status or run-Role Template without confusing stances (A.7).
Fact vs promiseEvidence (KD‑CAL) vs deontic expectations (service, policy) must not collapse.

Minimal vocabulary (this pattern only)

  • Context — shorthand for U.BoundedContext (per E.10.D1).
  • SenseCell σaddress ⟨Context C × Local‑Sense ℓ⟩ per F.3. (Informative: we write simply σ; it already contains C.)
  • Role Description — a Role or Status card anchored in a SenseCell (F.4).
  • Holder — the concrete entity admitted by the Role or Status Template; when the holder is semio-side, name the kind named by value, such as system, episteme, publication, or carrier.
  • Subject — the referent of a Status assertion; determined by the Template (may or may not be the Holder).
  • subject_of(τ, H) — function yielding the Subject for Status assertions given Template τ (and, if needed, candidate H).
  • Eligibility — conditions on the Holder that must hold to apply the Template (F.4 invariants).
  • Window — the DesignRunTag or interval relevant to the claim (DesignRunTag; instant or period).
  • Evidence shape — the Observation/Result/Procedure/Feature pattern (KD‑CAL) that could confirm/refute the claim in its Context.

Pre‑conditions (lightweight)

  1. The Context is in your F.1 cut; Context ≡ U.BoundedContext.
  2. The Template references a SenseCell in that Context (F.4).
  3. The Holder is identified (by type or instance) without relying on Cross‑context mappings.

The six moves (judgement schemas, notation‑free)

Each move is a thought you can justify, expressed as premises ⊢ conclusion. All moves are context-local and side-effect free: they assert knowledge; they do not modify the project entities they describe.

M1 - Locate — Fix the Context and the Template

Form. Template τ anchored at SenseCell σ≡⟨C, ℓ⟩ ⊢ address(τ) = σ

Reading. Name the Context and the exact SenseCell that gives local meaning to the Template. Note. This forbids “floating” Roles or Statuses and prevents Context drift.

M2 - Stance — Respect DesignRunTag

Form. stance(C)=s ∧ stance(τ)∈{s, both} ⊢ compatible_stance(τ,C)

Reading. The Template’s DesignRunTag is compatible with its Context’s stance (design vs run). Note. Guards against judging a design-mask by run-traces or judging a run-status by design-time descriptions.

M3 - Qualify — Check Holder eligibility

Form. Holder H ∧ eligibility(τ) holds in C ⊢ eligible(H, τ @ C)

Reading. Given the Template’s eligibility predicates (F.4), the Holder qualifies to be bound/assessed in this Context. Note. Typical predicates: type membership, capability present, scope fit; all context‑local.

M4 - Bind/Assert — Make the Role Assignment / Status claim

Role assignment (behavioural mask). eligible(H, τ @ C) ∧ window W ⊢ plays_role(H, τ : C) @ W

Status assertion (epistemic/deontic state). eligible(H, τ @ C) ∧ window W ∧ S = subject_of(τ, H) ⊢ has_status(S, τ : C) @ W

Reading. Assert either a Role binding or a Status about the appropriate subject (system, artefact, service), within a Window. Note. The subject of a Status may differ from the Role holder (e.g., a service has SLO status; a team plays a Role).

M5 - Evidence — Shape what would make it true/false

Form. plays_role/has_status κ in C ⊢ evidence_shape(κ) = Σ(C)

Reading. From the Context’s semantics, state the Observation/Result pattern (KD‑CAL) that would confirm or refute the claim (what, where, when). Note. This is not an execution plan: it is a conceptual test tied to the Context’s vocabulary.

M6 - Conclude — Issue a defensible verdict with confidence

Form. evidence E fits Σ(C) ∧ invariants(τ) hold ⊢ holds(κ) with confidence γ ∈ [0,1]

Reading. If observed facts match the expected evidence shape and Template invariants stand, the assignment/status claim holds with some confidence (cf. B.3). Note. Confidence combines measurement adequacy (KD‑CAL) with any Context‑specific uncertainty; no Cross‑context boost is implied.

Autonomy admission (Green‑Gate) and ledger

  • Before enactment: If the Method step lists requiresAutonomyBudget, the enacting U.RoleAssignment MUST pass the Autonomy Green‑Gate: (i) active/enactable RSG state, (ii) budget tokens/envelope remain in the declared Γ_time window, (iii) all guards pass.
  • On enactment: Write an AutonomyLedgerEntry attached to the U.Work, with deltas and guard verdicts.
  • On depletion: Block further autonomy‑gated steps; emit a DepletionNotice (SpeechAct) and follow the OverrideProtocolRef.
  • SoD: Enforce between autonomy consumer Role and override caller Role.

Core invariants (normative)

  1. Locality. Every judgement is about one context. No Cross‑context equivalence is presumed or implied (that is F.9’s remit).
  2. Strict splits. (a) senseFamily split: RoleStatus (per F.0.1); (b) stance split: designrun (A.7). Each judgement names its senseFamily and stance.
  3. Eligibility before claim. No binding or status without eligible(H, τ @ C).
  4. Window honesty. Every claim states or inherits a Window consistent with stance(τ) and stance(C).
  5. Evidence‑ability. Every claim must admit at least one evidence shape Σ in its Context (KD‑CAL compatible).
  6. Name discipline. Labels used in judgements follow F.5 (Tech/Plain registers; no Context tags inside names).

Reasoning aides (didactic)

  • Context‑prefix speech. Think and speak with the Context prefix when ambiguity lurks: participant (BPMN), role (RBAC), activity (PROV).
  • Window templates. Prefer short phrases: “during release‑R3 cutover”, “for the Q3 service period”, “at 2025‑08‑12T14:30Z”.
  • Evidence as shape words. Result of Observation of ⟨Characteristic⟩ on ⟨Feature⟩ by ⟨Procedure⟩ within W—not a measurement script.

“Assign only what you can later justify by local meaning and observable facts.”

Anti‑patterns & remedies

#Anti‑patternSymptomWhy it harms reasoningRemedy (conceptual move)
AP-1cross-context BindingA single binding/assertion mixes two Contexts (status/role in C₁ justified by semantics in C₂) without an explicit Bridge.Violates Locality; smuggles a Bridge (kind/CL/Loss) into the claim, making it hard to replay and easy to treat as free substitution.Re-formulate strictly in one context. If cross-context support is essential, apply F.9 Bridge and keep the assignment/status claim local.
AP‑2Role and Status Conflation“Operator” modeled as a deontic grant; “SLO met” modeled as a Role.Collapses behavioural mask and epistemic/deontic state (A.7).Re‑type the Template: Role for “can/does”, Status for “is/has (as a claim)”. Use M4 accordingly.
AP‑3Window‑less ClaimsBinding/assertion with no time stance or interval.Uncheckable; invites retrospective reinterpretation.Make Window explicit (§6 M4). Inherit stance from the Context/Template if fixed; otherwise state it.
AP‑4Eligibility‑after‑the‑factDeclaring the claim, then back‑fitting eligibility to observed traces.Confuses necessary conditions with diagnostics; risks circularity.Perform M3 Qualify before M4 Bind/Assert; treat evidence only in M5/M6.
AP‑5Global Label IllusionUsing bare labels (“process”, “agent”, “role”) as if universal.Hides the Context; fuels homonym errors.Always recover M1 Locate: address(τ)=⟨Context, SenseCell⟩. Use F.5 naming discipline (Tech/Plain registers).
AP‑6Evidence by Prestige“Industry practice says …” offered instead of KD‑CAL‑shaped facts.Replaces observable Results with authority talk.State an evidence shape Σ(Context) in M5; later fill it with Observation/Result facts (KD‑CAL).
AP‑7DesignRunTag InversionVerifying a design‑time mask by design documents; verifying a run‑status with design specs.Violates DesignRunTag; yields non‑falsifiable claims.Apply M2 Stance: the Template’s stance must be compatible with the Context. Evidence follows the stance.
AP-8Premature BridgeA Bridge is introduced as a shortcut (“align first, then claim”), instead of stating the assignment/status locally and adding a Bridge only when actually needed.Makes the verdict hostage to an uncertain translation; Bridge Loss and CL penalties leak into the claim and can unnecessarily lower confidence.Keep the assignment/status claim local; if needed, create an F.9 Bridge with loss notes and CL penalty.
AP‑9Token ProofsSingle anecdotal event taken as universal confirmation.Over‑generalises; ignores evidence windows and procedures.In M5, include Procedure and Window; in M6, roll confidence γ from adequacy of sampling (KD‑CAL).
AP‑10Role Explosion as PatchNew Role minted for every exception.Name bloat; brittle semantics.Re‑examine eligibility and Window; consider a Status to mark exceptions instead of new Roles.
AP‑11Subject DriftStatus asserted on the wrong subject (team vs service; asset vs dataset).Breaks referent clarity; evidence no longer matches.Use M4’s split: plays_role(H, …) vs has_status(subject(H), …); pick the correct subject kind.
AP‑12Spec‑in‑NameCramming constraints into the label (“24x7‑Operator‑With‑Pager”).Names become brittle; invariants become invisible.Keep the label minimal (F.5); move constraints into eligibility/invariants.
AP‑13Non‑Local Evidence ShapeEvidence shape mentions constructs from another Context.Hidden Cross‑context import.Rewrite Σ using only this Context’s vocabulary; if impossible, use F.9 Bridge and keep Σ local.

Worked examples

Each example is a context-local assignment/status reasoning trace using M1…M6. cross-context relations, if any, are noted as optional bridges (F.9) but not relied upon.

Service availability status (ITIL + KD‑CAL)

Context. ITIL 4 (services family; design) *Template (Status). SLO:availability≥99.9% anchored at SenseCell ⟨ITIL4, “SLO (availability)”⟩.

M1 Locate. address(τ)=⟨ITIL4, SLO(availability)⟩ M2 Stance. stance(ITIL4)=design, stance(τ)=designcompatible_stance(τ, ITIL4) M3 Qualify. eligible(Service S, τ@ITIL4) if S is a published service with declared availability target. M4 Assert. has_status(S, τ:ITIL4) @ W where W = Q1‑2025 (the evaluation period). M5 Evidence shape Σ(ITIL4). Observation of availability characteristic (MM‑CHR) for S, produced by a Procedure that samples uptime and computes the Result as ratio over W. (KD‑CAL/MM‑CHR terms only; no tool implied.) M6 Conclude. If Results across W give ≥ 99.9 % with adequate sampling and declared exclusions applied, holds( has_status(S, τ:ITIL4) @ W ) with γ≈0.9. Optional bridge. If uptime sensing vocabulary is expressed in SOSA/SSN, an F.9 Bridge may map ITIL’s “availability metric” to ObservableProperty(availability) with a declared CL penalty; the assignment/status claim itself remains ITIL-local.

Behavioural operator role (IEC 61131‑3 + Enactment)

Context. IEC 61131‑3 (control languages; run) *Template (Role). Control‑Task‑Executor anchored at SenseCell ⟨IEC61131‑3, “task executes program”⟩.

M1 Locate. address(τ)=⟨IEC61131‑3, task‑execution⟩ M2 Stance. stance(IEC61131‑3)=run, stance(τ)=run ⇒ compatible. M3 Qualify. Holder PLC_7 qualifies if program P is loaded on it and task T schedules it. M4 Bind. plays_role(PLC_7, τ:IEC) @ W where W = [08:00, 18:00] 2025‑06‑05. M5 Evidence shape Σ(IEC). Observation of task schedule and program invocation logs as Results for features T/P during W; presence of expected cyclic/event‑driven triggers. M6 Conclude. If Results show the expected executions with no missed cycles beyond tolerance, holds( plays_role(PLC_7, τ:IEC) @ W ) with γ≈0.8. Trip-wire. Do not restate this as “PROV Activity” without F.9; keep the assignment/status claim IEC-local.

Dataset accuracy status (ISO/IEC 25024 + KD‑CAL)

Context. ISO/IEC 25024 (data‑quality; design) *Template (Status). accuracy≥0.98 anchored at SenseCell ⟨ISO25024, “data accuracy”⟩.

M1 Locate. address(τ)=⟨ISO25024, data‑accuracy⟩ M2 Stance. stance(Context)=design, stance(τ)=design ⇒ compatible. M3 Qualify. Subject Dataset D has a defined reference set and sampling protocol. M4 Assert. has_status(D, τ:ISO25024) @ W where W = “snapshot v2025‑04”. M5 Evidence shape Σ(ISO25024). Observation of correctness of sampled records vs reference, Procedure per standard, Result as proportion correct with confidence interval. M6 Conclude. If CI lower bound ≥ 0.98, holds( has_status(D, τ) @ W ) with γ≈0.85.

Access vs behavioural: two claims, two Contexts

Contexts. NIST RBAC (access; design) and BPMN 2.0 (workflow; design). Templates. DB‑Admin (RBAC status) vs Participant (BPMN role).

RBAC claim (Status). M1…M6 yield has_status(User U, RBAC:DB‑Admin) @ W_dir with Σ(RBAC) = Observation of assignment state in the access model at time W_dir.

BPMN claim (Role). M1…M6 yield plays_role(Team T, BPMN:Participant) @ W_proc with Σ(BPMN) = Observation that lanes/pools enact tasks during W_proc.

Lesson. Two separate context-local claims — one Status assertion and one Role assignment; no implication that holding RBAC status entails playing the BPMN Role.

Relations (with other patterns)

Builds on: F.1 Domain‑Family Landscape Survey (Contexts fixed); F.2 Term Harvesting (local terms); F.3 Intra‑Context Clustering (SenseCells); F.4 Role Description (invariants, stance); F.5 Naming Discipline (labels).

Constrains: F.7 (Concept-Set Table): rows reference SenseCells; Role Description cards point to those rows but never create cross-context identity. F.8 Mint or Reuse? Uses outcomes of Role or Status claims to decide: a new Role or Status label only when existing Templates cannot express the claim with eligibility/Window adjustments. F.9 (Alignment & Bridge): any relation across Contexts is declared there; Role Description cards remain context-local. F.10 Epistemic Status Mapping. Consumes M6 confidences γ and Σ‑adequacy to roll up assurance.

Coordinates with. MM‑CHR (characteristics, scales) wherever Characteristic/Scale is used in evidence shapes.

Used by. Patterns (Part C) to anchor their examples: Sys‑CAL (execution/actuation roles), KD‑CAL (measurement statuses), Method‑CAL (execution claims for Methods/MethodDescription), Kind-CAL (typing claims remain outside Role Assignment & Enactment, but may inform eligibility predicates).

Migration notes (conceptual)

  1. Template refactor. If a Template’s invariants change, claims remain as‑is; re‑evaluate M6 on demand. Do not silently rewrite past claims.
  2. Edition updates. When a Context’s canon updates, treat it as a new Context if sense shifts; Claims anchored to the old Context stay valid for their Window.
  3. Name revisions. Renaming per F.5 does not alter address(τ)=⟨Context, SenseCell⟩; claims reference the address, not lexical form.
  4. Bridge introduction. Adding an F.9 Bridge never upgrades an existing Role or Status claim; at most it enables separate translations with declared loss.
  5. From exception to Status. If recurring exceptions to a Role appear, prefer minting a Status Template that marks the exception rather than proliferating Roles.
  6. Window tightening. If evidence shows drift, narrow future Windows; past claims remain tied to their original Windows.

Acceptance tests (SCR/RSCR — concept‑level)

Static conformance (SCR)

  • SCR-F6-S01 (Local address). Every assignment/status claim states address(τ)=σ where σ is a SenseCell (per F.3); no bare labels.
  • SCR‑F6‑S02 (SenseFamily clarity). Each claim is typed Role or Status, never both; subjects are of the correct kind. Claim records both senseFamily and stance explicitly or by inheritance.
  • SCR‑F6‑S03 (Stance compatibility). stance(Context) and stance(τ) are compatible by DesignRunTag.
  • SCR‑F6‑S04 (Eligibility first). For each claim, eligible(H, τ@context) is derivable prior to assertion.
  • SCR‑F6‑S05 (Window explicit). Each claim has a Window (explicit or inherited) consistent with stance.
  • SCR‑F6‑S06 (Evidence‑ability). For each claim, an evidence shape Σ(Context) is stated using only that Context’s vocabulary plus KD‑CAL/MM‑CHR primitives.
  • SCR‑F6‑S07 (Locality guard). No Cross‑context terms appear inside a claim; any reference to other Contexts is flagged as F.9 Bridge (informative), not used to justify the claim.

Regression (RSCR)

  • RSCR‑F6‑E01 (Edition stability). Adding a new edition/Context does not mutate existing claims’ Contexts or Windows.
  • RSCR‑F6‑E02 (Name stability). Changing labels per F.5 leaves addresses and conclusions invariant.
  • RSCR‑F6‑E03 (Bridge neutrality). Introducing or revising an F.9 Bridge does not auto‑flip claim truth values; at most it enables explicit translations with loss notes.
  • RSCR‑F6‑E04 (Evidence refresh). When KD‑CAL procedures or MM‑CHR characteristic scales change, only γ is re‑evaluated; the claim’s semantics remain.

Didactic distillation (60‑second recap)

Six moves. (M1) Locate the Context & SenseCell; (M2) check stance; (M3) test eligibility; (M4) bind/assert with a Window; (M5) sketch the evidence shape in that Context; (M6) conclude with confidence γ. Two iron rules. Keep it context‑local; keep Role and Status on their senseFamily. Pay-off. Assignment/status claims become small, auditable thoughts: easy to teach, easy to check, and easy to relate—later—via explicit Bridges when you truly must step between Contexts.

F.6:End

Concept‑Set Table

“Show one thing across Contexts—only where explicit bridges allow it.”

Status. Architectural pattern. Depends on. E.10.D1 Lexical Discipline for ‘Context’ (Context ≡ U.BoundedContext); F.0.1 senseFamily (normative); F.1 Domain‑Family Landscape Survey; F.2 Term Harvesting; F.3 Intra‑Context Sense Clustering (SenseCells); F.5 Naming Discipline; F.9 Alignment & Bridge Across Contexts. Coordinates with. F.4 Role Description; F.6 Role Assignment & Enactment Cycle (Six-Step); Part C patterns (for examples), MM‑CHR (for Characteristic); A.6.9 (RPR‑XCTX for repairing umbrella cross‑Context sameness/alignment prose before it justifies rows). Aliases (informative). Concept‑Set table, comparison grid.

Intent & applicability

Intent. Provide a single, didactic page where each row presents one Concept‑Set—a set of SenseCells from different Contexts that we are licensed (by explicit Bridges) to treat as “the same for a stated scope”. Columns are Contexts; cells carry local labels. The table does not invent equivalences: it summarises already declared F.9 Bridges, exposing scope, losses, and counter‑examples at a glance.

Applicability. Use whenever cross-context reading is necessary (naming U.Types, teaching contrasts, assignment/enactment-adjacent terminology). It is a reading lens, not a data model: notation-free, governance-free, Context-loyal.

Non‑goals. No hidden merges. No “global terms”. No workflows or tool schemas. The table is a conceptual display of licensed sameness and honest non‑sameness.

Problem frame

Without a disciplined Cross‑context view:

  1. Silent equivalence. Readers assume sameness by name alone (e.g., process).
  2. Loss denial. Mappings hide what is dropped (DesignRunTag, units, agency).
  3. Name inflation. New U.Types are coined to avoid facing heterogeneity.
  4. Cognitive scatter. Concepts drift across documents without one compact, teachable “where‑what‑how‑same” view.

Forces

ForceTension to resolve
Locality vs comparisonMeaning lives in Contexts; yet we must compare Contexts to reason across disciplines.
Didactics vs fidelityA compact row is easy to grasp; it must still show scope and loss honestly.
Simplicity vs completenessA minimal grid aids memory; temptation to overload it with proofs and procedures must be resisted.
Sameness vs differenceSome families cannot be unified; the table must support contrast rows without pretending equivalence.

Core idea (didactic)

A Concept‑Set is a finite set of addresses

$$ \text{CS}={\langle \text{Context}_i,\ \text{SenseCell}i\rangle}{i=1..n} $$

that FPF treats as one for a declared scope because there exist F.9 Bridges connecting these SenseCells pairwise (directly or via a short chain) with congruence level $\text{CL}$ above a threshold suitable for that scope. The table row shows:

  • FPF Label (Tech/Plain) — the didactic, FPF‑level name chosen per F.5.
  • Row Scope — where “being one” is safe (e.g., Naming-only, assignment/enactment-eligibility, KD-CAL metric, Type‑structure).
  • Row CL(min) — the minimum CL of the Bridges that justify the row.
  • Context columns — each cell: the local label + (optional) short cue.
  • Rationale (one line) — why sameness is warranted for this scope.
  • Counter‑examples (one line) — where/why sameness breaks.

Memory hook. A Concept‑Set row is a promise: “You may read across these Contexts this far—and no farther.”

Minimal vocabulary (this pattern only)

  • Context — shorthand for U.BoundedContext (per E.10.D1).
  • senseFamilyreferenced from F.0.1; not redefined here; used to type rows and to require uniformity within a row.
  • SenseCell — a (Context × Local‑Sense) address from F.3.
  • Bridge (F.9) — an explicit, declarative Cross‑context mapping with a congruence level CL and loss note.
  • Characteristic (MM‑CHR) — measurable comparandum defined in MM‑CHR; may be referenced in Measurement/KD‑metric rows; do not use “axis” only as a euphemism.
  • Concept‑Set (row) — a licensed sameness across Contexts, bounded by Row Scope and Row CL(min).
  • Contrast row — a non‑sameness row: same surface across Contexts with no sufficient Bridges; teaches difference, not unity.

The table (conceptual layout)

One page. Fixed column order by Context. Each row fits in five lines max.

FPF Label (Tech / Plain) | Row Scope | Row CL(min) | [Context A] local label | [Context B] local label | [Context C] local label | Rationale | Counter‑examples

Reading rules (didactic):

  1. Cells are local. A cell is not a translation; it is the Context’s own label for its SenseCell.
  2. Scope is king. The FPF label only licenses sameness within its Row Scope. Outside that scope, treat cells as different.
  3. Row CL(min) governs trust. Lower CL ⇒ narrower applicability; never up‑scope a row without revisiting Bridges.
  4. Rationale & counter‑examples are obligatory one‑liners; if you need paragraphs, you need an F.9 walkthrough, not a row.

Didactic name rationale “Giants' table’” that alludes to standing on the shoulders of giants: each row explicitly leans on authoritative context of meaning (U.BoundedContext) established by prior disciplines and not imagined. It does not mean a physically large table; the name signals epistemic humility and traceable reliance on those sources. "We are like dwarfs on the shoulders of giants, so that we can see more than they, and things at a greater distance, not by virtue of any sharpness of sight on our part, or any physical distinction, but because we are carried high and raised up by their giant size." by Bernard of Chartres , d. c.1130, French philosopher.

Conceptual construction (thought moves, not workflow)

The table is derived from earlier patterns; it creates nothing new.

  • Sourcing. Candidate cells come only from SenseCells (F.3).
  • Licensing. A row exists iff the relevant Bridges (F.9) already justify sameness at the chosen Row Scope.
  • Bounding. Prefer 2–4 Contexts per row (parsimony); add more only if each adds a distinct necessity for the sameness claim.
  • Typing. A row is typed by senseFamily: Role, Status, Type‑structure, Measurement, etc. Do not mix senseFamilies in one row.
  • Temporal honesty. A row’s cells must share compatible DesignRunTag; if not, either split into two rows or mark a contrast row.

Invariants (normative)

  1. Context‑loyal cells. Every non‑empty cell is a SenseCell address; no minted paraphrases.
  2. Bridge sufficiency. For a Concept‑Set row, every pair of filled cells is connected by an F.9 Bridge path whose bottleneck CLRow CL(min) printed for the row.
  3. Scope declaration. Each row MUST declare a Row Scope chosen from a small controlled set (e.g., Naming-only, assignment/enactment-eligibility, KD-metric, Type-structure).
  4. senseFamily uniformity. All cells in a row belong to the same senseFamily (Role or Status or Type-structure or Measurement…).
  5. Temporal compatibility. Either all cells share the same stance, or the row is a contrast row (no sameness claim).
  6. Loss disclosure. If any Bridge in the row has a loss note, the row MUST include a counter‑example that illustrates that loss in one line.
  7. No stealth expansion. Adding a new cell to a row MUST NOT lower the printed Row CL(min) without updating Row Scope or splitting the row.
  8. Parsimony. A row with only one filled cell is forbidden (that would be local talk, not a Cross‑context concept).
  9. Didactic bound. A row that cannot be read in ≤ 30 seconds violates didactic primacy and must be split.

Micro‑illustrations (safe patterns)

Illustrative only; these presume corresponding F.9 Bridges exist with stated CL and losses.

(a) Subtyping across type‑formalisms (Type‑structure row)

FPF LabelRow ScopeRow CL(min)OWL 2Kind-CALRationaleCounter‑examples
is‑a (Tech) / type hierarchy (Plain)Type‑structureCL = 3rdfs:subClassOfU.SubtypeRelationBoth are partial‑order class subsumption used for inheritance.FCA concept order is not a class subsumption; keep it out or CL drops.

(b) “Observation result value” (Measurement row)

FPF LabelRow ScopeRow CL(min)SOSA/SSNISO 80000‑1ITIL 4RationaleCounter‑examples
result‑value / measured valueKD‑metricCL = 2sosa:Result (literal)QuantityValue (unit‑bearing)metric value (service KPI)Values can be read as numbers tied to a Characteristic; ITIL metric uses same notion when unitised.ITIL “metric” may be composite indices (loss of unit fidelity).

(c) Contrast row: “process” (no sameness)

FPF LabelRow ScopeRow CL(min)BPMN 2.0PROV‑OThermodynamicsRationaleCounter‑examples
process (contrast)graph of flow nodestime‑bounded activitystate‑space trajectorySame surface, different senses; no licensed sameness.Any attempt to equate design‑graph with run‑occurrence fails stance compatibility.

Anti‑patterns & remedies

#Anti‑patternSymptom in a rowWhy it breaks thinkingRemedy (conceptual move)
AP‑1Bridge‑free samenessCells listed as “same” because their labels look alike; no cited Bridges.Violates locality; imports meaning across Contexts by name.A row exists only if backed by F.9 Bridges. Otherwise produce a contrast row.
AP-2Scope creepRow labelled “Type-structure” but used to justify assignment/enactment-eligibility or KD metrics.Scope licences are not transferable; inference leaks.Keep a small controlled set of Row Scopes. If use widens, mint a new row or re-bridge with higher CL.
AP‑3senseFamily mixingOne row mixes Role, Status, Measurement, and Type‑structure cells.Conflates senseFamily (F.0.1); readers cannot tell “what kind of sameness”.Type each row. If two senseFamilys are needed, split into two rows.
AP‑4Temporal blurCells with incompatible DesignRunTag declared “same”.Design artefacts ≠ run occurrences; claims invert.Either harmonise stance (choose only compatible cells) or publish a contrast row.
AP‑5Loss denialBridges carry loss notes, but the row omits counter‑examples.Readers over‑trust; misuse outside safe scope.Add a one‑line counter‑example that illustrates the loss.
AP‑6CL averagingRow CL(min) computed as an average of heterogeneous Bridges.The weakest link governs; averages overstate safety.Row CL(min) is the bottleneck (minimum along connecting paths).
AP‑7Overwide rows6–8 Contexts in one row; hard to read; subtle mismatches hide.Violates didactic primacy; invites hidden losses.Parsimony: 2–4 Contexts per row unless each extra cell has a distinct necessity you can state in one line.
AP‑8Minted paraphrasesCells reword a Context’s label instead of citing the SenseCell.Hides locality; future drift becomes invisible.Cells are Context‑loyal. Use the Context’s own SenseCell label.
AP‑9Duplicate rows by styleTwo rows with the same cell set but different FPF labels.Name inflation; readers assume two distinct concepts.Keep one row per Concept‑Set per scope. Alternative labels appear as aliases in F.5, not new rows.
AP‑10Implied transitivityA↔B and B↔C Bridges exist; row silently assumes A↔C at the same CL.Paths can reduce CL; semantics might not compose.Compute CL for A↔C via bottleneck; if too low, either reduce Row Scope or omit the cell.

Worked examples

Each example gives a row (compact), then a reading explaining scope and limits. All sameness claims presuppose suitable F.9 Bridges with the stated CL.

Behavioural actor across Contexts (naming‑only)

FPF Label (Tech / Plain)Row ScopeRow CL(min)BPMN 2.0PROV‑ORationaleCounter‑examples
actor / party that participatesNaming‑onlyCL = 2ParticipantAgentBoth denote a bearer that can be named as the party to which activities are attributed.PROV Agent includes software agents; BPMN Participant is typically an organisation lane/pool.

Reading. The row licenses a glossary‑level sameness for didactic prose (“the actor”). It does not license modelling identity or inference across Contexts.

Execution occurrence (assignment/enactment-eligibility)

FPF LabelRow ScopeRow CL(min)PROV‑OIEC 61131‑3RationaleCounter‑examples
execution-occurrence / a run that happensassignment/enactment-eligibilityCL = 2Activity (time-bounded occurrence using/generating entities)Task execution (cyclic/event-driven program run)Both are run-time occurrences that can be referenced by U.RoleEnactment to ground Work performed under an assignment.BPMN Process is a design graph; not an occurrence—exclude.

Reading. Safe to use as the run-time occurrence that U.RoleEnactment points to when we say “this Work was performed under an assignment”. Not safe to equate all PROV Activities with all PLC task runs for analytics.

Result value as KD‑metric (measurement)

FPF LabelRow ScopeRow CL(min)SOSA/SSNISO 80000‑1ITIL 4RationaleCounter‑examples
result‑value / measured valueKD‑metricCL = 2Result (literal)QuantityValue (unit‑bearing)metric valueA number representing a Characteristic at observation time; can be unitised and compared to targets.ITIL “metric” may be a composite index; units may be implicit.

Reading. Licences metric tables that join observations to service targets; warns that composite KPIs may violate unit fidelity.

Subtype relation (type‑structure)

FPF LabelRow ScopeRow CL(min)OWL 2Kind-CALRationaleCounter‑examples
is‑a / type hierarchyType‑structureCL = 3rdfs:subClassOfU.SubtypeRelationBoth are partial orders used for inheritance.FCA concept order is not a class subsumption—exclude or publish another row.

Contrast: “role” (access vs behaviour)

FPF LabelRow ScopeRow CL(min)NIST RBACBPMN 2.0RationaleCounter‑examples
role (contrast)Role (permission set)Participant/Actor (behavioural mask)Same surface; different senseFamilys (Status vs Role/behaviour).Any attempt to unify collapses deontics into behaviour; stance and effects differ.

Reading. This row teaches difference; it deliberately does not license sameness.

Reasoning primitives (judgement schemas, notation‑free)

All judgements are pure (no side effects). “Contexts” are U.BoundedContext. SC(C) denotes a SenseCell in Context C. CL(X↔Y) is the congruence level of the best Bridge path (F.9) between SenseCells X and Y (bottleneck along that path).

Row licensing

Form. S = {SC(C₁), …, SC(Cₙ)}, Scope = s, τ(s) = requiredCL ⊢ licensable(S,s) ⇔ (∀ i<j: CL(SC(Cᵢ)↔SC(Cⱼ)) ≥ requiredCL ∧ senseFamily (S) is uniform ∧ stance(S) compatible)

Reading. A set of cells licenses a row of scope s iff every pair is bridged at or above the required CL for that scope, all cells sit in the same senseFamily, and DesignRunTag is compatible.

Bottleneck CL for a row

Form. RowCL(S) = min_{i<j} CL(SC(Cᵢ)↔SC(Cⱼ))

Reading. The row’s CL is the minimum congruence level across all pairs (the weakest link).

Scope guard

Form. licensable(S,s) ∧ s ⊑ s' ⊢ licensable(S,s') only if RowCL(S) ≥ τ(s')

Reading. You may tighten scope (use the row for a higher-scope purpose) only if the row’s CL meets the higher threshold for that scope.

Contrast decision

Form. (∃ i<j: CL(SC(Cᵢ)↔SC(Cⱼ)) < τ(Naming‑only)) ⊢ publish‑contrast(S)

Reading. If even Naming‑only cannot be licensed, publish a contrast row instead of forcing sameness.

Row extension guard

Form. licensable(S,s) ∧ add SC(Cₖ) ⊢ licensable(S∪{SC(Cₖ)}, s) iff ∀ i: CL(SC(Cᵢ)↔SC(Cₖ)) ≥ τ(s)

Reading. You may add a new cell only if it bridges to every existing cell at the row’s scope.

Loss disclosure obligation

Form. licensable(S,s) ∧ (∃ i<j: lossNote on Bridge(SC(Cᵢ),SC(Cⱼ))) ⊢ row must carry ≥1 counter‑example

Reading. Any loss note on any supporting Bridge obliges the row to include a counter‑example one‑liner.

Relations (with other patterns)

Builds on: F.1 Contexts fixed → defines the column set; F.2 Harvest → supplies harvested terms; F.3 SenseCells → provide cell addresses; F.5 Naming Discipline → provides the two‑register FPF labels; F.9 Bridges → justify each row.

Constrains: F.4 Role Description — when a template cites an FPF label from the table, it inherits the Row Scope; no template may claim semantics beyond the row’s licence. F.6 Role Assignment & Enactment Cycle (Six-Step) — Move M‑4 (“choose label”) must reference a row if it wants Cross‑context reading.

Used by. Part C patterns for didactic alignment pages; Part B trust calculus (B.3) may consume Row CL(min) when computing translation penalties.

Migration notes (conceptual)

  1. Bridge update. If any supporting Bridge’s CL changes, recompute Row CL(min). If it drops below the printed value, either lower Row Scope, split the row, or retire it.
  2. New Context appears. Do not auto‑expand rows. Test with 12.5; add only if it brings a distinct necessity.
  3. Sense revision inside a Context. If a SenseCell splits (F.3), decide which child cell (if any) remains in the row; the rest may require new rows or a contrast.
  4. Scope promotion. To use a row for a higher-scope purpose (e.g., from Naming-only to assignment/enactment-eligibility), first ensure Row CL(min) ≥ τ(new scope); otherwise construct new Bridges or decline promotion.
  5. Deprecation. If a row no longer meets its invariant, mark its FPF label as retired in F.5 and point to successor rows (if any).
  6. Edition churn. When a Context is superseded (F.1), either keep the cell (if semantics stable) or treat the successor as a new Context and re‑evaluate licensability.

Acceptance tests (SCR/RSCR — concept‑level)

Static conformance checks (SCR)

  • SCR‑F7‑S01 (Context‑loyal cells). Every non‑empty cell references an existing SenseCell (F.3) in a declared Context (F.1).
  • SCR‑F7‑S02 (Closure & bottleneck). For each Concept‑Set row, every pair of cells has a Bridge path with CL ≥ Row CL(min) printed; Row CL(min) equals the minimum pairwise CL.
  • SCR‑F7‑S03 (Typed & scoped). Each row declares a Row Scope from the controlled set and is senseFamily‑uniform (Role or Status or Measurement or Type‑structure…).
  • SCR‑F7‑S04 (Temporal compatibility). Non‑contrast rows have compatible DesignRunTag across cells.
  • SCR‑F7‑S05 (Loss disclosure). If any supporting Bridge has a recorded loss, the row includes ≥1 counter‑example line.
  • SCR‑F7‑S06 (Parsimony). Rows contain 2–4 Contexts unless a one‑line necessity is stated for each extra Context.

