Part C — Kernel Extensions Specifications
Preface node
heading:part-c-kernel-extensions-specifications:33925
What this page is
This is generated FPF reference text from the specification preface or supporting sections. It helps interpret FPF; it is not FPF Reference product documentation.
Methodology
Use it to understand how the specification wants to be read, then return to a route, pattern, or work packet for active work. Cite generated IDs only when the wording changes the task decision.
Content
Epistemic holon composition (KD-CAL)
Scope & exports. A substrate‑neutral calculus for composing epistemic holons (U.Episteme) and reasoning about their motion and equivalence. Exports: (i) three point‑characteristics—Formality F, ClaimScope G, Reliability R—that locate a single episteme; (ii) a pairwise ladder of Congruence Levels (CL 0…3); (iii) four Δ‑moves (Formalise, Generalise/Specialise, Calibrate/Validate, Congrue); (iv) composition rules (Γ_epist) for aggregates; (v) propagation laws for CL through mappings and notation bridges. KD‑CAL is typed by U.EpistemeSlotGraph and never confuses ClaimGraph, EntityOfConcernSlot, GroundingHolonSlot, Viewpoint, View, ReferenceScheme, notation, publication form, or carrier. All F–G–R computations are context‑local; Cross‑context traversals require an explicit Bridge with CL and apply the B.3 congruence penalty Φ(CL) to R. // Contexts ≡ U.BoundedContext; substitution is plane‑preserving only.
Formality F is the rigor characteristic defined normatively in C.2.3. All KD‑CAL computations and guards SHALL use U.Formality (F0…F9) as specified there; no parallel “mode” ladders are allowed.
Problem Frame
FPF fixes two archetypal sub‑holons: U.System (physical/operational) and U.Episteme (knowledge holon). KD‑CAL is the primary composition pattern for U.Episteme, giving engineers a compact, testable way to say (a) how strictly an episteme is written (F), (b) how much structure it manages (G), (c) how well it is warranted by evidence or severe tests (R), and (d) how closely two epistemes coincide (CL). KD‑CAL is built atop C.2.1 U.Episteme — Epistemes and their slot graph, which reifies every episteme through U.EpistemeSlotGraph: ClaimGraph, EntityOfConcernSlot, GroundingHolonSlot, Viewpoint, View, and ReferenceScheme. Notation, publication forms, carriers, and work occurrences remain outside episteme content and are linked by their own FPF relations.
Problem
Teams routinely entangle programs, specifications, proofs, and datasets; a “proof” is treated as a tested routine, a “program” is cited as if it entailed a theorem. Trust decays because justification and evidence freshness are not explicit. Epistemes are anthropomorphised as actors (“the standard enforces…”), producing category errors at execution. Without a shared composition and equivalence calculus, aggregates hide weakest links and analogies harden into overclaims. KD‑CAL must stop these failure modes with a single constitution and scale‑set.
Forces
- Universality vs domain idioms. One calculus must cover physics theories, legal codes, safety specs, algorithms, and formal proofs without flattening their differences.
- Meaning vs materiality. Meaning must be independent of carrier, yet accountable to it historically.
- Deductive vs empirical. Axiomatic certainty and empirical trust have different evidence-continuity profiles; both must compose.
- Abstraction vs enactment. Epistemes constrain action; systems act. The calculus must keep the roles distinct.
Solution
Coordinates and the episteme slot graph
KD‑CAL characteristics (single‑episteme, point‑values).
- Formality F. From free prose to machine‑checkable proof/specification. Litmus: would a machine reject it if wrong?
- Claim scope (G), a set‑valued applicability over
U.ContextSlice, with ∩/SpanUnion/translate algebra; CL penalties apply to R, not to F/G. Litmus: how wide is the declared scope, and under what minimal assumptions does the claim hold? - Reliability R. From untested idea to continuously validated claim. Litmus: where is the last successful severe test? R‑claims MUST bind to evidence and declare relevance windows; stale bindings degrade R or require waiver per ESG policy.
Congruence Level (CL), pairwise ladder.
CL‑0 Opposed/Disjoint (contrastive; no substitution); CL‑1 Comparable / Naming‑only (label similarity; no substitution); CL‑2 Translatable / RoleAssignment‑eligible (structure‑preserving mapping in a declared fragment with stated loss; theorems may transport); CL‑3 Near‑identity / Type‑structure‑safe (invariants match; type‑structure substitution allowed). CL is a characteristic of a relation between two epistemes; it is not a fourth member of the F–G–R assurance tuple and it is not a characteristic space of its own. Norm: substitution is permitted only if plane‑preserving and CL ≥ 2; substituting type‑structure requires CL = 3.
Slot-graph link. The assurance components are stated over U.EpistemeSlotGraph: F by the internal ClaimGraph and formal substrate, G by the ClaimScope attached to the EntityOfConcern and assumptions, and R by evaluation templates and evidence bindings. Notation belongs to representation and reference-scheme structure; carriers remain outside the episteme and link through SCR/RSCR or other exact carrier relations. Multiple notations are allowed only when their relation is explicit; authors SHOULD register NotationBridge(n₁,n₂) with an associated CL to make conversion loss explicit.
Four Δ‑moves (epistemic motion)
- ΔF — Formalise. Rewrite for stricter calculi/grammars; raise proof obligations.
- ΔG — Generalise / Specialise. Widen or narrow the claim scope (assumptions & scope). Changes to decomposition granularity are an orthogonal view and do not change G unless they alter the envelope.
- ΔR — Calibrate / Validate. Strengthen severe tests or add live monitoring; update evidence bindings.
- ΔCL — Congrue. Establish and record the sameness relation between two epistemes (ladder 0→3). Moves compose into paths; CL along a path is the minimum of its links.
Composition (Γ_epist) and propagation
Let Γ_epist combine epistemes {Eᵢ} into a composite episteme Γ that makes a joint claim (AND‑style) or exposes an interface (series composition). KD‑CAL imposes safe defaults:
-
R (Reliability). Along any justification path
P, computeR_eff(P) = max(0, min_i R_i − Φ(CL_min(P)))(weakest‑link with congruence penalty). For series composition (claims needed conjunctively), the path‑wise weakest‑link applies; for parallel support (independent lines to the same claim), useR(Γ) = max_P R_eff(P)(annotate independence); never exceed the best attested line. Cross‑context steps and NotationBridge traversals contribute toCL_min(P). -
F (Formality).
F(Γ) = minᵢ F(Eᵢ)(monotone non‑increasing along used paths). To raise F, apply ΔF to the weakest parts. -
G (ClaimScope). On any dependency path, take the intersection of claim scopes (the narrowest overlapping scope). Across independent support paths to the same claim, set
G(Γ) = SpanUnion({G_path})constrained by support (drop unsupported regions). Widening/narrowing the scope is an explicit ΔG± operation. -
CL (Congruence). For a chain of mappings
E₀ ~ E₁ ~ … ~ Eₖ, the path congruence ismin CL(Eⱼ,Eⱼ₊₁). Passing through a NotationBridge sets CL to the bridge’s declared level; the Φ(CL) penalty is applied in the R fold for any path that traverses it.
These rules keep Γ aligned with the holonic kernel: Γ is only defined on holons and respects identity/boundary discipline from the core.
What must not be conflated (normative guards)
- Representation structure ≠ carrier. Files, PDFs, or repositories are carriers outside the episteme; they never count as parts of
U.Episteme(see C.2.1 EP‑1; CC‑EPI‑2/3). - Epistemes do not act. Only systems perform work; epistemes carry constraints and evaluation criteria through their
ClaimGraph, EntityOfConcern, grounding holon, scope, and evidence bindings (per Core A.15 / CC‑EPI‑3). - CL is not a score. It is a qualitative ladder of preservation classes; do not average it.
✱ Archetypal Grounding (Tell–Show–Show)
Universal rule (tell). Compose knowledge by Γ_epist with weakest‑link R, monotone F, and explicit CL on every bridge; keep ClaimGraph, EntityOfConcern, grounding holon, viewpoint, view, reference scheme, notation, publication form, and carrier in their FPF relation named by values.
System (show, Sys‑CAL lens). Consider a battery‑pack thermal subsystem integrating a physics model of heat flow and an operating envelope for fast‑charge. As a system, it composes pumps, sensors, and controllers by physical Γ with conservation constraints (Sys‑CAL). The assurance story depends on epistemes about the model and envelope; the system acts, epistemes constrain. (Archetypes and boundary discipline per core.)
Episteme (show, KD‑CAL lens). Consider a CMIP‑class climate projection episteme (post‑2015 generation): its ClaimGraph covers PDEs and parameterisations; its EntityOfConcern and grounding holon identify what projection claim is about and how it is grounded; its ClaimScope names historical forcings, resolution, and assumptions; its representation may include domain equations and a tabular schema linked by a NotationBridge with an explicit CL. Compose sub‑epistemes for radiation, clouds, and ocean mixing: R = min across the critical path; an independent hindcast line can raise R only up to its own level; F is bounded by the least‑formal sub‑claim unless the composition adds formal invariants.
Bias‑Annotation
- Metric worship. Treating
[F,G,R]as ends rather than means; mitigation: require evidence bindings and narrative of limits in the claim scope and grounding envelope. - Category slip. Equating a notation or carrier with
ClaimGraph, EntityOfConcern, or grounding holon; mitigation: slot-graph and carrier separation under C.2.1. - Analogy inflation. Presenting CL‑0/1 as identity; mitigation: always name the CL rung for cross‑mappings.
Conformance Checklist
- C2‑1 (Slot graph). Every
U.EpistemeMUST satisfy C.2.1 slot discipline forClaimGraph,EntityOfConcernSlot,GroundingHolonSlot,Viewpoint,View, andReferenceScheme; carriers link through SCR/RSCR or other exact carrier relations and are never parts of the episteme. - C2‑2 (Coordinates). Each episteme SHALL declare
[F,G,R]with a brief rationale; F isU.Formality ∈ {F0…F9}per C.2.3, exactly one episteme‑level F computed as the min over essential parts. CL is declared for pairs only. Sub‑anchors: ** Contexts MAY mint named sub‑anchors (e.g.,F4[OCL],F7[HOL]), which MUST preserve the global order and map to their parent anchor from C.2.3. - C2‑3 (Composition). Authors SHALL choose Γ_mode (series vs parallel). For any justification path use
R_eff(P) = max(0, min_i R_i − Φ(CL_min(P))); for parallel independent lines to the same claim, takeR(Γ) = max_P R_eff(P)(never exceeding the highest-R support line). ComputeF(Γ) = minalong the used paths. For G, use path‑wise intersections and then SpanUnion({G_path}) constrained by support. Cross‑context traversals MUST use a Bridge with CL and apply Φ(CL) toR. - C2‑4 (NotationBridge). Multi‑notation representation components SHOULD register
NotationBridgeedges with CL and loss note; any cross‑notation reasoning MUST cite the bridge’s CL. - C2‑5 (No action). Epistemes MUST NOT be assigned actions; work is executed by systems in role.
Consequences
Benefits. A single, compact map for all knowledge epistemes or publications; fast detection of weakest‑link R in aggregates; disciplined reuse across domains with explicit CL; consistent separation of meaning from material carriers. Trade‑offs. Authors must learn to declare Γ‑mode and CL explicitly; multi‑notation work requires bridge bookkeeping; mitigation: the episteme slot graph and CL scale keep the discipline brief and repeatable.
Rationale
KD‑CAL turns the coarse legacy semiotic picture into holonic composition over U.EpistemeSlotGraph, where formal structure and claim scope (F,G), evidence (R), and cross‑mapping congruence (CL) are visible and composable. The explicit C.2.1 slot graph prevents carrier confusion; the characteristics provide a manager‑readable yet formalisation‑ready scale (with G grounded in scope/envelope, not part‑count); the CL scale replaces overloaded “alignment” with a typed sameness relation.
Relations
- Depends on:
U.Episteme — Epistemes and their slot graph(C.2.1): identity invariants, slot definitions, carrier separation, and evidence bindings. - Peers: Sys‑CAL (C.1), which composes systems; KD‑CAL composes epistemes and feeds assurance lenses in Part B.
- Constrained by authoring: Architectural patterns must include Tell–Show–Show with Archetypal Grounding (this section).
Worked mini‑examples (post‑2015 flavours)
- Formal lift (ΔF). Recasting a 2019 variational free‑energy narrative into a typed calculus raises F, clarifies scope, and enables CL‑2 bridges between biological and ML formulations—without claiming empirical gain (R unchanged).
- Parallel evidence (R, max). Two independent hindcast lines (circa CMIP6, 2019) supporting the same forecast allow
R(Γ)=max(R₁,R₂); if one line drifts, the composite is bounded by the higher-R support line until series constraints apply. - Notation bridge (CL drop). A 2021 type‑theoretic specification rendered in a semi‑formal DSL requires a
NotationBridgewith a CL<3 note; any theorem transported across must respect the bridge’s declared preservation.
(No tooling is implied; these are conceptual moves within the calculus.)
C.2:End
U.Episteme — Epistemes and their slot graph
One-line summary.
U.Epistemeis the holon type for epistemes; its internal ontology is given byU.EpistemeSlotGraph, a typed graph n-ary relation overEntityOfConcern,GroundingHolon,ClaimGraph,Viewpoint,View, andReferenceScheme, aligned withU.RelationSlotDisciplineand ready for both symbolic and distributed representations. A coarse Symbol-Concept-Object triangle may be used only as a didactic projection of this graph, not as the normative ontology.
Context
FPF’s kernel recognises two archetypal sub‑holons: System and Episteme. Systems are operational wholes; epistemes are knowledge holons—theories, models, specifications, standards, algorithms, proofs—whose reason for being is to say something defeasible or deductive about something and to be held to account by justification.
Readers. Engineering managers and lead designers who need a uniform way to reason about theories, specifications, algorithms, proofs—from charter memos up to formal axiomatics—without collapsing into tooling or discipline‑specific notations.
KD‑CAL (C.2) needs a precise notion of what an episteme is and how it mediates between:
- the thing(s) it is about,
- the contexts and systems that ground and test it, and
- the representational machinery (notations, carriers, operations) we use to work with it.
Contemporary work on formal languages as cognitive artifacts (Dutilh Novaes), operational iconicity of notations (Krӓmer), material engagement (Malafouris), distributed representations and latent‑space communication in ML, and tool‑augmented reasoning (ReAct‑style agent loops) shows that:
- the relation between an episteme and its EntityOfConcernSlot is not a single undifferentiated “Object” vertex: it involves explicit slots and morphisms (EntityOfConcern-reference mapping, grounding, evaluation) typed by SlotKinds and contexts;
- representations come in heterogeneous forms (symbolic, diagrammatic, latent, interactive), with very different admissible operations;
- inference is often mixed‑mode: symbolic reasoning plus calls to tools, solvers, and learned models.
FPF therefore needs a more modular, graph‑shaped ontology for epistemes which:
- keeps KD-CAL and
EntityOfConcern/ Description-episteme boundary plus specification use/refinement discipline intact, - is compatible with A.6.0/A.6.5 signatures (
SlotKind/ValueKind/RefKind), - can be used uniformly by A.6.2–A.6.4 (epistemic morphisms) and E.17.* (views & publication),
- and keeps the coarse semantic triangle only as a didactic projection, not the normative ontology.
In this pattern:
U.Epistemeis the holon genus for epistemes (C.2), with components and identity governed by A.1/A.6.0/A.7.U.EpistemeSlotGraphnames the internal ontology graph ofU.Episteme: the small, typed n-ary relation over episteme positions (EntityOfConcernSlot,GroundingHolonSlot,ClaimGraphSlot,ViewpointSlot,ViewSlot,ReferenceSchemeSlot) on which KD-CAL, A.6.2–A.6.4 and E.17.* rely.- Species such as
U.EpistemeCard,U.EpistemeView,U.EpistemePublicationare holonic realisations ofU.Epistemewhose component structure is constrained to be compatible withU.EpistemeSlotGraph.
Adopted EntityOfConcern family. C.2.1 uses EntityOfConcernSlot, entityOfConcernRef, EntityOfConcernRef, EntityOfConcernChangeMode, and EntityOfConcernClass as the adopted slot/ref/class family. These names are the current C.2.1 vocabulary and must not be shadowed by a second episteme ontology.
Problem
Without a shared episteme constitution, teams fall into recurring failure modes:
- EntityOfConcern-Description episteme-publication carrier soup. Diagrams and files are treated as the theory itself. Changes to a PDF are confused with theoretical change.
- EntityOfConcern blur. A spec seems to describe “everything in general”. The EntityOfConcernSlot - what exactly this knowledge describes - is implicit and drifts, while the GroundingHolonSlot that would say where the claim is grounded is also missing.
- Proof vs program confusion. Algorithms, specifications, and proofs are mixed: a “proof” is used as if it were a tested routine; a “program” is cited as if it entailed a theorem (Curry–Howard misunderstood).
- Trust without evidence path. Claims accumulate with no explicit justification graph or evidence freshness, so assurance degrades invisibly.
- Category errors at execution. Epistemes appear as actors (“the standard enforces…”) instead of systems acting with or on epistemes such as data sets or algorithms.
The coarse Symbol-Concept-Object semantic triangle is useful only as a didactic projection over the richer slot graph: Concept approximates ClaimGraph, Object approximates EntityOfConcern plus ReferenceScheme, and Symbol approximates notation or representation tokens.
This projection can still help with:
- separating meaning (Concept) from carriers, and
- integrating KD‑CAL’s F–G–R characteristics (Formality, ClaimScope, Reliability).
But the projection has structural blind spots when used as ontology:
-
No explicit EntityOfConcern slot. The “Object vertex” bundles together what the episteme is about with how we interpret and test it. There is no explicit slot for the entity of concern (
U.Entity) and no clear separation between:- the EntityOfConcern value, and
- the ReferenceScheme used to read claims as statements about that thing.
-
Grounding collapses into Object. Material and organisational contexts (labs, infrastructures, organisations) that ground an episteme (in Malafouris’ sense) are hidden in the Object/Reference Map. KD‑CAL and Bridges need explicit GroundingHolon positions.
-
Viewpoints are not first‑class. ISO‑style viewpoints (families of stakeholders, concerns, conformance rules) and their induced views appear only indirectly, via KD‑CAL or MVPK. There is no explicit
U.Viewpoint/U.Viewpair at the episteme core, which makes it hard to:- connect to DescriptionContext for Description epistemes, including Description epistemes admitted for specification use,
- organize multi‑view descriptions (E.17.0), or
- align publication viewpoints with engineering viewpoints.
-
Representations and operations are compressed into “Symbol”. Very different representational regimes are flattened into one Symbol vertex:
- label-only notations (no internal inference calculus),
- fully operational calculi (e.g., proof assistants),
- interactive visualisations,
- latent vectors and prompt‑programs for LLMs. There is no place to say “this representation admits syntactic inference of such‑and‑such kind” vs “this is just a passive label”.
-
No explicit signature discipline. The triangle speaks of “Object/Concept/Symbol” but not of slots and references in the sense of A.6.5
U.RelationSlotDiscipline. In episteme this leads to:- names where slot, value and ref are conflated (
EntityOfConcernRefused as if it were a slot), - ambiguity between the EntityOfConcern value (what the episteme describes) and the episteme (the description),
- fragile interoperability with signatures for roles, methods, services.
- names where slot, value and ref are conflated (
Thus we have problems of:
- EntityOfConcern drift.
Specifications and models accumulate without a stable notion of which EntityOfConcernSlot value they carry; fields like
SubjectRefare overloaded and resist safe refactoring. - Viewpoint confusion. Engineering, publication and governance views are mixed, making it hard to maintain consistency across publication faces/forms or to reason about conformity of descriptions under different viewpoints.
- Representation mismatches. Trade‑offs between neural vs symbolic, diagrammatic vs textual, or interactive vs batch representations cannot be expressed at the episteme level; they leak into ad‑hoc tool descriptions.
- Broken modularity.
As soon as we add KD‑CAL, LOG‑CAL, MVPK, and E.TGA, multiple implicit triangles appear, each with slightly different semantics, instead of a single shared
U.EpistemeSlotGraph.
We need a replacement for the triangle that keeps its didactic clarity but matches the graph‑ and morphism‑centric reality of contemporary epistemic work.
Forces
Solution — U.EpistemeSlotGraph as the normative episteme ontology
Overview
For U.Episteme, U.EpistemeSlotGraph is the normative small, typed ontology graph and n-ary relation view over the core episteme positions:
Nodes / positions / slots. Minimal kernel SlotKinds (with their ValueKinds) that every episteme can refer to, following A.6.5:
-
EntityOfConcernSlot(ValueKindU.Entityor a declared subkind) → “what this episteme is about”; -
GroundingHolonSlot(ValueKindU.Holon) → “where/how this is grounded”; -
ClaimGraphSlot(ValueKindU.ClaimGraph) → “what is being said (claim content)”; -
ReferenceSchemeSlot(ValueKindU.ReferenceScheme) → “how we read claims as statements about entities”; -
ViewpointSlot(ValueKindU.Viewpoint) → “under which viewpoint we read/validate this episteme”; -
ViewSlot(ValueKindU.View) → “a view‑episteme produced under a viewpoint”. -
Slots and signatures. These positions are realised as SlotKinds with associated ValueKinds and RefKinds under
U.RelationSlotDiscipline(A.6.5). An episteme kind (U.EpistemeKind) is a signature over these slots. -
Episteme as n‑ary relation and as holon. Each concrete episteme instance can be seen both as:
- a tuple filling these slots (
U.EpistemeTuple), and - a holon with components (
U.EpistemeCard,U.EpistemeView,U.EpistemePublication) whose fields correspond to those slots.
- a tuple filling these slots (
U.Episteme is thus the holon type whose components are disciplined by the U.EpistemeSlotGraph; C.2.1 fixes that discipline.
-
Morphisms. Simple epistemic morphisms (EntityOfConcern-reference mapping, grounding, encoding, evaluation) are expressed as ordinary relations/functions between these positions. A.6.2–A.6.4 then specify general laws for effect-free morphisms over
U.Episteme. -
Symbol-Concept-Object triangle as didactic projection. The classic Symbol–Concept–Object triangle becomes a didactic view of this graph, not the normative ontology; it is simply the projection to:
Symbol≈ a subset ofU.RepresentationScheme/U.RepresentationToken,Concept≈U.ClaimGraph,Object≈{EntityOfConcern, ReferenceScheme}.
The rest of this pattern fixes the minimal core needed by KD‑CAL, A.6.2–A.6.4 and E.17.*. The representational nodes (U.RepresentationScheme, U.RepresentationToken, U.PresentationCarrier, U.RepresentationOperation) are introduced as an extension C.2.1+, preserving the interface defined here.
Minimal epistemic positions (nodes & slots)
This section defines the minimal node set for U.EpistemeSlotGraph and the associated SlotKinds. These are the positions that A.6.2–A.6.4 and E.17.* can rely on.
EntityOfConcernSlot — “what this episteme is about”
Tech: EntityOfConcernSlot (SlotKind), entityOfConcernRef : U.EntityRef (Ref slot in tuples/cards).
Plain: EntityOfConcern value, entity of concern. Older entity of concern wording is source-standard or source-migration wording, not a live Tech head.
Intent. Provide a single, explicit slot for the entity (or entities) that an episteme is about, avoiding the former conflation of Object/Reference/Context.
Normative definition.
-
EntityOfConcernSlotis a SlotKind in the sense of A.6.5U.RelationSlotDiscipline.- Its ValueKind is
U.Entity. - Its RefKind is
U.EntityRef(or a species thereof) and MUST be realised in data as a field namedentityOfConcernRef : U.EntityRef(E.10 discipline).
- Its ValueKind is
-
Species of
U.EpistemeKindMAY constrain the ValueKind to a subtypeEntityOfConcernClass ⊑ U.Entity(for example, “the entity of concern is always aU.Holonand, more specifically, aU.SystemorU.Episteme”). The subtype MUST NOT be namedU.EntityOfConcern; “EntityOfConcern value” is a local slot-use phrase, not a kernel type. -
Wherever episteme previously used
U.EpistemicObjectas a separate type, it is re-interpreted as “U.EntityfillingEntityOfConcernSlot” and is retained only as source-migration wording governed by E.10/F.18.
Didactic cue. “Ask: What, exactly, is this description about? That is the EntityOfConcern.”
GroundingHolonSlot — “where / in what holon this is grounded”
Tech: GroundingHolonSlot (SlotKind), groundingHolonRef : U.HolonRef?.
Plain: grounding holon, holon‑of‑grounding, engagement context.
Intent. Capture the material–social holon (system, lab, infrastructure, organisation, runtime environment) with respect to which an episteme’s claims are tested, calibrated or validated.
Normative definition.
-
GroundingHolonSlotis a SlotKind with:- ValueKind
U.Holon, - RefKind
U.HolonRef(or a species thereof), - and recommended field name
groundingHolonRef? : U.HolonRefin episteme cards/views.
- ValueKind
-
GroundingHolonSlotis optional at the minimal core: an episteme may be un‑grounded at M‑mode (e.g., purely mathematical), but any episteme used for empirical evaluation or assurance under KD‑CAL SHALL either:- populate
groundingHolonRef, or - declare explicitly that no such grounding is possible (e.g., counterfactuals, abstract logics), with consequences reflected in KD‑CAL
R.
- populate
-
The phrase “grounding holon” is plain‑register; there is no kernel type
U.GroundingHolon. It always means “the holon currently fillingGroundingHolonSlotfor this episteme.”
Didactic cue. “Ask: In which lab/organisation/world‑slice do we test or observe this? That is the GroundingHolon.”
U.ClaimGraph and ClaimGraphSlot — claim content
Tech: U.ClaimGraph (kernel type), ClaimGraphSlot (SlotKind).
Plain: claim graph, claim content.
Intent. Reuse the existing KD‑CAL notion of ClaimGraph as the episteme’s claim body, but make its slot value use explicit.
Normative definition.
-
U.ClaimGraphis the ValueKind forClaimGraphSlot:- nodes: typed claims (definitions, axioms, theorems, requirements, properties, assumptions);
- edges: logical/derivational/refinement relations, as already defined in C.2.
-
ClaimGraphSlotis a SlotKind whose instances are always stored by value in core patterns:content : U.ClaimGraphis the normative field inU.EpistemeCard/U.EpistemeView;- C.2.1 MUST NOT introduce
U.ClaimGraphRefas a ValueKind. Any reference type for ClaimGraphs, if needed, is a RefKind defined by discipline packs on top ofU.ClaimGraph.
-
ClaimGraphSlotis mandatory: everyU.EpistemeKindthat uses C.2.1 SHALL have exactly oneClaimGraphSlot.
Didactic cue. “Ask: What is actually being claimed, defined, required, proved? That is the ClaimGraph.”
U.Viewpoint and ViewpointSlot — perspective of concerns and validators
Tech: U.Viewpoint (kernel type), ViewpointSlot (SlotKind), viewpointRef : U.ViewpointRef?.
Plain: viewpoint, perspective, stakeholder perspective.
Intent. Provide a first-class reusable catalogue for ISO-style viewpoints and their generalisations, as used by E.17.0 U.MultiViewDescribing, MVPK, and TEVB.
Normative definition.
-
U.Viewpointis the type of viewpoint specifications:- role-bearing system families and stakeholder groups the viewpoint speaks for,
- their concerns,
- allowed kinds of Description epistemes and Description epistemes admitted for specification use,
- and conformance rules for views under this viewpoint.
(The internal structure of
U.Viewpointis fixed in E.17.0, not here.)
-
ViewpointSlotis a SlotKind with:- ValueKind
U.Viewpoint, - RefKind
U.ViewpointRef, - normative field name
viewpointRef? : U.ViewpointRefon episteme cards/views.
- ValueKind
-
For Description epistemes, including Description epistemes admitted for specification use, under E.10.D2,
viewpointRefis a mandatory part ofDescriptionContext; C.2.1 treats that as a species-level constraint, not as a universal requirement for all epistemes. -
ViewpointSlotmay be unset in purely internal, pre‑viewpoint epistemes (e.g., raw formal developments), but any episteme that participates in MultiViewDescribing (E.17.0) MUST set it or be deterministically associated to it via aViewpointBundle.
Didactic cue. “Ask: Who is this for, and what do they need to see to accept it? That is the Viewpoint.”
U.EpistemeView / U.View and ViewSlot — episteme‑level views
Tech: U.EpistemeView (kernel species of U.Episteme), alias U.View; ViewSlot (SlotKind); viewRef : U.ViewRef.
Plain: view, epistemic view.
Intent. Distinguish view‑epistemes (views of Description epistemes or Description epistemes admitted for specification use) from both:
- the underlying Description epistemes or Description epistemes admitted for specification use themselves, and
- the MVPK
publication face/form/interop publication formpublication-face kindvalues and the external carriers/renderings on which views are made available (E.17, publication-face/form discipline, SCR/RSCR).
Normative definition.
-
U.EpistemeViewis a species ofU.Epistemewhose episteme kind includes, at minimum:- one
ClaimGraphSlot(typically a sliced or projected ClaimGraph), - one
EntityOfConcernSlot, - one
ViewpointSlot, - and appropriate
ReferenceSchemeSlot.
- one
-
U.Viewis an alias forU.EpistemeViewin E‑cluster patterns (especially E.17.*), used where the word “view” is conventional. -
ViewSlotis a SlotKind whose:- ValueKind is
U.View, - RefKind is
U.ViewRef(orU.EpistemeViewRefspecies), - intended usage is in meta‑structures such as
U.MultiViewDescribingfamilies and MVPK.
- ValueKind is
-
ViewSlotMUST NOT be confused with publication-face labels,publication-face kinddeclarations, or carrier slots: a concrete MVPK face that is a view is represented asU.VieworU.EpistemeView, while the face label or publication-form profile,publication face/formkind orinterop publication formkind, and carrier or rendering remain separate lanes.
Didactic cue. “Ask: Which particular slice of the description under this viewpoint are we talking about? That is the View.”
U.ReferenceScheme and ReferenceSchemeSlot — interpreting ClaimGraph as claims about entities
Tech: U.ReferenceScheme (kernel type), ReferenceSchemeSlot (SlotKind); referenceScheme? : U.ReferenceScheme.
Plain: reference scheme, interpretation scheme, description scheme.
Intent. Separate what is being said (ClaimGraph) from how claims are read as statements about entities and contexts (designation, measurement, evaluation envelopes), without reifying the referents themselves as a vertex.
Normative definition.
-
U.ReferenceSchemeis a component type of epistemes, not an external entity:- it determines how nodes of
U.ClaimGraphare mapped to properties/relations over values ofEntityOfConcernSlot, - it specifies measurement/evaluation templates (how to test claims on
GroundingHolon), - it fixes claim-scope predicates / admissible regions over declared
U.ContextSliceselectors (and, where needed, references to domain spaces used inside those selectors).
- it determines how nodes of
-
ReferenceSchemeSlotis a SlotKind with:- ValueKind
U.ReferenceScheme, - no RefKind in the minimal core (ReferenceSchemes are stored by value as
referenceScheme? : U.ReferenceSchemefields on episteme cards/views). Discipline packs may introduceU.ReferenceSchemeRefas a RefKind, but must not repurpose it as a new ValueKind.
- ValueKind
-
ReferenceSchemeis the place where Object-vertex concerns are split into explicit claim-to-EntityOfConcern and claim-to-grounding rules:- it does not “contain” the EntityOfConcern value or grounding referent,
- it carries the rules that tie claims to entities and groundings.
Didactic cue. “Ask: Given this ClaimGraph, how exactly do we treat it as talking about these entities in these contexts, and how do we test it? That is the ReferenceScheme.”
Minimal node set and extension C.2.1+
The minimal U.EpistemeSlotGraph core for C.2.1 consists of positions (the episteme core SlotKinds of A.6.5 CC‑A.6.5‑5):
EntityOfConcernSlot(ValueKindU.Entity),GroundingHolonSlot(ValueKindU.Holon),ClaimGraphSlot(ValueKindU.ClaimGraph),ViewpointSlot(ValueKindU.Viewpoint),ViewSlot(ValueKindU.View),ReferenceSchemeSlot(ValueKindU.ReferenceScheme).
This pattern only fixes these positions. The extension C.2.1+ (second step of the refactor) adds:
U.RepresentationSchemeandRepresentationSchemeSlot,U.RepresentationTokenandRepresentationTokenSlot,U.PresentationCarrierandPresentationCarrierSlot,U.RepresentationOperationandRepresentationOperationSlot(with inference regime annotations),
without changing:
- the definition of
U.EpistemeKind, - the minimal
U.EpistemeCardinterface, - or the assumptions A.6.2–A.6.4 / E.17.* make about episteme components.
In C.2.1+ U.PresentationCarrier, publication face/form values, MVPK face, carrier, and rendering relations remain publication-side carriers, faces, forms, units, or rendering relations, not semantic parts of the episteme:
U.PresentationCarrier values are linked to U.Episteme and U.View via MVPK and publication-face/form discipline relations, such as isCarriedBy and MVPK face relations, and MUST NOT be counted as components when reasoning about episteme identity, EntityOfConcernSlot filling, GroundingHolonSlot filling, or KD-CAL morphisms. Changing carriers, publication faces/forms, units, or renderings alone never changes the U.Episteme instance determined by C.2.1; it only produces U.Work occurrences that publish or republish the same U.Episteme.
Attached epistemic structures (non-slot components)
U.EpistemeSlotGraph deliberately does not reify every episteme-adjacent structure as a node. Several key structures remain attached, non-slot components of U.Episteme:
JustificationGraph— the argument/evidence graph for nodes ofU.ClaimGraph(A.10/B.3).EvidenceBindings— per-claimU.EvidenceRoleassignments that connect claims to externalU.Workand carriers.EditionSeries— thePhaseOfchain of episteme editions (A.14) with change-class annotations (symbol-only vs ClaimGraph vs ReferenceScheme changes).ScopeCardandU.ClaimScope— USM scope values (A.2.6) describing where the episteme's claims hold.
These attached structures are not extra positions of U.EpistemeSlotGraph; they hang off the U.ClaimGraph and U.ReferenceScheme pair and are governed by KD-CAL (C.2), A.10, and B.3. C.2.1 only requires that an episteme which participates in KD-CAL exposes them in a way that keeps ClaimGraph, ReferenceScheme, Evidence, EditionSeries, and ClaimScope clearly distinguishable.
Episteme as n‑ary relation and as holon
To prevent confusion between EntityOfConcern values, their descriptions, and the slots they fill in an episteme, C.2.1 explicitly treats epistemes both as:
- n‑ary relations with a signature (slots & values), and
- holons with components (fields & parts).
U.EpistemeKind — episteme as a typed n‑ary relation
Tech: U.EpistemeKind (kernel type).
Intent. Provide a signature‑level description of an episteme as an n‑ary relation whose arguments are governed by SlotKind/ValueKind/RefKind triples per A.6.5.
Normative definition.
-
Every episteme that participates in KD‑CAL belongs to some
U.EpistemeKind. The kind determines:- which SlotKinds appear (
EntityOfConcernSlot,GroundingHolonSlot,ClaimGraphSlot,ViewpointSlot,ViewSlot,ReferenceSchemeSlot, …), - the ValueKind for each slot (always a subtype of
U.Type), - the RefKind used to store it in episteme (when applicable).
- which SlotKinds appear (
-
U.EpistemeKindis a special case ofU.Signature(A.6.0), with its slots governed byU.RelationSlotDiscipline(A.6.5). C.2.1 MUST NOT define an alternative slot discipline. -
For the minimal core, every
U.EpistemeKindMUST include:- exactly one
ClaimGraphSlot, - at least one
EntityOfConcernSlot, - and at least one
ReferenceSchemeSlot. Inclusion ofGroundingHolonSlot,ViewpointSlot,ViewSlotMAY be species-level constraints (mandatory for Description epistemes, including Description epistemes admitted for specification use, optional for others).
- exactly one
Didactic cue.
“An EpistemeKind is the type of episteme: which positions it has and what can go into them.”
U.EpistemeTuple — episteme as filled n‑ary relation
Tech: U.EpistemeTuple (kernel species).
Intent. Model filled instances of an episteme’s signature, separating the n‑ary relation from any particular holonic packaging or publication.
Normative definition.
U.EpistemeTupleis a species whose instances are pure value tuples:- for each SlotKind in the associated
U.EpistemeKind, a value of the slot’s ValueKind (or a reference value of RefKind, if the kind is configured as such).
- for each SlotKind in the associated
U.EpistemeTupleis notation‑agnostic and carrier‑agnostic: it does not know about files, formats, publication faces/forms, or carriers. It exists to give A.6.2–A.6.4 a minimal notion of “episteme as a point in Ep”.- In episteme,
U.EpistemeTuplerarely appears directly; it is typically induced byU.EpistemeCardandU.EpistemeView(which add component structure and meta‑information).
Didactic cue.
“An EpistemeTuple is the abstract record of what fills which slots — nothing more.”
U.EpistemeCard, U.EpistemePublication, U.EpistemeView — holonic realisations
Tech: U.EpistemeCard, U.EpistemePublication, U.EpistemeView (species of U.Episteme).
Intent. Provide holon‑level structures that engineers can work with (components, mereology, provenance), while keeping them aligned with U.EpistemeKind and U.EpistemeTuple.
Normative definition.
-
U.EpistemeCard. A species ofU.Epistemewhose components correspond one‑to‑one to slots of someU.EpistemeKind:content : U.ClaimGraph(forClaimGraphSlot),entityOfConcernRef : U.EntityRef(forEntityOfConcernSlot),groundingHolonRef? : U.HolonRef(forGroundingHolonSlot),viewpointRef? : U.ViewpointRef(forViewpointSlot),referenceScheme? : U.ReferenceScheme(forReferenceSchemeSlot),- optionally
representationSchemeRef? : U.RepresentationSchemeRef(C.2.1+), meta : Edition/Provenance/Status…. Minimal episteme identity is the pair⟨content, entityOfConcernRef⟩within aU.BoundedContext; all other fields are optional at the genus level but may be mandatory in species. Changes that altercontentor the effectivereferenceScheme(or that intentionally re-identifyentityOfConcernRef) SHALL be realised as new phases in anU.EditionSeries(PhaseOf chain) under A.14 and A.7. Changes confined toU.PresentationCarrier, publication-side values, MVPK face, carrier, or rendering relations do not create a new episteme; they are captured as publication work over the sameU.Episteme.
-
U.EpistemePublication. A species representing epistemes that have been published through publication faces/forms or MVPK relations. It:-
has at least the components of
U.EpistemeCard, -
plus references to MVPK
U.View, face identity,publication face/formandinterop publication formpublication-face kindvalues, publication-scope fields, profile fields, and external carrier or rendering refs as required by E.17 and publication-face/form discipline, -
but does not re-interpret face labels,
publication-face kindvalues, or carriers/renderings as parts of the episteme; carriers remain external.
-
-
U.EpistemeView. As defined in §4.1.5, a species ofU.Epistemerepresenting a view under a specificU.Viewpoint. Its components are a specialisation ofU.EpistemeCard:- ClaimGraph often restricted/projection of a base description and specification-useification,
- Viewpoint fixed,
- ReferenceScheme tailored to that viewpoint.
Alignment requirement. For any of these species, the pattern MUST state explicitly:
- which
U.EpistemeKindit realises, and - how each component maps to a SlotKind/RefKind under
U.RelationSlotDiscipline.
This ensures that A.6.2–A.6.4 can treat any U.Episteme* uniformly as both:
- a category-theory object in the category Ep, and
- a structured holon with components.
Episteme, publication, view, carrier, cue, and authority-reference lanes (normative)
C.2.1 is the default FPF pattern for claim-bearing units. Do not mint a generic U.SemioObject, U.SemioticObject, U.SignObject, U.WorkingObject, or U.SourceMaterial when the claim-bearing unit in question should be modeled as an episteme. Use U.Episteme or a declared species of U.Episteme.
When the same claim-bearing unit is available to readers, tools, or downstream work as a published episteme, name that lane as U.EpistemePublication or as a governed U.Episteme publication. Then keep the adjacent lanes separate:
- publication form — the concrete form in which the episteme is made available for some use, such as a cue pack, transfer-prepared claim set, prompt form, partial normal form, record, card, table, or profile;
- view, including MVPK face —
U.VieworU.EpistemeViewunder a declaredU.Viewpoint, including MVPK faces such asPlainView,TechCard,InteropCard, orAssuranceLane; - carrier or rendering — the SCR/RSCR, document, dashboard, generated screen, trace file, transport envelope, or display that bears or renders a publication;
- source-finding cue — a badge, tile, heading, signature-looking mark, credential display, generated explanation, or other cue that helps find a source but does not by itself create an authority-reference relation;
- governing pattern reference and authority-reference field —
governingPatternRefwhen one FPF pattern governs admissible interpretation or use;authoritySourceRefwhen a non-pattern authority-source referent such as an external standard, editioned register, DRR, gate decision, policy source, or role-assignment or status register carries the relevant authority. The publication records this reference; it does not become the referenced authority.
No publication form, view, face, carrier, rendering, source-finding cue, dashboard signal, credential display, generated explanation, FPF pattern file, or FPF pattern section is itself a substitute for a governed U.Episteme, an evidence relation, an assurance claim, a gate decision, a permission, a role claim, a status claim, or a U.Work occurrence. If the next move concerns work, keep candidate reliance, U.WorkPlanning, planned work, actual U.Work, work result, and work-result measurement in their own P2W lanes rather than storing them inside the episteme or its carrier.
SlotKind / ValueKind / RefKind discipline for EntityOfConcern & GroundingHolon
C.2.1 adopts A.6.5 U.RelationSlotDiscipline wholesale. For the two key positions:
- EntityOfConcernSlot.
SlotKind = EntityOfConcernSlot;ValueKind = U.Entity(species may constrain toEntityOfConcernClass ⊑ U.Entity);RefKind = U.EntityRef(or a species thereof);- normative field name in episteme cards:
entityOfConcernRef : U.EntityRef. No kernel type namedU.EntityOfConcernis introduced; the phrase “EntityOfConcern value” always means “an instance ofU.EntityfillingEntityOfConcernSlot”.
- GroundingHolonSlot.
SlotKind = GroundingHolonSlot;ValueKind = U.Holon;RefKind = U.HolonRef;- normative field name:
groundingHolonRef? : U.HolonRef. There is no kernel typeU.GroundingHolon; “grounding holon” is a slot-filler phrase. Any episteme that previously mixed slot/value/ref concepts (e.g., usingEntityOfConcernRefas if it were a type) MUST be migrated to this discipline over time; C.2.1 provides the normative reference, and F.18 / discipline packs provide the migration guide.
Minimal epistemic morphisms (informal schema)
Note. The full mathematical treatment (categories Ep and Ref, entityOfConcern functor
α : Ep → Ref, and effect‑free morphisms) lives in A.6.2–A.6.4. Here we fix only the episteme-slot relations that C.2.1 expects to exist between its positions.
At the level of U.EpistemeCard components and SlotKinds, we assume the following primitive relations (not all are functions):
-
entityOfConcernSet : U.Episteme → P(U.Entity)derivable fromEntityOfConcernSlotandReferenceScheme- For an episteme
E,entityOfConcernSet(E)is (at least) the singleton containing the entity referenced byentityOfConcernRef(E); in more complex cases, it may be a finite set or bundle of entities, determined byReferenceScheme. - The functorial EntityOfConcern mapping
δ_E : Ep → Refused in A.6.2–A.6.4 is the categorical lift of this relation: it forgets episteme internals and keeps only the EntityOfConcern value in the ReferencePlane determined by the pair<EntityOfConcernSlot, GroundingHolonSlot>.
- For an episteme
-
grounds : (U.Entity, U.Holon) ⇝ GroundingRelationrelates EntityOfConcern values to grounding holons- Captures how values of
EntityOfConcernSlotare situated in holons that make evaluation possible (labs, infrastructures, organisations). - Need not be total or functional; an entity may admit multiple grounding holons, or none.
- Captures how values of
-
designates : (U.ReferenceScheme, U.ClaimGraph, U.Entity, U.Holon) ⇝ DesignationProfilehow claims are read as statements about entities in contexts- Specifies, for each claim in
contentand each<entityOfConcernRef, groundingHolonRef>, what property/relation it purports to state, and under what conditions.
- Specifies, for each claim in
-
satisfies / evaluatesTo : (U.ClaimGraph, U.ReferenceScheme, U.Holon) → TruthProfile/SuccessProfileevaluation of claims under a reference scheme and grounding -
View-related morphisms (to be connected with A.6.3):
viewProject : (U.Episteme, U.Viewpoint) → U.View— effect-free, EntityOfConcern-preserving projection that slicesClaimGraphand specialisesReferenceSchemeunder a given viewpoint.viewEmbed : U.View → U.Episteme— embedding of a view back into the wider episteme, typically as a reference with correspondence proofs.
-
Reflexive entityOfConcern guard. When
EntityOfConcernSlotorReferenceSchemepicks out an episteme or claim that includes the referring claim itself (ReferencePlane = episteme), publishers SHALL ensure that the induced justification/evaluation structure is acyclic per evaluation chain: reflexive describe/citation handles may exist as literature handles, but they MUST NOT form a minimal justification cycle for acceptance or KD-CAL assurance. Self‑reference is allowed as a citation pattern, not as a way to close justification loops.
These are not yet laws; they are the hooks that A.6.2–A.6.4 will formalise into:
U.EffectFreeEpistemicMorphing(Ep→Ep morphisms over this structure),U.EpistemicViewing(entityOfConcern‑preserving Ep→Ep),U.EpistemicRetargeting(entityOfConcern‑retargeting Ep→Ep).
Legacy semantic triangle as didactic view (informative)
Position. The classical semiotic or semantic triangle (“Symbol–Concept–Object”, Ogden–Richards/Frege–Carnap style) is not the normative ontology for epistemes in FPF. For U.Episteme, it is treated as a didactic projection of the richer hypergraph U.EpistemeSlotGraph:
- “Symbol” corner ≈ {
U.RepresentationToken,U.RepresentationScheme,U.PresentationCarrier} when C.2.1+ is in use; in the minimal core this is collapsed into whichever external carrier bears theU.ClaimGraphpublication. - “Concept” corner ≈
U.ClaimGraph+U.ReferenceSchemeunder a chosenU.Viewpoint. This is the claim content plus its interpretation recipe. - “Object” corner ≈ the slot filler of
EntityOfConcernSlot(ValueKindU.Entity) plus the slot filler ofGroundingHolonSlot(ValueKindU.Holon) and the grounding relation between them.
Under this didactic projection the triangle is a three-node quotient of the U.EpistemeSlotGraph:
All viewpoints, operations, carriers and reference planes are suppressed in the classical diagram. The cost of this suppression is precisely the confusion that motivates C.2.1:
- describing becomes a single unlabeled arrow,
- inference regimes disappear,
- measurement and grounding are invisible.
Didactic use. C.2.1 allows the triangle only in the following cases:
- As an introductory picture in guidance material (“this is the coarse triangle; the actual pattern is the episteme slot graph”).
- As a quotient diagram: an explicit note that “this figure ignores viewpoint, grounding, carrier, and operationality; see C.2.1 for the full structure”.
- As an external-triangle alignment aid when mapping to standards or literature that speak only in triangle terms.
Guard. Any pattern or documentation page that uses a “semantic triangle” diagram MUST either:
- explicitly state “this is a didactic projection of C.2.1
U.EpistemeSlotGraph”, or - treat it as an external-triangle reference when aligning with external standards.
The triangle MUST NOT be used as a kernel-level ontology or as a source for morphism laws. All normative reasoning about epistemes proceeds via the slots and components of U.EpistemeSlotGraph.
Interaction with EntityOfConcern and Description-episteme boundary, specification use/refinement, and DescriptionContext (normative)
C.2.1 is the episteme-side slot schema that EntityOfConcern / Description-episteme discipline (A.7, E.10.D2) relies on. The link is made via DescriptionContext, not by treating EntityOfConcern value, Description epistemes, and specification use/refinement as layers, carriers, or peer ontology classes.
DescriptionContext over C.2.1 components
For any episteme that is a Description in the sense of E.10.D2, including a Description episteme admitted for specification use, the field subjectRef : U.SubjectRef is interpreted as a DescriptionContext triple:
where:
EntityOfConcernRef : U.EntityRef— fillsEntityOfConcernSlot(ValueKindU.Entity, species often constrained via EntityOfConcernClass ⊑U.Entity).BoundedContextRef : U.BoundedContextRef— points to the context that fixes vocabulary, units, and legal inferences for this description (E.10.D1).ViewpointRef : U.ViewpointRef— fillsViewpointSlot(ValueKindU.Viewpoint) and determines which concerns, role-bearing system families, stakeholder groups, and conformance rules apply.
Normative requirement (DESCCTX-13).
For every …Description episteme, and every …Spec use admitted by neighbouring specification use/refinement gates:
subjectRefSHALL be decodable to a well‑formed DescriptionContext triple.EntityOfConcernReffrom that triple SHALL be identical to the fieldentityOfConcernRefthat fillsEntityOfConcernSlotin the correspondingU.EpistemeCard/U.EpistemeView.ViewpointRefin DescriptionContext SHALL agree withviewpointRefin the episteme card or be uniquely derivable from aU.ViewpointBundlein E.17.1 (with the derivation rule documented).
EntityOfConcern values such as U.System, U.Method, U.Role, or U.Episteme appear in C.2.1 as values of EntityOfConcernSlot when an episteme describes, views, or retargets them. They are not the Description episteme produced by that use. The EntityOfConcern / Description-episteme boundary separates the EntityOfConcern value from the Description episteme; specification use/refinement is a separate gated use or refinement of that Description episteme, not a third peer ontology class. This boundary does not ban epistemes from being EntityOfConcern values.
Example. A formal postulate theorem in physics can be a Description episteme about the behaviour of a physical grounding holon. Its EntityOfConcernSlot points to the physical grounding holon, or to the exact behavior, method, or work entity only when a governing pattern has selected that entity under concern; its claim graph carries the theorem, postulates, and derivation; its formal language belongs to formality and publication-expression discipline. It becomes a specification only if a bounded use assigns specification force, such as acceptance criteria, harness checks, normative invariants, C.16 measurement criteria, or verification use. Formal notation alone does not change the slot graph into a third Specification ontology class.
EntityOfConcern-to-Description morphism and specification-use exit over C.2.1
-
Describing (
Describe_EoC_DescEp : EntityOfConcern -> DescriptionEpisteme). Produces an episteme whose:content : U.ClaimGraphencodes the descriptive claims about theEntityOfConcernvalue,entityOfConcernRefpoints to the EntityOfConcern value,groundingHolonRef(if present) fixes where the description is evaluated or tested,viewpointRefselects the describing viewpoint.
Describe_EoC_DescEpis conformant to A.6.2 but not an Ep→Ep morphism (domain is theEntityOfConcernvalue, codomain is a Description-sideU.Episteme). C.2.1 provides the codomain schema and ensures that the resulting Description has a valid DescriptionContext.
C.2.1 does not decide that a Description episteme has become a Specification. If a bounded use formalises, constrains, test-harnesses, accepts, or publishes a Description episteme as a specification, the governing pattern must name the exact specification-use gate: A.6.2 for effect-free episteme refinement, C.2.3 for formality and checkability, A.21 or the relevant gate/acceptance pattern for harness and acceptance force, C.16 for measurement criteria, E.17 for publication expression, and E.10 for suffix discipline. The C.2.1 requirement is only that the Description episteme keeps the same entityOfConcernRef, BoundedContextRef, and ViewpointRef unless an retargeting or viewing pattern named by value declares otherwise.
C.2.1 does not define the full EntityOfConcern / Description-episteme boundary or the specification-use gates; it only insists that any ...Description episteme, and any ...Spec use admitted by neighbouring gates, must:
- implement
U.EpistemeCardorU.EpistemeViewwithcontent,entityOfConcernRef,groundingHolonRef?,viewpointRef?, andreferenceScheme?fields, and - wire these fields into
subjectRefas DescriptionContext.
Alignment with A.6.2–A.6.4 (episteme morphisms) (normative)
U.EpistemeSlotGraph is the slot-level substrate for the episteme morphism patterns:
Effect‑free episteme morphisms (A.6.2) over C.2.1
For any f : X → Y that is an instance of U.EffectFreeEpistemicMorphing:
-
Typed episteme values. X and Y are
U.Epistemeinstances realised asU.EpistemeCard/U.EpistemeViewwith at least the minimal core components:Any additional C.2.1+ components (RepresentationScheme, Tokens, Carriers, Operations) are visible to A.6.2 only through their declared SlotKinds (A.6.5).
-
EntityOfConcernChangeMode characteristic.
fMUST declare aentityOfConcernChangeMode ∈ {preserve, retarget}:preserve—entityOfConcernRef(Y) = entityOfConcernRef(X)and any change togroundingHolonRef/viewpointRefmust be justified by Bridges/CorrespondenceModel, without changing the EntityOfConcernSlot value;retarget— permitted only for A.6.4 species; see below; in this case the characteristic records an intentional change in the pair<entityOfConcernRef, groundingHolonRef>under a declaredKindBridgein the appropriate ReferencePlane.
This EntityOfConcernChangeMode is a CHR-style characteristic (A.17) on episteme morphisms, which points directly to
EntityOfConcernSlot. Avoid introducing a separate “entityOfConcern” term alongsideEntityOfConcern. -
Component discipline. P0–P5 from A.6.2 are read directly in terms of C.2.1 components:
- purity ⇒ only C.2.1 components of Y may change; no Work/Mechanism side‑effects;
- conservativity ⇒ claims in
content_Yread viareferenceScheme_Yabout the new<EntityOfConcern, GroundingHolon>do not go beyond what already follows fromcontent_XviareferenceScheme_Xunder the declared EntityOfConcernChangeMode and Bridges; - functoriality ⇒ composition of such transformations respects the slot structure and ReferenceSchemes.
Any Ep→Ep pattern that operates on U.Episteme MUST state which C.2.1 slots it reads and which it may write, in terms of SlotKinds/ValueKinds/RefKinds (A.6.5), and then declare itself a species of A.6.2/3/4 as appropriate.
EpistemicViewing (A.6.3) as entityOfConcern‑preserving projections
U.EpistemicViewing is the EntityOfConcern-preserving species of A.6.2. Over C.2.1 this means:
entityOfConcernRef(Y) = entityOfConcernRef(X)— the same value inEntityOfConcernSlot.groundingHolonRefis preserved, or changed only within a fixed grounding context (e.g. normalising identifiers for the same lab or runtime).viewpointRefis either:- preserved (internal normalisation under the same viewpoint), or
- replaced by another
U.ViewpointRefwithin aU.MultiViewDescribingfamily (E.17.0), with invariants enforced by a CorrespondenceModel.
contentandreferenceSchemeare transformed conservatively: no new claim content about the sameEntityOfConcernis introduced.
Typical examples:
- filtering or aggregating
U.ClaimGraphto a view relevant for a stakeholder group; - rendering a behavioural specification into a tabular or diagrammatic episteme under a publication viewpoint;
- normalising a logic‑heavy episteme into a more operational one, while keeping the same system EntityOfConcern and context.
In terms of SoTA, EpistemicViewing behaves like a lens or optic over C.2.1: a focus (SlotKinds for content/representation) is manipulated while the EntityOfConcern is fixed.
EpistemicRetargeting (A.6.4) as EntityOfConcern-bundle retargeting on episteme morphisms
U.EpistemicRetargeting is the species of A.6.2 where entityOfConcernChangeMode = retarget.
It is always a morphism between epistemes (f : X → Y in U.Episteme), but the adjective “retargeting” refers not to the fact that an episteme is mapped to another episteme (this is true for all A.6.2 species), and not to a separate entityOfConcern, but specifically to the change in the EntityOfConcern-bundle classified by C.2.1:
entityOfConcernRef(Y) ≠ entityOfConcernRef(X)— the value stored forEntityOfConcernSlotchanges;- a
KindBridgemust relateKind(entityOfConcernRef(X))andKind(entityOfConcernRef(Y)); groundingHolonRefmay remain the same (e.g. same plant, different subsystem) or be transformed along a Bridge in the same ReferencePlane.
In practice, many retargetings operate on the receiving bundle <EntityOfConcernSlot, GroundingHolonSlot> (for example, when an episteme about a physical module is re-interpreted as an episteme about a function-holon realised in a different environment). The characteristic entityOfConcernChangeMode still classifies such morphisms by whether this bundle is preserved or intentionally re-identified under a KindBridge and reference-plane policy; the episteme on the codomain side is just the usual A.6.2 codomain episteme.
Over C.2.1 this is used for:
- functional vs structural reinterpretation (e.g. an episteme about a physical module retargeted to an episteme about the function it realises; StructuralReinterpretation in E.TGA becomes a species of A.6.4);
- signal vs spectrum transitions (Fourier-style moves where the
EntityOfConcernSlotvalue changes from time-domain signal to frequency-domain representation but an invariant, such as energy, is preserved); - data vs model transitions (e.g. retargeting an episteme about raw observations to an episteme about a learnt model, with an invariant such as likelihood or sufficient statistics).
C.2.1 ensures that these retargetings have a clear domain EntityOfConcernSlot value and codomain EntityOfConcernSlot value and that any such move is expressed as a morphism over well-typed slots, not as an unstructured rewrite of “subject” or “object” labels.
Alignment with E.17. (Multi‑View Describing & Publication) (normative)*
U.EpistemeSlotGraph underpins the E.17 cluster:
- E.17.0
U.MultiViewDescribing - E.17.1
U.ViewpointBundleLibrary - E.17.2
TEVB — Typical Engineering Viewpoints Bundle - E.17
MVPK — Multi‑View Publication Kit
Multi‑View Describing (E.17.0)
U.MultiViewDescribing organises families of Description epistemes and Description epistemes admitted for specification use over a shared entity of concern:
- The EntityOfConcernClass parameter of E.17.0 is a species constraint on the ValueKind of
EntityOfConcernSlot(EntityOfConcernClass ⊑ U.Entity). - Each member of a multi‑view family is a
…Description/…Specepisteme with:entityOfConcernRefinto that EntityOfConcernClass,viewpointRefdrawn from aU.ViewpointBundle,subjectRefdecoding to DescriptionContext.
Within this pattern:
U.Viewpointis exactly the ValueKind ofViewpointSlotin C.2.1.U.ViewisU.EpistemeView, a species ofU.Epistemewhosecontentis already restricted to a particularU.Viewpointand often also to a particularU.RepresentationScheme.
C.2.1 thus supplies the per‑episteme structure that E.17.0 rearranges into multi‑view families.
Viewpoint bundles (E.17.1/E.17.2)
U.ViewpointBundleLibrary and TEVB specialise the U.Viewpoint node:
- A ViewpointBundle is a set of
U.Viewpointinstances tailored to a class of entities of concern (e.g., holons in engineering contexts). - TEVB fixes
EntityOfConcernClass = U.Holon(typicallyU.SystemorU.Episteme) and provides canonical engineering viewpoints: functional, structural, role‑enactor, interface‑oriented, etc.
From the C.2.1 perspective:
- these bundles populate the ValueKind of
ViewpointSlot; - engineering episteme species that want to be “TEVB‑aligned” must restrict
viewpointRefto TEVB’sEngineeringVPIdset, while keeping the same EntityOfConcernSlot discipline.
MVPK (E.17) as publication over C.2.1 views
MVPK treats U.View (i.e. U.EpistemeView) as its primary input:
- it uses
U.EpistemicViewingspecies (A.6.3) to generate publication‑oriented views from engineering or logical views; - it then publishes these
U.Viewepistemes through publication face/form values with declared publication viewpoints and faces.
C.2.1’s distinction between:
U.Viewpoint(epistemic perspective specification) andU.PresentationCarrier(carrier in C.2.1+ and publication-face/form discipline)
keeps epistemic perspective and physical medium separate:
- MVPK operates on
U.Viewepistemes and then on carriers; - the same View can be realised on multiple carriers without changing its entityOfConcern or ClaimGraph.
Any MVPK species that claims to be C.2.1‑conformant MUST:
- treat
U.Viewas aU.EpistemeViewwith a valid C.2.1 core, - document which C.2.1 slots it reads/writes (typically only representation/carrier‑related ones, leaving
EntityOfConcernSlotandGroundingHolonSlotuntouched), - refrain from introducing new claims about the EntityOfConcern value beyond what is in the source
U.View’s ClaimGraph.
Bias‑annotation (informative)
Episteme‑first and pragmatics‑first. The pattern assumes that a claim-bearing episteme is meaningful only when it is about something for someone under some perspective. This follows the pragmatic turn in semantics: entityOfConcern and concerns are not afterthoughts but part of the core structure. The graph is therefore built around slots for EntityOfConcern, GroundingHolon, Viewpoint and ClaimGraph, not around abstract “propositions in the void”.
Operational/representational bias. C.2.1+ anticipates that certain RepresentationSchemes are operational in Novaes’ sense (admitting direct syntactic inference, like pen-and-paper arithmetic or proof states) while others are purely notational. The pattern remains neutral on which schemes are used but bakes in a place for operations and carriers so that:
- symbol‑manipulating tools (SAT/SMT, proof assistants, classical programming languages),
- distributed/latent representations (LLM embeddings, latent protocols like “DroidSpeak”, “Coconut”‑style communication),
- hybrid ReAct‑style agent loops
can all be treated as different species operating over the same U.EpistemeSlotGraph. There is a bias towards making these operational differences explicit instead of hiding them behind “the model”.
Viewpoint and stakeholder bias.
The pattern leans on the ISO‑style idea that viewpoints encode stakeholder concerns and role‑families, but it generalises this beyond architecture. U.Viewpoint is intentionally context-local and not bound to any single discipline; still, the examples are skewed toward engineering and epistemic use‑cases.
Didactic bias. The pattern is written to be teachable: semantic triangles are kept as didactic projections; examples like stools on lab rigs, services and SLAs, and model‑evaluation epistemes are deliberately simple. This may under‑represent more exotic epistemes (e.g. artistic, legal, or socio‑technical ones), but the intention is that these use the same slots with different species‑level constraints.
Conformance checklist (normative)
CC‑C.2.1‑1 - Minimal core components for episteme species.
Any species of U.Episteme that participates in EntityOfConcern / Description-episteme boundary discipline, specification use/refinement, or E.17 multi-view/publishing MUST be representable as U.EpistemeCard/U.EpistemeView with at least:
and corresponding SlotSpecs consistent with A.6.5 (EntityOfConcernSlot, GroundingHolonSlot, ClaimGraphSlot, ViewpointSlot, ReferenceSchemeSlot).
CC‑C.2.1‑2 - No kernel type for “EntityOfConcern” or “GroundingHolon”.
Patterns MUST NOT introduce kernel types U.EntityOfConcern or U.GroundingHolon:
- EntityOfConcernSlot has ValueKind
U.Entity( species‑constrained via EntityOfConcernClass if needed), - GroundingHolonSlot has ValueKind
U.Holon.
Plain terms “EntityOfConcern value” and “grounding holon” are allowed only as slot-filler descriptions under the declared SlotKind/ValueKind/RefKind discipline.
CC‑C.2.1‑3 - SlotKind/ValueKind/RefKind discipline.
All episteme‑related slots, including EntityOfConcernSlot, GroundingHolonSlot, ClaimGraphSlot, ViewpointSlot, ViewSlot, ReferenceSchemeSlot (and any extensions in C.2.1+), MUST:
- follow the naming discipline of A.6.5 (
*Slotfor SlotKinds,*Refonly for RefKinds/fields), - declare a ValueKind and refMode (
ByValueor a RefKind), - be used consistently across patterns that refer to the same conceptual position.
CC‑C.2.1‑4 - DescriptionContext wiring.
Any episteme species whose name or pattern claims to be a …Description or …Spec in the sense of E.10.D2 MUST:
- expose
subjectRef : U.SubjectRef, - provide a decoding to
DescriptionContext = ⟨EntityOfConcernRef, BoundedContextRef, ViewpointRef⟩, - ensure that
EntityOfConcernRefmatchesentityOfConcernRef(EntityOfConcernSlot), and - ensure that
ViewpointRefmatchesviewpointRefor is derivable from aU.ViewpointBundleunder documented rules.
CC‑C.2.1‑5 - Morphism declarations over slots. Any pattern in A.6.2–A.6.4, E.17, E.TGA, or discipline packs that defines morphisms between epistemes SHALL:
- state whether it is a species of
U.EffectFreeEpistemicMorphing,U.EpistemicViewing, orU.EpistemicRetargeting, - declare its
entityOfConcernChangeMode(preserve/retarget), - name which SlotKinds it reads and writes,
- state its behaviour on
entityOfConcernRef,groundingHolonRef,viewpointRef, andreferenceScheme.
CC-C.2.1-5a - Episteme/publication lane split for semio-facing terms.
Any pattern, publication-form profile, evidence-use note, or FPF-facing term that uses pre-FPF sign vocabulary, explanation, publication, source cues, authority-looking cases, or reader reliance MUST name the claim-bearing value as U.Episteme, U.EpistemePublication, or a declared species of U.Episteme. When publication is live, it MUST separately name the publication form, U.View or MVPK face, carrier or rendering, source-finding cue, and either governingPatternRef or authoritySourceRef when interpretation or use depends on a named authority reference. It MUST NOT use generic semio wording, generic source wording, generic project-work wording, or container-placement wording as solution terms.
CC‑C.2.1‑6 - Semantic‑triangle usage guard.
If a semantic triangle or parallelogram diagram appears in a pattern or tutorial, there must be an explicit note that:
- it is a didactic projection of
U.EpistemeSlotGraph, and - normative laws are stated in terms of C.2.1 nodes and morphisms, not in terms of triangle corners.
CC‑C.2.1‑7 - KD‑CAL / ReferencePlane alignment. Any pattern that evaluates or compares epistemes (KD‑CAL/LOG‑CAL, CHR, CG‑Spec, etc.) MUST point out:
- how
U.ClaimGraphis interpreted in a ReferencePlane, - how
GroundingHolonSlotfigures into measurement or validation,
CC‑C.2.1‑8 - Context locality and Bridges.
Any U.Episteme species that is consumed by KD‑CAL / LOG‑CAL / CHR‑based patterns SHALL declare a U.BoundedContextRef; all F–G–R computations and C.2.1 slot interpretations are context‑local. Cross‑context use MUST proceed via an explicit Bridge with CL / Φ‑policy (F.9/B.3), with penalties routed to R‑lanes only; F and the slot structure from C.2.1 remain unchanged.
CC‑C.2.1‑9 - Carriers and Work outside episteme content.
C.2.1 inherits A.7 and A.12 separation obligations: U.PresentationCarrier values, publication-side values, and U.Work occurrences MUST NOT be treated as parts of U.Episteme or as values of any SlotKind in U.EpistemeSlotGraph. Episteme content stays in U.ClaimGraph and U.ReferenceScheme; evidence enters only via U.EvidenceRole bindings that point to external U.Work occurrences and carriers (A.10 and B.3). Changing carriers or re-publishing work alone does not change the episteme determined by ⟨content, entityOfConcernRef, referenceScheme⟩ in its U.BoundedContext.
CC‑C.2.1‑10 - Reflexive entityOfConcern guard.
When an episteme uses C.2.1 to speak about another episteme (ReferencePlane = episteme), or about itself (self-describing or meta-specification cases), patterns SHALL ensure that the resulting JustificationGraph / evaluation chains are acyclic along justification paths. Reflexive describe / citation edges may exist as literature references, but they MUST NOT form minimal justification cycles for acceptance or KD-CAL assurance decisions; the trust calculus MUST always bottom out in external evidence (U.Work with U.EvidenceRole) rather than in purely self-referential claims.
Consequences (informative)
Benefits
- Single, extensible episteme core.
C.2.1 gives a small, stable set of positions (EntityOfConcern, GroundingHolon, ClaimGraph, Viewpoint, View, ReferenceScheme) and components (
U.EpistemeCard,U.EpistemeView,U.EpistemePublication) on which all higher‑level patterns depend. This avoids the proliferation of “epistemic objects” and “facets” with overlapping semantics. Transparent EntityOfConcern & grounding discipline. The pair (EntityOfConcernSlot,GroundingHolonSlot) is no longer hidden inside ad-hoc “SubjectRef” fields or semantic triangles: both are explicit, typed slots. This makes retargeting, viewing and correspondence laws (A.6.2–A.6.4, E.17.0) easier to state and check. - Better fit for contemporary representation practice.
By distinguishing ClaimGraph, RepresentationScheme, Tokens, Carriers and Operations (in C.2.1+), the pattern matches contemporary SoTA views of notation and formalism:
- formal languages as cognitive tools and de-semanticisation techniques (Novaes),
- operational iconicity and medium‑sensitive reasoning (Krämer, Malafouris),
- hybrid symbolic–neural workflows (e.g. ReAct, tool‑augmented LLMs, latent protocols). FPF can model both symbol‑heavy and latent‑heavy workflows without privileging either.
- Uniform substrate for multi‑view description and publication. MultiViewDescribing, viewpoint bundles (TEVB), and MVPK all land on the same episteme core. This avoids the current “views vs viewpoints vs faces” confusion and leaves “architecture” as a domain‑specific specialisation rather than a competing meta‑ontology.
- Tooling alignment. Slot discipline plus explicit episteme components map cleanly to implementation types (records, row‑typed schemas, effectful handlers). Tools can generate code, schemas or telemetry from episteme species without guessing what “subject”, “context” or “object” mean.
Trade‑offs / costs
- More explicit structure. Pattern users and authors must declare slots, ValueKinds and references explicitly, and keep DescriptionContext consistent. This is more upfront work than writing ad‑hoc “Subject/Object” fields, but it pays off in substitution safety and cross‑pattern reuse.
- Migration effort.
Legacy uses of “EpistemicObject”, “Facet”, “Subject”/“Object”, and raw
…Reffields will need refactoring into C.2.1 slots + A.6.5 SlotSpecs. Current prose uses the selected C.2.1 slots and A.6.5 SlotSpecs directly; old wording is source/input material for repair, not a live alternate vocabulary. - Exposure of representation biases. Being explicit about RepresentationSchemes and Operations may surface disagreements about which representations are “primary” in a team or discipline. C.2.1 does not resolve these disagreements; it only makes them visible and therefore debatable.
Relations (overview)
Builds on
-
A.1
U.Holon— for treating episteme as a holon with components. -
A.6.0
U.Signature— for interpreting episteme kinds as n‑ary relations over slots. -
A.6.5
U.RelationSlotDiscipline— for SlotKind/ValueKind/RefKind discipline over episteme slots. -
A.7, E.10.D2 — for
EntityOfConcern/ Description-episteme boundary discipline, specification use/refinement gates, and the interpretation ofsubjectRefas DescriptionContext. -
C.2 (KD‑CAL, LOG‑CAL) — for ClaimGraph semantics, ReferencePlanes, and Bridges.
-
E.8, E.10 — for pattern authoring discipline and lexical guards.
-
Constrains
-
A.6.2–A.6.4 — by fixing the minimal episteme component set those morphisms operate on and by requiring an explicit EntityOfConcernChangeMode characteristic (
entityOfConcernChangeMode ∈ {preserve, retarget}) overEntityOfConcernSlot/GroundingHolonSlot. -
E.17.0–E.17.2 — by specifying how
EntityOfConcern,Viewpoint,Viewand ReferenceSchemes are represented at episteme level. -
E.17 (MVPK) — by separating
U.View(episteme) fromU.PresentationCarrier(publication carrier), and by requiring that publication morphisms beU.EpistemicViewingspecies over C.2.1‑conformant views. -
F.18 (LEX‑BUNDLE) — by providing the episteme‑specific name cards and guards for EntityOfConcern/GroundingHolon/Viewpoint/View/ReferenceScheme and their SlotKinds.
Used by
- A.6.2
U.EffectFreeEpistemicMorphing— as the default episteme slot/value structure for episteme-to-episteme transforms. - A.6.3
U.EpistemicViewing— as the substrate for entityOfConcern‑preserving projections (views). - A.6.4
U.EpistemicRetargeting— as the substrate for EntityOfConcern-bundle retargeting transforms between epistemes (Ep→Ep withentityOfConcernChangeMode = retarget). - E.17.0
U.MultiViewDescribing, E.17.1, E.17.2 — to organise families of Description epistemes, including Description epistemes admitted for specification use, under Viewpoints andEntityOfConcernClassconstraints. - E.17 (MVPK) — to publish episteme views through publication faces/forms and carriers.
- E.TGA — to interpret StructuralReinterpretation and other engineering projections as episteme morphisms over a well‑typed
U.EpistemeSlotGraph.
Together, these relations make U.EpistemeSlotGraph the single normative core for thinking about epistemes, their EntityOfConcern mapping, their representations, and their transformations across FPF.
C.2.1:End
Epistemic Precision Restoration
Type: Architectural (A), C.2 precision-restoration pattern Status: Stable Normativity: Normative unless a section is explicitly informative
Use this when
Source-expression clarification. Use this mode when ordinary non-FPF prose needs precise interpretation. The aim is source-local clarification: recover what the sentence may mean, identify candidate kinds and relations, preserve important wording when needed, and produce one clarified phrase, candidate-set note, epistemic precision-restoration note, or use disposition. This mode may apply E.10, A.6.P, A.6.6, F.18, A.7, E.17, or another governing FPF pattern as a repair lens, but it does not require the source expression itself to use FPF vocabulary.
FPF-governed use. Use this mode when wording has FPF-governed use and relies on loose wording around epistemes, publications, views, publication forms, generic publication faces, MVPK faces under E.17 constraints, bounded publication units, carriers, records, relations, admissible uses, or pattern application. The wording states the recovered FPF kind named by value, relation record, relation phrase, tuple-like record, project-side FPF kind and reference named by value, or explicit non-use disposition.
Use C.2.P as epistemic precision restoration for wording whose live entity or construction is an episteme, publication, or source-use construction: source wording, source-local meaning, claim-bearing episteme, publication, view, face, carrier, publication unit, EntityOfConcern, grounding relation, pattern-application wording, project-side reliance wording, or the disposition by which source expression has or lacks FPF-governed use.
E.10 governs lexical and wording-use precision. C.2.P governs epistemic precision restoration across episteme, publication, carrier, and view distinctions: expression, source-local meaning, recovered FPF kind and relation set, publication construction, carrier construction, view construction, EntityOfConcern or grounding relation, admissible reader move, and use or non-use disposition.
The practical partition is episteme-slot or publication-construction use, but it is not limited to named C.2.1 slots. It also includes publication constructions, carrier and face constructions, source expression admitted for FPF-governed use, and pattern-application wording when those are used as claim-bearing or admissibility-bearing signs. Apply this pattern from E.10 only when the governing pattern cannot yet be selected directly because source wording, claim-bearing episteme, publication or carrier construction, project-side reliance, pattern-application wording, or use or non-use disposition is still unresolved. The pattern-local decision selects source-expression clarification or FPF-governed use, recovers the live episteme-publication relation set, chooses recovered-by-value, reduced-use-cue, extension-candidate, blocked-use, rewrite-incomplete, or not-triggered disposition, and preserves the remaining admissible reader move before any neighboring pattern governs its own invariant.
Precision-restoration pattern note. A precision-restoration pattern is an architectural pattern for a recurring complex precision problem whose wording routinely hides several live distinctions. A.6.P is relation precision restoration; C.2.P is epistemic precision restoration. C.30.P is the selected architecture and structure precision-restoration pattern when architecture or structure wording hides the architecture claim being made, structure kind, structure relation, view, or publication relation or source-use relation. C.16.P is the selected characteristic and scale precision-restoration pattern when characteristic, scale, metric, score, indicator, coordinate, threshold, or comparison construction is hidden. C.16.Q is the selected quality-term precision-restoration pattern when quality-term or evaluative characterization is live and the found problem is not relation construction. E.10 detects the wording problem and selects the applicable path; E.10.ARCH carries the shared recovery algorithm and applicability-row architecture; neither replaces this pattern's episteme, publication, and source-use ontology.
Ordinary-language survival. Ordinary words remain admissible until the sentence gives them FPF-kind, relation, authority, evidence, admissibility, work, gate, decision, bridge, or reliance claim. Source may stay ordinary when it only means where a quote came from; view may stay ordinary when it means what the reader sees and not U.View; route may stay ordinary navigation prose; support may stay ordinary help. Repair by FPF-governed sentence function, not by trigger word alone.
Not this pattern when. C.2.P is not the governing pattern for every recovered construct. General FPF lexical conformance stays under E.10; stable reusable naming under F.18; relation precision under A.6.P; A.6.B law-, admissibility-, deontic-, and effect-claim boundary splitting under A.6.B; EntityOfConcern, Description episteme, and carrier separation under A.7; view and publication discipline under E.17 and E.17.0; architecture and structural description adequacy under C.30, C.30.ASV, A.22, C.31, or the architecture and structure pattern governing the claim; project work, evidence, gate, decision, method, action-invitation, assurance, and engineering-justification claims under their governing FPF patterns. When one of those claims is live, this pattern supplies source-expression unpacking and rewrite disposition; the FPF pattern named by value supplies its invariant.
Do not punish clarity. Prefer the clearest ordinary head that preserves kind, relation, and admissible use. Do not replace a clear plain phrase with a technical phrase unless the technical phrase blocks a live false interpretation or is needed for accepted stable FPF naming. In an ordinary case, reader help, source-pointer-only, or comparison only may be better than a more technical phrase.
What goes wrong if missed
Episteme-publication-heavy text starts to build a parallel ontology. A generic publication face becomes a U.View, a file becomes an episteme, a dashboard tile becomes evidence, a pattern name becomes a procedure, a slash list becomes a group kind, or a broad word such as source hides whether the text means a pattern, a DRR, a publication, a document with named source, evidence, architecture, or reviewed publication, review packet, review record, or review state, a project-side FPF kind and reference named by value, or a relation.
The immediate cost is not only ugly terminology. Engineers and FPF authors start making action, evidence, gate, decision, or engineering-justification claims from the wrong entity, publication, record, relation, or carrier.
What this buys
C.2.P gives one small epistemic precision-restoration move: recover the FPF kind and relation set first, then write wording that preserves the needed distinction without adding another claim. It prevents string-replacement cleanup, keeps FPF-side and project-side episteme and publication work separate, and blocks unclear wording from having FPF-governed use by guesswork.
Successful repair condition. Epistemic precision restoration is not closed by type-correct wording alone. It is governed by E.2 Pillars, especially P-2 Didactic Primacy, together with E.12 and the register rule in E.10:6.2. It closes only when the repaired text preserves or restores one remaining admissible reader move: a usable action, a recognition reason that tells the working reader why the distinction matters, or a named FPF pattern application that carries the claim being made. When both Tech and Plain registers are live, the Tech interpretation must remain recoverable and any Plain or didactic line must map back to that Tech interpretation. A Plain, more expressive line, or intentional didactic metaphor may stay ordinary when it carries no FPF-governed use; when it carries ontological, evidence, causal, assurance, bridge, gate, work, decision, or admissibility claim, that claim being made must be recoverable through the Tech fields, FPF kind named by value, recovered relation, project-side source reference, or disposition named by the repair. If a repair in a FPF-governed Problem frame, Problem section, recognition text, example, or worked slice makes the text more exact but less able to show the working situation, why it matters, or what action remains, the repair is incomplete unless the governing FPF pattern is named for that claim being made. Overread removal is only half of epistemic precision restoration; the other half is surviving admissible action under the Pillars.
Recovery focus in plain terms. The use being made is one episteme-publication-heavy wording use inside conformant text: the word or phrase, the sentence function it carries, the FPF kind or relation it must recover, and the admissible remaining use after recovery.
Primary working reader. The first reader is an author or reviewer of conformant FPF-style text who must repair wording without losing ontology. The downstream reader is the engineer-manager using the resulting pattern or project text in a working situation.
Anti-overread payoff question. A repair is useful only if the pattern text can answer three things in ordinary prose: what false downstream interpretation is blocked; what useful admissible action remains; and when the reader must apply the FPF governing pattern named by value because evidence, gate, decision, work, assurance, bridge, release, or reliance is live. If the repair blocks an overclaim but leaves no useful action, the text is probably becoming ceremony rather than guidance.
Problem frame
FPF already has episteme, publication, view, carrier, presentation, relation, naming, and pattern-application concepts. FPF-governed project, review, draft, pattern, and architecture prose, plus source prose being unpacked for possible FPF use, can still introduce convenient intermediate words that survive into final guidance without their kind and relation set recovered.
The recurring situation is simple: a sentence is understandable enough to feel worth keeping, but its head kind is not recovered. If it is repaired by replacing one broad word with another broad word, the ontology gets worse while the text looks cleaner.
Purpose and Scope
This pattern gives the current glossary and rewrite rules for terms around epistemes, publications, views, publication forms, generic publication faces, MVPK faces under E.17 constraints, carriers, records, and bounded publication units.
It exists because episteme-publication-heavy texts can use locally convenient heads that collapse EntityOfConcern, publication unit, publication face, carrier, record, source relation, and project-side value. Those words may be useful recognition handles, but they are not safe FPF heads when they carry ontology, authority, or authority-changing meaning.
The rewrite discipline here is ontological and use-facing, not lexical; in this pattern the repair is bounded to episteme, publication, and source-use precision:
- do not replace one broad token with one new broad token by string substitution;
- first recover the FPF kind and relation set, the claim-bearing status, the publication, view, carrier, or relation construction, and any work, action, or authority crossing;
- then choose the smallest wording that preserves the FPF-governed distinction without creating a second ontology.
This pattern uses the E.10 trigger result as its entry condition, then works in the C.2.1 and E.17 epistemic-publication ontology rather than in a lexical registry.
Problem
Without an epistemic precision-restoration discipline for episteme-publication-heavy wording:
- broad publication words hide whether the claim is about
U.Episteme,U.View, publication form, generic publication face, MVPK face under E.17 constraints,PublicationUnit, carrier, document with named source, evidence, architecture, reviewed publication, review packet, review record, or review state, or project-side FPF kind and reference named by value; - FPF pattern-application claims and project-side work-occurrence, work-plan, decision, action-invitation, method, record, carrier, or front-end claims get mixed in one sentence;
- slash lists and heterogeneous rows become false group kinds;
- unclear source meaning is guessed into FPF-governed wording rather than blocked or assigned to an accepted FPF extension;
- authors copy the same loose wording into
DRRs, patterns, source-basis notes, or project texts.
Forces
Solution
Repair episteme-publication-heavy wording by epistemic precision restoration, not by dictionary replacement.
A successful rewrite satisfies these field-validity constraints:
- the head kind and sentence function are recoverable under
E.10; - a stable reusable name has
F.18status; - a relation, comparison, dependency, support, sameness, grounding, mapping, or endpoint claim has
A.6.Prelation precision, with admissibility and project-side reliance questions split into their own fields; - a claim-bearing episteme, episteme species named by value, episteme-lane view, or project-side FPF kind and reference named by value has the needed
C.2.1typing or named FPF claim or admissible-use boundary named by value; - publication, view, face, and carrier distinctions satisfy
E.17.0,E.17, and MVPK; - the repaired text satisfies
E.2Pillars, especiallyP-2 Didactic Primacy, by preserving or restoring one remaining admissible reader move: a usable action, a recognition reason that tells the working reader why the distinction matters, or a named FPF pattern application that carries the claim being made; when both Tech and Plain registers are live, the Plain or didactic line maps back to the recovered Tech kind, relation, or FPF pattern application underE.10:6.2; ordinary Plain wording and intentional didactic metaphor stay light when they carry no FPF-governed use, but ontological, evidence, causal, assurance, bridge, gate, work, decision, or admissibility claim in a more expressive Plain line must be recoverable through the repaired Tech fields; FPF-governed Problem frames, Problem sections, recognition texts, examples, and worked slices must still show the broad working situation and first useful move, or the rewrite is incomplete; - the final phrase preserves the distinction without adding another claim;
- unrecoverable meaning, kind, register mapping, or remaining reader move fails closed.
The detailed solution below carries the glossary and rewrite rules as ordinary pattern subsections. It is not an external container: these subsections are the pattern's detailed epistemic precision-restoration guidance.
EpistemicPrecisionRestorationRecord
For FPF-governed cases, the recovery product is a compact pattern-local EpistemicPrecisionRestorationRecord or an equivalent local rewrite note. Ordinary local phrase repair may end as the repaired sentence itself when kind, relation, and admissible use are now clear and no downstream reliance, cross-context reuse, grouped-kind risk, hidden authority claim, project-side overclaim, conflict among publication, EntityOfConcern, and project-side action claims, or contested source meaning remains live. Prefer the plain names epistemic precision-restoration note, compact epistemic precision-restoration row, or local rewrite note when durable inspection does not require the code-like field name. The recovery note is a lightweight pattern-local authoring or review product, not a new ontology, not a dispatch table, not a durable FPF record kind, and not a mandatory heavyweight project record. It becomes a durable FPF record only if another accepted pattern or accepted DRR explicitly admits it as one. It records only the trigger, the recovered FPF kind and relation set, the requirement from the governing FPF pattern, and the final rewrite disposition that must remain inspectable after the repair.
Minimum fields when FPF-governed:
Recover by sentence function and claim being made, not word form. For words such as source, support, status, valid, ready, approved, and used, first ask what the sentence would let the reader do or rely on: source-finding only, source availability, source use, evidence relation, gate passage, decision status, readiness threshold, work permission, assurance, engineering justification, or ordinary orientation. Then fill only the field whose FPF kind named by value, relation, or project-side reference is live.
Use the short form when only one field is live. Use the full record when several fields are live or when the phrase might otherwise create a grouped kind, hidden authority claim, project-side overclaim, conflict among publication, EntityOfConcern, and project-side action claims, contested source-use meaning, or procedure-like ordering of pattern applications.
General Recovery Check
Use this recovery check whenever text proposes a new term, repairs an episteme-publication-heavy term, asks for language precision, or relies on wording around PublicationUnit, EntityOfConcern, publication, view, face, carrier, source-side relation, receiving-side relation, publication face, EntityOfConcern, or bounded publication-unit status.
-
Mode selection. Decide whether the current use is source-expression clarification over non-FPF prose or FPF-governed use. In source-expression clarification, preserve source-local nuance and do not force the whole source into FPF vocabulary. In FPF-governed use, the wording must satisfy
E.10and the governing patterns named by the recovery. -
E.10 trigger scan and head-kind recovery. Use
E.10:0.2as the shared trigger scan. Decide what the head noun names before accepting the phrase: EntityOfConcern, Description episteme, or Description episteme admitted for specification use,U.Episteme,U.View, publication form, generic publication face, MVPK face under E.17 constraints, carrier or rendering, project-side FPF kind and reference named by value,A.15.1datedU.Workoccurrence,A.6.Aaction invitation,A.2.9SpeechActRef,A.2.8U.Commitment,U.Method,U.MethodDescription, document with named source, evidence, architecture, reviewed publication, review packet, review record, or review state, or source-local ordinary sense. Apply EntityOfConcern and Description-episteme boundary and specification use, Context, Tech, Plain, and carrier humility rules before treating a word as meaning-bearing. -
F.18 naming pass when a stable term is being chosen. If the phrase is becoming a reusable head, fill at least the lightweight Name Card facts: Context, Kind, purpose and use-domain, local sense, candidate head families, NQD-front reasoning, sense-seed read-through, and the lexical Q tuple
{SemanticFidelity, CognitiveErgonomics, MorphologicalActionFit, AliasRisk}. Do not pick a label only because it is intuitive. Do not accept a replacement label until it passes theE.10:0.2replacement-candidate anti-umbrella rule. -
A.6.P relation-precision pass when a phrase carries relation, comparison, or action-invitation claim. Restore generic head kind first, then endpoint facets and kinds, then relation kind, slots, qualifiers, scope, time, viewpoint, and hooks for admissibility, evidence, and work. For
supportwording, do not stop at a substitute label: select the live support-like claim or relation underA.6.Pfirst, including source-description relation, EntityOfConcern or grounding-holon grounding, base relation throughA.6.6, evidence, assurance, causal-use, mathematical-lens, characteristic or measurement, admissible-use, work or enablement, or publication-companion use. If ambiguity remains, write a local Candidate-Set Note rather than debating synonyms. -
C.2.1 episteme-slot pass when the item is claim-bearing. Name
EntityOfConcern, grounding, ClaimGraph, viewpoint and view, reference scheme, representation scheme, and bounded context as far as the claim needs. Do not usePublicationUnitor a carrier word as a substitute episteme. -
E.17.0, E.17, MVPK publication pass when the item is published or reader-facing. Separate the underlying episteme or view,
U.EpistemePublication, publication form, generic publication face, MVPK face under E.17 constraints,PublicationUnit, carrier or rendering, and the project-side FPF kind and reference named by value when a project-side claim is live. A face, card, screen, or explanation can guide interpretation or source-finding without becoming evidence, work, gate passage, authority, or release permission. If those claims are live, filladmissibleUseandprojectSideFPFRefinstead of treating the generic publication face or MVPK face under E.17 constraints as the source value.
5a. Precision-restoration exit after source wording and current FPF wording recovery.
If source wording and current FPF wording, publication, carrier, face, or PublicationUnit recovery exposes architecture or structure wording, characteristic or scale wording, quality-term or evaluative characterization, function-like carrier wording, relation construction, controlled coarsening, naming, evidence, assurance, gate, work, decision, causal-use, release, mathematical-lens, or another neighboring claim, fill precisionRestorationExit with the pattern governing the recovered claim. Do not keep the neighboring claim inside C.2.P after this pattern has recovered the source wording, current FPF wording, and publication relation set.
-
Remaining admissible reader move. After the kind, relation, publication, and project-side splits are recovered, state the remaining admissible reader move in one short line: what the working reader can now do, why the distinction still matters, or which named FPF pattern governs the claim being made. If both Tech and Plain registers are live, keep the Tech interpretation recoverable and make the Plain or didactic line map back to the recovered Tech kind, relation, or named FPF pattern application under
E.10:6.2. Do not make this a heavy form for ordinary prose: a Plain line that carries no FPF-governed use may stay ordinary; a Plain line that carries ontological, evidence, causal, assurance, bridge, gate, work, decision, or admissibility claim must be recoverable through the repaired Tech fields. If the repaired wording only proves that an overclaim was removed, but leaves no usable action, recognition reason, or FPF pattern application for the claim being made, do not classify the repair as recovered by value. -
Authority-changing rewrite boundary. If the result would rename an accepted FPF pattern, change an accepted FPF term, or mint a reusable FPF kind, this pattern only classifies the phrase as recovered by value or as an understandable FPF extension candidate. It does not make the authority change by itself. Use the accepted source that already carries the decision by value; do not add a second decision source merely to restate the same content.
Fail closed:
- if the kind and relation set cannot be recovered, keep the term as plain or informative prose;
- if the relation kind cannot be recovered, keep the statement as a cue or split alternatives;
- if the publication construction cannot be recovered, do not use that publication, generic publication face, MVPK face under E.17 constraints, form, carrier, or rendered unit for work, evidence, gate, or authority claims;
- fill
relationClaimSliceonly when a relation claim is live, and filladmissibleUseplusprojectSideFPFRefwhen an admissibility or project-side reliance claim is live; - if the recovered wording is type-correct but leaves no remaining admissible reader move, recognition reason, Tech-to-Plain mapping when both registers are live, or FPF pattern application, or if a Plain or didactic line supplies practical guidance through unrecovered ontological, evidence, causal, assurance, bridge, gate, work, decision, or admissibility claim, mark the rewrite incomplete or demote the phrase to reduced-use cue or blocked use before using it as claim-bearing FPF or project text.
Slash Discipline
In conventional abbreviations, source titles, mathematical notations, standards, URLs, file paths, and ordinary notations, a slash can be part of an accepted designation rather than a hidden FPF kind. In FPF-facing episteme and publication ontology, a slash is still a recovery trigger before it is a synonym marker unless the mark is part of such accepted notation, carrier syntax, or conventional designation.
Before leaving a slash expression in current prose, classify the expression as one of these cases:
- accepted notation or conventional designation: a standard name, source name, discipline abbreviation, established compound name, formula, ratio, fraction, unit, path-like quoted source token, title, product name, file path, URL, or quoted source wording where the slash is part of the accepted designation or carrier syntax; keep
ISO/IEC,ISO/IEC/IEEE,1/2, URLs, conventional abbreviations, and similar forms when the sentence uses them as notation; - a plain-language synonym pair with no ontology, authority, evidence, or admissibility claim;
- a lazy
and/or-style join that must be split or recovered before FPF-governed use; - a composite-kind candidate that needs
F.18andA.6.Precovery; - a relation claim that needs a
RelationKind, aQualifiedRelationRecord, or a multi-term relation phrase with typed endpoints, slots, qualifiers, scope, time, and viewpoint; - a tuple-like record that needs a named record kind and named slot semantics;
- a failed ontology signal where the sentence lists unlike values because the FPF kind under repair, relation record, relation phrase, tuple-like record, alternative-case disposition, or not-triggered disposition has not yet been recovered.
If the expression is not one of the safe notation, conventional-designation, carrier-syntax, quoted-source, or plain-language cases, do not keep the slash as final wording. Do not repair it by replacing the slash with one equally vague grouped word. Write the recovered FPF kind, relation record, relation phrase, tuple-like record, alternative-case disposition, or not-triggered disposition by value.
Unclear Source Meaning and FPF Extension Candidates
Sometimes the problem is not a bad word but one of two different cases:
- the intended claim cannot be determined from the surrounding source, current
FPFkinds, or current FPF episteme and publication ontology; - the claim is understandable, but current
FPFdoes not yet contain the kind, pattern, relation record, or method guidance needed to carry it.
Do not merge those cases.
An unclear claim is not current architecture truth merely because deleting it feels risky, and it must not be rewritten by guessing a likely author intention.
An understandable uncovered claim may be retained as a candidate FPF extension only when the problem situation, tempting overread, rejected current uses, current FPF gap, and the first user action that would improve are stated by value.
Classify the case explicitly:
- recovered by value: the text now names the exact
U.Episteme, selectedEntityOfConcern,U.View, publication form, generic publication face, MVPK face under E.17 constraints,PublicationUnit, carrier relation, relation record, relation phrase, tuple-like record, FPF pattern, document with named source, evidence, architecture, reviewed publication, review packet, review record, or review state, project-side FPF kind and reference named by value whenprojectSideFPFRefis live. The selected value is one live value, not the list:C.11ChoiceResult;C.11decision record;A.6.Aaction invitation;A.15U.WorkPlan;A.15.1datedU.Workoccurrence;U.Method;U.MethodDescription;A.20constraint or adjudication decision record;A.21GateDecision;A.21DecisionLogRef;A.10evidence path; typed evidence record;B.3assurance or engineering-justification record; typed status record whose FPF status pattern is named; carrier relation; front-end relation; or not-triggered alternative; - understandable FPF extension candidate: the thought is clear enough to state as a candidate new or amended FPF kind, pattern, relation record, method guidance, accepted
DRRcontent decision, or campaign-scoped content question, but it does not carry current authority, evidence, or admissibility claim until an accepted architecture decision, acceptedDRR, or accepted FPF pattern supplies that authority; - source wording without FPF-governed use: the phrase has no current authority, evidence, or admissibility claim;
- reduced-use cue: the phrase is kept only as a recognition cue or anti-case, not as a claim-bearing architecture decision;
- blocked use: the phrase is not admissible for claim-bearing architecture, pattern, or project text while the needed meaning, kind, or relation is missing.
- rewrite incomplete: the repaired wording may be kind-correct, but it does not yet state a remaining admissible reader move, recognition reason, Tech-to-Plain mapping when both registers are live, or FPF pattern application, or a Plain or didactic line carries ontological, evidence, causal, assurance, bridge, gate, work, decision, or admissibility claim that cannot be recovered from the Tech interpretation; continue repair or demote to a non-use disposition before the text has FPF-governed use.
These dispositions are recovery results, not a meta-governance authority over all of FPF.
When recovery names another FPF kind named by value, that FPF pattern governs that kind, its admissible use, and its conformance checks.
C.2.P may identify that A.10, A.15, A.15.4, A.20, A.21, B.3, C.11, F.9, E.17.EFP, E.17.ID.CR, or another governing FPF pattern is live.
It does not govern the recovered kind after that identification.
C.2.P only makes the kind under repair, relation, and use boundary explicit enough that the right governing pattern can be applied.
No other disposition is closed. In particular, "seems to mean", "probably about", a cleaner paraphrase, or a broad umbrella replacement is not a successful recovery.
Core Glossary
Cross-Side Fields That Must Stay Split
These fields are current episteme-publication precision vocabulary for DRR, architecture, and pattern-drafting work.
They exist to prevent one sentence from mixing FPF-side admissibility, project-side records, actual work or action, method selection, carrier access, and authority records.
They are local recovery aids, not FPF kinds, not record kinds, and not a universal record ontology.
Each field closes only by naming the FPF kind named by value, relation record, relation phrase, project-side FPF kind and reference named by value, or explicit non-use disposition that is live in the sentence.
The same local-aid rule applies to neighboring field names such as sourceRelationClass, explanationSourceRelationClass, comparativeRelationClass, representationValidityAdmissibilityValue, allowedUse, misuseRisk, and worldContactPolicy: they help record a local recovery or reader-use boundary, but they do not become kinds. These local fields do not instantiate evidence, gate, assurance, work, commitment, speech act, decision, release, authority, representation kind, world-contact kind, or policy kind. Read allowedUse as a local reader-fit field under admissibleUse, not as permission, evidence relation, or authority.
Episteme, Publication, and Carrier Distinctions
Trigger Boundary
Lexical trigger scanning and direct known governing-pattern selection are governed by E.10:0.2, E.10:0.2a, E.10:0.2b, E.10:0.2c, and E.10:0.2d.
This pattern is applicable after that scan only when the governing pattern cannot yet be selected directly because the sentence still confuses source wording, claim-bearing episteme, publication or carrier construction, project-side reliance, pattern-application wording, or use or non-use disposition.