Regression checks (RSCR)

  • RSCR‑F7‑E01 (Bridge drift). After any Bridge change (F.9), recompute Row CL(min); flag rows whose scope is now overstated.
  • RSCR‑F7‑E02 (Sense split). After a SenseCell splits (F.3), ensure rows referencing it either pick a child cell or retire.
  • RSCR‑F7‑E03 (Scope integrity). No consumer pattern uses a row outside its declared Row Scope.
  • RSCR‑F7‑E04 (No stealth growth). Additions of cells never lower Row CL(min) silently; if they do, either split the row or reduce scope.

Didactic distillation (60‑second teaching script)

“A Concept-Set row shows one idea across Contexts—but only where explicit Bridges license it. Columns are Contexts; cells are their own labels. The row prints a scope (‘Naming-only’, ‘assignment/enactment-eligibility’, ‘Type-structure’, ‘KD-metric’) and the weakest CL that justifies reading across. A one‑line rationale says why sameness is safe here; a counter‑example warns where it breaks. Keep rows small (2–4 Contexts), typed (don’t mix senseFamilies), and temporally honest (design vs run stance). If Bridges don’t suffice, publish a contrast row instead. The table doesn’t invent meaning; it summarises licensed sameness so readers can cross disciplines without smuggling assumptions.”

F.7:End

Mint or Reuse? (U.Type vs Concept-Set vs Role Description vs Alias)

“Name only what thinking requires, and reuse everything else.”

Status. Architectural pattern. Depends on. E.10.D1 Lexical Discipline for “Context” (D.CTX); A.7 Strict Distinction; A.11 Ontological Parsimony; A.8 Universal Core. Coordinates with. F.1 Contexts (Contexts); F.2 Harvest; F.3 SenseCells; F.4 Role Description; F.5 Naming Discipline; F.7 Concept‑Set Table; F.9 Alignment & Bridge. Aliases (informative). Mint‑vs‑Reuse gate; Naming governor.

Intent & applicability

Intent. Provide a minimal, conceptual decision lattice that answers, for any modelling need:

“Do I reuse an existing label, add an alias, reference a Concept‑Set row, define a Role Description, or mint a new U.Type?”

The lattice enforces locality of meaning (Contexts), senseFamily separation (A.7), and parsimony (A.11) while remaining didactically simple.

Applicability. Use whenever a new name seems “needed” in any FPF pattern thread (Role Assignment & Enactment, Sys-CAL, KD-CAL, Kind-CAL, Method-CAL, LCA-CAL…).

Non‑goals. No workflows, no roles, no storage. This is thinking discipline, not process guidance.

Problem frame

Modellers tend to mint names when they actually need reuse, aliasing, or explicit Cross‑context reading. Consequences:

  1. Name inflation. Parallel labels for the same idea across Contexts.
  2. senseFamily mixing. Behavioural Role names that smuggle in deontic Status or measurement talk.
  3. Hidden bridges. Cross‑context sameness is implied by look‑alike words rather than declared (F.9).
  4. Kernel sprawl. New U.Types appear to plaster over local vocabulary gaps.

Forces

ForceTension to resolve
Parsimony vs coverageAvoid new names unless necessary, yet cover recurring Cross‑context readings.
Locality vs unificationKeep senses in‑Context; when reading across, do it explicitly and only as far as needed.
Didactics vs fidelityGive readers one label to hold, but never over‑state sameness (respect CL and scope).

Minimal vocabulary (used in this pattern only)

  • ContextU.BoundedContext (per D.CTX).
  • SenseCell — address of a local sense produced by F.3 (one context × one clustered sense).
  • Concept‑Set row — a licensed Cross‑context reading (F.7) of cells in one senseFamily with a declared Row Scope and Row CL(min).
  • senseFamily — as defined in F.0.1; here used as the typed discriminator for rows restricted to {Role | Status | Measurement | Type‑structure | Method | Execution}.
  • Role Description — a Role or Status template anchored to a single SenseCell (F.4).
  • Alias — an additional label for an existing FPF label (within F.5), no new semantics.
  • CL threshold τ(scope) — the minimum congruence level needed for a row’s scope (e.g., τ(Naming-only) < τ(Assignment-eligibility) < τ(Type-structure)).

The decision lattice (conceptual, notation‑free)

Read top‑to‑bottom; the first satisfied branch decides. At every step, state the senseFamily (Role, Status, Measurement, Type-structure, Method, or Execution) before you proceed.

Q0 — What is the senseFamily of your need?

  • If uncertain, return to F.1/F.3: stabilise the Context(s) and the local sense.
  • If mixed, split the need: one decision per senseFamily (A.7).

Q1 — Is there a single Context whose SenseCell already expresses it?

  • Yes → Reuse the SenseCell’s label inside that Context.

    • If you need assignable behaviour or deontics on that sense: define a Role Description anchored to that SenseCell (F.4).
  • No → go to Q2.

Example (engineer). You want “task execution” in control software. In IEC 61131‑3 there is a clear SenseCell for task execution. Reuse that label; if you need responsibilities (“who monitors runs”), define a Role Description anchored to this SenseCell.

Q2 — Do you need to read across Contexts (same senseFamily)?

  • No → stay within one context; if your desire is merely a nicer label, consider an Alias (Q3).

  • Yes → check F.7 for a Concept‑Set row covering your cells in this senseFamily with adequate Row Scope and Row CL(min).

    • Found & sufficient → Reuse the row’s FPF label at that scope.
    • Not found or insufficient → either (a) publish a contrast (teach difference), or (b) propose a new row but only after F.9 Bridges exist at τ(scope).

Example (manager). You want one label for the actor in workflow and provenance prose. F.7 has a Naming‑only row mapping BPMN ParticipantPROV Agent at CL = 2. Reuse “actor” at Naming‑only scope; do not infer identity in models.

Q3 — Is this only a wording preference for an existing FPF label?

  • Yes → add an Alias in F.5 (Tech register and/or Plain register), no semantics changed.
  • No → go to Q4.

Example (researcher). You prefer “is‑a” to “subclass‑of” in Type pages. That is an Alias for the same concept; no new row, no new U.Type.

Q4 — Does your need recur across Contexts in a way not captured by current rows, with Bridges already available at the required CL?

  • Yes → propose a new Concept‑Set row (F.7): small (2–4 Contexts), one senseFamily, declare Row Scope and Row CL(min), include a counter‑example if any Bridge has loss notes.
  • No → go to Q5.

Example (engineer). You repeatedly compare runtime occurrence in PROV with PLC task runs. F.9 Bridges exist at CL = 2. Propose row “execution-occurrence” at assignment/enactment-eligibility scope (not Type-structure).

Q5 — Are you describing a kernel‑level notion missing from the catalogue, not reducible to existing rows or Role Descriptions, and present across ≥ 3 domain families (A.8)?

  • Yes → propose a new U.Type (rare). Supply: (i) the minimal intensional definition; (ii) cross‑family evidence (≥ 3 Contexts, distinct families); (iii) how it doesn’t duplicate an existing U.Type.
  • No → you do not mint a new type. Re‑express the need in terms of Context reuse, row reuse, Alias, or a Role Description.

Example (researcher). You think we need U.InfluenceEdge (causal tendency). If it appears as a stable, senseFamily‑specific notion across control, epistemic inference, and methods (≥ 3 families), and cannot be formed from existing U.Relation subtypes, it may qualify. Otherwise, treat it as a pattern or a row.

Scope thresholds (default τ) — how much sameness you’re allowed to claim

Row / Use ScopeWhat it licensesDefault τ (minimum CL)Typical consumers
Naming‑onlyShared label in prose, diagrams, and primers; no inference.1Pedagogy, glossary, didactic figures.
Assignment-eligibilitySafe to reference the row’s target as the thing a U.RoleAssignment may point to (e.g., a run, a value).2F.4 Role Description, acceptance narratives.
KD‑metricTreat cells as the same measured outcome (unit‑compatible, procedure‑compatible).2Measurement summaries, SLO tables.
Type‑structureTreat cells as the same structural relation (e.g., subtyping) with inheritance semantics.3Kind-CAL pages, structural proofs.

Guard. You may tighten scope (e.g., from Naming-only → Assignment-eligibility) only if the Row CL(min) meets the higher τ.

Micro‑examples (didactic triad)

For engineers — “Do we need a new Execution label?”

  • Need. “We want to refer to what actually happened in both provenance logs and PLC runtime.”
  • senseFamily. Execution - stance. run.
  • Contexts. PROV‑O (Activity), IEC 61131‑3 (task run).
  • Row? F.7 has execution-occurrence at assignment/enactment-eligibility, CL = 2.
  • Decision. Reuse that row’s label at Assignment-eligibility; no new U.Type; define Role Descriptions anchored to each Context as needed.

For managers — “Can we call them all actors?”

  • Need. A single everyday word in the spec to denote “the responsible party”.
  • senseFamily. Role (behavioural mask in prose).
  • Contexts. BPMN 2.0 (Participant), PROV‑O (Agent).
  • Row? Naming‑only row “actor”, CL = 2.
  • Decision. Reuse “actor” in prose only; keep Context‑loyal labels in formal sections. No Role Description minted unless tied to one context.

For researchers — “New U.Type for ‘Work Scope’?”

  • Need. Kernel notion capturing feasible performance region across systems.
  • Test A.8. Appears in control (reachable sets), services (operating envelope), measurement (confidence bands): ≥ 3 families?
  • Reduction test. Can it be expressed as a row + existing U.Relation + KD‑CAL constructs?
  • Decision. If not reducible and cross‑family stable, propose new U.Type with minimal definition; otherwise, prefer a row or a pattern.

Invariants (normative, lightweight)

  1. Context‑first. Every decision cites at least one Context; no global senses.
  2. senseFamily purity. A single decision covers one senseFamily. Mixed needs are split.
  3. Row honesty. Any Cross‑context reuse occurs via a Concept‑Set row at or above τ(scope); no stealth equivalence.
  4. Role Description anchoring. Role Descriptions are single-Context, single-cell anchors (F.4).
  5. Alias modesty. Aliases never change semantics and live under F.5.
  6. Kernel restraint. New U.Types are rare; A.8 (≥ 3 families) is mandatory, and duplication with existing U.Types must be ruled out.

Mint/Reuse discipline for policy-ids (normative addendum)

FPF treats policy-ids (e.g., Φ(CL), Φ_plane, Ψ(CL^k), Aut-Guard, EmitterPolicyRef, InsertionPolicyRef, Acceptance clause ids) as first-class, versioned tokens. They are not “just strings”, and they are not governed by tier ladders or implied authority.

PolicySpecRef. A resolvable reference to the normative definition of a policy-id (“what does this policy-id mean?”). At minimum it:

  • identifies the policy-id,
  • pins an immutable edition (or equivalent digest), and
  • can be located from the same publication bundle (MVPK / UTS / EvidenceGraph anchors).

MintDecisionRef. A resolvable reference to the decision record that introduced (minted) a policy-id into a declared namespace/registry. For normative policy-ids this is typically a DRR id (E.9) or an equivalent change decision record. For purely local, non-exported policy-ids it MAY be a Gate DecisionLog entry (A.21) if that local-only scope is explicit.

PolicyIdRef (canonical bundle). PolicyIdRef := { policy_id, PolicySpecRef, MintDecisionRef? }.

Rules.

  1. No silent policy-id minting. If a publication introduces a new policy-id (not previously present in the declared namespace/registry), it MUST surface a PolicyIdRef whose:
    • PolicySpecRef is edition-pinned, and
    • MintDecisionRef is resolvable from the publication’s DRR/DecisionLog links.
  2. Reuse is reference-only. If a publication reuses an existing policy-id, it MUST surface a PolicySpecRef (and SHOULD preserve the prior mint decision link where available). It MUST NOT restate policy semantics as if minting a new policy-id.
  3. GateCrossing checkability. Any GateCrossing/CrossingBundle that surfaces policy-ids MUST include PolicyIdRef (or an equivalent “policy-id + resolvable refs” structure) so GateChecks can verify resolvability and pin consistency (E.18/A.21/G.6:7.5.8).
  4. Authority is policy, not tiers. “Who may mint” vs “who may reuse” is expressed by the referenced policy specs and mint decisions (and enforced by the active GateProfile/GateChecks), not by fixed tier labels.

Quick reference (one‑glance map)

You feel you need…Likely actionWhy
A convenient everyday word across two ContextsReuse a Naming‑only rowKeeps prose simple without smuggling inference.
An assignable mask with invariantsRole Description (single Context)Roles or Statuses attach to local senses.
The same measured outcome across ContextsReuse a KD‑metric rowUnits/procedures aligned at CL ≥ 2.
A unifying schema relation (e.g., is‑a)Reuse a Type‑structure rowStructural inference preserved at CL ≥ 3.
A nicer label for the same FPF conceptAlias in F.5Style only; zero semantics.
A brand‑new primitive conceptNew U.Type (rare)Only if cross‑family, irreducible, kernel‑level.

Anti‑patterns & remedies

#Anti‑patternSymptomWhy it harms thinkingRemedy (conceptual move)
AP‑1Row‑less samenessDeclaring “these mean the same” across Contexts without citing a Concept‑Set row.Imports meaning implicitly; no CL guard.If Cross‑context reuse is desired, reuse an existing row at a declared scope (F.7), else publish the contrast and apply F.9 Bridges only when the bridge relation is live.
AP-2Scope creepUsing a Naming-only row to justify Assignment-eligibility or structural inferences.Over-claims sameness; breaks τ(scope).Respect scope thresholds (τ). Upgrade only when Row CL(min) ≥ τ(new scope); otherwise stay Naming-only.
AP‑3Alias with payloadIntroducing an Alias that subtly changes intent or senseFamily.Hides semantics behind wording; confuses senseFamilies.Aliases (F.5) are style only. If semantics change, choose row reuse or Role Description instead.
AP-4Role-Description-to-row anchoringRole Description points to a row rather than a single SenseCell.Masks locality; assignments become cross-context by stealth.Role Descriptions must anchor to one SenseCell (F.4). Use rows only in prose or aggregated views.
AP‑5Kernel inflationProposing a new U.Type because a convenient label is missing.Duplicates the kernel; violates parsimony.Apply A.8: require ≥ 3 domain families and irreducibility; otherwise Alias or row.
AP‑6senseFamily mixingOne name that conflates Role, Status, Measurement, or Type‑structure.Collapses A.7 Strict Distinction.Split by senseFamily first (Q0). Decide per senseFamily.
AP‑7Bridge‑by‑stringTreating identical lexical forms as equivalent senses across Contexts.Homonym trap; ignores local sense.Equivalence only via F.9 Bridge + row; never by string.
AP‑8Row without loss notesPublishing a row where Bridges indicate mismatches, but row text is silent.Readers assume full equivalence.Include counter‑example and loss sketch in the row’s narrative (F.7).
AP‑9CL launderingCiting a high-scope row based on old high CL while the relevant Bridge CL has since dropped.Invalidates downstream claims.When CL falls below τ(scope), downgrade row scope (e.g., to Naming-only) or split row.
AP‑10Global normal formSeeking one canonical wording across all Contexts as if meaning were global.Erases locality; fuels hidden merges.Keep normalisation per Context (F.2/F.3). Cross‑context sameness lives in rows with scope.

Reasoning primitives (judgement schemas, notation‑free)

Each item states a mental entailment. No storage, no roles, no workflows. Symbols: C = Context, σ = SenseCell, R = Concept‑Set row, SF = senseFamily, τ = scope threshold, CL = congruence level.

  1. senseFamily split need(n) ∧ mixedSF(n) ⊢ split(n) into {n₁…nₖ} by senseFamily You cannot decide for mixed senseFamilies; decide per senseFamily.

  2. Cell reuse ∃ C,σ : expresses(n,SF)@σ ⊢ reuseLabel(σ) in C If a single Context’s SenseCell already says it, reuse it locally.

  3. Assignment-eligibility reuseLabel(σ) ∧ needAssignable(SF ∈ {Role,Status}) ⊢ mintRoleDescription(σ) When you need assignable behaviour/deontics for a local sense, mint a Role Description anchored to that sense.

  4. Row reuse crossContexts(n,SF) ∧ ∃ R: covers(R,SF) ∧ CL(R) ≥ τ(scope) ⊢ reuseRow(R,scope) For Cross‑context readings, reuse a row at a scope whose τ is met.

  5. Alias suffices sameIntent(n,label₀) ∧ stylePreference(n,label₁) ⊢ alias(label₀,label₁) If it’s only wording, add an Alias; no semantics move.

  6. Row proposal recurrentCross(n,SF) ∧ bridgesCL(cells(n)) ≥ τ(scope) ∧ ¬∃R ⊢ proposeRow(cells,scope) If the need recurs and Bridges support the scope, propose a new row.

  7. Kernel minting (rare) kernelCandidate(n) ∧ crossFamily≥3 ∧ irreducible(n) ⊢ proposeUType(n) Only if the notion is cross‑family and cannot be reduced to cells+rows+existing U.Types.

  8. Scope downgrade reuseRow(R,scope) ∧ CL(R)↓ < τ(scope) ⊢ downgradeScope(R) If CL falls, lower the row’s licensed scope.

  9. Row rejection conflictEvidence(rowCells) ∧ lossUnbounded ⊢ rejectRow If bridges show open‑ended loss, do not publish a row; teach the contrast.

Extended worked examples

Execution, observation, and acceptance (engineers)

Need. A reusable label for “what actually happened and how it was checked against the promise”. senseFamilies. Execution (stance: run); Measurement (KD); Status (accept/reject).

Contexts. IEC 61131‑3 (task run), PROV‑O (Activity), SOSA/SSN (Observation), ITIL 4 (SLO/SLA).

Reasoning.

  • Execution: IEC SenseCell (task run) and PROV SenseCell (Activity). There exists a row execution-occurrence at Assignment-eligibility with CL = 2 → reuse row at Assignment-eligible scope; do not infer Type-structure.
  • Measurement: SOSA Observation cell; no Cross‑context needed → reuse cell.
  • Status: ITIL SLO/SLA cell; Role Description “SLO‑Target” anchored to ITIL cell.

Outcome. Prose may say: “This execution-occurrence (row@assignment/enactment-eligibility) was observed (SOSA cell) and evaluated against the SLO (ITIL cell).” No new U.Type; no hidden merges.

Actor across workflow and provenance (managers)

Need. A single everyday label for “the responsible party” in diagrams. senseFamily. Role (behavioural mask in prose/diagrams).

Contexts. BPMN 2.0 (Participant), PROV‑O (Agent).

Reasoning. A Naming‑only row “actor” exists, CL = 2. Reuse the row at Naming‑only. If assignable behaviour is needed in a model, mint Role Description anchored to BPMN Participant (not to the row).

Outcome. Diagrams show “actor”; formal sections reference Participant or Agent as appropriate.

Accuracy across metrology and data quality (researchers)

Need. Treat “accuracy” consistently across ISO 80000 (metrology) and ISO/IEC 25024 (data quality). senseFamily. Measurement.

Contexts. ISO 80000‑1 (quantity/units), ISO/IEC 25024 (data quality).

Reasoning. Bridges indicate related but not identical definitions; procedures differ. Existing KD‑metric row “accuracy” has CL = 2 with loss note: population vs instrument focus. Reuse row at KD‑metric scope for dashboards; do not use the row to justify interchange of procedures.

Outcome. One label in reports; method sections still cite the context‑local procedure.

F.8:12.4 Subtype relation across OWL and a curated taxonomy (formalists)

Need. Present “is‑a” uniformly across OWL 2 classes and a domain taxonomy. senseFamily. Type‑structure.

Contexts. OWL 2 (SubClassOf), Taxonomy_X (curated “is‑a” edges).

Reasoning. F.7 row “subtype‑order” exists at Type‑structure scope with CL = 3 (only after verifying acyclicity & anti‑symmetry in Taxonomy_X). If the curated taxonomy contains cycles, downgrade to Naming‑only or reject the row.

Outcome. When CL≥3, you may reuse row for structural proofs; else teach differences.

Relations (with other patterns)

  • Builds on: E.10.D1 (D.CTX) Context ≡ U.BoundedContext; F.1 Contexts; F.2 Harvest; F.3 SenseCells.

  • Constrains:

    • F.4 Role Description: one SenseCell per Role Description; no row anchoring.
    • F.5 Naming: Aliases are style‑only; no semantics movement.
    • F.7 Concept‑Set: rows must declare Scope & Row CL(min) and carry loss notes.
    • F.9 Bridges: any row proposal presupposes Bridges at or above τ(scope).
  • Used by. All patterns (Part C) whenever new labels are contemplated.

Migration notes (conceptual)

  1. Old “anchor” language. Replace legacy “anchor” with: SenseCell (local sense) + Role Description (assignable Standard) + (optionally) Concept‑Set row (Cross‑context reading).
  2. Overclaiming rows. If a row was used for assignment/enactment-eligibility or Type-structure but CL drops, downgrade row scope to Naming-only in prose; adjust examples.
  3. Split rows. If one row covers cells whose Bridges diverge, split into two narrower rows with explicit loss notes.
  4. Alias proliferation. Collapse redundant Aliases under a single F.5 entry; keep both registers (Tech/Plain).
  5. Proto‑types. Suspect kernel inflation? Attempt reduction: SenseCell + row + existing U.Type. Only if irreducible across ≥ 3 families, reopen as a U.Type candidate.

Acceptance tests (SCR/RSCR — concept‑level)

Static conformance (SCR)

  • SCR‑F8‑S01 (senseFamily purity). Every decision record names one senseFamily; mixed needs are split.
  • SCR‑F8‑S02 (Proper anchoring). Every Role Description cites one SenseCell; no row is used as a assignment/enactment anchor.
  • SCR‑F8‑S03 (Row scope). Whenever a row is reused, its Scope is stated and Row CL(min) ≥ τ(scope) holds.
  • SCR‑F8‑S04 (Alias modesty). Aliases introduced in F.5 do not claim new semantics or change senseFamily.
  • SCR‑F8‑S05 (Kernel restraint). Any new U.Type proposal includes ≥ 3 domain families of evidence and an irreducibility note.

Regression (RSCR)

  • RSCR‑F8‑E01 (CL drift). If any Bridge’s CL changes, re‑evaluate dependent rows; downgrade or split where τ(scope) is no longer met.
  • RSCR-F8-E02 (Row overuse). Scan examples: no case uses Naming-only rows to justify Assignment-eligibility or Type-structure claims.
  • RSCR‑F8‑E03 (Alias creep). Ensure no Alias has accreted senseFamily‑specific semantics; if it has, migrate to a row or Role Description.
  • RSCR‑F8‑E04 (Kernel hygiene). New U.Type proposals are rejected if a SenseCell + row construction suffices.

Didactic distillation (90‑second teaching script)

“When you feel like coining a new name, pause. Which senseFamily are you in—Role, Status, Measurement, Type‑structure, Method, or Execution? If a single Context’s SenseCell already says it, reuse that label. If you need an assignable Standard, mint a Role Description anchored to that SenseCell. If you must read across Contexts, reuse a Concept‑Set row—but only at a stated scope and only if its CL meets the threshold (τ). If it’s just a nicer wording, add an Alias (style only). Only in the rare case of a cross‑family, irreducible notion do you mint a new U.Type. Never let Naming‑only rows justify Assignment-eligibility or structural inference, and never let identical strings force equivalence. This is not process—it’s discipline of thought: reuse what exists, declare scope when you bridge, and mint new primitives only when the kernel truly needs them.”

F.8:End

Alignment & Bridge across Contexts

“Translate across Contexts; never collapse them.” Type. Architectural pattern. Status. Stable. Normativity. Normative. Builds on: E.10.D1 (Context discipline: Context = U.BoundedContext); F.0.1 (senseFamily & StatusModality guard; Bridge-only crossing); F.1 (Contexts fixed); F.2/F.3 (Cells exist); F.7 (rows depend on Bridges); F.8 (thresholds and reuse choice).

Coordinates with: B.3 Trust & Assurance Calculus (uses CL penalties); A.6.1 U.Mechanism (Transport clause for cross-context use; penalties feed R/R_eff only; F/G invariant); Part C patterns (apply Bridges in formal claims); A.6.9 (RPR-XCTX for repairing umbrella “same/equivalent/align/map” prose into explicit Bridge Cards). Aliases (informative). Context-to-Context translator; Sense bridge.

Intent & applicability

Intent. Provide a conceptual discipline for relating SenseCells from different Contexts (U.BoundedContext). A Bridge states what kind of relationship holds, how far it holds (via CL: Congruence Level), and what is lost during the translation. Bridges support carefully scoped reuse (e.g., a Concept-Set row) while rejecting silent equivalence.

Applicability. Use whenever an author needs to read across Contexts—to reuse a familiar label, to connect design-time and run-time notions, to compare two standards’ terms, or to justify a row in the Concept-Set table. This pattern is not storage, enactment protocol, or governance; it codifies thinking moves.

Non-goals. No global meaning; no publication face/form semantics; no editor roles. Bridges are semantic relations between local senses, not transport chains, not processes. Primary EntityOfConcern in plain terms. One bridge card relating two SenseCells across different U.BoundedContexts; not a transport chain, not a workflow, and not one global meaning layer. Admissible move in plain terms. Declare relation kind, direction, CL, and loss between local senses so cross-context reading stays inspectable without collapsing them into silent equivalence. Primary working reader. The primary working reader is an author, checker, or practitioner preparing one bridge card, one comparative mapping note, or one concept-set row that depends on cross-context reading without pretending the contexts have already collapsed. Use this when. Use this pattern when two local senses from different contexts need one explicit bridge card before a team can admissibly reuse a label, justify a row, or compare the cases without pretending the senses are equivalent or substitutable. Start here when. The same term, role, quality, or status label appears in more than one context and the team is about to treat that overlap as if it were already equivalence, safe substitution, or structure-preserving reuse. What goes wrong if missed. Teams fall back to shared labels, string-equals shortcuts, or informal analogies, then quietly smuggle equivalence, substitution, or structure across contexts without publishing relation kind, CL, or loss. What this buys. One explicit bridge discipline that lets a team reuse names, compare contexts, and publish bounded cross-context support without losing track of direction, loss, and the limits of admissible substitution. Not this pattern when. Not this pattern when the case is still only a coarsened source-pinned rendering with no bridge claim yet, or when the real job is storage, enactment, governance, or one single local context rather than explicit cross-context alignment.

Boundary to controlled coarsening. This pattern is also the explicit boundary pattern when a simplified or coarsened cross-context rendering starts to imply equivalence, substitution, projection, or interoperability scope. If the case is still only a coarsened source-pinned rendering for narrower use, keep it with that rendering's own source tether, non-admissible-use line, and reopen condition, using A.6.3.CSC Controlled Semantic Coarsening when that narrower-use card is primary. A lighter cross-context note may provide informal orientation, but that is not a formal F.9 Naming-only row. Any bridge, substitution, row, or interoperability claim must reopen the source-bearing episteme or source publication needed for the Bridge Card before the Bridge Card may be published under F.9. Recognition vs assurance note. Read Intent, Applicability, Non-goals, and the A.6.3.CSC neighbor boundary above as the ordinary recognition block. Read Bridge kinds, CL, conformance, and Relations below as assurance blocks that tighten the same bridge-card claim; they do not widen the pattern into transport, workflow, or one global meaning layer.

Problem frame

Cross-context work fails in predictable ways:

  1. String-equals fallacy. Identical spellings (“process”, “role”, “accuracy”) taken as identical meaning.
  2. Scope creep. A naming convenience is stretched to assignment or structural claims.
  3. DesignRunTag jumping. Design artefacts are substituted for run-time occurrences (or vice-versa).
  4. Direction amnesia. Narrower/broader relations treated as symmetric.
  5. Loss blindness. Differences (units, granularity, preconditions) are left unstated, contaminating downstream reasoning.

Bridges cure these by making relation, direction, loss, and CL explicit.

Forces

ForceTension to resolve
Locality vs reuseSenses are context-local, yet people need a common label to talk across Contexts.
Simplicity vs fidelityFew Bridge kinds are teachable; too few will hide real mismatches.
Safety vs utilitySupport bounded substitution when the bridge kind and CL license it; leave substitution unsupported when loss is unbounded.
senseFamily purity vs explanationSubstitution must preserve senseFamily; explanation may span senseFamilies without implying sameness.

Core idea (didactic)

A Bridge is a declared translator between two local senses. It always names (a) the two SenseCells, (b) a Bridge kind (what relation), (c) a direction (if non-symmetric), (d) a CL value, and (e) Loss Notes (what fails to carry). Some Bridges support substitution in limited scopes; others support only explanation.

Minimal vocabulary (this pattern only)

  • Context — shorthand for U.BoundedContext (per E.10.D1).

  • SenseCell - the pair (Context, Local-Sense) from F.3.

  • Bridge — a conceptual relation between two SenseCells with kind, direction, CL, and loss notes.

  • CL (Congruence Level) — ordinal congruence class (0…3) of a Bridge (see §7).

  • Scope — the Bridge-supported use of a cross-context reading (as in F.7/F.8):

  • Naming-only (talk consistently),

  • Role Assignment & Enactment-eligibility (assignable constraints/roles/status reuse),

  • Type-structure (safe structural inference).

  • senseFamily — the semantic category (Role, Status, Measurement, Type-structure, Method, Execution…) per F.0.1 (normative Part F guard).

Bridge kinds (senseFamily-aware)

Two families of Bridges: Substitution Bridges (senseFamily-preserving; can support Concept-Set rows) and Interpretation Bridges (explanatory; not for substitution).

Substitution Bridges (sense-preserving)

These relate SenseCells of the same senseFamily and may support limited substitution:

  1. Equivalence - near-identity of sense. Symmetric. Rare. Use: May support Type-structure rows when CL=3 and invariants match. Loss Notes: usually “none” or “profiling differences”.

  2. Narrower-than / Broader-than - proper inclusion of sense. Directional. Use: Safe to substitute narrower > broader in Naming-only and sometimes Role Assignment & Enactment; broader > narrower is unsafe. Loss Notes: “loses special cases X”.

  3. Partial-overlap - non-empty intersection, neither includes the other. Use: Naming-only at best. Never justifies Role Assignment & Enactment / Type-structure. Loss Notes: “A-only senseFamily”, “B-only senseFamily”.

  4. Disjoint - explicit contrast. Use: For didactic warnings; not reuse support. Loss Notes: n/a (it asserts incompatibility).

Interpretation Bridges (cross-senseFamily, explanatory)

These do not support substitution but explain connections across senseFamilies:

  1. Design-spec -> Run-trace - a design concept relates to its run-time occurrence. Example: BPMN:Process -> PROV:Activity. Use: Explain design-to-execution correspondence. No Concept-Set rows. Loss Notes: “graph vs event”, “control-flow vs temporal extent”.

  2. Measure-of / Evidence-for (->) — a measurement SenseCell evidences or quantifies another senseFamily (e.g., a Requirement clause). Example: SOSA:Observation -> ITIL:SLO fulfilment. Use: Explain evaluation. No substitution.

  3. Policy-implies / Obliges (->) — a deontic statement constrains another senseFamily. Example: ODRL:Duty -> Service behaviour. Use: Explain constraint propagation.

Rule of thumb. If you want rows or substitution, you need a Substitution Bridge on the same senseFamily. If you want to explain why artefacts relate without claiming sameness, use Interpretation Bridges.

CL scale and scope thresholds

CL expresses how safely meaning carries over.

CLNameIntuitionTypical lossRow scope supported (thresholds)
0OpposedIntentionally contrastive or disjointn/anone
1ComparableTalk under a shared label; senses differ materiallymaterial sense divergenceNaming-only (CL >= 1)
2TranslatableBounded loss; consistent examples & counter-examplessmall, stated lossesRole Assignment & Enactment-eligibility (CL >= 2)
3Near-identityInvariants match; no material counter-exampleprofile-level onlyType-structure (CL = 3)
  • Thresholds (normative):

    • Publishing a Naming-only row requires CL >= 1 across the row's Cells.
    • Publishing a Role Assignment & Enactment-eligible row requires CL >= 2, the same senseFamily, and compatible stance.
    • Publishing a Type-structure row requires CL = 3 and matched invariants (acyclicity, anti-symmetry, units, etc.).
  • Penalty use (informative): B.3 may convert CL into an assurance penalty when a cross-context claim is made.

The Bridge Card (compact sketch)

A thought-format (not a form). Every bullet can be said in a sentence.

  • Cells. A@contextA - B@contextB.
  • senseFamily. Role, Status, Measurement, Type-structure, Method, or Execution ...
  • Kind. Equivalence / Narrower-than / Broader-than / Partial-overlap / Disjoint / Design-spec -> Run-trace / Measure-of / Policy-implies.
  • Direction. A -> B (if non-symmetric) or A <-> B.
  • CL. 0–3 with a short why.
  • Loss Notes (bullets). What fails to carry (units, scope, granularity, preconditions, time stance).
  • Counter-example. The crispest case where substitution would mislead.
  • Supported use. Naming-only / Role Assignment & Enactment-eligible / Type-structure / Explanation-only.
  • Didactic hook. The helpful sentence a careful engineer can remember.

If it does not fit on a screen, you are describing the Contexts, not the Bridge.

Registry-reference note (normative). BridgeId and any policy/edition identifiers cited by a Bridge Card are registry references (keys into registries), not semantic symbols exported by signatures. Therefore they MUST NOT be demanded via SignatureManifest.provides (or "satisfied" via imports closure); conformance is checked by validating that the referenced registry entries exist and, where required, are edition-pinned (see F.15).

State export and quantum-like boundary note

Use F.9 first when meaning, label, relation, field, record, model output, report, or representation crosses a bounded context or publication plane. A bridge does not become quantum-like because it is lossy, approximate, contextual, or hard to translate. It becomes quantum-like only when the bridge/export claim still depends on order sensitivity, incompatible frames, a probe that changes the represented state, or no faithful-enough export supports the intended use.

Action path:

  1. Build the ordinary Bridge Card first: cells, sense family, kind, direction, CL, loss notes, counter-example, and Bridge-supported use.
  2. Ask what state, relation, evidence, metric, option, or viability reading is claimed to survive the crossing.
  3. State what the crossing omits, coarsens, re-keys, reframes, makes incomparable, or makes unsafe for the intended downstream use.
  4. If the bridge or export claims to preserve action, intervention, manipulation, explanation, or cross-scale structure, state the causal-abstraction or approximate-causal-abstraction mapping before treating the coarsened bridge as a QL issue.
  5. Ask whether asking, measuring, exporting, rendering, or bridging changes the represented state itself. If yes, coordinate with C.26.1.
  6. Ask whether coordinated work or live state is not exported faithfully enough for the intended use by any one report or bridge. If yes, coordinate with C.26.2.
  7. Ask whether the crossing is a state representation with declared source-loss mode or reduced recoverability. If yes, coordinate with CSC/RT and the C.26 coarsening support section.
  8. State Bridge-supported use and return-to-source trigger before the bridge result is reused.