When this pattern is applicable, do not restart from word taste. Keep the E.10 trigger result as input and recover source-expression clarification, FPF-governed use, live episteme-publication relation set, use disposition, and remaining admissible reader move.
Current Preferred Vocabulary
Use PublicationUnit when the intended entity is a bounded, human-inspected unit inside a publication.
Do not use it for UI behavior, carrier behavior, front-end behavior, file identity, dashboard behavior, or export behavior; use A.7, carrier wording, front-end wording, or the FPF governing pattern named by value instead.
Use the current cluster names directly: PublicationUnit Stability Discipline, Local Head Restoration, and PublicationUnit Primary EntityOfConcern Discipline.
When the live entity is a bounded unit inside a publication, use PublicationUnit; when the live entity is authoring or editing work, name that work directly.
Use EntityOfConcern, EntityOfConcernRef, and publicationUnitPrimaryEntityOfConcern when local wording means the EntityOfConcern named by a claim-bearing episteme or episteme-lane view, or the primary entity of concern stabilized by one bounded publication unit over that carried item.
For describedEntity, DescribedEntityRef, primary described entity, EntityOfInterest, or EoIClass, use EntityOfConcernSlot, entityOfConcernRef, EntityOfConcernRef, EntityOfConcernChangeMode, EntityOfConcernClass, publicationUnitPrimaryEntityOfConcern, or the local FPF kind named by value. If no claim-bearing episteme or episteme-lane view is live, use an non-claim-bearing kind named by value or plain topic or subject instead of inventing an EntityOfConcernRef.
Use ordinary topic, subject, or local referent only in non-normative explanatory prose where no episteme slot, publication construction, or authority relation is being asserted.
Do not mint any other new reusable FPF name from this pattern alone. PublicationUnit is governed by the E.17.AUD cluster named PublicationUnit Stability Discipline; this pattern recovers bounded-publication-unit wording into that head when the entity is live and points to that cluster for governance. FPF-governed uses keep the nearby definition or explicit publication relation set.
F.18 And A.6.P Admission Interpretation For PublicationUnit
This is the F.18 and A.6.P name interpretation that this pattern reflects from the selected E.17.AUD cluster correction.
It records why PublicationUnit is the selected bounded publication-unit head for the E.17.AUD cluster, while C.2.P remains the epistemic precision-restoration pattern.
Epistemic Precision Restoration After E.10
Lexical trigger rewrite rules are governed by E.10:0.2b, E.10:0.2c, and E.10:0.2d.
Use this pattern after those rules only when one of these remains unresolved:
- source-expression clarification versus FPF-governed use;
- source-local meaning versus current FPF wording;
- claim-bearing episteme versus publication, view, face, carrier, or publication unit;
- EntityOfConcern, grounding relation, or source cue versus project-side evidence, work, gate, decision, assurance, method, action, release, or engineering justification;
- declarative FPF pattern application versus project work or control flow;
- use disposition: recovered by value, reduced-use cue, understandable FPF extension candidate, blocked use, rewrite incomplete, or not triggered;
- remaining admissible reader move or Tech-to-Plain mapping after epistemic precision repair.
When none of these remains unresolved, apply the governing pattern selected by E.10 directly.
Rewrite Execution Modes
Use the smallest sufficient mode that preserves the distinction. The template is an epistemic precision device, not a form to fill for every ordinary wording cleanup.
Local prose cleanup
Use this mode when the phrase under repair is non-normative local prose and does not carry ontology, authority, review scope, release state, admissibility, or a reusable name.
Action: rewrite directly or leave it unchanged. No table row is required.
Compact epistemic precision-restoration row
Use a compact row for ordinary architecture and source-basis or review-basis document cleanup where a sufficient FPF kind, relation record, relation phrase, or tuple-like record can be recovered without minting a new FPF head.
Full epistemic precision-restoration check
Use the full check when the wording may change ontology, introduce or retire a reusable head, change a claim-bearing pattern or document with named source, evidence, architecture, or reviewed publication, review packet, review record, or review state, or resolve a contested source-meaning problem.
Epistemic Precision-Restoration Note
Use an epistemic precision-restoration note only when wording carries ontology, authority, evidence, or admissibility claim. The note records the original phrase, recovered FPF kind or relation, reference named by value when live, project-side FPF kind and reference when live, remaining admissible reader move, and disposition: recovered by value, extension candidate, reduced-use cue, blocked use, rewrite incomplete, or not triggered.
Ordinary Completion and Reopen Boundary
A C.2.P application is complete for ordinary pattern-authoring use when the smallest sufficient product is present:
E.10trigger result is kept as input and the text does not restart from word taste;- the wording is either left ordinary, repaired locally, expressed as a compact epistemic precision-restoration row, or escalated to the full check because the claim being made requires it;
- the recovered episteme, publication, view, face, carrier, publication unit, EntityOfConcern, grounding relation, project-side reference, or use disposition is named by value;
- every relation-like slice that remains live is assigned to
A.6.Por its retained specialization, rather than being hidden inside this pattern; - the remaining admissible reader move survives in ordinary prose or the wording is explicitly demoted to reduced-use cue, blocked use, rewrite incomplete, or not triggered.
Use the lowest sufficient product. A clean sentence is enough when one sentence recovers the claim being made. Use a compact row when the reader must inspect one recovered kind, relation, or disposition later. Use the full check only when several fields are live, when source wording's FPF use is contested, when a durable name may be minted, or when a publication, carrier, or project-side overread would otherwise survive.
This pattern can be applied to its own wording at the same lowest sufficient mode. If C.2.P text itself blurs a source expression, publication construction, pattern application, relation slice, or project-side reliance claim, repair that local wording here; do not create a recursive pattern-quality apparatus.
Reopen or lower a prior C.2.P repair when one of these content discoveries appears:
- the replacement head is another umbrella word such as
support,surface,route,kind,object,record,map, ormappingwithout FPF kind named by value and boundary; - the repaired wording is type-correct but no longer tells the working reader what action, non-use, or neighboring-pattern application remains;
- a neighboring pattern is now the true governing pattern for the live evidence, assurance, gate, work, decision, publication, architecture, structure, relation, or naming claim;
- an entry cue, ToC row, summary, dashboard, retrieval snippet, or source-basis note preserves the pre-repair broad interpretation after the pattern body was repaired;
- repeated use shows that authors are filling the full check where a local sentence or compact row would suffice.
The ordinary stop condition is local: once the current sentence or bounded publication unit preserves kind, relation, use disposition, and remaining admissible reader move, stop. Do not keep improving wording merely because a more elaborate record could be filled.
Archetypal Grounding
Boundary and Anti-Cases
Transfer Coverage
C.2.P is intentionally narrow but must transfer across three recurrent publication situations:
- FPF-side drafting: pattern text,
DRRtext, source-basis notes, review-basis notes, and pattern-host prose; - project-side publication: dashboards, explanations, cards, documents, front-ends, rendered files, and generated summaries used around evidence, work, gates, decisions, assurance, or methods;
- external source-use clarification: seminar fragments, papers, reviews, standards, and tool outputs being clarified before possible FPF use.
In all three situations the same invariant holds: recover the distinction between source wording and current FPF wording, claim-bearing episteme, publication or carrier construction, relation-like slice, neighboring pattern governing that claim, and remaining admissible reader move before accepting the wording as current FPF text.
Bias-Annotation
Conformance Checklist
Current Scan Boundary
Lexical trigger scanning is governed by E.10:0.2, E.10:0.2a, E.10:0.2b, E.10:0.2c, and E.10:0.2d.
C.2.P conformance begins only when the E.10 result is epistemic precision restoration required or combined precision restoration required, or when non-FPF source text is being unpacked before possible FPF transfer.
Do not copy the E.10 trigger list into this pattern as a second registry. Use the E.10 result as input and recover source-expression unpacking mode, FPF-governed use mode, live episteme-publication relation set, use disposition, and remaining admissible reader move. When the relation-bearing slice is live, A.6.P remains a separate required precision-restoration pattern.
Common Anti-Patterns and How to Avoid Them
Consequences
Operating Consequence
For new episteme-publication precision prose:
- start from FPF kinds and relations, not from familiar publication nouns and document nouns;
- use
PublicationUnitfor bounded publication units; - use
EntityOfConcernandEntityOfConcernRefwhen the episteme slot is live, and translatedescribedEntitysource wording to the adopted EntityOfConcern family before FPF-governed use closure; - keep publication form, generic publication face, MVPK face under E.17 constraints, view, carrier, document with named source, evidence, architecture, reviewed publication, review packet, review record, or review state, and project-side FPF kind and reference named by value separate;
- name
relationClaimSlice,admissibleUse, andprojectSideFPFRefseparately when more than one is live; - classify heterogeneous kind lists before writing a sentence that depends on them;
- say that FPF patterns are applied in problem situations, not called or routed as procedures;
- leave accepted FPF names untouched unless a separate accepted naming decision authorizes a rename.
Operationally, each rewrite should:
- separate FPF-side episteme and publication context from project-side episteme and publication context whenever both are present;
- name
relationClaimSlice,admissibleUse, andprojectSideFPFRefseparately when a publication, display, cue, or explanation is treated as evidence, gate, constraint, adjudication, decision-making reliance, work permission, assurance, or engineering justification; - classify heterogeneous lists before naming them: one kind under repair, relation set, tuple-like record, alternative cases, not-triggered alternatives, or failed ontology;
- say that FPF patterns are applied in problem situations, while project records, publications, views, carriers, and actions are worked with in project practice;
- avoid strength metaphors unless the characteristic, scale, threshold, evidence class, or admissibility relation is named.
For cleanup of existing conformant texts:
- do not do a global string replacement;
- classify each unclear term occurrence by the smallest sufficient rewrite mode;
- use the full epistemic precision-restoration check only when ontology, reusable naming, FPF pattern text, or source-bearing project text is live;
- do not rename accepted FPF patterns from this pattern alone.
Rationale
FPF already contains the relevant ontology. The recurring defect was not lack of concepts but ad hoc wording that bypassed them: source, target, surface, object, host, route, supported use, and similar trigger terms packed several FPF kinds and relations into one convenient phrase; they are examples of wording to unpack, not live replacement vocabulary.
The correct repair is therefore not a new umbrella. It is a disciplined recovery action: use E.2, E.10, F.18, A.6.P, A.7, C.2.1, E.17.0, E.17, and MVPK together until the sentence says which EntityOfConcern, relation, publication, view, carrier, record, work, action, or pattern application it means.
Because E.2 governs all normative FPF patterns, epistemic precision is not a value apart from P-2 Didactic Primacy. An epistemic precision restoration may be stricter than the original wording, but if it turns FPF-governed reader-facing problem text into a kind inventory with no working situation or first useful move, it has not landed the FPF repair. The remedy is not expressive license and not metaphor removal; the remedy is admissible recognition wording whose claim being made remains recoverable through the Tech interpretation or a named FPF pattern application.
The detailed rules remain in ordinary pattern sections, so the pattern is usable as FPF guidance rather than as an external glossary container.
SoTA-Echoing
C.2.P does not claim to replace semiotics, terminology science, document engineering, or ontology engineering. Its claim being made is narrower: episteme-publication-heavy conformant text must recover accepted FPF kinds and relations before it is rewritten, so that episteme, publication, view, carrier, naming, relation, and project-side records are not replaced by ad hoc words.
Full external SoTA comparison is therefore not the governing evidence mode for this architectural precision-restoration pattern. A reduced external practice set is still required because the pattern governs terminology drift and epistemic precision restoration. The reduced set is admitted for the recovery discipline; it does not create a new ontology and does not outrank the FPF patterns named below.
External-practice boundary. External traditions are admitted only through the local FPF invariant named by value they sharpen. Object-oriented modeling and OWL-style ontology modeling do not become the default repair for vague FPF wording. Architecture-description standards help keep views, viewpoints, concerns, and descriptions explicit. Explainability and NLP faithfulness work helps prevent explanation laundering. RAG evaluation helps separate retrieval evidence, source availability, and answer trust. Quality-diversity and multi-objective search help avoid premature scalarization in candidate selection. None of these traditions becomes FPF ontology, FPF authority, or a universal pattern-quality benchmark.
Internal FPF Governing Patterns
The current FPF corpus already has explicit governing patterns for this discipline:
E.10supplies the head-kind, term, morphology, register, and forbidden-umbrella discipline.E.10.D2gives the "thing vs words vs rules" discipline and the carrier humility rule.F.18gives the local-first naming protocol: Context, Kind, purpose and use-domain, local sense, candidate head families, NQD-front, semantic read-through, and lexical Q components before one label becomes a reusable head.A.6.Pgives the relation-precision restoration method: restore generic head kind, build candidate sets for endpoint kinds and relation kinds, select kind-explicit slots and qualifiers, then allow guardrailed wording.C.2.1gives the episteme slot graph and selectedEntityOfConcerndiscipline.A.7keeps EntityOfConcern, Description episteme, and publication carrier distinct.E.17.0,E.17distinguish views, viewpoints, MVPK faces, publication forms, and publication projections.A.15.4is a good current pattern example of keeping encountered publication, display, or cue items distinct from the project-side FPF kind and reference named by value that makes work or reliance admissible.A.16,A.16.0,A.19,B.2.5,C.27, andA.3.3provide the movement, control, and temporal machinery used when episteme-publication prose talks about route, trajectory, movement, cadence, or dynamics.E.19already treats terminology and sentence-level precision restoration as required review checks, not editorial polish.A.6.Acarries action-invitation discipline when a publication, representation, or cue invites an action without itself becoming authority, evidence, gate passage, or work completion.C.11carries decision-making and decision-record discipline when the question under repair is a decision rather than generic action.A.15andA.15.4split role, method, work-plan, and actual-work alignment from work-relevant source restoration, so episteme-publication prose must not letA.15become a universal episteme-publication governing pattern.E.9is the campaignDRRpattern for campaign-level content decisions;E.11is only for entry-discoverability situations and must not organize an episteme and publication repair by default.
The internal FPF governing patterns remain primary:
This reduced external-practice set changes the Solution in one practical way: an epistemic precision restoration cannot close merely because the replacement wording sounds cleaner. It closes only when the FPF kind, relation, admissible use, and any governing-pattern application is recoverable by value; otherwise the wording is blocked or becomes a candidate for a separate FPF-kind decision.
E.19 Review Profile Carry-Through
Run PCP-TERM when the repair changes episteme-publication-heavy naming, umbrella words, slash compounds, trigger-word replacements, or relation wording.
Run PCP-BRIDGE when the repair imports terms, claims, norms, or authority expectations across contexts, disciplines, reference schemes, publication forms, or project record kinds.
Run PCP-ENTRY only when the repair changes which FPF pattern a working reader should apply in a problem situation. Do not use PCP-ENTRY as a substitute for the epistemic precision restoration itself.
Run PCP-PRAG when the repair changes reader action, practical payoff, or what the working reader can safely do next. A type-correct but inert repair fails this line even when every recovered kind is technically right.
When the repair changes evidence, proof, witness, grounding, explanation, gate, release, or engineering-justification claims, apply the governing FPF pattern for that claim (A.10, E.17.EFP, A.20, A.21, B.3, or another governing pattern when live) and select the live E.19 profile by the changed pattern claim. Do not mint a local evidence-review profile inside C.2.P.
Relations
- Builds on:
E.2Pillars, especiallyP-2 Didactic Primacy;E.10,E.10.ARCH,A.7,F.18,A.6.P,C.2.1,E.17.0,E.17, MVPK, andA.6.A. - Coordinates with:
E.6,E.7,E.8,E.9,E.12,E.19,A.10,A.15,A.15.4,B.3,A.20,A.21,A.6.F,A.6.3.CSC,A.6.3.CR,A.6.3.RT,C.30.P,C.16.P,C.16.Q,E.17.EFP, andE.17.ID.CR. - Does not replace:
E.10general lexical rules,F.18naming protocol,A.6.Prelation precision, or local episteme and publication patterns. It tells authors when those patterns must be applied to episteme-publication-heavy wording.
C.2.P:End
Reliability R in the F–G–R triad
Reliability (R) is a conservative, evidence-bound warrant signal for a typed claim under an explicit claim scope (G). Cross-context reuse is Bridge-only: scope may be re-expressed via
translate(Bridge,·)(often narrowing), while congruence penalties route to R only.
Type: Architectural (A) Status: Stable
Problem frame
KD‑CAL asks a simple operational question: “Where can I safely use this claim?” FPF answers with a minimal “epistemic location” built from three coordinates and one bridge qualifier:
- F (Formality) describes how the claim is expressed and how strongly it supports verification workflows (C.2.3).
- G (Claim scope) describes where the claim is asserted to apply as a set-like object (A.2.6).
- R (Reliability) describes how strongly the claim is warranted by linked evidence under that scope.
- CL / CL^k / CL^plane (Congruence Levels) describe lossy transport when claims are reused across contexts, kinds, or planes (B.3, C.3). CL values live on edges/bridges (not on the claim as a “4th coordinate”).
In practice, the triad is frequently used before it is made explicit:
- Authors implicitly “average” disparate evidence and report a single confidence.
- Teams treat higher formality (F) as if it automatically implies higher warrant (R).
- Scope growth is smuggled in through phrasing instead of explicit scope operators (A.2.6).
- Cross-context reuse occurs without explicit bridges and without routing congruence loss into R.
This pattern makes R explicit in KD‑CAL and fixes the triad discipline required by Kind‑CAL (C.3) and the Trust & Assurance calculus (B.3).
Problem
FPF needs a reliability coordinate that is:
- Auditable. A reader can trace R to concrete evidence and see how reuse penalties were applied.
- Composable. R can be propagated through claim graphs conservatively, without illegal scale arithmetic.
- Orthogonal. R is not conflated with F (expression) or G (scope).
- Bridge-safe. Any loss from transport across contexts/kinds/planes is explicit and affects R only.
- Minimal. The solution does not introduce new core types or new face-kinds.
Forces
Solution
Canonical triad relation
Definition DEF‑C2.2‑1 (Epistemic location).
An epistemic location for a claim c is the tuple:
Loc(c | K, S) = ⟨F(c), G(c), R_eff(c)⟩
where:
F(c)is Formality (C.2.3), treated as an ordinal.G(c)is Claim scope (A.2.6), treated as a set-like scope object.R_eff(c)is Effective reliability forc, treated as a ratio-scale scalar in[0,1](or an ordinal proxy at [M‑0/M‑1]; see §4.5.A).R_effis computed pathwise (DEF‑C2.2‑3): when more than one admissible justification path exists, publish multiple path records (PathId rows) and cite which PathId(s) a guard/decision consumed (see §4.8.A / G.6). Any collapse to a single scalar is an explicitly declared Γ‑policy (no implicit averaging).
A location is always understood relative to a bounded context and the assurance carriers used elsewhere in FPF:
Kis the declaredU.BoundedContext.S ∈ {design, run}is the claim’s stance carrier (no DesignRunTag chimeras).ReferencePlaneis declared where applicable; plane crossings applyCL^planeand penalize R only.- When the claim is published on the Working‑Model surface, the author also declares
validationMode ∈ {postulate, inferential, axiomatic}(E.14 / B.3).
Mode-to-lane hint (informative). validationMode sets the default expectation for which assurance lane carries the initial support load (B.3.3 or B.3.5).
It does not add a new characteristic and does not change the meaning of R:
axiomatic→ VA-dominant (constructive grounding or proof carriers); ifReferencePlane=world, LA may still be required.inferential→ VA+TA-dominant (reasoned chain + typing/alignment assurance); LA is optional and scope-bound.postulate→ LA-dominant (empirical validation with freshness/decay); VA is optional. In all modes, R remains warrant, not ontological truth; “proof ⇒ R=1 in the world” is a category error.
Profile note (informative; fold compatibility). Some profiles treat empirical R as N/A for strictly axiomatic lines and use a tagged proxy R_proxy := F (line=formal) for folding, as an explicit proxy rather than an implicit “F⇒R” rule (B.1.3).
⟨F,G,R⟩ is an assurance tuple, not a U.CharacteristicSpace; do not draw “trajectories” in ⟨F,G,R⟩.
What Reliability R means in KD‑CAL
Definition DEF‑C2.2‑2 (Reliability as warrant).
R is a conservative, evidence-bound indicator of how strongly the claim “holds as stated” under its declared scope and context. It is interpreted as a warrant strength, not as truth.
Prophylactic clarification.
- A higher
Rmeans “the evidence and its relevance supports relying on this claim under this scope.” - A higher
Fmeans “the claim’s form is amenable to higher-formality checking and wider reuse,” but does not itself imply the claim is warranted. - A larger
Gmeans “the claim applies to more cases,” but does not itself imply the claim is warranted in those cases.
Pathwise weakest-link propagation (series vs parallel)
KD‑CAL’s default Γ‑fold is weakest‑link on the entailment spine (the premises/lemmas actually needed), computed per justification path. It is conservative, monotone, and auditable.
Definition DEF‑C2.2‑3 (Pathwise weakest-link fold).
Let P be a justification path for claim c. Let SpineClaims(P) be the required supports on the entailment spine, and let SpineBridges(P) be the bridges actually traversed on that spine (scope bridges, kind bridges, plane/notation transports where applicable).
Define the raw warrant of the path as:
R_raw(P) = min_{i ∈ SpineClaims(P)} R_eff(i)
and compute the effective warrant of the path by applying congruence penalties (see §4.5 for policy shape):
R_eff(P) = Π(R_raw(P); Φ(CL_min(P)), Ψ(CL^k_min(P)), Φ_plane(CL^plane_min(P)))
Spine discipline. The min is taken over the entailment spine only (no satellites, no “nice-to-have” citations).
This matches the KD‑CAL propagation rule (C.2:4.3) and the Trust & Assurance skeleton (B.3): weakest-link on the spine, penalize only by the worst (lowest) congruence encountered on the path (no averaging).
Parallel support (optional, declared).
If the same claim c has multiple independent justification paths {P_j} (OR‑style support), the default is:
R_eff(c) = max_j R_eff(P_j)
Independence is recorded as an explicit note (e.g., separate rigs/datasets/proof lines), per CC‑C.2.2‑10 and the KD‑CAL composition rule (C.2:4.3).
If the “multiple paths” actually cover different scope slices, do not use max to hide weaker slices; instead publish distinct G_path (SpanUnion‑style coverage) and keep per‑path R_eff traceable (A.2.6 / C.2:4.3).
Conflict detection (no averaging).
If the evidence graph supports both p and ¬p with overlapping scope, do not average. Separate by context/scope, or mark the claim provisional with explicit conflict edges until resolved.
Congruence penalties route to R only (no silent widening)
Cross-context reuse and cross-kind reuse are treated as transport with loss, and loss is expressed as a penalty that reduces R.
Invariant INV‑C2.2‑1 (R-only penalty routing).
For any transport step that uses a bridge with a declared congruence level, the transported claim preserves its F value, re-expresses its scope via an explicit scope translation (translate) when needed, and only its R value is decreased by congruence penalties:
F_out = F_in
G_out = translate(Bridge, G_in) (identity only for within-context identity use; cross-context use is undefined without a Bridge)
R_out ≤ R_in
Claim scope may be re-expressed by an explicit translation, but must not be silently widened:
G_out = translate(Bridge, G_in) (may narrow / drop unmappable slices; never widen without an explicit ΔG)
No implicit translation. Translation between contexts never occurs implicitly: if the target context differs, an explicit Bridge (with declared CL and loss note) is mandatory; otherwise the reuse is non-conformant.
No implicit translation. Cross‑Context reuse is conformant only via an explicit Bridge (declared CL + loss note) and an explicit translate(Bridge,·); see CC‑C.2.2‑4.
This invariant is why KD‑CAL guard macros and crossing bundles can be simple: transport never silently widens a claim; it either (i) translates/narrows scope explicitly, and/or (ii) reduces warrant.
translate is the USM operator (A.2.6). It may drop unmappable slices and may include refit-like normalization; this is not a penalty. Any further narrowing is an explicit Δ‑move (ΔG−) under A.2.6. Congruence loss (CL/CL^k/CL^plane) still routes to R only.
Notation/plane transports. NotationBridge and plane transports contribute to the relevant CL*_min(P) bottlenecks for the path; they do not “lower F” by penalty. If an author actually rewrites a claim into a different formality level, that is a new episteme (ΔF), not “transport”.
Worked micro-example: translate(G) + penalty (A.2.6:12.2)
Source context: MaterialsLab@2026. Claim:
c:“Adhesive X retains ≥85% tensile strength on Al6061 for 2 h at 120–150 °C.”
G_src := {substrate=Al6061, temp∈[120,150]°C, dwell≤2h, Γ_time=window(1y), rig=Calib‑v3}Loc_src(c) = ⟨F_src, G_src, R_raw⟩
Target context: AssemblyFloor@EU‑PLANT‑B. Reuse requires a declared Bridge b:
- Bridge
Bridge#MatLab_to_PlantBmaps lab rig → plant rig and introduces a measurement correction;CL(Bridge#MatLab_to_PlantB)=2with loss note “±2 °C bias.” - Scope translation:
G_tgt := translate(b, G_src)which (in this case) narrows the temperature span to[122,148]°Cdue to the correction. - Penalty routing: using policy
Φ=Φ_v1, computeR_eff := max(0, R_src − Φ_v1(CL(Bridge#MatLab_to_PlantB))).
Key point: G changed only because translate(b,·) explicitly re-expressed the same entitlement in the target Context’s slice vocabulary; the congruence loss still affects R only. If authors decide that only [125,145]°C is safe to claim on the floor, that is an explicit ΔG− decision (scope edit), not a congruence penalty.
Effective reliability under transport (policy-defined, monotone, bounded)
When a claim is reused via bridges, R_eff is computed by applying penalties determined by congruence levels.
Definition DEF‑C2.2‑4 (Effective reliability under transport). Let:
CLbe the congruence level of a scope bridge (B.3).CL^kbe the congruence level of a kind bridge (C.3).CL^planebe the congruence level of a plane transport bridge (B.3 / plane patterns).
Let Φ, Ψ, and Φ_plane be policy-defined, monotone, bounded, table-backed penalty policies applied on the relevant edges:
Φ(CL)— scope/context Bridge penalty (CL).Ψ(CL^k)— KindBridge penalty (CL^k) when kinds are mapped.Φ_plane(CL^plane)— plane-crossing penalty whenReferencePlanediffers.
Important (direction of monotonicity). Congruence ladders are “polarity up” (higher CL = better fit). Per CC‑G0‑Φ and the Trust & Assurance skeleton, penalty tables are monotone decreasing in their CL ladders (if CL1 < CL2 then Φ(CL1) ≥ Φ(CL2), analogously for Ψ and Φ_plane) and bounded so that R_eff remains within [0,1] after clipping. Penalty magnitudes are not required to lie in [0,1] (tables may exceed 1 to force R_eff → 0 under the subtractive default); what matters is monotonicity, boundedness, and published policy identifiers.
Define:
R_eff(P) = clip_0^1( Π(R_raw(P); Φ(CL_min(P)), Ψ(CL^k_min(P)), Φ_plane(CL^plane_min(P))) )
where each *_min(P) is the lowest congruence level encountered on the entailment spine of P for that dimension (a bottleneck; no averages), and clip_0^1(x) truncates to [0,1].
Default (safe) instantiation (subtractive). When policies are expressed as subtractive penalties, a safe default is:
R_eff(P) = max(0, R_raw(P) − Φ(CL_min(P)) − Ψ(CL^k_min(P)) − Φ_plane(CL^plane_min(P)) )
This generalises the B.3 skeleton to multiple congruence ladders (scope vs kind vs plane) without introducing new penalty characteristics. If a dimension is not present on the path, its penalty term is treated as neutral (0 in the subtractive default).
Provisional marking.
Default admissibility thresholds for reuse are set by Bridge calibration profiles (e.g., G.7). Typically, CL=1 requires an explicit waiver to proceed and CL=0 is inadmissible; this pattern only specifies that such thresholds gate transport before any numeric penalty is meaningful.
Math-by-level gating (B.1.3:4.3)
- [M‑0/M‑1] allow ordinal comparisons only (no arithmetic on
R_eff); Φ/Ψ/Φ_plane may be qualitative (“low/med/high”). Publish evidence links + lane tags. - [M‑2/L1] numeric
R_effrequires referencing numeric, table-backed policy identifiers for Φ/Ψ/Φ_plane (and Π if not default), plus reproducibility tags for empirical legs; otherwise treat the claim as [M‑1] semantics.
Evidence lanes are not new characteristics
KD‑CAL does not add new global coordinates beyond F–G–R. Instead, it requires that reliability be explainable via assurance lanes (B.3.3):
- TA (Typing assurance): semantic/type alignment sufficient for transport and composition.
- VA (Verification assurance): logical/algorithmic checking, proof, model checking, static guarantees.
- LA (Validation assurance): empirical adequacy under declared conditions, tests, benchmarks, telemetry.
Lane reporting is how KD-CAL supports the common research distinction between logical soundness and empirical adequacy without introducing new global characteristics. Lanes remain separable in SCR/Notes; they are not averaged into a “single tradition score”.
Scope operations are kind-safe (and use the ClaimScope algebra)
Reliability is meaningless if scope operations are applied to ill-typed entities.
Well-formedness constraint WFC‑C2.2‑1 (Type before scope).
Let G1 and G2 be claim scopes associated to described entities of kinds K1 and K2. A scope operation that combines them (e.g., G1 ∩ G2 for serial intersection, SpanUnion({G_i}) for parallel coverage, or translate(Bridge, G) for cross‑context reuse) is defined only if:
K1 = K2, or- (same
U.BoundedContext)K1 ⊑ K2orK2 ⊑ K1(an explicit kind relation/cast is named), or - (cross‑Context) there exists a declared KindBridge relating
K1andK2with an explicitCL^k(C.3).
This constraint prevents “type-by-scope” anti-patterns where scope manipulation is used to hide type mismatch.
Minimal authoring recipe
A minimal, conforming KD‑CAL authoring flow for reliability is:
-
Fix the typed claim. State the claim as a typed proposition about a EntityOfConcern (Kind‑CAL, C.3).
-
Declare claim scope. Write
Gexplicitly using A.2.6 operators; avoid scope-by-wording. -
Declare stance carriers. Declare
K=U.BoundedContext,S ∈ {design, run}, and (where relevant on Working‑Model surfaces)validationMode ∈ {postulate, inferential, axiomatic}; declareReferencePlaneif crossings are in play. -
Bind evidence. Attach evidence stubs and lane tags (TA/VA/LA) and validity windows / decay policy where applicable (B.3.3, B.3.4).
-
Choose Γ-mode. Declare whether the support is series (required) or parallel (independent lines to the same claim).
-
Compute R_raw. Use the weakest-link fold on the entailment spine; for parallel support, use
maxonly with an explicit independence note. -
Declare bridges on reuse. If you reuse across contexts/kinds/planes/notations, declare the bridge(s) (including NotationBridge where applicable) and their CLs. Cross‑Context reuse is conformant only when an explicit Bridge is declared; CL admissibility rules apply (waiver or forbid) before any numeric penalty is meaningful (see CC‑C.2.2‑4). Reuse note (FPF discipline). When this section refers to “reuse/portability across contexts or planes”, interpret it as Bridge-only reuse per §4.4: e.g., Bridge
Bridge#MatLab_to_PlantBwithCL=2and an explicit loss note, applying policy idsΦ=Φ_v1(and, where applicable,Ψ=Ψ_v2,Φ_plane=Φ_plane_v1) to reduceR_effonly. -
Compute R_eff. Apply the declared penalty policies into
R(never intoForG), and publish⟨F,G,R_eff⟩with traceable references and policy identifiers.
A reliable claim is not a loud claim; it is a claim that can be carried.
Authoring template: Path summary row (copy/paste)
When publishing R_eff for a claim, authors SHOULD include a compact, claim-local path summary. This is intentionally shaped so it can be turned into tooling later (EvidenceGraph/PathId in G.6) without introducing new Core types or face-kinds.
Notes:
CL_*_minvalues are bottlenecks on the relevant path/dimension (no averaging).valid_untilis the earliest expiry across empirical legs (or—/ “fenced to TheoryVersion” for non-decaying proof legs).- If you publish multiple admissible paths, include multiple rows and cite which PathId(s) your decision/guard consumed.
Archetypal Grounding
Informative; non-binding.
System illustration
System. A brake controller S has a claim:
c1:“For road friction μ ∈ [0.2, 0.9] and vehicle mass m ∈ [900, 2200] kg, wheel slip stays in [0.05, 0.25] under ABS control.”
-
F(c1)=F5because the controller and constraints are expressed as a machine-checkable model plus executable test harness (C.2.3). -
G(c1)is the declared operating envelope (A.2.6) as a product set in(μ, m, speed, tire)space. -
Evidence:
- VA: model-checking of a simplified plant/controller model (strong, but only for the simplified plant).
- LA: HIL simulation + track tests under sampled conditions with recorded telemetry windows (freshness required).
- TA: typed alignment between “μ” in simulations, “μ” in the estimation pipeline, and “μ” inferred from real-world sensors.
If telemetry is reused from the track context to the road context, a scope bridge is declared with CL=2. Using the default monotone penalty table (B.3), the LA contribution is reduced, and the derived R_eff(c1) drops accordingly. The claim’s envelope G(c1) does not change; only the warrant for transporting the evidence does.
Episteme illustration
Episteme. A paper asserts two claims about an algorithm A:
c2:“A terminates for all inputs in domain D.” (axiomatic / proof-carrying)c3:“A achieves ≥ 0.92 F1 on dataset family F under deployment preprocessing P.” (empirical)
c2 can achieve high VA with a proof carrier; its LA lane may be N/A, but its TA lane remains relevant because the intended meaning of “domain D” must align with the implementation’s input model.
c3 requires LA evidence and a freshness/shift policy because dataset and preprocessing drift change the scope and the warrant. If c3 is reused from a lab dataset context to a production context, a bridge with explicit CL is required, and R_eff is reduced until new in-context evidence is attached.
Bias-Annotation
Informative; non-binding.
Lenses tested: Gov, Arch, Onto/Epist, Prag, Did. Scope: Universal.
- Onto/Epist bias: High formality is often mistaken for high warrant (“proof therefore true in the world”). This pattern mitigates by forcing LA/TA visibility and by routing transport loss into R rather than mutating the claim.
- Prag bias: Teams may Goodhart R by narrowing scope or selecting easy tests. This pattern mitigates by requiring explicit scope declaration and by making scope changes first-class (A.2.6).
- Gov bias: Overconfident reuse across contexts is a recurring failure mode in governance settings. This pattern mitigates by forcing explicit bridges and penalties for reuse.
- Did bias: A single scalar is seductive; it hides what kind of warrant exists. Lane reporting keeps the scalar honest.
Conformance Checklist
Normative.
Common Anti-Patterns and How to Avoid Them
Informative; non-binding.
Consequences
Informative; non-binding.
Rationale
A triad only works if each coordinate has a single job.
- G carries entitlement. It states where the claim is asserted to apply. If G is implicit, teams argue about “what was meant” instead of updating scope.
- F carries checkability. It states how much the claim’s form supports mechanised scrutiny and reuse. If F is conflated with R, formalisation becomes a rhetorical weapon.
- R carries warrant. It states how much evidence supports relying on the claim under G. If R is not conservative, evidence with a low
Rcoordinate can be laundered into high confidence.
Routing congruence loss into R only prevents a subtle but pervasive failure mode: transport across contexts/kinds/planes does not silently rewrite the claim; it only reduces how confidently we should carry it.
Weakest-link propagation is chosen because it is the simplest rule that is monotone, conservative, and auditable. When better combination rules exist, they can be introduced as explicit Γ‑policies, but the default must be safe.
SoTA-Echoing
Normative.
SoTA pack binding note. If a SoTA Synthesis Pack exists for KD‑CAL reliability / cross‑context warrant transport in your Context (G.2), cite its ClaimSheet IDs / CorpusLedger entries / BridgeMatrix rows here. Otherwise, record SoTA-Pack: TBD/none and treat this section as the seed (do not fork it silently elsewhere).
Relations
Builds on: C.2 (KD‑CAL overview), A.2.6 (Claim scope and operators), C.2.3 (Formality F), B.3 (Trust & Assurance calculus), B.1.3 (Γ‑fold patterns), B.3.3 (assurance lanes), B.3.4 (refresh/decay), C.3 (Kind‑CAL and kind bridges), F.9 (Bridges & CL), G.6 (EvidenceGraph PathId discipline), G.7 (Bridge calibration / admissibility thresholds).
Coordinates with: C.16 (MM‑CHR evidence discipline), E.14 (working-model assertions), E.18/F.9/F.17/E.17/A.21 where crossing bundles and gate checks are live, C.25 (Q‑Bundle, for avoiding confusion between epistemic reliability and system reliability).
Used by: C.3.3 (cross-kind reuse discipline), guard macro bundles in C.3.A and C.21, and any acceptance/gating logic that consumes R_eff while preserving F and G.
Clarifies: The KD‑CAL meaning of reliability implicit in C.2:4.1 and the transport clauses referenced across B.3 and C.3.
C.2.2:End
U.LanguageStateSpace - Language-state chart over U.CharacteristicSpace
Type: Architectural (A) Status: Stable Normativity: Normative unless marked informative
Plain-name. Language-state space.
Builds on.
A.19, E.10, F.18.
Used by.
C.2.LS, C.2.3, C.2.4, C.2.5, C.2.6, C.2.7, A.16.0, A.16, A.16.1, A.16.2, B.4.1, B.5.2.0, F.9.1, A.6.P, C.16.Q, A.6.A.
Problem frame
In engineering, inquiry, operator, and management practice, teams often need to say where a governed U.Episteme publication currently stands before it has reached a late endpoint governing pattern. That governed publication may later appear through several cue-bearing, route-bearing, or endpoint-bound publication forms, but the chart claim remains about the governed U.Episteme publication rather than about a local alias or a carrier lane.
Cue packs, routed cue sets, abductive prompts, typed route-bounded projection publications, partial normal forms, and endpoint-bound records are not rival occupants of the space. They are publication forms through which a current position claim is made visible. MVPK faces may render those forms, but faces are not themselves the forms. By contrast, a service disturbance, a model-vs-observation discrepancy, a bodily tension, a telemetry trace, a model output, or a carrier document may trigger, witness, or carry that episteme, but none of those is itself a coordinate in the space.
Practitioners, including engineers, operators, researchers, managers, and engineer-managers, still have to decide where such an episteme currently stands, which thresholds matter next, which publication form is admissible, and what must not yet be claimed. If this domain is described only with folk labels such as raw, early, settled, or ready, the real geometry disappears.
Problem
Without an explicit language-state chart:
- teams collapse several facets into one maturity story;
Fis silently misused as a surrogate for articulation, closure, anchoring, and representation factors;- thresholds are published as vague readiness statements instead of explicit facet conditions;
- source phenomena, governed epistemes, publication forms, publication faces, and carriers are conflated;
- bridge and endpoint work inherit under-described upstream states.
Forces
Solution
U.LanguageStateSpace is the cluster-local name for the declared language-state chart over U.CharacteristicSpace as disciplined by A.19.
It is not a second kernel state-space apparatus beside A.19. It is the particular declared U.CharacteristicSpace whose basis slots are the language-state facets used in this cluster.
Core role
U.LanguageStateSpace gives FPF one explicit declared chart for answering five questions:
- which basis slots define where the governed episteme stands;
- what a position claim in that chart means;
- which thresholds are locally declared over those slots;
- what comparisons are admissible without cross-facet collapse;
- and how the same position claim stays distinct from the publication form currently expressing it.
Position reading under A.19
A language-state position is a partial, slot-explicit coordinate claim in the declared language-state U.CharacteristicSpace.
Each basis slot publishes a ValueSet(slot), interval, or other admissible set-valued claim. Early seam publications may leave some slots unknown or wide, but that uncertainty must be declared rather than hidden inside one stage word.
position language is therefore admissible here only as shorthand for such slot-explicit A.19 coordinate claims. It does not authorize a rival process-sequence or feature-vector story.
Facet basis
The language-state chart is coordinated by explicit facet governing patterns rather than by an informal master progression. In the current cluster the basis is formed by:
C.2.3forF;C.2.4for articulation explicitness;C.2.5for language-state closure degree;C.2.6for language-state anchoring mode;C.2.7for the language-state representation-factor bundle.
C.2.2a states that these basis slots together define the chart. It does not govern the internal scale semantics of the individual facets.
Ontological role lanes
Within this cluster, keep five roles distinct:
- occupant - the governed
U.Epistemepublication whose current position is being claimed; - grounds / witnesses - disturbances, discrepancies, traces, model outputs, bodily tensions, exemplars, or contrasts that justify the current reading;
- publication forms - cue packs, routed cue sets, prompt forms, typed route-bounded projection publications, partial normal forms, and endpoint-bound records through which the episteme is published;
- publication faces - the existing MVPK faces on which those publication forms are rendered when face typing matters;
- carriers - documents, console notes, cards, trace files, or model carriers that hold or render a publication.
U.LanguageStateSpace governs only the coordinate reading of the position claim. It does not collapse that claim into the grounds, publication form, publication face, or carrier.
Position publication rule
A published position claim in U.LanguageStateSpace should normally make at least the following explicit:
- the occupant whose position is being described;
- the relevant slot values,
ValueSetclaims, or intervals; - the current publication form and, when it matters, the MVPK face carrying it;
- the load-bearing grounds, witnesses, or carriers that explain those values;
- any local threshold declarations if the position is being used for a routing or gate decision;
- any note that distinguishes source anchoring from current publication-face anchoring.
A position claim may be partial when some slots are intentionally unknown, but the unknowns should be declared rather than hidden under a broad readiness label.
Local position-reading witness
For this pattern, a position claim is reviewable when:
- the occupant is named or inherited by an already pinned upstream publication;
- the slot values, intervals, or
ValueSetclaims are explicit enough to show where the publication stands; - the grounds, witnesses, or inherited pins that support those values remain visible;
- any threshold-bearing use states the local threshold note or the pinned threshold source it inherits;
- and the text keeps the occupant, publication form, publication face, and carrier in distinct role lanes.
A polished note, a carrier with more preservation or distribution support, or a more formal face does not by itself prove a new position. The chart claim remains admissible only when those role lanes and slot claims stay visible.
Non-substitution of F
F remains one basis slot in the chart, not the whole chart.
A conforming account shall not infer:
- closure from formality alone;
- anchoring from publication-face format alone;
- representation factors from articulation alone;
- or routing legality from a lone
Fstatement.
Where operationally meaningful thresholds exist, they must publish on the relevant slots rather than being disguised as informal F sublevels.
Position versus publication form
A position claim in U.LanguageStateSpace is distinct from:
- the underlying governed
U.Episteme, - the source disturbance, discrepancy, or witness,
- the current publication form,
- the MVPK face that renders that publication,
- the carrier that stores or displays it,
- or the endpoint-pattern-governed publication that may later result from it.
Those roles are coupled but distinct. U.LanguageStateSpace keeps the position claim readable without collapsing it into any one bearer lane.
Threshold publication discipline
If a threshold is used to justify a move, a handoff, or an endpoint entry, that threshold shall be stated on explicit basis slots in the chart. Statements such as this is now ready, this has matured, or this is still too early are non-conformant when they substitute for undeclared slot conditions.
Comparison and bridge note
Comparisons inside one context may use the shared chart and local thresholds. Comparisons across contexts require explicit bridge discipline. Label similarity or stage-language similarity does not establish sameness of charts, positions, or thresholds.
C.2.2a therefore supports bridge work, but does not grant cross-context identity by itself.
Corridor reading note
The current Language-State & Semantic Routing Corridor in this cluster is a distributed overlay over:
C.2.2aC.2.LSC.2.4–C.2.7A.16A.16.0–A.16.2B.4.1B.5.2.0
A.16.1 / U.PreArticulationCuePack remains the earliest durable seam publication form in that corridor. B.4.1 is the explicit route-bearing seam after cue preservation, not the first publication in the corridor. B.5.2.0 is typed prompt entry, not generic route governance.
C.16.Q, A.6.A, A.6.P, B.5.2, A.15, and C.25 are seam-coupled downstream governing patterns rather than members of this language-state governing-pattern set.
This note gives readers one corridor map only. It does not relocate articulation, closure, route, prompt, bridge, or endpoint semantics out of their current governing patterns.
Archetypal Grounding
Tell. One note can have high operator-loop anchoring yet still low closure. Another can be document-mediated and symbol-heavy while still open on route choice. Both are positions in one language-state chart, but not on one maturity progression.
Show (System). A service disturbance is a system-side phenomenon. The governed occupant is the alerting U.Episteme published from that disturbance; its position claim may be moderately formal, low-closure, high in operator-loop anchoring, and mixed in representation because terse codes and natural-language hints coexist.
Show (Episteme). A model-vs-observation discrepancy is a witness-level tension, not the occupant itself. Once preserved as a cue pack, the resulting governed U.Episteme may be low in articulation, low in closure, trace-anchored, and only partly symbolic even when later written into prose.
Bias-Annotation
The pattern deliberately biases authors toward decomposable coordinate claims and away from folk stage vocabularies. That costs some brevity, but it prevents collapse of genuinely different state facets into one adjective.
Conformance Checklist
CC-C.2.2a-1U.LanguageStateSpaceSHALL be treated as the declared language-state chart overU.CharacteristicSpace, not as a rival kernel space and not as a disguisedFprogression.CC-C.2.2a-2Published positions SHALL cite explicit facet governing patterns when those positions matter for movement, routing, or endpoint entry.CC-C.2.2a-3Position claims SHALL use slot-explicit values,ValueSetclaims, or intervals; uncertainty SHALL NOT be hidden inside stage words such asready,early, ormature.CC-C.2.2a-4A position claim in the chart MUST NOT be conflated with the current ground, witness, publication form, publication face, or carrier.CC-C.2.2a-5Cross-context comparison of positions or threshold talk SHALL go through bridge discipline rather than label similarity.CC-C.2.2a-6Corridor and navigation notes MUST NOT be read as relocation of facet, seam, bridge, or downstream governing-pattern semantics into the chart governing-pattern set.CC-C.2.2a-7If a position claim is used for routing, endpoint entry, or gate-adjacent reasoning, the threshold note and the role-lane distinction between occupant, publication form, face, and carrier SHALL remain explicit or explicitly inherited from a pinned upstream publication.
Common Anti-Patterns and How to Avoid Them
- Maturity monism. Replace five facets with one stage word. Repair by publishing explicit slot placement.
- Formality capture. Use
Fto stand in for articulation, closure, or anchoring. Repair by naming the actual facet governing pattern. - Carrier collapse. Treat a document, cue pack, or routed note as if it were the position itself. Repair by separating carrier lane, publication form, publication face, and position claim.
- Threshold folklore. Speak of readiness without any explicit threshold declaration. Repair by publishing relevant local threshold notes on explicit slots.
- Bridge by vibe. Treat similar stage language in two schools as equivalence. Repair by explicit
F.9bridge with loss notes. - Corridor inflation. Treat the navigation cluster or corridor map as if it were the governing-pattern set for all downstream semantics. Repair by naming whether the current statement belongs to the chart governing-pattern set, a seam publication form, or a downstream governing pattern.
Consequences
The benefit is that practitioners, including engineers, operators, researchers, managers, and engineer-managers, can speak about where a governed U.Episteme stands without hiding the reasons inside vague maturity language. The trade-off is that publication must carry explicit slot and threshold information when decisions depend on it.
Rationale
Language-state work needs one explicit statement of what this chart is before individual facet, move, and endpoint patterns start using it. Without that statement, readers have to reconstruct the same geometry from scattered local rules and examples.
SoTA-Echoing
SoTA note. This section does not mint a second rule source. It is a load-bearing alignment statement: the Solution, Conformance Checklist, and role-lane discipline of this pattern must match the stance stated here or explicitly justify divergence.
Traditions covered. This pattern binds itself to architecture-description governance, model-based systems engineering, and risk/governance profiling practice.
Architecture-description governance. C.2.2a adopts the discipline that positions, publication forms, faces, and carriers stay explicitly distinct, even when one local rendering makes them look aligned.
MBSE and profile discipline. C.2.2a adapts multi-property state publication into a chart over U.CharacteristicSpace whose basis facets remain decomposable and locally thresholded.
Local stance. The load-bearing SoTA claim for this pattern is narrow: best-known current practice treats governed language-state as a multi-facet chart with explicit thresholds and role-lane distinctions, not as one maturity progression or one polished publication face.
Relations
- Builds on:
A.19,E.10,F.18. - Coordinates with:
C.2.LS,C.2.3,C.2.4,C.2.5,C.2.6,C.2.7,A.16.0,A.16,F.9,F.9.1,E.17.1. - Constrains: threshold publication, positional claims, and anti-collapse discipline across the language-state cluster.
Worked Examples
Inquiry cue before endpoint capture
A research cue note may occupy a position claim with:
- moderate
F, - low articulation explicitness,
- low closure,
- strong embodied or trace-based anchoring,
- and mixed representation factors.
That position explains why the note should remain upstream of A.6.P or C.25 even if its prose happens to look polished.
Routed operator alert note
A routed operational alert may have:
- moderate formality,
- medium articulation,
- low closure because several responses remain live,
- high operator-loop anchoring,
- and mixed symbolic and natural-language representation.
That position explains why the alert belongs in a route-bearing seam publication before it hardens into an endpoint-pattern-governed work record or reliance record.
Viewpoint-bound adequacy note
A document-mediated adequacy note about an architecture description may be relatively high in formality and articulation, mid-level in closure, document-mediated in anchoring, and symbolic in representation. That position remains within the same language-state chart even though its carrier lane differs from an embodied inquiry cue.
Polished prose is not closure
A prose rewrite may look cleaner, more compact, or more manager-readable than the source cue and still remain low in closure or articulation explicitness. If the underlying slot values, uncertainty, and route plurality remain unchanged, then publication polish changes the rendering or carrier lane, not the chart position by itself.
Position Publication Package Discipline
A publishable position claim should normally identify:
- the occupant whose position is being described;
- the relevant slot values,
ValueSetclaims, or intervals; - the current publication form and, if relevant, the MVPK face and carrier;
- any source-versus-face anchoring distinction that matters;
- the thresholds, if any, being invoked;
- and the next governing pattern or move family that depends on the claim.
This keeps the claim operationally useful without pretending that the position is itself a full trajectory or endpoint form.
Review Guidance
A reviewer should ask:
- Is the author naming a position claim in the chart, or only a folk stage label?
- Is
Fbeing used as a surrogate for another slot? - Are source phenomena, publication forms, publication faces, and carriers being confused with the occupant?
- Are threshold claims explicit enough for the next move or endpoint decision?
- If the text compares two contexts, is there a real bridge or only a lexical resemblance?
Boundary Notes
C.2.2a does not govern move kinds, seam publication forms, endpoint repair semantics, or bridge substitution licence. Those belong respectively to A.16 / A.16.0, A.16.1 / B.4.1 / B.5.2.0, A.6.* / C.25, and F.9 / F.9.1.
Its job is narrower and more foundational: to make the declared language-state U.CharacteristicSpace chart readable so that downstream patterns can refer to one visible common geometry instead of rebuilding it piecemeal.
C.2.2a:End
Unified Formality Characteristic F
Type: Definitional (D) Status: Stable Normativity: Normative unless marked informative
Plain-name. Formality characteristic.
One-line summary. C.2.3 defines Formality (F) as one ordinal U.Characteristic with polarity up, anchored by the default ladder F0...F9, and declared as the F coordinate of the typed F-G-R assurance tuple.
Problem frame
Transdisciplinary work needs one shared way to speak about rigor of expression. A research hypothesis in constrained natural language, a software interface specification with explicit invariants, a controller model checked against hybrid obligations, and a proof-bearing formal development are not comparable by domain lore alone. They are comparable by how strictly the content is expressed.
Historically, that distinction drifts. Teams mix editorial maturity, organizational status, notation choice, proof support, and scope narrowness into one vague story about something being more formal. C.2.3 removes that drift by giving FPF one explicit U.Characteristic for rigor of expression.
Problem
Without one unified F characteristic:
- Rigor is narrated inconsistently. Different contexts invent local mode/tier language with no shared comparability.
- Status and rigor collapse. Something accepted, published, or approved is mistaken for something precisely expressed.
- Expression changes are hidden. A move from sketch to predicates or from executable model to proof is not recorded as a distinct content change.
- Composition becomes unsound. A composite episteme is treated as highly formal because one segment is highly formal, even when essential support still depends on less formal parts.
- Other characteristics are misused as surrogates. Authors quietly use scope, evidence, or language-state facets as if they were part of one master formality characteristic.
Forces
Solution - U.Formality as one ordinal characteristic
C.2.3 defines U.Formality as the single governing characteristic for rigor of expression in FPF.
Identity and typing
- Name:
U.Formality(abbreviatedFin the assurance tuple) - Type:
U.Characteristic - Scale kind: ordinal
- Polarity:
up - Carrier: any
U.Episteme - Default value family:
F0...F9
F states how strictly the content is expressed. It does not state whether the content is true, well evidenced, widely applicable, or organizationally accepted.
Role in the typed F-G-R tuple
F is the formality coordinate in the assurance tuple. Its interaction rules are strict:
Fis notG; scope remains governed byU.ClaimScopeand other USM structures.Fis notR; evidence, warrant strength, and decay remain assurance concerns.CLand bridge losses affectR, notF.- Changes in notation, carrier, or rendering form do not change
Fif the formal content is preserved.
Extensibility and local anchors
FPF provides the default anchor ladder F0...F9. A context may define sub-anchors or intermediate anchors such as F4[OCL] or F6.5, but only if:
- global order is preserved,
- the local anchor is explicitly docked to a parent anchor,
- the context does not invent a rival ladder or proxy scale.
Usage obligations
- Every normative episteme shall declare one
Fvalue. - Thresholds that depend on rigor should be written explicitly as
F >= Fkconditions. - Any raise or lowering of
Fis a content change, not a status-only change. Fremains declaration and reasoning infrastructure; it is not itself a governance process.
Archetypal Grounding
Tell. F does not ask whether a claim is correct. It asks how strictly the claim is expressed.
Show (System). A system requirement written as controlled natural language with unambiguous acceptance conditions may be F3; the same requirement rewritten as explicit typed invariants may become F4; a machine-checked proof of a critical invariant may raise the relevant claim core to F7 or above.
Show (Episteme). A research conjecture can begin at F1-F3, then gain explicit predicates at F4, executable semantics at F5, and proof-bearing core content at F7-F8, while remaining recognizably the same evolving claim family.
Bias-Annotation
The pattern biases FPF toward one explicit rigor characteristic and against stories that mix formality with status, publication quality, scope width, or evidence support. That bias is intentional. The price of explicit declaration is smaller than the cost of comparing rigor through folklore.
Conformance Checklist
CC-F-1Every normativeU.EpistemeSHALL declare exactly oneU.Formalityvalue, either a default anchor or a local sub-anchor explicitly docked to one.CC-F-2FSHALL be treated as an ordinal characteristic; arithmetic overFvalues is invalid.CC-F-3HigherFSHALL mean greater or equal strictness of expression, not greater truth, trust, or scope.CC-F-4Contexts MUST NOT publish alternative "formality modes" or "tiers" as surrogates forF.CC-F-5Local sub-anchors SHALL preserve the global ordering and the parent anchor meaning.CC-F-6The episteme-levelFof a composite episteme SHALL be bounded by the least-formal essential support on the relevant support path.CC-F-7Implementations MUST NOT averageFvalues numerically.CC-F-8Changes inG,R, orCLSHALL NOT changeFunless the expression form itself changes.CC-F-9Cross-context transport SHALL preserve the attributedF; if the receiving context rewrites the claim materially, it becomes a new episteme with its ownF.CC-F-10Translation loss, bridge loss, and plane crossings SHALL affectRrather than being hidden asFchanges.CC-F-11AssignedFvalues SHALL be justifiable by observable content such as explicit predicates, executable semantics, or machine-checked proofs.CC-F-12Declaring a tool or notation SHALL NOT by itself justify a higherFunless the content satisfies the target anchor semantics.CC-F-13Status labels such asDraft,Approved, orPublishedMUST NOT substitute forF.CC-F-14A context that usesFin gates or policies SHALL write those thresholds explicitly.CC-F-15Language-state facets such as articulation or closure MUST NOT be hidden as pseudo-levels ofF.
Common Anti-Patterns and How to Avoid Them
Consequences
Rationale
FPF needs a rigor characteristic that is portable across mathematics, software, systems, policy, and research. The smallest stable answer is one ordinal characteristic with clear anchors and explicit composition rules. Anything more fragmented breaks comparability; anything more compressed hides the substantive differences between sketch, predicate, executable model, and machine-checked proof.
SoTA-Echoing
Post-2015 practice across formal methods, software architecture, safety engineering, verification, computational science, and typed proof environments converges on one broad lesson: rigor is not binary. It rises through explicit structuring, predicate expression, executable semantics, and machine-checked obligations. C.2.3 adopts that gradient while keeping the characteristic notation-agnostic and transdisciplinary.
Relations
- Defines: the
Fcoordinate of the typedF-G-Rassurance tuple. - Builds on: characteristic machinery from
A.18/A.19and episteme-level characteristic assignment from Part C. - Coordinates with:
C.2.2,B.3,F.9,C.2.LS,A.16,C.2.4,C.2.5,C.2.6, andC.2.7. - Constrains: any pattern, gate, or editorial rule that speaks about rigor of expression.
Canonical Anchors F0...F9
Reading rule. Anchors are ordinal. They say what is minimally true of the expression form, not what is true of the world.
F0 - Unstructured prose
Free natural language with unstable vocabulary, implicit assumptions, and no stable internal structure.
F1 - Scoped notes
Still informal, but with stable topic focus and more consistent terminology. Scope is named even though criteria are not yet operationalized.
F2 - Structured outline
A recognizable template or full section shape exists. The expression is coherent end-to-end, but acceptance criteria are still largely placeholders or informal.
F3 - Controlled narrative
Claims are expressed in constrained prose with stable interpretation. Acceptance or refusal conditions are visible in language, even if not yet fully predicate-like.
F4 - First-order constraints
Critical claims can be rendered as explicit predicates or invariants over typed entities. Consistency and conflict are at least checkable in principle.
F5 - Executable math / algorithmics
The expression has declared executable semantics. Running the model, algorithm, or simulation is part of its meaning.
F6 - Hybrid formalism
Several formal layers are coordinated explicitly, typically discrete plus continuous or several tightly coupled formal subsystems, with declared obligations between them.
F7 - Higher-order verified
Core claims are encoded in a proof-capable higher-order setting and machine-checked against that logic kernel.
F8 - Dependent / constructive proofs
Programs-as-proofs or dependent-type expressions carry the relevant property in their types or proof terms.
F9 - Univalent / higher foundations
Higher-equality foundations are load-bearing. The expression relies on a frontier-grade setting where equivalence is handled as structure-level identity.
Cross-anchor cautions
- Execution is not proof.
- Surface structure is not yet semantics.
- Publishing or approval is not an anchor.
- A local sub-anchor does not erase its parent anchor's meaning.
Assigning F in Practice
First-pass questions
- Can a competent reader misread the claim materially?
If yes, the expression is likely at
F0-F2; if not, it may beF3or above. - Are the critical claims visible as explicit predicates or invariants?
If yes, the expression is at least
F4. - Does the expression have declared executable semantics?
If yes, it is likely in the
F5-F6region. - Would a logic kernel or type checker reject an incorrect change to a core claim?
If yes, the expression is likely
F7-F8, orF9if higher-equality machinery is essential.
Quick rubric
- No full structure ->
F0-F1 - Full structure but mostly placeholder criteria ->
F2 - Controlled prose with one stable reading ->
F3 - Explicit predicates / invariants ->
F4 - Declared executable semantics ->
F5 - Hybrid / layered formal obligations ->
F6 - Machine-checked proof core ->
F7 - Dependent proof-carrying core ->
F8 - Higher-equality foundations are essential ->
F9
Typical delta-F moves
F2 -> F3: replace loose prose with controlled phrasing and explicit acceptance statements.F3 -> F4: recast acceptance into typed predicates or invariants.F4 -> F5: give the expression declared executable semantics.F5 -> F6: make multi-layer obligations explicit.F6 -> F7/F8: move critical claims into machine-checked proof or dependent-type form.
Composition and Interaction
Weakest-essential-support rule
For a composite episteme, the effective F is bounded by the least-formal essential support on the relevant support path. A highly formal annex does not lift an informal essential claim core.
Relation to G
F concerns expression form; G concerns applicability or claim scope. Tightening scope may accompany a raise in F, but it is a separate change and must remain visible as such.
Relation to R
Higher F often makes evidence easier to formulate, test, or prove, but it does not create warrant strength by itself. Empirical freshness, corroboration, and bridge penalties remain R concerns.
Relation to CL and Bridges
A bridge may expose loss or mismatch across contexts. Those losses affect R; they do not silently lower or raise the attributed F. If the receiving context must materially rewrite the claim, it should publish a new episteme with its own F.
Worked Examples
Research hypothesis
A short note proposing a new scaling law with one stable reading and explicit acceptance conditions in prose is typically F3. Rewriting the acceptance conditions as typed predicates would move it toward F4.
Interface specification
An interface specification with explicit preconditions, postconditions, and invariants is typically F4. Adding declared executable semantics in a faithful reference model may move it toward F5.
Safety controller
A controller coupled to a plant model with explicit hybrid obligations is typically F6. If key invariants are then machine-checked in a higher-order proof environment, those claims move toward F7.
Decision policy
A decision policy with controlled prose may remain F3. If thresholds and conditions are published as typed predicates, it becomes F4.
Proof-bearing algorithm
A dependent-typed algorithm whose central property is carried by the type itself is typically F8.
Executable ML recipe
A fully explicit training-and-evaluation recipe with declared execution semantics is typically F5. It does not become F7 merely because the surrounding execution machinery is sophisticated.
Authoring and Review Guidance
For authors
Declare F honestly and early. A low F declaration is not a defect; it is often the correct statement about an early expression. Raise F by changing the expression form itself, not by applying prestige language or by pointing to surrounding machinery.
For reviewers
Review the actual claim core. Ask whether the target anchor semantics are visibly satisfied, whether essential support contains segments with lower R, lower F, or missing witness coverage, and whether status or other characteristics have leaked into the F declaration.
For integrators and assurance leads
Use F explicitly in gates and composition analysis, but do not let it absorb work that belongs to G, R, CL, or C.2.LS. Large F gaps across collaborating epistemes are signals for explicit formalization work, not excuses for wishful leveling.
Glossary and Notation
U.Formality/F. The rigor-of-expression characteristic governed by this pattern.- Anchor. A named ordinal milestone on the
Fladder. - Sub-anchor. A context-local refinement docked to one parent anchor.
- Delta-
F. A content change that alters expression rigor. - Essential support. The support without which the central claim does not stand.
- Example notation.
F = F4,F = F7[HOL],requires F >= F6.
Change Log and Patch Notes
Supersession of legacy ladder language
This pattern supersedes deprecated wording that speaks about alternate formality modes, tiers, or editorial ladders. Forward-looking use should speak in F directly.
Migration guidance
When refreshing legacy material, assign an initial F from observable content, rewrite local maturity labels into explicit F declarations, and keep provenance notes only as historical annotations rather than live rigor surrogates.
Boundary to language-state facets
For the language-space extension, F does not govern U.ArticulationExplicitness, U.LanguageStateClosureDegree, U.LanguageStateAnchoringMode, or U.LanguageStateRepresentationFactorBundle. Contexts MUST NOT hide thresholds for those facets as pseudo-levels or submodes of F; those facets remain explicitly governed by C.2.LS and its subordinate patterns.
C.2.3:End
U.LanguageStateFacetProfile - Thin profile bundle for language-state facets
Type: Definitional (D) Status: Stable Normativity: Normative unless marked informative
Plain-name. Language-state facet profile.
Problem frame
Once position claims in the declared language-state chart over U.CharacteristicSpace must be published and compared, teams need one thin profile bundle that keeps the relevant facets visible as one explicit facet profile without turning that profile into a second characteristic calculus or a surrogate maturity progression.
Problem
Without a dedicated profile bundle, authors blur articulation, closure, anchoring, and representation into one vague maturity story, or they silently reuse F as a surrogate. That blocks admissible threshold publication, undercuts A.16 move guards, and makes school-to-school bridge work harder than it needs to be.
Forces
Solution
U.LanguageStateFacetProfile is a typed profile bundle that names the facets by which position claims in the declared language-state chart over U.CharacteristicSpace are published and interpreted:
formalityRef->U.FormalityfromC.2.3articulationExplicitnessRef->U.ArticulationExplicitnessfromC.2.4languageStateClosureDegreeRef->U.LanguageStateClosureDegreefromC.2.5languageStateAnchoringModeRef->U.LanguageStateAnchoringModefromC.2.6languageStateRepresentationFactorBundleRef->U.LanguageStateRepresentationFactorBundlefromC.2.7thresholdRefs?-> context-local threshold declarations over the governed facetsrouteNotes?-> informative notes that help interpret routing or reopening decisions
C.2.LS is therefore a profile-bundle governing pattern, not a characteristic governing pattern and not a trajectory governing pattern. Characteristic semantics remain with A.18/A.19; admissible moves remain with A.16; explicit path publication remains with E.18.
Governing boundary
C.2.LS governs only the profile composition and the rule that the language-state facets must remain explicit and non-collapsed. It does not:
- redefine
F; - invent a second formality progression;
- govern the scale semantics of
AE,CD,LanguageStateAnchoringMode, orU.LanguageStateRepresentationFactorBundle; - govern reopen/backoff moves;
- govern endpoint classification or bridge kinds.
Threshold publication discipline
Any threshold used for routing, admissible move guards, or entry into A.6.P shall be published on explicit named facets within the profile. Contexts shall not speak of hidden sub-levels of F when what matters is really articulation, closure, anchoring, or the representation-factor bundle.
Local profile-reading witness
For this pattern, a published facet profile is reviewable when:
- the facet refs are explicit or explicitly inherited from an already pinned upstream publication;
- any threshold-bearing use names the facet whose threshold is being invoked;
- route notes or local overlays remain informative and visibly docked to the explicit facet bundle;
- and the profile does not smuggle move rules, bridge rules, gate state, or downstream governing-pattern semantics into the bundle record.
A polished label, one strong facet, or one memorable route note does not by itself yield an admissible profile reading. The profile remains conformant only when the named facets stay explicit and decomposable.
Composite readings
A language-state judgement may be composite, but the composite shall be decomposable. For example, a cue may be:
- low
AE, - medium
CD, AM.TraceAnchored,- and representation-wise mixed rather than purely symbolic.
A conforming profile makes this decomposition visible rather than hiding it under one poetic label such as "early" or "raw".
Corridor map note
C.2.LS participates in the current Language-State & Semantic Routing Corridor, but only as the thin governing pattern of the facet-profile bundle. Readers who need one map of the full language-state governing-pattern set should read the corridor note in C.2.2a.
That map does not change the governing boundary here: C.2.LS still does not govern cue preservation, route-bearing publication, prompt entry, or downstream endpoint handoff.
Archetypal Grounding
Tell. A team may say a draft is "still forming" for different reasons. U.LanguageStateFacetProfile forces the team to say whether the issue is low articulation, low candidate-space closure, an anchoring mismatch, or an unresolved representation-factor bundle.
Show (System). An operator alert note can be AM.OperatorLoop anchored and low-closure without being low-formality in every respect.
Show (Episteme). An inquiry note can be low articulation yet already tightly anchored to exemplars and traces.
Bias-Annotation
The pattern biases authors toward explicit facet governance and away from master-scale stories. That cost is intentional: the goal is to prevent surrogate progressions from entering the Core.
Conformance Checklist
CC-C.2.LS-1A language-state facet profile SHALL reference explicit facet governing patterns rather than invent local unnamed factors.CC-C.2.LS-2C.2.LSMUST NOT redefineFor create a second formality progression.CC-C.2.LS-3Thresholds that matter for routing, reopening, or lexical repair SHALL be published on explicit facets.CC-C.2.LS-4Trajectory accounts that rely on facet profiles SHOULD reuseA.16move kinds andE.18path publication rules.CC-C.2.LS-5Composite labels such asearly,settled, orreadySHALL NOT stand in for the explicit facet bundle when those states matter operationally.CC-C.2.LS-6Composite readings, overlays, and route notes SHALL remain decomposable into named facets and MUST NOT behave as hidden master factors.CC-C.2.LS-7A profile bundle MUST NOT smuggle move rules, bridge rules, gate state, or downstream governing-pattern semantics into what should remain a thin facet-profile record.
Common Anti-Patterns and How to Avoid Them
- Shadow progression. Treating
early/lateas a master scale. Split the judgement into the named facets. - Formality capture. Letting
Fstand in for closure or articulation. Publish those facets explicitly. - Bundle inflation. Turning
U.LanguageStateFacetProfileinto a secondA.19. Keep it thin and referential. - Opaque readiness. Using words such as
readyormaturewithout naming which facet justifies the claim. - Route-note capture. Letting an informative route note behave like move rule, gate state, or endpoint governance. Keep route notes informative and push operative authority back to
A.16, downstream governing patterns, or gate/work governing FPF patterns orauthoritySourceReftargets.
Consequences
The benefit is authority-reference clarity: early cue work, bridge annotations, and reopen moves can all talk about one explicit facet profile. The trade-off is more explicit profile authoring and threshold publication.
Rationale
The pattern gives the declared language-state chart over U.CharacteristicSpace one stable facet-profile record through which its facet bundle can be published together, while respecting the rest of FPF's governing boundaries.
SoTA-Echoing
SoTA note. This section does not mint a second rule source. It is a load-bearing alignment statement: the Solution, Conformance Checklist, and boundary discipline of this pattern must match the stance stated here or explicitly justify divergence.
Traditions covered. This pattern binds itself to architecture-description governance, model-based systems engineering, and governance/profile discipline.
Architecture-description governance. C.2.LS adopts the discipline that useful state publication should keep the relevant profile elements explicit rather than hiding them inside one summary label.
MBSE and profile discipline. C.2.LS adapts typed multi-property state publication into a thin, decomposable language-state facet bundle rather than one master scale.
Local stance. The load-bearing SoTA claim for this pattern is narrow: best-known current practice treats language-state publication as a small explicit facet profile with local thresholds and decomposable readings, not as one maturity adjective or one route-coloured bundle label.
Relations
- Builds on:
A.18,A.19,C.2.2a,C.2.3. - Coordinates with:
C.2.4,C.2.5,C.2.6,C.2.7,A.16.0,A.16,A.16.1,A.16.2,B.4.1,B.5.2.0,E.18,F.9.1. - Constrains: language-state threshold publication and profile composition.
Worked Examples and Composition Notes
Operator-facing early alert
A console alert note may be published with a language-state facet profile such as:
F = F2/F3because the note is structurally controlled but still lightweight;AE = AE2because candidate anchors are visible but not yet fully relation-shaped;CD = CD1because several routes remain live;LanguageStateAnchoringMode = AM.OperatorLoopbecause the note is directly anchored to operator intervention/work;RepresentationFactorBundle = {local, sparse, mixed-symbolic}because alert text and compact codes coexist.
This example shows why no one facet can replace the others. The note is not simply early; it is early in a specific, decomposable way.
Research cue before lexical repair
A felt or trace-anchored mismatch cue in an inquiry note may be:
- low
AE, - very low
CD, AM.EmbodiedFelt,- and representation-wise mixed because the cue is partly verbal, partly kinesthetic, partly exemplar-based.
That profile explains why the cue should remain in A.16.1 rather than being forced into A.6.P or B.5.2 immediately.
Architecture-description case
A viewpoint-bound note about the adequacy of an architecture description may be moderately high in F, moderately high in AE, still mid-level in CD, document-mediated in AM, and symbolic in its representation-factor bundle. The profile keeps description-side adequacy distinct from system-side engineering quality.
Same F, different profile
Two notes may share the same rough F band and still differ sharply in articulation, closure, anchoring, and representation factors. One may be operator-loop anchored and low-closure; another may be document-mediated and comparatively closed. The profile bundle keeps that difference visible instead of letting F behave like a master factor.
Authoring and Review Guidance
For authors
When publishing a language-state facet profile:
- start from the local authoring problem rather than from a memorized progression;
- name the facet refs explicitly;
- add threshold refs only when a threshold changes routing, repair, or governance;
- avoid global labels such as "mature", "raw", or "ready" unless the profile decomposition is already visible.
For reviewers
A reviewer should ask:
- is any facet silently replaced by
F? - is a threshold published on an explicit facet rather than on a poetic surrogate?
- do route or reopen claims actually match the published facet bundle?
- are profile notes genuinely informative, or are they smuggling governing semantics that belong elsewhere?
For integrators
Integrators should preserve profile references rather than rephrasing them into local slang. A local alias is acceptable only if the underlying facet docking remains explicit and stable.
Extension and Migration Notes
Local extension rule
Contexts may extend the profile with local threshold refs, route notes, or additional descriptive aids, but they shall not add a new master facet that collapses the governed set into one summary factor.
Migration from surrogate prose
Older prose often says:
- "the episteme is still early",
- "the issue is not mature enough",
- "the note is ready",
- "the cue is still raw".
A conforming migration rewrites such statements into explicit facet talk: which facet is low, which is high, which threshold is or is not met, and which move that fact justifies.
Boundary reminder
U.LanguageStateFacetProfile is a coordination record. If authors find themselves putting move rules, bridge rules, scale rules, or bundle semantics into the profile itself, they are writing in the wrong governing pattern.
Profile Publication Package Discipline
Minimal publishable profile package
A publishable U.LanguageStateFacetProfile should normally carry:
- the declared facet refs for
AE,CD,LanguageStateAnchoringMode, andLanguageStateRepresentationFactorBundle; - any threshold refs that substantively affect routing, repair, bridge interpretation, or review load;
- the local relation to
Fwhen readers might otherwise treatFas a surrogate; - any omission note when a facet is intentionally unpublished, unknown, or locally irrelevant.
One-line publication is admissible only if facet governance remains legible.
Partial-profile rule
A partial profile is admissible only when omission is explicit. Publishing AE and CD while deferring LanguageStateAnchoringMode is acceptable; silently omitting it and then speaking in scalar prose such as "early" or "ready" is not.
If only one facet is published, either explain why the others are not governed in the current note or point to the note where they are already published.
Overlay discipline
Local overlays such as "explicit-but-open", "trace-heavy", or "operator-tight" are admissible only when they dock to explicit facet refs. Overlays remain secondary to the governed profile and must not replace the facet bundle.
Cross-Facet Reading Rule
No master-facet reading
Do not infer the whole language-state profile from one facet. High AE does not entail high CD; strong AM.OperatorLoop does not fix AE or CD; symbolic representation does not entail high F; low CD does not imply low operational consequence.
Threshold interaction rule
When a threshold is expressed over one facet, say whether the other facets are merely informative or also constraining. A Context may allow entry into B.5.2.0 once AE suffices for an explicit open question while still capping CD so rival answers remain live; it may allow entry into A.6.P at AE3+ while still capping CD so the move remains exploratory rather than endpoint-binding.
Transition reading rule
Read profile transitions facetwise. A note may become more explicit without becoming more closed, more document-mediated without changing closure, or more symbolic without becoming more formal. A.16, A.16.1, A.16.2, B.4.1, and B.5.2.0 should therefore cite the facet transition that actually justifies the move.
Review Matrix and Migration Tests
Review matrix
A reviewer should ask:
- is each published facet governed by its proper pattern rather than by surrogate prose;
- does any overlay smuggle a hidden scalar or gate decision;
- are threshold claims tied to the facet that really bears them;
- do cited moves in
A.16,A.16.1,A.16.2,B.4.1, orB.5.2.0actually match the facet bundle; - if the profile crosses a bridge or viewpoint boundary, are stance and loss notes kept in
F.9orF.9.1rather than imported as fake facets.
Migration test for old prose
Legacy phrases such as "still immature", "not ready yet", or "already stable enough" should be unpacked into: which facet is claimed, which anchor or bundle member justifies it, which threshold or route consequence follows, and which governingPatternRef or authoritySourceRef carries that consequence.
Comparative profile use
Compare profiles facetwise unless a Context has published an explicit local aggregation for reporting. Such an aggregation remains secondary and must not replace the profile in norms, thresholds, or bridge claims.
C.2.LS:End
U.ArticulationExplicitness
Type: Definitional (D) Status: Draft Normativity: Normative unless marked informative
Plain-name. Articulation explicitness.
Problem frame
A governed U.Episteme can already matter while its semantic shape is not yet fully explicit. The declared language-state chart over U.CharacteristicSpace therefore needs one basis-slot governing pattern for how explicit that shape already is, without confusing articulation with rigor, truth, or closure.
Problem
When articulation explicitness stays implicit, authors either overstate readiness for later repair or endpoint classification, or hide early cue structure entirely. Reusing F for this judgement creates a category error: formality is about rigor of expression, not about whether the semantic shape is already explicit enough for repair or endpoint classification.
Forces
Solution
U.ArticulationExplicitness is an ordinal characteristic over how explicit the semantic shape is in a published position claim in the declared language-state chart over U.CharacteristicSpace, for publication, routing, and repair.
Characteristic specification
- Kind: CHR characteristic.
- Scale discipline: ordinal.
- What rises: semantic shape becomes more explicit.
- What does not follow automatically: truth, trust, closure, admissibility, or formality.
AE is therefore independent from F, from LanguageStateClosureDegree, and from endpoint authority.
Starter anchor set
The anchors are a starter set; a Context may refine them locally, but it shall keep the ordinal direction and the distinction from F intact.
Use discipline
AEmay be used to state entry conditions forA.6.P.AEmay be used to justify why an episteme remains inA.16.1orB.4.1.AEshall not be used as a surrogate for closure, confidence, or truth.- High
Fshall not be taken to imply highAE, and highAEshall not be taken to imply highF.
Change discipline
Raising AE requires additional explicit anchors, slots, or normal-form structure. Lowering AE is admissible under A.16.2 when a prior articulation proves over-committed or misleading.
Archetypal Grounding
Tell. "Something is off" may be a real cue even before role bearer, intended work move, reliance move, or evaluator are explicit.
Show (System). An operator alert cue grounded in a disturbance trace may be stabilized as a candidate intervention cue before a full work relation or reliance relation specification exists.
Show (Episteme). A research note may name a contrast and exemplars before it has a clean proposition.
Bias-Annotation
The pattern legitimizes early cues. The counter-bias is explicit: low AE never licenses hidden semantics or unreviewable leaps.
Conformance Checklist
CC-C.2.4-1AESHALL NOT be treated as a synonym forF.CC-C.2.4-2Entry intoA.6.PSHOULD require at least the Context's declared articulation threshold.CC-C.2.4-3AEjudgements that drive routing or repair SHALL cite the anchors, contrasts, or slots that justify the chosen level.CC-C.2.4-4RaisingAESHALL NOT be described as if it automatically settled closure or authority.
Common Anti-Patterns and How to Avoid Them
- Formal-looking but semantically thin. High
F, lowAE. Declare both. - Mystical cue immunity. Low
AEpresented as exempt from authoring discipline. It is not. - Ready-by-tone. A sentence sounds precise, so authors assume
AE3+. Publish the actual anchors.
Consequences
The benefit is admissible publication of early cues and clearer threshold setting for repair. The trade-off is that authors must distinguish "not yet explicit" from "already formal".
Rationale
AE is one basis slot in the declared language-state chart over U.CharacteristicSpace. Without it, A.16.0, A.16.1, and B.4.1 cannot state crisp entry, seam, and exit conditions.
SoTA-Echoing
The distinction echoes work on sketching, focusing/TAE, embodied cue capture, and representation probing: a cue can be real and operationally relevant before it becomes fully explicit.
Relations
- Builds on:
A.18,C.2.2a,C.2.LS. - Coordinates with:
C.2.5,A.16.0,A.16,A.16.1,A.16.2,A.6.P,B.4.1,B.5.2.0. - Constrains: articulation thresholds for routing and repair.
Worked Examples and Edge Cases
High formality, low articulation
A template may be syntactically precise and therefore high in F, yet still low in AE because the actual role-bearer, relation, or intended-work-or-reliance-move slots remain unclear. This is the classic case where formal-looking language overstates semantic readiness.
Low formality, high articulation
A short, plain note may be low in F yet already high in AE because the relation skeleton is explicit enough for A.6.P. This case matters because it shows that AE is not a stylistic measure.
Threshold edge case
A cue with stable trigger span and candidate anchors may still sit between AE2 and AE3. A Context should then publish its local threshold rule explicitly rather than pretending that entry into A.6.P is obvious by tone.
Authoring and Review Guidance
Author prompt
To assign AE, ask:
- is the trigger span stable?
- are candidate anchors visible?
- is there already a minimally relation-like skeleton?
- is a normal form actually publishable, or only hinted?
Review prompt
A reviewer should reject AE claims that rely only on rhetorical confidence. The claimed level should be supported by anchors, slots, contrasts, exemplars, or explicit normal-form structure.
Threshold publication reminder
If AE determines whether an episteme stays in A.16.1, passes through B.4.1, or enters A.6.P, that threshold should be published explicitly and locally.
Extension and Migration Notes
Local anchor refinement
Contexts may refine the starter anchor set with subanchors, but the refinement must preserve the ordinal direction and the distinction from F and CD.
Migration from vague articulation prose
Statements such as "still vague", "more explicit now", or "ready for formalization" should be migrated into explicit AE claims plus the corresponding move or routing claim.
Boundary reminder
AE does not govern closure, confidence, or warrant. If authors want those meanings, they must publish them through their own governing patterns.
Articulation Publication Package Discipline
Minimal articulation package
An AE claim that matters for routing or repair should normally publish more than a level token. The supporting package should indicate which of the following are present:
- stable trigger span;
- candidate anchors or contrasts;
- role-bearer / intended-work-or-reliance-move / evaluator slots where relevant;
- a minimally relation-like skeleton;
- a candidate normal form, or an explicit note that no such form is yet admissible.
A bare AE3 label is a publication with insufficient articulation support when the supporting articulation evidence is absent.
Threshold package for route change
If entry from A.16.1 or B.4.1 into A.6.P depends on AE, publish the threshold together with the minimum articulation package required at crossing time.
Evidence-limited rise rule
AE may rise only as far as the published anchors, slots, and contrasts warrant. Stylistic polish, templates, or rhetorical confidence do not raise AE on their own.
Threshold Crossing and Split Handling
Admissible entry into relational repair
Entry into A.6.P is admissible when the local articulation threshold is met and the note already exposes enough relation structure for precision restoration to operate on a real relation-like episteme. Entry into B.5.2.0 is admissible when the open question is explicit enough for prompt-species publication even if relation structure is still too thin for A.6.P. If the threshold is borderline, keep the episteme in B.4.1 or A.16.1 and state what anchor or slot is still missing.
High-articulation, low-closure cases
A note may reach AE4+ while remaining low or mid in CD. In such cases state that articulation is sufficient for precise handling while closure still leaves rival routes or frames live.
Split-publication rule
If one note contains a high-AE fragment and a low-AE remainder, split the publication rather than assigning one averaged level that hides the actual route structure.
Review Matrix and Endpoint Boundary Tests
Review matrix
A reviewer should ask:
- are the named anchors genuinely present rather than merely presupposed;
- does the claimed articulation level rest on structure rather than tone;
- are role-bearer, intended-work-or-reliance-move, evaluator, or comparison slots still ghosted;
- if
AEis used to justify route transfer, is the destination governing pattern actually ready to receive the publication.
Endpoint-boundary test
High AE does not by itself authorize endpoint claims, gate pressure, or quality ascriptions. If such consequences appear, show which downstream governing pattern takes over.
Migration note for false precision
Rigid templates, capitalized labels, or tidy sentence rhythm can simulate articulation. Migration should therefore test whether anchors and slots are really present; if not, the articulation level should drop.
C.2.4:End
U.LanguageStateClosureDegree
Type: Definitional (D) Status: Draft Normativity: Normative unless marked informative
Plain-name. Language-state closure degree.
Problem frame
A governed U.Episteme may already be explicit enough for publication while its declared position claim remains intentionally open to rival routes or frames. The declared language-state chart over U.CharacteristicSpace therefore needs a separate basis-slot governing pattern for how fixed or closed the current candidate space has become.
Problem
Closure is often hidden inside vague words such as "ready", "settled", or "open". When closure is not explicit, teams cannot reason cleanly about reopen, sketch-backoff, or the admissibility of endpoint docking.
Forces
Solution
U.LanguageStateClosureDegree is an ordinal characteristic over how fixed the current candidate set, framing, and admissible next moves are in a published position claim in the declared language-state chart over U.CharacteristicSpace.
Characteristic specification
- Kind: CHR characteristic.
- Scale discipline: ordinal.
- What rises: the local state becomes more fixed or more binding.
- What does not follow automatically: truth, trust, formality, or quality.
Starter anchor set
Non-collapse rules
LanguageStateClosureDegree is not:
F;- articulation explicitness;
- gate decision;
- evaluator confidence;
- warrant strength.
A text may be highly explicit but low-closure, or low-explicitness but already high-closure by policy. Those states shall not be collapsed.
Change discipline
Increasing CD requires narrowing candidate space, route space, or frame space explicitly. Lowering CD is admissible only through a named move such as reopen, sketchBackoff, or respecify, with a retained-witness and discarded-assumption note.
Archetypal Grounding
Tell. Two notes may look equally explicit, but one is still intentionally open while the other is already committed to a single route.
Show (System). An incident cue can be routed to rollback while remaining reopenable if new evidence arrives.
Show (Episteme). A hypothesis sketch can be highly articulated but still low closure because rival explanations remain live.
Bias-Annotation
The pattern makes closure explicit, which resists hidden overconfidence but may feel heavy to authors who prefer implicit consensus.
Conformance Checklist
CC-C.2.5-1Closure SHALL be declared independently fromFandAEwhen it matters for routing, docking, or reopening.CC-C.2.5-2Reopen/backoff moves SHALL cite the prior closure state they are relaxing.CC-C.2.5-3Strong-closure states SHOULD name the guard,governingPatternRef, orauthoritySourceRefthat makes the closure binding.CC-C.2.5-4Endpoint authority SHALL NOT survive a closure drop silently when the supporting route or publication form no longer holds.
Common Anti-Patterns and How to Avoid Them
- Closure by mood. A sentence sounds decisive, so teams assume high closure. Publish
CDexplicitly. - Irreversible drift. Closure rises informally but no reopen path exists. Use
A.16.2. - Authority smuggling. High closure is treated as if it were automatically a gate or obligation. Route those consequences through the proper governing patterns.
Consequences
The benefit is admissible handling of stabilization, commitment, and reopening. The trade-off is more explicit state declaration and more explicit retreat records.
Rationale
Closure is the route-governance basis slot that complements articulation within the declared language-state chart over U.CharacteristicSpace. A.16.0 and its seam species need both.
SoTA-Echoing
The facet aligns with iterative design, open-world reasoning, and exploratory search practices where closure is a governance choice rather than a hidden by-product.
Relations
- Builds on:
A.18,C.2.2a,C.2.LS. - Coordinates with:
C.2.4,A.16.0,A.16,A.16.1,A.16.2,B.4.1,B.5.2.0. - Constrains: reopen, backoff, and endpoint docking guards.
Worked Examples and Retreat Cases
Explicit but still open
A note may sit at AE4 yet only CD1 because rival explanatory frames are still live. The important lesson is that explicit publication does not imply settled closure.
Strong closure under policy guard
An operator rule may be only moderate in AE but high in CD because policy already fixes the next step under the current horizon. This shows why closure is governance-facing, not merely stylistic.
Reopen case
A route may move from CD4 back to CD2 when counter-evidence appears. A conforming publication does not hide this as embarrassment; it records the retreat as an admissible A.16.2 move.
Authoring and Review Guidance
Author prompt
To assign CD, ask:
- how many rivals remain live?
- is one route merely preferred, or actually fixed?
- what guard,
governingPatternRef, orauthoritySourceRefmakes the closure binding? - what would count as an admissible reopen trigger?
Review prompt
A reviewer should ask whether closure is being inferred from tone, from hierarchy, or from social pressure rather than from an explicit narrowing of route or frame space.
Governance note
Whenever CD substantively affects gates, commitments, or late endpoint authority, the supporting guard, governingPatternRef, or authoritySourceRef should be visible.
Extension and Migration Notes
Local anchor refinement
Contexts may refine the starter closure anchors, but shall keep the ordinal progression and the explicit link to reopen/backoff discipline.
Migration from readiness language
Words such as "settled", "closed", "final", or "open" should be treated as migration prompts into explicit CD claims and, where needed, into named A.16.2 moves.
Boundary reminder
CD is not warrant strength and not a gate decision. It speaks only about the local fixity of the current episteme/publication path and its candidate space.
Closure Publication Package Discipline
Minimal closure package
A publishable CD claim should name what has narrowed:
- the rival routes or frames that remain live;
- the route, frame, or interpretation that is currently privileged or fixed;
- the guard,
governingPatternRef,authoritySourceRef, or policy that makes the narrowing binding; - the condition under which an admissible reopen or backoff would occur.
A bare claim such as "now settled" is insufficient when closure affects routing or authority.
Narrowing-source rule
Closure may rise because evidence eliminates rivals, governance temporarily binds a route, or protocol requires fixation under time pressure. State the source of narrowing because different sources imply different reopen expectations.
Partial-closure rule
Closure may be local rather than global. A note can be closed enough for one route while remaining open about broader explanation or classification; a prompt may be fixed enough to hold one question steady while still open enough that rival answers remain live. Publish that locality explicitly.
Retained and Withdrawn Authority Handling
Authority retention rule
If higher CD carried endpoint expectations, guard pressure, or route commitments, a later closure drop must say which consequences remain and which are withdrawn.
Admissible retreat record
An admissible retreat through reopen, sketchBackoff, or respecify should retain:
- the prior closure state;
- the reason the prior fixation no longer holds;
- the assumption or route being relaxed;
- the still-binding remainder, if any.
This prevents false continuity after retreat.
Closure versus obligation boundary
High CD may coexist with obligations, but CD is not itself an obligation-bearing governing FPF pattern or authoritySourceRef target. When prose treats "closed" as "must now be done", name the actual governingPatternRef or authoritySourceRef for that claim.
Review Matrix and Reopen Tests
Review matrix
A reviewer should ask:
- what was narrowed;
- by what
governingPatternRef,authoritySourceRef, or guard it was narrowed; - what would reopen it;
- whether any gate, release, work, evidence, assurance, policy, or adjudication authority survives the claimed closure level;
- whether the publication distinguishes local closure from whole-context finality.
False-finality test
Words such as "final", "settled", or "decided" should be challenged unless the route/guard package is explicit. Final-sounding rhetoric often overstates actual closure.
Cross-facet reminder
Low CD does not imply low articulation, low anchoring, or poor representation. Reviewers should not treat openness as low seriousness.
Split-closure review case
A publication may be closed enough for immediate local work use or reliance use while remaining open about broader explanation, long-horizon consequences, or alternative classification. Allow the split when locality is explicit; reject prose that advertises whole-case finality when only one language-state segment is fixed.
C.2.5:End
U.LanguageStateAnchoringMode
Type: Definitional (D) Status: Draft Normativity: Normative unless marked informative
Plain-name. Language-state anchoring mode.
Problem frame
Published position claims in the declared language-state chart over U.CharacteristicSpace differ not only by articulation and closure, but by how the governed U.Episteme in that claim is anchored to bodies, traces, model states, documents, or operator loops.
Problem
Without an explicit anchoring-mode declaration, embodiment and source anchoring are smuggled into informal prose or folded into representation terms. That undercuts cue comparison, undercuts bridge loss notes, and turns operator-facing language-state work into a special case with no explicit governing-pattern relation.
Forces
Solution
U.LanguageStateAnchoringMode is a nominal characteristic that states the primary anchoring regime of the governed U.Episteme named by the current position claim: bodily enactment, trace, model state, document, operator loop, or an explicit mixed regime. If source anchoring and current publication-face anchoring differ, both shall be distinguished rather than collapsed.
Starter family
Governing boundary
U.LanguageStateAnchoringMode is not a representation factor bundle, not a closure state, and not a truth status. If embodiment matters, it shall be declared here or immediately beside this characteristic rather than being hidden inside representation talk.
Mixed-mode rule
AM.Mixed is admissible only when the component modes are named explicitly. "Mixed" shall not be a lazy escape from deciding whether the key anchor is bodily, trace-based, model-latent, document-mediated, or operator-loop based.
Bridge implications
Bridge work over governed U.Episteme publications in the declared language-state chart should pay attention to anchoring shifts. A translation from AM.EmbodiedFelt to AM.DocumentMediated, or from AM.ModelLatent to prose, often requires explicit loss notes in F.9 and often justifies a stance annotation in F.9.1.
Archetypal Grounding
Tell. A felt cue, a controller-side probe score, and a textual design note may all be early cues, but they are anchored differently.
Show (System). An alert tied to an operator console is AM.OperatorLoop, not just "text".
Show (Episteme). A model-probe cue grounded in latent state is AM.ModelLatent even if it is later paraphrased into prose.
Bias-Annotation
The pattern pushes authors to declare anchoring rather than hide it in metaphors such as "the system wants" or "the note suggests".
Conformance Checklist
CC-C.2.6-1Anchoring mode SHALL NOT be inferred from publication phrasing alone when it matters for routing, trust, or bridge interpretation.CC-C.2.6-2Embodiment-sensitive or operator-loop cases SHOULD declare the embodiment or operator anchor explicitly.CC-C.2.6-3U.LanguageStateAnchoringModeMUST NOT be collapsed intoU.LanguageStateRepresentationFactorBundle.CC-C.2.6-4Mixed-mode declarations SHALL list their component modes explicitly.
Common Anti-Patterns and How to Avoid Them
- Text-only illusion. Treating every cue as document-mediated because it was written down later.
- Representation capture. Using symbolic/distributed labels to hide world-anchoring distinctions.
- Embodiment mystification. Treating bodily or operator-loop cues as beyond explicit publication.
Consequences
The benefit is cleaner reasoning about embodied, operator-facing, trace-based, and model-latent cues. The trade-off is more explicit declaration work and more explicit bridge loss notes when modes shift.
Rationale
The declared language-state chart over U.CharacteristicSpace needs one explicit anchoring basis slot so that A.16.0, A.16.1, B.4.1, and F.9.1 can refer to anchoring regime without redefining it.
SoTA-Echoing
The facet is motivated by embodied cognition, operator-facing interaction practice, active inference, and modern model-probing practice, all of which distinguish cue content from anchoring regime.
Relations
- Builds on:
A.18,C.2.2a,C.2.LS. - Coordinates with:
A.7,A.16.0,A.16,A.16.1,B.4.1,B.5.2.0,C.2.7,F.9.1. - Constrains: cue publication and bridge loss notes.
Worked Examples and Bridge-Loss Cases
Embodied-to-document shift
A bodily felt cue later published as prose usually changes from AM.EmbodiedFelt toward AM.DocumentMediated. That shift is not harmless; it often introduces bridge loss and should be treated as such when cross-context equivalence is claimed.
Model-latent to operator-loop case
A latent probe score may first be AM.ModelLatent, then later feed an operator-facing alert face where the working publication becomes AM.OperatorLoop. A conforming account should keep both anchoring modes visible rather than pretending the later publication wording fully captures the model-side cue.
Mixed-mode publication
A routed alert note may admissibly be AM.Mixed when it combines operator-loop anchoring, trace anchoring, and document mediation. But the mix must be named explicitly rather than used as a catch-all escape.
Authoring and Review Guidance
Author prompt
When declaring anchoring mode, ask:
- what is the primary anchor kind?
- does bodily or operator participation matter directly?
- is the key anchor trace-based, model-internal, or document-based?
- if multiple modes matter, which ones and why?
Review prompt
A reviewer should watch for the common mistake where later prose formatting tricks authors into forgetting the original anchoring mode.
Bridge note
If anchoring changes across publication or translation, F.9 and F.9.1 should often carry explicit loss or stance notes rather than silent equivalence language.
Extension and Migration Notes
Local extension rule
Contexts may add local anchoring modes, but they should do so by extension of the starter family rather than by collapsing the family into a text-vs-world binary.
Migration from metaphorical prose
Statements like "the system wants", "the note suggests", or "the operator-facing publication says" should be repaired by naming the actual anchoring mode and the actual detector/enactor or witness structure.
Boundary reminder
U.LanguageStateAnchoringMode does not decide representation, articulation, closure, or trust by itself. It only names how the episteme is anchored.
Anchoring Publication Package Discipline
Minimal anchoring package
A publishable U.LanguageStateAnchoringMode claim should normally identify:
- the primary anchor kind;
- any directly relevant embodiment, operator, trace, model, or document witness;
- the transformation chain if the current note is not at the original anchoring site;
- any secondary modes that remain load-bearing.
This is especially important when the final wording is prose, because prose often hides the anchoring regime.
Source-versus-face rule
Distinguish the anchoring mode of the source cue from the anchoring mode of the current publication face. A bodily cue later written into a document may still require AM.EmbodiedFelt as source mode and AM.DocumentMediated as publication face.
Mixed-mode decomposition rule
AM.Mixed is admissible only when its component modes are named and the reason for the mixture is operationally real. It must not become a convenience label for an episteme that has not yet been analyzed.
Anchoring Shift and Transport Discipline
Shift declaration rule
When an episteme crosses from one anchoring mode to another, state whether the shift is merely publication-level or whether it changes what can be preserved, compared, or trusted. A move from operator-loop enactment to report prose, for example, often drops timing, bodily load, and enactment friction.
Bridge-loss handoff
If an anchoring shift matters across contexts, F.9 or F.9.1 should govern the loss or stance note. C.2.6 only requires the shift to be noticed and not misrepresented as lossless.