Add this row to the Bridge Card only when the bridge result will be reused for decision, comparison, assurance, release, audit, or cross-context action. For a local orientation note, state the export loss and return-to-source trigger in prose without treating the note as a Bridge Card extension.

FieldQuestion
State reading claimed to surviveWhat state, relation, evidence, metric, option, or viability reading is claimed to survive the crossing
State lost or transformedWhat is omitted, coarsened, re-keyed, re-framed, made incomparable, or no longer decision-safe
Probe / frame conditionWhether the act of asking, measuring, exporting, or rendering changes the represented state
Bridge-supported useWhich decision, explanation, triage, comparison, or orientation use remains supported after the crossing
Bridge-non-admissible useWhich substitution, release, audit, assurance, or action use requiring additional support is not supported by the Bridge card
Return-to-source triggerWhen the bridge result is no longer enough and the source context, evidence carrier, or fuller representation must be reopened

Useful outputs:

  • an ordinary Bridge Card when translation/loss is the whole issue;
  • a C.26.1 note when the export/probe changes represented state;
  • a C.26.2 note when coordinated state has no faithful-enough export for the intended use;
  • a CSC, RT, or C.26 coarsening handoff when the exported representation intentionally carries reduced detail, reduced recoverability, or narrower use.

Invariants (normative)

  1. Locality first. A Bridge relates SenseCells, never Contexts or strings.
  2. senseFamily discipline. Substitution Bridges must be senseFamily-preserving. Interpretation Bridges may cross senseFamilies but never support substitution.
  3. Direction clarity. If the kind is directional, state direction explicitly.
  4. CL honesty. Assign CL only if you can state at least one counter-example for CL <= 2 or explain its absence with invariants for CL = 3.
  5. Loss visibility. Every Bridge carries Loss Notes (even “none”).
  6. Row dependence. A Concept-Set row’s scope is bounded by the weakest CL among its participating Bridges (F.7/F.8).
  7. No senseFamily jump by stealth. You must not use an Interpretation Bridge to justify a row or substitution.
  8. Time DesignRunTag honesty. If a Context fixes DesignRunTag, the Bridge must respect that distinction or explicitly declare a bridge such as Design-spec -> Run-trace.
  9. Kernel restraint. Bridges cannot be used to promote ad-hoc sameness into a new U.Type; A.11 applies.
  10. Non-inheritance of Contexts. Bridges do not imply -is-a- between Contexts (E.10.D1).
  11. Coarsened-note restraint. A lighter cross-context note, comparative aid, redacted view, or surrogate SHALL NOT be treated as a Bridge Card or as bridge-bearing or substitution-bearing evidence by convenience. If bridge-bearing use is still wanted, the source-bearing episteme or source publication needed for the Bridge Card must be reopened and the bridge must be declared explicitly with kind, direction, CL, and loss notes.

Micro-examples (illustrative, one-liners)

  1. Participant vs Agent (process model vs provenance) Cells: BPMN:Participant - PROV:Agent - senseFamily: Role - Kind: Partial-overlap - CL: 2 - Loss: participation vs attribution scopes differ - Use: Naming-only ("actor").

  2. Process (design) vs Activity (run) Cells: BPMN:Process -> PROV:Activity - senseFamily: Method / Execution - Kind: Design-spec -> Run-trace - CL: 2 - Loss: graph vs event; concurrency vs temporalization - Use: Explanation-only.

  3. Observation vs SLO check Cells: SOSA:Observation -> ITIL:SLO-fulfilment - senseFamily: Measurement / Status - Kind: Measure-of - CL: 2 - Loss: sampling window; target definition - Use: Explanation-only.

  4. Subtype across OWL and curated taxonomy Cells: OWL:SubClassOf - TaxonomyX:is-a - senseFamily: Type-structure - Kind: Equivalence - CL: 3 (only if TaxonomyX is acyclic and anti-symmetric) - Loss: profile differences - Use: Type-structure rows supported.

  5. Accuracy (metrology vs data-quality) Cells: ISO80000:accuracy - ISO25024:accuracy - senseFamily: Measurement - Kind: Partial-overlap - CL: 2 - Loss: instrument vs dataset perspective - Use: Naming-only row -accuracy-; methods stay context-local.

Anti-patterns & remedies

IDAnti-patternSymptomWhy it breaks thinkingRemedy (conceptual move)
AP-1String-equals = sense-equalsSame spelling used across Contexts with silent identity claims.Violates locality; invites false substitution.Always state a Bridge kind; if unsure, default to Partial-overlap with Naming-only scope.
AP-2Stealth substitution“We’ll just treat A like B for now.”Hidden policy with unknown loss; leaks into Role Assignment & Enactment.Publish a Bridge Card with Loss Notes and CL; if CL<2, substitution remains unsupported.
AP-3Stance jump by wording-Activity (PROV) is a Process (BPMN).-DesignRunTag confusion; swaps graphs for events.Use a Design-spec -> Run-trace Interpretation Bridge, not a substitution bridge; keep Explanation-only scope.
AP-4Symmetry hallucinationTreating directional bridges as if they were symmetric.Narrows broadened, broadens narrowed; unsafe reuse.Record direction explicitly; only Equivalence is symmetric.
AP-5Disjoint but reusedDeclare Disjoint and still borrow labels or Role Description constraints (RCS/RSG).Contradiction between declaration and use.Either retract Disjoint or stop reuse; if a thin thread exists, rename it as contrastive explanation (no row).
AP-6CL without counter-example-These are CL=3- with no invariant check.Inflates trust; over-supports structural rows.For CL=3, cite the matching invariants; otherwise, demote to CL=2 and add a counter-example.
AP-7Bridge inflationDozens of nearly identical Bridges between the same Contexts.Noise masks the few material alignments.Prefer one Bridge per pair of Cells per senseFamily; fold variants into Loss Notes.
AP-8Row outruns BridgeA Concept-Set row claims Role Assignment & Enactment-eligibility where some participating Bridges are CL = 1.Row scope exceeds the weakest link.Apply the weakest-link rule (F.7/F.8): row scope <= min(CL); otherwise split the row.
AP-9Bridge as new U.TypeUsing a Bridge to justify minting a new universal Type.Re-globalises meaning; breaks A.11 parsimony.Keep Types context-local; where reuse is needed, use rows + Bridges, not new primitives.
AP-10Silent unit-and-scale mismatchTransporting measurements without unit and scale notes.Hidden dimensional error.Record units and scales in Loss Notes; if units cannot be related, use Disjoint or Partial-overlap with Naming-only scope.
AP-11Coarsened note treated as Bridge Card evidenceA summary, redacted comparison, or partner-facing simplification is used as if it already made substitution or interoperability claims admissible.A bridge claim is being smuggled through a coarsened rendering that only made lighter review or orientation admissible.Reopen the source-bearing episteme or source publication needed for the Bridge Card and publish the actual Bridge Card before any bridge-bearing or substitution use.

Worked examples (didactic)

Service acceptance (design) vs executions & observations (run)

  • Cells & Contexts ITIL4:SLO (Status, design) <- SOSA:Observation(availability) (Measurement, run) BPMN:Process (Method, design) -> IEC61131:Task-Execution (Execution, run)
  • Narrative Availability SLOs are evaluated by observations of task executions. No substitution follows: an SLO is not an observation, and a process is not an execution occurrence.
  • Bridge Cards (sketch) ITIL:SLO <- SOSA:Observation - CL=2 - Loss: sampling window, clock skew. BPMN:Process -> IEC:Execution - CL=2 - Loss: control-flow vs temporalization, concurrency collapse.
  • Supported use Explanation-only; Concept-Set rows may be Naming-only ("availability") with CL >= 1 label coherence across Contexts.

Behavioural role vs access role

  • Cells & Contexts BPMN:Participant (Role) - NIST-RBAC:Role (Status)
  • Narrative Both talk about -who acts-, but one is a behavioural mask in a process model, while the other is an authorization grouping.
  • Bridge Kind: Partial-overlap, CL=2; Loss: assignment moment, enforcement placement, multiplicity.
  • Supported use
  • Naming-only row “actor”; no Role Assignment & Enactment reuse across senseFamilies.

Equivalence of subtype notions for structural rows

  • Cells & Contexts OWL2:SubClassOf (Type-structure) - TaxX:is-a (Type-structure curated)
  • Bridge Kind: Equivalence, CL=3 iff the curated taxonomy is acyclic and anti-symmetric and uses class-level reasoning.
  • Supported use Type-structure rows supported (CL = 3); Loss: OWL profile limitations (RL/EL/QO).

Accuracy (metrology) vs accuracy (data-quality)

  • Cells & Contexts ISO80000:measurement-accuracy (Measurement) - ISO25024:data-accuracy (Measurement)
  • Bridge Kind: overlap, CL=2; Loss: “true value” notion differs (instrument vs dataset), scale transformations.
  • Supported use Naming-only row “accuracy” used for reports; no shared methods.

Setpoint (control) vs target (service)

  • Cells & Contexts CTRL:text:setpoint (Status/Control) - ITIL:target (Status/Service)
  • Bridge Kind: Disjoint - Rationale: physical reference value vs business objective; different target kinds (control parameters vs requirement clause).
  • Supported use Didactic contrast only; prevents accidental substitution in SLO calculus.

Role substitution & CL gating (RoleAssignment/enactment scope)

Use. A worked, role-focused restatement of Bridge usage for the recurring question: “May Role_B@B satisfy Role_A@A for requiredRoles / enactment checks-”

Rule. No cross-context substitution by name. If a step in Context A needs Role_A, and the performer only holds Role_B in Context B, an explicit Bridge MUST state how Role_B@B relates to Role_A@A, with direction, CL, and Loss Notes.

Directional substitution (role-oriented shorthand)

A Bridge may assert, directionally:

  • substitutesFor(Role_B@B > Role_A@A) with a CL and a list of kept and lost characteristics (for roles: typical losses are RCS characteristics and/or RSG nuances).
  • The reverse direction does not follow unless declared (F.9:13.7).
CL > gating policy (didactic default)
CLMeaning (intuitive)Supported scopeExtra conditionUnsupported by default
3Near-isomorphic sense; no material lossYesNone beyond ordinary gates (e.g., window + RSG state)-
2Close but with stated lossesYesRequire extra evidence (e.g., additional checklist item) or a named checker
1Distant analogy; riskyExceptionOnly by explicit Waiver SpeechAct naming the Bridge + loss rationaleDefault
0IncompatibleNoYes

Notes. The substitution scope is defined in F.9:13.2-13.3 (Role-Assignment/Enactment-eligible substitution requires CL >= 2; Naming-only is CL >= 1). CL penalties feed assurance (R) per B.3; safety-critical policies may require CL >= 2 by default (D.2).

Typical bridges (worked patterns)
  • BPMN Task - PROV Activity. substitutesFor(Task@BPMN > Activity@PROV) with CL=2; lost: BPMN control-flow guards; kept: “bounded occurrence consuming/producing entities.” Effect. A Work logged as Activity@PROV may satisfy a step requiring a Task@BPMN iff an extra guard enforces the BPMN pre-/post-conditions.

  • Essence Alpha-State - RoleStateGraph state. substitutesFor(“Alpha.State:Ready”@Essence > “Ready”@RSG) with CL=2; lost: Alpha-specific narrative criteria; kept: checklist-based readiness. Effect. A team may reuse Essence states as labels in RSG, but still maintains local checklists as StateAssertions.

  • ITIL Service Owner - RBAC Administrator. Typically CL=1 and directional (Administrator@RBAC > ServiceOwner@ITIL) rejected unless a policy Bridge enumerates compensating controls. Effect. Prevents “ops admin = service-accountability role” conflations without an explicit waiver.

Bridge invariants (role-relevant reminders)
  • Local first. Substitution never overrides in-Context role algebra (its own role relations, guards, and exclusions).
  • Loss honesty. If a Bridge’s loss notes indicate that a dropped characteristic is required by a step, substitution is invalid (regardless of CL).
  • No silent inversion. Direction is explicit; substitution does not reverse unless declared (F.9:13.7).

Reasoning primitives (judgement schemas)

All judgements are conceptual. They support or reject specific thinking moves-not enactment steps and not process-enactment records.

Bridge declaration

Bridge(A@RA, B@RB) : senseFamily, kind, dir, CL, Loss, scope

Reading: There exists a declared Bridge between SenseCells A and B with stated attributes.

Substitution scope (senseFamily-preserving)

Bridge(A,B): same senseFamily f, kind in {Equivalence, Narrower-than, Broader-than}, dir A->B, CL>=2, Loss L -> A may stand in for B at senseFamily f (Role-Assignment/Enactment-eligible)

Reading: A Substitution Bridge on the same senseFamily with CL >= 2 supports Role-Assignment/Enactment-level substitution in the stated direction. (Type-structure requires CL = 3.)

Naming-only scope

Bridge(A,B): kind in {Equivalence, Narrower-than, Broader-than, Partial-overlap}, CL>=1 -> A and B may share a label (Naming-only)

Reading: A Bridge with CL >= 1 supports using a shared label in prose or Concept-Set Naming-only rows, without structural or Role Assignment & Enactment commitments.

Prohibition by kind

Bridge(A,B): kind=Disjoint -> no substitution and no shared row

Reading: Disjoint supports neither substitution nor rows; only contrastive teaching remains supported.

Interpretation embargo

Bridge(A,B): kind in {Design-spec -> Run-trace, Measure-of, Policy-implies} -> Explanation-only

Reading: Interpretation Bridges never support substitution or rows.

row R uses {Bridge_i} -> scope(R) = min_i(scopeSupported(Bridge_i)) and CL(R) = min_i(CL_i)

Reading: The row scope and row CL are bounded by the weakest participating Bridge.

Direction guard

Bridge kind=Narrower-than with dir A->B -> not(B may stand in for A)

Reading: Narrower>Broader does not invert; only A may substitute into B under the stated scope.

SenseFamily purity

Bridge scope=Role Assignment & Enactment-eligible -> same senseFamily(A,B) and same stance(A,B)

Reading: Role Assignment & Enactment-level substitution requires same senseFamily and same stance (run-time or design time).

Loss accumulation

A->B with Loss L1 and B->C with Loss L2 -> A->C is supported only if the same senseFamily is preserved, CL=min(CL1,CL2), and Loss accumulates as L1 union L2

Reading: Chained substitution is rarer; if used, accumulate Loss and respect the minimum CL. When in doubt, avoid chaining across Contexts.

Relations

Builds on: E.10.D1 (Context discipline: Context = U.BoundedContext); F.0.1 (senseFamily guard; Bridge-only crossing); F.1 (Contexts fixed); F.2/F.3 (Cells exist); F.7 (rows depend on Bridges); F.8 (thresholds and reuse choice).

Coordinates with: F.9.1 for stance overlays that remain subordinate to bridge cards; E.17.1 when viewpoint bundles need explicit cross-family correspondence; C.16.Q / C.25 when evaluative endpoints or bundle-shaped quality families cite bridge cards without absorbing bridge semantics.

Constrains:

  • F.7 Concept-Set Table: each cross-context row must name supporting Bridges; row scope <= the weakest supporting Bridge.
  • F.8 Mint or Reuse: reuse choices reference CL and kind; no reuse without a Bridge.
  • Part C patterns: formal claims that span Contexts cite Bridges and respect senseFamily/StatusModality & CL constraints.
  • B.3 Trust & Assurance Calculus: may interpret CL as a penalty factor in Cross-context reasoning.

Migration notes (conceptual)

  1. Edition shift in a Context. Re-read affected Cells; if sense moved, split the Bridge or lower CL; keep the older Bridge for historical claims.
  2. New evidence of mismatch. Add a counter-example; decrease CL or change bridge kind (for example from Equivalence to Partial-overlap or Disjoint).
  3. Convergence over time. When invariants demonstrably match, and counter-examples evaporate, raise CL cautiously; for CL=3, cite invariants.
  4. senseFamily refactor. If a Cell’s senseFamily was mis-typed, fix the senseFamily first in F.3, then revisit Bridges; Interpretation is safer than forced substitution.
  5. Row under-protected. If a row’s scope exceeds the weakest Bridge, either split the row by Context or downgrade scope to Naming-only.
  6. Bridge sprawl. Consolidate near-duplicates into one Bridge with richer Loss Notes; retire the rest.

Acceptance tests (SCR/RSCR — concept-level)

Static conformance (SCR)

  • SCR-F9-S01 (Well-typed). Every Bridge names two SenseCells, each bound to a Context from F.1, and states senseFamily, kind, dir (if needed), CL, Loss, and scope.
  • SCR-F9-S02 (senseFamily discipline). Any Bridge that supports Role/Enactment-eligible substitution is senseFamily-preserving and has kind in {Equivalence, Narrower-than, Broader-than}.
  • SCR-F9-S03 (Loss visibility). Every Bridge has non-empty Loss Notes (the word "none" is valid only with CL=3 and stated invariants).
  • SCR-F9-S04 (Counter-example hygiene). Bridges with CL <= 2 carry at least one counter-example; Bridges with CL=3 cite matching invariants.
  • SCR-F9-S05 (Row compliance). Every Concept-Set row shows a scope no greater than the minimum CL across its supporting Bridges; no row relies on Interpretation Bridges.

Regression (RSCR)

  • RSCR-F9-E01 (Edition churn). When a Context's edition changes, re-validate all Bridges touching it; flag CL drift and update rows' scopes if needed.
  • RSCR-F9-E02 (Counter-example drift). New counter-examples lower CL; deletions do not automatically raise CL.
  • RSCR-F9-E03 (senseFamily drift). If a Cell's senseFamily is corrected, all Bridges crossing that Cell are re-typed; any substitution that would now cross senseFamilies is invalidated.
  • RSCR-F9-E04 (Weakest-link enforcement). Adding a low-CL Bridge to a row reduces the row's scope; if the row's published scope would exceed the new minimum, split or downgrade the row.

Didactic distillation (90-second script)

A Bridge translates between local senses from different Contexts. It always declares what relation holds (Equivalence, Narrower-than, Broader-than, Partial-overlap, Disjoint, or an interpretation such as Design-spec -> Run-trace), which CL value applies (CL 0-3), which way (when direction matters), and what is lost. Substitution is supported only on the same senseFamily and only with CL >= 2; Type-structure needs CL = 3. Interpretation Bridges explain, never substitute. Rows in the Concept-Set table obey the weakest-link: their scope cannot exceed the lowest CL among their Bridges. When editions change or counter-examples appear, lower CL or change bridge kind; if two senses truly converge and invariants match, raise to CL = 3, rarely and with reasons. Translate across Contexts; never collapse them.

Bridge stance overlay compatibility

A bridge card may carry a F.9.1 Bridge Stance Overlay such as localRename, operationalizes, partialAnalogy, projection, or nonEquivalent. The overlay is a local interpretive annotation and does not replace the underlying bridge kind, direction, CL, or loss notes.

Archetypal Grounding

Tell

A Bridge is not a synonym claim and not an enactment edge. It is a context-bounded correspondence record that tells a reader what may be reused, what may only be explained, and what is lost when meaning is transported.

Show (System lane)

A service team may reuse the word availability across monitoring, SLO review, and architecture discussion. F.9 requires the team to publish Bridge Cards that separate observation, status target, and architectural concern rather than treating the shared label as silent sameness. The benefit is that naming convenience survives while substitution rights stay bounded by senseFamily, CL, and Loss Notes.

Show (Episteme lane)

A comparative bundle may say that two traditions both discuss readiness or capability. Under F.9, that statement is only explanatory until the author publishes the two SenseCells, the Bridge kind, direction, CL, and the counter-example that marks where the comparison stops. The Bridge then becomes an auditable correspondence rather than a rhetorical shortcut.

Coarsened cross-context note is not yet a Bridge Card

A service or review bundle may circulate a short cross-context note such as the vendor bulletin is basically the same readiness signal as our rollback worksheet. That note may be useful as informal orientation talk, but it is not yet an admissible Bridge Card and not yet a formal F.9 Naming-only row.

Before any substitution, equivalence, Naming-only row, or interoperability claim is made, the source-bearing episteme or source publication needed for the Bridge Card must be reopened and an explicit Bridge Card must publish the two SenseCells, bridge kind, direction, CL, Loss Notes, and admissible use. Friendly summary prose does not carry bridge-bearing use by itself.

Bias-Annotation

Lenses tested: Gov, Arch, Onto/Epist, Prag, Did. Scope: Universal for cross-context correspondence and reuse.

  • Gov bias: F.9 raises the declaration bar by requiring explicit Bridge Cards. Mitigation: keep the card compact and teach weakest-link discipline as the default review heuristic.
  • Arch bias: the pattern prefers typed bridge declarations over friendly synonym prose. Mitigation: allow Naming-only scope and explanatory Interpretation Bridges so useful comparisons are not blocked.
  • Onto/Epist bias: F.9 is local-first and resists global meaning claims. Mitigation: reuse remains possible, but only through explicit correspondence, direction, and Loss Notes.
  • Prag bias: conservative CL assignment may feel slower than informal reuse. Mitigation: the pattern still supports bounded substitution when the evidence is good enough; it only blocks silent overreach.
  • Did bias: the didactic script can make Bridge Cards look simpler than they are. Mitigation: Conformance, counter-examples, and weakest-link rules keep the teaching explanation tied to real constraints.

Conformance Checklist (CC-F.9)

A Bridge publication conforms to F.9 iff:

  1. CC-F.9-1 - Well-typed Bridge declaration. Every Bridge names two SenseCells bound to declared Contexts and publishes kind, direction (if needed), CL, Loss Notes, and Bridge-supported use.

  2. CC-F.9-2 - Substitution discipline. Any substitution or row support comes only from a Substitution Bridge on the same senseFamily; Role Assignment & Enactment-level substitution requires CL >= 2, and Type-structure substitution requires CL = 3 plus matched invariants.

  3. CC-F.9-3 - Interpretation embargo. Interpretation Bridges remain explanation-only and are not used to justify substitution or Concept-Set rows.

  4. CC-F.9-4 - CL honesty and loss visibility. Bridges with CL <= 2 publish a counter-example or explicit boundary case; Bridges with CL = 3 publish the invariants that justify the higher-scope use; all Bridges publish Loss Notes.

  5. CC-F.9-5 - Weakest-link row discipline. Cross-context rows never claim a broader scope or higher row-level CL than the participating Bridges support.

  6. CC-F.9-6 - Overlay non-collapse. If a F.9.1 Bridge Stance Overlay is used, it remains an annotation and does not replace bridge kind, direction, CL, or Loss Notes.

  7. CC-F.9-7 - Registry-reference discipline. BridgeId and cited policy pins are treated as registry references, not as signature-exported semantic symbols.

  8. CC-F.9-8 - Coarsened cross-context note is not treated as a Bridge Card. If bridge-bearing reuse begins from a lighter note, summary, or comparison aid, the source-bearing episteme or source publication needed for the Bridge Card is reopened and a full Bridge Card is published before any equivalence, substitution, Naming-only row, interoperability, or other row admissibility is claimed.

Consequences

Benefits. F.9 lets FPF compare, translate, and partially reuse ideas across Contexts without collapsing them into one vocabulary. It gives downstream rows, claims, and assurance reasoning an explicit Bridge Card record instead of relying on prose intuition.

Trade-offs / mitigations. The pattern adds explicit bridge declaration and may feel heavier than informal comparison. Mitigation: use Naming-only scope when explanation is enough, and reserve higher-scope uses for Bridges that carry the required CL and invariants.

Rationale

The core move of F.9 is simple: cross-context work is unavoidable, but silent sameness is unacceptable. A Bridge therefore does two jobs at once:

  • it preserves practical reuse where bounded transport is genuinely available, and
  • it keeps non-identity visible through direction, Loss Notes, CL, and weakest-link scope.

Without that discipline, every shared label becomes a hidden ontology merger. With it, cross-context comparison stays teachable, auditable, and compatible with the rest of FPF.

SoTA-Echoing

SoTA note. This section does not mint an independent second bridge rule track. It stays truthful only when Bridge kinds, CL, Loss Notes, weakest-link scope, the A.6.3.CSC neighbor boundary, and the review matrix below still tell the same story about admissible cross-context reading.

Claim needSoTA practice (post-2015)Primary source (post-2015)Alignment with F.9Adoption status
Shared labels across contexts are not enough for supported cross-context reuse.Terminology and ontology practice distinguishes objects, concepts, definitions, designations, and typed relations instead of treating the same string as identity.ISO 704:2022; ISO 1087:2019; ISO/IEC 21838-2:2021 (BFO).F.9 requires typed SenseCells, bridge kind, direction where needed, CL, and Loss Notes rather than string-equals identity.Adopt/Adapt. Adopt explicit term/concept/relation discipline; adapt it into Bridge Cards; reject lexical sameness as reuse support.
Viewpoint and context boundaries must stay explicit when descriptions are reused.Architecture-description practice distinguishes an entity of interest, architecture description, viewpoint, view, model kind, concern, and correspondence.ISO/IEC/IEEE 42010:2022.F.9 binds every Bridge to declared Contexts and forces downstream rows to obey weakest-link scope instead of outrunning the supporting correspondences.Adopt. Adopt boundary-explicit architecture-description discipline and apply it to FPF cross-context bridge cards.
Data/catalog/validation practice separates metadata, validation conditions, and exchange support from substitution authority.Web-data and semantic-web standards make metadata, provenance, structural constraints, validation, and catalog federation explicit without turning metadata into the data itself.W3C Data on the Web Best Practices (2017); W3C SHACL (2017); W3C DCAT v3 (2024).F.9 separates explanatory/interpretive bridges from substitution bridges and keeps bridge publication distinct from coarsened notes or catalog-style discovery aids.Adapt/Reject. Adapt explicit metadata and validation practice; reject treating discovery, gloss, or validation support as substitution support.
Model-based engineering uses traceable model elements and formal semantics, but tool interoperability is not itself semantic identity.Current MBSE practice improves precision, traceability, and interoperability through explicit model elements, libraries, APIs, and formal semantics.OMG SysML v2.0 Language Specification (2025); OMG KerML v1.0 Specification (2025).F.9 uses Bridge Cards as human-readable, reviewable relations whose CL and loss fields remain narrower than and do not replace any hidden tool or model interchange claim.Adapt. Adopt traceable relation discipline; reject tool or interchange success as proof of same meaning.

Worked-slice docking. The nearest practical recovery loci here are the micro-examples in F.9:10, the worked examples in F.9:12, the revision law in F.9:14, and the review matrix in F.9:26. If the SoTA claim cannot be recovered through those explicit bridge-card loci, do not let the alignment rationale stand in for live bridge law.

Local stance. Best-known current practice supports a narrow rule: cross-context reuse is admissible only when correspondence is typed, directional where needed, explicit about loss, and narrower than silent lexical identity or convenience equivalence.

Bridge Card Publication Discipline

Minimal bridge-card declaration

A usable Bridge Card should make visible:

  • the two typed SenseCells,
  • the bridge kind,
  • direction where direction matters,
  • declared senseFamily,
  • CL,
  • explicit Loss Notes,
  • and the Bridge-supported use or row consequence.

If any of these fields is absent, later readers are forced back into inference by prose similarity, which is exactly what F.9 is supposed to block.

One-pair default rule

The default declaration discipline is one primary Bridge per cell pair per relevant senseFamily, with richer Loss Notes rather than many near-duplicate cards. Local exceptions are admissible only when the cards genuinely differ in bridge kind, direction, or admissible use.

Revision over silent drift

If later evidence changes bridge CL, direction, or loss, the Bridge Card should be revised explicitly. It should not be left in place while surrounding prose quietly changes the practical scope.

Bundle and Endpoint Interaction Law

Viewpoint and bundle interaction

Viewpoint bundles, quality bundles, and other endpoint bundles may cite Bridges, but they do not absorb bridge semantics. F.9 remains the pattern for cross-context alignment, while the citing bundle keeps its own ontology.

Quality-family interaction

When a quality family claim crosses contexts, bridge loss and CL affect what may be compared or reused, but they do not retype the quality family itself. Any resulting assurance penalty feeds R rather than changing the ontology of F, G, or the Q-Bundle head.

Overlay interaction rule

A F.9.1 stance overlay may help readers interpret a bridge, but the bridge card remains primary. If the overlay overstates the bridge kind, direction, CL, or Loss Notes, the card wins and the overlay should be narrowed or removed.

Review Matrix and Migration Tests

A reader can test bridge integrity with six questions:

  1. Are the two cells and contexts explicit?
  2. Is the bridge kind the least-committing truthful kind rather than the friendliest one?
  3. Does CL match the published counter-example or invariant evidence?
  4. Are Loss Notes specific enough that the Bridge-supported use is really bounded?
  5. If a row or bundle cites the bridge, does it stay within the Bridge-supported use?
  6. If a stance overlay exists, does it stay within the bridge card's kind, direction, CL, and Loss Notes?

Migration from legacy "same/equivalent/align/map" prose should therefore recover the Bridge Card first, then any row support, then any optional stance overlay. Doing it in the opposite order recreates silent equivalence under new vocabulary.

C.29 mathematical-lens use relation

When meaning, substitution, sense cells, direction, CL, or Bridge-supported use crosses context, write the F.9 Bridge Card first. Add the applicable C.29 output only for mathematical-lens use: candidate mathematical object, LensMappingMode, preserved and lost structure, exposed invariants or distinctions, lens-use admissibility value, admissible and non-admissible use, and stop condition. Do not duplicate Bridge semantics inside MathLensUse. A Bridge may make a mathematical lens interpretable across contexts without making it substitution-safe.

F.9:End

Bridge Stance Overlay

Type: Architectural (A) Status: Stable Normativity: Normative unless marked informative

Plain-name. Bridge-card stance overlay. One-line summary. BridgeStanceOverlay governs one stance annotation over an existing F.9 bridge card so authors can say how to read that bridge without changing its kind, direction, CL, or loss notes and without treating the overlay as bridge authority or as a cure for missing source-bearing return. Primary EntityOfConcern in plain terms. One overlay annotation attached to an existing F.9 bridge card; not the bridge card itself, not a second bridge kind, and not the pattern that governs coarsened renderings. Use this when. Use this overlay when an existing bridge card already exists and the real need is one compact stance label such as localRename, operationalizes, partialAnalogy, projection, or nonEquivalent that helps readers interpret that bridge without widening its substitution licence. Start here when. Your first honest artefact is already an F.9 bridge card, and the practical question is how to read that bridge rather than whether a bridge exists at all. What goes wrong if missed. Authors fall back to vague phrases like "roughly analogous" or "just a rename", and readers either over-read the gloss as silent bridge authority or under-read it as disposable style. What this buys. One compact interpretive gloss over an existing bridge card that stays reusable, keeps the bridge taxonomy stable, and still leaves source-bearing return and bridge publication duties where they belong. Not this pattern when. Not this overlay when the case is the bridge card itself under F.9, or when a coarsened rendering still needs source-bearing return before any bridge-bearing use is admissible; use A.6.3.CSC Controlled Semantic Coarsening for that coarsened-rendering relation.

Problem frame

When positions or trajectories in language-state work are compared across schools or contexts, authors often need a disciplined interpretive gloss on top of a formal bridge card. The gloss must help reading without becoming a second bridge taxonomy.

Problem

Authors often express stance informally ("roughly analogous", "really a projection", "just a rename"), which makes bridge interpretation unstable. A full second taxonomy would be worse: it would compete with the core bridge kinds.

Forces

ForceTension
Expressive stance vs bridge disciplineAdd interpretive clarity without introducing a rival bridge-kind system.
Reuse vs inflationMake stance annotations reusable across bundles while keeping bridge cards structurally governed by F.9.
Interpretive help vs substitution abuseHelp readers interpret a bridge without silently licensing substitution beyond what F.9 allows.

Solution

A Bridge Stance Overlay is a local interpretive annotation attached to an existing F.9 bridge card. It does not change the underlying bridge kind, direction, CL, or loss notes.

Starter overlay vocabulary

StanceIntended readingWhat it does not imply
localRenamethe target term is near-renaming within the current context boundary; if a cross-context relation is live, the F.9 bridge card must exist firstautomatic cross-context identity
operationalizesthe target is a procedural or operational reading aid over the declared bridgeenactment, implementation, execution permission, gate approval, A.15 work authority, or type-structure equivalence
partialAnalogysome explanatory pattern is shared, but only partiallyadmissible substitution
projectionthe target is a deliberate reduction or aspectual projection of the source bridge readingcompleteness, reversibility, loss governance, recoverability governance, narrower-use permission, or source reopen
nonEquivalentthe bridge card does not license equivalence or silent substitutionDisjoint, CL=0, or a full incompatibility verdict unless the bridge card itself says so

Boundary rule

A stance annotation is interpretive help for authors and readers. It is not a second bridge ontology, not a bridge card, and not a permission and not a publication with named authority-reference relation.

It is also not the coarsening governing pattern. Labels such as projection or nonEquivalent may help a reader interpret an already-declared bridge, but they do not carry source tether, narrower admissible use, non-admissible downstream use, or reopen duty for a coarsened rendering. If that coarsened-rendering relation becomes primary, it belongs to A.6.3.CSC Controlled Semantic Coarsening rather than being absorbed into stance language. If return to the source-bearing episteme or source publication is still needed before any bridge reading is admissible, reopen that episteme or publication before adding stance.

Relation to CL and loss

  • CL still governs substitution licence.
  • loss notes still govern what fails to carry.
  • stance annotations merely say how the author wants the bridge to be read.

If the stance materially affects interpretation, the bridge card should publish explicit loss notes that match it.

Archetypal Grounding

Tell. A stance annotation says how to read the bridge, not what the bridge kind structurally is.

Show (System). An operator alarm label may operationalizes a broader control cue without becoming identical to it.

Show (Episteme). A TAE felt-sense phrase may be only a partialAnalogy to a later formal term.

Bias-Annotation

Lenses tested: Gov, Arch, Onto/Epist, Prag, Did. Scope: Universal for stance overlays attached to existing F.9 Bridge Cards inside FPF. This pattern favors disciplined cross-school comparison and bridge readability over sweeping synonym claims. The main mitigation is that every stance remains subordinate to the underlying Bridge Card, its direction, CL, and loss notes, with explicit handoff to A.6.3.CSC when the issue under repair is source-bearing return for a coarsened rendering rather than bridge-card reading.

Conformance Checklist

  • CC-F.9.1-1 A stance annotation SHALL NOT replace the underlying F.9 bridge kind.
  • CC-F.9.1-2 Stance annotations SHOULD be accompanied by explicit loss notes when they materially affect interpretation.
  • CC-F.9.1-3 nonEquivalent SHALL block silent substitution.
  • CC-F.9.1-4 A stance annotation SHALL NOT claim higher-CL sameness than the bridge card's CL and kind allow.
  • CC-F.9.1-5 A stance annotation SHALL NOT stand in for source-bearing return when a coarsened rendering still needs reopen before any bridge-bearing reading is admissible; that relation belongs to A.6.3.CSC Controlled Semantic Coarsening.

Common Anti-Patterns and How to Avoid Them

  • Annotation as ontology. Do not treat stance as the bridge kind itself.
  • Friendly-vague analogy. If the relation is high-loss, say so explicitly.
  • Stance inflation. Do not use the annotation to smuggle in substitution rights that F.9 withholds.
  • Stance as coarsened-rendering cure. Do not add projection, localRename, or another overlay as if that repaired a coarsened note that still needs source-bearing return before bridge reading.