Same-content illusion test
Two cues may be paraphrased into the same sentence while remaining differently anchored. If the anchoring regime differs, the cues are not automatically substitutable.
Review Matrix and Extension Tests
Review matrix
A reviewer should ask:
- what the original anchoring regime was;
- what the current publication regime is;
- whether the transformation chain is explicit;
- whether any bridge loss or stance note is missing;
- whether a declared mixed mode is genuinely decomposed.
Local extension test
A new local anchoring mode is justified only when it answers a distinct anchoring question that the starter family cannot express without distortion.
Cross-facet reminder
Anchoring mode often correlates with representation and articulation changes, but it does not govern them. Reject prose that uses AM.ModelLatent, AM.EmbodiedFelt, or AM.OperatorLoop as shorthand for being vague, early, trustworthy, or closed.
C.2.6:End
U.LanguageStateRepresentationFactorBundle
Type: Definitional (D) Status: Draft Normativity: Normative unless marked informative
Plain-name. Language-state representation-factor bundle.
Problem frame
Published position claims in the declared language-state chart over U.CharacteristicSpace must distinguish representation factors such as locality, sparsity, and symbolicity without pretending they form one master factor.
Problem
Terms such as EncodingBasis collapse several independent choices. That makes comparison brittle and encourages one-factor stories such as distributed = informal or local = precise.
Forces
Solution
U.LanguageStateRepresentationFactorBundle is a factor bundle, not one scalar characteristic. The minimal core starter set is:
U.LocalityDistributionU.SparsityU.Symbolicity
A Context may publish a local alias such as EncodingBasis, but it shall dock back to the underlying factor bundle instead of replacing it.
Minimal factor readings
Non-collapse rules
LanguageStateRepresentationFactorBundle is not:
LanguageStateAnchoringMode;Formality;ArticulationExplicitness;LanguageStateClosureDegree.
A representation may be distributed yet have high trace anchoring; symbolic yet low-articulation; sparse yet low-closure. Those combinations shall remain visible.
Extension rule
Contexts may add extra representation factors only if the extension is published as a factor addition rather than as a new master factor that erases the core factor bundle.
Archetypal Grounding
Tell. A model-state cue can be highly distributed but still trace-anchored; a symbolic note can be low articulation if its semantics are still vague.
Show (System). An operator decision aid may mix sparse alert codes and symbolic method-description text.
Show (Episteme). A research probe can move from distributed activation patterns to sparse symbolic hypotheses without any one-step formality story.
Bias-Annotation
The pattern resists folk theories that try to line up one representation factor with one stage or progression story.
Conformance Checklist
CC-C.2.7-1LanguageStateRepresentationFactorBundleSHALL be published as a factor bundle, not as a hidden scalar.CC-C.2.7-2Local aliases such asEncodingBasisMAY exist only with an explicit docking to the governed factors.CC-C.2.7-3Representation factors MUST NOT silently replaceLanguageStateAnchoringModeorLanguageStateClosureDegree.CC-C.2.7-4New local factors SHALL preserve the factor-bundle discipline.
Common Anti-Patterns and How to Avoid Them
- One-factor myth. Treating distributed/local or symbolic/subsymbolic as the whole story.
- Progression collapse. Equating representation shifts with formalization or closure.
- Alias capture. Letting
EncodingBasisor a similar local alias erase the factor bundle.
Consequences
The benefit is cleaner comparison across schools, substrates, and publication forms. The trade-off is that representation talk becomes more explicit and less slogan-friendly.
Rationale
The factor-bundle design keeps the representation basis-slot family in the declared language-state chart over U.CharacteristicSpace orthogonal to articulation, closure, and anchoring.
SoTA-Echoing
This factorization fits current work on sparse distributed representations, symbolic/neuro-symbolic stacks, and interpretability practice.
Relations
- Builds on:
A.18,C.2.2a,C.2.LS. - Coordinates with:
C.2.6,A.16.0,A.16,A.16.1,B.4.1,B.5.2.0,F.9.1. - Constrains: language-state position publication and bridge loss notes around representation shifts.
Worked Examples and Factor Interaction Notes
Distributed but explicit
A model-side summary may be representation-wise distributed and still highly explicit once published into a stable symbolic wrapper. This case matters because it blocks the folk myth that distributed implies vague.
Symbolic but still low-articulation
A glossary-like note may be fully symbolic while still low in AE because the semantic anchors are not yet stabilized. This blocks the opposite myth: symbolic therefore explicit.
Mixed-stack publication
An operator-facing publication face may combine sparse alert codes, symbolic method-description text, and distributed back-end model summaries. The representation-factor bundle should make that mixture visible instead of compressing it into one label.
Authoring and Review Guidance
Author prompt
To publish a representation-factor bundle, ask separately:
- how local or distributed is the representation?
- how sparse or dense is it?
- how symbolic or subsymbolic is it?
- which additional factor, if any, genuinely matters enough to publish?
Review prompt
A reviewer should reject any attempt to use one factor as if it summarized the rest. The factor bundle exists precisely to block that reduction.
Cross-facet reminder
Reviewers should also watch for silent replacement of LanguageStateAnchoringMode, AE, or CD by representation talk.
Extension and Migration Notes
Local extension rule
Contexts may add extra factors, but each added factor should answer a distinct question rather than duplicating locality, sparsity, or symbolicity under another label.
Migration from alias-heavy prose
Aliases such as EncodingBasis or similar should be unfolded into explicit factor dockings before they are relied upon for routing, comparison, or bridge claims.
Boundary reminder
U.LanguageStateRepresentationFactorBundle describes representational organization only. It does not determine route authority, closure, or anchoring by itself.
Factor-Bundle Publication Discipline
Minimal representation package
A publishable U.LanguageStateRepresentationFactorBundle should normally show the current factor settings for locality/distribution, sparsity/density, and symbolicity/subsymbolicity, together with any declared extra factor. If a factor is intentionally omitted, say so rather than hiding the omission under a compact alias.
No hidden scalar rule
Compact overlays such as "sparse-symbolic" are admissible only when they dock to the underlying factor bundle. No compact label may behave as a hidden master score for routing, bridge comparison, or stage/progression talk.
Alias docking rule
Local aliases such as EncodingBasis are admissible only when their docking to the governed factors is explicit and stable. If an alias compresses several factors, the compression should remain visible.
Factor Interaction and Cross-Facet Reading Rule
Interaction rule
Representation factors may correlate, but they do not determine one another. Highly distributed cues can still be sparse; symbolic publications can still be locally dense; mixed symbolicity can coexist with either strong or weak articulation. Publish the actual factor bundle rather than narrating one factor as if it predicted the rest.
Cross-facet non-substitution
Representation talk must not silently replace AE, CD, or LanguageStateAnchoringMode. A shift from distributed to symbolic publication may change readability while leaving articulation low, closure open, or anchoring heavily operator-bound.
Bridge reminder
If a representation shift matters in transport across contexts, note that the shift may alter what is preserved or salient. The bridge itself remains governed by F.9 and F.9.1.
Review Matrix and Extension Tests
Review matrix
A reviewer should ask:
- are all claimed factors visible in the publication or cited source;
- does any alias hide the factor bundle;
- is one factor being used as if it summarized the whole representation state;
- has representation talk started to replace articulation, closure, or anchoring claims.
Local extension test
An additional factor is justified only if it captures a distinct representational question that cannot be reduced to locality, sparsity, or symbolicity. The extra factor should extend the bundle, not become a rival master factor.
Migration test for legacy terminology
Legacy vocabularies often use "symbolic", "distributed", or "encoding basis" as if one term solved the whole classification problem. A conforming migration unpacks the term into explicit factor dockings and then checks whether any cross-facet claims were smuggled into the old label.
Bundle-comparison reminder
Representation bundles may be compared across contexts only after the compared factors are explicit. If one context uses a compact local alias and another publishes the full factor bundle, require explicit docking before treating the two descriptions as commensurable.
C.2.7:End
Kinds, Intent/Extent, and Typed Reasoning (Kind‑CAL)
One‑line summary. Establishes
U.Kindas the minimal, context‑local intensional carrier of “what a statement is about,” separates intent (KindSignature + its own F) from extent (which instances belong to the kind in a given Context slice), and situates typed reasoning alongside USM Scope (G) and F–G–R without conflation. Details of the core objects and operations live in C.3.1–C.3.5; guard shapes are standardized in C.3.A.
Status. Normative in Part C. Identifier C.3. This pattern lays the architectural invariant and manager‑level guidance. The mechanics are defined by its child patterns.
Readers. Engineering managers, architects, and assurance leads who must reason about typed claims across Contexts without mixing up entityOfConcern (Kinds), applicability (G), and assurance (R).
Depends on.
— A.2.6 USM (Context slices & Scopes): U.ClaimScope = G, U.WorkScope, ∈/∩/SpanUnion/translate, Γ_time policy, Bridges + CL (scope).
— C.2.2 F–G–R: weakest‑link composition; penalties to R for Cross‑context congruence (CL).
— C.2.3 Unified Formality F: F0…F9 as an ordinal Characteristic (expression rigor).
Sub‑patterns (normative unless noted).
— C.3.1 - U.Kind & U.SubkindOf (partial order).
— C.3.2 - KindSignature (intent, with F) & Extension/MemberOf (extent in a slice).
— C.3.3 - KindBridge & CL^k (type‑congruence; penalties route to R).
— C.3.4 - RoleMask (context‑local adaptation without cloning kinds).
— C.3.5 - KindAT (K0…K3, informative facet, not a Characteristic).
— C.3.A - Typed Guard Macros (annex): admit/compose, masks, Cross‑context reuse; AT is forbidden in guards.
Deprecations.
— “Generality ladder” for G; G is Scope only (set‑valued over U.ContextSlice).
— Any “Kind scope” characteristic (Kinds carry intent/extent, not Scope).
— Mark as legacy any uses of ‘validity’ as a Characteristic or ‘operation’ as a Scope‑like Characteristic; redirect to U.ClaimScope / U.WorkScope (A.2.6) for applicability. Editors SHOULD add glossary redirects in Part E.
Editorial note (cut‑over). Content formerly in C.3 that defined guard shapes, decision trees, and macro anti‑patterns now resides in C.3.A. Membership evaluation obligations live in C.3.2 with MemberOf.
Purpose & Rationale
What you get.
- A neutral typed layer: name what a claim quantifies over (Kinds) without binding to any particular “type technology” (OWL, PL types, shapes…).
- A clean split of characteristics: – Scope (G) = where a claim holds (USM, set‑valued over Context slices). – Kind extent = which instances belong to a kind inside a given slice. – F = how strictly content is expressed (C.2.3). – R = how well supported (evidence & congruence penalties).
- Typed reuse across Contexts: a dedicated KindBridge with
CL^k(type‑congruence), so you can predict risk without touching F or G. - Manager‑oriented maps: when to invest in formalization (F), when to expand/narrow Scope (ΔG), when to test across subkinds (R), and what kind of bridge you should expect.
Why it helps. Teams routinely overspend on proofs for instance‑level questions and underspecify scope for class‑level claims. By naming the Kind, you plan ΔF/ΔR correctly and keep G honest. Typed checks also block unsafe compositions (“we were talking about different things”).
Context
Cross‑disciplinary work mixes artifacts that look like “types” but behave differently: ontology classes, schema “shapes,” programming types, BORO super/sub categories, ad‑hoc labels. At the same time, USM made “scope” precise. What was missing was a small, neutral notion of entityOfConcern that (a) does not re‑invent a global “type system,” (b) composes with USM and F–G–R, and (c) lets Contexts keep their idioms—with bridges when crossing boundaries.
Problem
- Scope–type conflation. Authors try to widen G by “abstracting the wording,” yielding claims that sound general but are only supported on a thin slice.
- Silent drift across Contexts. A “vehicle” here is not the same as a “transport unit” there; reuse proceeds without a declared mapping or risk accounting.
- Wasteful planning. Without a signal about the kind‑level, teams either over‑formalize single‑slice decisions or under‑test class‑level claims (no variant coverage along subkinds).
- Unsafe composition. Claims about incompatible “things” get composed because the entityOfConcern was implicit in prose.
Forces
Solution — Architectural Decisions (overview)
C.3‑D1 — U.Kind is intensional and context‑local.
Kinds name what a claim quantifies over. They form a partial order ⊑ (SubkindOf). (See C.3.1.)
C.3‑D2 — Separate intent and extent.
— KindSignature(k): the intensional content (predicates/invariants/Standards). It carries its own F (C.2.3).
— Extension(k, slice)/MemberOf: which instances belong to k in a given U.ContextSlice. (See C.3.2.)
C.3‑D3 — Kinds do not carry Scope. Scope lives with claims/capabilities (USM): a set of Context slices where the statement holds. Kinds carry intent/extent only. (USM A.2.6 + C.3.2.)
C.3‑D4 — Typed reuse across Contexts is explicit.
Use a KindBridge with CL^k (type‑congruence) and loss notes. Its effect is only via R penalties; F/G remain unchanged. (See C.3.3.)
C.3‑D5 — Local adaptation without cloning. Use a RoleMask to bind a kind to Context‑specific constraints/aliases; promote to a subkind if the mask becomes stable and widely reused. (See C.3.4.)
C.3‑D6 — An informative “abstraction tier” exists for Kinds (AT: K0…K3). A facet (not a Characteristic) that helps plan ΔF/ΔR and forecast bridge style; AT never appears in guards. (See C.3.5.)
C.3‑D7 — Guard shapes are standardized and fail‑closed.
Typed compatibility first (same‑Context ⊑ or KindBridge), then Scope coverage (USM), then R penalties and freshness. (See C.3.A.)
Manager’s picture — one claim-scope object and one kind-extent relation (keep them separate). – Claim scope (USM, G): Where the claim holds → set of Context slices; composed by membership / intersection / SpanUnion across independent lines / translate. – Kind extent relation: Which instances in a given slice belong to the kind →
MemberOf(e, k, slice). Never “widen G” by abstract wording; widen only by ΔG with support.
Core Concepts (informative summary; authoritative norms live in C.3.1–C.3.5)
This section fixes the Standard of terms used in C.3 and points to the sub‑patterns for complete mechanics. All “SHALL/MUST” statements here are normative.
Editorial note. This section is informative. It restates manager-level takeaways and points to the canonical, normative rules in C.3.1-C.3.5. Where this section summarizes a rule, treat the cited sub-pattern and rule ID as the governing source.
U.Kind & U.SubkindOf (⊑)
Definition. U.Kind is a context-local kind record naming a “kind of thing” that claims may quantify over.
Order. U.SubkindOf (⊑) is a partial order (reflexive, transitive, antisymmetric). We write k₁ ⊑ k₂.
Summary of norms (authoritative text: C.3.1 K‑01–K‑02).
— Contexts treat ⊑ as a partial order and document any computed meets/joins if they provide them.
— Kinds do not carry Scope; Scope remains on claims/capabilities (USM).
Full treatment: C.3.1 (definitions, invariants, examples).
KindSignature (intent) & F
Definition. KindSignature(k) is the intent: predicates/invariants/Standards that define the kind in the Context. Its expression rigor has an explicit U.Formality (C.2.3).
Summary of norms (authoritative text: C.3.2 K‑03–K‑04).
— KindSignature(k) declares its F (C.2.3). Claim‑level F does not auto‑inherit; weakest‑link applies on the claim’s own support paths.
— If a signature change alters membership, treat it as a content change (Contexts may version kinds).
Full treatment: C.3.2 (signature/intent with F; relation to claims).
Extension & MemberOf (extent in a slice)
Definition. Extension(k, slice) ⊆ EntitySet(slice) = set of instances that belong to k in the given U.ContextSlice. MemberOf(e, k, slice) is the membership predicate: e ∈ Extension(k, slice).
Summary of norms (authoritative text: C.3.2 K‑05–K‑08).
— Membership is deterministic for a fixed (k, slice) (no hidden “latest”).
— If k₁ ⊑ k₂, then Extension(k₁,slice) ⊆ Extension(k₂,slice) for all slices.
— Definedness may be bounded; outside it, guards fail closed.
— Keep Scope (G) and MemberOf as distinct guard predicates.
Full treatment: C.3.2 (extent semantics, examples, authoring hints).
KindBridge & CL^k (type‑congruence)
Summary of norms (authoritative text: C.3.3 KB‑01–KB‑12).
— A KindBridge states Contexts/versions, kind mapping/rules, preserved order links, CL^k anchors, loss notes, and definedness.
— No inversions of preserved subkind links; collapses must be declared.
— When classification depends on a KindBridge, apply a monotone penalty Ψ(CL^k) to R (scope‑bridge Φ(CL) applies separately). F and G remain unchanged.
— Chaining uses weakest‑link on CL^k.
Full treatment: C.3.3 (bridge shape, anchors, examples).
RoleMask (adaptation without cloning)
Definition. U.RoleMask(kind, Context) is a named binding that carries constraints (optional narrowing of membership), vocabulary/notation aliases, and intended use for local procedures—without creating a new Kind.
Summary of norms (authoritative text: C.3.4 RM‑01–RM‑08).
— Masks are registered/versioned; constraints are observable/deterministic at guard time.
— Do not treat masks as kind synonyms; promote frequently reused constraint masks to explicit subkinds (⊑).
Full treatment: C.3.4 (mask taxonomy, guard discipline, promotion rule).
KindAT (K0…K3) — informative facet
Status. A facet attached to U.Kind, not a Characteristic: no algebra, never used in guards or composition.
Anchors (intentional view). K0 Instance; K1 Behavioral pattern; K2 Formal kind/class; K3 Up‑to‑Iso.
Use. Helps plan ΔF/ΔR and forecast bridge style (e.g., K3↔K3 suggests up‑to‑iso mapping). Do not conflate AT with G or R.
Full treatment: C.3.5 (manager heuristics, anti‑misuse).
Quick examples (two‑characteristic awareness)
E‑Sketch 1 — Policy over Vehicle.
Claim: “For all x ∈ Vehicle: brakeDistance(x) ≤ 50 m (dry), ≤ 40 m (wet).”
– entityOfConcern: Vehicle (Kind, typically K2) — what we quantify over.
– Scope (G): {surface∈{dry,wet}, speed≤50, rig=v3, Γ_time=rolling 180d} — where the claim holds.
– Extent in slice: which instances the lab currently classifies as Vehicle (via MemberOf).
Typed checks happen before Scope intersection; G is not widened by “abstract wording.”
E‑Sketch 2 — API rule over AuthenticatedRequest.
Producer A emits Request; consumer B expects AuthenticatedRequest.
– If Request ⊑ AuthenticatedRequest does not hold, add an adapter or adopt a subkind; do not force fit by widening G.
– Scope remains independent (API version, Γ_time policy); evidence/freshness sits in R.
How to use typed reasoning
C.3:7.1 How typed reasoning plugs into F–G–R & USM
The basic shape of a typed claim (manager view)
A typed claim has two independent parts:
-
entityOfConcern (Kind). Which things the statement talks about. “For every item of kind k in the target context (the selected TargetSlice) …”. — The definition of kind k lives in KindSignature(k) (with its F, C.3.2). — Which items count as “k” is evaluated in the TargetSlice (C.3.2) by a deterministic membership check.
-
Applicability (Scope, G). Where the statement holds.
U.ClaimScope(Claim)is the collection of contexts where the claim is valid (USM A.2.6). Guards test: “Scope covers the TargetSlice”.
Discipline. The guard first checks typed compatibility (in the same Context: “is‑a / subkind‑of”; across Contexts: a KindBridge, C.3.3), then Scope coverage (USM), then R freshness and any bridge congruence penalties. See C.3.A Guard_TypedClaim.
Composition of typed claims
Rule C‑T‑1 (typed pre‑check). To compose a producer claim with a consumer claim, where the producer quantifies over kind k (source) and the consumer expects kind k (expected):
-
same Context: require “is‑a / subkind‑of” to hold (the source kind is a subkind of the expected kind) (C.3.1).
-
Cross‑context: require a KindBridge that maps the source kind to a local kind that is a subkind of the expected kind in the target Context (C.3.3). If neither holds, the composition is unsafe; introduce a subkind, add an adapter (or a RoleMask), or decline.
-
Role‑aware option (same Context): if the consumer expects a RoleMask over the expected kind, you may satisfy the mask’s explicit constraints (C.3.4) instead of changing kinds, provided those constraints are observable at gate time.
Rule C‑T‑2 (scope after type). After typed compatibility is satisfied, compute Scope as in USM:
- Serial path: take the intersection of the contributors’ claim scopes.
- Parallel independent lines: use SpanUnion of the serial scopes (only if independence is justified).
Rule C‑T‑3 (no type‑by‑scope). A kind mismatch MUST NOT be “fixed” by widening G. Changes in entityOfConcern require subkind introduction, signature edits, or a KindBridge—not a scope change.
Manager hint. First confirm the port shape matches (kinds line up), then check the operating area (scope), and finally look at confidence (evidence freshness plus any bridge congruence penalties).
F–G–R with typed claims (what changes, what doesn’t)
-
F (Formality). – Claim‑level F follows C.2.3 (weakest‑link along the claim’s support paths). – KindSignature F is declared on the kind (C.3.2) and influences claims only if the claim essentially depends on those predicates (weakest‑link again). – Raising F can reveal hidden assumptions (which may trigger ΔG in the claim), but does not change G by itself.
-
G (Scope). – Always set‑valued over Context slices (USM A.2.6). – Typed reasoning does not alter G’s algebra (∈/∩/SpanUnion/translate). – Never infer Scope from “how general the wording sounds.”
-
R (Reliability). – Evidence freshness/decay (validation windows) remains separate from Scope coverage. – Cross‑context penalties split cleanly: a scope‑bridge penalty (USM) and a kind‑bridge penalty (C.3.3). Both reduce R only; neither changes F or G.
Manager rule of thumb. Start with the reliability from your support; then apply the scope‑bridge penalty; then apply the kind‑bridge penalty. Each step can only reduce reliability. You never add or average F/G: you compose scope per USM rules and apply weakest‑link for F/R along support paths.
ESG gating with typed claims
- Gate on F, if your Context requires rigor before use (e.g.,
U.Formality(Claim) ≥ F4). - Gate on Scope coverage (USM) and an explicit time selector (Γ_time) policy.
- Gate on R freshness and minimum congruence for bridges (e.g.,
CL ≥ 2,CL^k ≥ 2). - Do not gate on AT (C.3.5); it is an informative facet only.
- Use C.3.A guard macros to keep guards short and auditable.
How typed reasoning plugs into the CAL chain (Lang‑CHR → Role‑CAL)
Intent. Show a clear, end‑to‑end path a manager can follow to take a typed claim from words to safe reuse across Contexts—without any tool or data‑governance assumptions. Each stage says what it supplies, what it needs, and what it hands off to the next stage.
Lang‑CHR — stable words first
What it supplies. A disciplined vocabulary and controlled phrasing so that terms like Vehicle, AuthenticatedRequest, AdultPatient have one meaning in the Context.
What it requires. Authors use controlled narrative (C.2.3 F3) at minimum: single‑meaning terms, explicit “shall / if / then”, and no drifting synonyms.
Hand‑off. A small, curated lexicon entry for each candidate Kind‑word; these become U.Kind names in the next step.
Manager hint. If two teams cannot agree on the noun, you are not ready to type the claim. Resolve the noun in Lang‑CHR before introducing a Kind.
Kind‑CAL (this Part) — name the entityOfConcern
What it supplies.
• U.Kind objects for those nouns; a partial order ⊑ (subkind‑of).
• KindSignature(k) (intent), with declared F.
• Extension(k, slice) and MemberOf(e,k,slice) (extent).
• (Optional) AT (K0…K3) as an informative facet.
What it requires. • Deterministic membership (no “latest” defaults) and a clear rule for where membership is defined in each context. • No “Kind scope”: Scope remains with claims/capabilities (USM).
Manager hint. Use the kind’s AT tag only as a planning signal (where to invest rigor and tests). AT never gates decisions and never widens scope.
Hand‑off. Typed quantifier sites for claims: “∀ x ∈ Extension(k, slice) …”, plus a visible ⊑ lattice for compatibility checks down the line. Typed claim sites written in Plain language: “for every item of kind k in the target context …”, plus a visible subkind‑of lattice for compatibility checks down the line.
Manager hint. Decide early whether your Kind is K0 (instance‑ish) or K2 (formal class). It sets your ΔF/ΔR budget expectations.
Structure‑CAL — give Kinds usable shape
What it supplies. Structural building blocks on Kinds: • combinations (“and”), • alternatives (“either/or”), • records (named fields), • functions (inputs to outputs), plus relations like has‑attribute and part‑kind, and the minimal invariants those structures must respect.
What it requires. • Do not hide Scope inside structure. • Put structural rules into the KindSignature as checkable statements (ideally F4+).
Hand‑off. Typed ports and shapes of claims/specifications (“this policy expects PassengerCar × ControllerConfig”), making compatibility checks crisp before any Scope math.
Manager hint. If two claims expect different shapes (for example, one needs “Vehicle with ABS”, the other just “Vehicle”), plan a subkind or an adapter. Do not “solve” it by rewording the claim.
Note (informative). If a Context declares structural constructors on kinds (e.g., product/sum/record/function), editors SHOULD document the corresponding Extension inclusion laws for those constructors. Keep Scope in USM; do not hide it in structure.
Compose‑CAL — compose with typed pre‑checks
What it supplies. The order of checks you must follow for safe composition:
- Typed compatibility: in the same Context, the producer’s kind is a subkind of the consumer’s kind; across Contexts, a KindBridge maps the producer’s kind to a local kind that fits, with an acceptable kind‑bridge congruence level (C.3.3).
- Scope checks (USM): along dependency paths, take the intersection of scopes; use SpanUnion only when support lines are truly independent.
- Assurance wiring: apply the scope‑bridge penalty and the kind‑bridge penalty to R; check evidence freshness separately.
What it requires. Independence justification for SpanUnion; no “type‑by‑scope” fixes.
Hand‑off. A typed, scope‑checked composition that survives audit because each risk is accounted for in R.
Manager hint. Run the typed pre‑check first. It is the cheapest failure to catch and prevents “scope gymnastics” that mask a type mismatch.
CT2R‑LOG — speak the logic, keep the math honest
What it supplies. • A clear logical reading of your typed claim: “for every item of kind K, condition φ holds” (or “there exists an item …”). • Rules for refinement and substitution that respect the subkind‑of relation. • When appropriate (K3), reasoning that treats structures as equivalent up to isomorphism (useful where exact identity is the wrong notion).
What it requires. • Pick a logic that matches the Formality you declare (e.g., machine‑checked logic for higher F). • When the logic travels across Contexts, use a KindBridge to keep meaning aligned; any mismatch is reflected as a kind‑bridge penalty in R.
Hand‑off. Proof obligations or reasoning templates that are consistent with your Kind/Structure setup and do not alter G. Shall‑note CT2R‑1. Transferring typed formulas that depend on MemberOf across Contexts uses a KindBridge; any mismatch is accounted as Ψ(CL^k) in R. F and G remain unchanged. For up‑to‑iso situations, see C.3.5 (AT) for when K3 is appropriate.
Manager hint. If your proof keeps failing when you move between Contexts, add a bridge at the Kind level; do not try to “fix” it by changing scope.
Role‑CAL — adapt without cloning
What it supplies. RoleMask(kind, Context): a named, registered adaptation (extra constraints or local aliases, with optional narrowing) that reuses the same kind instead of creating a new one.
What it requires. • Constraints must be testable at gate time and give deterministic answers. • If a constraint mask is reused often, promote it to a subkind.
Hand‑off. Context‑specific views that keep identity intact and make typed guards practical (“use PaymentAccount@PCI mask in these steps”).
Manager hint. If the same mask appears in several guards, promote it to a subkind. This reduces future bridge and audit effort.
Mini end‑to‑end example (manager‑oriented)
Scenario. A risk gate for API requests must be reused by another program across Contexts.
Lang‑CHR. Settle on Request, AuthenticatedRequest, RiskScore, BudgetSlack; write them in controlled phrases (F3).
Kind‑CAL.
• Define Kind Request (K2) and a subkind AuthenticatedRequest ⊑ Request; publish a KindBridge for the PCI taxonomy with kind‑bridge congruence level 2 (loss note: token class is collapsed).
• Membership MemberOf(e, AuthenticatedRequest, slice) is deterministic under API v2.3 and Γ_time policy.
Structure‑CAL.
• AuthenticatedRequest is a record kind with fields (headers, tokenProof, body); invariants relate tokenProof to headers.
Compose‑CAL.
• Policy P says in Plain terms: “for every AuthenticatedRequest in the target context, deny the call when riskScore is at or above the set risk threshold and budgetSlack is at or below the set budget limit.”
• Another service S expects PCIRequest. Typed pre‑check: does AuthenticatedRequest ⊑ PCIRequest? No.
• Remedy: adapter A proves AuthenticatedRequest → PCIRequest in this Context; if reusing across Contexts, publish a KindBridge for the PCI taxonomy with CL^k=2 (loss: token class collapsed).
CT2R‑LOG. • State P in a state P in a proof‑checked logic (where appropriate for F7+), so that changes to token rules break proofs. Proofs rely on the AuthenticatedRequest definition, not on the consumer’s scope.
Role‑CAL.
• Register a RoleMask over PCIRequest for the consuming team; guards must be able to test the mask’s constraints at gate time.
Outcome. • Typed guard approves only when: (i) the type pre‑check passes (same‑Context subkind‑of or a KindBridge with an acceptable congruence level), (ii) Scope covers the target context (API v2.3, explicit time selector), and (iii) R reflects the scope‑bridge and kind‑bridge penalties and evidence is fresh. • No one widened Scope to hide a type mismatch; the adapter + bridge made the semantics explicit and auditable.
Takeaway. If you keep these six hand‑offs in view—words → kinds → structure → composition → logic → roles—you get predictable reviews, clean risk accounting, and reusable claims that travel across Contexts without silent meaning drift.
Compliance & Regulatory Alignment — profile
Treat regulatory categories as Kinds, carry their intent in KindSignature with declared F, move them across Contexts with a KindBridge (type‑congruence CL^k + loss notes), and express applicability as Claim scope over U.ContextSlice (with explicit Γ_time). Any Cross‑context uncertainty is routed to R via Ψ(CL^k) (kind) and Φ(CL) (scope); F and G remain unchanged.
Authoritative obligations and guard macros (C‑REG‑1…8, Guard_RegAdopt / Guard_RegChange / Guard_RegXContextUse) and worked scenarios live in C.3.A, Annex A (Regulatory adoption profile).
How typed reasoning plugs into Assurance Lanes (VA/LA/TA) & Evidence design
Intent (manager’s view). Typed reasoning turns “prove/test/qualify” into a repeatable plan by making what the rule talks about explicit (named Kinds, their subkinds, optional RoleMasks) and keeping Scope (G) over U.ContextSlice separate from membership inside the slice. Cross‑context uncertainty (Scope Bridge CL, KindBridge CL^k) always routes to R as penalties Φ/Ψ; it never changes F or G.
Evidence matrix (sketch).
Tip. For formal kinds and “up‑to‑iso” kinds (AT K2/K3), expect more rows (variants). For instance‑like kinds (AT K0), expect fewer rows and tighter columns (narrow slices, stricter freshness).
Authoritative evidence obligations and guard macros (planning/attachment, VA/LA/TA duties, anti‑patterns) are in C.3.A, Annex B.
How typed reasoning plugs into ESG and Method–Work gating
Intent. Make state changes and work admissions deterministic, auditable, and safe by separating (1) typed compatibility (what the statement or capability is about) from (2) scope coverage (where it holds or can run). Any Cross‑context uncertainty is routed to R (reliability) only—never to F (form) or G (scope).
Scope & fit
This subsection defines normative guard obligations for:
- ESG (Episteme State Graph) transitions whose assertions quantify over kinds, and
- Method–Work admissions where a capability expects inputs and outputs of specified kinds.
It reuses:
- USM (A.2.6):
U.ClaimScope(G) andU.WorkScopecoverage +Γ_time, - Kind‑CAL core (C.3.1–C.3.2):
U.Kind,MemberOf(e,k,slice),⊑, - KindBridge (C.3.3) with
CL^kand loss notes, - Scope Bridge (Part B) with CL and loss notes,
- RoleMask (C.3.4) when local adaptations of a kind are used,
- Formality F (C.2.3) when transitions gate on rigor,
- Assurance R (C.2.2) for evidence freshness and penalties Φ/Ψ.
Guard macros. The normative guard shapes for ESG and Method–Work (Guard_TypedClaim, Guard_TypedJoin, Guard_MaskedUse, Guard_XContext_Typed) are specified in Annex C.3.A. Use those shapes; the present section is a manager‑level overview only.
Inputs & roles (at guard time)
-
TargetSlice — the specific context you are deciding for: Context, versioned Standards, environment parameters, and an explicit time selector (Γ_time).
-
Typed carriers
- ESG: the Claim quantifies over one or more Kinds (e.g., “for all vehicles in the target context …”).
- Method–Work: the Capability declares expected input and output kinds (and possibly RoleMasks).
-
Thresholds (context‑local policy):
- Minimum F level for the Claim (if the Context gates on rigor),
- Minimum congruence for scope bridges,
- Minimum type‑congruence for KindBridges,
- Evidence freshness windows (R‑lane).
-
Evidence bundle (if the transition implies trust): references, dates, windows.
Manager’s 7‑step checklist (operational)
- Name the slice. Write the full
TargetSlice/JobSlicetuple includingΓ_time. - Check coverage. Claim/Work scope covers the slice (USM).
- Check typed definedness. A deterministic membership check is available in this context for every kind you use (and any masks are registered).
- Check typed compatibility. same Context:
⊑(or mask constraints met). Cross‑context: KindBridge withCL^k ≥ c. - Bridge scope if needed. Scope Bridge with CL ≥ c for Cross‑context scope.
- Apply penalties to R. Apply the scope‑bridge penalty and the kind‑bridge penalty; then check evidence freshness windows.
- (If gated) Check F. Enforce
Formality ≥ F_kfor the transition.
Remember: F and G never change because of bridges; only R is penalized. AT (K0…K3) is informative and not used in guards.
Cross‑references
- USM / A.2.6: Scope coverage,
Γ_time, serial ∩, SpanUnion, Bridge+CL. - Kind‑CAL / C.3.1–C.3.4:
U.Kind,⊑,MemberOf, RoleMask, KindBridge +CL^k. - Formality / C.2.3:
U.Formalitythresholds (when ESG gates on rigor). - Assurance / C.2.2: Freshness windows; Φ(CL) and Ψ(
CL^k) penalties to R (weakest‑link on paths).
This subsection is normative for guards in ESG and Method–Work that use kinds.
Cross‑context typed reuse & assurance accounting
The two‑bridge rule (mandatory)
When any part of the use crosses Contexts:
- Scope Bridge (USM/Part B) with CL → penalty Φ(CL) to R.
- KindBridge (C.3.3) with
CL^k→ penalty Ψ(CL^k) to R.
Both bridges carry loss notes; neither changes F or G. See C.3.A Guard_XContext_Typed.
Narrowing after mapping (best practice)
If a bridge’s loss notes indicate material mismatch (dropped invariants, collapsed subkinds):
- Narrow the mapped Scope to areas where those losses are benign.
- Or introduce an adapter (plus evidence) that restores the needed properties in the target Context.
- Document the decision; the penalties still land in R.
Typical Cross‑context patterns (manager’s catalog)
-
Name‑level overlap only (low
CL^k). Expect significant Ψ penalty. Limit quantification, add local checks, or refuse reuse until the kind mapping is improved. -
Up‑to‑iso mapping (high
CL^k). Often seen for K3 kinds. Ψ penalty is small; treat as “shape‑preserving” transfer. Still apply the appropriate Φ(CL) for Scope. -
Mask‑to‑subkind evolution. If receivers repeatedly use the same RoleMask to make a transfer safe, promote it to an explicit subkind and update the bridge to preserve that link.
Decision pattern (fast path)
- Typed pre‑check:
k_A ⊑ k_B(same Context) orKindBridge(k_A → k′_B)with acceptableCL^k. - Scope coverage:
translate(Scope_A)coversTargetSlice_B. - Apply penalties: Φ(CL_scope) and Ψ(
CL^k) to R. - Freshness: windows/decay for all bound evidence.
- Publish: a short “Bridge and Loss Notes” box; include any narrowing or adapters used.
Authoring guidance (engineers‑managers)
When to mint a U.Kind
Create a Kind when:
- multiple claims refer to the same “entityOfConcern” using unstable labels;
- you need subkinds (refinement) or repeated RoleMasks;
- different Contexts must map this “entityOfConcern” via bridges;
- you need to quantify over a population (and plan variant coverage) instead of over a single exemplar.
Avoid creating a Kind for one‑off instance references—prefer a clear K0 facet or just a literal exemplar in the claim.
Writing a KindSignature (and picking F)
- Start with a concise intent: the invariants/constraints that make membership meaningful.
- Aim for F4 (predicate‑like) if the kind is intended for reuse; rise to F7+ only where proof‑grade is justified.
- Use observable terms (no “latest”); if a Standard matters, name its version.
- If defining a Kind reveals systematic narrowings in use, introduce explicit subkinds (
⊑) rather than accumulating opaque masks.
Example (sketch).
Kind Vehicle— intent: “has VIN; has brake system; has propulsion {ICE, EV, Hybrid}; …” (F4 predicates). Subkind:PassengerCar ⊑ Vehicle. RoleMask:Vehicle@ABSRequiredfor processes that demand ABS (deterministic constraints; candidates for promotion to subkind if widely reused).
Setting the AT facet (K0…K3)
Use AT to aim effort, not to gate:
- K0: instance/cohort — focus R on the TargetSlice; don’t over‑formalize.
- K1: behavioral pattern — clarify Standards; plan ΔF (F3→F4).
- K2: formal class — invest in F4–F7; plan variant coverage across subkinds in R.
- K3: up‑to‑iso — expect high‑quality bridges; consider F7–F9 for critical invariants.
Never treat AT as “wider/narrower” G.
Writing a typed claim (with USM blocks)
Skeleton.
- Kinds used:
Vehicle(K2), subkindsPassengerCar. - Claim scope (G):
surface∈{dry,wet}; speed≤50; rig=v3; Γ_time=rolling 180d. - Statement:
∀ x ∈ Extension(Vehicle, TargetSlice) … - Guards: use C.3.A Guard_TypedClaim; if Cross‑context, add Guard_XContext_Typed (two‑bridge rule).
Tip. Keep Scope, MemberOf definedness, F thresholds, and freshness as separate guard predicates—the auditor should be able to tick each box independently.
Minimal “Kind card” contents (Context catalog)
- Name and intent summary (KindSignature snippet + F).
⊑links (parents/children).- Examples of
MemberOf@slice(what membership looks like in practice). - Known RoleMasks (type, constraints, determinism).
- Known KindBridges (source Contexts, target Contexts,
CL^k, loss notes, definedness). - (Optional) AT facet with one‑line rationale.
10 - Review & integration guidance
Reviewer’s 8‑point checklist
- Named entityOfConcern. Does the claim state what it quantifies over (
U.Kind)? - Scope explicit. Is G declared (no “domain” placeholders, no implicit “latest”)?
- Typed compatibility. For compositions, do we have
⊑(same Context) or a KindBridge? - RoleMasks. If used, are they registered, deterministic, and not masquerading as kinds?
- Two‑bridge rule. For Cross‑context use, do we have both Scope Bridge (CL) and KindBridge (
CL^k)? - Penalties. Are Φ(CL) and Ψ(
CL^k) applied to R, not smuggled into F/G? - Freshness. Are validation/monitoring windows separate from Scope coverage?
- Evidence fit. For class‑level claims, does the test plan cover subkinds/variants?
Integrator’s composition playbook (typed first, then scope)
- Step 1: Check
k_A ⊑ k_B(or KindBridge). - Step 2: Compute Scope_serial =
Scope(A) ∩ Scope(B)(USM). - Step 3: If parallel supports exist, SpanUnion them (only where independent).
- Step 4: Apply Φ/Ψ penalties to R; enforce freshness.
- Step 5: If a mask is repeatedly required, consider promoting it to a subkind.
Assurance lead: wiring penalties and windows
- Identify channels used: Scope bridge? KindBridge?
- Apply Φ(CL) and Ψ(
CL^k) to R (monotone; higher congruence ⇒ smaller penalty). - Verify freshness windows for all bound evidence (independent of bridges).
- Publish a one‑box summary: bridges, levels, loss notes, any narrowing/adapters, net impact on R.
Red flags (stop‑the‑line)
- “We widened G because we reworded the type.” → Reject; redo as subkind/bridge or revise Scope honestly.
- “Mask equals kind.” → Refactor; register mask properly or promote to subkind.
- “Cross‑context without KindBridge.” → Block; demand mapping and
CL^k. - “No Γ_time.” → Block; add explicit time policy (point/window/rolling).
Worked examples (end‑to‑end)
Each example shows the typed pre‑check, Scope composition, penalties to R, and the managerial decision. Full guard clauses for these scenarios are in Annex C.3.A.
Cyber‑physical braking policy across labs and plants
Claim (Lab Context).
“∀ x ∈ Vehicle: brakingDistance(x) ≤ 50 m (dry), ≤ 40 m (wet).”
Kinds. Vehicle (K2, KindSignature F4); subkind PassengerCar ⊑ Vehicle.
Scope (Lab). {surface∈{dry,wet}, speed≤50, rig=v3, Γ_time=rolling 180d}.
Reuse at Plant B.
– KindBridge: Vehicle ↦ TransportUnit with CL^k=2 (loss: EV subkind collapsed).
– Scope Bridge: Lab → PlantB with CL=2 (rig bias ±2 %).
– Narrowing: loss notes indicate wet‑surface bias; Plant B narrows mapped Scope to temp/adhesion ranges with acceptable bias.
Decision. Typed pre‑check: OK via KindBridge. Scope coverage after translate/narrow: OK. Penalties: apply Φ(2) and Ψ(2) to R; freshness windows checked. Outcome: Adopt with reduced R; action item: qualify rig v4 to raise CL in the future.
API decision rule with adapter and subkind promotion
Consumer claim.
“∀ x ∈ AuthenticatedRequest: deny if riskScore(x) ≥ θ ∧ budgetSlack ≤ β.”
Producer reality.
Service A emits Request (no auth guarantee).
Option A: A proves it emits AuthenticatedRequest (introduce subkind or strengthen Standard).
Option B: Insert adapter that filters/annotates Request → AuthenticatedRequest.
Typed check.
Before: no Request ⊑ AuthenticatedRequest. After Option B: adapter supplies the guarantee; repeated use leads to promoting mask to subkind.
Scope. API v2.3; Γ_time = rolling 30 d. R. No Cross‑context reuse; no Φ/Ψ. Evidence: adapter correctness on the TargetSlice.
Outcome. Adopt via Option B; open task: generalize producer to subkind and remove adapter later.
Clinical dosage rule across jurisdictions (bridge + mask)
Claim (Hospital X).
“∀ x ∈ AdultPatient: dosage ≤ D per kg for drug M.”
Kind. AdultPatient (K2, F4).
Mask. AdultPatient@ClinicMask narrows to the clinic’s cohort (deterministic DOB policy).
Reuse in Jurisdiction Y.
– KindBridge: AdultPatient ↦ AdultPerson_Y, CL^k=1 (18 vs 21 years boundary).
– Scope Bridge: coding systems differ (CL depends on mapping quality).
– Narrowing: restrict Scope to datasets where DOB granularity supports boundary reconciliation.
Decision.
Typed pre‑check via KindBridge: OK. Scope coverage after translate/narrow: OK.
Penalties: Φ(CL_scope) and Ψ(1) applied to R.
Outcome: Adopt with strong R penalty; plan: negotiate a harmonized boundary to raise CL^k.
ML fairness constraint with typed quantification
Claim (Product Context).
“∀ x ∈ EligiblePerson: TPR difference ≤ δ across groups G.”
Kind. EligiblePerson transitions from K1→K2 as attributes and cohorts are formalized (KindSignature F4).
Scope. {pipeline=P, features=F, Γ_time=rolling 180 d}.
Cross‑context use.
Model team Context has Resident with different feature basis.
– KindBridge: EligiblePerson ↦ Resident with CL^k=1 (feature loss).
– Scope Bridge: pipeline P → P′, CL=2.
Decision. Typed pre‑check OK via bridges; mapped Scope covers the subset where features align. Apply Φ(2) and Ψ(1) to R; restrict groups to mapped subset; require monitoring freshness. Outcome: Adopt with reduced R and a mitigation note; action items: improve feature mapping and raise KindSignature F.
Anti‑patterns & how to fix them
Use this section as a “red flags” sheet in reviews. Each item links to a concrete remedy that preserves F–G–R & USM discipline (F/G/R separation, USM algebra, typed pre‑checks).
Governance & conformance pull‑ups
Contexts adopt Kind‑CAL by meeting the Context‑level obligations below. They summarize, not duplicate, the formal requirements in C.3.1–C.3.5 and C.3.A. Use this as an adoption checklist.
Context‑level obligations (must‑haves)
-
Kinds & order. Maintain a Context catalog of
U.Kindwith an explicit partial order⊑. – Conformance: C.3.1 (K‑01/K‑02). -
Kind signatures (intent). For each Kind, publish a KindSignature with declared F (C.2.3). – Conformance: C.3.2 (K‑03/K‑04).
-
Deterministic membership. Ensure
MemberOf(e,k,slice)is deterministic; declare any definedness domain. – Conformance: C.3.2 (K‑05/K‑07). -
Typed guards. When a claim quantifies over kinds, guards SHALL use the typed guard macros (or equivalents) from C.3.A; Scope coverage and typed checks are separate predicates.
-
Role masks. If a local projection is needed, register a RoleMask (type: constraint/vocabulary/composite); avoid cloning kinds. – Conformance: C.3.4 (RM‑01…RM‑06).
-
Two‑bridge rule for Cross‑context use. – Scope Bridge (Part B) with CL → Φ(CL) to R. – KindBridge (C.3.3) with
CL^k→ Ψ(CL^k) to R. – Conformance: C.3.3 (KB‑01…KB‑10). -
Decision records. For each typed state change, record: TargetSlice tuple, typed compatibility outcome (
⊑or KindBridge), Scope coverage, applied Φ/Ψ penalties to R, and freshness checks.
ESG / Method‑Work template inserts (normative snippets)
- Kinds used: list
U.Kindand any expected subkinds or RoleMasks. - Claim scope (G): explicit predicates over
U.ContextSliceinc. Γ_time. - Typed guard lines:
– same Context:
k_A ⊑ k_Bchecked. – Cross Context:KindBridge(k_A → k′_B),CL^k ≥ c_kchecked. - Scope bridge lines:
Bridge(Context_A → Context_B),CL ≥ c_schecked. - Assurance lines:
Φ(CL),Ψ(CL^k)applied to R; freshness windows hold.
Audits & levels of adoption (informative)
- USM‑Typed‑Ready. Catalog exists;
⊑declared; guard macros installed. - USM‑Typed‑Guarded. All typed claims use C.3.A guard shapes; Γ_time explicit; two‑bridge rule enforced.
- USM‑Typed‑Auditable. Decision records capture TargetSlice, typed checks, bridges, penalties, freshness.
- USM‑Typed‑Composed. Compositions use typed pre‑check before Scope algebra; independence justified for SpanUnion.
Migration & editorial impact
Apply these edits incrementally; you do not need to stop other work. The aim is to eliminate synonym drift, restore F/G/R separation, and make typed reasoning routine.
Inventory & refactor (steps)
- Inventory claims that implicitly talk about “things” (vehicles, requests, accounts, cohorts…).
- Name kinds for recurring “entityOfConcern”; start at K1; promote to K2 as invariants stabilize.
- Extract KindSignature (aim F4); declare F.
- Refactor claims to typed quantification:
∀ x ∈ Extension(k, slice) …plus Scope (G) predicates. - Publish bridges where reuse is Cross‑context: Scope Bridge (CL) and KindBridge (
CL^k) with loss notes; wire penalties Φ/Ψ to R. - Normalize masks: register RoleMasks; if reused, promote to subkinds (
⊑).
Edits to other parts (normative redirects, no new math)
-
A.2.6 (USM). – Add “no Scope on kinds” note. – In typed examples, show
MemberOfdefinedness + Scope coverage. – Two‑bridge rule for Cross‑context typed reuse. -
C.2.2 (F–G–R). – Replace any “generality/abstraction” wording with Claim scope (G). – Before scope composition, require typed pre‑check (
⊑or KindBridge). – Distinguish penalties: Φ(CL) vs Ψ(CL^k) → both to R. -
C.2.3 (F). – Add note: KindSignature has its own F; claim‑level F remains by weakest‑link.
-
Part B (Bridges). – Introduce KindBridge with
CL^k, monotone order preservation, loss notes; determinism. – Chaining uses min of levels (weakest‑link) for both CL (Scope bridges) andCL^k(KindBridges). -
Role‑CAL. – Add RoleMask for kinds; determinism; promotion rule to subkind when reused.