Consequences

The benefit is reusable interpretive clarity for bridge-heavy bundles and school comparisons. The trade-off is one more declared annotation layer on bridge cards.

Rationale

U.LanguageStateSpace and U.LanguageStateTransductionTrajectory create many legitimate cross-school comparisons. F.9.1 gives those comparisons a reusable stance vocabulary without fragmenting the underlying F.9 bridge discipline.

The practical gain is narrow but real: teams already use short stance glosses in review work, and without a governed overlay those glosses either smuggle bridge CL through casual wording or sprawl into a second bridge taxonomy. Keeping the overlay subordinate to the bridge card lets bundles reuse interpretive cues while the boundary rule and the worked projection anti-case keep source-bearing return and bridge publication duty where they belong.

SoTA-Echoing

SoTA note. This section does not mint an independent second bridge rule track. It stays truthful only when the boundary rule, conformance checklist, worked bridge-card examples, and legacy-note repair below still tell the same story about the stance staying subordinate to the bridge card.

Traditions covered. This overlay binds itself to comparative-theory glossing, design-translation annotation, operator documentation, and other practices that add short interpretive stance labels on top of already bridge-stance overlay relation cards.

Claim needSoTA practice (post-2015)Primary source (post-2015)Alignment with F.9.1Adoption status
A short stance label can help reading only if the underlying concept/relation remains explicit.Terminology practice distinguishes concepts, designations, definitions, and relations, and treats a designation as a representation of a concept rather than the concept itself.ISO 704:2022; ISO 1087:2019.F.9.1 lets a stance word such as localRename or projection guide reading only after the underlying F.9 bridge card remains primary.Adopt/Adapt. Adopt designation/concept separation; adapt it into local stance overlays; reject treating the stance word as a bridge kind.
Viewpoint notes and model annotations help users only when they remain subordinate to the described relation.Architecture-description and model-based engineering practice use viewpoints, views, model elements, and traceable semantics to keep explanatory descriptions tied to explicit underlying descriptions.ISO/IEC/IEEE 42010:2022; OMG SysML v2.0 Language Specification (2025).F.9.1 keeps stance overlays subordinate to bridge kind, direction, CL, and loss notes, with worked examples showing where the overlay helps and where it must wait.Adapt. Adapt viewpoint/traceability discipline to bridge-card reading; reject a second bridge taxonomy.
Shared operational names and semantic attributes aid observability and documentation, but common naming does not by itself license substitution.Contemporary observability practice standardizes common operation and data names while keeping those conventions tied to explicit resources, spans, metrics, logs, and profiles.OpenTelemetry Semantic Conventions (2025).F.9.1 adopts the value of short reusable glosses, but keeps them local to the bridge card and loss notes.Adapt/Reject. Adapt common-name discipline as a readability aid; reject common naming as proof of equivalence or completeness.
Validation and metadata practice keeps annotations inspectable instead of letting them replace the object they annotate.Semantic-web validation and catalog practice separates shapes/metadata from the data graph or dataset being described.W3C SHACL (2017); W3C DCAT v3 (2024).F.9.1 treats a stance overlay as inspectable annotation over a bridge card, not as a substitute bridge or source-return cure.Adapt. Use annotation discipline to keep stance local and reviewable.

Worked-slice docking. The nearest practical recovery loci here are the localRename, operationalizes, projection, and partialAnalogy examples in F.9.1:13.1 through F.9.1:13.4, plus the anti-case F.9.1:13.5. If the SoTA claim cannot be recovered through those worked slices and the early boundary rule, do not let the citation stand in for the live pattern law.

Local stance. Best-known current practice supports a narrow rule: stance labels are useful only when they stay visibly subordinate to a published bridge card, its direction, CL, loss notes, and reviewable source-cell and target-cell structure.

Relations

  • Builds on: F.9, C.2.2a.
  • Primary boundary: F.9 governs Bridge Card discipline; F.9.1 governs only stance overlays attached to existing Bridge Cards.
  • Coordinates with: A.16.0, E.17.1, A.6.P, A.6.A, C.16.Q, C.25, and B.4.1.
  • Constrains: local stance annotations on bridge cards used in comparative and tradition bundles.

Worked Bridge-Card Examples

localRename

A bridge card may relate two near-coextensive operational labels inside one declared context fragment and mark the stance as localRename. The bridge card still publishes its own direction, kind, CL, and loss notes. The stance only warns the reader that the author's intended reading is close renaming within that boundary; it does not license export of the rename beyond the stated fragment.

operationalizes

A broad capability cue may be bridged to a more procedural checklist or control ritual. The bridge card may carry the stance operationalizes to show that the target is being read as a procedural or operational gloss over the source. The relation can still be high-loss: the procedural target need not preserve the source's broader theoretical framing, and the stance does not claim type-structure sameness, implementation authority, execution permission, gate approval, or A.15 work authority.

projection

A rich construct may be mapped into a narrower reporting or measurement rendering. The bridge card may declare the stance projection when the target intentionally keeps only one aspect. The required loss notes should name the dropped dimensions, because the stance is informative only when the omitted structure is made explicit.

Table-level note: projection is only a stance over a declared bridge. It does not govern loss, recoverability, narrower admissible use, non-admissible downstream use, or source reopen for a coarsened rendering; that relation belongs to A.6.3.CSC Controlled Semantic Coarsening.

partialAnalogy and nonEquivalent

A comparative bundle may need to mention an explanatory resemblance across traditions without claiming substitution. In such cases partialAnalogy may guide reading when the shared pattern is local and declared. If review concludes that this local resemblance still lacks reuse support, nonEquivalent should be preferred so that apparent similarity does not drift into silent replacement. The label blocks equivalence and silent substitution; it does not by itself assert Disjoint or CL=0 unless the underlying F.9 bridge card says so.

projection is not a coarsened-note cure

A team may write a short comparison note saying that one report-only metric is basically a projection of a richer operations concept. That sentence does not by itself justify a projection overlay. First recover the underlying F.9 bridge card, its direction, CL, and Loss Notes from the source-bearing episteme or source publication needed for the Bridge Card. Only then may the overlay say how to read that bridge. If readers still need return to the source-bearing episteme or source publication before any bridge-bearing use is admissible, the overlay must wait; it cannot repair the missing bridge card.

Practical use guidance

  • Publish a stance overlay only on top of a complete bridge card that already declares bridge kind, direction, CL, and explicit loss notes where needed.
  • Choose the least-committing stance that truthfully describes the intended reading; do not upgrade the overlay merely because it sounds more helpful.
  • If multiple interpretive notes are needed, prefer one primary stance plus explicit loss notes rather than several competing overlays.
  • Use nonEquivalent when the main value of the annotation is to warn the reader away from substitution.
  • In comparative sets or tradition-focused bundles, place the overlay near the bridge card it qualifies so readers can inspect structural bridge data before reading the interpretive gloss.

A practical check is simple: ask whether the overlay merely helps reading or is covertly claiming extra sameness, transport, or substitution rights. If it does the latter, revise the bridge card itself rather than decorating it.

Legacy-note repair and boundary

Legacy comparative notes often contain undeclared stance language such as "roughly the same", "really a projection", or "just an operational version". When such a note is normalized, the first repair step is to recover the underlying bridge card in F.9; only then may a Bridge Stance Overlay be added as an explicit local stance annotation.

The pattern intentionally does not define a second bridge taxonomy, a new substitution calculus, or a score for bridge quality. Those responsibilities remain with the bridge card, CL, and declared loss discipline. Tradition bundles may carry many bridge cards with stance overlays, but the overlays remain local annotations attached to those cards, not free-standing comparative objects.

Overlay Declaration Discipline

A stance overlay is useful only when it stays visibly subordinate to the bridge card it qualifies.

Minimal overlay declaration

A usable stance overlay should normally publish:

  • the qualified F.9 bridge card,
  • the chosen stance term,
  • the local reason the stance is helpful,
  • and any loss emphasis that becomes especially important under that stance.

Without this declaration set, a stance word becomes a decorative gloss detached from the bridge it is supposed to interpret.

One primary stance per bridge card

A bridge card should normally carry one primary stance overlay. If several interpretive notes are needed, the extras should usually live in explicit loss notes or surrounding commentary rather than in several competing stance tags.

Overlay locality

A stance overlay is local to the bridge card and context fragment that publish it. Reusing the same stance label elsewhere is admissible only when the new bridge card independently supports that reading.

Interaction with CL, Direction, and Loss

CL remains prior

If the stance sounds friendlier than the declared CL, CL wins. An operationalizes or localRename overlay cannot overrule a high-loss bridge or a low-substitution CL declaration.

Direction-sensitive reading

Some stance labels read differently depending on bridge direction. A construct may project into a report-only rendering in one direction while the reverse direction is not admissible at all. Authors should therefore avoid stance prose that sounds symmetric when the bridge card is directional.

Loss emphasis rule

When a stance is likely to invite over-reading, the loss note should state a sharper boundary rather than soften it. The overlay is useful exactly because it helps interpretation; that is also why it can mislead if the losses are understated.

Bundle Use and Comparative Reading

Bundle-level reuse

Tradition bundles and viewpoint bundles may reuse the same stance vocabulary across many bridge cards, but the interpretation remains card-local. Bundle reuse is a readability aid, not a warrant that similarly named overlays are structurally equivalent.

Comparative stance caution

Two bridge cards may both be marked projection while dropping very different dimensions. Reviewers should therefore compare the loss notes and source-cell and target-cell structure, not the overlay term alone.

Boundary to second bridge taxonomy

If authors start grouping bridges primarily by stance label and ignoring bridge kind, direction, CL, or loss, they have implicitly created a rival bridge taxonomy. F.9.1 forbids that drift.

Review Matrix and Migration Tests

A reviewer can test stance-overlay integrity with five questions:

  1. Is the underlying bridge card complete and still primary?
  2. Does the overlay stay within the bridge card's structural claims?
  3. Would the same overlay still be truthful if read in the reverse direction? If not, the locality or directionality needs to be made clearer.
  4. Do the loss notes carry the interpretive claim that the overlay might otherwise overstate?
  5. Is the bundle using stance as a readability aid, or as a covert replacement for bridge ontology?

Legacy prose about things being "really the same", "only a projection", or "just an operational version" should therefore be migrated by recovering bridge kind, direction, CL, and loss first, then adding an overlay only if it still adds disciplined interpretive value.

F.9.1:End

Status Families Mapping (Evidence • Standard • Requirement)

“Keep statuses in their native modality; translate between Contexts explicitly.” Status. Architectural pattern. Builds on: E.10.D1 D.CTX (Context ≡ U.BoundedContext); F.1 (Contexts), F.2 (Seeds), F.3 (Local‑Senses → SenseCells), F.4 (Role Description Status templates), F.9 (Bridges). Coordinates with. B.3 Trust & Assurance Calculus (interprets CL penalties); Part C patterns: KD‑CAL (measurement semantics), Norm‑CAL (deontic logic), Method‑CAL (DesignRunTag).

Intent & applicability

Intent. Provide a simple, Context‑first way to express and compare status meanings across disciplines without collapsing modalities (epistemic vs deontic). We focus on three pervasive status families:

  1. EvidenceStatus (what the world shows) — epistemic modality.
  2. StandardStatus (what a canon sanctions) — deontic (curatorial) modality.
  3. RequirementStatus (what an obligation is doing) — deontic (compliance) modality.

Each status meaning is local to a Context (U.BoundedContext). Cross‑context relationships appear only via Bridges (F.9) with a declared kind and CL (congruence level).

Applicability. Whenever models mix observations, standards, and obligations: service acceptance from uptime measurements; safety proofs against normative checklists; ML model “validated” vs “approved for use”.

Non‑goals. No workflows, no tool states, no editorial lifecycles. This pattern defines conceptual meaning and safe reasoning moves, not procedures.

Problem frame

Without a modality‑aware mapping of statuses:

  • Homonym traps. Validated in metrology ≠ validated in software QA; approved in a standard ≠ compliant to a requirement.
  • DesignRunTag bleed. Design‑time “approved method” is used as if it proved run‑time “meets SLO”.
  • False substitution. Observed availability 99.95% is silently treated as SLO satisfied without declaring the translation.
  • Name inflation. New U.Types minted to stabilise drifting status words instead of fixing Contexts and Bridges.

Forces

ForceTension to resolve
Local fidelity vs Cross‑context reuseKeep native Context meanings, yet enable explanation and (sometimes) substitution.
Didactic simplicity vs status varietyMany status schemes exist; we need a small spine that admits Context synonyms.
Design vs runStandards speak design; evidence speaks run; requirements span both; do not swap them.
Safety vs utilitySubstitution is powerful but risky; explanation carries less substitution authority. Make the choice explicit.

Core idea (didactic)

Three families, two modalities, one habit. Treat every status word as a SenseCell with a declared StatusModality and inside one Context. When you must relate statuses across Contexts, declare a Bridge (F.9) that says what kind of relation, which CL value applies, which way (if narrower/broader), and what is lost. Prefer explanation Bridges; permit substitution only when kind/CL allow it.

Reading an Episteme. For every U.Episteme, read the EntityOfConcernSlot, ClaimGraphSlot, ReferenceSchemeSlot, ViewpointSlot, and carrier references under A.7 and MVPK. Statuses classify the Episteme; enactment remains with U.System and U.Work. (Formal identity rules: see KD‑CAL.)

Minimal vocabulary (this pattern only)

  • StatusFamily. Sub‑typing inside senseFamily=Status: one of EvidenceStatus, StandardStatus, RequirementStatus.
  • StatusCell. A SenseCell whose meaning is a status with a declared StatusModality ∈ {epistemic, deontic}
  • StatusModality. The mode of a StatusCell: epistemic or deontic. Use this term instead of the bare word modality per E.10 LEX rules.
  • Polarity. The orientation of a status relative to a claim/obligation: Positive (supports/satisfies), Negative (contradicts/violates), Neutral/Undetermined.
  • Window. The applicability span of a status (temporal or conditional), e.g., “Q3‑2025”, “under load ≥ 70%”.
  • Status target. The exact value the status qualifies: a claim (epistemic), a method or exact standard-governed project kind and reference (standard), or a clause (requirement).
  • Bridge (F.9). The only admissible way to relate StatusCells across Contexts; declares kind (≈, ⊑, ⊒, ⋂, ⊥, or an Interpretation arrow), CL, and Loss; substitution is modality‑preserving.

StatusModality guard. EvidenceStatus is epistemic; StandardStatus & RequirementStatus are deontic. Role Description Status templates (F.4) bind to these StatusModalities; no mixing. The bare token modality is against E.10/LEX); this pattern uses StatusModality.

The spine: three local ladders (Context‑native, small and renameable)

The following ladders are didactic spines. Each Context may rename levels or insert thin sub‑levels, but Bridges must state how they align to this spine (kind & CL). Names appear in Tech / Plain register.

  • Episteme‑as‑actor (forbidden). Never attribute Work to an Episteme; only Systems act.

  • Requirement vs Hypothesis. “Desired property/goal” is not Requirement status; use hypothesis/target + evaluation.

  • Mereology ≠ Provenance. Part‑whole edges never justify claims; use EPV‑DAG with carriers.

EvidenceStatus (epistemic statusModality)

EvidenceStatus order (lower-support to higher-support):

  1. Observed / Seen once.
  2. Measured / Quantified under a declared procedure.
  3. Corroborated / Seen independently (≥ 2 distinct sources/procedures).
  4. Replicated / Repeated by others under varied conditions.
  5. Refuted (negative polarity) / Counter‑evidence overrides prior levels.
  6. Inconclusive (neutral) / Insufficient signal.

Context alignment examples (illustrative): SOSA/SSN:ObservationObserved/Measured; GxP validation datapack may map to Replicated (if protocol diversity holds) with CL stated.

Invariants (context‑local): Replicated ⇒ Corroborated ⇒ Measured ⇒ Observed. Negative (Refuted) cancels positives within the same Window.

StandardStatus (deontic/curatorial statusModality)

Levels (design‑time stance):

  1. Candidate / Proposed, under review.
  2. Draft / Working text, not normative.
  3. Approved / Normative in this Context/edition.
  4. Deprecated (negative) / Discouraged; may be removed.
  5. Superseded (negative) / Replaced by a newer edition/profile.

Context alignment examples: ISO profile: Published International StandardApproved; IETF RFC (Proposed Standard)Draft/Approved depending on local policy; CL must be declared on the Bridge.

Invariants: At most one positive stance at a time per Context & edition; Superseded implies Approved held in a prior Window.

RequirementStatus (deontic/compliance statusModality)

Levels (run‑aware stance toward an obligation):

  1. Applicable / The clause binds in this Window.
  2. Inapplicable / Clause does not bind under stated conditions.
  3. Satisfied (positive) / Met within Window.
  4. Violated (negative) / Not met within Window.
  5. Waived (neutral/administrative) / Binding suspended with justification.
  6. Pending (neutral) / Awaiting evaluation or evidence.

Context alignment examples: ITIL4:SLO achievedSatisfied; ODRL:Duty fulfilledSatisfied; ODRL:Prohibition breachedViolated.

Invariants: For the same clause and Window, Satisfied and Violated are mutually exclusive. Applicable is a precondition for either; Waived switches off the precondition temporarily.

Contextual Citation Operators (pointer)

Citation operators (context‑scoped). Authors MAY use the typed edges supports, refutes, dependsOn, supersedes inside a single Context when expressing how an Evidence/Standard status applies. Formal semantics are governed by B.3.2 (Evidence & Validation Logic). Cross‑Context use requires a declared Bridge (F.9) and carries CL/Loss penalties.

Solution — how meanings connect (conceptual, notation‑free)

S‑1. Anchor status meanings per Context. Every status word (validated, approved, compliant) is treated as a StatusCell inside a specific Context. The ladder position is determined locally (e.g., “validated (metrology)” aligns to Replicated with CL stated; “validated (software)” may align to Corroborated).

S‑2. Attach statuses to the right Targets. EvidenceStatus → Claim or Quantity; StandardStatus → Method/Artefact; RequirementStatus → Clause. This prevents swapping “how we measure” with “what we promise”.

S‑3. Translate via Bridges, not by name. Example: Measured availability (SOSA) →ᴍᴇᵃ SLO clause (ITIL) with CL=2, Loss: sampling window & clock skew. This supports explanation; substitution (“Satisfied”) requires same StatusModality, a stricter Bridge kind (F.9) and a declared evaluation rule (from the Service pattern), not from F.10.

S‑4. Keep DesignRunTag honest. StandardStatus is design‑stance; EvidenceStatus is run‑signal; RequirementStatus spans both. Use Interpretation Bridges (F.9) for design↔run readings, not equivalence.

S‑5. Prefer explanation over substitution. If a Bridge cannot reach CL≥2 on the same senseFamily, do not substitute. Use Naming‑only rows or explanations; keep Role Descriptions (F.4) out of harm’s way.

Invariants (normative, lightweight)

  1. Modality purity. A StatusCell’s StatusModality is explicit and must not change during reasoning; cross‑modality claims require an Interpretation Bridge (F.9).
  2. Target typing. A status must name its Target kind: claim, artefact, or clause. Inferences that ignore the Target kind are invalid.
  3. Window discipline. Every positive/negative status names a Window; contradictions are detected within the same Window only.
  4. Local monotonicity. Within one context, a higher-support EvidenceStatus implies all lower-support positives for the same Target & Window.
  5. Mutual exclusivity (requirement). For a given clause & Window: not (Satisfied ∧ Violated).
  6. No free promotion. StandardStatus (Approved) does not entail RequirementStatus (Applicable or Satisfied).
  7. Bridge gate. Any Cross‑context comparison or reuse of a status must cite a Bridge (kind, CL, Loss); otherwise only context‑local reading is permitted.
  8. Weakest‑link propagation. When multiple Bridges contribute to a Cross‑context interpretation, the effective CL is the minimum (cf. F.7/F.9).
  9. Naming restraint. Status labels used across Contexts without a Bridge are Naming-only and non-operative for Role Assignment & Enactment decisions.

Micro‑illustrations (snapshots, not procedures)

  • Metrology → Service. Observed uptime (SOSA) with Window “July” plus Bridge →ᴍᴇᵃ to SLO clause (ITIL) yields: we can explain why “Satisfied” might hold if the Service pattern’s evaluation rule says so. F.10 itself does not declare “Satisfied”.

  • QA vs GxP “validation”. Validated (software QA Context) aligns to Corroborated (CL=1–2). Validated (GxP Context) aligns to Replicated (CL=2–3) with Loss: environment diversity. Equating them needs with CL stated or they remain separate.

  • “Approved model” ≠ “Compliant outcome”. StandardStatus: Approved for a MethodDescription does not imply RequirementStatus: Satisfied for a production clause. It only permits use; evidence must still speak.

Anti‑patterns & remedies

#Anti‑patternSymptomWhy it harms reasoningRemedy (conceptual move)
AP‑1“Validated ⇒ Approved ⇒ Compliant” chainA single word validated is treated as proving approval and compliance.Collapses statusModalities (epistemic → deontic); ignores Targets & Windows.Keep EvidenceStatus about claims, StandardStatus about artefacts/methods, RequirementStatus about clauses. Use two Bridges (evidence→requirement via interpretation + standard→requirement via policy), never one.
AP‑2Run‑time proves design‑timeA month of logs is cited as “therefore the method is approved.”Directional fallacy; design‑time approval is curatorial, not measured.Separate design vs run. Evidence may justify a proposal Bridge to Approved only in Contexts where such promotion exists; otherwise keep explanation‑only.
AP‑3“Approved model” ⇒ “SLO satisfied”Governance stamp is cast as automatic service compliance.StandardStatus does not entail RequirementStatus; the latter needs evidence.Require EvidenceStatus on the clause’s Window, then apply the evaluation rule (Service pattern).
AP‑4Synonym drift of status labelsVerified/validated/approved used interchangeably across Contexts.Homonymy across Contexts; undercuts claim support.Treat each status word as a StatusCell tied to its Context; relate only via Bridge(kind, CL, Loss).
AP‑5No WindowStatus claimed without time/condition (“Compliant.”).Unfalsifiable; blocks conflict detection.Every positive/negative status names a Window; contradictions checked per Window.
AP‑6Double truthSatisfied and Violated asserted for same clause silently.Violates mutual exclusivity; hides differing Windows.Force Window discipline; if Windows coincide, at least one assertion must retract.
AP‑7Substitute by name“SOSA Observation = ITIL SLO check”.Cross‑context equality without Loss accounting.Prefer explanation Bridges; allow substitution only when same statusModality, kind ∈ {≈,⊑,⊒}, CL≥project threshold, Windows aligned.
AP‑8Evidence escalation without diversityOne lab repeats itself and calls it “replicated”.Confuses repetition with independent replication.In EvidenceStatus, Replicated demands independent settings/sources; else keep at Corroborated.
AP‑9Clause‑less compliance“Compliant” with no clause named.Target missing; cannot evaluate.Every RequirementStatus points to a clause (Target).
AP‑10Negative erased by summaryA later summary lists Satisfied but omits earlier Violated in same Window.Cherry‑picks; breaks auditability.Apply Weakest‑link: within a Window, negative outranks prior positives for the same clause.
AP‑11Bridge‑free roll‑upCross‑context dashboards aggregate statuses as if native.Hidden Cross‑context semantics; CL unknown.Each Cross‑context line must cite Bridges; roll‑up shows the effective CL (min).
AP‑12Status explosionNew bespoke statuses minted to match every tool state.Pollutes lexicon; blurs statusModalities.Map tool states to the nearest ladder level in the local context; keep tool terms as Naming‑only where needed.

Worked examples

Each example names Contexts, shows StatusCells on their native ladders, and draws only the Bridges that F.10 allows.

Service acceptance from run‑time evidence

Contexts. SOSA/SSN (2017) — sensing; ITIL 4 (2020) — services; ODRL 2.2 — deontics (optional).

Local statuses.

  • SOSA:Observation(uptime)EvidenceStatus: Measured, Window July.
  • ITIL:SLO("99.9% monthly")RequirementStatus Target = clause SLO‑99.9, Window July.
  • ITIL:Practice("Monitoring pipeline")StandardStatus: Approved (design‑time).

Bridges.

  • Interpretation: Measured(uptime@July) →ᴍᴇᵃ SLO‑99.9 (kind = ⊑, CL = 2, Loss: sampling bias, clock skew).
  • Evaluation rule (Service pattern, local to ITIL Context): returns Satisfied iff mean uptime ≥ threshold across Window.

Result. We may explain the Satisfied conclusion for SLO‑99.9@July; we do not assert StandardStatus⇒RequirementStatus. If logs later show outages, a Violated@July replaces Satisfied@July (mutual exclusivity + Window discipline).

Safety controller: design approval vs run‑time duty

Contexts. State‑space control texts — design; IEC 61131‑3 — run; Norm‑CAL profile (safety layer) — deontics.

Local statuses.

  • ControllerSpec(v3)StandardStatus: Approved in the Norm‑CAL Context.
  • PLC:Task(log@Q3)EvidenceStatus: Corroborated for response time ≤ 50 ms, Window Q3.
  • Duty("Emergency stop ≤ 100 ms")RequirementStatus clause in Norm‑CAL.

Bridges.

  • Interpretation: Corroborated(response@Q3) Duty check (kind = ⊑, CL = 2, Loss: sensor latency).

Result. The duty may be Satisfied@Q3 with explanation. Approved spec alone never yields Satisfied; it authorises deployment but does not prove compliance.

ML model: validation vs fairness requirement

Contexts. ML validation canon — DesignRunTag hybrid; Policy Context (fairness charter) — deontics; SOSA/metrics — sensing.

Local statuses.

  • Model v12: cross‑val AUC=0.92EvidenceStatus: Corroborated (Windows: CV folds).
  • Policy: “Demographic parity Δ ≤ 0.1”RequirementStatus clause.
  • “Validation SOP v5”StandardStatus: Approved (governance method).

Bridges.

  • Measured(Δ@Aug) →ᴍᴇᵃ Policy clause (⊑, CL = 2, Loss: sampling variance).

Result. Satisfied@Aug (if Δ≤ 0.1 in production Window) is justifiable. Cross‑val AUC does not decide fairness; only production Δ does.

Medical device log: refutation

Contexts. SOSA/clinical observations; Regulatory profile.

Local statuses.

  • Observation: adverse eventEvidenceStatus: Observed@Week 34.
  • Requirement: “No AE in first 30 days”RequirementStatus clause.

Bridge & outcome.

  • Observation → Interpretation Bridge to clause check (kind: Interpretation, CL=3).
  • Violated@Week 34 overrides any earlier Satisfied@Week 34 (Weakest‑link; same Window).

Reasoning primitives (judgement schemas, notation‑free)

Premises ⊢ conclusion. No side effects. All moves are mental and Context‑aware.

  1. StatusModality classification σ is a StatusCell ⊢ statusModality(σ) ∈ {epistemic, deontic} Reading: Every status sits on exactly one statusModality.

  2. Target typing σ ⊢ targetKind(σ) ∈ {claim, artefact/method, clause} Reading: Evidence→claim; Standard→artefact/method; Requirement→clause.

  3. Window requirement σ has polarity ∈ {positive, negative} ⊢ window(σ) ≠ ∅ Reading: Pos/neg statuses must name a Window.

  4. Local ladder monotonicity (evidence) Replicated(τ,W) ⊢ Corroborated(τ,W) ⊢ Measured(τ,W) ⊢ Observed(τ,W) Reading: Higher-support status implies lower-support status within the same Window.

  5. Requirement exclusivity clause κ, window W ⊢ ¬(Satisfied(κ,W) ∧ Violated(κ,W)) Reading: A clause cannot be both satisfied and violated in one Window.

  6. Windowed refutation Refuted(τ,W) ⊢ cancels {Observed,Measured,Corroborated,Replicated}(τ,W) Reading: Negative evidence cancels positives only in the same Window.

  7. Explanation Bridge σ@C, τ@D, Bridge(C,D, kind∈{≈,⊑,⊒,⋂}, CL, Loss), sameStatusModality ⊢ explains(σ ⇒ τ) with ⟨CL,Loss⟩ Reading: Cross‑context explanation is permitted when statusModalities match.

  8. Substitution permission (guarded) explains(σ ⇒ τ) ∧ kind∈{≈,⊑,⊒} ∧ CL≥θ ∧ windowsAligned ⊢ maySubstitute(σ→τ) Reading: Substitution is allowed only above a project‑declared threshold θ (see F.7) and aligned Windows.

  9. Cross‑statusModality embargo statusModality(σ) ≠ statusModality(τ) ⊢ explains(σ ⇒ τ) requires Interpretation kind Reading: Crossing statusModalities is interpretation only; no direct substitution.

  10. Observation→Requirement clause (SOSA, Work outcomes) SOSA:Observation about Work outcomes ⊢ may interpret(RequirementClause κ) via Bridge(kind=Interpretation, CL, Loss); produces Evaluation(κ, Window); substitution forbidden Reading: Observations inform clause evaluation within a Window; they never become RequirementStatus. Use F.12 for the verdict pipeline.

  11. Weakest‑link CL {explains(σᵢ ⇒ τ) with CLᵢ} ⊢ effectiveCL(⋀ᵢ σᵢ ⇒ τ) = minᵢ(CLᵢ) Reading: Multiple Bridges compose by the minimum CL.

  12. Naming‑only safeguard noBridge(C,D) ⊢ crossContextUse(σ@C ⇒ τ@D) = namingOnly Reading: Without a Bridge, only explanatory prose is allowed—no status inferences.

  13. DesignRunTag honesty statusModality=deontic ∧ targetKind=artefact/method ∧ window=W ⊢ doesNotDecide(clause κ @ W) Reading: Approval of a method never decides a clause’s satisfaction for a run‑time Window.

Relations

Builds on: E.10.D1 D.CTX (Context discipline); F.1 (Contexts in view); F.2F.3 (Seeds→Local‑Senses→SenseCells); F.4 (Role Description Status template with statusModality/target/window slots); F.7 (Bridge taxonomy & CL semantics); F.9 (Bridge artefact).

Constrains:

  • F.4 (Role Description Status): a Role Description Status must select a StatusFamily, StatusModality, target kind, and Window.
  • F.8 (Naming): status labels reused across Contexts must be marked as Context‑scoped; global synonyms forbidden.
  • Part C patterns: KD‑CAL provides measurement semantics for EvidenceStatus; Norm‑CAL provides clause logic for RequirementStatus; Method‑CAL frames DesignRunTag for StandardStatus.

Used by. Service Acceptance (F.12), Assurance roll‑ups (B.3), any cross‑domain conformance narrative.

Migration notes (conceptual)

  1. New status word appears. Treat it as a StatusCell in its Context; place it on the local ladder; only then consider Bridges.
  2. Edition changes. If a Context redefines a status, fork the StatusCell (new SenseCell) and relate old↔new via a Bridge (often ⊑/⊒ with Loss).
  3. Threshold tuning. The project sets θ (minimum CL for substitution). Lowering θ widens reuse but increases risk; document the choice in F.7 terms.
  4. Clause redesign. If a requirement clause changes, keep old Windows intact; new clause starts a new Target; do not rewrite history.
  5. Explode→compress. When many bespoke tool statuses pile up, map them to the nearest ladder level in their Contexts; keep tool labels as Naming‑only.
  6. Bridge hardening. If explanation Bridges are used frequently, reconsider experiments that could raise CL enough to permit substitution—or accept explanation as sufficient and stop short of substitution.

Acceptance tests (SCR/RSCR — concept‑level)

Static conformance (SCR)

  • SCR‑F10‑S01 (Modality & Target). Every StatusCell declares StatusModality and target kind; none cross modalities.
  • SCR‑F10‑S02 (Windowed polarity). Every positive/negative StatusCell instance bears a Window.
  • SCR‑F10‑S03 (Local order). EvidenceStatus instances satisfy monotonicity; RequirementStatus enforces mutual exclusivity per clause+Window.
  • SCR‑F10‑S04 (Bridge citation). Any Cross‑context comparison cites a Bridge(kind, CL, Loss); absent that, mark as naming‑only.
  • SCR‑F10‑S05 (Substitution guard). Any substitution claim checks same StatusModality, kind ∈ {≈,⊑,⊒}, CL≥θ, Windows aligned.
  • SCR‑F10‑S06 (Weakest‑link). Where multiple Bridges feed one conclusion, the displayed effective CL is the minimum.

Regression (RSCR)

  • RSCR‑F10‑E01 (Edition churn). Adding a new edition of a Context does not retro‑change past status conclusions; only new Windows see new meanings.
  • RSCR‑F10‑E02 (Threshold change). If θ changes, re‑evaluate only substitution conclusions; explanations remain valid.
  • RSCR‑F10‑E03 (Bridge drift). When a Bridge’s CL/Loss changes, recompute affected effective CL; substitution conclusions below θ revert to explanation.
  • RSCR‑F10‑E04 (Contradiction catch). Adding a negative status within a Window cancels prior positives for the same clause (or raises a flagged contradiction if both persist).

Didactic distillation (90‑second script)

Three families, two modalities. Evidence tells us what the world shows (Observed→Measured→Corroborated→Replicated; Refuted cancels) — epistemic; Standard tells us what a canon sanctions (Candidate→Draft→Approved→Deprecated→Superseded) — deontic; Requirement tells us what an obligation is doing (Applicable/Inapplicable; Satisfied/Violated; Waived/Pending) — deontic. Every status is a StatusCell inside one Context with exactly one StatusModality, a Target, and a Window. When you must relate status meanings across Contexts, draw a Bridge that states the kind (≈, ⊑/⊒, ⋂, ⊥ or Interpretation), the CL value, and the Loss (what you ignore). Prefer explanation; allow substitution only when statusModalities match, kind permits, CL≥θ, and Windows align. Keep design vs run stance honest: approval is design‑time, evidence is run‑time, requirements span both. With this habit, “validated”, “approved” and “compliant” stop being a muddle of synonyms and become precise, local meanings you can compare safely and audibly.

F.10:End

Method Quartet Harmonisation

“Keep the how (Method), the recipe (MethodDescription), the happening (Work/Execution), and the control push (Actuation) in their own Contexts—then relate them explicitly.”

Status. Architectural pattern. Builds on: E.10.D1 D.CTX (Context discipline); A.3/A.3.1/A.3.2 (Transformer Constitution; U.Method, U.MethodDescription); A.15/A.15.1 (U.Work as record of occurrence); Sys‑CAL (control/actuation semantics); KD‑CAL (observation). Coordinates with. F.1F.3 (Contexts, Seeds → SenseCells), F.4 (Role Description), F.5 (Naming), F.6 (Role Assignment & Enactment Cycle (Six-Step)), F.7/F.9 (Bridges), F.10 (Status families & Windows). Aliases (informative). Method/Spec/Work or Actuation split; DesignRunTag harmonisation.

Intent & applicability

Intent. Provide a notation‑free, Context‑aware map that keeps four notions distinct and connectable:

  • U.Method — the abstract way of doing (design‑time concept).
  • U.MethodDescription — the recipe episteme that describes a Method.
  • U.Work (informal: Execution) — the run‑time occurrence of doing (recorded event).
  • U.Actuation — the control output applied to a plant (domain‑specific Work in Sys‑CAL).