-
Compose‑CAL. – Add typed pre‑check before Scope algebra; forbid “type‑by‑scope”.
-
Part E (Lexicon). – Add:
U.Kind,U.SubkindOf (⊑),KindSignature(+F),Extension,MemberOf,U.RoleMask, KindBridge,CL^k, AT (kinds, facet). – Mark as deprecated aliases (not characteristic names): generality (as ladder), kind scope, validity (as characteristic), capability envelope; redirect to Claim/Work scope or Kind entries.
Alias and record continuity
- Archived prose and cited older records may keep deprecated aliases as labels. Guards, conformance text, and state assertions MUST use the Kind‑CAL/USM vocabulary and guard shapes.
- When annotating older records, add a small “typed note” box: Kinds, Scope, Bridges (CL/
CL^k), loss notes, penalties to R.
Extended rationale & design notes [I]
This section explains the design choices that keep Kind‑CAL compact and interoperable with F–G–R & USM without drifting into tooling or technology stacks.
Why no Scope on kinds
Scope answers “where the claim holds” (set of Context slices, USM); kinds answer “what the claim is about”. Putting Scope on kinds would either (a) duplicate claim Scope, or (b) smuggle applicability into a classifier. We prevent both by: intent/extent on kinds (C.3.2), Scope on claims/capabilities (USM).
Why two bridges (Scope vs Kind)
Contexts diverge along context (Standards, parameters, time) and classification (what counts as a member). A single bridge hides which characteristic is mismatched. Two explicit bridges keep fixes targeted: ΔG / narrowing for context misfit; subkind/adapter for classification misfit. Both risks land in R as separate penalties (Φ/Ψ).
Why AT is a facet
AT (K0…K3) improves planning (ΔF/ΔR, bridge style) and navigation without introducing new algebra. Making AT a Characteristic would recreate a “G‑ladder,” blur applicability with abstraction, and invite gating on AT. As a facet, AT remains helpful but toothless in math, which is precisely what we want.
Why RoleMask and not “clone a kind”
Operational tweaks (extra constraints, local aliases) are real but temporary. Cloning kinds creates drift and duplicate bridges. RoleMask documents the tweak without breaking identity; promotion to subkind occurs when practice stabilizes. This keeps catalogs small and bridges honest.
Fit with Compose‑CAL and LOG‑CAL
Typed pre‑checks (same‑Context ⊑ or KindBridge) act like port compatibility before any Scope arithmetic. LOG‑CAL benefits from explicit quantification ∀ x : Kind with substitution rules aligned to ⊑. Neither alters F/G/R algebra; they prevent category mistakes before we do trust math.
CT2R lens (intuition)
A KindBridge behaves like a functor that (approximately) preserves structure between Contexts; CL^k is a practical knob for “how functorial” it is. At K3 (up‑to‑iso), this is literal: we expect bridges to preserve equivalences, hence higher CL^k and smaller Ψ penalties.
Rationale (Part E form)
Problem. (recap) — Authors conflate entityOfConcern with applicability, widening G by abstract wording. — Cross‑context reuse drifts semantically without declared mappings or risk accounting. — Planning misfires: over‑formalization for instance claims; under‑testing for class claims. — Unsafe compositions when entityOfConcern is implicit.
Forces. (recap) — Local freedom vs global sense; minimality vs utility; intent vs extent; typed discipline vs F–G–R; abstraction vs applicability.
Decision (C.3‑D1…D7).
— D1: U.Kind is intensional and context‑local (⊑ partial order).
— D2: Separate intent (KindSignature + F) and extent (Extension/MemberOf@slice).
— D3: No Scope on kinds (Scope lives with claims/capabilities via USM).
— D4: Typed reuse is explicit: KindBridge + CL^k, penalties route to R only.
— D5: Local adaptation via RoleMask; promote stable masks to subkinds.
— D6: AT (K0…K3) as facet, not a Characteristic; never used in guards.
— D7: Guard shapes: typed pre‑check → scope coverage → penalties/freshness.
Consequences. (+) Predictable Cross‑context reuse: two‑bridge rule, separate penalties (Φ/Ψ) to R. (+) Manager‑friendly planning: AT guides ΔF/ΔR; typed pre‑check blocks category mistakes. (+) Clean F–G–R discipline: no “G‑ladder,” no hidden scope inside classifiers. (−) Editorial discipline required: no “Kind scope”; masks must be cataloged; promote when stable. (−) Initial bridge authoring cost; mitigated by loss‑notes and reuse.
Alternatives considered. — Global U.Type: rejected as either too thin or too prescriptive across Contexts. — “Kind scope” in USM: rejected; duplicates/obscures Scope vs Extension split.
Known uses. — §11.1 (cyber‑physical braking); §11.2 (API with adapter); §11.3 (clinical dosage); §11.4 (ML fairness). — ESG guard shapes in C.3.A; typed pre‑check in Compose‑CAL (§7.2.4).
Related patterns. A.2.6 (USM), C.2.2 (F–G–R), C.2.3 (F), Part B (Bridges), Role‑CAL, Compose‑CAL, C.3.1–C.3.5, C.3.A.
Quick reference for managers
10‑minute start
- Name the Kind your claim talks about.
- Write Scope (G) as slice predicates (with Γ_time).
- If composing, check
⊑or KindBridge first. - Use the typed guard macro (C.3.A).
- Route bridge levels to R (Φ/Ψ); check freshness.
30‑day rollout plan
Week 1: Inventory & name Kinds (K1); adopt guard macros.
Week 2: Draft KindSignature for the top 5 Kinds (aim F4); register masks.
Week 3: Wire two‑bridge rule into ESG; add CL/CL^k lines to decision templates.
Week 4: Promote repeated masks to subkinds; publish first KindBridge records with loss notes.
Local glossary (reading aid)
Canonical definitions live in sub‑patterns; this list is for quick recall while reading C.3.
U.Kind— Minimal intensional “type/kind” object; carries KindSignature and⊑(C.3.1/C.3.2).U.SubkindOf (⊑)— Partial order on kinds (C.3.1).- KindSignature(k) — Predicate‑like intent that defines the kind; has its own F (C.3.2).
- Extension(k, slice) — Set of instances of
kinside aU.ContextSlice(C.3.2). - MemberOf(e, k, slice) — Boolean membership predicate (C.3.2).
- RoleMask(k, Context) — Registered adaptation (constraints/aliases; optional narrowing), no new kind (C.3.4).
- KindBridge — Cross‑context mapping for kinds (intent/order) with
CL^kand loss notes (C.3.3). CL^k— Kind‑congruence level; penalty Ψ(CL^k) goes to R (C.3.3).- AT (K0…K3) — Informative facet of a Kind; aids planning/navigation; never used in guards (C.3.5).
- Guard macros — Typed guard shapes for ESG/composition (C.3.A).
End of C.3. See C.3.1–C.3.5 and C.3.A for the referenced mechanics and guard macros.
C.3:End
U.Kind & SubkindOf (Core)
One‑line summary. Defines
U.Kindas a minimal, context‑local intensional carrier for “what a claim is about,” andU.SubkindOf (⊑)as a partial order over kinds. Kinds do not carry Scope. Scope remains on claims/capabilities (USM). This core pattern supplies only identity, locality, and ordering; intent & membership (KindSignature,Extension/MemberOf) are specified in C.3.2, bridges & congruence in C.3.3, masks in C.3.4, and the AT facet in C.3.5.
Status. Normative in Part C. Identifier C.3.1. Audience. Engineering managers, architects, assurance leads.
Dependencies.
- A.2.6 USM (Unified Scope Mechanism). Scope is a set‑valued USM property over
U.ContextSliceon claims/capabilities; algebra:∈(membership),∩(intersection),SpanUnion(union across independent lines),translate(scope mapping). - C.2.2 F–G–R. F = formality of expression; G = Claim scope; R = assurance/evidence; weakest‑link for F/R; CL penalties feed R, not F/G.
- C.2.3 U.Formality (F). Ordinal F0…F9; no arithmetic; applies to all content, including Kind signatures (defined in C.3.2).
- Part B Bridges & CL. Generic (scope) bridges and CL; Kind bridges are specialized in C.3.3.
Non‑goals.
- No data governance or repository/notation mandates.
- No membership or signature semantics here (defined in C.3.2).
- No Cross‑context mapping/congruence here (defined in C.3.3).
- No role/mask mechanics here (defined in C.3.4).
- No AT facet mechanics here (defined in C.3.5).
Purpose & Audience
This pattern gives one small, stable vocabulary to say what a claim ranges over (its entityOfConcern) without entangling that with where it applies (Scope) or how well it is supported (R). For managers:
- It prevents the costly mistake “more abstract wording ⇒ wider scope.”
- It enables typed composition (you cannot combine claims about incompatible “things”).
- It keeps Scope and Assurance math unchanged and predictable.
Context
across Contexts, “type” means OWL class, SHACL shape, code type, BORO category, etc. A neutral, minimal object is needed to name the kind of entities a claim quantifies over without importing a full type system or altering USM. U.Kind fills that role; ordering between kinds captures “is‑a/refines” relationships a Context relies on.
Problem
- Scope–Type conflation. Teams broaden G by “abstracting” prose, not by adding supported slices.
- Unsafe composition. Claims are joined though they talk about different “things.”
- Cross‑context drift. Without an explicit core notion of kind, bridges blur entityOfConcern vs applicability.
Forces
Solution — Core Objects (overview)
U.Kind— a context‑local intensional object naming a “kind of thing” claims may quantify over.U.SubkindOf (⊑)— a partial order on kinds (reflexive, transitive, antisymmetric).k₁ ⊑ k₂reads “k₁refinesk₂.”
No Scope on kinds. Scope is for claims/capabilities (USM). Kinds supply entityOfConcern only; membership and signature live in C.3.2.
Norms & Invariants (normative)
C3.1‑K‑01 (Partial order). U.SubkindOf (⊑) SHALL be a partial order on U.Kind: reflexive, transitive, antisymmetric. Editors SHALL document any Context‑specific meets/joins if they supply them (optional).
C3.1‑K‑02 (No Scope on kinds). A U.Kind MUST NOT carry a Scope value. Scope lives with claims (U.ClaimScope = G) and capabilities (U.WorkScope) per A.2.6.
Rationale pointer: see C.3.2 for the intent/extent vs Scope split.
C3.1‑K‑03 (Identity & locality). A U.Kind is context‑local. Cross‑context mapping of kinds is handled by KindBridge (see C.3.3); such mapping MUST NOT be conflated with Scope bridging.
C3.1‑K‑04 (Naming). A Context SHALL assign stable identifiers to kinds and SHOULD catalog parent/child ⊑ links. Synonyms/aliases SHALL point to the canonical kind id.
C3.1‑K‑05 (Separation of concerns). This core does not define kind intent or membership; those are specified in C.3.2 (KindSignature with its own F; Extension/MemberOf and determinism).
Interactions (informative)
- With USM (A.2.6). Guards that quantify over a kind use two predicates: “Scope covers TargetSlice” (USM) and whatever membership predicate is defined for the kind (see C.3.2). Kinds themselves carry no Scope.
- With F–G–R (C.2.2). This pattern does not alter the triple; typed checks happen before scope algebra, preventing invalid compositions.
- Order of checks reference. See Annex C.3.A §5 (E‑01) for the normative evaluation order: typed compatibility first, then Scope coverage, then penalties to R and freshness.
- With Formality (C.2.3). A KindSignature (C.3.2) declares its F; claims retain their own F via weakest‑link.
- With Bridges (Part B). Use KindBridge (C.3.3) for entityOfConcern; use Scope Bridge (Part B) for applicability. Penalties land in R via different channels.
Authoring & Review (informative)
When to mint a kind.
Mint a U.Kind when claims repeatedly quantify over “the same sort of thing” and you need: (i) safe composition, (ii) clear Cross‑context mapping, (iii) a place to collect invariants (in C.3.2).
Don’t over‑mint. If a local constraint is temporary or purely procedural, prefer a RoleMask (C.3.4) over a new subkind.
Review prompts.
- Does the draft introduce a new entityOfConcern concept? → consider a kind.
- Does prose hint at “is‑a” relationships? → capture as
⊑, not as scope widening. - Are authors trying to widen scope by abstracting wording? → stop; widen G only via ΔG (USM) with support.
Examples (informative, technology‑neutral)
-
Vehicle/PassengerCar. Mint
Kind Vehicle. Later addPassengerCar ⊑ Vehicle. Claims about Vehicle may be reused by narrowing to PassengerCar without touching G. Scope remains an independent predicate overU.ContextSlice. -
Request/AuthenticatedRequest. If multiple policies speak about “authenticated requests,” declare
AuthenticatedRequest ⊑ Request. Do not widen G to compensate for missing authentication; either change the producer’s kind or insert an adapter (C.3.2/C.3.4) while keeping G honest.
Conformance checklist (normative)
Rationale (informative)
Why a tiny core? Contexts differ wildly in “type” practice. A large, prescriptive core would either (a) force one Tradition’s semantics on all, or (b) become an empty label. The smallest powerful core—identity + ordering—gives managers and integrators what they need (safe composition, predictable edits) and leaves intent/membership/bridges/masks to focused sub‑patterns.
Why “no Scope on kinds”?
Scope (USM) answers “where a claim/capability holds” over U.ContextSlice. Kinds answer “what the claim ranges over.” Blending them recreates the failure mode we are removing (“higher abstraction ⇒ wider scope”). The right split is:
- Kind: intensional name + order (
⊑) (this pattern); intent & membership (C.3.2). - Scope: set of context slices (A.2.6).
- Assurance: evidence & penalties (C.2.2 / Part B).
C.3.1:End
KindSignature (+F) & Extension/MemberOf
One‑line summary. Specifies the intent and extent of kinds: (i) a
KindSignature(k)(the intensional definition of kindk) that declares its own Formality F; (ii) anExtension(k, slice) ⊆ U.EntitySet(slice)and the membership predicateMemberOf(e, k, slice)that are deterministic perU.ContextSlice; (iii) monotonicity of extension underSubkindOf; (iv) a definedness policy that fails closed outside its domain. Kinds still carry no Scope (that rule lives in C.3.1); Scope stays on claims/capabilities (USM). This pattern gives managers and reviewers the observable basis to check “what counts as a member here and now” without entangling applicability (G) or assurance (R).
Status. Normative in Part C. Identifier C.3.2. Audience. Engineering managers, architects, assurance leads, editors.
Depends on.
- C.3.1 (U.Kind & SubkindOf Core): kinds are context‑local;
⊑is a partial order; kinds carry no Scope. - A.2.6 USM (Context slices & Scopes): Claim scope (G) and Work scope live on claims/capabilities; algebra
∈(membership),∩(intersection),SpanUnion(union across independent lines),translate(scope mapping). - C.2.3 U.Formality (F): ordinal F0…F9; no arithmetic; weakest‑link composition applies to content that depends on the signature.
- C.2.2 F–G–R: assurance calculus; CL penalties feed R, not F/G.
- Part B (Scope Bridges & CL). CL (scope congruence) and scope translation live in Part B/USM; kind‑congruence
CL^kand kind mapping live in C.3.3 (KindBridge).
Non‑goals.
- No Scope semantics here (USM); no bridge semantics here (C.3.3).
- No repository/notation mandates; this is concept‑level, not tooling.
Purpose & Audience
This pattern makes entityOfConcern testable in a Context:
- Authors get a place to write what defines a kind (
KindSignature) and at what rigor (F). - Reviewers can ask deterministic questions: “Given this
TargetSlice, which entities are ink?” - Managers can plan ΔF (raise signature rigor) and ΔR (evidence over members) without changing G (applicability).
No tooling assumption. The pattern is conceptual and notation‑neutral (no OWL/SHACL/type‑system requirement); it specifies reviewer‑checkable obligations that managers can read in plain language.
Context
Different Contexts encode “type” intent differently (predicates, schemas, ontologies, Standards). Regardless of notation, a team must be able to answer, reproducibly: who belongs to the kind at this slice? If this is not stable, claims quantified over the kind are unverifiable, bridges are opaque, and composition becomes unsafe.
Problem
- Ambiguous membership. Membership depends on tacit “latest” states or unwritten defaults.
- Signature opacity. A kind’s definition is scattered; no single place to declare rigor (F) or assumptions.
- Order violations. Subkind hierarchies do not guarantee subset behavior in practice.
- Scope leakage. Teams smuggle applicability (G) into kind definitions, recreating G‑ladders by another name.
Forces
Solution — Objects & Standards (overview)
KindSignature(k)— the intensional definition of kindkin the Context; it declaresU.Formalityper C.2.3.U.EntitySet(slice)— the set (or well‑defined universe) of entities addressable in a givenU.ContextSlice.Extension(k, slice) ⊆ U.EntitySet(slice)— which entities belong tokatslice.MemberOf(e, k, slice)— membership predicate:e ∈ Extension(k, slice).
Design split.
- Intent lives in
KindSignature(with F). - Extent is computed per
sliceviaMemberOf. - Applicability (where a claim holds) remains a Scope on the claim (USM) and MUST NOT be encoded into
KindSignature.
Norms & Invariants (normative)
IDs C3.2‑K‑03…K‑08 correspond to the rules announced in C.3; additional local rules use C3.2‑S‑*.
Signature & Formality
C3.2‑K‑03 (Signature F). Every KindSignature(k) SHALL declare U.Formality per C.2.3 (F0…F9).
— Note: Raising signature F does not automatically raise claim‑level F; claims follow weakest‑link along their own support paths.
C3.2‑K‑04 (Signature change = content change). Any change to KindSignature(k) that alters membership (i.e., would change Extension(k, slice) for some slice) SHALL be recorded as a content change (Contexts may version kinds).
Extension & Membership
C3.2‑K‑05 (Deterministic membership). For fixed (k, slice), MemberOf(e, k, slice) MUST be deterministically evaluable from observable content in slice.
— Implication: “latest” is forbidden; Γ_time must be explicit on slice (A.2.6).
— If a classifier makes external assumptions, they MUST be named in KindSignature.
C3.2‑K‑06 (Monotone in ⊑). If k₁ ⊑ k₂, then for every slice:
Extension(k₁, slice) ⊆ Extension(k₂, slice).
C3.2‑K‑07 (Definedness & fail‑closed). Each Context MAY restrict the domain of definedness for MemberOf(–, k, –) (e.g., only when a Standard or dataset is present at a given version). Outside that domain, MemberOf MUST be treated as not defined for guard purposes, and guards MUST fail closed (deny). Implementations MAY internally return False, but there MUST be no path where undefined membership yields implicit success.
C3.2‑K‑08 (Separation from G). Guards SHALL keep Scope coverage (USM) and membership as separate predicates:
“U.ClaimScope(Claim) covers TargetSlice AND MemberOf(?, k, TargetSlice) is defined/used”.
Entity set & time
C3.2‑S‑01 (U.EntitySet). A Context SHALL document what counts as U.EntitySet(slice) (e.g., “rows in dataset D at version v,” “live objects in service S at build b,” “ontology individuals at vocabulary v”). This documentation MUST be stable and addressable via the slice tuple.
C3.2‑S‑02 (Time). slice SHALL specify Γ_time (point/window/policy). Membership MUST NOT rely on implicit recency.
U.EntitySet(slice) MUST NOT expand implicitly via external defaults or time; its extent is fixed by the slice tuple (see C3.2‑S‑02).
Interactions & Placement (informative)
- With C.3.1. Kinds carry identity and
⊑; no Scope on kinds. This pattern adds the intent/extent layer under those constraints. - With A.2.6 (USM). A typed claim’s guard normally evaluates, in the order specified by Annex C.3.A §5 (E‑01): (1) typed compatibility, (2) Scope coverage at
TargetSlice, (3)MemberOf(?, k, TargetSlice)definedness and any instantiation, followed by penalties to R and freshness checks. Use Guard_TypedClaim / Guard_TypedJoin rather than ad‑hoc shapes. - With C.2.3 (F). Signature F influences claims only if the claim depends on the signature content; weakest‑link min applies along the claim’s support path.
- With C.3.3 (KindBridge). When
MemberOfis computed via a kind mapping across Contexts, kind‑congruenceCL^kcontributes a **monotone penalty to R only (Ψ(CL^k)); F/G MUST NOT be adjusted. - With Role‑CAL (C.3.4). A RoleMask may narrow membership (context‑local adaptation). Frequent masks that encode stable narrowing SHOULD be promoted to subkinds (
⊑).
Authoring & Review Guidance (informative)
Authoring KindSignature
- Be explicit and observable. Prefer predicate‑like clauses over prose (“has VIN format …”; “axles ≥ 2”).
- Bind to versions. Name Standards/schemas by version; avoid “current.”
- Declare F honestly. F3 for controlled narrative is fine in early phases; aim F4+ for durable kinds; consider F7+ for safety‑critical cores.
- Name assumptions. If membership requires external conditions (e.g., calibrated rig), put them in the signature.
Authoring membership
- Define
U.EntitySet(slice). Write it down once per Context, make it addressable via theslicetuple, and reuse. - Determinism first. No hidden IO, no implicit time; membership must be recomputable from the slice.
- Document definedness. If
MemberOfis undefined without a Standard, say so; guards will fail closed. - Respect
⊑. If you declarek₁ ⊑ k₂, verify subset behavior (C3.2‑K‑06).
Review checklist (10 minutes)
- Is signature F declared? Is the signature sufficient to evaluate membership?
- Is
U.EntitySet(slice)documented and addressable? - Is membership deterministic with explicit
Γ_time(no “latest”)? - If
⊑links exist, does subset behavior hold at sample slices? - Are Scope and membership kept separate in guards?
- Any Cross‑context classification? If yes, is KindBridge referenced (C.3.3)?
Worked Examples (informative)
Vehicle (signature F4) and membership
KindSignature(Vehicle) (F4):
hasVIN(x)is true and parseable;axles(x) ≥ 2;hasBrakeSystem(x);- Standards:
registryAPI v1.4;Γ_timepolicy: rolling 365 d for registry fields.
U.EntitySet(slice): “records in registryAPI v1.4 for plant A at build b, as of Γ_time.”
Extension(Vehicle, slice): all records satisfying the predicates in that slice.
Monotonicity: PassengerCar ⊑ Vehicle ⇒ Extension(PassengerCar, s) ⊆ Extension(Vehicle, s).
AuthenticatedRequest (definedness & fail‑closed)
KindSignature(AuthenticatedRequest) (F4):
RequestwithauthHeaderpresent andauthSignaturevalid according toAuthStandard v2.3;Γ_time: point in time for key validity check.
Definedness: MemberOf(–, AuthenticatedRequest, slice) is undefined if AuthStandard v2.3 is absent in slice ⇒ guards fail closed (C3.2‑K‑07).
Clinical cohort (low‑F signature; deterministic membership)
KindSignature(AdultPatient) (F3→F4 as it hardens):
ageYears(x, Γ_time) ≥ N(jurisdictional N varies; recorded in the Context’s signature note).EntitySet(slice): EHRehr‑east v7.5@Γ_time;- Membership deterministic if DOB present; undefined otherwise (fail closed).
Anti‑patterns & Remedies (informative)
Rationale (informative)
Why give F to KindSignature?
Because rigor in the definition of a kind materially affects how safely teams can quantify over it. A signature at F4 (predicate‑like) makes membership checkable in principle; F7+ (machine‑checked) can support proof‑carrying development. Keeping this separate from claim‑level F prevents “signature formalization” from inflating unrelated claims.
Why Extension is not Scope
- Extension answers: “Which entities count as
kin this slice?” - Scope (G) answers: “In which slices does this claim hold?” Blending the two recreates the old failure mode where “more abstract wording” was treated as “wider applicability.” USM already gives the set‑algebra for G; Kind‑CAL supplies the typed universe the claim quantifies over.
Why determinism and fail‑closed?
Guards must be reproducible and auditable: same slice ⇒ same membership result. If inputs are missing (undefinedness), the safest default is deny (fail closed), prompting either a richer slice or a scope/claim change.
Conformance checklist (normative)
C.3.2:End
KindBridge & CL^k — Cross‑context Mapping of Kinds
One‑line summary. Defines
KindBridgeas the normative mechanism for moving kinds (their intent and selected subkind‑of links) between bounded contexts (“Contexts”). A bridge declares how a source kind maps to a target kind, which parts of the⊑order are preserved or collapsed, and publishes a type‑congruence levelCL^kwith loss notes and a definedness area.CL^kpenalties apply only to Reliability (R) when a claim depends on Cross‑context classification; F (formality) and G (Claim scope) remain unchanged. Scope translation continues to use the USM Bridge + CL channel; KindBridge is a separate, parallel channel for EntityOfConcern.
Status. Normative in Part C. Identifier C.3.3. Audience. Engineering managers, architects, assurance leads, editors.
Depends on.
- C.3.1 — U.Kind & SubkindOf (Core): kinds are context-local
U.Kindrecords;⊑is a partial order; kinds do not carry Scope. - C.3.2 — KindSignature (+F) & Extension/MemberOf: signature declares its own F; membership
MemberOf(e,k,slice)is deterministic perU.ContextSlice. - A.2.6 — USM (Context slices & Scopes): Claim scope (G) and Work scope live on claims/capabilities; scope bridging and CL penalties are defined there.
- C.2.2 — F–G–R: weakest‑link; penalties land in R, not F/G.
- C.2.3 — U.Formality (F): signature rigor.
Non‑goals.
— No repository/notation mandates; conceptual only.
— No Scope mapping here (that’s USM); KindBridge maps kinds, not scopes.
— No new arithmetic on CL^k; it reuses the ordinal anchor semantics of CL (Part B) but applies to kinds.
Purpose & Audience
Cross‑context reuse fails in two orthogonal ways:
- Applicability (G): where the claim holds (handled by USM Scope Bridge).
- entityOfConcern (Kind): what the claim quantifies over (handled by KindBridge).
C.3.3 gives managers an explicit, auditable channel for (2), so a team can say, with evidence: “Vehicle in Lab maps to TransportUnit in Plant with CL^k=2; the EV subkind collapses; here’s what we lost.” Guards stay deterministic; assurance math stays clean (penalties in R only).
Context
Contexts use different classifications: ontology classes vs shape Standards, regulatory cohorts vs app types, etc. Informal “same‑name” reuse silently mutates entityOfConcern. USM already made scope moves explicit. KindBridge does the same for kinds: declare the mapping, rate its congruence, and capture known losses.
Problem
- Semantic drift. Moving a claim into a target‑context with a different taxonomy changes “what counts” without anyone noticing.
- Hidden order breaks. Subkind relationships invert or vanish; downstream proofs/tests are misapplied.
- Entangled channels. Teams conflate “scope mapping” with “kind mapping,” making it impossible to assign penalties coherently.
- Incomputable guards. “We map it somehow” yields non‑deterministic classification at guard time.
Forces
Solution — The KindBridge object (overview)
A KindBridge connects source Context A and target Context B for a set of kinds. It declares:
- Mapping of kinds: either to named target kinds or via signature translation rules.
- Order preservation: which
⊑links are preserved (monotone), which are collapsed, and which are unknown (not claimed). - Type‑congruence
CL^k: reuses the same anchors/labels as CL (Part B) but applies to kind intent/order (not to Scope). Gloss: higherCL^k⇒ closer preservation of kind intent and declared⊑links. - Loss notes: human‑readable list of invariants and subkinds not preserved.
- Definedness area: the subset of
U.ContextSlicecharacteristics where the mapping is intended to be used (e.g., certain Standards/versions). - Determinism: fixed versions + mapping rules ⇒ deterministic result (no “latest”).
Effect on assurance. When a claim in B depends on classification that goes through this bridge, reduce R by a monotone penalty Ψ(CL^k). Do not change F or G.
Norms & Invariants (normative)
The following formalize the KB‑01…KB‑12 rules announced in C.3.
Subject & Scope of a KindBridge
KB‑01 (Subject). A KindBridge maps:
- one or more KindSignature(s) from source to target; and
- an explicitly declared subset of
⊑links (which it claims to preserve or collapse).
KB‑02 (No Scope). A KindBridge MUST NOT map Claim/Work scope (G). Scope translation uses the USM Bridge + CL channel (A.2.6, Part B).
No blended score. Congruence for Scope (CL) and for Kind (CL^k) MUST NOT be aggregated into a single “interoperability” score in guards; each channel is assessed and penalized separately. See Annex C.3.A §5 (E‑06).
Declaration & Shape
KB‑03 (Declaration). A KindBridge record SHALL include:
- source Contexts, target Contexts, and vocabulary or Standard versions;
- a kind mapping per source kind
k: either a named target kindk′or a signature translation rule that constructs the target‑contextKindSignature(k′)(the result is declared and versioned in the target Context); - an order preservation claim for any
k₁ ⊑ k₂it covers: preserved / collapsed / unknown; CL^kvalue (using the CL anchor ladder) labeled “kind‑congruence”;- loss notes (non‑preserved invariants, collapsed subkinds, equality quirks);
- definedness area (constraints on
U.ContextSlicedimensions where the bridge is meant to apply).
KB‑04 (Determinism & local evaluation). Given fixed Context versions and mapping rules, translateₖ MUST be deterministic (no implicit “latest”). After mapping to k′, membership SHALL be evaluated using the target Context’s own KindSignature(k′) and MemberOf(–, k′, –); source‑context membership results MUST NOT be reused as truth in guards (they may be cited as evidence in R).
Order & Monotonicity
KB‑05 (Monotone order). If the bridge claims to preserve k₁ ⊑ k₂, then in the target Context translateₖ(k₁) ⊑′ translateₖ(k₂) MUST hold.
KB‑06 (No inversions). The bridge MUST NOT assert preserved links that invert order. If real‑world constraints force reversal, the link MUST be marked not preserved with a loss note.
KB‑07 (Collapse semantics). Marking a link as collapsed is allowed (two subkinds mapped to one target kind), but the record SHALL list the merged subkinds and any properties thereby lost.
Congruence & Assurance
KB‑08 (Anchor reuse & AT neutrality). CL^k reuses the ordinal anchor semantics of CL (Part B) but applies to kinds. Editors SHALL label it explicitly as kind‑congruence to avoid confusion with Scope CL. KindBridge records MUST NOT compute or alter KindAT (C.3.5 AT‑04); AT is editorial and independent of CL^k.
KB‑09 (Effect on R only). When a claim in the target Context depends on MemberOf(–, translateₖ(k), TargetSlice), a monotone penalty Ψ(CL^k) SHALL reduce R (alongside any Φ(CL) penalty from the Scope Bridge). Implementations MUST NOT adjust F or G due to CL^k.
KB‑10 (Chaining). For a chain of bridges, effective CL^k = min of the links (weakest‑link).
Loss Notes & Definedness
KB‑11 (Loss notes). Bridges SHALL publish human‑readable loss notes: which invariants of KindSignature are not preserved, which subkinds are collapsed, and any higher‑equality caveats (e.g., up‑to‑iso only).
KB‑12 (Definedness & guard use). The bridge’s definedness area SHALL be stated. Guards MUST fail closed outside it (i.e., if a classification relies on the bridge where it is not defined, the guard denies use).
Interactions (informative)
With USM Scope bridges (two channels)
When using a claim across Contexts, expect two concurrent bridges:
- Scope Bridge (USM): maps G; publishes CL; penalty Φ(CL) to R.
- KindBridge (this pattern): maps kinds; publishes
CL^k; penalty Ψ(CL^k) to R.
Discipline: compute both; do not collapse them into one “interoperability score.”
See Annex C.3.A §5 (E‑01) for the normative evaluation order in guards.
With membership (C.3.2)
After mapping k to k′ = translateₖ(k), the target Context evaluates membership as usual: MemberOf(e, k′, TargetSlice). If the bridge provides a signature translation, that definition becomes the local KindSignature(k′) (versioned per target Context policy).
With Role masks (C.3.4)
If a claim uses a RoleMask(k) across Contexts, you need:
- a KindBridge for
k(CL^k+ loss notes), and - a documented mask adapter (how mask constraints translate). Penalties still land in R. If the mask’s effect is stable and widely reused, consider promoting it to a subkind on the target side.
With guards (Annex C.3.A)
Use the Guard_XContext_Typed macro (Annex C.3.A), which requires both bridges and applies both penalties to R:
- find Scope bridge (CL≥threshold), translate G, check coverage;
- find KindBridge (
CL^k≥threshold), translate kind, check membership definedness; - apply Φ(CL) and Ψ(
CL^k) to R; keep F/G untouched.
Authoring, Review & Rating Guidance (informative)
Authoring a KindBridge
- Start narrow & honest. Declare only the kinds and
⊑links you actually preserve; mark the rest unknown. - Prefer named targets. If the target already has a suitable kind, map to it; use signature translation only when necessary, and list what is preserved, relaxed, or dropped.
- Write loss notes in plain language. Example: “EV vs ICE subkinds collapsed; battery‑health invariants dropped.”
- Fix the definedness area. Bind to target Standards/versions and any environment selectors essential to classification.
- Assign
CL^kfrom exemplars. Calibrate on concrete counter‑examples and preserved properties; resist optimistic ratings.
Review playbook (10 minutes)
- Two bridges present? Scope Bridge and KindBridge?
- Order claims honest? Any
⊑inversions? Collapses disclosed? CL^kplausible? Based on preserved properties, not name similarity?- Loss notes present? Will they force narrowing of Scope or extra tests?
- Definedness area clear? Guard will fail closed outside it?
- Penalties wired to R? No hidden tweaks to F/G?
Rating CL^k (rules of thumb)
- High
CL^k: signature equivalence or up‑to‑iso;⊑fragment preserved; only cosmetic losses. - Medium
CL^k: some invariants relaxed or lost; selected subkinds collapsed; order preserved on critical path. - Low
CL^k: name‑only correspondences; properties diverge; order not preserved. Expect significant R penalty and/or adapters.
Worked Examples (informative)
Vehicle → TransportUnit (manufacturing)
Source kind: Vehicle (K2, signature F4).
target Context: PlantB, kind TransportUnit exists.
KindBridge:
Vehicle ↦ TransportUnit; order: preservesPassengerCar ⊑ Vehicle; collapsesEV ⊑ VehicleintoTransportUnit(no EV subkind).CL^k=2(mid); loss notes: “battery‑health invariants not carried”; definedness: only forregistryAPI v1.4,Γ_timein last 365 d.
Use: Claim quantified over Vehicle crosses to PlantB.
Guards: scope bridge CL=2 (rig bias); kind bridge CL^k=2; both penalties reduce R. F/G unchanged.
AuthenticatedRequest across services (software)
Source kind: AuthenticatedRequest defined by AuthStandard v2.3.
target Context: Frontend with different auth header scheme.
KindBridge: signature translation (authHeader → x‑auth), preserves “signature valid” property; CL^k=3 (high).
Loss notes: none; definedness: only where AuthStandard v2.3 is in scope.
Effect: Rules quantified over AuthenticatedRequest can be reused; R penalty small (Ψ(3) near 1). Scope remains independent (API v2.3).
AdultPatient across jurisdictions (clinical)
Source kind: AdultPatient (≥ 18 at Γ_time).
target Context: JurisdictionY uses ≥ 21.
KindBridge: AdultPatient ↦ AdultPerson_Y with boundary mismatch; CL^k=1.
Loss notes: “Boundary 18 vs 21; map narrows to ≥ 21”.
Guard: Require mask adapter or narrow Scope to cohorts where DOB is known and ≥ 21. R penalty strong; F/G remain as declared.
Anti‑patterns & Remedies (informative)
Conformance Checklist (normative)
Integration requirements with Part B (bridges):
- B‑P1. Part B (Bridges) SHALL list KindBridge as a distinct bridge class alongside USM Scope bridges.
- B‑P2. Part B SHALL state that
CL^kpenalties route to R via a monotone Ψ, never to F/G. - B‑P3. Part B SHALL define chaining = min for both CL and
CL^k(weakest‑link). - Templates. ESG/Method templates should expose fields for Scope Bridge (CL) and KindBridge (
CL^k) with loss notes & definedness.
C.3.3:End
RoleMask — Contextual Adaptation of Kinds (without cloning)
One‑line summary. Defines
U.RoleMask(kind, Context)as a context‑local adaptation of aU.Kindthat (a) adds constraints and/or vocabulary bindings, and (b) may narrow membership deterministically within aU.ContextSlice, without creating a new kind. RoleMasks are catalogued, versioned, and guard‑addressable; frequent, stable constraint masks SHOULD be promoted to explicit subkinds. Cross‑context use of a RoleMask requires a KindBridge (for kinds) and, when needed, a MaskAdapter (for mask constraints). All penalties route to R; F/G remain unchanged.
Status. Normative in Part C. Identifier C.3.4. Audience. Engineering managers, architects, reviewers, editors.
Depends on.
- C.3.1 — U.Kind & SubkindOf (Core): kinds are intensional;
⊑is a partial order; kinds carry no Scope. - C.3.2 — KindSignature (+F) & Extension/MemberOf: signature F; deterministic
MemberOf(e,k,slice);EntitySet(slice). - C.3.3 — KindBridge & CL^k: Cross‑context kind mapping;
CL^kpenalties → R only. - A.2.6 — USM (Context slices & Scopes): Claim/Work scope (G) over
U.ContextSlice; bridges and CL for scope. - C.2.2 — F–G–R; C.2.3 — U.Formality (F).
Non‑goals. — No repository/notation mandates; conceptual only. — RoleMask is not a governance tier, data policy, or “mini‑type system.” — RoleMask does not redefine Scope; context conditions belong to USM.
Purpose (manager’s view)
Teams often need a local projection of a widely used kind:
- Constraint: “For our procedure, take
Vehiclewith ABS only.” - Vocabulary: “Here,
AuthHeaderis calledX‑Auth.”
If each team clones a fresh kind, catalogs fragment and bridges multiply. RoleMask is the disciplined alternative: keep the kind identity, apply declared constraints and bindings, and make the mask first‑class (registered, versioned, guard‑addressable). When a mask becomes stable “de‑facto subkind,” promote it to ⊑.
Benefits: fewer near‑duplicates, cleaner Cross‑context reuse, deterministic guards, and auditable narrowing instead of hand‑wavy “this is the version we mean.”
Context
Kinds (C.3.1/3.2) name what claims quantify over; USM (A.2.6) governs where claims hold. In practice, procedures need local tailoring of kinds for a role/process (compliance profile, product line, cohort). RoleMask gives that tailoring without mutating entityOfConcern (Kind) or applicability (Scope).
Problem
- Kind sprawl. Teams mint near‑duplicate kinds (“Account_PCI”, “Account_Ledger”), and alignment decays.
- Hidden constraints. Informal “we only accept …” statements leak into prose; guards can’t check them deterministically.
- Scope conflation. Contextual requirements (jurisdiction, API version) get smuggled into “type” talk, blurring Scope vs Kind.
- Cross‑context fragility. Masks don’t travel unless their constraints are mapped; teams reuse names and hope.
Forces
Solution — RoleMask (overview)
A RoleMask is a named, versioned binding U.RoleMask(kind, Context) that:
- Adds constraints (entity‑level predicates only),
- Binds vocabulary/notation (aliases, field maps) for the Context/process,
- May declare context expectations (selectors over
U.ContextSlice, e.g., jurisdiction, API version). These are enforced via USM Scope guards (A.2.6) and do not change mask membership. - May narrow membership:
Extension_mask(k, s) ⊆ Extension(k, s)(entity‑level narrowing only), - Never creates a new kind; identity stays with
k. - Is guard‑addressable and deterministic (no “latest”).
Mask types (declared):
- Constraint mask — adds constraints; may narrow membership;
- Vocabulary mask — aliases only; no membership change;
- Composite mask — both.
Separation discipline.
- Entity‑level predicates (e.g., “hasABS(x)”) → mask membership (narrowing).
- Context conditions (e.g., “jurisdiction=EU”, “API=v2.3”) → USM Scope guards (intersection), not mask membership. Masks may carry both kinds of information, but guards must route them into the right channel.
Norms & Invariants (normative)
The following formalize and expand RM‑01…RM‑08 referenced in C.3.
Definition & Shape
RM‑01 (Definition). U.RoleMask(kind, Context) SHALL be a named, versioned record with:
(a) intent (what role/procedure the mask serves),
(b) constraints (entity‑level predicates; optional context requirements),
(c) vocabulary/notation bindings,
(d) membership narrowing definition (if any),
(e) intended guard use.
RM‑02 (Not a new kind). A RoleMask MUST NOT introduce a new U.Kind. If the domain needs a stable refinement, Contexts SHALL publish an explicit SubkindOf node (C.3.1).
RM‑03 (Determinism). Membership under a mask (if defined) MUST be deterministic given slice and published constraints; implicit “latest” is forbidden.
RM‑04 (Mask taxonomy). A mask SHALL declare its type: constraint / vocabulary / composite. — Vocabulary masks MUST NOT change membership; — Constraint/composite masks MAY narrow membership only via entity‑level predicates.
Separation of channels
RM‑05 (Context vs entity).
- Predicates about entities (features, attributes) MAY narrow membership:
Extension_mask(k, s) ⊆ Extension(k, s). - Predicates about ContextSlice (jurisdiction, Standards, Γ_time) SHALL be enforced via USM Scope guards (A.2.6). Masks MUST NOT hide Scope requirements inside membership checks.
Guard routing. Enforce ContextSlice predicates via USM Scope (A.2.6) and entity predicates via membership; see Annex C.3.A §4.3 (Guard_MaskedUse) and §5 (E‑01) for the normative order of checks.
RM‑06 (Guard use). Guards MAY reference a RoleMask by name only if the mask is registered, versioned, and its constraints are observable at guard time. Mask names MUST NOT be treated as kind synonyms.
Promotion & Catalog
RM‑07 (Promotion rule). A constraint mask reused broadly and stably SHOULD be promoted to an explicit subkind with a ⊑ link; retire the mask or keep it as a vocabulary wrapper. Editors SHALL track promotions in the catalog.
RM‑08 (Catalog). Contexts SHALL catalog masks (name, version, type, intent, constraints, bindings, examples, related subkinds, known bridges/adapters). Redundant masks SHOULD be consolidated.
Cross‑context use
RM‑09 (Bridges & adapters). If a claim uses MemberOf(–, RoleMask(k), TargetSlice) across Contexts, the receiving Context SHALL require:
(a) a KindBridge for k (CLᵏ, loss notes), and
(b) a MaskAdapter — a documented, deterministic mapping of the mask’s entity‑level constraints and vocabulary bindings into the target Context — whenever those constraints/bindings differ.
Penalties MUST route to R: Ψ(CLᵏ) for kind, plus any Φ(CL) for scope bridge.
RM‑10 (Definedness & fail‑closed). Mask evaluation SHALL state its definedness area; outside it, guards fail closed.
Invariants & Non‑goals (normative)
- No Scope leakage. RoleMasks cannot widen/narrow Claim scope (G); any context conditions are enforced by USM guards.
- Identity preservation. The carrier kind remains
k; RoleMask does not change entityOfConcern. - Weakest‑link unaffected. RoleMasks do not alter weakest‑link rules on F/R; guards route entity predicates to membership and context predicates to USM Scope.
Interactions (informative)
With Kinds & Subkinds (C.3.1)
Use RoleMask for procedural tailoring. If the tailoring becomes conceptual and stable, introduce a subkind with ⊑ and update references.
With Membership & Signature (C.3.2)
- Entity‑level constraints live in mask membership (deterministic).
- Signature F belongs to the kind; raising F in the signature does not auto‑change masks.
With KindBridge (C.3.3)
A RoleMask crossing Contexts needs two artifacts: the KindBridge (CL^k, loss notes) and a MaskAdapter (how constraints/aliases translate). R gets both penalties; F/G stay intact. If the adapter systematically narrows membership in the target Context, consider target‑side subkind.
With Guards (Annex C.3.A)
Use Guard_MaskedUse (Annex C.3.A §4.3). It requires:
— mask registration & determinism;
— Scope coverage (A.2.6), Γ_time explicit;
— where Cross‑context: KindBridge (CL^k) + MaskAdapter + penalties → R.
— Cross‑context combo. When masks cross Contexts, use Guard_MaskedUse together with Guard_XContext_Typed (Annex C.3.A §4.5) so both bridges are checked and both penalties (Φ(CL) and Ψ(CLᵏ)) land in R.
— Order of checks. Follow Annex C.3.A §5 (E‑01): typed compatibility first, then Scope coverage, then penalties to R and freshness.
Anti‑patterns & Remedies (informative)
Worked Examples (informative)
Vehicle@ABSOnly (constraint mask)
Kind. Vehicle (K2, signature F4).
Mask. Vehicle@ABSOnly — entity‑level predicate hasABS(x)=true; type constraint.
Guards. MemberOf(–, Vehicle@ABSOnly, TargetSlice) defined & deterministic; Scope (surface/speed/rig/Γ_time) checked separately.
Promotion? If ABS‑only becomes a conceptual category, publish VehicleWithABS ⊑ Vehicle and retire the mask.
AuthenticatedRequest@Frontend (vocabulary mask)
Kind. AuthenticatedRequest defined by AuthStandard v2.3.
Mask. @Frontend binds authHeader → X‑Auth (aliases only); no narrowing; type vocabulary.
Cross‑context. If reused in another Context, require KindBridge for the kind; no MaskAdapter needed (aliases are local).
R. Only scope bridge penalties apply (if any).
AdultPatient@Clinic (composite mask) across jurisdictions
Kind. AdultPatient (≥ 18 at Γ_time).
Mask. @Clinic: entity constraint “DOB present”; context hint “EHR system = X” (this part belongs with Scope). Type composite.
Cross‑context. Jurisdiction Y uses ≥ 21 → KindBridge with CL^k=1; MaskAdapter maps DOB fields.
Guards. Scope bridge (coding system) + KindBridge + MaskAdapter; penalties Ψ(1) (kind) + Φ(CL) (scope) to R.
Outcome. Allowed with reduced R; consider target‑side subkind AdultPerson_Y.
Authoring & Review Guidance (informative)
Authoring a RoleMask card
Fields (suggested). name, kind, type (constraint/vocabulary/composite), intent, constraints (entity vs context split), bindings, membership definition (if any), definedness, examples, known bridges/adapters, promotion note.
Rules of thumb.
- Keep entity predicates small and testable.
- Put context in Scope, not in membership.
- If ≥ 3 teams reuse the same constraint mask → promotion review.
Reviewer 7‑point checklist
- Mask registered and versioned?
- Type declared correctly (constraint/vocabulary/composite)?
- Entity vs context split respected?
- Determinism (no “latest”) satisfied?
- Guard routes context to USM and entity to membership?
- Any Cross‑context use has KindBridge + MaskAdapter with penalties to R?
- Promotion warranted (stable, reused) or consolidation needed?
Conformance Checklist (normative)
C.3.4:End
KindAT — Intentional Abstraction Facet for Kinds (K0…K3)
One‑line summary. Defines KindAT as an informative facet attached to
U.Kindthat classifies the intentional abstraction stance of a kind—K0 Instance, K1 Behavioral Pattern, K2 Formal Kind/Class, K3 Up‑to‑Iso—to guide ΔF/ΔR planning, bridge expectations, catalog/search, and refactoring. KindAT is not a Characteristic: it has no algebra, no thresholds, and MUST NOT appear in guards or composition math. All assurance remains in F–G–R; typed semantics remain in C.3.1–C.3.4.
Status. Mixed: — Informative for the anchors, heuristics, examples, and guidance. — Normative for the usage rules that forbid employing AT in guards/composition and constrain its placement.
Placement. Part C (Kinds), identifier C.3.5. Audience: engineering managers, architects, editors, assurance leads.
Depends on.
— C.3.1 (U.Kind, U.SubkindOf (⊑)), C.3.2 (KindSignature + F, Extension/MemberOf), C.3.3 (KindBridge + CL^k), C.3.4 (RoleMask).
— A.2.6 USM (Claim/Work scope over U.ContextSlice), C.2.2 F–G–R, C.2.3 U.Formality (F).
— MM‑CHR distinction Facet vs Characteristic (editors).
Non‑goals. — No numerical scale, no gating, no composition operators, no “quality” scoring. — No effect on F, G, or R besides planning hints.
Purpose (manager’s view)
Teams constantly decide how far to formalize and how broadly to validate:
- Are we speaking about this cohort (instances), about things that behave like X (pattern), about a formal class with invariants, or about objects up to isomorphism?
- Given that stance, should we invest in F4 predicates, F7 proofs, or R across variants?
- What kind of KindBridge is realistic (coarse mapping vs up‑to‑iso), and what
CL^kshould we expect?
KindAT answers these with a small, shared vocabulary (K0…K3) that is safe to use (cannot distort F/G/R) yet actionable for planning and catalog/search.
Context & Rationale
The orthogonality we preserve
- G (Claim scope) is where a claim holds (A.2.6).
- Kinds give what a claim is about (C.3.1/3.2).
- R is assurance (evidence, freshness, penalties).
- F is expression rigor (C.2.3).
Teams often conflate abstraction with applicability (“sounds general ⇒ applies broadly”) or over‑engineer proofs where slice‑checks suffice. AT separates these concerns.
Why a facet, not a Characteristic
Per MM‑CHR, Characteristics (e.g., F, G) carry algebra and appear in guards/composition. KindAT is only a tag on U.Kind:
- No algebra, no thresholds, not used in guards.
- Editorial placement only: on kinds, not on claims.
- Planning signal: what ΔF and ΔR typically pay off; what bridge style to expect.
This keeps AT useful without risking a “second G” or back‑door quality scores.
Design choice recap (moved from C.3 §15.2)
- Making AT a Characteristic would duplicate G’s role and encourage gating.
- As a facet, AT remains a catalog/navigation and planning device, not an assurance dimension.
Anchors K0…K3 (informative)
How to read. Each anchor states the intentional stance of the kind, inclusion cues, non‑examples (to prevent misuse), and planning hints (ΔF/ΔR/bridge expectations). Anchors are context‑local editorial tags on
U.Kind.
K0 — Instance‑level
Intent. The kind denotes exemplars or a tightly curated set; often a named cohort or a concrete template.
Cues. Membership relies on listing or direct identity features; little to no general invariants.
Non‑examples. Any kind with stable, general invariants belongs in K2.
Planning hints. Focus R on TargetSlice (executable checks, F5/6); avoid premature proof engineering. Bridges are instance‑maps; expect low CL^k outside the Context.
K1 — Behavioral Pattern
Intent. The kind is a role/behavioral pattern (“things that act like …”), typically stated via Standards or controlled NL, not a full type.
Cues. “Duck‑typing” flavor; Standards reference behavior/state transitions.
Non‑examples. If you can state global invariants as predicates, consider K2.
Planning hints. Invest in F3→F4 (predicate‑like acceptances); R must test behavioral diversity; bridges are pattern maps with moderate CL^k.
K2 — Formal Kind/Class
Intent. A formal class with explicit invariants/relations (ontology class, type with Standards).
Cues. Predicate‑like signature, subkind lattice, invariants reviewed.
Non‑examples. Pure examples/cohorts (K0); informal roles (K1).
Planning hints. Raise KindSignature F to F4+, consider F7 for safety‑critical cores; R should cover subkinds/variants; bridges are type‑maps, CL^k often medium/high.
K3 — Up‑to‑Iso
Intent. Defined up to isomorphism/equivalence (category‑theoretic flavor; “equal as structure,” not by identity); equality‑as‑structure matters.
Cues. Statements invariant under isomorphism; reasoning by equivalence classes.
Non‑examples. Classes where identity matters beyond structure.
Planning hints. Expect up‑to‑iso bridges; CL^k can be high where equivalence is respected. F7–F9 likely for key properties; R focuses on witnesses of equivalence at interfaces.
Manager Heuristics (informative)
Misuse & Antidotes (informative)
- “Higher AT ⇒ wider G.” Wrong. G changes only via ΔG (USM). AT does not alter scope.
- “Gate on AT.” Wrong. Use F thresholds and scope/evidence guards; AT is never a gate.
- “Depth in
⊑⇒ AT.” Wrong. AT is about intentional stance, not graph depth. - “AT on claims.” Wrong. AT tags
U.Kindonly. - “AT as quality score.” Wrong. Use F and R for rigor/reliability.
Usage Rules (normative)
These are the only normative constraints in this pattern. Everything else is guidance.
AT‑01 (Facet, not Characteristic). KindAT SHALL be treated as a Facet per MM‑CHR: it has no algebra, no thresholds, and MUST NOT appear in guards or composition math.
AT‑02 (Placement). If recorded, KindAT SHALL be attached to U.Kind (or its catalog card). It MUST NOT be attached to claims/capabilities or used as a proxy for G/F/R.
AT‑03 (Editorial discipline). Editors SHALL NOT write text implying “higher AT widens scope” or “higher AT increases rigor/reliability.” Any such text MUST be revised to reference ΔG/F/R explicitly.
AT‑04 (Bridge neutrality). KindBridge records MUST NOT compute or adjust AT; they may include informative remarks about likely anchor alignment. CL^k is independent of AT and is assessed from signature/order preservation.
AT‑05 (Catalog). Contexts that use AT SHOULD record it in Kind catalog entries alongside: signature snippet & F, subkinds, RoleMasks, KindBridges. Absence of AT implies “not set”, not K0.
Authoring & Review Guidance (informative)
How to tag (fast rubric)
- If the card lists concrete items/cohorts, tag K0.
- If the card defines behavioral obligations in prose/templates but few global invariants, tag K1.
- If the card states predicates/invariants and participates in a subkind lattice, tag K2.
- If the card explicitly reasons up to isomorphism, tag K3.
Review checklist (5 minutes)
- Is the carrier a
U.Kind(not a claim)? - Does the tag match the signature (intent)?
- Are ΔF/ΔR implications noted for planning (not gating)?
- Any RoleMasks that should be promoted to subkinds (K2 hygiene)?
- Any Cross‑context reuse that suggests bridge style (pattern/type/iso)?
Integration Notes (informative)
- With C.3.1/3.2 (Kinds, Signature, Extension). AT guides how to evolve signature F and what R coverage is sensible; it does not change membership semantics.
- With C.3.3 (KindBridge). AT hints at likely bridge style (instance‑map / pattern‑map / type‑map / up‑to‑iso), but
CL^kis still computed from signature/order preservation; penalties route to R. - With C.3.4 (RoleMask). Persistent K1‑style masks often warrant promotion to K2 subkinds.
- With A.2.6 (USM). All scope decisions remain under G. AT text should never be used to infer coverage.
- With C.2.3 (F). AT does not raise/lower F; it suggests where raising F is cost‑effective.
Worked Mini‑Examples (informative)
- K0 (Instance).
Account_US_GAAP_2025_Q1_Cohort. Plan R slice checks; avoid type‑maps across Contexts. - K1 (Behavior).
CacheableRequest(“idempotent under retry; cache key well‑formed”). Raise F3→F4; design R for failure‑mode diversity; expect pattern bridges. - K2 (Formal).
Accountwith invariants (balance = debits−credits; posting rules). Raise F4+; plan R overAsset/Liabilitysubkinds; bridge via type maps. - K3 (Up‑to‑Iso).
UndirectedGraphup to node relabeling. Expect up‑to‑iso bridges; proofs at F7+; R checks interface equivalence witnesses.
Conformance Checklist (normative)
C.3.5:End
Typed Guard Macros for Kinds + USM (Annex)
One‑line summary. Provides normative guard macros that combine USM Scope (A.2.6) with Kind‑CAL (C.3.x) so authors can gate state changes and compositions that quantify over kinds without conflating entityOfConcern (Kinds) with applicability (Scope G) or assurance (R). Includes decision trees, anti‑patterns, and examples (informative). AT (KindAT) is never used in guards.
Status. Mixed: — Normative: guard macro clauses, evaluation order, fail‑closed discipline, conformance checklist. — Informative: … decision trees, anti‑patterns, worked examples, macro skeletons.
Placement. Part C (Kinds), identifier C.3.A (Annex). Audience: engineering managers, editors, reviewers, assurance leads.
Depends on.
— A.2.6 USM: U.ContextSlice, U.ClaimScope (G), U.WorkScope, ∈/∩/SpanUnion/translate, Γ_time policy, Bridge + CL (scope).
— C.3.1: U.Kind, U.SubkindOf (⊑); C.3.2: KindSignature (with F) and Extension/MemberOf; C.3.3: KindBridge + CL^k (kind‑congruence) & loss notes; C.3.4: RoleMask.
— C.3.5: KindAT (facet) — explicitly forbidden in guards.
— C.2.2 F–G–R: weakest‑link, penalties to R only; C.2.3 F: F0…F9 (expression rigor).
— Part B Bridges & CL: scope bridge semantics and CL ladder.
Purpose & Audience
Purpose. Give Contexts a single set of guard shapes to: (a) admit typed claims safely, (b) compose typed claims/specs, (c) use RoleMasks properly, and (d) reuse across Contexts via both scope and kind bridges—without inventing new scales or conflating G, F, and R.
Audience. Engineering managers and reviewers who must read/author guards that are legible, deterministic, and auditable in context.
Context & Problem
Projects often:
- treat “more abstract wording” as wider G,
- glue claims with incompatible entityOfConcern (kinds),
- move typed content across Contexts without declared bridges,
- or bake AT (abstraction vibe) into decision logic.
C.3.A fixes this by supplying guard macros that: — separate typed compatibility (kinds) from Scope coverage (USM), — require both bridges where needed, — push congruence penalties to R only, and — forbid AT in guards.
Solution Overview (what these guards do)
All guards in this Annex share three invariants:
- Fail‑closed. If any required predicate is undefined/false, the guard denies the transition.
- Deterministic. Given a fixed TargetSlice (with explicit Γ_time) and published declarations, evaluation yields one outcome.
- Separation of concerns.
Typed compatibility (same‑Context
⊑or KindBridge) is not Scope. Scope coverage is a USM set‑membership judgment over Context slices. Assurance penalties (Φ(CL) for scope bridges; Ψ(CL^k) for kind bridges) reduce R only.
Normative Guard Macros
Notation. “SHALL” clauses are normative obligations. “Notes” are informative reminders. Names like
Guard_TypedClaimare editorial handles; Contexts may alias them, but MUST preserve semantics. Macro names (e.g.,Guard_TypedClaim) are editorial handles; Contexts may alias them provided the logical obligations are preserved.
Guard_TypedClaim — admit a claim quantified over a kind
Intent. Approve a state transition that asserts Claim C which quantifies over U.Kind k at TargetSlice.
Guard_TypedClaim(C, k, TargetSlice, thresholds?) — SHALL include, in this order:
- ScopeCoverage.
U.ClaimScope(C) covers TargetSlice. (USM A.2.6) - Γ_time declared. TargetSlice SHALL specify Γ_time (point/window/policy). No “latest”. (A.2.6)
- Kind definedness.
MemberOf(?, k, TargetSlice)is defined and deterministic. (C.3.2 K‑05/K‑07) - Typed compatibility.
4.1 same Context: if C expects
k′, requirek ⊑ k′. (C.3.1) 4.2 Cross Context: if Contexts differ, require a declared KindBridge that mapsk → k′and publishesCL^k ≥ cwith loss notes. (C.3.3) - Assurance penalties (R only). If step 4.2 used a KindBridge, the guard SHALL apply a monotone penalty Ψ(
CL^k) to R. If a Scope bridge was used to move C’s Scope (USM), apply Φ(CL) to R. (C.2.2 + C.3.3 + Part B) - Evidence freshness (if trust is implied). Freshness windows and expiry checks SHALL be separate predicates (not Scope). (C.2.2)
- Formality threshold (if ESG mandates). If the Context gates rigor, require
U.Formality(C) ≥ F_k. (C.2.3)
Prohibitions. — AT forbidden. KindAT MUST NOT appear in this guard. (C.3.5 AT‑01/02) — No “domain” placeholders. Guards SHALL name an addressable TargetSlice, not a fuzzy “domain”.
Guard_TypedJoin — compose two typed claims/specs (A → B)
Intent. Permit composition where A produces facts over k_A and B consumes k_B.
Guard_TypedJoin(A, k_A; B, k_B; TargetSlice) — SHALL include:
- TypedCompat.
1.1 same Context: require
k_A ⊑ k_B. 1.2 Cross Context: require KindBridge mappingk_A → k′_BwithCL^k ≥ candk′_B ⊑ k_B. - ScopeSerial. Compute
Scope_serial = ClaimScope(A) ∩ ClaimScope(B). RequireScope_serial covers TargetSlice. (A.2.6) - Penalties (R only). Apply Ψ(
CL^k) if a KindBridge was used; apply Φ(CL) if a Scope bridge was used. (C.2.2 / Part B / C.3.3) - Freshness. Guard SHALL assert required freshness windows for evidence along the serial path.
- No type‑by‑scope. The guard MUST NOT widen Scope to “fix” a type mismatch; remedies are subkind introduction, adapter, or bridge.
Mask awareness. If B expects a RoleMask(k_B): either show A’s outputs already satisfy mask constraints, or add a documented mask adapter (see 4.3) and treat any contextual constraints as part of ScopeSerial.
Guard_MaskedUse — use a RoleMask with a kind
Intent. Use U.Kind k under a RoleMask m in Context R.
Guard_MaskedUse(k, m, TargetSlice) — SHALL include:
- MaskRegistered.
RoleMask(k, m, version)is registered and versioned. (C.3.4 RM‑06) - MaskDeterminism. All mask constraints are observable on TargetSlice; if the mask narrows membership, it SHALL be deterministic. (RM‑03)
- MaskType clarity. Mask SHALL declare its type: constraint / vocabulary / composite. (RM‑04)
- Promotion cue. If mask is reused widely as a de‑facto subkind, editors SHOULD promote it to an explicit
⊑link. (RM‑05) - Cross‑context use. If
TargetSlice.Context ≠ owner(k).Context, require: 5.1 KindBridge withCL^k ≥ c; 5.2 MaskAdapter (if constraints need translation), deterministic; 5.3 Penalty Ψ(CL^k) to R. (RM‑07 + C.3.3) - ScopeCoverage.
U.ClaimScope(artifact) covers TargetSlice. (A.2.6)
Prohibitions. — Mask ≠ Kind. Guards MUST NOT treat the mask name as a synonym for the Kind. (RM‑06)
Guard\SpanUnion\Typed — publish parallel coverage across independent support lines
Intent. Publish SpanUnion of scopes for the same typed claim supported by independent lines L₁…Lₙ.
Guard_SpanUnion_Typed(C, k, {Lᵢ}) — SHALL include:
- Per‑line discipline. For each line
Lᵢ, first satisfy Guard_TypedClaim(C, k, Sliceᵢ) (or its Cross‑context variant) at the relevant slices/supports. - Independence justification. Publisher SHALL include a partition or certificate showing that essential components of
Lᵢare disjoint fromLⱼ(no shared weakest link). (A.2.6 §7.3) - Published scope.
Scope_published = SpanUnion({Sᵢ}), where eachSᵢis the serial scope for lineLᵢ. - No overreach. The union MUST NOT include slices not covered by any
Sᵢ. - Typed consistency. The entityOfConcern (kind k) is the same across lines; if not, normalize via subkinds or adapters before union.
Note. Independence and union rules are USM‑native; this macro ties them to typed claims without adding new algebra.
Guard\XContext\Typed — Cross‑context typed reuse (both bridges)
Intent. Reuse C quantified over k in another Context’s TargetSlice.
Guard_XContext_Typed(C, k, TargetSlice) — SHALL include:
- Scope bridge. There exists a Scope Bridge b_s
(source = owner(C).Context, target = TargetSlice.Context)with CL ≥ c_s. (Part B) - Kind bridge. There exists a KindBridge b_k
(source = owner(k).Context, target = TargetSlice.Context)withCL^k ≥ c_k. (C.3.3) - Mapped scope coverage.
Scope′ = translate(b_s, ClaimScope(C))andScope′ covers TargetSlice. - Mapped kind definedness.
k′ = translate(b_k, k)andMemberOf(?, k′, TargetSlice)is defined. - Penalties (R only). Apply Φ(CL(b_s)) and Ψ(
CL^k(b_k)) to R. - Loss notes. Publisher SHALL attach loss notes from both bridges (rig bias, collapsed subkinds, etc.).
Prohibitions.
— Do not “merge” bridges; Scope and Kind are orthogonal channels.
— Do not alter F or G due to CL/CL^k; penalties land in R only.
Evaluation Semantics & Order (normative)
E‑01 (Order of checks). Guards SHALL check typed compatibility first (same‑Context ⊑ or KindBridge), then Scope coverage (USM), then apply penalties to R and verify freshness.
E‑02 (Determinism). Given fixed inputs (slices, bridges, versions), evaluation MUST be deterministic. “Latest” time, unversioned Standards, or implicit mappings are disallowed.
E‑03 (Fail‑closed). Undefined membership (MemberOf) or missing bridge MUST cause guard failure.
E‑04 (No AT in guards). AT is an editorial facet and MUST NOT be referenced. (C.3.5 AT‑01/02)
E‑05 (Weakest link on congruence). For chained bridges, effective CL / CL^k is the minimum of links.
E‑06 (Separation of predicates). Scope coverage and evidence freshness SHALL be distinct predicates; do not fold freshness into Scope or kinds.
Evaluation order. Apply checks in the order defined in §5 (E‑01): typed compatibility → Scope coverage → penalties to R → freshness.
Conformance Checklist (normative)
What counts as “proven‑equivalent” (editorial rule)
A Context may adopt a different surface phrasing iff the Context’s guard contains all obligations listed in the relevant macro, in the same logical roles (typed compatibility, Scope coverage, R penalties, freshness).
Where penalties land (assurance calculus hook)
Norm. Φ(CL) (scope congruence) and Ψ(CL^k) (kind congruence) are monotone non‑increasing functions into R. Contexts SHALL calibrate them per policy; this Annex does not prescribe numeric forms.
Minimal conceptual formulas (informative)
- R after bridges:
R_final = R_base × Φ(CL_scope) × Ψ(CL_kind)(concept only). - No arithmetic on F/G. F is ordinal (thresholds only); G is set‑valued (membership only).
Decision Trees (informative)
D1 - Admitting a typed claim
- same Context? If yes → check
⊑(k ⊑ k′if expected). If no → require KindBridge. - Scope coverage? Compute
covers(TargetSlice). - Membership defined?
MemberOf(?, k(′), TargetSlice)defined? If no → deny. - Bridges used? Apply penalties Φ/Ψ to R.
- Freshness? Check windows. Optional:
F ≥ F_kif ESG mandates.
D2 - Composing A → B
- Typed:
k_A ⊑ k_Bor KindBridge tok′_B ⊑ k_B. - Scope:
Scope(A) ∩ Scope(B)covers TargetSlice. - Penalties: apply Φ/Ψ to R.
- Freshness: along serial path.
- If mask expected: either A implies it or add mask adapter.
D3 - Union across lines
- Prove per‑line typed admission.
- Provide independence partition.
- Publish SpanUnion; no extrapolation.
Guard Anti‑patterns & Remedies (informative)
Worked Examples (informative, brief)
Detailed scenarios remain in C.3 §11. This Annex sketches how the macros apply; cross‑reference as needed.
E1 — Safety braking policy (same Context).
Use Guard_TypedClaim: PassengerCar ⊑ Vehicle passes; ClaimScope ∩ plant scopes covers TargetSlice; no bridges → no penalties; freshness checked.
E2 — Cross‑plant reuse (both bridges).
Use Guard_XContext_Typed: Scope bridge (CL=2) narrows temp; KindBridge (CL^k=2) collapses EV subkind. Apply Φ(2)×Ψ(2) to R; publish loss notes.
E3 — API rule with adapter.
Use Guard_TypedJoin: producer Request → consumer expects AuthenticatedRequest. Either prove ⊑ or add adapter; Scope remains separate (API v2.3 with Γ_time window).
E4 — Masked clinic cohort across jurisdiction.
Use Guard_MaskedUse + Guard_XContext_Typed: registered mask, deterministic DOB constraint; KindBridge CL^k=1; Scope bridge CL depends on coding; penalties to R; Scope narrowed to overlap.
Rationale (why an Annex) (informative)
- Focus. Keeps guard mechanics together, easing adoption in ESG/Method templates.
- Separation. Prevents leakage of AT/typed flavor into “Scope math”.
- Auditability. Standard shapes let reviewers check determinism, bridges, penalties, and freshness quickly.
- Inter‑pattern glue. Hooks USM, Kind‑CAL, Bridges, and F–G–R without inventing new scales.
C.3.A:Annex A - How typed reasoning plugs into Compliance & Regulatory Alignment [A/I]
For managers. This section shows how to make regulatory adoption and reuse precise, auditable, and portable using Kinds, KindBridges (with a kind‑bridge congruence level, noted as CL^k for editors), and USM Scope. It cleanly separates what the law is about from where and when it applies, and routes any cross‑jurisdiction uncertainty to R (assurance). It never changes F (form) or G (scope) to hide mismatches.
C.3.A:A.1 Purpose & fit
What this solves. Regulations and standards name classes of things (“Adult person,” “Class II medical device,” “Personal data,” “Lease”). In one context they are native; in another they are foreign. Without typed reasoning, teams either (a) hand‑translate terms (silently changing meaning), or (b) reduce everything to Context labels (“domain = EU”), which cannot be checked by guards.
What we add.
- Model regulatory categories as Kinds (with
KindSignatureand⊑), - map them across Contexts with KindBridges and type‑congruence
CL^k, - express Claim scope (G) over Context slices that explicitly list jurisdiction, version, and a time selector (Γ_time), and
- apply R‑penalties (
Ψ(CL^k)and, if scope is bridged,Φ(CL)) while keeping F and G unchanged.
C.3.A:A.2 Normative obligations
Conformance. A model or authoring action conforms to A.2 iff it satisfies C‑REG‑1..C‑REG‑8 below.
C‑REG‑1 (Regulatory kinds). Regulatory categories SHALL be represented as U.Kind in the authority’s Context (e.g., AdultPerson@RegY, MedicalDeviceClassII@FDA, PersonalData@GDPR, Lease@IFRS). Each such kind SHALL have a KindSignature with a declared F level (C.3.2).
C‑REG‑2 (KindBridge). Cross‑context reuse of a regulatory category MUST declare a KindBridge with a kind‑bridge congruence level (CL^k) and loss notes (C.3.3). The mapping SHALL preserve the “is‑a / subkind‑of” direction and MUST NOT invert it.
C‑REG‑3 (Scope is USM). Regulatory applicability (jurisdiction, effective dates, product families, platforms) SHALL be expressed as Claim scope (G) over U.ContextSlice, with an explicit time selector (Γ_time). Applicability MUST NOT be encoded into kinds.
C‑REG‑4 (No synonym shortcuts). Editors MUST NOT treat legal terms as synonyms of local kinds without a KindBridge. Any term alignment SHALL be documented (mapping + CL^k + loss notes).
C‑REG‑5 (Determinism). MemberOf(e, k_reg, slice) MUST be deterministically evaluable when used in guards (no “latest law” or unstated grace periods).
C‑REG‑6 (Penalties land in R). When a claim or guard relies on Cross‑context classification (membership decided via a KindBridge), the receiving Context MUST apply the kind‑bridge penalty (based on CL^k) to R; if the Scope is also bridged, apply the scope‑bridge penalty (based on CL) to R as well. Invariant: penalty routing changes R only; F and G remain unchanged.
C‑REG‑7 (Editioning). Changes in law/regulator guidance that alter membership or applicability SHALL be recorded as content changes: update KindSignature (kinds) and/or update Claim scope (ΔG±). Guards MUST name a time selector (Γ_time) and MUST NOT rely on an implicit “latest” time.
C‑REG‑8 (Masks, not clones). Local process nuances (e.g., clinic‑specific cohort definitions) SHALL be captured with RoleMasks over the adopted kind; editors MUST NOT clone a new kind unless a stable subkind is warranted.
C.3.A:A.3 Guard macros (ready to use)
(a) Guard_RegAdopt — adopt a regulatory requirement into a Context (Plain: check scope, map the legal category, and account for penalties)
Use when an internal policy is defined by reference to an authority’s category.
(b) Guard_RegChange — react to a regulatory change (Plain: re‑issue the kind and/or scope and refresh penalties)
(c) Guard_RegXContextUse — cross‑jurisdiction use with both bridges (Plain: move scope and kind, then account for both penalties)
C.3.A:A.4 Worked examples [I]
(1) Healthcare — “Adult” dosage rule across jurisdictions
Reg source. Jurisdiction Y defines AdultPerson@RegY (AT around K2, F4) with age at least 18; your hospital Context uses AdultPatient (age at least 21).
Claim. “For all x ∈ AdultPatient: dosage ≤ D/kg for drug M.”
Adoption.
- KindBridge. Map
AdultPerson@RegY → AdultPatient;CL^k = 1; loss note: boundary mismatch (18↔21). - Scope.
{jurisdiction=Y, formulary=M, time selector (Γ_time)=from 2026‑01‑01}. - Guard.
Guard_RegAdoptpasses; R penalized byΨ(1). Policy narrows Scope to mapped cohort (age≥21) for in‑house use. - Change. If Y changes adult to ≥19 (new edition), run
Guard_RegChange: version the kind, refresh the bridge, re‑assessCL^k, update guards.
(2) Privacy — GDPR↔CCPA PII across Contexts
Reg kinds. PersonalData@GDPR, PersonalInformation@CCPA.
Internal kind. PersonalData@Product with masks per data store.
Policy claim. “No sharing of SensitiveAttribute outside processors.”
Adoption.
- KindBridges.
SensitiveAttribute@GDPR → SensitiveAttribute@Product(CL^k=2);SensitivePersonalInformation@CCPA → SensitiveAttribute@Product(CL^k=1, loss: biometric nuance). - Scope. Two policies with SpanUnion over
{jurisdiction=EU}and{jurisdiction=CA}, each with its own Γ_time windows and evidence freshness. - Guards. For CA, apply stronger R penalty (
Ψ(1)), and narrow to the mapped subset (exclude ambiguous fields). - Do not. Do not rename GDPR terms to local labels without a KindBridge.
(3) Export control — US EAR “600‑series” classification
Reg kind. EAR600SeriesItem@US (AT≈K2, F3→F4 as predicates are formalized).
Local kind. Product@Company.
Work scope. {destination=countries, end_use, time selector (Γ_time)=shipment date} for the shipping capability.
Adoption.
-
KindBridge. Map
EAR600SeriesItem@US → Product@Company;CL^k=2(loss: component kit edge cases); loss notes recorded. -
Capability guard (Method–Work).
U.WorkScope(Ship)coversJobSlice(destination, end use, time).MemberOf(product, EAR600_mapped, JobSlice)defined (classification present).- Apply
Ψ(2)to R (classification uncertainty) and, if reusing US scope text,Φ(CL_scope)too.
-
Outcome. Shipment admitted only for allowed destinations; higher R may require manual review.
(4) Finance — IFRS vs US GAAP “Lease”
Reg kinds. Lease@IFRS, Lease@USGAAP.
Local kind. LeaseStandard@Corp used in policy “recognize lease liabilities.”
Adoption.
- KindBridge.
Lease@IFRS → LeaseStandard@Corp(CL^k=2; loss: short‑term exceptions differ). - Scope.
{jurisdiction=IFRS, Γ_time=financial period, ledger=v7}. - Evidence. LA plans cover subkinds (operating vs finance) per your classification; the kind‑bridge congruence level (CL^k) drives extra testing near boundary cases.
C.3.A:A.5 Design guidance & pitfalls [I]
Do this.
- Treat regulatory categories as Kinds. Put the definition into
KindSignature(aim for F4 predicates where practical). - Make time explicit. In guards, require a time selector (Γ_time) for effective dates and grace periods. Forbid “latest”.
- Publish bridges with loss notes. If two jurisdictions’ categories are “almost the same,” say how, rate
CL^k, and note what is lost. - Split “where” from “what.” Keep Scope (G) over
U.ContextSlice(jurisdiction, plant, Standard versions) separate from MemberOf on the kind. - Route uncertainty to R. Use
Ψ(CL^k)andΦ(CL); never modify F/G to hide ambiguity.
Avoid this.
- Synonym games. Don’t alias “Adult” to local
AdultPatientin prose. Use a KindBridge. - Scope by labels. “Domain = EU” is not a guard. Use explicit
U.ContextSlicefields (jurisdiction, version, time selector) and Scope predicates. - Hiding time. Never rely on “current law”; always fix Γ_time (point/window/policy).
- Widening G to compensate for type gaps. If kinds don’t line up, introduce a subkind, add a mask/adapter, or narrow; don’t “make the scope bigger”.
C.3.A:A.6 Migration checklist [I]
- Inventory regulatory references in policies/specs.
- Create Kind cards for referenced legal categories (intent summary,
KindSignature+ F, known subkinds, AT tag if helpful). - Publish KindBridges to your local kinds with
CL^kand loss notes. - Rewrite guards to use Scope coverage (USM) plus
MemberOfon the mapped kind; add an explicit time selector (Γ_time). - Wire penalties:
Ψ(CL^k)andΦ(CL)lower R; refresh evidence windows. - Catalog RoleMasks for local nuances; promote frequently reused masks to subkinds.
C.3.A:A.7 Manager’s one‑page pattern [I]
- Question 1 — Where does the rule apply? → Scope (G) over Context slices (jurisdiction, plant, Standard, and a time selector (Γ_time)).
- Question 2 — About what things? → Kind (regulatory category) with a KindBridge if foreign.
- Gate recipe. Scope covers the TargetSlice and membership for the mapped kind is defined, and both bridges are present where needed; then apply bridge penalties to R and decide.
- Change handling. New law edition? Update
KindSignature/Bridge (kinds) and/or Scope (ΔG); never rely on “latest.” - Accountability. Keep loss notes, CL/CL^k, and Γ_time in the decision record.
C.3.A:Annex B - How typed reasoning plugs into Assurance Lanes (VA/LA/TA) & Evidence design [A/I]
Intent (manager’s view). Typed reasoning turns “prove/test/qualify” into a repeatable plan. By making what the rule talks about explicit (named Kinds, their subkinds, and optional RoleMasks), you can:
- design proof obligations that actually quantify over the right things (VA),
- build test plans that cover the right variants/subkinds in the right context slices (LA), and
- isolate tool risk (TA) instead of letting it bleed into scope or type semantics.
Invariant reminders.
— Scope (G) is where a claim holds — expressed over U.ContextSlice (with an explicit time selector, Γ_time).
— Kind membership is which things the claim ranges over inside that slice — checked with MemberOf(… , kind, slice).
— Bridge penalties: the scope‑bridge penalty (based on CL) and the kind‑bridge penalty (based on CL^k) both lower R (assurance). They never change F (form) or G (scope).
C.3.A:B.1 What you get with typed assurance [I]
- Targeted proofs (VA). If a policy says “for every PassengerCar …” (notation hint: ∀x:PassengerCar), the VA lane now has a clear target. You can prove obligations once for the kind (and its subkinds), instead of re‑proving per ad‑hoc label.
- Subkind‑aware test plans (LA). Test matrices are indexed by subkinds (and RoleMasks) × context slices; coverage stops being accidental.
- Deterministic guards. A test/proof either applies to the TargetSlice and Kind (
Scope covers & MemberOf defined) or it doesn’t. No “latest,” no silent widening. - Clean tool boundaries (TA). You qualify the prover/model‑checker/classifier once and route tool confidence to TA, not to “broadened” claims.
C.3.A:B.2 Normative obligations for evidence design
EA‑1 (Two checks). Every VA/LA artifact that supports a typed claim SHALL bind both:
- Scope predicate:
U.ClaimScope(Claim) covers TargetSlice(with explicitΓ_time), and - Kind predicate:
MemberOf(?, k, TargetSlice)is defined (deterministic).
EA‑2 (Subkind coverage). When a claim quantifies over k, target‑contexts SHALL justify LA coverage per relevant subkind of k (or per RoleMask if masks stand in for stable subkinds). “Representative set” MUST be stated explicitly.
EA‑3 (Independence for unions). If a published SpanUnion of evidence lines is used to enlarge covered area, independence of lines SHALL be documented (no shared weakest link).
EA‑4 (Bridges accounted). If a VA/LA artifact travels across Contexts:
-
Scope movement SHALL use a Scope Bridge (Part B) with CL and apply the scope‑bridge penalty to R.
-
Kind movement SHALL use a KindBridge (§ C.3.3) with CL^k and apply the kind‑bridge penalty to R. Neither movement SHALL alter F or G.
Neither movement SHALL alter F nor G.
EA‑5 (Freshness). LA evidence SHALL declare freshness windows tied to Γ_time (no implicit “latest”). Expiry MUST fail guards closed until refreshed.
EA‑6 (No scope‑by‑wording). Editors MUST NOT widen G by rewriting a claim to sound “more general.” Widening G (ΔG+) is permitted only with new support that truly enlarges the set of slices.
EA‑7 (TA separation). Tool qualification (TA) SHALL be tracked independently. VA/LA guards MUST NOT substitute “tool is trusted” for content proof/coverage.
C.3.A:B.3 Designing the evidence matrix [I]
A practical way to plan LA/VA is a matrix:
- Choose rows. Start with the kind and list relevant subkinds (notation hint: kᵢ is a subkind of k) or stable RoleMasks.
- Choose columns. Split your declared Scope (G) into named slices you intend to support (e.g., “dry, speed up to 50” and “wet, speed up to 40” with specific rigs and versioned Standards).
- Fill cells. Attach one or more evidence units per cell (proof obligations for VA; test campaigns/monitoring windows for LA). Mark bridged cells and their CL/CL^k penalties to R.
Tip. For formal kinds and “up‑to‑iso” kinds (AT K2/K3), expect more rows (more variants to cover). For instance‑like kinds (AT K0), expect fewer rows and tighter columns (narrow slices, stricter freshness).
C.3.A:B.4 VA lane — proofs that match the kind [A/I]
What VA contributes. Proofs reduce ambiguity and eliminate many LA proof requirements when they truly quantify over the intended kind and live in the declared Scope.
VA‑patterns (informative):
- Proof over the Kind (F7–F8). “For every PassengerCar, the property holds” (notation hint: ∀x:PassengerCar). If the property depends on subkind‑specific rules, split lemmas per subkind.
- Proof‑carrying components. When the content is F8 (dependent types), the build rejects violations; LA can shrink to conformance smoke within the slices.
- Up‑to‑iso (AT K3). Equational reasoning “up‑to‑iso” is acceptable only if the KindSignature works at that level and receivers accept KindBridge that preserves equivalences.
VA‑obligations (normative):
- VA‑1. A proof carrier SHALL cite the Kind it quantifies over and reference the Claim scope slices it assumes.
- VA‑2. Cross‑context acceptance of proofs SHALL use both bridges (Scope+Kind) and apply Φ/Ψ penalties to R (never to F/G).
- VA‑3. If the proof relies on tool kernels, their TA status SHALL be disclosed; weakening TA MUST NOT be “paid for” by silent scope widening.
Mini‑example (VA).
Policy P: “∀ x: PassengerCar. stoppingDistance(x) ≤ 50 m on dry at speed≤50.”
— Kind: PassengerCar ⊑ Vehicle (K2), signature F4 (predicates).
— Scope: {surface=dry, speed≤50, rig=v3, Γ_time=rolling 180 d}.
— Proof: a proof assistant lemma over PassengerCar (tool choice is context‑local).
— Reuse to Plant‑B: a Scope Bridge with CL=2 (rig bias) and a KindBridge with CL^k=3 (same classification). Apply the scope‑bridge penalty for CL=2 and the kind‑bridge penalty for CL^k=3 to R.
C.3.A:B.5 LA lane — tests & monitoring that cover the right variants [A/I]
What LA contributes. Empirical assurance for claims with executable semantics or physical interfaces; especially when F ≤ F6 or when stochastic/real‑world effects matter.
LA‑patterns (informative):
- Cover by subkind. Test at least one representative per subkind; add more where variability inside a subkind matters.
- Boundary probing. Concentrate tests near KindSignature and Scope boundaries (e.g., temp limits, speed caps).
- Hybrid checks (F6). When software controllers interact with physical systems, ensure both sides declare obligations; include their interaction cases in the matrix.
- Monitoring windows. For live systems, define Γ_time policies (e.g., rolling 30 d) and tie alerts to kind‑aware metrics (“error rate per
ServiceInstance”).
LA‑obligations (normative):
- LA‑1. Each test campaign SHALL specify rows/columns in the evidence matrix and attach Scope/MemberOf predicates to each run.
- LA‑2. Freshness windows SHALL be explicit and enforced in guards (no “latest”).
- LA‑3. If a KindBridge merges subkinds, test plans SHALL be adjusted (more cells, stricter acceptance), and the kind‑bridge penalty (based on CL^k) applied to R.
- LA‑4. Publishing SpanUnion coverage requires the independence note (which support lines differ).
Mini‑example (LA).
Claim: “For all x ∈ Vehicle: brakeDistance ≤ 50 m on dry, ≤ 40 m on wet.”
— Rows: {PassengerCar, LightTruck}.
— Columns: {dry, ≤50}, {wet, ≤40} with rigs and versions.
— Cells: PC/dry covered by track tests; LT/wet by simulation + surrogate tests (independent lines → SpanUnion allowed).
— Bridge to jurisdiction Y collapses EV vs ICE ⇒ CL^k=2. Apply Ψ(2) to R; add extra wet tests to compensate.
C.3.A:B.6 TA lane — tool qualification where it belongs [A/I]
What TA contributes. Confidence in provers, checkers, model‑checkers, data classifiers and pipelines. TA is about the machinery, not the claim or kind semantics.
TA‑patterns (informative):
- Prover kernels. Audit/qualification of the kernel version used for VA proofs.
- Automated Model‑checkers. Qualification against seeded faults; document limits (precision, nondeterminism).
- Classifiers used for
MemberOf. If membership uses ML or rules engines, qualify the classifier separately; any drift monitoring belongs to LA freshness.
TA‑obligations (normative):
- TA‑1. Tools critical to VA/LA SHALL declare their qualification status and version; guards SHALL reference these declarations when they matter. TA‑2. Lower tool qualification MUST NOT be hidden by relaxing F or widening G. target‑contexts may offset it by demanding more evidence in R (for example, extra tests), per policy.
C.3.A:B.7 Guard macros for evidence planning & attachment
Guard_EvidencePlan_Typed — approve a plan that is adequate for a typed claim. Plain reading. The first macro checks that the plan names the rows (kinds or masks) and columns (slices), that scope and membership can be checked for each cell, that any Cross‑context moves declare bridges, and that penalties are budgeted in R.
Guard_EvidenceAttach_Typed — attach concrete evidence to a state change. Plain reading. The second macro checks that each attached evidence unit clearly states which row and column it covers, binds scope and membership in a reproducible way, applies bridge penalties to R, and respects freshness.
C.3.A:B.8 Anti‑patterns & remedies
C.3.A:B.9 End‑to‑end example (manager’s cheat‑sheet) [I]
Scenario. You want to publish “∀ x: PassengerCar. brakeDistance ≤ 50 m dry; ≤ 40 m wet” across two plants.
- Kinds.
PassengerCar ⊑ Vehicle(K2, signature F4). - Scope (G).
{surface in {dry, wet}, speed limits, rig version, time selector (Γ_time)=rolling 180 days}in Plant‑A. - VA. Prove the property for PassengerCar using a proof assistant, and cite the Scope slices it assumes.
- LA. Build an evidence matrix with rows
{PassengerCar}and columns{dry, up to 50}and{wet, up to 40}, including rig variants; add boundary tests near the limits. - TA. Qualify the prover kernel and the automated checker used for wet surrogates.
- Bridge. To Plant‑B: a Scope Bridge with CL=2 (rig bias) and a KindBridge with CL^k=3 (same classification).
- Penalties. Apply the scope‑bridge penalty for CL=2 and the kind‑bridge penalty for CL^k=3 to R. Per policy, add extra test cells in Plant‑B to compensate for rig bias.
- Guards. Use
Guard_EvidenceAttach_Typedon the state change; include freshness checks.
Outcome. A defensible, auditable publication: typed, scoped, with clear evidence coverage and explicit risk penalties — no conflation of abstraction with applicability, and no tool risk smuggled into content.
C.3.A:Annex C. ESG guards
Status note. This profile restates the guard semantics from §4 for ESG/Method contexts. It does not add obligations; where wording diverges, §4 controls.
C.3.A:C.1 ESG guard obligations (normative)
When a state transition publishes or affirms a claim that quantifies over kinds, the guard SHALL:
-
Scope coverage (USM).
U.ClaimScope(Claim) covers TargetSlice(singleton or finite set) and TargetSlice declaresΓ_time(no “latest”). -
Typed definedness. A deterministic membership check is available for every kind used by the claim in the TargetSlice. If membership cannot be evaluated in that context, the guard fails closed.
-
Typed compatibility (same Context). If a downstream consumer expects a specific kind, then for each kind used by the claim either:
- the used kind is an is‑a / subkind‑of the expected kind, or
- a documented RoleMask for the expected kind is used and its constraints are met and observable in the TargetSlice.
-
Typed compatibility (Cross‑context). If any referenced kind is used across Contexts, a KindBridge SHALL be declared with a published type‑congruence level (minimum acceptable level per Context policy), order preserved (no inversions), and loss notes. The guard SHALL apply the kind‑bridge penalty to R.
-
Scope translation (Cross‑context claim use). If the Claim’s scope originates in another target‑context, a Scope Bridge with a published congruence level is required; apply the scope‑bridge penalty to R.
-
Formality threshold (if gated). If the ESG state requires rigor, enforce
U.Formality(Claim) ≥ F_k(C.2.3). (Note: Raising F does not widen G; do not substitute.) -
Evidence freshness (R). Where the new state implies trust, assert freshness windows and confirm no expired bindings.
Prohibitions (normative).
- Do not widen G to “hide” a type mismatch. Fix typed compatibility (introduce a subkind, use a RoleMask, publish a KindBridge) or reject.
- Do not treat a mask name as a kind—masks must be registered and deterministic.
- Do not infer G from the size of a kind’s Extension; Scope ≠ Extension.
Method–Work guard obligations (normative)
To admit a capability for a specific Work step at JobSlice, the guard SHALL:
-
Work scope coverage (USM). The capability’s Work scope covers the JobSlice, and the JobSlice includes an explicit time selector (Γ_time).
-
Measures & qualification. All required
U.WorkMeasureshold at JobSlice and theU.QualificationWindowis valid atΓ_time. -
Typed inputs (same Context). For each declared input kind (or RoleMask), assert:
- Membership check available: the system can deterministically decide whether the input belongs to the expected kind in this JobSlice.
- Compatibility: the provided input kind is an is‑a / subkind‑of the expected kind, or the RoleMask constraints are satisfied and observable.
-
Typed outputs and post-conditions (if declared). If the capability guarantees an output kind
k_out, record the obligation to demonstrateMemberOf(output, k_out, JobSlice)(typically via conformance tests or audits). -
Cross‑context typed use. If inputs and outputs are typed in a different target-context than the capability or JobSlice:
- KindBridge(s) are required with a published type‑congruence level and loss notes; apply the kind‑bridge penalty to R.
- If the capability resides in another target‑context, a Scope Bridge with a published congruence level is required; apply the scope‑bridge penalty to R.
-
No substitution by G. Do not “fix” a typed mismatch by widening the Work scope. Use an adapter or a RoleMask, or reject.
Guard macros (ready‑to‑use)
ESG_TypedGate(Claim, TargetSlice, Kinds, thresholds) Manager view: The following macros are for editors; target‑contexts may automate them if desired. Managers can read the comments on each step; the checks are the same ones described in Plain language above.
MethodWork_TypedGate(Capability, JobSlice, InputKinds, OutputKinds, thresholds)
Worked examples (manager‑focused)
(A) ESG — Promote a braking policy to Effective.
Claim. “For all vehicles: braking distance is ≤ 50 m on dry and ≤ 40 m on wet.”
TargetSlice. {surface∈{dry,wet}, speed≤50 km/h, rig=v3, Γ_time=rolling 180 d}
Kinds. Vehicle (K2, KindSignature at F4); the consumer subsystem expects PassengerCar.
Guard.
- Scope covers TargetSlice (USM ✓).
- Definedness of
MemberOf(?, Vehicle, TargetSlice)✓. - Typed compatibility:
PassengerCar ⊑ Vehicle✓. - No bridges → no penalties.
- F‑threshold:
Formality(Claim) ≥ F4✓. - Freshness: evidence ≤ 180 days ✓. Result: Transition allowed. F/R apply weakest‑link on support paths; G remains the set declared.
(B) Method–Work — Admit “RiskScore” step with typed input.
Capability. ComputeRiskScore expects AuthenticatedRequest; promises SLOs (latency ≤ 50 ms, error ≤ 0.5 %).
JobSlice. {api=v2.3, region=eu‑west, Γ_time=now, traffic_class=gold}
Inputs. Producer emits Request (no auth guarantee).
Guard.
- Work scope covers JobSlice; Measures & QualificationWindow ✓.
- Typed inputs:
MemberOf(?, AuthenticatedRequest, JobSlice)must hold. Not true for rawRequest. - Remedy: insert an adapter that enforces/attests auth → yields
AuthenticatedRequest. - No Cross‑context → no bridges. Result: Admitted with adapter; Scope unchanged; R relies on adapter evidence. Widening Work scope is not acceptable to bypass typed mismatch.
(C) Cross‑context ESG — Adopt policy across plants.
Claim Context. SafetyLab@2026. target Context. PlantB@EU.
Kinds. Vehicle ↦ TransportUnit via KindBridge with CL^k=2 (EV/ICE collapsed); Scope Bridge from lab to plant with CL=2 (rig bias ±2 %).
Guard.
- Translate Scope and cover
TargetSlice_B. - Translate Kind and ensure
MemberOf(?, TransportUnit, TargetSlice_B)is defined. - Apply the scope‑bridge penalty (level 2) and the kind‑bridge penalty (level 2) to R; publish loss notes. Result: Transition allowed with reduced R; G is the mapped set; F unchanged.
Anti‑patterns & remedies (normative where noted)
C.3.A:End
Decision Theory (Decsn-CAL)
Type: Calculus (C) Status: Stable Normativity: Normative unless marked informative
At a glance. C.11 is the choice-calculus pattern for the moment when options already exist and the working question is which option to choose, including whether another probe is worth its cost before commitment.
Problem frame
Use this when. Use this pattern when one DecisionSubject already has an OptionSet in hand and the real question is how to choose among those already-available options under uncertainty, preference, causal or subjunctive dependence, and bounded probing or computation.
Start here when. Start here when a person, team, organization, or other decision-capable system must decide whether to choose now or spend more effort on probing, information gathering, or computation before choosing.
First output. The first useful output is one explicit DecisionSubject, one explicit OptionSet, one explicit comparison basis, one explicit ChoiceRule, and one explicit ChoiceResult saying whether the best next move is choose now, reject the current set, probe more, or move to a neighboring question.
If that first output still cannot be written honestly, the current comparison state is not late-stage choice doctrine yet. The case is still unfinished local choice work or one neighboring question in disguise.
Immediate failure indicators.
- The chooser is still moving between person, team, organization, or another collectivity-bearing level.
- The current comparison is still inventing, expanding, or reframing options while also claiming to compare them.
- The current comparison says more information would help but cannot name one next probe that could still change the result.
- The current result is really surfacing one selected set or one enactment plan rather than one local choice.
First-minute questions.
- Who or what is actually choosing here, and at what chooser-bearing level?
- What options are already on the table now?
- What current basis is being used to compare them?
- What next probe could still change the choice, if any?
- Is this still local choice, or has the question already moved to search, pool policy, publication, or enactment?
Typical reroutes. C.18 when the real question is still inventing or reframing options; C.19 when the working question is how broadly to explore or exploit the candidate pool; C.24 when one option is already chosen and the work has become sequencing or enactment; A.13 / C.9 when the hard question is agenthood rather than choice; A.18 / A.19 when the mathematical support question itself becomes primary.
Common neighboring-pattern mistakes. Do not use C.11 to hide search work inside "decision", to hide candidate-pool policy inside one local choice, or to hide execution planning inside one generic rationality account. Do not treat selected-set publication or shortlist semantics as if they were the same question as deciding.
What goes wrong if this pattern is missed. Search, selection policy, planning, and choice doctrine collapse into one blurred notion of rationality. Teams either choose too early because pool policy was never stated, keep probing without one reason the next probe is still worth its cost, or leave only one vague claim that "a decision was made" without one explicit decision record naming the current result.
What this pattern buys. This pattern gives one stable place to compare classical, causal, success-first or subjunctive, bounded-resource, active-inference-adjacent, and quantum-like decision lines without silently reassigning search, selection, or planning doctrine to the wrong question. In practice it buys one explicit answer to four questions: choose now, reject the current set, probe again, or reroute.
Not this pattern when. Do not start here when the current question is still generating candidate options, governing exploration or exploitation over a candidate pool, publishing shortlisted-set semantics, or sequencing execution under an operational plan.
Decision work often fails not because no options exist, but because the choice among existing options is never typed as its own question. C.11 starts from one narrower and more useful center: one decision subject choosing among already-available options, including whether more probing is worth the cost before the choice is fixed.
Problem
Many systems have options on the table but still lack one explicit doctrine for what makes one option rational to choose. They mix together at least four different questions.
One question is still generating candidate options, variants, or open-ended search directions. Another question is governing how broadly a candidate pool should be explored or exploited before narrowing. A third question is planning, sequencing, replanning, or enacting the move once a choice has already been made. The fourth question, and the one governed here, is choosing among already-available options under uncertainty, dependence, and bounded deliberation.
A second distortion appears when decision theory is reduced to one thin slogan about expected utility. Real choosers face evidential and causal distinctions, subjunctive or success-first cases, probe costs, information value, computation value, and situations where the chooser is not just one isolated individual.
Without one explicit place for choice calculus, search, candidate-pool policy, and planning rush into the same question, while the actual doctrine of choosing among live options disappears behind generic talk about rationality.