The pattern makes the split usable across FPF patterns (Role Assignment & Enactment, Sys-CAL, KD-CAL, Kind-CAL, planned LCA-CAL) and legible across Contexts (SPEM/BPMN for design; PROV-O/SOSA for run; IEC 61131-3/state-space for control).

Applicability. Any time a discussion risks mixing designs with executions, recipes with runs, or workflow with control signals; whenever you need to name or reason about “how we do X”, “the SOP/script/model”, “the actual run”, or “the actuator push”.

Non‑goals. No team workflow, no editors, no tools. No prescriptive file formats. Only conceptual distinctions and safe reasoning moves.

Problem frame

When Method, MethodDescription, Work, and Actuation collapse into one another, models drift:

  1. DesignRunTag blur. A BPMN process (design graph) is cited as if it had happened.
  2. Recipe/approval fallacy. An approved SOP (MethodDescription) is treated as proof that the service met its SLO.
  3. Execution ≟ control. PLC task execution logs are conflated with control outputs (actuation), hiding stability issues.
  4. Cross‑context homonymy. Activity, task, execution, process, command change sense across Contexts; inferences quietly break.

Forces

ForceTension to resolve
Fidelity vs didacticsWe must honour domain nuance yet teach a split that fits in working memory.
Universality vs localityQuartet must be reusable across FPF patterns, while meanings stay context‑local.
Evidence vs approvalEvidence (run‑time) should support decisions, but must not be mistaken for deontic approval (design‑time).
Action vs signalExecuting a method is not the same as emitting a control signal; both can co‑occur in one scenario.

Core idea (didactic)

Four boxes, four arrows, zero leakage.

  • Box 1 — Method (design). The idea of how to achieve an effect (algorithm, clinical pathway, welding technique).
  • Box 2 — MethodDescription (design, epistemic). The written/encoded recipe that describes a Method (SOP, code, BPMN/SPEM model, theorem‑prover script).
  • Box 3 — Work (run). The occurrence where a System‑in‑Role enacts (some version of) the Method. U.Work is the record of this event.
  • Box 4 — Actuation (run, Sys‑CAL). The control output (setpoint/command) issued to influence a plant during Work.

Arrows (conceptual relations).

  • MethodDescription ↦ Method (describes) — design stance.
  • Work ↦ MethodDescription (followedRecipe? yes/no/variant) — run stance referencing design.
  • Work ↦ Method (enacts) — run stance referencing the abstract way.
  • Actuation ↦ Work (part‑of / occurs‑during) — control output inside execution.

Each box/arrow is context‑local (SPEM, PROV‑O, IEC…). Cross‑context relations use Bridges (F.7/F.9) with CL/Loss.

Minimal vocabulary (this pattern only)

  • Context = U.BoundedContext (per D.CTX).
  • Local‑SenseSenseCell (F.3): the address (Context × sense) for a term like process, task, activity, command.
  • Concept‑Set (F.7/F.8): row aligning multiple SenseCells as “what we regard as the same” (after Bridges & losses are declared).
  • Window (F.10): temporal/conditional envelope (e.g., July, during test run T42, under load ≥ 70%).
  • StatusCell (F.10): laddered status about methods/specs/works (e.g., Approved (spec); Observed/Measured (work)).

Solution — the quartet lens (notation‑free)

Not steps for a team—lenses for a thinker. Use them to sanity‑check any statement about “how”, “script”, “run”, or “signal”.

The stance split (design vs run)

  • If the claim is about what should be done or how it is described, you are on the design stance (Method or MethodDescription).
  • If the claim is about what happened or what was emitted, you are on the run stance (Work or Actuation).
  • Guard rule. Never let a conclusion cross stances without (a) an explicit Bridge kind (interpretation vs substitution), and (b) an acceptable CL (F.7/F.9, F.10).

The recipe/idea split

  • Method is the idea; MethodDescription is the recipe describing that idea.
  • Different recipes may describe the same method (profiles, languages, detail profiles); one recipe may encode several methods (composite SOP).
  • Naming guard. Keep labels distinct: compressive‑strength test (Method) vs ASTM C39‑18 (MethodDescription).

The happening (Work) with signal (Actuation)

  • Work is the occurrence (a PROV Activity, an IEC Task executing a program, a lab run).
  • Actuation is the control output (setpoint, PWM command, valve open %) emitted during Work.
  • You can have Work without Actuation (analysis job), or Actuation without a complex Method (manual push). Many scenarios have both.

The Role Assignment & Enactment touch-points

  • Roles (F.4) bind who enacts the Method at run‑time (behavioural masks), not what permissions they hold (RBAC is a different Context).
  • Statuses (F.10) bind to the right box: Approved → MethodDescription; Measured/Observed → Work; Satisfied/Violated → Requirement clause about the Work’s outcomes within a Window.

Harmonisation map (Context‑first)

Examples of local SenseCells and safe Bridges. You may keep the exact Contexts from your F.1 cut.

Design (ideas & recipes).

  • SPEM/ISO 24744 Context: SenseCell{Method} = Activity Definition / Task Definition; SenseCell{MethodDescription} = Process Description / WorkProduct (as recipe).
  • BPMN 2.0 Context: SenseCell{MethodDescription} = Process (diagram) as design‑time recipe (do not confuse with run).
  • OWL/Kind-CAL Context: labels for Method kinds (type taxonomies) when needed (naming, not behaviour).

Run (occurrences & outputs).

  • PROV‑O Context: SenseCell{Work} = Activity (time‑bounded occurrence).
  • SOSA/SSN Context: Observations about Work results (feeds EvidenceStatus).
  • IEC 61131‑3 Context: SenseCell{Work} = Task executes Program (runtime); SenseCell{Actuation} = Output command / setpoint emitted by the program.

Typical Bridges (with intent).

  • BPMN:Process (design) SPEM:Process Definition (design↔design; CL depends on modelling profile; Loss: expressiveness gaps).
  • IEC:Task execution PROV:Activity (run↔run; Loss: control‑specific timing semantics, scan cycles).
  • Actuation (IEC) Activity (PROV) (intersection: the sub‑intervals where outputs are emitted).
  • SOSA:Observation interprets Requirement clause (F.10) about Work outcomes (cross‑StatusModality: epistemic→deontic; never substitution; declare Bridge(kind=Interpretation, CL, Loss)).

Invariants (normative)

  1. DesignRunTag honesty. Statements about Method or MethodDescription (design) MUST NOT be used as if they were statements about Work or Actuation (run) without an explicit Bridge and Window.
  2. Box discipline. Every claim about “how”, “recipe”, “run”, or “control output” MUST point to the correct box in the quartet.
  3. Context locality. Terms (process, activity, task, command) MUST be read as SenseCells in their Contexts (F.3); Cross‑context equivalence is a matter for F.7/F.9 Bridges.
  4. Status placement. Approved attaches to MethodDescription; Observed/Measured attach to Work; Satisfied/Violated attach to clauses about Work outcomes within a Window (F.10).
  5. Actuation as Work‑part. Actuation MUST be modelled as occurring within (or as a specialised form of) Work on the run stance; it does not replace Work.
  6. Naming clarity. Technical/Plain labels for the quartet SHOULD be distinct (F.5); avoid homonymous single‑word labels when Contexts collide.
  7. Bridge guard. Cross‑context moves MUST declare kind (≈, ⊑, ⊒, ⋂, ⊥, Interpretation), CL, and Loss (F.7/F.9).

Micro‑examples (didactic)

  1. Data pipeline deploy (software). Method: “Delta‑load transform”. MethodDescription: etl_delta.py@v3. Work: nightly run 2025‑07‑14. Actuation: none. Statuses: Spec Approved (governance Context); Work Measured (rows processed) → Evidence for SLO (F.10).

  2. Valve control (industrial). Method: PID tuning heuristic. MethodDescription: SOP sheet + IEC program. Work: PLC task cycle 18:00–18:30. Actuation: PWM duty sequence. Bridge: IEC:TaskPROV:Activity (CL=2). Observed setpoint tracking interprets requirement “settling time ≤ 5 s”.

  3. Clinical assay (lab). Method: ELISA. MethodDescription: Kit IFU v7. Work: run batch #B217. Actuation: pipetting robot commands. Statuses: Spec Approved ≠ batch Satisfied (requires evidence at batch Window).

Anti‑patterns & remedies

#Anti‑patternSymptom in prose/modelsWhy it harms thinkingRemedy (conceptual move)
A1Design→Run Substitution“The process achieved X” while pointing to a design diagram.Treats a MethodDescription as if it were Work; collapses stances.Apply the stance split: restate as “The diagram describes how X should be achieved.” To claim it happened, reference a Work SenseCell in a run‑time Context and, if needed, add a Window (F.10).
A2Approval = Evidence“Approved SOP ⇒ requirement satisfied.”A StatusCell about a MethodDescription does not entail a run‑time outcome.Keep Approved on Spec; place Satisfied/Violated on clauses about Work within a Window; require Observation/Evidence (KD‑CAL) for the run side.
A3Execution = ActuationPLC log of setpoints recorded as the whole execution history.Loses non‑signal aspects (delays, conditions, context); removes reasoning support.Model Actuation as within Work. Keep both SenseCells: Task execution (Work) and Command/Setpoint (Actuation).
A4BPMN‑as‑RunBPMN Process treated as “the thing that ran.”BPMN’s meaning is context‑local and design‑time.Use a Bridge (F.7/F.9) from BPMN:Process (design)PROV:Activity (run) with kind Interpretation, CL/Loss declared.
A5Spec Drift RetroactivityUpdate to a recipe is assumed to modify past executions.Violates temporal honesty; breaks auditability.Past Work remains as‑was. New MethodDescription versions describe future Work only; record variant relations if a run deviated.
A6Homonym CollapseTask, activity, process used interchangeably across Contexts.Imports meaning implicitly; masks losses.Prefix with Context and use SenseCells: e.g., task (IEC), activity (PROV), process (BPMN). Any relation uses Bridges with CL/Loss.
A7Signal‑Only ComplianceSLO judged solely from actuator traces.Ignores measured outcomes; risks false positives.Tie SLO clauses to Observations (KD‑CAL) about Work outcomes; treat Actuation as an input, not proof.
A8Recipe-as-Role“The Spec assigns responsibility” (mixes MethodDescription with Role constructs — U.RoleDescription/U.RoleAssignment).Conflates the U.MethodDescription episteme with behavioural masks.Use F.4 Role Description; let MethodDescription only describe a Method.
A9One‑Context ScopeA single Context (e.g., BPMN) used as if it covered control/measurement.Scope mirage; silent cross‑domain generalisation.Re‑cut Contexts (F.1) to include control and sensing. Re‑express statements with the quartet across those Contexts.
A10Lossless Bridge AssumptionClaiming “equivalent” across Contexts without Loss.Hides mismatches; unsafe transfer of inferences.In F.7/F.9 declare Bridge kind, CL, and explicit Loss notes.
A11Recipe‑as‑TypeTreating a MethodDescription vocabulary as a type taxonomy.Category error; misuses Kind-CAL.If a stable hierarchy of kinds of Methods is needed, mint U.Type nodes in Kind-CAL; keep MethodDescription as description only.
A12Actuation Outside WorkCommands modeled without enclosing Work.Severs signal from enactment context; breaks traceability.Embed Actuation within Work intervals; relate to the enacting Role and Method or MethodDescription references.

Worked examples (extended)

Each scenario names Contexts (from your F.1 cut), identifies the quartet boxes, and shows safe Cross‑context moves.

ML service rollout (software + services + sensing)

  • Contexts: SPEM/ISO 24744 (design), PROV‑O (run), SOSA/SSN (sensing), ITIL 4 (services).

  • Quartet:

    • Method: Canary deployment strategy.
    • MethodDescription: Canary plan document with traffic slices and rollback rules (design Context).
    • Work: Two canary runs 2025‑08‑02 10:00–12:00 (PROV‑Activities).
    • Actuation: Traffic‑shifting commands (if modeled, they are outputs inside Work; optional in pure software).
  • Statuses (F.10): Spec Approved; Work Observed (latency/err‑rate via SOSA Observations); SLO clause Satisfied in Window if measured ≤ thresholds.

  • Bridge(s): BPMN (if used) Process (design)PROV Activity (run) Interpretation, CL=2, Loss: path vs time granularity.

Pay‑off: No one infers SLO satisfaction from a plan. Evidence is about Work; the plan stays design‑time.

Industrial furnace control (control + sensing + services)

  • Contexts: State‑space control texts (design), IEC 61131‑3 (run), PROV‑O (run), SOSA/SSN (sensing), ITIL 4 (services).

  • Quartet:

    • Method: PID with feed‑forward.
    • MethodDescription: Controller tuning sheet + program description.
    • Work: PLC task cycles 14:00–14:30 (IEC Task executes Program), Bridged as PROV Activity.
    • Actuation: Setpoint & valve duty cycle outputs emitted during Work.
  • Statuses: Spec Approved; Work Observed (temperature curve); requirement settling time ≤ 5 s Satisfied if the observation within Window meets it.

  • Bridge(s): IEC:TaskPROV:Activity (CL=2, Loss: scan‑cycle semantics). SOSA:Observation interprets requirement clause (CL=3).

Pay‑off: Separates doing from pushing, and both from measuring; compliance judged where it belongs.

Clinical assay

  • Contexts: SPEM/ISO 24744 (design), Lab assay canon (DesignRunTag split as per discipline), PROV‑O (run), SOSA/SSN (sensing).

  • Quartet:

    • Method: ELISA.
    • MethodDescription: Kit IFU v7 (instructions for use).
    • Work: Batch B217 performed 2025‑06‑21 (PROV Activity).
    • Actuation: Pipetting robot commands (optional detail).
  • Statuses: Spec Approved; Work Observed (absorbance readings); Quality gate Satisfied within batch Window.

  • Bridge(s): IFU (design) interprets Activity (run) for acceptance (CL=2, Loss: deviations allowed per kit tolerances).

Pay‑off: A clean line from recipe → run → measurement → decision, without role-assignment and status-assertion conflation.

F.11:11.4 Incident response (services + enactment)

  • Contexts: ITIL 4 (services/design), BPMN 2.0 (design), PROV‑O (run).

  • Quartet:

    • Method: Triage‑first incident handling.
    • MethodDescription: Incident workflow diagram + playbook.
    • Work: Handling INC‑3421, 09:10–10:02 (PROV Activity).
    • Actuation: none (unless modeling command invocations as outputs).
  • Statuses: Spec Approved; Work Observed (timestamps, response time); SLO “MTTR ≤ 60 min” Satisfied within the incident Window.

  • Bridge(s): BPMN (design) → PROV (run) Interpretation, CL=2, Loss: gateways vs real‑time branching.

Pay‑off: MTTR claims are tied to Work, not to the playbook.

Reasoning primitives (judgement schemas)

Pure mental moves; no storage or workflow is implied.

  1. Box classifier statement s, Contexts fixed ⊢ box(s) ∈ {Method, MethodDescription, Work, Actuation} Reading: Classify any claim by its box (design idea, design recipe, run occurrence, control output).

  2. Stance firewall box(s) ∈ {Method,MethodDescription} ⊢ s ∉ {claims about Work outcomes} Reading: A design‑time (stance) statement does not assert a run‑time (stance) outcome.

  3. Followed‑recipe judgement Work w, MethodDescription m ⊢ follows(w,m) ∈ {exact, variant, none} Reading: A Work may follow a recipe exactly, with a variant, or not at all; later inferences must respect this value.

  4. Enactment link Work w, Method h ⊢ enacts(w,h) Reading: The occurrence enacts the abstract Method (even if several specs describe it).

  5. Actuation inclusion Actuation a, Work w ⊢ occursWithin(a,w) Reading: Control outputs are within (or are parts of) a Work interval.

  6. Observation binding (KD‑CAL handshake) Observation o about outcome(x) during Window W of Work w ⊢ evidenceFor(w, clause(x,W)) Reading: Measurements about a Work outcome within a Window serve as evidence for clauses about that Work.

  7. Clause evaluation (F.10 handshake) evidenceFor(w,clause) ⊢ status(clause,w) ∈ {Satisfied, Violated, Inconclusive} Reading: A clause about Work yields a status via the observation set.

  8. Context locality term t, Context C ⊢ meaning(t)@C is local Reading: A term’s sense is local to its Context; Cross‑context claims require Bridges.

  9. Bridge application (F.7/F.9) Bridge B: (X@A) ~kind,CL,Loss~ (Y@B); fact about X ⊢ transferableTo(Y) with penalty(CL,Loss) Reading: Facts may transfer across Contexts only along a declared Bridge, with the stated penalty.

  10. Version non‑retroactivity MethodDescription m updated → m' ⊢ ∀ past Work w: follows(w,m')=none (unless w references m') Reading: New recipes don’t rewrite history.

  11. Composite reasoning MethodDescription m = m1 ; m2, Work w executes steps w1,w2 ⊢ enacts(w1,m1) ∧ enacts(w2,m2) Reading: Composition on design does not force composition on run, but when it aligns you may relate sub‑runs to sub‑methods.

  12. SLO attachment guard SLO clause about service outcome ⊢ attachesTo(Work-window), not MethodDescription Reading: Service obligations concern what happened within a Window, not the existence of a plan.

Relations

Builds on: E.10.D1 D.CTX (Context ≡ U.BoundedContext); A.3/A.3.1/A.3.2/A.15 (Method/Spec/Work foundations); Sys‑CAL (Actuation semantics); KD‑CAL (Observation); F.1F.3 (Contexts → SenseCells); F.10 (Status families & Windows).

Constrains:

  • F.4 Role Description: Roles or Statuses must point to the right box (e.g., Approved → MethodDescription; Observed → Work).
  • F.5 Naming: Enforce distinct Tech/Plain labels for Method/Spec/Work or Actuation where homonyms threaten.
  • F.7/F.9 Bridges: All Cross‑context assertions among quartet terms must go through explicit Bridges with kind/CL/Loss.

Used by. Part C patterns (Sys‑CAL, KD‑CAL, Method‑CAL, Kind-CAL, LCA‑CAL) when describing examples, proofs, and cross‑disciplinary mappings.

Migration notes (conceptual)

  1. Split conflated “process”. Where a single “process” node stands for both plan and run, refactor into MethodDescription (design) and Work (run); add a Bridge if the prose relied on identity.
  2. Reassign statuses. Move any Approval-like statuses from Work to MethodDescription; move Satisfied/Violated from Spec to clauses about Work within Windows.
  3. Expose actuation. If control outputs are buried in “execution logs,” mint Actuation SenseCells and relate them within Work.
  4. Version fences. Past Works keep references to the version of MethodDescription they attempted to follow; don’t update those links retroactively.
  5. Name collisions. Where task/activity/process appear with mixed meanings, prefix with Contexts and relabel per F.5 (Tech/Plain).
  6. Backfill Bridges. If earlier text implied Cross‑context equivalence, add explicit Bridges (F.7/F.9) declaring kind/CL/Loss.

Acceptance tests (SCR/RSCR — concept level)

Static conformance checks (SCR)

  • SCR‑F11‑S01 (DesignRunTag honesty). Every normative claim about outcomes is attached to Work (with Window), not to Method or MethodDescription.
  • SCR‑F11‑S02 (Box placement). Labels and statuses appear on the correct box (e.g., Approved on MethodDescription only).
  • SCR‑F11‑S03 (Actuation inclusion). All Actuation statements are modeled as within a Work interval.
  • SCR‑F11‑S04 (Context discipline). Each quartet term is expressed as a SenseCell with its Context; no Cross‑context identity is asserted here.
  • SCR‑F11‑S05 (Bridge guard). Any Cross‑context reasoning among quartet terms references an explicit Bridge with kind/CL/Loss.

Regression checks (RSCR)

  • RSCR‑F11‑E01 (Spec update). When a MethodDescription changes, previous Works remain valid and unchanged; their statuses don’t shift unless re‑evaluated with explicit rationale.
  • RSCR‑F11‑E02 (Bridge drift). If a Context updates, revisit Bridges that touch quartet terms; adjust CL/Loss only via F.7/F.9.
  • RSCR‑F11‑E03 (Status drift). Adding new statuses does not move them across boxes (e.g., no new “Work‑Approved”).
  • RSCR‑F11‑E04 (Signal creep). Introducing new Actuation details does not erase or replace Work context.

Didactic distillation (90‑second script)

“When you talk about how something is done, decide which of the four boxes you mean. Method is the idea (the way). MethodDescription is the recipe (the description). Work is the happening (what actually occurred). Actuation is the control push (signals emitted during Work). Keep design and run as distinct stances. Plans and approvals live in the design stance; measurements and obligations live in the run stance within Windows. Words like process, task, activity, command are context‑local—say process (BPMN), activity (PROV), task (IEC). If you must relate them, draw a Bridge and declare its kind, CL, and Loss. For compliance, don’t point at the plan—point at Work, show Observations, and judge clauses in F.10. Hold this quartet in your head and you’ll stop mixing plans with facts, signals with outcomes, and names across Contexts. + Everything else—naming (F.5), U.RoleDescription (F.4) and U.RoleAssignment/U.RoleEnactment (A.2.1/F.6), Bridges (F.7/F.9)—falls into place.

F.11:End

“Judge promises on what happened, not on what was planned.” Status. Architectural pattern. Builds on: F.1 context of meaning (U.BoundedContext); F.2 Term Harvesting; F.3 Intra‑Context Sense Clustering; F.5 Naming Discipline; F.7/F.9 Bridges & CL; F.10 Status Families & Windows; F.11 Method Quartet Harmonisation; A.2.3 U.PromiseContent. Coordinates with. KD‑CAL (Observation/Characteristic/Scale); Sys‑CAL (Work or Actuation contexts). Non‑goals. No team workflows, no tooling, no editorial procedures. This pattern specifies how to think about acceptance, not how to store or operate systems.

Intent & applicability

Intent. Provide a conceptual binding that turns a service promise (SLO/SLA clause) into a clear, local, time‑bounded judgement about actual Work, using Observations as evidence and explicit Bridges where Cross‑context notions must meet. The result is a Status (Satisfied/Violated/Inconclusive) that attaches to the clause‑about‑that‑Work‑in‑that‑Window.

Applicability. Any situation where a service promise clause (promise content) is published (availability, latency, safety margin, response time, quality gate, compliance duty) and its fulfilment must be decided from what occurred. Works across digital services, industrial control, laboratory processes, clinical pathways, logistics, etc.

Problem frame

  1. Plan ≠ proof. Diagrams and playbooks are treated as if they demonstrated fulfilment.
  2. Signal ≠ outcome. Control signals (Actuation) are mistaken for the consumer‑perceived outcome (the outcome promised by the clause).
  3. Global meanings. Availability, incident, latency are used as if universal, ignoring context‑local senses.
  4. Unstated translation. Metrics from one canon are mapped to clauses from another without declaring losses.
  5. Timeless verdicts. Judgements are asserted with no explicit Window (day, month, batch).

Forces

ForceTension to resolve
Promise vs. occurrenceA service promise clause (U.PromiseContent) is an external promise, yet acceptance must reference Work (run‑time).
Locality vs. integrationMeanings are context‑local; still we must compare across service situations, plants, and monitors.
Parsimony vs. realismWe want a small binding scheme, yet domains differ (percentiles, downtime minutes, control margins).
Evidence vs. privacy/feasibilityObservations prove outcomes; sometimes only proxies exist.

Core idea (didactic)

Bind promises to runs with measurements in time. Acceptance is a quadruple of anchors (all context‑local):

  1. ClauseCell — a deontic/Standardual SenseCell stating the promise (availability ≥ 99.9%, MTTR ≤ 60 min, temperature within band).
  2. WorkCell — a SenseCell for the Work that enacted service delivery work in the relevant situation.
  3. MeasureCell — a SenseCell for the Observation/Characteristic used as evidence (KD‑CAL).
  4. Window — the explicit period in which the judgement is made (F.10).

A Predicate compares the Measure against the Clause within the Window. The Status (Satisfied/Violated/Inconclusive) attaches to ClauseCell@Window about WorkCell, never to a plan.

Minimal vocabulary (this pattern only)

  • ClauseCell. A context‑local deontic/Standardual concept (SLO, obligation, target), typically from services/deontics Contexts (e.g., ITIL 4, ODRL).
  • WorkCell. A context‑local run‑time occurrence (PROV Activity, IEC Task Execution, etc.).
  • MeasureCell. A context‑local observation concept (KD‑CAL Observation over a Characteristic with a Scale/Unit).
  • Window. A time envelope (calendar month, batch, incident interval, shift) per F.10.
  • Predicate. A clause‑shape: threshold, percentile, count‑within‑limit, band‑conformance, etc.
  • Bridge. An explicit Cross‑context relation with kind/CL/Loss (F.7/F.9).

Context discipline. Terms like availability, activity, task, observation are always read as context‑local. Cross‑use requires a Bridge.

The binding, as five mental rules (notation‑free)

R1 — Attachment rule. An acceptance verdict attaches to the Clause, scoped by a Window, about a specific Work: status(ClauseCell, WorkCell, Window) ∈ {Satisfied, Violated, Inconclusive}. Reading: We do not place “Satisfied” on the plan or on the whole service concept.

R2 — Evidence rule. Only Observations (MeasureCell) that refer to the outcome of the same Work and lie within the Window may support the verdict. Reading: Control commands and approvals are not evidence of outcome.

R3 — Predicate rule. Every ClauseCell is read with a Predicate schema that defines how Measures decide:

  • Threshold: value ≥/≤ target.
  • Percentile: Pₚ(value) ≤ target.
  • Ratio/Share: good_time / total_time ≥ target.
  • Count‑within‑limit: count(events of type E) ≤ target.
  • Band: min(value) ≥ L ∧ max(value) ≤ U.

R4 — Bridge rule. If Clause, Work, and Measure live in different Contexts, apply declared Bridges with kind, CL, and Loss notes. Reading: Without a Bridge, do not presume transferability of meanings.

R5 — Window rule. Every verdict is time‑bounded. Changing the Window can change the result; no retroactivity from new clauses or specs (cf. F.10).

Clause templates (conceptual schemata)

These are shapes of meaning, not data fields.

  1. Availability (share‑of‑time)
  • ClauseCell: service availability ≥ 99.9% monthly (services Context).
  • MeasureCell: uptime indicator over Work (KD‑CAL).
  • Predicate: good_time/total_time ≥ 0.999.
  • Window: calendar month.
  • Bridge: from monitor semantics → consumer‑perceived availability (kind: proxy; CL: 2; Loss: blind to partial degradations).
  1. Latency (percentile)
  • ClauseCell: p95 latency ≤ 120 ms during incidents (services Context).
  • MeasureCell: response time observation for the same Work episode (KD‑CAL).
  • Predicate: P95(latency) ≤ 120ms.
  • Window: incident interval.
  • Bridge: from request‑level telemetry → service‑level promise (kind: aggregation; CL: 2; Loss: sampling bias).
  1. Safety margin (band)
  • ClauseCell: temperature ∈ [L,U] during batch (deontics/quality Context).
  • MeasureCell: process temperature observation (KD‑CAL).
  • Predicate: min ≥ L ∧ max ≤ U.
  • Window: batch run interval (Work).
  • Bridge: not needed if Measure and Clause are in the same Context; otherwise declare.
  1. MTTR (count‑within‑limit + duration)
  • ClauseCell: MTTR ≤ 60 min per incident.
  • MeasureCell: timestamps of Work phases (start fix → restore).
  • Predicate: restore_time − start_fix ≤ 60 min.
  • Window: each incident’s Work interval.
  • Bridge: BPMN design steps → PROV Work Interpretation (CL=2; Loss: gateways ≠ real branching).

Invariants (normative)

  1. DesignRunTag split. Clauses live on the design stance; judgements live on the run stance about Work (F.11).
  2. Context locality. All terms are context‑local; Cross‑context meaning flows only across declared Bridges.
  3. Observation‑only evidence. Verdicts require Observations that about‑refer to Work outcomes; Actuation and Approvals are not sufficient.
  4. Window explicitness. Every verdict carries a Window; no timeless acceptance.
  5. Predicate declared. The Clause’s Predicate is explicit; no hidden aggregation or default percentile.
  6. Non‑retroactivity. Updating clauses or specs does not alter past verdicts; re‑evaluation must be explicit.
  7. One‑Work focus. A verdict references a specific Work (or a defined population of Works) matched to the Clause’s scope.
  8. Loss honesty. Each Bridge states kind, CL, and loss; wider claims require Bridges with the needed CL or same-Context alignment.
  9. No detached pass. When the ClauseCell is a U.PromiseContent (service promise clause), Satisfied about a Work is admissible only if that Work also delivers the promised outcome spec for the clause (A.2.3:8.1 fulfilsPromiseContent). This keeps acceptance on the same delivery evidence base (Work facts + Δ anchors + Observations) and prevents “pass verdict separate from delivery”.

Micro‑examples (didactic, multi‑domain)

SaaS uptime (services + sensing)

  • Contexts: ITIL 4 (Clause), PROV‑O (Work), SOSA/SSN (Measure).
  • ClauseCell: availability ≥ 99.9% monthly.
  • WorkCell: service delivery work Activities during June.
  • MeasureCell: uptime observation from synthetic probes.
  • Predicate: share‑of‑time ≥ 0.999.
  • Bridge: probe result → user availability (kind: proxy; CL: 2; Loss: regional gaps).
  • Verdict: Satisfied (June) if the ratio holds; attaches to Clause@June about those Works.

Furnace band (industrial control)

  • Contexts: quality/deontics canon (Clause), IEC 61131‑3/PROV (Work), KD‑CAL (Measure).
  • ClauseCell: product temperature within [720,740] °C during soak.
  • WorkCell: soak phase Work interval.
  • MeasureCell: thermocouple Observations (KD‑CAL).
  • Predicate: band conformance.
  • Bridge: IEC task interval → PROV Activity (Interpretation, CL=2).
  • Verdict: Violated if any measured value exits the band.

Incident MTTR (services + enactment)

  • Contexts: ITIL 4 (Clause), PROV‑O (Work).
  • ClauseCell: MTTR ≤ 60 min per incident.
  • WorkCell: each incident’s handling Activity.
  • MeasureCell: timestamps (Observed facts) of start‑fix and restore events.
  • Predicate: duration ≤ 60 min.
  • Bridge: BPMN steps → PROV Activity (Interpretation, CL=2).
  • Verdict: Satisfied if the measured interval meets the target.

Anti‑patterns & remedies

#Anti‑patternSymptom in practiceWhy it breaks thinkingRemedy (conceptual move)
A1Plan‑as‑proofA BPMN or runbook is cited as if it proved the SLO was met.Design artefacts are not occurrences.Apply R1 attachment + R2 evidence: attach the verdict to ClauseCell@Window about WorkCell and require Observations of outcomes.
A2Signal‑as‑outcomeControl Actuation (setpoint writes, approvals) treated as evidence of delivered service.Commands are intentions, not results.Accept only MeasureCell that about‑refer to the same Work; if a control signal is used as proxy, declare a Bridge(kind=proxy, CL, Loss).
A3Windowless verdict“We met the SLA” with no stated period or scope.Unfalsifiable; mixes populations.Enforce R5 Window: every verdict names a Window (month, batch, incident interval).
A4Global wordsAvailability, latency used without a Context.Collides senses across disciplines.Speak with Context prefixes (F.1). Cross‑context reuse demands a Bridge (F.9).
A5Percentile miragep95 computed on a pooled year while the clause is monthly.Predicate and Window misaligned.R3 Predicate + R5 Window: compute the statistic per Clause’s Window.
A6Proxy blindnessSynthetic probes stand in for user experience with no limitations stated.Proxies miss geography, jitter, or pathologies.Declare Bridge(kind=proxy, CL, Loss). If proxy coverage is insufficient for the clause scope, the verdict is Inconclusive.
A7Scope drift (Work mismatch)Measured another product’s or region’s traffic but judged the whole service.Evidence is about the wrong Work.Tie MeasureCell to the same WorkCell (or a stated population‑of‑Works) as the Clause scopes.
A8Retroactive renormA new clause or recalibrated monitor silently rewrites past verdicts.Violates temporal honesty.Enforce Non‑retroactivity (Inv‑6): past verdicts stand; new rules apply forward.
A9Silent units“Latency ≤ 120” with no unit or scale.Ambiguous thresholds.KD‑CAL discipline: state Characteristic, Scale, Unit on MeasureCell.
A10Hidden aggregation“Global availability” but only a subset of regions/slices was covered.Over‑claims evidence.State the aggregation scope explicitly or confine the verdict to the observed subset; otherwise Inconclusive.
A11Status on “the service”Tagging an abstract umbrella like “the service” as “Satisfied”.Loses the entityOfConcern of the judgement.Attach to ClauseCell@Window about WorkCell; the service concept remains a promise vocabulary (A.2.3).
A12Bridge‑by‑nameEquating ActivityProcess because both say “process”.Assumes global meaning.Use F.9 Bridge with kind/CL/Loss; or keep them distinct.

Extended worked examples

Each example identifies Contexts, the quadruple ⟨ClauseCell, WorkCell, MeasureCell, Window⟩, any Bridge(s), and the Predicate. The verdict attaches to ClauseCell@Window about WorkCell.

CDN latency across regions (services + sensing + types)

  • Contexts. ITIL 4 (Clause), PROV‑O (Work), SOSA/SSN (Measure), OWL 2 (type labels).
  • ClauseCell. p95 end‑user latency ≤ 200 ms per region per month.
  • WorkCell. delivery Activities per region during the month (PROV).
  • MeasureCell. response‑time Observations tagged by region and path (SOSA/SSN).
  • Predicate. For each region in the Window, P95(latency) ≤ 200 ms.
  • Bridges. probe→user (kind: proxy; CL 2; Loss: last‑mile bias).
  • Verdict. Region‑wise statuses; a global “all‑regions met” is the logical AND of region statuses (declare this aggregation explicitly).
  • Manager cue. “Green map ≠ one green verdict”; acceptance is per Clause per Window per Work population.

Stroke care: door‑to‑needle (method + enactment + status)

  • Contexts. clinical guideline canon (Clause), PROV‑O (Work), SOSA/SSN (Measure), F.10 (status windows).
  • ClauseCell. 90% of ischemic‑stroke episodes achieve door‑to‑needle ≤ 30 min per quarter.
  • WorkCell. Population of patient‑episode Activities started in the quarter.
  • MeasureCell. Timestamps Observation of door and needle events (KD‑CAL).
  • Predicate. |{episodes with (needle−door ≤ 30)}| / |{episodes}| ≥ 0.9.
  • Bridges. EHR event semantics → PROV Activity (Interpretation, CL 2; Loss: missing triage tags).
  • Verdict. If data gaps exceed a declared tolerance, status is Inconclusive rather than “Satisfied by assumption”.

Cold‑chain warehouse (control + sensing + deontics)

  • Contexts. quality/deontics canon (Clause), IEC 61131‑3/PROV (Work), SOSA/SSN + ISO 80000‑1 (Measure).
  • ClauseCell. temperature ∈ [2,8] °C for ≥ 99.5% of each day.
  • WorkCell. The warehouse’s daily storage Activity.
  • MeasureCell. Thermistor Observations with calibrated units (KD‑CAL/ISO 80000‑1).
  • Predicate. (good_time / 24h) ≥ 0.995.
  • Bridges. sensor position → product exposure (kind: proxy; CL 2; Loss: stratification).
  • Verdict. Violated if any day fails; annotate Loss to communicate assurance limits.

SaaS incident MTTR (services + enactment)

  • Contexts. ITIL 4 (Clause), PROV‑O (Work).
  • ClauseCell. MTTR ≤ 60 min per incident.
  • WorkCell. Each incident’s handling Activity.
  • MeasureCell. Observations of start‑fix and restore timestamps.
  • Predicate. (restore − start_fix) ≤ 60 min.
  • Verdict. Per incident; a quarter’s report is an explicit aggregation of incident‑scoped verdicts.

Reasoning primitives (judgement schemas, notation‑free)

These are mental inferences; they neither read nor write artefacts. Each reads “if these thoughts hold, you may safely conclude …”.

  1. Clause–Work match covers(ClauseCell, WorkCell) ⊢ admissible(ClauseCell, WorkCell) Reading: The Clause speaks about the kind of Work under judgement (scope alignment).

  2. Window adequacy Window is explicit ∧ Window intersects WorkCell-occurrence ⊢ admissible(Window) Reading: There is a concrete time envelope; the Work actually occurred within it.

  3. Evidence sufficiency Observations E about WorkCell within Window ⊢ sufficient(E) Reading: There exists a non‑empty set of outcome Observations relevant to the Work and Window.

  4. Evidence insufficiency → Inconclusive ¬sufficient(E) ⊢ status = Inconclusive(ClauseCell, WorkCell, Window) Reading: Absent admissible evidence, do not guess; mark Inconclusive.

  5. Predicate evaluation sufficient(E) ∧ eval(Predicate, E) = true ⊢ status = Satisfied(ClauseCell, WorkCell, Window) sufficient(E) ∧ eval(Predicate, E) = false ⊢ status = Violated(ClauseCell, WorkCell, Window) Reading: The Predicate (threshold/percentile/share/band/…) decides directly from E.

  6. Bridge discipline usesCrossContexts(ClauseCell, WorkCell, MeasureCell) ∧ Bridges B declared ⊢ admissible(B) usesCrossContexts … ∧ ¬admissible(B) ⊢ status = Inconclusive Reading: Cross‑context comparisons require explicit Bridges; without them, Inconclusive.

  7. CL aggregation (assurance hint) Bridges B = {b₁…bₖ} ⊢ effectiveCL = min(CL(bᵢ)) Reading: The weakest Bridge governs the assurance level communicated with the verdict (advisory to B.3 calculus).

  8. Population clauses Clause quantifies over population W = {w₁…wₙ} ⊢ status = agg({status(Clause, wᵢ, Window)}) Reading: For “≥ p%”‑style clauses, compute per‑Work verdicts, then apply the Clause’s quantifier.

  9. Non‑retroactivity newClause or newMonitor after Window ⊢ doesNotAlter(status@Window) Reading: Later changes do not rewrite past verdicts.

  10. Conflict exposure two admissible Bridge sets ⇒ conflicting statuses ⊢ escalate as Inconclusive, expose Loss notes Reading: If equally defensible translations disagree, the honest outcome is Inconclusive plus an explanation.

Relations (with other patterns)

  • Builds on: F.1 (Contexts): keeps all meanings local. F.2F.3: provide the SenseCells that become Clause/Work/Measure anchors. F.5: ensures labels for Clause/Work/Measure and Windows are didactically clear. F.7F.9: supply Bridge kinds / CL and loss semantics. F.10: defines Status families and Window constructs. F.11: protects Method, MethodDescription, Work, and Actuation distinctions.

  • Uses (Part C patterns). KD‑CAL (Observation/Characteristic/Scale/Unit). Sys‑CAL (Work or Actuation Contexts). Kind-CAL (type labels for populations or cohort selection).

  • Constrains: Later reporting and assurance rules (B.3) must not collapse CL/Loss; they report them alongside status.

Migration notes (conceptual)

  1. Clause revisions. Introduce a new ClauseCell; keep old verdicts intact (Non‑retroactivity).
  2. Monitor changes. Update or replace Bridges (kind/CL/Loss). Future verdicts use the new Bridge; past ones are annotated, not rewritten.
  3. Scope corrections. If evidence was about the wrong Work, retire the verdict and restate the quadruple; do not patch by redefining the Clause.
  4. Unit harmonisation. When scales/units change, apply KD‑CAL conversions inside the Measure’s Context; if Cross‑context mapping is needed, declare a Bridge.
  5. Population refinement. If a Clause’s quantifier is refined (e.g., per‑region → per‑AZ), treat each as a new ClauseCell or a new Window partition; avoid hidden re‑baselining.
  6. Proxy retirement. When direct Observations become available, prefer them; keep earlier proxy‑based verdicts with their CL/Loss notes.

Acceptance tests (SCR/RSCR — concept‑level)

Static conformance (SCR)

  • SCR‑F12‑S01 (Quadruple present). Every acceptance statement names ClauseCell, WorkCell, MeasureCell, and Window.
  • SCR‑F12‑S02 (context‑locality). Each of the three Cells cites a Context (U.BoundedContext).
  • SCR‑F12‑S03 (Evidence admissibility). The Observation(s) are about the same Work and lie within the Window.
  • SCR‑F12‑S04 (Predicate explicit). The Predicate shape is stated (threshold/percentile/share/band/…) with any needed aggregation scope.
  • SCR‑F12‑S05 (Bridge discipline). Any Cross‑context use declares Bridge(kind, CL, Loss).
  • SCR‑F12‑S06 (Status trichotomy). The verdict is exactly one of {Satisfied, Violated, Inconclusive} and attaches to ClauseCell@Window about WorkCell.
  • SCR‑F12‑S07 (Unit honesty). MeasureCell specifies Characteristic, Scale, Unit (KD‑CAL).
  • SCR‑F12‑S08 (Temporal honesty). No verdict is asserted without a Window; no clause retroactively changes past verdicts.

Regression checks (RSCR)

  • RSCR‑F12‑E01 (Bridge update). When a Bridge CL changes, past verdicts stand; future verdicts reference the new CL; reports surface the difference.
  • RSCR‑F12‑E02 (Edition churn). When a Context’s canon updates, Cells reference the edition; old verdicts remain bound to their original editions.
  • RSCR‑F12‑E03 (Scope drift guard). If the Work population definition changes, verdicts are not silently re‑interpreted; new verdicts cite the new population.
  • RSCR‑F12‑E04 (Window partition). Changing from monthly to weekly windows creates new verdicts; monthly summaries are expressed as explicit aggregations of weekly statuses.
  • RSCR‑F12‑E05 (Proxy retirement). When direct Observations replace proxies, the status computation is re‑run forward‑only; past proxy‑based verdicts retain their CL/Loss annotations.

F.12:15.3 Didactic distillation (60‑second recap)

Bind promises to runs with measurements in time. Name the Clause, the Work it talks about, the Measure of what actually happened, and the Window. Evaluate the Clause’s Predicate on Observations about that Work in that Window. If any concept crosses Contexts, declare a Bridge with kind/CL/Loss. The verdict (Satisfied/Violated/Inconclusive) attaches to Clause@Window about Work, never to a plan or to the abstract service.

F.12:End

Lexical Continuity & Deprecation

“Change names without changing history.” Status. Architectural pattern. Builds on: F.1 context of meaning; F.2 Term Harvesting; F.3 Intra‑Context Clustering (SenseCell); F.5 Naming Discipline; F.7 Concept‑Set (row) construction; F.8 Mint‑or‑Reuse decision; F.9 Bridges; F.10 Status windows. Coordinates with. Part C CALs when canon editions change (Sys/KD/Type/Method/LCA). Non‑goals. No registries, workflows, editors, or storage formats. No by‑name Cross‑context equivalence. No silent rewrites of old texts.

Intent & applicability

Intent. Provide a conceptual discipline for evolving labels (for SenseCells, Concept‑Set rows, and Role Description names) so that:

  • new names clarify without erasing what earlier texts meant;
  • aliases remain local to Contexts;
  • genuine sense changes cause explicit splits/merges (F.7/F.9), not cosmetic renames.

Applicability. Whenever you consider renaming, aliasing, deprecating, or retiring any label in FPF: a SenseCell label in a Context, a Concept‑Set row label, or a Role Description name.

Problem frame

Unification efforts rot when names drift faster than senses or, worse, when senses change under a constant name.

  • Silent relabeling. A new label is introduced as if nothing changed; readers cannot connect past to present.
  • Alias bloat. Synonyms accumulate without discipline; reading becomes guesswork.
  • Cross‑context aliasing. A single alias is made to stand for different Contexts (“global slang”), defeating locality.
  • Retroactive edits. Old texts are silently rewritten to today’s names, corrupting provenance.

Forces

ForceTension to resolve
Continuity vs truthfulnessPreserve readers’ continuity yet surface real sense changes (no paint‑over).
Locality vs convenienceKeep aliases inside Contexts even when a catchy global name tempts reuse.
Simplicity vs coverageAvoid giant synonym lists while still catching the one or two legacy names people will meet.
Didactics vs formalityMake the mapping teachable without inventing new low‑level artefacts or processes.

Core idea (didactic)

Treat names as lenses, not objects. The thing that persists is the sense (a SenseCell inside a Context, or the Cross‑context alignment embodied by a Concept‑Set row, or a Role Description that points to such sense). Names are lenses we look through. When the lens improves, we record a continuity relation between lenses; when the underlying sense changes, we split/merge the thing, then name accordingly.

Contexts keep names local. A label (including aliases) always belongs to one context or to one Concept‑Set row. Cross‑context similarity is handled by Bridges (F.9), never by shared names.

Minimal vocabulary (this pattern only)

  • Legacy label — a previously used label in the same Context (or same Concept‑Set row / Role Description).
  • Preferred label — the current F.5‑conformant label for that item.
  • Alias (context‑local) — a read‑path from a legacy label to the preferred one inside the same Context (or the same row/template). For writing, prefer the current label.
  • Continuity relation — a small set of relations over labels (below) that capture whether a change is just wording or a real sense change.
  • Epoch note — an informative time marker (“used before 2024‑07”) attached to a legacy label to help readers of old texts. (No storage format implied.)

Solution — Continuity, not “registries”

Rather than maintain a tool or workflow, think with five continuity relations. Use the least-committing relation that tells the truth.

Continuity relations (normative meanings)

  1. renames(label_old → label_new)wording improved, sense unchanged. Use when: Same SenseCell / same Concept‑Set row / same Role Description; only the lexical form changed to satisfy F.5 (morphology, disambiguation, plain/tech harmony). Effect: label_old becomes a context‑local alias of label_new; both resolve to the same SenseCell, Concept-Set row, or Role Description. Past texts remain valid.

  2. aliases(label_legacy ↔ label_pref)legacy synonym kept for reading. Use when: A common historical synonym exists in the same Context for the same SenseCell. Effect: Two‑way read‑path only; writing uses label_pref. Keep at most one legacy alias per register to avoid bloat.

  3. splits(label_old ⇒ {label_A, label_B})one label covered multiple senses; now separated. Use when: Your SenseCell was really two local senses; F.3 has split them; or a Concept‑Set row is refactored into two rows. Effect: label_old is deprecated (read‑path allowed to a disambiguation note); new writing uses label_A/label_B. No claim that either continues the old label wholesale.

  4. merges({label_A, label_B} ⇒ label_new)two labels now recognized as one sense. Use when: F.3 shows same SenseCell; or two Concept‑Set rows collapse after F.9 raised CL sufficiently. Effect: label_A and label_B become aliases of label_new. Keep one epoch note on each legacy label.

  5. retires(label_old)name withdrawn without successor. Use when: The label proved misleading and no single successor exists (e.g., it spanned different Contexts, or it was metaphorical). Effect: Only a read‑warning remains (“avoid in new writing; see Contexts X/Y”). Readers are pointed to Bridges or to multiple rows.

Important: All five relations are context‑local (SenseCell level) or row‑local (Concept‑Set). Never use them to “alias” across Contexts. If a change crosses Contexts, it is not a rename; it requires a Bridge (F.9) and often a split/merge of rows (F.7).

Invariants (normative)

  1. Locality of alias. aliases(-) and renames(-) operate within one context (SenseCell) or within one Concept‑Set row / Role Description.
  2. Truth over comfort. If the sense changed, use splits/merges (and possibly adjust rows/Bridges), not renames.
  3. Non‑retroactivity. Past texts remain phrased as written; continuity only adds read‑paths, never rewrites.
  4. Alias parsimony. per Context and per row, keep ≤ 1 legacy alias per register (Tech/Plain); prefer the one readers will most likely encounter.
  5. Prefer present for writing. In normative writing, use the current preferred label (F.5). Aliases are for reading comprehension.
  6. Bridge discipline. If a label shift would require crossing Contexts to “explain”, it is not a rename; use F.9 Bridge and, if needed, refactor the Concept‑Set row(s).
  7. Epoch honesty. When declaring continuity, attach a succinct epoch note (“pre‑2023 usage”) if it aids readers.

Self‑checks (mental, not procedural)

  • Same‑sense test. Can you point to the same SenseCell (or same row) before and after? If yes → renames/aliases. If no → splits/merges.
  • Context test. Does the change stay inside one context? If it needs two Contexts to explain, it’s a Bridge, not a rename.
  • Reader test. What two legacy strings would a newcomer actually meet in old texts? Keep those two as aliases; drop the rest.
  • History test. Does your “continuity” require editing old claims? If yes, you’re attempting a retroactive rewrite—stop.
  • Didactic test. Can you explain the continuity relation in one sentence? If not, you are hiding a sense change.

Micro‑examples (illustrative)

Pure rename inside a Context (ITIL → clearer plain label)

Context: ITIL 4 (services). Old: “SLO” (plain: service target) → New: “service‑level objective” (plain unchanged). Relation: renames("SLO" → "service‑level objective"). Why: F.5 morphology & expansion; SenseCell unchanged (same clause semantics). Effect: Old guidance remains readable; new writing spells out the term.

Alias for a common legacy synonym (Sys‑CAL)

Context: state‑space control (design). Preferred: “actuation”. Legacy: “control output”. Relation: aliases("control output" ↔ "actuation"). Why: Same SenseCell; legacy term appears in older textbooks. Effect: Readers resolve to the SenseCell; new texts use “actuation”.

Split of a muddled local sense (Enactment)

Context: BPMN 2.0. Legacy label “process” was used to mean both “collaboration” and “executable process” in a team’s prose. Relation: splits("process" ⇒ {"collaboration","executable‑process"}). Effect: The single Concept‑Set row becomes two; old label is deprecated with a disambiguation note.

Merge after clustering raised confidence (Kind-CAL row)

Two Concept‑Set rows {“DBaaS”, “Database‑Service”} converge after F.3 within the same context profile and F.9 raised CL. Relation: merges({"DBaaS","Database‑Service"} ⇒ "Database‑Service"). Effect: “DBaaS” becomes a legacy alias with an epoch note.

Not a rename: Cross‑context temptation (forbidden)

Contexts: BPMN (design graph) vs PROV‑O (run activity). Temptation: “Let’s rename process to activity.” Diagnosis: Cross‑context; different SenseCells. Action: No continuity relation. Keep labels; if needed, declare a Bridge (F.9) explaining design→run mapping with CL/Loss.

Anti‑patterns & remedies

#Anti‑patternSymptom in textsWhy it harms thinkingRemedy (conceptual move)
A1Cross‑context rename“Let’s rename process (BPMN) to activity (PROV).”Erases Context boundaries; hides loss; violates locality.Do not rename across Contexts. Keep both labels; if you must relate them, declare a Bridge (F.9) with CL/loss.
A2Retroactive rewriteOld passages silently updated to new names.Breaks provenance; misleads readers about what was meant then.Non‑retroactivity. Past texts stand; add read‑paths via renames/aliases; attach epoch notes when helpful.
A3Alias floodLong lists of synonyms for comfort.Raises ambiguity; dilutes teaching signals.Alias parsimony. Keep ≤ 1 legacy alias per register (Tech/Plain) inside the same Context or row.
A4Paint‑over renameRename used where sense actually changed.Confuses continuity with revision; hides splits.Use splits (or merges), not renames. If Contexts diverge, adjust rows (F.7) and Bridges (F.9).
A5Global aliasOne catchy word reused as alias in several Contexts.Creates a pseudo‑global dictionary; invites category errors.Local aliases only. If a word appears in many Contexts, treat it as homonymous; keep Context‑prefixed speech.
A6Euphemism treadmillFrequent cosmetic renames (“modernising” labels) with no gain.Cognitive noise; readers lose confidence in names.Apply the Same‑sense test. If gain is marginal, do nothing; if clarity improves materially, one renames is enough.
A7Grandfather everythingNever deprecate confusing legacy labels.Drags ambiguity forward; blocks sharper distinctions.When a label truly misleads and has no single successor, retires with a short pointer note to Contexts/rows.
A8Row drift via renameConcept‑Set row is relabeled while its membership silently changes.Hides that the set changed; breaks Cross‑context alignment.First split/merge rows (F.7) as needed; only then renames the row if its intension stayed.
A9Bridge‑by‑aliasUsing an alias to hint two Contexts are “the same.”Smuggles translation without CL/loss.No Cross‑context aliasing. If similarity matters, Bridge explicitly (F.9) and keep labels separate.
A10Acronym absolutismTreating acronyms as preferred labels everywhere (“SLO” in any Context).Obscures Context‑specific senses; hurts didactics.Prefer expanded labels as preferred (F.5); keep acronym as context‑local alias only where historically dominant.
A11Temporal fudgeRename used to imply design↔run shift (“execution ≈ process”).Conflates time stances; erases important dualities.Keep DesignRunTag explicit on labels or glosses; if mapping is needed, do so in F.9.
A12Over‑canonicalisationForcing a single “perfect” label across all rows/Contexts.Centralises language; breaks heterogeneity guard.Let each Context/row keep its own preferred label; put unification pressure only into rows and Bridges.

Extended examples

KD‑CAL × Services — metric target labels over time

  • Contexts: ITIL 4 (services, design); SOSA/SSN (sensing, run).
  • Before: Role Description used “SLO” (plain “target”) and readers often saw “service target”.
  • Move: renames("SLO" → "service‑level objective") (Context: ITIL). Keep aliases("service target" ↔ "service‑level objective").
  • Why: Same local sense; clearer morphology for F.5; SOSA/SSN labels untouched.
  • Pay‑off: Runtime Observations (SOSA) are later compared to service‑level objective clauses (ITIL) without Cross‑context aliasing.

Sys‑CAL × LCA‑CAL — separating execution vs actuation

  • Contexts: IEC 61131‑3 (run); state‑space control texts (design).
  • Temptation: Rename “task execution” to “actuation” “to sound control‑ish”.
  • Diagnosis: Different Contexts; different SenseCells (program run vs control output).
  • Move: No rename. Keep labels; later add Bridgeexecution (IEC) produces signals that realise actuation (control)” with CL stating partial coverage.
  • Pay‑off: Plant narratives stop calling programs “actuators”; runtime vs control semantics stay crisp.

Kind-CAL × Method‑CAL — false merge avoided

  • Contexts: OWL 2 (types, design); SPEM 2.0 (methods, design).
  • Issue: A row labeled “Class” tried to absorb “WorkProductKind” by a renames.
  • Diagnosis: Not same sense; different calculi (type vs artefact category).
  • Move: Split the row: splits("class" ⇒ {"type‑class","work‑product‑category"}).
  • Pay‑off: Downstream Role Descriptions can point to the correct SenseCell without redefining ontological commitments.

Enactment × KD‑CAL — retiring a misleading metaphor

  • Context: BPMN 2.0 (design).
  • Legacy: Team jargon “heartbeat” used for a timer event. Newcomers confuse it with sensor heartbeats (KD‑CAL).
  • Move: retires("heartbeat") in BPMN Context with note “use timer event; ‘heartbeat’ refers to sensor liveness in KD‑CAL”.
  • Pay‑off: Two different ecosystems stop colliding on the same catchy word.

Concept‑Set row refactor after rising CL

  • Rows: {“DBaaS”, “Database‑Service”} representing service notions across several Contexts.
  • F.3 + F.9 outcome: High CL; evidence of same Cross‑context alignment.
  • Move: merges({"DBaaS","Database‑Service"} ⇒ "Database‑Service") at row level. Both legacy labels become row‑local aliases with epoch notes.
  • Pay‑off: One clearer row label; old articles still understandable.

Reasoning primitives (judgement schemas, notation‑free)

Each judgement is a pure thought: premises ⇒ safe conclusion. No storage, no workflow, no roles.

Let ContextOf(ℓ) be the Context of label (when ℓ names a SenseCell); rowOf(ℓ) the Concept‑Set row (when ℓ names a row); senseOf(ℓ) the SenseCell it denotes (if local); pref(thing) the current preferred label of a SenseCell / row / Role Description.

Same‑sense & same‑place

ContextOf(ℓ₁)=ContextOf(ℓ₂) ∧ senseOf(ℓ₁)=senseOf(ℓ₂) ⊢ mayRename(ℓ₁→ℓ₂) Reading: If two labels denote the same SenseCell in the same Context, a rename is legitimate.

F.13:12.2 -Local alias

ContextOf(ℓ₁)=ContextOf(ℓ₂) ∧ senseOf(ℓ₁)=senseOf(ℓ₂) ⊢ aliases(ℓ₁↔ℓ₂) Reading: Legacy synonym can be kept as a read‑path; writing uses pref.

Split detection

coversMultipleLocalSenses(ℓ) ⊢ splits(ℓ ⇒ {ℓA,ℓB,… }) Reading: If one label straddles several local senses, declare a split and prefer the new precise labels.

Merge admission

ContextOf(ℓA)=ContextOf(ℓB) ∧ senseOf(ℓA)=senseOf(ℓB) ⊢ merges({ℓA,ℓB} ⇒ ℓN) Reading: Once F.3 shows identity of sense within a Context, merging labels into one preferred label is safe.

Retirement

misleading(ℓ) ∧ ¬∃ℓ' sameSense(ℓ,ℓ') ⊢ retires(ℓ) Reading: If a label misleads and has no single successor, retire it and point readers to relevant Contexts/rows.

Cross‑context guard

ContextOf(ℓ₁) ≠ ContextOf(ℓ₂) ⊢ ¬mayRename(ℓ₁→ℓ₂) Reading: Different Contexts forbid rename/alias; any relation goes to Bridge (F.9).

Writing discipline

thing t ⊢ writeWithPreferred(t) = pref(t) Reading: Normative prose uses the current preferred label; aliases are for reading.

Reading resolution

legacyLabel ℓ ⊢ readResolve(ℓ) = ⟨thing, pref(thing), epoch?⟩ Reading: A reader can mentally resolve a legacy label to the thing and its present name, with epoch hint if needed.

Alias budget

aliasesFor(thing, register=r) = A ⊢ |A| ≤ 1 Reading: Keep at most one legacy alias per register (Tech/Plain) for any one thing.

Row‑level continuity

rowOf(ℓA)=rowOf(ℓB)=R ∧ intension(R) stable ⊢ mayRenameRow(R,ℓB) Reading: A row label can change if the row’s membership/intension did not change; otherwise refactor rows first (F.7).

Relations

Builds on: F.1 context of meaning (keeps locality), F.2 Harvesting (provides attested strings), F.3 Clustering (establishes SenseCells), F.5 Naming Discipline (supplies preferred labels), F.7 Concept‑Set rows, F.8 Mint‑or‑Reuse, F.9 Bridges, F.10 Status windows, F.11 Method harmonisation, F.12 Service acceptance.

Constrains:

  • F.5 (Naming): may select preferred labels only after applying these continuity relations.
  • F.7 (Rows): row relabels require row intension stability; otherwise use split/merge rows.
  • F.9 (Bridges): Cross‑context changes must not be expressed as renames/aliases.

Used by. All Part C patterns when editions shift; all examples and tutorials when teaching with legacy terminology.

Migration notes (conceptual playbook)

  1. Ask the same‑sense question first. If the underlying SenseCell/row is unchanged, prefer renames; else reach for splits/merges.
  2. Keep it inside the Context. If your explanation crosses Contexts, stop—this is Bridge territory (F.9), not a rename.
  3. Prefer clarity over fashion. Rename only when the new label removes a real ambiguity (F.5 criteria), not to chase style.
  4. Limit nostalgia. Admit one legacy alias in each register that readers will most likely meet; leave the rest to footnotes in examples.
  5. Deprecate with kindness. When retiring a label, add a one‑line pointer note (e.g., “see timer event in BPMN; ‘heartbeat’ in KD‑CAL means sensor liveness”).
  6. Rows before names. If a rename request coincides with a shift in what the row covers, refactor rows (F.7) first, then choose labels.
  7. Edition bumps. When a canon updates, check labels used in that Context: if definitions shift, it’s a split/merge; if not, you may renames for style/uniformity.
  8. Teach the delta. In primers, show a mini table with legacy → preferred pairs only where readers will encounter both.

Acceptance tests (SCR/RSCR — concept‑level)

Static conformance (SCR)

  • SCR-F13-S01 (context-local continuity). Every renames/aliases relates labels within the same context or the same row/Role Description; none cross Contexts.
  • SCR‑F13‑S02 (Truthfulness). For each renames, there exists an unchanged SenseCell/row; otherwise the move is rejected.
  • SCR‑F13‑S03 (Alias budget). For any one thing and register, the number of deprecated aliases is ≤ 1.
  • SCR‑F13‑S04 (Non‑retroactivity). No requirement or suggestion to rewrite past texts is present; continuity is expressed as read‑paths.
  • SCR‑F13‑S05 (Row integrity). A row rename occurs only when the row’s intension is stable; if membership changed, a row split/merge is documented (F.7).
  • SCR‑F13‑S06 (Bridge discipline). No alias/rename is used to imply Cross‑context sameness; any such relation belongs under F.9.

Regression (RSCR)

  • RSCR‑F13‑E01 (Edition drift audit). When a canon edition changes, all labels from that Context are checked against definitions; moves are renames if senses stable, else splits/merges.
  • RSCR‑F13‑E02 (Alias creep check). Periodically ensure alias budgets remain within ≤ 1 per register; surplus aliases are pruned.
  • RSCR‑F13‑E03 (Bridge leak check). Scan continuity notes for Cross‑context hints; any such case is converted into a Bridge or deleted.
  • RSCR‑F13‑E04 (Didactic continuity). Sampling of examples shows that readers can resolve legacy labels to current ones without confusion (via the continuity notes).

Didactic distillation (60‑second script)

Names are lenses. The thing that persists is the sense (a SenseCell in a Context, a Concept‑Set row, a Role Description). When you improve a lens, use renames or aliases inside that same place. When the thing changes, say so with splits/merges—and adjust rows/Bridges accordingly. Never rename across Contexts. Keep at most one legacy alias per register. Do not rewrite history; give readers read‑paths and brief epoch notes. With this discipline, you can clarify language without erasing meaning, and your models keep both continuity and truth.

F.13:End

Anti‑Explosion Control (Roles & Statuses)

“Name less, express more.”

Status. Architectural pattern. Depends on. F.1 context of meaning; F.2 Harvesting; F.3 Local Sense Clustering; F.4 Role Description; F.5 Naming Discipline; F.7 Concept‑Set Table; F.8 Mint‑or‑Reuse. Coordinates with. F.10 Status Windows & Mapping; F.11 Method Quartet Harmonisation; F.12 Service Acceptance Binding; F.13 Lexical Continuity. Aliases (informative). Role and Status economy; Explosion guard.

Intent & applicability

Intent. Prevent the uncontrolled growth of Roles and Statuses by privileging reuse, bundling, explicit separation‑of‑duties (SoD), and applicability windows over minting new names. Keep the vocabulary small, crisp, and composable while remaining faithful to local meanings fixed by Contexts (F.1) and SenseCells (F.3).

Applicability. Whenever a new Role or Status is proposed, a team merges two lines of work, or a domain shifts its jargon. Use this pattern before adding rows to the Concept‑Set Table (F.7) or new Role Descriptions (F.4).

Non‑goals. No org charts, no RBAC policies, no process roles. This pattern describes mental moves for architectural naming, not governance machinery.

Problem frame

Left unchecked, Role and Status vocabularies tend to diverge:

  1. Synonym stacks. Reviewer, Approver, Validator, Verifier minted separately despite overlapping responsibilities.
  2. Modifier creep. Night‑Operator, Shift‑Operator, Remote‑Operator proliferate where one Role plus a window would suffice.
  3. SoD leakage. New names invented to evade an intended separation (Requestor‑Approver as one Role).
  4. Status paintjobs. Compliant, At‑Risk, Grace, Waived, Temporarily‑Breached—labels multiply where a single Status × window model would be clearer.
  5. Context blending. A control‑Context Actuator gets treated as an Enactment Execution Role; a deontic Duty becomes a runtime Status.

Explosion harms didactics and increases alignment cost (F.9).

Forces

ForceTension to resolve
Expressiveness vs parsimonyWe must name real distinctions, but each new name increases cognitive load.
Locality vs uniformityRoles or Statuses are context‑local; yet we need a stable Cross‑context story through Concept‑Set rows.
Safety vs convenienceSoD constraints protect systems, but people seek convenience through composite roles.
Temporal honestyMany “new” Statuses are actually the same Status seen in different windows (design, run, or grace).

Minimal vocabulary (this pattern only)

  • Role Description (F.4): a Role (behavioural mask) or Status (epistemic/deontic standing) tied to a SenseCell.
  • Concept‑Set row (F.7): a Cross‑context intent (“what we count as one thing”) aligned by SenseCells.
  • Bundle (this pattern): a named composition of Role Descriptions that are meant to be used together by design (e.g., {Requester, Approver} for change control). A Bundle is a concept, not a package.
  • SoD Constraint (this pattern): a conceptual rule stating that two Roles must not be played by the same Holder in the same window.
  • Window (F.10): an claim scope (time stance, holon level, run segment) that delimits when a Role or Status holds.

Core idea (didactic)

Use four levers before minting a name:

  1. Reuse the row. If the intent matches an existing Concept‑Set row and the local SenseCell is already present, use it.
  2. Bundle, don’t blur. When two Roles must travel together, name the Bundle, not a new hybrid Role.
  3. Declare SoD, don’t fuse. When Roles must stay apart, state the SoD instead of minting a “super‑role.”
  4. Window, don’t multiply. When a Status looks different across time/scale, keep one Status with explicit windows.

Solution — the control cabinet (conceptual, notation‑free)

Reuse by row (first lever)

  • Move. If a proposal matches the intension of an existing row (F.7), adopt its Role Description or add a local SenseCell inside that row.
  • Pay‑off. Names don’t proliferate; Cross‑context tables stay thin.

Example (services). Service‑availability‑compliance already exists as a row. New labels SLO‑Met / Uptime‑OK reuse that row; SOSA/SSN Observations later feed it (F.12).

Bundle instead of hybrid (second lever)

  • Move. When practice always pairs two Roles, define a Bundle {RoleA, RoleB}.
  • Not a hybrid. Do not coin RoleAB; you’ll erase SoD options and obscure responsibilities.

Example (enactment). {Requester, Approver} is a Bundle. Request‑Approver (one Role) is not allowed; it contradicts intended checks.

Separate by SoD, don’t evade (third lever)

  • Move. Record SoD constraints where separation matters (“Requester ⟂ Approver in run window”).
  • Why here. SoD belongs to semantics, not org policy; it protects structure across Contexts and times.

Example (methods). {Author ⟂ Reviewer} in the review window. A proposal Senior‑Reviewer to “do both” is rejected; the Bundle remains {Author, Reviewer} with SoD.

Window the Status (fourth lever)

  • Move. Keep a single Status and attach windows for grace, evaluation, active, archival.
  • Avoid. Compliant, At‑Risk, Grace as separate Status types.

Example (acceptance). Compliance Status has readings per window:

  • evaluation window: “pending check”,
  • active window: “met / breached”,
  • grace window: “temporarily tolerated breach”. One Status; clear windows.

Factor modifiers as facets, not names

  • Move. Treat qualifiers (shift, locality, domain) as facets of the same Role or Status or as windows, not new types.

Example (operations). Operator with window facet timeOfDay = night—not a new Role Night‑Operator.

Invariants (normative)

  1. context‑locality. Each Role Description remains tied to a SenseCell in a single Context (F.3, F.4).
  2. Row preference. New Role Descriptions SHOULD map to an existing row; new rows (F.7) require F.8 justification.
  3. No hybrid Roles. If two Roles are conceptually distinct, they must not be fused into one to bypass SoD. Use Bundle + SoD.
  4. Windowed statuses. Status proliferation across time/scale MUST be expressed as windows of a single Status family (F.10).
  5. Bundle clarity. A Bundle names only composition; it does not inherit or redefine member semantics.
  6. Minimal modifier naming. Adding a modifier to a label MUST pass F.5 tests; prefer facets/windows over new Role or Status names.
  7. Concept‑first. No invariant relies on organization charts or access policies; semantics precede governance.

Reasoning primitives (judgement schemas)

Pure mental moves; no tools, no workflows.

Let rowOf(τ) be the Concept‑Set row of template τ, senseOf(τ) its SenseCell, win(τ) its window set.

  1. Row reuse admissibility intent(τₙ) ≡ intent(row r) ∧ ∃σ: senseOf(σ) in r ⊢ reuseRow(τₙ → r) Reading: If the proposed template’s intent matches an existing row with a local SenseCell, reuse the row.

  2. Bundle recommendation alwaysTogether{α,β} ∧ distinct(α,β) ⊢ bundle({α,β}) Reading: If two distinct Roles occur together by design, name the Bundle.

  3. SoD necessity conflictRisk{α,β} ∧ sameHolder ∧ sameWindow ⊢ SoD(α ⟂ β) Reading: If the same Holder in the same window would create a conflict, require SoD.

  4. Hybrid rejection SoD(α ⟂ β) ⊢ forbid(hybrid(α,β)) Reading: A SoD pair cannot be fused into one Role.

  5. Windowing over multiplication status σ showsVariantsAcross(w₁,…,wₖ) ⊢ keepOneStatus(σ) ∧ win(σ)={w₁,…,wₖ} Reading: Variants across time/scale become windows, not new Status names.

  6. Facet over rename modifier m changes circumstance ¬ essence ⊢ preferFacet(τ,m) Reading: If a modifier alters circumstances only, represent it as a facet/window.

Micro‑examples (engineer, manager, and researcher lenses)

Enactment (change control)

  • Proposal. Requester‑Approver as a single Role “to move faster.”
  • Moves. SoD(Requester ⟂ Approver) + Bundle {Requester, Approver}.
  • Result. Same throughput, preserved checks, no hybrid Role.

Services (SLO evaluation)

  • Proposal. New Status At‑Risk.
  • Moves. Keep Compliance Status; add grace window and a forecast facet (informative) if needed.
  • Result. One Status with windows; fewer names, clearer timelines.

KD‑CAL (evidence)

  • Proposal. Pre‑validated between Verified and Validated.
  • Moves. Use Status chain within one family: Verified → Validated; represent uncertainty as confidence (F.10), not another Status.
  • Result. Clean ladder; no extra label.

Sys‑CAL (plant ops)

  • Proposal. Night‑Operator, Remote‑Operator.
  • Moves. Role: Operator; facets/windows: timeOfDay, presenceMode.
  • Result. One Role, portable qualifiers.

Method quartet (reviews)

  • Proposal. Senior‑Reviewer to bypass {Author ⟂ Reviewer}.
  • Moves. Keep SoD; if seniority matters, introduce Assurance Level facet (F.10) on the review decision, not a new Role.
  • Result. Separation preserved; trust expressed as a Status property, not a Role type.

Anti‑patterns & remedies

#Anti‑patternSymptom in modelsWhy it harms thinkingRemedy (conceptual move)
A1Hybrid Role mintingRequest‑Approver, Dev‑Ops‑Engineer as one Role.Erases intended checks; conceals distinct responsibilities.Bundle {Requester, Approver} + SoD (Requester ⟂ Approver). Keep Roles distinct; name the cooperation, not the fusion.
A2Modifier‑as‑typeNight‑Operator, Remote‑Operator, On‑call‑Reviewer.Name proliferation for circumstantial qualifiers.Keep Role = Operator/Reviewer; express night/remote/on‑call as facets or windows (F.10).
A3Window‑as‑typeCompliant, At‑Risk, Grace, Breached as separate Status types.Paints temporal phases as different essences; breaks comparisons.One Status family (e.g., Compliance) with windows: evaluation / active / grace / archival (F.10).
A4Row driftNew Concept‑Set row for Uptime‑OK when Service‑Availability‑Compliance already exists.Splits one intent across rows; Cross‑context tables get wide.Reuse the row (F.7) if intent matches; add local SenseCell if needed.
A5SoD evasion via “trusted” super‑roleSenior‑Reviewer allowed to both author and review.Conflicts of interest reintroduced under prestige.Keep SoD(Author ⟂ Reviewer); if trust matters, attach Assurance Level to the decision (Status facet), not a new Role.
A6cross-context fusionOne Role Description mixes Execution (IEC) with Duty (ODRL) semantics.Violates locality; meanings leak across Contexts.Keep each Role Description tied to a SenseCell (F.4). cross-context reasoning uses Bridge (F.9).
A7Synonym carouselValidator vs Verifier vs Checker minted separately in the same Context.Cognitive noise; ambiguous separation.Choose one label via F.5; keep others as aliases in Lexical Continuity (F.13), not new templates.
A8Org-chart mirroringRoles cloned from a company chart (Squad-Lead, Tribe-Lead) as generic Role Descriptions.Organisation-specific names masquerade as semantics.Map local titles to Bundles of generic Roles (e.g., {Planner, Coordinator}), or treat as aliases (F.13).
A9KPI‑as‑Status inflationLatency‑Good, Latency‑Bad, Latency‑Poor as Status types.Encodes numeric thresholds as separate essences; brittle.One Quality Status with metric threshold in its window definition (F.10/F.12); keep adjectives out of type names.
A10Traffic‑light maniaRed/Amber/Green Status types reused across unrelated families.False unification across different intents; color ≠ meaning.Keep canonical Status name (e.g., Compliance); use presentation as a separate concern; colors are not types.
A11Bundle masquerading as RoleChange‑Manager invented to hide {Requester, Approver, Implementer}.Collapses structure; SoD becomes optional.Name the Bundle and its SoD explicitly; keep Roles atomic.
A12State‑as‑Status sprawlPre‑validated, Validated, Re‑validated, De‑validated.States are temporal positions on one ladder.Define one Validation Status with state ladder and windows; use Assurance Level as a facet if needed.
A13Contextless Role DescriptionRole Description without a SenseCell anchor.Floating meaning; later bridges cannot be made explicit.Tie every Role Description to a SenseCell (F.4). If none fits, use F.8 to decide: new row or rename/reuse.
A14Profile‑driven clonesAPI‑Approver, Data‑Approver, Model‑Approver as different Roles.Scales by surface area; loses the shared essence.One Approver Role with a scope facet (objectType=API/Data/Model).

Worked examples

Enactment + Services + KD‑CAL — “SLO compliance without label sprawl”

Contexts. ITIL 4 (services), SOSA/SSN (sensing), PROV‑O (run). Intent. Track SLO compliance with minimal Status vocabulary.

  • Naïve proposal. Statuses: Compliant, At‑Risk, Breached, Grace, Waived.
  • Moves (F.14). Keep Compliance as one Status family; define windows: evaluation (prediction against forecast), active (actuals vs target), grace (tolerated breach). Waiver becomes a deontic Status in ODRL Context, not part of Compliance.
  • Outcome. One Status + windows; observations (SOSA) and provenance (PROV) feed the active window; service policy (ITIL/ODRL) defines grace.

Method‑CAL + Enactment — “Reviews with SoD and Bundle”

Contexts. SPEM/ISO 24744 (methods), Enactment lexicon. Intent. Prevent authors reviewing their own work while keeping names lean.

  • Naïve proposal. Roles: Author, Self‑Reviewer, Peer‑Reviewer, Senior‑Reviewer.
  • Moves. Roles Author, Reviewer only; SoD(Author ⟂ Reviewer) in the review window. If practice needs two reviewers, mint Bundle {Reviewer, Reviewer₂}; express seniority as a facet on the decision (Assurance Level), not a new Role.
  • Outcome. Two Roles, one Bundle, one SoD; no hybrid Role; assurance is visible as a property of the review result.

Sys‑CAL + LCA‑CAL + Services — “Operations without role fragments”

Contexts. IEC 61131‑3 (execution), state‑space control texts (actuation), ITIL 4 (services). Intent. Staff coverage across shifts and locations without ten operator types.

  • Naïve proposal. Night‑Operator, Remote‑Operator, Local‑Operator, Shift‑Lead, On‑call‑Operator.
  • Moves. Role = Operator; add facets/windows: timeOfDay, presenceMode, dutyCycle. If coordination is distinct, mint Coordinator Role; when both occur together, Bundle {Operator, Coordinator}; keep SoD where needed (e.g., Operator ⟂ Approver for production change).
  • Outcome. One Role + small facet set + Bundle; clean hooks to execution and actuation semantics.

KD‑CAL + Kind-CAL — “Evidence ladder without new labels”

Contexts. KD‑CAL (evidence), OWL 2/FCA (types). Intent. Express proof maturity without inflating Status names.

  • Naïve proposal. Candidate‑Evidence, Preliminary‑Evidence, Verified‑Evidence, Validated‑Evidence.
  • Moves. Keep one Evidence Status ladder (Collected → Verified → Validated); use Assurance Level facet (numeric or ordinal) and windows for in‑review vs active. Align types in a row; do not mint new Status names for granularity.
  • Outcome. Short vocabulary, clear ladder, quantitative facet where nuance is needed.

Relations (with other patterns)

  • Builds on: F.1 (Contexts), F.2 (Harvesting), F.3 (Local Clustering), F.4 (Role Description), F.5 (Naming).

  • Constrains:

    • F.7 (Concept‑Set Table): prefer row reuse; new rows require F.8 justification.
    • F.8 (Mint‑or‑Reuse): apply four levers (reuse, bundle, SoD, window) before minting.
    • F.10 (Status Windows & Mapping): encode temporal/scale variation as windows, not new Status types.
    • F.12 (Service Acceptance Binding): bind acceptance to the Compliance Status family; avoid ad‑hoc status labels.
    • F.13 (Lexical Continuity): prior names become aliases; do not carry forward inflated vocabularies as new types.
  • Used by. FPF patterns to keep Role and Status vocabularies tight.

Migration notes (conceptual playbook)

  1. Map to rows. For each existing Role or Status, identify its Concept‑Set row; if two names share an intent, collapse to one row (keep other names as aliases, F.13).
  2. Extract SoD. Replace “super‑roles” with Bundles plus explicit SoD; where conflict exists, SoD is normative, not cultural.
  3. Demote modifiers. Convert adjectival Role types into U.Facet (per Compose‑CAL) or windows on the base Role.
  4. Window statuses. Merge Status families split by time/scale into one Status + windows; move waived/exempt notions to the deontic Context if applicable.
  5. Re‑use before minting. When encountering a gap, scan rows for a near‑match; only if intent genuinely differs, open a new row (F.8).
  6. Preserve continuity. Keep historic labels as aliases under the consolidated template (F.13); do not rewrite past texts.
  7. Rehearse the cut. After consolidation, you should be able to recite the entire Role and Status vocabulary from memory; if not, reduce again.

Acceptance tests (SCR/RSCR — concept‑level)

SCR — Static conformance

  • SCR‑F14‑S01 (Row reuse). Every newly proposed Role Description either references an existing row or includes a clear F.8 justification for a new row.
  • SCR‑F14‑S02 (No hybrids). No Role Description’s label or definition conflates two Roles that stand in a declared SoD relation.
  • SCR‑F14‑S03 (Windowed statuses). Each Status family that shows temporal/scale variation is expressed as one Status + windows (not multiple Status types).
  • SCR‑F14‑S04 (Facet over modifier). Role names do not encode circumstantial modifiers; such modifiers appear only as facets/windows.
  • SCR‑F14‑S05 (Context locality). Every Role Description is anchored to exactly one SenseCell; no Cross‑context semantics inside a single template.
  • SCR‑F14‑S06 (Bundles are pure). Every Bundle is a set of templates with no additional semantics beyond membership and referenced SoD.

RSCR — Regression (evolution)

  • RSCR‑F14‑E01 (Vocabulary slope). Over a given interval, the count of distinct Role or Status templates does not increase unless matched by row justifications (F.8).
  • RSCR‑F14‑E02 (SoD integrity). Adding templates does not introduce a label that circumvents any existing SoD relation.
  • RSCR‑F14‑E03 (Window integrity). When windows are refined, Status type count remains constant; only window definitions change.
  • RSCR‑F14‑E04 (Alias discipline). When labels change, prior names are recorded as aliases (F.13); no silent type multiplication.

Didactic distillation (90‑second script)

Name less, express more. Before minting a new Role or Status, try four levers: (1) Reuse the row — if the intent already exists, adopt it and add your local SenseCell. (2) Bundle, don’t blur — when two Roles travel together, Bundle them; keep SoD if they must stay apart. (3) Declare SoD, don’t fuse — conflicts of interest are solved with SoD, not with “trusted” super‑roles. (4) Window, don’t multiply — one Status can wear different windows (evaluation/active/grace); that’s not four Status types. Keep modifiers as facets, not names; keep every Role Description context‑local via its SenseCell. If your vocabulary no longer fits in a thoughtful mind, you have an explosion—return to the levers and reduce.

F.14:End

SCR/RSCR Harness for Unification

“Prove locality and parsimony first; only then prove composition.” Status. Architectural pattern. Builds on: E.10.D1 Lexical Discipline for “Context” (D.CTX); F.0.1 Foundational Principles; F.1F.14. Coordinates with. B.3 Trust & Assurance Calculus (for CL use on Bridges).

Intent & applicability

Intent. Provide a minimal, notation‑free harness of conceptual checks that tells you whether a unification slice is sound: Contexts are fixed and diverse (F.1), terms are harvested and clustered inside Contexts (F.2F.3), Role Descriptions point to one SenseCell (F.4), names obey discipline (F.5), rows are reused instead of multiplied (F.7F.8), bridges are explicit and penalised (F.9), statuses vary by windows not type proliferation (F.10), and cross‑line bindings (F.11F.12) respect locality. Applicability. Use whenever you declare or revise any of: Context cards, Local‑Senses, SenseCells, Concept‑Set rows, Role Descriptions, Bridges, Status windows. Non‑goals. No registries, workflows, or storage formats. No team roles. No metrics dashboards. This is thinking discipline, not governance.

Problem frame

Without a unification harness:

  1. Locality leaks. Cross‑context equivalence creeps in “by name”.
  2. Row sprawl. Concept‑Set tables grow laterally with near‑duplicates.
  3. Role or Status inflation. Adjectival or temporal variants become new types.
  4. Silent rewrites. New editions overwrite old meanings without a trace.
  5. Unstable bridges. Cross‑context relations harden into dogma without CL or loss statements.

Forces

ForceTension to resolve
Parsimony vs coverageKeep vocabularies small yet expressive across multiple Contexts.
Locality vs reusePreserve context‑local meaning while enabling Cross‑context comparison.
Stability vs evolutionAllow new editions and rows without erasing prior sense.
Clarity vs formalityChecks must be teachable in minutes yet specific enough to catch drift.

Core idea (didactic)

The harness is a two-part net of assertions:

  • SCR — Static Conformance Rules. context‑local and cross‑artefact checks that must hold now.
  • RSCR — Regression & Stability Rules. Checks that must hold across changes (editions, rows, names).

Registry-reference note (normative). When an SCR/RSCR mentions BridgeId, policy identifiers, or edition identifiers, these are treated as registry references. They MUST be validated by registry presence/version checks, but MUST NOT be treated as symbols that have to appear in any provides list (e.g., SignatureManifest.provides) or be satisfied via imports closure, because they are not part of a signature’s exported vocabulary; they are external registry keys.

All checks are expressed as judgement schemas (premises ⊢ conclusion). They never prescribe artefact formats, roles, or workflows.

Minimal vocabulary (this pattern only)

  • Unification line (L). The thematic cut you are pursuing (e.g., Enactment + Sensing + Execution).
  • Check. A content‑level assertion about Contexts, senses, rows, Role Descriptions, bridges, or windows.
  • Witness. A thoughtful minimal example that makes a check concrete (e.g., one seed, one bridge pair).
  • Slice. The small set of objects under scrutiny together (Contexts in view, the row you’re adding, the Role Description that uses it, and any bridge it needs).

Objects under check

  1. ContextsU.BoundedContext cards (F.1).
  2. Local‑Sense — clustered sense inside one context (F.3).
  3. SenseCell(Context × Local‑Sense) address (F.3/F.4).
  4. Concept‑Set row — a cross-context alignment hypothesis with explicit Bridge support (F.7).
  5. Role Description — Role or Status definition pointing to one SenseCell (F.4).
  6. Bridge — explicit Cross‑context relation with CL and loss notes (F.9).
  7. Windows — temporal/scale views for a Status family (F.10).
  8. Aliases — name continuity commitments (F.13).
  9. Bundles & SoD — reuse levers that replace hybrid roles (F.14).

Solution overview — the harness as a lattice of checks

The harness arranges checks in three clusters:

  • S‑Local. context‑local sanity (anchoring, clustering, two‑register labels).
  • S-Cross. Cross-artefact coherence (row reuse, single-cell Role Description, bridge discipline, window honesty).
  • R‑Evo. Evolution continuity (no silent rewrites, no vocabulary creep, bridge re‑validation).

SCR — Static conformance rules (S‑Local)

All S‑Local rules are Context‑internal and derive only from F.1F.5.

SCR‑F15‑S1 (Anchored term). Seed σ has context C ⊢ C ∈ Contexts(L) Reading: Every harvested seed lives in a Context that is deliberately in view for your line (F.1, F.2).

SCR‑F15‑S2 (Edition trace). Occurrence ω supports σ ⊢ ω carries edition+location Reading: A Local‑Sense can be mentally reconstructed from attestations (F.2).

SCR‑F15‑S3 (Intra‑Context clustering). Local‑Sense λ clusters {σᵢ} ⊢ ∀i: context(σᵢ)=context(λ) Reading: No Cross‑context items inside a Local‑Sense (F.3).

SCR‑F15‑S4 (Two registers). Local‑Sense λ ⊢ label(λ)=⟨tech,plain, symbol?⟩ ∧ plain≠∅ ∧ tech≠∅ Reading: Both engineering and plain labels exist; symbol (if any) is purely informative (F.2/F.3/F.5).

SCR‑F15‑S5 (Minimal gloss). gloss(λ) framed at minimal necessary generality Reading: The gloss neither smuggles behaviour/deontics nor globalises the sense (F.2/F.5).

SCR‑F15‑S6 (Context‑local normal form). normalize_C(surface)=n ⊢ n used only within C Reading: No global normal form at this stage (F.2).

SCR — Static conformance rules (S‑Cross)

S‑Cross rules tie Contexts, rows, Role Descriptions, bridges, and windows together without breaking locality.

SCR-F15-S7 (Single-cell Role Description). Role Description τ ⊢ anchor(τ)=one SenseCell ⟨C,λ⟩ Reading: Every Role Description points to exactly one SenseCell; no mixed semantics (F.4).

SCR-F15-S8 (Name discipline). Role Description τ ⊢ name(τ) obeys F.5 Reading: Labels follow the agreed morphology, register pairing, and minimal generality (F.5).

SCR‑F15‑S9 (Row sufficiency). Row ρ lists cells {⟨Cᵢ,λᵢ⟩} ⊢ |distinct(Cᵢ)| ≥ 2 Reading: A row is meaningful only if it spans at least two Contexts (F.7).

SCR‑F15‑S10 (Row purity). Row ρ ⊢ no cell contains Cross‑context clustering Reading: Each cell is a single SenseCell, not a pre‑merged bundle (F.7).

SCR‑F15‑S11 (Reuse before mint). Proposed row ρ' overlaps intent(ρ) ⊢ prefer reuse(ρ) ∨ document F.8 decision Reading: Rows are reused by default; new rows require a mint‑or‑reuse rationale (F.7F.8).

SCR‑F15‑S12 (Bridge is explicit). C₁≠C₂ ∧ relation asserted between λ₁,λ₂ ⊢ Bridge β: ⟨⟨C₁,λ₁⟩ ↔ ⟨C₂,λ₂⟩, kind, CL, loss⟩ Reading: Cross‑context relations appear only as Bridges with declared kind (≡, ⊑, ⊒, ⟂), Congruence Level, and loss notes (F.9; B.3 for CL semantics).

SCR‑F15‑S13 (Bridge locality). Bridge β ⊢ cells belong to different Contexts Reading: You never bridge within a Context; that’s clustering (F.3/F.9).

SCR‑F15‑S14 (Window honesty). Status family Σ varies by time/scale ⊢ windows(Σ) define variation; no new Status types introduced Reading: Temporal and scale variation appears as windows, not as new types (F.10).

SCR-F15-S15 (SoD preservation). Bundle B = {τ₁,τ₂,…} with SoD(τᵢ ⟂ τⱼ) ⊢ no single **Role Description** fuses τᵢ,τⱼ Reading: Separation‑of‑Duties is a normative constraint, not a label tweak (F.14).

SCR‑F15‑S16 (Binding coherence). Service‑Acceptance binding references Status Σ and Execution E ⊢ Σ anchored; E anchored; comparison defined via Bridge(s) if Cross‑context Reading: Acceptance compares anchored executions and statuses, with any Cross‑context step made explicit (F.12 + F.9).

SCR/RSCR “Twin Harness” tests

SCR‑TWIN‑01 - Head term check. Plain twin preserves/declares the head per CC‑TWIN‑3. SCR‑TWIN‑02 - Kind check. Plain twin maps to the same Kind as the Tech name (C.3). SCR‑TWIN‑03 - SenseCell check. Twin and Tech resolve to the same SenseCell; record counter‑example(s). SCR‑TWIN‑04 - Stop‑list check. If the base noun is in the Ambiguity stop‑list, require bracketed head + gloss or fail. SCR‑TWIN‑05 - Normative surface check. No plain twins in CC blocks, signatures, or acceptance clauses. RSCR‑TWIN‑06 - Drift audit. On Context or glossary edits, re‑run twin harness; degrade or deprecate if SenseFidelity falls. RSCR‑TWIN‑07 - Bridge audit. If a twin is copied across Contexts, ensure a Bridge exists; record CL and loss notes.

Examples & Anti‑examples

Good (role with head):

  • Tech: TransformerRole → Plain: “Transformer (role)” — passes Head & Kind checks.
  • Tech: IncidentCommanderRole → Plain: “Incident commander (role)”.

Good (episteme status with head):

  • Tech: U.EvidenceRole → Plain: “Evidence (status)” — first mention includes head.

Borderline (allowed with gloss):

  • Tech: U.Episteme → Plain: “Tradition (episteme)”only with first‑use gloss, e.g., “Tradition (episteme) [U.Episteme] — a body of knowledge within IAU_2006”. (Without the head/gloss this is forbidden due to ambiguity.)

Forbidden:

  • Tech: U.Episteme → Plain: “Tradition” (bare) — fails CC‑TWIN‑4/5.
  • Tech: U.PromiseContent → Plain: “API” — fails Kind and head checks (API is an access method, not the promise).
  • Tech: U.RoleAssignment → Plain: “Appointment” — banned term; conflates governance speech‑act with the binding object.

Migration guidance (lightweight)

  1. Inventory. List current plain twins per Context.
  2. Score. Assign SenseFidelity (0–3) and add counter‑examples; demote or deprecate any with score <2.
  3. Head & gloss. Add bracketed heads and first‑use glosses for all surviving twins.
  4. Register. Create/update entries in E.10.P; link a DRR for each change.
  5. Lint. Enable the Twin Harness in CI to block new ambiguous twins.

Judgement schemas (core moves)

Representative mental moves; each “fires” one cluster of SCRs.

  1. Anchoring Seed σ : context C, C ∈ Contexts(L) ⊢ anchored(σ) (S1)

  2. Local clustering ∀σ∈Σ: context(σ)=C ⊢ cluster_C(Σ) = Local‑Sense λ (S3)

  3. Role-Description anchoring Role Description τ names ⟨C,λ⟩ ⊢ singleCell(τ) (S7)

  4. Row reuse intent(ρ') ≈ intent(ρ) ⊢ reuse(ρ) ∨ justify_mint(ρ') (S11)

  5. Bridge assertion C₁≠C₂ ∧ compare(⟨C₁,λ₁⟩,⟨C₂,λ₂⟩) ⊢ Bridge(CL,kind,loss) (S12–S13)

  6. Windowing Status Σ exhibits temporal/scale variance ⊢ define windows(Σ); forbid Σ‑splitting (S14)

  7. SoD guard SoD(τᵢ ⟂ τⱼ) ⊢ ¬exists Role Description υ that conflates {τᵢ,τⱼ} (S15)

Micro‑witnesses (illustrative)

11.1 Activity vs Task (PROV‑O ↔ IEC 61131‑3). Contexts: PROV‑O (run), IEC 61131‑3 (run). Local‑Senses: activity(prov), task(iec). Fire: S7 (Role Description “Execution” points to one SenseCell), S12 (Bridge: overlap, CL=2, loss: IEC task may be cyclic; PROV activity need not be periodic), S13 (Contexts differ), S14 (Status windows for compliance later, not new types).

11.2 Service Acceptance (ITIL 4 ↔ SOSA/SSN). Contexts: ITIL 4 (design), SOSA/SSN (run). Row: Service‑Availability with cells ⟨ITIL:SLO availability⟩, ⟨SOSA:observation of uptime⟩. Fire: S9 (row spans ≥2 Contexts), S12 (Bridge kind: measure-for-target, CL=3, loss: sampling bias), S16 (binding coherence), S-RoleDesc-SingleCell.

Relations (with other patterns)

Builds on: E.10.D1 (Context semantics), F.1F.14. Constrains: Any addition to F.1F.14 is publish‑ready only if all relevant SCR here evaluate true on its slice. Feed: B.3 may use Bridge CL and loss notes to adjust assurance.

RSCR — Regression & Stability Rules (R‑Evo)

These rules speak about changes over time. They are expressed as judgement schemas that compare two conceptual snapshots: @t0 and @t1. No storage, no workflows—just content assertions.

Notation. X@t0 — object X before change • X@t1 — after change • Δ(X)=⟨…⟩ — described difference • same(…) / new(…) / retired(…) — conceptual status.

Contexts & editions

RSCR‑F15‑E1 (No silent replacement). Context C@t0 : edition e0, C@t1 : edition e1, e1≠e0 ⊢ either newContext(C,e1) ∨ explicitRecency(C,e1) Reading: A new edition becomes a new Context if sense shifts; otherwise keep one context and mark recency. Never overwrite meaning.

RSCR‑F15‑E2 (Trip‑wire carry‑over). C@t1 derives from C@t0 ⊢ tripWires(C@t1) ⊇ review(tripWires(C@t0)) Reading: Known confusions are re‑checked and re‑stated (or explicitly dropped with a sentence why).

Local‑Senses & SenseCells

RSCR‑F15‑E3 (Reconstitutable seeds). Local‑Sense λ@t0, Δ(occurrences) → λ@t1 ⊢ λ@t1 still reconstructible from attestations@t1 Reading: After changes in attestations, the Local‑Sense remains auditably rebuildable.

RSCR‑F15‑E4 (No Cross‑context creep). SenseCell ⟨C,λ⟩@t0 → @t1 ⊢ context(λ@t1)=C Reading: A SenseCell never migrates across Contexts through edits.

Concept‑Set rows

RSCR‑F15‑E5 (Row identity). Row ρ@t0 with cells {⟨Cᵢ,λᵢ⟩} → ρ@t1 with {⟨Cᵢ,λᵢ'⟩} ⊢ ρ “same” iff intent(λᵢ')≈intent(λᵢ) ∀i Reading: A row is the same row only if each cell still means the same Local-Sense in its Context. Otherwise, mint a new row and retire the old (F.7F.8).

RSCR‑F15‑E6 (Row shrink‑before‑split). ρ@t1 loses a cell due to edition split ⊢ prefer keep ρ@t0 + add new row ρ' rather than mutating ρ silently Reading: When a Context splits meaning, preserve history: add instead of rewriting.

Role Descriptions (Role and Status)

RSCR-F15-E7 (Single-cell continuity). Role Description τ@t0 → τ@t1 ⊢ anchor(τ@t1)=one SenseCell ∧ (sameCell ∨ justifiedSwitch) Reading: A Role Description keeps pointing to one SenseCell; switching cells requires a one-sentence rationale tied to the row you reuse (F.4, F.8).

RSCR-F15-E8 (Alias-then-rename). name(τ@t0) → name(τ@t1) ⊢ create alias(name@t0→name@t1) unless semantics changed Reading: If only the name improves, create an Alias (F.13). If semantics change, mint a new Role Description instead.

Bridges

RSCR‑F15‑E9 (Re‑validate on movement). Bridge β: ⟨⟨C₁,λ₁⟩ ↔ ⟨C₂,λ₂⟩, CL, loss⟩ @t0; any λᵢ mutates @t1 ⊢ β re‑examined; CL may drop; loss updated Reading: Any end‑cell change forces a fresh look; default is more caution (CL non‑increasing unless newly justified).

RSCR‑F15‑E10 (No bridge drift to identity). series of edits turns β(kind≠≡) → β(kind=≡) ⊢ require new witness set Reading: Equivalence (≡) is special: it needs a fresh witness; you cannot slide into ≡ by minor edits.

Status windows & SoD

RSCR‑F15‑E11 (Window stability). Status family Σ windows@t0 → @t1 ⊢ window set changes only if variance‑of‑meaning is shown Reading: Add or remove windows only when meaning genuinely varies across time/scale—never for convenience (F.10).

RSCR‑F15‑E12 (SoD invariance). SoD(τᵢ ⟂ τⱼ) @t0 → @t1 ⊢ SoD preserved; no new Role Description conflates τᵢ,τⱼ Reading: Separation‑of‑Duties remains in force through changes (F.14).

Anti‑patterns the harness catches (and the fix)

CodeAnti‑patternSymptomWhy it breaksHarness catch → Fix
H1Row‑of‑oneRow spans a single ContextNo cross‑projection; fake unificationS9 fails → either add the second cell or drop the row
H2Bridge‑by‑name“Same name” assumed across ContextsImports meaning; hides lossS12 missing → assert an explicit Bridge with CL+loss or withdraw the claim
H3Silent edition swap“BPMN” changed to 2.0 → 2.1 without noteRetcons past statementsE1 fails → mint a new Context or mark recency; never overwrite
H4Locality blurLocal‑Sense mixes two ContextsCross‑context clusteringS3/S6 fail → split back by Context; keep per‑Context normal forms
H5Window‑as‑typeNew Status type for weekend vs weekdayType inflation; hides time stanceS14/E11 fail → represent as windows, not types
H6SoD bypassBundle fuses mutually exclusive rolesHidden duty conflictS15/E12 fail → keep roles separate; use Bundle only as reuse map
H7Alias-as-mergeAlias used to smuggle semantic changeLoses history; misleads readersE8 fails → if semantics changed, mint new Role Description; keep old with alias note only for pure rename
H8CL optimismMost Bridges set to high CL by defaultOver‑trust; brittle reuseE9/E10 → demand witnesses; prefer conservative CL

Worked “dry‑runs” (composite slices)

Each dry‑run shows how the checks fire when something evolves. These are thinking rehearsals, not procedures.

New edition of ITIL (services) arrives

Slice. Contexts: ITIL 4(2020)@t0 → ITIL 4(2024)@t1; Row: Service-Availability; Role Description: AvailabilityStatus; Bridges: to SOSA/SSN observations.

Fire. E1 (no silent replacement): decide new Context ITIL 4(2024) because SLO definitions narrowed. E5 (row identity): row Service‑Availability@t1 new (cells now ⟨ITIL2024:SLO⟩ + ⟨SOSA:obs⟩). Retire old row with note. E9 (bridge re‑validate): sampling assumptions changed → lower CL by one and update loss note (new calc window). E7 (single-cell Role Description): AvailabilityStatus still points to exactly one cell (ITIL2024:SLO). Name unchanged → no alias needed.

Pay‑off. History is preserved; reuse remains safe; acceptance bindings (F.12) still compare anchored things.

Rename a Role Description without changing meaning

Slice. Role Description IncidentStatus@t0 → ServiceIncidentStatus@t1; same SenseCell.

Fire. E8 (alias‑then‑rename): create Alias IncidentStatus → ServiceIncidentStatus (F.13). S8 (name discipline): new name fits the suffix rules (F.5).

Pay‑off. Readers find both names; semantics untouched.

Tighten a Bridge (low-CL overlap → equivalence)

Slice. Bridge β between ⟨OWL:subclass⟩ and ⟨FCA:order‑edge⟩ was overlap, CL=2. New formal result proves equivalence in the covered fragment.

Fire. E10 (no drift to identity): to move from overlap→≡, present a new witness set (fragment constraints). S12 (bridge explicit): update β(kind=≡, CL=3) with precise scope/loss (“only within acyclic concept lattices with…”)

Pay‑off. Equivalence is scoped and auditable, not hand‑waved.

Window misuse detected

Slice. Team proposes PeakHoursAvailabilityStatus as a new Status type.

Fire. S14/E11 (window honesty): reject new type; define a window for peak hours on AvailabilityStatus.

Pay‑off. No type explosion; the evaluation logic in F.12 stays uniform.

Migration cues (conceptual)

  1. When in doubt, fork—not overwrite. New edition? Add a Context unless you can argue sense identity in one sentence.
  2. Name pain → aliases, not merges. If a label confuses, rename with an alias; if meaning changed, mint new.
  3. Rows age gracefully. Never retrofit a row; retire and re‑row when any cell’s sense shifts.
  4. Bridges get colder over time. Prefer to lower CL when editions drift; raising CL needs fresh witnesses.
  5. Windows absorb variation. Resist splitting Status types; window by time/scale/phase.
  6. Guard SoD early. When binding composite responsibilities (F.14), check SoD before naming.
  7. Teach the delta. When things evolve, write one‑breath deltas (“what changed, why it matters”) as part of the example narrative—no registries implied.

Acceptance summary (“Harness green”)

A unification slice is publish‑ready when:

  1. All SCR (S‑Local & S‑Cross) hold for the current snapshot (Contexts, Local‑Senses, SenseCells, rows, Role Descriptions, Bridges, windows).
  2. All RSCR (R‑Evo) hold against the previous snapshot: no silent replacements; rows either unchanged or retired+reborn; Bridges re‑validated with CL non‑inflated without witnesses; windows adjusted only for real variance; SoD intact.
  3. One micro‑witness per moving part exists in the text (tiny example showing the check in action).
  4. Memory rule still holds: the active Context set for the line fits in a careful mind without external aids (F.1).

Didactic distillation (90‑second teaching script)

“Use the harness to think like a safety net. First, the SCR threads: everything is local to a Context; Role Descriptions point to one SenseCell; rows actually cross Contexts; Bridges are explicit with CL and a loss note; windows capture variation without spawning new types. Then, the RSCR knots: never overwrite an edition—fork the Context or mark recency; keep rows stable by retiring and re-rowing; Bridges get re-validated (CL goes down unless you bring proof); renames become aliases unless meaning changes; windows absorb time/scale shifts; SoD stays intact. If you can pass these thoughts on a small slice—and explain each pass in one breath—your unification is green. No tooling, no roles, no dashboards. Just clean Contexts, honest rows, cautious bridges, and names that help minds meet.”

F.15:End

Worked‑Example Template (Cross‑Domain)

“Show the thought, not the tooling.” Status. Architectural pattern. Builds on: E.10.D1 Lexical Discipline for “Context” (D.CTX); F.1F.15. Coordinates with. B.3 Trust & Assurance Calculus (CL on Bridges); Part C patterns (Sys‑CAL, KD‑CAL, Kind-CAL, Method‑CAL).

Intent & applicability

Intent. Provide a single, didactic page template for cross‑domain worked examples that makes every claim local to a Context (Context), every Cross‑context step explicit via a Bridge, and every named role template or status template traceably tied to one SenseCell. The template is notation‑free and tool‑agnostic; it captures how to think the example so others can replay it.

Applicability. Use whenever you illustrate any FPF construct that spans more than one Context: Role Assignment & Enactment bindings, acceptance checks, measurement-driven claims, type alignment, control/actuation stories, etc.

Non‑goals. No registries, workflows, editors, or storage formats; no step‑by‑step “team procedures.” This pattern shapes the page a reader sees, not how it was produced.

Problem frame

Cross‑domain examples often fail in four predictable ways:

  1. Global words. Process, role, service, execution used without the Context, inviting drift.
  2. Hidden bridges. “It’s basically the same” across disciplines, with losses left implicit.
  3. Name without sense. A Role Description name appears with no visible tie to a SenseCell.
  4. List without structure. Facts line up but never meet in a single Concept‑Set row.

The template counters these by forcing Contexts → senses → row → bridges, in that order.

Core idea (didactic)

A robust worked example is a compact theatre:

  • Stage = a declared unification line (which threads of Part C are in play).
  • Backdrop = Context set (Contexts from F.1), each with a one‑line Card.
  • Actors = SenseCells (⟨Context, Local‑Sense⟩) you will actually use.
  • Plot = one Concept‑Set row where those SenseCells are aligned for this example.
  • Cues = Role Descriptions that reference exactly one SenseCell each.
  • Cross‑talk = Bridges across Contexts (with kind, CL, and loss).
  • Timing = Windows (if status varies across time/scale) and SoD (if duties must remain separate).
  • Moral = a handful of harness checks (F.15) that the reader can verify mentally.

Minimal vocabulary (this pattern only)

  • Context / Context — always U.BoundedContext (E.10.D1).
  • Local‑Sense — a sense clustered within one context (F.3).
  • SenseCell — address ⟨Context, Local‑Sense⟩.
  • Concept‑Set row (ρ) — a Cross‑context alignment for “what we treat as one” in this example (F.7/F.8).
  • Role Description (τ) — a Role or Status that points to one SenseCell (F.4F.6).
  • Bridge (β) — explicit Cross‑context relation with kind (≡ / overlaps / broader‑than / narrower‑than), CL, and loss note (F.9).
  • Window — a bounded interval (time/scale/phase) tied to a Status (F.10).
  • SoD — Separation-of-Duties constraint among Roles (F.14).

The one‑page Worked‑Example Canvas

Each bullet is a thought you make visible, not a form field.

  1. Title & claim. A short name + one‑sentence claim you will demonstrate. Example: “Service Uptime as Evaluated by Runtime Executions” — “We compare Execution (IEC) observations to SLO (ITIL) within a declared window.”

  2. Unification line. Which Part C threads are active. Example: Enactment + KD‑CAL (sensing) + Sys‑CAL (execution).

  3. Context set (compact Cards). 3–6 Contexts from F.1 with one‑line scope and, if inherent, design vs run stance. Example: BPMN 2.0 (design: workflow graph); PROV‑O (run: Activity uses/generates); ITIL 4 (design: SLO/SLA); SOSA/SSN (run: Observation); IEC 61131‑3 (run: task executes).

  4. SenseCells in play. List exactly the Local‑Senses you will use, each prefixed by its Context. Example:ITIL: service‑level‑objective⟩, ⟨SOSA: observation⟩, ⟨IEC: execution‑task⟩, ⟨PROV: activity⟩.

  5. The Concept‑Set row (ρ). A single line that places the cells you treat as “the same” for the claim, with a one‑breath justification. Example row ρ: { ⟨ITIL:SLO⟩ ↔ ⟨SOSA:observed‑availability⟩ } — We treat “target availability” and “observed availability” as comparable magnitudes in a specific window.

  6. Bridges (β). For any Cross‑context relation not captured by ρ (or that requires nuance), state kind, CL, loss. Example β₁:IEC:execution‑taskoverlapsPROV:activity⟩, CL=2, loss: PROV lacks cyclic scheduling semantics. Example β₂:SOSA:observationnarrower‑thanITIL:measurement⟩, CL=2, loss: ITIL omits procedure metadata.

  7. Role-Description hooks. Name the Role or Status templates and the one SenseCell each references. Example: AvailabilityStatus → ⟨ITIL:SLO⟩; Execution → ⟨IEC:execution‑task⟩; EvidenceObservation → ⟨SOSA:observation⟩.

  8. Windows & SoD (if relevant). Spell any status windows and any SoD you rely on. Example: Window: monthly, business‑hours; SoD: OperatorSLO‑Owner.

  9. Micro‑narrative (5–7 lines). Walk the reader through the claim using Context‑prefixed words and the row/bridges above. Example (abridged): “A task (IEC) runs the control program. Its observations (SOSA) yield availability over the monthly window. We compare those to the SLO (ITIL) in the same window. Where we refer to activity (PROV) we do so via β₁ (overlap, CL=2). The row ρ carries the comparison; the Bridge β₂ explains why ‘measurement’ in ITIL is broader than ‘observation’ in SOSA.”

Harness pings (F.15). S-Row-Cross, S-RoleDesc-SingleCell, E-NoSilentEdition. Example: S‑Row‑Cross, S‑RoleDescription‑SingleCell, E‑NoSilentEdition.

Memory rule. If your Canvas cannot fit on a single page (or one slide), the example is teaching the wrong thing.

Invariants (normative)

  1. Locality of meaning. Every term in the narrative appears with its Context at first mention (process (BPMN), activity (PROV), …).
  2. At least one row. The example MUST include ≥ 1 Concept‑Set row spanning ≥ 2 Contexts.
  3. Single-cell Role Description. Every Role Description in the example MUST point to one SenseCell.
  4. Explicit bridges. Any Cross‑context step not explained by the row MUST appear as a Bridge with kind, CL, and loss.
  5. Temporal honesty. If a Context fixes design vs run, the narrative respects it.
  6. Window discipline. If comparison depends on time/scale/phase, a window is stated rather than minting a new Status type.
  7. SoD integrity. If duties are involved, SoD is explicit and unbroken.
  8. Didactic parsimony. One page, one claim, one row (or a tiny bundle of closely related rows).

The row panel (how to show it without notation)

Show the row as a compact two‑to‑five‑column list:

  • Column header = Context.
  • Cell = Local‑Sense label (tech register; optional plain label on next line).
  • Footline (one line) = “row reason”—why these cells belong in this row for this claim.

Example visual (linear text): ITIL 4: service‑level‑objective | SOSA/SSN: observed‑availabilityRow reason: both quantify availability for the same window; units harmonised by KD‑CAL; procedural metadata differs (captured in loss of β₂).

Worked micro‑example (didactic)

Title. Alarms Should Not Satisfy Uptime Claim. An alarm‑only Execution (IEC) cannot satisfy the SLO (ITIL) because observation (SOSA) windows exclude time in “alarm state.”

Contexts. IEC 61131‑3 (run), SOSA/SSN (run), ITIL 4 (design). SenseCells. ⟨IEC:execution‑task⟩, ⟨SOSA:observation⟩, ⟨ITIL:SLO⟩. Row ρ. { ⟨ITIL:uptime‑SLO⟩ ↔ ⟨SOSA:observed‑availability⟩ } — comparable magnitudes in the calendar‑month window. Bridge β. ⟨IEC:alarm‑state⟩ narrower‑than ⟨SOSA:observation‑qualifier⟩, CL=2, loss: SOSA does not prescribe plant‑specific alarm semantics. Role-Description hooks. AvailabilityStatus → ⟨ITIL:SLO⟩; EvidenceObservation → ⟨SOSA:observation⟩. Window. Calendar month, business‑hours, exclusion: alarm‑state intervals. Micro‑narrative (4 lines). A task (IEC) runs; when the plant is in alarm state, observations (SOSA) are flagged and excluded from the availability window. We then compare the remaining interval to the SLO (ITIL) via row ρ. The Bridge β clarifies why the flag is a qualifier in SOSA, not a Status type in ITIL. Harness pings. S‑Row‑Cross, S‑RoleDescr‑SingleCell, S‑Window, S‑TemporalHonesty.

Relations (with other patterns)

Builds on: F.1 (Contexts), F.2F.3 (terms & senses), F.4F.6 (roles), F.7F.8 (rows), F.9 (bridges), F.10 (windows), F.14 (SoD), F.15 (harness).

Constrains: Any example placed in Part C or Part B must render its claim through this canvas (or a faithful reduction), so readers can run F.15 mentally.

Didactic distillation (60‑second script)

“A good cross‑domain example fits on one page. First, name the claim. Then show the Contexts you’re using. List the SenseCells you will actually touch. Draw one row that makes them the same for this claim. Every Cross‑context nuance you can’t justify in that row becomes a Bridge with a kind, a CL, and a loss sentence. Point each Role Description to one cell. If time/scale matters, state the window; if duties matter, state SoD. Finish with two or three harness pings from F.15. That’s it—no tooling, no long procedures. The reader can now replay your thought and agree (or disagree) at the right place.”

Anti‑patterns & remedies

#Anti‑patternSymptom in the pageWhy it breaks thinkingRemedy (point to this template & sibling patterns)
AP‑1Row‑less tourA list of facts from many Contexts with no Concept‑Set row.Reader cannot see what is treated as the same for the claim.Include ≥ 1 row ρ spanning ≥ 2 Contexts (§5‑5, §6‑2).
AP‑2Stealth bridgingPhrases like “basically the same” with no Bridge.Imports meaning Cross‑context; hides losses.State a Bridge β with kind, CL, loss (§5‑6, F.9).
AP-3Role-Description vaguenessA Role or Status named without a SenseCell.Why it breaks thinkingRemedy (point to this template & sibling patterns)
AP‑4Global wordsprocess, role, service appear unprefixed.Context‑less words drift mid‑example.Prefix first mention with the Context (process (BPMN)) (§6‑1, E.10.D1).
AP‑5Window‑free comparisonNumbers/targets compared with no stated window.Apples‑to‑oranges across time/scale.Declare a Window for the Status (§5‑8, F.10).
AP‑6SoD leakageDuties named but the same actor implicitly holds both.Violates Separation‑of‑Duties intent.State SoD and keep duties disjoint (§5‑8, F.14).
AP‑7DesignRunTag blurA design‑time notion used as if it were a run‑time occurrence.Category error; wrong Context claims.Mark Context stance and keep claims in‑stance (§5‑3, §6‑5).
AP‑8Edition haze“BPMN”, “ITIL” without edition/profile.Debates about “what the book says”.Put name + edition on each Card (§5‑3).
AP‑9CL silenceBridge kind given, no CL or loss note.Reader cannot assess translation risk.Add CL and loss in every Bridge (§5‑6, B.3).
AP‑10Over‑rowTen cells glued into one row “for convenience”.Collapses distinct senses; unreadable.Prefer one tight row; split into two rows if needed (§5‑5, §8).

Extended worked micro‑examples

Each example fits the one‑page canvas (§5) and makes the row and bridges do the work.

Type alignment: OWL class vs FCA concept (design‑time only)

Title & claim. “Two Lenses on Pump: OWL class and FCA concept align for catalogue reasoning.” Unification line. Kind-CAL (design) + FCA (design). Contexts. OWL 2 (profiles) — classes, subClassOf (design). FCA corpus — formal concepts, lattice order (design). SenseCells. ⟨OWL:class ‘Pump’⟩, ⟨FCA:formal‑concept ‘Pump’⟩. Row ρ. { ⟨OWL:Pump⟩ ↔ ⟨FCA:Pump⟩ } — same practical extension in this product catalogue. Bridge β. ⟨FCA:lattice‑order⟩ overlaps ⟨OWL:subclass‑order⟩, CL=2, loss: FCA intents may include context attributes not modeled in OWL restrictions. Role-Description hooks. TypeLabel → ⟨OWL:class⟩ (for naming), no runtime Role Assignment/Enactment. Micro‑narrative (3 lines). For catalogue queries, the instances covered by OWL class Pump match those of the FCA concept created from the same attributes; we treat them as one row. The orderings diverge in nuance (β), but not for membership in this example. Harness pings. S‑Row‑Cross, S‑TemporalHonesty (design only), S‑Bridge‑Kind‑CL.

Role vs permission: SoD in enactment vs access control

Title & claim. “Behavioral role (BPMN) is disjoint from access role (RBAC); keep duties separate.” Unification line. Role Assignmnent and Enactment (design & run) + access/deontics (design). Contexts. BPMN 2.0 — participant/lanes (design). NIST RBAC (2004) — roles/permissions (design). SenseCells. ⟨BPMN:participant⟩, ⟨RBAC:role⟩. Row ρ.(intentionally none) — we do not treat them as the same. Bridge β. ⟨BPMN:participant⟩ disjoint ⟨RBAC:role⟩, CL=3, loss: none—different dimensions (behavioral mask vs permission grouping). Role-Description hooks. Operator → ⟨BPMN:participant⟩; AccessRole → ⟨RBAC:role⟩. SoD: OperatorAccessRole‑Admin. Window. Not applicable. Micro‑narrative (3 lines). We show SoD by prohibiting the same actor from holding Operator and AccessRole‑Admin. The disjoint β prevents leakage between behavioral masks and permission bundles. Harness pings. S‑RoleDescr‑SingleCell, S‑SoD, S‑Bridge‑Disjoint.

Method quartet: from MethodDescription to Work with observations

Title & claim. “Behavioral role (BPMN) is disjoint from access role (RBAC); keep duties separate.” Unification line. Role Assignment & Enactment (design & run) + access/deontics (design). Contexts. SPEM 2.0 (design: Method or MethodDescription), PROV‑O (run: Activity), SOSA/SSN (run: Observation), ITIL 4 (design: SLO). SenseCells. ⟨SPEM:MethodDescription⟩, ⟨PROV:activity⟩, ⟨SOSA:observation⟩, ⟨ITIL:SLO⟩. Row ρ. { ⟨ITIL:SLO:build‑time⟩ ↔ ⟨SOSA:observed‑build‑duration⟩ } — compare promised vs observed duration on the same window. Bridges. β₁: ⟨SPEM:MethodDescription⟩ narrower‑than ⟨PROV:activity‑plan⟩, CL=2, loss: PROV lacks prescriptive structure; β₂: ⟨SOSA:observation⟩ narrower‑than ⟨ITIL:measurement⟩, CL=2, loss: ITIL abstracts from procedure. Role-Description hooks. Operator → ⟨BPMN:participant⟩; AccessRole → ⟨RBAC:role⟩. SoD: OperatorAccessRole-Admin. Window. Release window: calendar week. Micro‑narrative (4 lines). The MethodDescription (SPEM) implies a target build‑time; Work (PROV activity) occurs; observations (SOSA) provide actuals; we compare against the SLO (ITIL) via row ρ over the calendar week window. Bridges β₁–β₂ explain why plan/measure semantics do not collapse. Harness pings. S‑Row‑Cross, S‑Window, S‑RoleDesc‑SingleCell, S‑TemporalHonesty.

Reasoning primitives (judgement schemas)

These are mental checks you can perform on any example page.

  1. Row validity cells(ρ) = {⟨Cᵢ,Sᵢ⟩} with |Contexts(ρ)| ≥ 2 ⊢ validRow(ρ) Reading: A row is valid only if it spans at least two Contexts and all entries are legitimate SenseCells (from F.3).

  2. Bridge coverage coRef(Ca,Cb) ∧ ¬sameRow(Ca,Cb) ⊢ requires β(Ca↔Cb) Reading: If two Contexts are co‑referenced in the narrative but their senses are not placed in the same row, an explicit Bridge is needed.

  3. Role-Description single-cell Role Description τ used ⊢ ∃!⟨C,S⟩ : ref(τ)=⟨C,S⟩

  4. Window sufficiency compare(qᵢ@Cᵢ, qⱼ@Cⱼ) ⊢ windowDeclared Reading: Any Cross‑context quantitative comparison calls for a stated Window.

  5. Temporal honesty C has stance s ∈ {design, run} ⊢ claims@C must respect s Reading: Do not assert run‑facts in a design‑only Context, or vice versa.

  6. SoD integrity SoD(D₁ ⟂ D₂) ∧ assign(actor, D₁) ∧ assign(actor, D₂) ⊢ violation Reading: A declared SoD cannot be violated inside the example.

  7. Bridge clarity β given ⊢ kind(β) ∧ CL(β) ∧ loss(β) Reading: Every Bridge shows kind, CL, and a one‑line loss.

  8. Edition clarity card(C) ⊢ has(name, edition) Reading: Each Context Card specifies name + edition/profile.

  9. Harness ping mapping ping ∈ {S‑*, E‑*} ⊢ ping ⇒ subset of judgements above Reading: Each named harness check (F.15) has a clear reading in these judgements.

Acceptance tests (SCR/RSCR)

Static conformance (SCR)

  • SCR‑F16‑S01 (Row present). The page contains ≥ 1 Concept‑Set row spanning ≥ 2 Contexts.
  • SCR‑F16‑S02 (Bridge explicit). Every Cross‑context assertion not justified by a row is shown as a Bridge with kind, CL, loss.
  • SCR-F16-S03 (Role-Description anchoring). Each Role Description appearing in the page references exactly one SenseCell.
  • SCR‑F16‑S04 (Context prefixes). First mention of each ambiguous term is Context‑prefixed.
  • SCR‑F16‑S05 (Window discipline). Any numeric comparison across Contexts names a Window.
  • SCR‑F16‑S06 (DesignRunTag). Claims respect each Context’s DesignRunTag stance.
  • SCR‑F16‑S07 (SoD). If duties are named and SoD is relevant, SoD is stated and unviolated.
  • SCR‑F16‑S08 (One‑page parsimony). The example fits the one‑page canvas; if extended, each sub‑page still respects §6 invariants.

Regression (RSCR)

  • RSCR‑F16‑E01 (Edition drift). When a Context’s edition changes, the example either (a) is unaffected or (b) adds a note adjusting β or the row; no silent rewrites.
  • RSCR‑F16‑E02 (Bridge re‑score). If an upstream CL definition changes (B.3), affected Bridges on the page show the new CL and, if needed, an updated loss sentence.
  • RSCR‑F16‑E03 (Row resilience). If a SenseCell is split in F.3 (sense refinement), the example either keeps the same row using one child sense, or splits into two rows with a short justification.
  • RSCR‑F16‑E04 (Window clarity). If organisational cadence changes (e.g., from monthly to weekly), windows on the page are updated explicitly.

Migration notes (conceptual)

  1. Refactor long tutorials. Extract the claim; pick 3–6 Contexts (Cards); list the SenseCells you actually use; write one tight row; surface any cross‑talk as Bridges with loss notes; delete everything else.
  2. Split crowded rows. If a row tries to carry more than ~4 cells, split into two rows and write a one‑line purpose for each.
  3. Stabilise vocabulary. If you find yourself rewriting terms mid‑page, you likely forgot a Context; return to F.1 and add a Card.
  4. Teach the bridge itch. Leave “these are the same” feelings ungratified until you can articulate kind, CL, loss in one sentence.
  5. DesignRunTag respect. If a design‑only Context tempts you into runtime talk, move that part of the narrative into a run‑Context and Bridge as needed.
  6. Keep the page living. When upstream rows/bridges evolve (F.7F.9), adjust the page minimally and call out the change in a margin note (conceptual, not procedural).

Teaching variants (all obey §6 invariants)

  • Two‑Context equivalence. Smallest case: 1 row, 2 Contexts, β (≡, CL=3) to explain why they’re truly the same for this claim.
  • Triangulation. 1 row, 3 Contexts; typical for measurement ↔ service ↔ execution.
  • Disjointness lesson. No row; one β (disjoint) plus a short SoD story.
  • Window primer. Same sense across Contexts but different default windows; the page is about the window choice, not the term.

Didactic checklist (author’s quick scan)

  • One sentence claim?
  • Contexts (with editions) visible?
  • SenseCells named (tech & plain labels acceptable)?
  • Exactly one tight row (or two, each justified)?
  • All Cross‑context steps shown as β(kind, CL, loss)?
  • Role Description → one SenseCell each?
  • Window present where numbers meet?
  • SoD stated where duties appear?
  • Page fits a single view?

Closing distillation (30‑second echo)

A useful worked example is a one‑page alignment: claim → Contexts → cells → one row → explicit bridges → Role-Description hooks → window/SoD if needed. No tooling, no process charts—just visible thinking that any careful reader can replay and critique at the right place.

F.16:End

Unified Term Sheet (UTS)

“One table that a careful mind can hold.” Status. Architectural pattern. Builds on: F.1F.3 (Contexts → seeds → local senses), F.4 (Role Characterisation), F.5 (Naming), F.7 (Concept‑Set table), F.8 (Mint/Reuse decision), F.9 (Bridges), F.10F.12 (Status & method/service bindings), F.15 (SCR/RSCR). Coordinates with: A.1.1 U.BoundedContext, A.7 Strict Distinction, A.8 Heterogeneity, A.11 Ontological Parsimony, A.15 Role–Method–Work Alignment. Non‑goals. No registries, workflows, editors, or storage formats. No by‑name Cross‑context equivalence. No “data pipeline.” This pattern prescribes what a UTS is and how to judge it, not how to generate files.

Intent & Applicability

Intent. Provide a single, normative table—the Unified Term Sheet (UTS)—that distils the output of F.1F.12 into human‑readable rows. Each row expresses one Concept‑Set unified into one FPF U.Type with its Tech/Plain names and cross‑context senses. The UTS is the front‑door view that authors, engineers, and managers use; it replaces scattered notes and eliminates guesswork.

Applicability. Produce a UTS per FPF pattern thread (e.g., Role Assignment & Enactment, Method quartet, Trust & Evidence). Use it:

  • to name U.Types and their Tech/Plain labels (F.5),
  • to teach the mapping from familiar canons to unified concepts,
  • to audit coverage and heterogeneity (A.8), and
  • to feed examples in Parts A/C without re‑explaining terminology.

Why now. Earlier F‑patterns define how to think. F.17 defines what you publish so others can think with you.

Problem Frame

Without a single sheet:

  1. Locality is lost. Mappings hide in prose; readers re‑globalise words.
  2. Naming drifts. Teams adopt ad‑hoc labels that collide later.
  3. Coverage is opaque. No quick check that coverage spans ≥ 3 domain families across the sheet (A.8).
  4. Didactic load spikes. Each section re‑teaches the same terms.

UTS fixes this by putting the unification decision and the cross‑context evidence on one line per concept.

Forces

ForceConstraint in UTS
Didactic primacy vs. fidelityUTS keeps two names (Tech/Plain) and one‑line rationale, but never misstates a source meaning.
Parsimony vs. recallEach row is one concept; the UTS as a whole demonstrates heterogeneity across ≥ 3 domain families (A.8). Rows may cite fewer Contexts when the concept truly appears in fewer.
Locality vs. comparabilitySenses are Context‑scoped (E.10.D1). Cross‑context relations are shown only as explicit bridges (F.9) with CL.
General usabilitySheet must be legible on paper and memorisable (block structure, stable row order).

Core Idea

A UTS is a Concept‑Set table with names. Each row = one Concept‑Set unified into one FPF U.Type (the “what we mean”). Each column family shows how this concept appears in the chosen contexts of meaning (F.1).

Two canonical layouts are allowed (pick one or publish both):

  • Layout A — Kernel‑first: rows keyed by FPF U.Type; Bounded‑Context Columns (BCC).
  • Layout B — Base‑concept: rows keyed by Base concept (EN/RU) of a discipline, then unified to U.Type; Discipline Columns (DC).

Both layouts are normative; choose based on audience. In Layout A, comparability is by BCC (Bounded‑Context Column); in Layout B, comparability is by DC (Discipline Column); never conflate the two.

Minimal Vocabulary (for this pattern)

  • UTS (Unified Term Sheet). The published, human‑readable table per thread.
  • Context. Alias in Tech register for U.BoundedContext (E.10.D1). Normative unit of meaning; every SenseCell is scoped to a Context (name + edition).
  • Bounded‑Context Column (BCC). A didactic column used only in Layout A; one column per Context (U.BoundedContext) from the F.1 cut; not a model element; the header includes the Context name + edition.
  • Discipline Column (DC). A discipline vantage used only in Layout B (e.g., Operational Management, IT/Software, Physics). A DC is not a Bounded‑Context Column and does not carry editions.
  • Concept‑Set (CSR). One unified concept with pointers to its SenseCells.
  • SenseCell. (Context × Local‑Sense) address—how a Context “says that thing”.
  • Bridge / CL. Explicit cross‑context mapping (F.9) with Congruence Level and Loss note.
  • Plain Twin (LEX). The LEX record pairing the Unified Tech name with its Unified Plain name for a U.Type; governed by PTG and referenced by Twin‑Map Id (LEX) (E.10 LEX‑BUNDLE).
  • Block Plan. Didactic grouping of rows to keep the sheet memorizable.
  • Unified Tech name / Unified Plain name. Dual‑register names chosen per F.5; the Tech name is the neutral, unified term for the U.Type, not a borrowed Context name.

Discipline. “Context” always means U.BoundedContext (E.10.D1). No global words.

Row Schema (normative)

Every UTS row MUST carry the following fields (verbatim headings recommended):

FieldPurpose
# / BlockStable id and didactic block (see §7).
FPF U.TypeCanonical kernel type (e.g., U.Work).
Unified Tech nameShort technical name used in spec prose (F.5).
Unified Plain nameEveryday name for non‑specialists (F.5).
Plain‑Twin Governance (PTG) (optional)Stance for the Unified Plain twin: {Strict, Guarded, Provisional}; use when additional discipline of the Plain twin is required (E.10 LEX‑BUNDLE).
Twin‑Map Id (LEX) (optional)Identifier of the Tech↔Plain twin record in the LEX‑BUNDLE; cite when PTG ≠ Strict or when multiple candidate twins exist.
FPF DescriptionOne‑line definitional gist (no examples).
SenseCells (by context)Per selected Context: the local term(s) or construct that best realises the concept (one cell per Context).
Bridges (CL/Loss)For any cross‑context relation, record the F.9 Bridge with CL and a 2–6‑word loss note; if identity, mark CL=3 (identity).
Unification RationaleOne sentence: why these senses are the same conceptually.
Notes (optional)Brief DesignRunTag or trip‑wire hints (e.g., “design vs run”).

Constraint. “SenseCells (by Context)” MUST cite at least three distinct Contexts overall across the sheet for the thread (A.8). A single row may show fewer if the concept truly appears in fewer contexts; coverage is a property of the whole UTS.

Discipline: Every SenseCell must cite the Context name + edition (e.g., “BPMN 2.0 (2011): Activity instance”).

NQD Fields (normative; when applicable)

If a UTS row describes a generator, selector, or typed portfolio-publication surface (design‑time or run‑time artefact), it MUST add the following fields. These are publication fields, not tooling‑specific formats.

FieldPurpose
N (Novelty)Lawful novelty claim tied to CharacteristicSpaceRef + DistanceDefRef (declare metric/pseudometric & invariances; cite edition ids).
U (Use‑Value)Declared acceptance/test value under the active CG‑Frame (units & scale typed per MM‑CHR).
C (ConstraintFit)Feasibility against ResourceEnvelope/RiskEnvelope (and relevant deontic/ethics clauses); no unknown→0 coercion.
D_P (Portfolio Diversity)Diversity contribution relative to the current PortfolioPack (ArchiveConfig, grid/binning, K‑capacity, dedup).
E/E‑LOG policy‑id (PolicyIdRef)Edition id of the explore/exploit governor policy that governed generation/selection budgets.

Note. These fields extend the Row Schema; they do not change SenseCells/Bridges/Names. Rows that are purely definitional (no generator/selector/typed portfolio-publication semantics) do not carry §6.1.

Autonomy fields (when applicable)

Add the following columns (nullable; required when autonomy is claimed by the row’s subject):

  • AutonomyBudgetDeclRef (id, version)
  • Aut-Guard policy-id (PolicyIdRef)
  • OverrideProtocolRef
  • Scope (G) (autonomy scope)
  • Γ_time (admission window selector)
  • (optional) ScaleLensPolicyRef
  • (optional) ScaleLensOptIn ∈ {OptedIn, Neutral, OptedOut} Note. These fields are required for UTS rows that describe a Role, Method, Service, or Selector with autonomy claims; optional fields make Bitter‑Lesson/Scale‑Lens an explicit opt‑in with published criteria.

Block Plan (didactic grouping)

A UTS MUST declare a Block Plan—the sequence of blocks that group rows. Blocks are thread‑specific. Example Block Plan for Role Assignment & Enactment (matches your earlier tables):

  • Block A - Context & RolesU.BoundedContext, U.Role, U.RoleAssignment, U.Capability.
  • Block B - Method & DescriptionU.Method, U.MethodDescription, Access/Acceptance descriptions (fields of U.PromiseContent).
  • Block C - Execution & ScheduleU.Work, U.WorkDescription, U.Observation.
  • Block D - Service & DeonticsU.PromiseContent, U.SpeechAct, U.Commitment, U.PromiseContent, U.PromiseFulfillmentEvaluation.
  • Block E - Carriers & BridgesU.Carrier, Alignment (Bridge entry).
  • Block R - Knowledge Units & StatusesU.Episteme, U.EvidenceRole, U.StandardStatus, U.RequirementStatus, U.DefinitionRole, U.AxiomaticCoreRole.

Rule. Block names are didactic, not ontological. Do not infer mereology or subtyping from blocks.

Column Families (two canonical layouts)

Layout A — Kernel‑first (U.Type as rows)

Columns:

  • FPF U.Type - Unified Tech name - Unified Plain name - Plain‑Twin Governance (PTG) - Twin‑Map Id (LEX) - FPF Description (left rail; PTG/LEX are optional)
  • Bounded‑Context Columns (BCC) — one column per Context (U.BoundedContext) from the F.1 cut; each header shows name + edition: e.g., OMG BPMN 2.0, W3C PROV‑O, ITIL 4, NIST RBAC, W3C SOSA/SSN, OMG Essence (Language), DEMO/DEMO‑EO, PMBOK 7, CM/BPM (CMMN/BPMN), IEC 61131‑3, ODRL 2.2, ISO 80000‑1 / Metrology(your chosen 12 Contexts)
  • Bridges (CL/Loss)
  • Unification Rationale
  • Notes

Do not mix Discipline Columns (DC) in Layout A. Columns here are only Bounded‑Context Columns (BCC).

Layout B — Base‑concept pivot (discipline columns)

Columns: Base concept - Scale‑map - Unified Tech name - Unified Plain name - Plain‑Twin Governance (PTG) - Twin‑Map Id (LEX) - Formal U.Type - Discipline Columns (DC) (e.g., Operational Management / IT/Software / Physics / …) - Rationale - Notes.

  • Base concept (EN / RU)

  • Scale‑map (Σ / Π / μ) (optional; see §9.4)

  • Unified Tech name

  • Unified Plain name

  • Plain‑Twin Governance (PTG) (optional)

  • Twin‑Map Id (LEX) (optional)

  • Formal U.Type

  • Discipline Columns (DC) (choose 3–5): e.g., Operational Management, IT/Software, Physics, Science/Theory, Math/Proof, Literature, Religion (or other discipline columns suited to the thread)

  • Unification Rationale

  • Notes

Guidance. Publish Layout A for kernel users and spec authors; publish Layout B for cross‑disciplinary onboarding and teaching. Clarification — Plain vs Base concept. In Layout B the Base concept (EN/RU) is a discipline vantage aid and does not substitute for the single Unified Plain name in the left rail. Do not mint alternative unified‑plain synonyms inside DC cells; flag homonym risks with ⚡ in Notes.

Invariants (normative constraints)

  1. Locality. Every SenseCell is Context‑scoped (E.10.D1). No global synonyms.
  2. Bridges only via F.9. Cross‑context equivalence appears only as an explicit Bridge with CL. Any row citing > 1 Context must state at least one Bridge.
  3. Heterogeneity. Across the UTS, coverage must involve ≥ 3 domain families (F.1 Step 2; A.8).
  4. Scale‑map tags (optional but disciplined). If used in Layout B:
    • Σ (Summative): concept’s quantitative properties aggregate across a population of executions/holders.
    • Π (Conjunctive/Compositional): concept composes by required conjunction (all‑of), not by averaging.
    • μ (Micro/Atomic): concept is inherently micro‑level (per single execution/holder). (Tags aid teaching; they do not change semantics.)
  5. Strict Distinction. Use U.Method vs U.MethodDescription, U.Work vs U.WorkDescription, U.Role vs U.RoleCharacterisation correctly; do not collapse entities of concern with their Description epistemes.
  6. Dual register. Every row has Tech and Plain labels per F.5.
  7. One‑breath rationale. The Unification Rationale is a single sentence explaining the conceptual sameness despite local wording.
  8. Unified naming neutrality. The Unified Tech name is the neutral FPF choice per F.5; it is not lifted wholesale from any single Context unless the Concept‑Set justification (F.7) shows identity.
  9. Column discipline. Layout A uses Bounded‑Context Columns (BCC) only; Layout B uses Discipline Columns (DC) only. Mixing is non‑conformant.
  10. Plain‑twin discipline. The single Unified Plain name lives in the left rail; BCC/DC cells carry senses only. Any additional Plain aliases are managed in LEX (tv:*) and never minted per column.

How to Compile (conceptual moves, not a workflow)

M1 - Fix contexts (F.1). Declare the 12 (±) contexts for this thread. M2 - Harvest & cluster (F.2F.3). Identify candidate senses per Context; cluster within Contexts; mint SenseCells. M3 - Form Concept‑Sets (F.7). For each “the‑same‑thing” across Contexts, create one CSR; attach SenseCells. M4 - Name (F.5). Choose Tech/Plain labels; assert the FPF U.Type (or propose a new one via F.8). M5 - Bridge (F.9). Where Cross‑context relations are not exact, assert Bridges with CL and a short Loss note. M6 - Place rows into blocks (§7). Keep the sheet memorisable. M7 - Write one‑line FPF Description and the Rationale. M8 - Run acceptance harness (F.15). Apply the UTS checks in §11.

Note. These are thought moves. No tooling is implied or required.

Acceptance Harness (SCR/RSCR) for a UTS

Static Conformance Rules (SCR‑UTS)

  • SCR‑UTS‑01 (Row completeness). Each row contains: U.Type, Tech, Plain, FPF Description, SenseCells (≥ 1), Rationale.
  • SCR‑UTS‑02 (Dual register). Each row has both Tech and Plain labels; Tech is used in spec prose, Plain in didactics.
  • SCR‑UTS‑03 (Locality discipline). Every SenseCell is cited with its Context name & edition.
  • SCR‑UTS‑04 (Heterogeneity). Across the sheet, the set of referenced Context spans ≥ 3 domain families.
  • SCR‑UTS‑05 (Bridge honesty). All cross‑context sameness claims are expressed via an F.9 Bridge with a CL score; if identity, mark CL=3 and note “identity/no loss” rather than omitting the bridge.
  • SCR‑UTS‑06 (One‑breath rationale). The rationale is ≤ 35 words and states the conceptual invariant that unifies the row.
  • SCR‑UTS‑07 (Block parsimony). Block Plan uses ≤ 7 blocks; each block’s rows can be recited from memory by a careful reader.
  • SCR‑UTS‑08 (Strict Distinction). No row description conflates Method↔MethodDescription, Work↔WorkDescription, Role↔RoleCharacterisation.
  • SCR‑UTS‑09 (Unified naming). Each row’s Unified Tech name complies with F.5 rules (dual register, minimal generality, morphology); it is not a mere alias of one Context unless justified by an F.9 Bridge with CL=3.
  • SCR‑UTS‑10 (Column discipline). Layout A: all non‑left‑rail columns are Contexts with editions. Layout B: all non‑left‑rail columns are discipline columns. No cross‑use.
  • SCR‑UTS‑11 (Plain‑twin hygiene). The Unified Plain name appears once in the left rail (tv:primary). Neither BCC (Layout A) nor DC (Layout B) cells may introduce alternative unified Plain synonyms; use the ⚡ marker in Notes to flag homonym risk where needed.

Regression Rules (RSCR‑UTS)

  • RSCR‑UTS‑A (Edition churn). When a Context’s edition changes, old SenseCells remain addressable; new cells are added; no silent rewrites.
  • RSCR‑UTS‑B (Name stability). Tech labels change only with a documented F.5 decision; Plain labels may evolve didactically if the Tech name stays.
  • RSCR‑UTS‑C (Coverage drift). Adding/removing rows must not reduce family heterogeneity below §9.3.
  • RSCR‑UTS‑D (Loss drift). If new evidence changes a Bridge’s CL/Loss, the row updates both the CL and the 2–6 word loss note.
  • RSCR‑UTS‑E (Plain discipline). No per‑column Plain text appears in BCC/DC columns; any additional Plain aliases are tracked in Annex with tv: entries and counted against the alias budget (F.13).

Canonical Heading Templates (fill with your Contexts/Discipline columns)

Layout A — Kernel‑first


---

*Last Updated: [2026-06-08](https://github.com/ailev/FPF/commit/093d30e806a1466e24032733eb020bb5a5f585cc) — upstream FPF commit `093d30e8` ([github.com/ailev/FPF](https://github.com/ailev/FPF))*