Solution
Causal-use hook for choice records
When the admissible choice among an existing OptionSet depends on an effect claim, intervention claim, counterfactual comparison, causal policy claim, or off-policy causal evaluation, the ChoiceResult keeps the decision-theory question local and cites C.28 for the causal-use question and support basis.
Optional ChoiceResult.causalUseSpec?:
The causal-use tail may be omitted only when the choice result does not reach CausalUseActivation: it is not decision-bearing on the causal claim, not publication-bearing, not assurance-bearing, and not reused as support for deployment, fairness, benchmark, or downstream selection. If causal wording changes the admissible choice result, the tail is present or the causal wording is downgraded.
What changes in practice: a decision record that says "choose this because it improves outcome", "choose this because it would have prevented harm", or "choose this policy because replay shows it is better" must state whether the claim is observational association, interventional action/effect, or counterfactual comparison before the ChoiceResult is treated as supported.
What this does not authorize: [C.11](/generated/patterns/C.11) does not identify causal effects, certify target-trial emulation, validate off-policy causal evaluation, or decide counterfactual sampling realizability; it emits one ChoiceResult and redirects the causal-use question to [C.28](/generated/patterns/C.28).
Primary EntityOfConcern and admissible decision move
C.11 governs theory-side choice among already-available options. Its selected decision move is deciding what should be chosen from the current OptionSet, including whether further probing, information gathering, or computation is rational before the choice is fixed.
The OptionSet choice question begins only after an option set already exists. It does not govern open-ended generation of options, and it does not govern the execution order of a plan after a choice has already been made.
Decision discipline over a live option set
A conforming C.11 pass does not stop at naming schools of decision theory. It carries one usable choice discipline over a live OptionSet, and it ends with one explicit ChoiceResult under one explicit ChoiceRule.
-
Fix the chooser and the choice-bearing level. State one
DecisionSubjectand oneDecisionSubjectGranularity. If the real dispute is still about who or what counts as the chooser, coordinate withA.13 / C.9instead of hiding that dispute inside one local choice. -
Freeze the current option set. State the already-available options being compared now as one
OptionSet. If the hard work is still inventing, expanding, or reframing the options, stop here and applyC.18. -
Make the comparison basis explicit. State one
PreferenceOrderor oneEvaluativeMeasure, plus oneBeliefStateand oneOutcomeModel. The comparison is not usable if some options are being judged under one belief state and other options under one later, unmarked update. If two options are only comparable after one further probe or one model revision that changes the belief state or outcome model before comparison, say that the current comparison is unfinished and apply step 5 rather than pretending that one silent basis shift already solved it. -
Choose the dependence layer that actually governs the case. Start from the evidential baseline when the choice is being compared through likely outcomes under the current
BeliefState. Add oneInterventionModelwhen taking one option changes the world through intervention rather than mere observation. Add oneCounterfactualModelplus oneSubjunctiveDependenceRelationwhen the case depends on one predictor, one structurally linked chooser, or one decision-procedure coupling that intervention talk alone does not capture. Use the least-committing dependence layer that still covers the live case, and do not switch layers across options without saying so explicitly. -
Run the probe-worthiness test before commitment. State one
ProbeActionSet, oneProbeBudget, and oneCostToProbe. UseValueOfInformationfor additional observation or measurement, andValueOfComputationfor additional reasoning, simulation, or search over the already-available options. This rule is intentionally local or myopic: it judges the best next feasible probe over the currentOptionSetand current comparison basis, not one full sequential or non-myopic experimental program. RicherOEDlines may strengthen this doctrine, but the localC.11closure rule already has to decide whether the next feasible probe can still change the current choice. If no feasible further probe fits the remainingProbeBudget, or if the best available probe no longer justifies itsCostToProbe, close under the current comparison basis. If a feasible probe is still worth its cost, and that probe could still change which option survives or whether the currentOptionSetshould be rejected, run it, update theBeliefStateandOutcomeModel, and return to step 3. If one choice result is already fixed and the remaining probe would change only execution-path description, call-plan ordering, enactment budget, or checkpointing of that chosen move, stop treating the probe as local choice doctrine and applyC.24. -
Apply one
ChoiceRuleand emit oneChoiceResultplus the next question. End with one explicit result:choose now,reject current set,probe again, orreroute because this is no longer local choice. If the result ischoose now, name the winning option or the retained tie-set plus the reason no remaining feasible probe is worth its cost. If the result isreject current set, name the reason no current option survives under the present basis and, when more work follows, the neighboring question that now takes over. If the result isprobe again, name the next probe and the exact comparison defect it is supposed to repair. AC.11pass is done only when it names the lawful next move and the reason that move is lawful.
Well-formed comparison state
Well-formedness constraint: a live C.11 comparison state is usable only when the decision record states all of the following:
- one
DecisionSubjectat oneDecisionSubjectGranularity; - one current
OptionSet; - one current comparison basis through
PreferenceOrderorEvaluativeMeasure, plus oneBeliefStateand oneOutcomeModel; - one active dependence layer for the current comparison, unless the record explicitly says that comparison is still being reopened;
- one current account of whether another probe is still feasible and worth its cost.
The comparison is still unfinished, not yet wrong but not yet closeable, when any of the following remains true:
- the chooser is still shifting between person, team, organization, or another collectivity-bearing level;
- the option set is still changing while the record also claims to rank the options;
- one option is being judged under one belief state and another under one later update that is not itself declared as the next probe result;
- one heavier dependence layer is invoked for rhetorical force, but the record never states what defect of the lighter comparison it repairs;
- the record says more information would help, but never says which probe could still change the choice and why.
Minimal admissible decision semantics
This minimal choice doctrine does not settle every decision-theory dispute, but it already supports some semantic moves by value and rules out others.
The following are lawful in this C.11 body when they are stated explicitly:
- one incomplete or only partially ordered
PreferenceOrder, so long as the unresolved comparison stays visible through one retained tie-set, one further probe, or one honestreject current setresult rather than one fake winner; - one
EvaluativeMeasurefor magnitude, threshold, or trade-off-sensitive cases, so long as the measure being used now is explicit enough to explain why the current result follows under it; - one temporary unresolved criterion conflict, so long as the record says whether the present comparison is using one priority order, one threshold, one explicit trade-off measure, or one unfinished state that still blocks closure;
- one explicit
BeliefStaterevision, so long as it enters the comparison as one named probe result or one named model repair rather than as one silent basis shift; - one widened
DecisionSubjectat person, team, organization, or other collectivity-bearing level, so long as the current subject-bearing level is explicit and the record does not hide unresolved cross-scale or cross-collective conflict behind one generic chooser label.
The following are not admissible in this C.11 body:
- silently totalizing one genuinely partial preference relation just to force
choose now; - silently switching from one criterion mix or one belief state to another across options;
- pretending that unresolved cross-scale or cross-collectivity conflict is already one settled local ranking when the aggregation question has not actually been discharged;
- using one polished record shape as a substitute for one stated comparison doctrine.
This is why C.11 is more than one note-taking protocol. The body already supports local incompleteness, partial order, explicit trade-off measures, and wider chooser-bearing cases, but it requires those semantic facts to change the lawful result rather than remain hidden beneath one elegant summary line.
Probe-worthiness rule
Another probe is worth doing only when all three conditions hold together:
- the probe fits inside the remaining
ProbeBudget; - the expected gain from the probe, through
ValueOfInformationorValueOfComputation, is large enough to justify itsCostToProbe; - the probe can actually change the local choice result by changing the ranking, breaking or creating a tie, showing that no current option survives, repairing one missing comparison, or showing that the question should reroute.
This is the current local or myopic probe-worthiness rule for C.11: judge the best next feasible probe over the current OptionSet, not one whole non-myopic experiment design over longer horizons. Later sequential or non-myopic OED may strengthen this doctrine, but they do not move the local-choice question out of C.11.
Do not keep probing merely because uncertainty remains. Uncertainty is ordinary. What matters is whether one feasible next probe can still change what should be chosen, or whether the current OptionSet should be rejected, from the current local choice question.
If the best available next probe cannot change which option survives, cannot change whether the current set should be rejected, or cannot justify its cost, the correct result is not one vague statement that the case is hard. The correct result is one explicit ChoiceResult under the current basis and current ChoiceRule.
If the next probe would no longer change which option survives but would only change how one already-chosen move gets enacted, budgeted, or checkpointed, the question has already crossed to C.24.
ChoiceRule versus ChoiceResult
ChoiceRule and ChoiceResult are not the same kind of thing.
ChoiceRuleis the doctrine or operator that says how the current comparison basis, dependence layer, and probe-worthiness value support one next move.ChoiceResultis the emitted record stating which next move is lawful now under that rule.
The operational answer of this pattern is therefore one emitted ChoiceResult under one explicit ChoiceRule. The result is complete only when it states the next move and the condition that makes that move lawful.
Only four result forms are lawful here:
choose nowreject current setprobe againreroute
A fifth soft result such as "keep thinking", "stay with the current view", or "the case is still complex" is not a conforming output. It is one unfinished state that still needs to be typed.
For choose now, the emitted ChoiceResult should show:
- the selected option or the retained tie-set;
- the comparison basis under which that result currently holds;
- the reason no still-feasible probe is worth its cost.
For reject current set, the emitted ChoiceResult should show:
- that no member of the current
OptionSetsurvives under the present comparison basis; - the exact shared defect, threshold failure, or dominated-outcome reason that defeats the current set;
- the next neighboring question only when more work now follows, such as new option generation or one explicit escalation path.
For probe again, the emitted ChoiceResult should show:
- the exact next probe;
- the comparison defect that probe is expected to repair;
- the reason the probe is still worth its cost.
For reroute, the emitted ChoiceResult should show:
- the neighboring pattern authority that now governs the question;
- the reason this is no longer local choice among already-available options.
Closure rule over the current OptionSet
The comparison may close as choose now only when all of the following are true together:
- the current
OptionSetis stable enough that the decision record is no longer still inventing options; - the current comparison basis is explicit enough to state why one option survives or why one tie-set remains;
- no still-feasible next probe is expected to change the survivor relation with enough expected value to justify its cost;
- the record is still governing local choice rather than pool policy, publication, or enactment.
The comparison may close as reject current set only when all of the following are true together:
- the current
OptionSetis explicit and stable enough to reject as the present choice set; - the current comparison basis is explicit enough to show why no member survives under the present basis;
- no still-feasible next probe is expected to rescue one member with enough expected value to justify its cost;
- the result is still one local choice conclusion rather than one disguised pool-policy, publication, or enactment result.
The comparison should close as probe again only when all of the following are true together:
- one next probe is named by value;
- that probe fits the remaining
ProbeBudget; - that probe is expected to repair one named comparison defect;
- that repaired defect could still change which option survives, whether the current set should be rejected, or whether the question should reroute.
The comparison should close as reroute when the record has already learned that the selected decision move changed:
- to
C.18when the option set itself is still under invention or reframing; - to
C.19when the question is now how broadly to keep exploring or exploiting one candidate pool; - to
C.24when one choice result already exists and the next task is now sequencing, enactment, or execution-path probe work; - to
G.5when the next task is now selected-set surfacing or publication.
If none of those closure conditions can yet be satisfied, the record is still unfinished. It is not rescued by richer terminology alone.
Minimal decision-record form
A minimal C.11 decision record has this shape:
The record does not need that exact syntax. It does need that exact content.
If the record does not state the current chooser, current options, current comparison basis, current ChoiceRule, current probe decision value, and current ChoiceResult, then it still behaves more like one doctrinal essay than one usable decision record.
Use branch language only when it changes the actual comparison being performed.
Resource-aware choice is one lens over declared source families
- Start from one declared source family or one declared source-family composition such as
Front,Archive, orFront+Archive. - Apply one declared decision lens over that source family rather than inventing one hidden universal winner rule.
CostToProbe,ValueOfInformation, andValueOfComputationbelong to that lens-side choice doctrine.- They may justify another probe, one changed local comparison outcome, or one stop decision, but they do not rename the current
DominanceSetand do not publish one shortlist-family result. - If one candidate remains worth probing because its expected information value still exceeds its expected cost, say that explicitly as one lens-side choice judgement.
- If one archive point remains worth probing because it may change the frontier later, keep that as one resource-aware choice claim, not as evidence that the point is already on the current front.
- The kernel floor here is:
A.19.SelectorMechanismremains the cited set-return floorSelectionSlotremains the selector output floor- if later selector-facing publication is required, that set-returning floor may support one
Shortlistor oneRankedShortlistinG.5rather than one forced single winner
Classical evidential baseline
Stay with the classical evidential baseline when the question is to compare already-available options through preferences, utilities or desirabilities, beliefs, and likely outcomes under uncertainty.
In this baseline, the options are being compared as evidence about what consequences are likely if they are chosen. This is the ordinary default when intervention structure, predictor-coupling, or context-sensitive non-commutativity are not yet doing real work in the case.
Typical practical cash-outs are:
choose nowbecause the current sharedBeliefStateandOutcomeModelalready make one option or tie-set survive, and no still-feasible probe is worth its cost;probe againbecause one further observation, measurement, or comparison pass could still change the ranking without requiring a heavier causal, subjunctive, or context-order repair;reroutebecause the selected decision move is no longer really comparing one fixedOptionSet, but has become search, pool policy, publication, or enactment work.
The baseline is still unfinished when the current comparison invokes it but cannot keep one shared BeliefState and OutcomeModel across the compared options, or when one heavier defect is already live and the current comparison still pretends one plain evidential comparison is enough.
Causal repair
Switch on one InterventionModel when taking one option changes the world through intervention rather than merely signaling which outcome was already likely.
What changes here is not the prestige label of the theory line, but the comparative question itself: the working question is no longer only what this option indicates about the outcome, but what this option causes in the outcome structure.
Typical practical cash-outs are:
choose nowbecause, under the declared intervention structure, one option now causally dominates or remains the survivor and no remaining feasible probe can reverse that causal ranking;probe againbecause one intervention-relevant uncertainty still blocks a lawful causal comparison and one named next probe could still change which option causally survives;reroutebecause the intervention-use question has already moved from local choice into enactment planning, protocol design, or one neighboring question.
This repair has not yet landed if the comparison still treats options only as evidence after invoking causal language, or if an InterventionModel is named without stating what defect of the lighter evidential comparison it repairs.
Success-first or subjunctive repair
Switch on one CounterfactualModel plus one SubjunctiveDependenceRelation when Newcomb-like, blackmail-like, or other predictor-coupled cases remain under-described by the older evidential-versus-causal split.
What changes here is that the comparison must stay answerable to linked decision procedures, predictors, or structurally similar choosers rather than only to direct intervention on one local event.
Typical practical cash-outs are:
choose nowbecause, under the declared counterfactual or subjunctive structure, one option survives once the predictor-coupled comparison is made explicit;probe againbecause one further model clarification, predictor assumption check, or decision-procedure comparison could still reverse the current survivor relation;reroutebecause the selected decision move is no longer settling local choice doctrine but has become one wider characterization, negotiation, or enactment question that only borrowed predictor-coupling language.
If that coupled structure is not live, do not activate this branch. If a predictor-coupled or success-first repair is named but the linked structure that changes the comparison is still unspecified, the branch is not yet load-bearing in the current decision.
Active-inference neighboring repair
Bring the active-inference line into view when the chooser is embodied, online, and socially coupled, and when the decision cannot be understood as one disembodied choose-then-act moment.
What changes here is practical next-move logic, not one neighboring-school label. The comparison is no longer over one frozen snapshot alone. The comparison must now ask whether one more observation, one more coupled update, or one more socially mediated or role-expectation clarification actually changes what should be done now.
This minimal choice doctrine makes that social-expectation pressure explicit, but it does not yet operationalize one full ROE or SocialExpectationRegime object model inside C.11. If that heavier machinery is itself what the case hinges on, the decision record should say so honestly rather than pretending the local C.11 floor has already settled it.
Typical practical cash-outs are:
probe againbecause one further embodied observation, coupled update, or explicit role-expectation clarification can still change the state estimate enough to reverse the current survivor relation;choose nowbecause delay itself now worsens the state being managed, closes the window in which the preferred option remains feasible, or leaves no lawful time for one more socially mediated check;reroutebecause the question has already become enactment sequencing or agent-characterization work rather than local choice.
C.11 keeps the choice question visible there, but A.13 and C.9 still govern the narrower question of what kind of agent or agential system is in play, and C.24 still governs later sequencing and enactment once a choice result has already been fixed.
Do not invoke this line only because one agent is acting in the world. Invoke it when embodied coupling, online updating, or explicit social-expectation pressure actually changes what the chooser should do now from the current OptionSet.
Quantum-like neighboring repair
Bring the quantum-like line into view when context effects, order effects, response-replicability tension, or incompatible-question structure change the comparative state enough that one simple commutative probability reading no longer fits.
What changes here is the practical structure of comparison. One order of questioning or one framing path may produce one different survivor relation from another. The comparison must therefore either stabilize the comparison under one declared order or show why one more clarifying pass is still needed.
This minimal choice doctrine keeps the branch at that measurement-sensitive recognition point. It does not yet claim one full quantum-like state-space package inside C.11; it claims only that the live comparison may need one explicit measurement-class or order-sensitive repair rather than one plain commutative reading.
Typical practical cash-outs are:
choose nowunder one declared order or framing because rival orders no longer change which option survives;probe againbecause one framing-sensitive comparison pass, one further question order, one response-replicability check, or one explicit measurement-class clarification could still reverse the survivor relation;reroutewhen the selected decision move is no longer deciding among live options but has become one publication or enactment problem that only borrowed order-effect language rhetorically.
Do not promote this line to the unmarked default unless those repaired limitations are live in the case.
Do not invoke this line merely because a case feels psychologically subtle. Invoke it when one changed order, framing, response pattern, or incompatible-question structure actually changes the comparison state or the survivor relation in the live choice.
If none of those repaired limitations is live, stay with the classical evidential baseline rather than switching branches without one live repaired limitation.
The family map is therefore one disciplined set of refinements over the same choice question, not one excuse to rename every neighboring question as decision theory.
Reroute as soon as the question stops being local choice
Use C.11 while the question remains: from this current OptionSet, what should the DecisionSubject choose, and is another probe worth its cost before commitment?
Reroute immediately when the question changes:
- If the hard question is still what options should exist at all, or whether the current option set needs to be expanded or reframed, leave this pattern and work in
C.18first. - If the options already exist but the question is how broadly to keep exploring or exploiting the candidate pool, leave this pattern and work in
C.19, where the next useful output is one explicit pool-policy result rather than one localChoiceResult. - If one option is already chosen and the question is how to sequence, budget, or enact that choice, leave this pattern and work in
C.24, where the next useful output is one enactment-facing call plan orCheckpointReturn. - If the question has shifted from deciding to surfacing, publishing, or naming the selected set, leave this pattern and work in
G.5, where the next useful output is one published shortlist, ranked shortlist, narrowed handoff plan, or explicit abstain outcome rather than one more local choice result.
ProbeBudget stays here while it means the epistemic or deliberative budget for one more probe before choice and while that probe can still change which option survives or whether the current set should be rejected. When the same word now means execution budget, call budget, enactment budget, or execution-path scouting after one choice result already exists, the question has moved to C.24.
ValueOfInformation and ValueOfComputation also stay theory-side here as comparative criteria while the question is still local choice among the current options. If one more probe could still change which option survives or whether the current set should be rejected, stay in C.11. If the choice result is already fixed and those criteria now govern only execution-path sequencing, call-plan ordering, or enactment of the chosen move, the question has crossed to C.24. C.19 and C.24 may consume the criteria, but they do not become the doctrine authorities for them.
Outside this pattern remain candidate generation, pool-wide exploration policy, selected-set publication semantics, and execution planning.
Minimal inventory and mathematical floor
The minimum usable inventory for this pattern is:
- subject and option objects:
DecisionSubject,DecisionSubjectGranularity,OptionSet; - evaluative and epistemic objects:
PreferenceOrder,EvaluativeMeasure,BeliefState,OutcomeModel; - dependence and comparison objects:
InterventionModel,CounterfactualModel,SubjunctiveDependenceRelation,ChoiceRule,ChoiceResult; - probe and bounded-resource objects:
ProbeActionSet,ProbeBudget,CostToProbe,ValueOfInformation,ValueOfComputation.
These objects are required because the decision record must carry one explicit path from a live OptionSet through one live ChoiceRule to one emitted ChoiceResult.
Always explicit versus conditionally activated objects
The following objects should be explicit in every usable C.11 decision record:
DecisionSubjectandDecisionSubjectGranularity;OptionSet;- one evaluative basis through
PreferenceOrderorEvaluativeMeasure; BeliefState;OutcomeModel;ChoiceRule;ChoiceResult.
The following objects activate when the case needs them:
InterventionModelfor causal repair;CounterfactualModelplusSubjunctiveDependenceRelationfor success-first or predictor-coupled repair;ProbeActionSet,ProbeBudget,CostToProbe,ValueOfInformation, andValueOfComputationwhen one more probe or one more computation pass is still live.
What matters is not that every decision record mechanically mentions every token. What matters is that the current comparison does not smuggle one active question without naming the object that carries it.
Immediate lexical commitments:
- the default chooser term is
DecisionSubject, notAgent; DecisionSubjectGranularitynames the chooser-bearing level when the question is about whether the chooser is one person, team, organization, or another collectivity-bearing system rather than one generic scalar or coordinate;- relation-heavy wording remains answerable to
A.6.Ptogether withA.6.5.
Local plain glosses for the load-bearing inventory:
DecisionSubject: who or what is actually carrying this choice now, whether that is one person, one team, one committee, one organization, or another collectivity-bearing system;DecisionSubjectGranularity: the level at which the choice is being attributed, such as person-level, team-level, or organization-level rather than one vague "agent" label;OptionSet: the concrete options already on the table now;PreferenceOrder: the current better-than / worse-than ordering over those options for this decision subject;EvaluativeMeasure: the explicit utility-style or desirability-style scoring measure used when the case needs magnitudes, thresholds, or trade-offs rather than only one ordering;BeliefState: the current uncertainty-bearing state about the world, the case, and the likely consequences of the options;OutcomeModel: the model that maps options plus the current uncertainty picture to the consequences that matter for this choice;InterventionModel: the part of the model that says how the world changes because one option is actually taken;CounterfactualModel: the model used to compare relevant non-actual alternatives or alternate decision procedures;SubjunctiveDependenceRelation: the dependence between this choice and one predictor, one linked chooser, or one structurally similar decision procedure when intervention talk alone is not enough;ChoiceRule: the current choice doctrine or operator that says what conditions makechoose now,reject current set,probe again, orreroutelawful in this case;ChoiceResult: the emitted result record saying which of those lawful next moves actually follows now under the currentChoiceRule;ProbeActionSet: the further checks, measurements, simulations, or questions that can still be run before commitment;ProbeBudget: the remaining time, money, attention, or tolerated delay available for those pre-choice probes;CostToProbe: the real cost of another measurement, question, simulation, trial, or delay before commitment;ValueOfInformation: the expected gain from learning more before choosing;ValueOfComputation: the expected gain from spending more reasoning or compute before choosing.
What follows from DecisionSubject being wider than Agent:
- the chooser in
C.11need not be one person-like agent; - a team, committee, organization, or coupled human-tool system may be the
DecisionSubjectwhen that is the real level at which the choice is being made; - the pattern therefore does not force agency characterization to do the job of naming who or what is currently choosing.
This floor is enough to keep choice doctrine inspectable and stable. It does not yet assume one full branch-specific quantum-like package or one cross-scale geometry-heavy package.
Boundary on multilevel and social-expectation doctrine
DecisionSubject and DecisionSubjectGranularity are the local answer to human-only and individual-only narrowing. They keep the chooser explicit at person, team, organization, or other collectivity-bearing level so the doctrine does not silently collapse back into one generic individual agent.
This minimal choice doctrine does not yet settle all of the heavier doctrine that can sit behind that wider chooser-bearing scope. In particular, this body does not yet fully settle:
- collective aggregation doctrine over conflicting preferences or criteria;
- cross-scale or cross-collective conflict between person-, team-, organization-, or broader system-level objectives;
- one full
ROEor social-expectation structure for socially scaffolded choice; - one full multilevel or geometry-heavy formal package for those cross-scale or cross-collective questions.
Those absences are not hidden exceptions. They are explicit scope boundaries of this C.11 body. If one of those heavier questions is already live in the case, the decision record should say that the local C.11 floor is being used only as the current typed floor and should keep the unresolved aggregation, ROE, or multilevel support question visible by value.
Minimal decision tuple and finish condition
A C.11 decision record is complete only when it states:
- who or what is choosing:
DecisionSubjectat oneDecisionSubjectGranularity; - what is currently choosable:
OptionSet; - how the options are compared:
PreferenceOrder,EvaluativeMeasure,BeliefState, andOutcomeModel; - which heavier dependence layer is active when the case needs it:
InterventionModel,CounterfactualModel, andSubjunctiveDependenceRelation; - what comparison doctrine currently governs the case: one explicit
ChoiceRule; - what further probing is still available and worth paying for:
ProbeActionSet,ProbeBudget,CostToProbe,ValueOfInformation, andValueOfComputation; - what the current comparison concludes: one emitted
ChoiceResultthat says choose now, reject the current set, probe again, or reroute. That result must name either the selected option, the retained tie-set, or the next probe or reroute named by value.
Without that explicit tuple, choice doctrine usually collapses into one of three easier but wrong substitutes: generic rationality talk, search folklore, or planning folklore.
The finish condition is more specific than "the record now sounds informed." The record is finished enough for practical use only when the next move follows from the stated comparison basis, stated ChoiceRule, stated probe decision value, and emitted ChoiceResult rather than from unstated background assumptions.
A C.11 pass is finished enough for practical use when all three conditions hold:
- the current comparison basis is explicit enough to state why one option now outranks or survives the others;
- the reason to stop probing, or the reason to probe again, is explicit rather than assumed;
- the next question is explicit:
choose now,reject current set,probe again, orreroute.
If the case remains tied or underdetermined under the current basis, say that directly and keep the tie-set explicit. A lawful ChoiceResult may still be probe again or reroute, but it must not pretend that one winner already exists when the current basis has not earned that conclusion.
If those conditions are still missing, the pattern has not yet answered the choice question even if the terminology already sounds sophisticated.
System grounding
Tell. A research team already has three experiment plans on the table. The option set exists. The real question is to decide which plan to run and whether one more measurement is worth the delay.
Show. The DecisionSubject is the team, the DecisionSubjectGranularity is team-level, the OptionSet is the three current plans, the team's PreferenceOrder puts risk reduction ahead of schedule convenience, and the current OutcomeModel still carries calibration uncertainty. The extra calibration run belongs in the ProbeActionSet, its one-day delay is part of the ProbeBudget, and the practical question is whether its ValueOfInformation exceeds its CostToProbe by enough to change the emitted ChoiceResult under the current ChoiceRule.
Show. If the extra calibration run could still change which plan survives and the one-day delay fits the remaining ProbeBudget, the right ChoiceResult is probe again with that exact calibration run named. If the measurement can no longer overturn the ranking, the right ChoiceResult is choose now with the winning plan and the reason further probing is no longer worth its cost.
Show. A finished result here should therefore read like one decision record, not one research-theory aside: "Team-level chooser; three current plans; risk reduction preferred; calibration uncertainty still live; one extra calibration run remains feasible and could still overturn the current ranking; ChoiceResult = probe again with calibration run." Or, after that probe is no longer worth doing: "ChoiceResult = choose plan B now because the remaining calibration gain no longer justifies one more day of delay."
Show. C.18 is still the place for inventing new plans, C.19 is still the place for broader exploration policy over the plan pool, and C.24 is still the place for the run sheet and execution order after the choice is made.
Episteme grounding
Tell. A model-selection comparison takes three already-articulated explanations and asks whether one more observation or one more comparison pass is rational before preferring one explanation over the others.
Show. C.11 governs the decision doctrine over the current explanation set: one BeliefState, one OutcomeModel, one explicit PreferenceOrder or EvaluativeMeasure, and, when the case needs it, one InterventionModel, CounterfactualModel, or SubjunctiveDependenceRelation rather than one thinner evidential comparison. When another model comparison pass is on the table, ValueOfComputation belongs here as part of the current choice doctrine rather than as one later planning afterthought.
Show. If one more comparison pass cannot realistically change which explanation survives, the decision record should not end with "more analysis may help." It should end with one ChoiceResult that prefers the current explanation now. If one more pass could still reverse the ordering and is cheap enough to justify, the decision record should say exactly which pass is worth doing and what ambiguity it is expected to resolve.
Show. A lawful closing line here is therefore something like: "ChoiceResult = choose model 2 now because the surviving uncertainty no longer changes the ordering under the current evidence" or "ChoiceResult = run one additional comparison pass on models 1 and 2 because the current outcome model still cannot distinguish their failure costs." Anything vaguer leaves the decision question unfinished.
Show. This pattern does not yet govern open-ended hypothesis generation and does not yet govern operational rollout. Those questions stay outside this pattern even when the decision later feeds them.
Collective and contextual grounding
Tell. A clinical board must decide whether to escalate a patient now or order one more test. The board is the chooser, not one isolated individual, and the result shifts when the case is discussed in prognosis-first versus risk-first order.
Show. C.11 keeps the case legible by typing the chooser as one DecisionSubject at explicit DecisionSubjectGranularity, keeping the available actions as one current OptionSet, keeping one explicit BeliefState and OutcomeModel around those actions, and asking whether another test belongs in the ProbeActionSet with enough expected value to justify its CostToProbe.
Show. Active-inference-adjacent pressure is visible because the chooser is embodied, online, and socially coupled; quantum-like pressure is visible because context and question order change the comparison state. C.11 keeps both repaired limitations visible without pretending that the whole pattern has already become one full active-inference or quantum-like formal package.
Show. If the order effect still changes which option survives, the comparison should say that directly and keep the comparison unfinished. The lawful next move is then either one framing-stabilizing probe or one declared comparison order under which the current result will be judged. It should not hide that instability inside one vague statement that the board has mixed intuitions.
Show. An admissible output here therefore looks like one of three concrete records:
ChoiceResult = probe again with one rapid diagnostic test because the current prognosis-first versus risk-first framing still changes which option survives;ChoiceResult = choose now and escalate because, under the fixed risk-first order and current evidence, no remaining feasible test can reverse the survivor relation before delay increases harm;ChoiceResult = the next question is governed by C.24 because the board has already chosen escalation and the next task is now treatment sequencing rather than local choice.
Show. The output still has to be one actionable record. If the current result cannot say which of those three forms is now lawful, then the contextual pressure has been noticed but not yet carried into one usable decision result.
Bias-Annotation
This pattern is intentionally biased toward Prag and Onto/Epist discipline.
It prefers one clear decision-theory EntityOfConcern, one explicit neighboring-question split, and one minimal mathematical floor over one looser but more rhetorically flexible notion of rationality.
That bias can feel too strict in cases where the chooser, option set, or dependence structure is still genuinely moving. The mitigation is not to weaken the pattern back into one general rationality account. The mitigation is to keep the unfinished state explicit: hold one tie-set, hold one probe again result, or state the neighboring governing pattern that now truly governs the question.
The family map also remains plural: causal, success-first, active-inference, and quantum-like repairs stay visible without being overpromoted into one default doctrine.
Conformance Checklist
Common Anti-Patterns and How to Avoid Them
One quick usability test helps here: if the closing line does not state one lawful next move for the working chooser or team, the current result is still unfinished even if the doctrine survey looks polished.
Consequences
Rationale
A live option set and a live choice among that set are not the same question as generating options, governing a candidate pool, or sequencing execution. Keeping that distinction explicit is what makes the doctrine usable rather than ceremonial.
DecisionSubject is the better default chooser term because decision theory often applies to persons, teams, organizations, and other system-bearing collectivities. Agent remains useful, but only when an explicit agency claim is actually being made.
A minimal mathematical floor is necessary because choice doctrine without one stable object stack quickly turns into verbal drift. But a pattern also fails if it keeps only the object names and never shows how those objects discipline an actual choice. That is why Solution here is procedural: it must carry the path from OptionSet through one ChoiceRule to one ChoiceResult, including the stop-or-probe decision, rather than only one survey of neighboring theories.
The practical gain of that procedure is not elegance for its own sake. It is that later search, policy, publication, and planning work receive one explicit result instead of one hand-waving claim that deliberation happened somewhere upstream.
At the same time, this pattern should not pretend that one full quantum-like or geometry-heavy package is already settled just because those neighboring lines are real.
SoTA-Echoing
Practical reading of this alignment:
-
In ordinary current-option cases, start with the classical evidential baseline and use it to emit one explicit
choose now,probe again, orrerouteresult under one sharedBeliefStateandOutcomeModel. -
Failure of a simple Bayesian or passive-read-like model is not yet evidence that QL is necessary. Try richer classical, causal, performative, instrument, active-sensing, or representation-abstraction rivals before keeping the QL branch as load-bearing.
-
If intervention structure changes the survivor relation, state that explicitly and switch to causal comparison rather than leaving the comparison at the level of correlation talk.
-
If predictor-coupling or structurally linked choice procedures remain load-bearing, keep the subjunctive layer visible and say what linked structure could still reverse the current result.
-
If another measurement, comparison pass, or search pass is being considered, treat its value and cost as part of the current decision doctrine rather than as one later planning afterthought.
-
If the chooser is embodied, online, and socially coupled, or if context and order effects change the comparison state, keep those repaired limitations visible by naming the observation named by value, social-expectation clarification, order stabilization, response-replicability check, or measurement-class clarification that could still change the current
ChoiceResult, and say directly when fullerROE, quantum-like state-space, or multilevel doctrine still sits outside this local choice body. -
If the quantum-like line is activated, treat it as one measurement-sensitive mathematical lens or representational repair, not as one claim that the chooser or world is physically quantum.
-
If none of those heavier repaired limitations is live, stay with the lighter branch rather than activating one prestigious label that does not yet change the next move.
Worked-slice discipline from these rows:
- the system grounding slice is disciplined primarily by the bounded-resource and classical-baseline rows, so the output must end in one explicit probe-or-choose result;
- the episteme grounding slice is disciplined primarily by the bounded-resource and subjunctive-repair rows, so the output must say what comparison pass or predictor-coupled clarification could still reverse the result;
- the collective and contextual grounding slice is disciplined primarily by the active-inference and quantum-like rows, so the output must name the embodied observation, framing stabilization, or reroute that now becomes lawful.
Relations
- Builds on:
A.6.P,A.6.5,A.13,C.9,A.18,A.19 - Read next when this question moves:
C.18for candidate generation and open-ended search,C.19for one explicit pool-policy result over exploration or exploitation governance,C.24for one enactment-facing call plan orCheckpointReturn,G.5for shortlist-family public selected-set label and emitted selected-set semantics,C.28when the choice result depends on causal-use support - Keeps outside: candidate generation, pool-wide exploration or exploitation policy, selected-set publication semantics, and execution sequencing
- Aligns with: classical evidential decision theory, causal decision theory, success-first or subjunctive repair, bounded-resource metareasoning and probe-cost doctrine,
C.28causal-use question/rung/support vocabulary, active-inference-adjacent decision work, quantum-like contextual repair where context or order effects are real, and multilevel mathematical-lens pressure at the minimal-floor level only
Quantum-like choice-boundary note
Use C.11 first when the question is local choice, belief, preference, comparison, question order, option-menu framing, or an incompatible-question effect inside one decision situation. Quantum-like wording is retained only when it adds a concrete residual order-effect, probe, frame, or comparison reading that ordinary decision or probability language would hide.
Action path:
- State the current
DecisionSubject,OptionSet, comparison basis, andChoiceRule. - Ask whether the apparent QL issue changes the local choice result: choose now, reject current set, probe again, or reroute.
- If the issue is question order, incompatible questions, response-replicability tension, non-shared comparison frames, or CbD-style variable identity / joint-availability trouble inside the current option set, keep the QL repair inside C.11.
- If the current option set itself is suspect, incomplete, generated by the wrong frame, or still needs expansion/reframing/search, leave C.11 and apply
C.18,C.19,A.19, orB.5.2as appropriate. - If the issue changes boundary state, bridge/export faithfulness, coordinated-work evidence, measurement legality, or viability envelope, route out.
- Emit one
ChoiceResultand one next question; do not leave the QL branch as a theory label.
When the question leaves local choice, route it out instead of stretching C.11:
Useful outputs:
choose nowunder a declared order/frame;probe againbecause another question order, response-replicability check, or frame test could still change the survivor relation;reroutebecause the live problem is no longer local choice;- no QL wording when ordinary uncertainty, preference conflict, or option-generation work is enough.
C.11 may cite C.26 as the common quantum-like modeling lens only for the residual question after the local-choice split is applied. It is not the whole-cluster pattern for boundary, bridge/export, distributed-evidence, viability, or state-representation coarsening claims.
C.29 mathematical-lens use relation
C.29may supply a lens-supported prediction, distinction, obstruction, diagnostic boundary, or rival-lens note that a decision record can cite. If the output is aChoiceResult, local choice record, selected-set publication, or selected option set,C.11governs the decision discipline and anyG.5/G.9selector or benchmark publication remains separate.C.29does not select the option by mathematical elegance.
C.11:End
C.13 — Constructional Mereology (Compose‑CAL)
Intent
Provide a single, generative calculus for part–whole structure so that all structural relations in FPF are constructed (not merely declared) from three primitives and thereby inherit extensional identity by design. The calculus is hidden from day‑to‑day users behind relation aliases; its artefacts are traces that witness how a whole arises from its parts.
Also known as “Γₘ mereology”, “constructor‑based composition”.
Layer. calculus. Depends on. Kernel only (no upward imports). Consumed by. CT2R‑LOG (B.3.5) Working‑Model alias logic and any FPF pattern that needs part–whole semantics. Compose‑CAL does not import alias definitions; it merely emits traces that others may reference.
Compose‑CAL introduces a single construction operator Γₘ with exactly three constructors—sum, set, slice—sufficient to build structural wholes, collections‑as‑wholes, and aspects without extending the Kernel’s type set. No “parallel” or “temporal slice” constructor is added. Every construction yields a trace that serves as the witness for structure. Human‑facing relations such as ComponentOf, MemberOf, AspectOf are defined elsewhere as Working‑Model aliases and are grounded in these traces; Compose‑CAL itself remains purely generative and extensional.
Problem frame & Problem
FPF presents a unified structural backbone used across disciplines. Historically, sub‑relations like ComponentOf or MemberOf were declared directly. This maximised usability but provided no generative guarantee that a new subtype was extensionally well‑behaved or reducible to common mereology.
Declared lists of part‑of sub‑relations scale poorly and lack identity guarantees. Engineers ask for a single dial (“is x part of y?”), while ontologists need a principled foundation that (a) avoids Kernel bloat and (b) proves that wholes are nothing over and above their parts. Adding yet another bespoke relation (e.g., PortionOf) should not entail schema surgery or ad‑hoc rules.
Forces
- Parsimony (C‑5). Add no core types if composition suffices; keep the constructor set minimal.
- Minimal Kernel (P‑1). Generativity must live in a calculus pattern, not in Kernel axioms and postulates.
- Cognitive asymmetry. Everyday users want “one part‑of query”; specialists accept complexity backstage.
- Trans‑disciplinary unification. Every pattern that needs mereology should reuse one generative basis.
- Green‑field strictness. With no legacy to break, we can require grounding for new structural edges.
Solution
Solution sketch
Compose‑CAL SHALL provide Γₘ with three and only three constructors:
Γₘ.sum(parts:Set[U.Entity])— returns a whole W such that each p in parts stands in KernelPartOf(p, W).Γₘ.set(elems:Set[U.Entity])— returns a collection C; each e in elems stands in a calculus‑internal mero:KernelPartOf(e, C) under member‑as‑part semantics (publication alias: typicallyut:MemberOf). Counts/order (e.g., parallel/serial factors) are not carried here; they live in method/time families adjacent to structure. Note: althoughmero:KernelPartOfis transitive in the calculus, the publishedMemberOfalias remains non‑transitive by design (see A.14 guards).Γₘ.slice(entity:U.Entity, facet:U.Facet)— returns an aspect S such that mero:KernelPartOf(S, entity) and S carries the declared facet. Temporal facets are excluded here.
Note. The calculus names an internal backbone mero:KernelPartOf; the Kernel’s public ut:PartOf/A.14 catalogue remain unchanged. Publish only via Working‑Model aliases (CT2R‑LOG).
The calculus emits a trace for every construction; Structural aliases MUST be grounded by exactly one such trace.
Non‑goals (clarifications).
- No extra constructors for “parallelism” or “time slices”; parallelism is modelled via set (with order handled in
Γ_method), and temporal parts live in the appropriate temporal/system calculus. This preserves parsimony. - Compose‑CAL does not define user‑visible relation names; those belong to the alias layer.
Normative Standard (high‑level)
- C13‑N1. Extensional identity. Two Γₘ results are identical iff they have the same parts under the same constructor and facet conditions.
- C13-N2. Structural grounding stance. Every structural edge MUST reference exactly one Γₘ trace as its grounding witness and SHALL declare
validationMode = axiomatic(see B.3.5 / E.14). Structural edges MUST NOT be published inpostulateorinferentialstances. - C13‑N3. Algebraic laws.
Γₘ.sumandΓₘ.setare commutative and idempotent over their inputs;Γₘ.slicecomposes only by facet‑compatible refinement. - C13‑N4. Acyclicity & antisymmetry. Structural part‑of induced by Γₘ is transitive, antisymmetric, and acyclic at the level of entities. (Formal axioms appear later in this pattern.)
- C13‑N5. Separation of concerns. Γₘ provides constructions and traces; naming, aliasing and human‑level relation taxonomies are defined outside Compose‑CAL (see B.3.5 for the CT2R‑LOG handshake).
- C13‑N6. Member vs component.
Γₘ.setyields collections whose Working‑Model alias is MemberOf; authors SHALL NOT infer ComponentOf from MemberOf without a separateΓₘ.sumnarrative. - C13‑N7. Domain guard. Do not apply Compose‑CAL to roles, methods, or works (see A.12/A.15): these are outside mereology.
Scope, applicability, terms & notation
Use Compose-CAL whenever a claim concerns structural containment of entities (assemblies, collections, aspects). Compose-CAL is not used for epistemic relations between knowledge epistemes or publications; those are epistemic relations and may be justified by Logical/Mapping and/or Empirical Validation with an explicit validationMode ∈ {inferential, postulate}. Compose-CAL is neutral with respect to domain (mechanical, biological, software, etc.).
- Γₘ — the mereological construction operator of this calculus.
- trace — a minimal, inspectable witness that a constructor was applied to given inputs to yield a whole (or aspect).
- structural part‑of — the structural relation induced by Γₘ; user‑facing aliases (e.g., ComponentOf, MemberOf) are separate patterns that must point back to traces.
Alias readiness. Typical CT2R mappings:
- ComponentOf ⇢
sumnarrative; - MemberOf ⇢
setnarrative; - AspectOf ⇢
slicenarrative; - PortionOf ⇢
slice(entity, facet="material/spatial‑region")plus metrical semantics (A.14); - ConstituentOf (logical/content) ⇢
sumnarrative over conceptual parts. (Material mixtures are notConstituentOf; usePortionOforComponentOfper A.14.)
Archetypal Grounding (System / Episteme duo)
Tell–Show–Show. Compose‑CAL is a thinking‑level calculus for building structural wholes from parts. We show it twice—first on a System (structural) and then on an Episteme case (where constructive grounding is not the primary mode).
System (structural; constructive grounding)
Story. A Skid is assembled from its Pump, Motor, Baseframe, and Manifold.
Constructive grounding (Γ_m).
Narrate a sum of parts: “Skid = sum{Pump, Motor, Baseframe, Manifold}.” This uses Γ_m.sum to obtain a whole whose parts stand in KernelPartOf; the resulting Working‑Model relation engineers publish is ut:ComponentOf on each edge from part to whole. The mapping “sum → ComponentOf” reflects the intended aliasing between constructive traces and human‑facing mereology.
Facets and collections.
Need the inspection surface? Narrate Γₘ.slice(Skid, "spatial") and publish ut:AspectOf. Need a group of Transfer interactions? Narrate Γₘ.set{…} and publish ut:MemberOf—this is a collection-as-whole, not a sub‑assembly; no component identity is implied without a separate Γₘ.sum narrative.
Plane separation. Assembly order and time are not encoded here: parallel lines and schedules live in method/time families and are described adjacent to, not inside, the part‑tree.
Episteme (knowledge‑bearing; non‑constructive first)
Story. A Mass‑Flow Representation is used to stand for a measured flow in a plant dataset.
Grounding choice.
Here the Working‑Model relation (e.g., RepresentationOf) is epistemic. Authors typically justify it by inferential or postulate stances (argument or calibration cues), not by a mereological construction; constructive traces remain optional. This preserves the firewall between structure and knowledge claims while keeping a clear path to an assurance record with additional constructive evidence if the team later reframes part of the representation structurally (e.g., sets of interactions as a Γ_m.set for a flow bundle).
Scope justification
- Universality. The trio sum / set / slice appears across mechanical assemblies, biological complexes, and organizational artifacts; aliasing to ComponentOf / MemberOf / AspectOf provides a stable Working‑Model surface for those domains.
- Parsimony. No “parallel” or “temporal slice” constructor is added; time slices belong in the temporal calculus, and parallelism is modelled as a set plus method metadata.
Bias‑Annotation (cognitive anti‑patterns and counter‑moves)
Conformance Checklist (normative, calculus‑level)
The following regulate how to think and write when invoking Compose‑CAL. They are notation‑agnostic and conceptual.
Author’s note. Compose‑CAL is a calculus for constructive reasoning about structure. Publishing remains in the Working‑Model layer (see B.3.5); constructive narratives are attached when the team seeks an assurance record with additional constructive evidence, never as a substitute for clear human‑facing relations.
Consequences
Benefits
- Extensional clarity. Every structural claim is reconstructed from
Γ_m.sum | Γ_m.set | Γ_m.slice: sum establishes component‑assembly identity; set establishes collection identity; slice yields aspects as parts—without expanding the Kernel. - Human–first publication, formal–on‑demand. Teams keep publishing Working‑Model relations (e.g.,
ut:ComponentOf), while assurance is attached as needed via a constructive grounding narrative andtv:groundedBy(see B.3.5). - Separation of planes preserved. Order/parallelism and temporal coverage remain in
Γ_method/Γ_time; structure is never overloaded to carry them, avoiding recurrent category errors. - Uniformity across domains. The same triad models mechanical assemblies, socio‑technical memberships, and informational wholes without domain‑specific constructors or ad‑hoc exceptions.
- Didactic economy. Authors learn one compact calculus; reviewers gain a predictable place to look for constructive justification when
validationMode = axiomatic(B.3.5 alignment). - Compositional reuse. Traces are reusable fragments of reasoning; complex wholes are narratable as sums of sub‑traces, with sets for concurrency and slices for aspect selection.
Trade‑offs / Mitigations
- Discipline cost at higher assurance. Writing a concise grounding narrative for axiomatic claims takes effort. Mitigation: reuse the micro‑templates in this pattern’s Grounding section and keep narratives notation‑free.
- Over‑use risk. Temptation to treat collections as integrated assemblies. Mitigation: keep MemberOf distinct from ComponentOf; both
setandsumyield wholes, but onlysumestablishes component structure and assembly identity. - Temporal leakage risk. Authors may try to smuggle time into structure via “temporal slices.” Mitigation: use
Γ_timefor temporal statements andsliceonly for intensional aspects, not for time windows.
One‑line takeaway. Compose‑CAL gives a minimal, universal how‑it‑was‑built story for any structural edge, without disturbing the human‑first publication surface defined in B.3.5.
Rationale (informative)
Why exactly three moves?
sum, set, and slice are jointly sufficient and minimally overlapping:
sumcreates an integrated whole from parts and thereby establishes component structure (assembly identity).setcreates a collection‑as‑whole; members are parts of the collection under member‑as‑part semantics, but no component integration is implied.slicereturns an aspect as part of its bearer (facet‑constrained, e.g., spatial/material); temporal facets are excluded here.
All three moves create new entities; sum is the only move that establishes component identity. Neither set nor slice changes the identity of their inputs, and set never upgrades membership to component status. Temporal coverage and workflow order are handled in their own planes.
This separation mirrors long‑standing distinctions between composition, collection, and aspect, while enforcing parsimony: no additional constructors are introduced into the Kernel (C‑5). The calculus remains notation‑agnostic: its meanings are given in prose and mathematics; any diagrams are illustrative only, in line with the Notational‑Independence guard‑rail (E.5).
Why constructive grounding lives outside the publication surface.
FPF privileges Working‑Model relations as the canonical form for communication and design. Compose‑CAL supplies the constructive shoulder of the Assurance Layer: when authors choose validationMode = axiomatic, they narrate the whole as a sum of parts (with optional set and slice scaffolding) and point to that narrative via tv:groundedBy. This keeps the text readable while preserving a path to an assurance record with additional constructive evidence (B.3 family, Authoring Template).
Why order/time are out of scope.
Correctness‑by‑sequence and temporal coverage are orthogonal to parthood. Encoding them as parts breeds contradictions (e.g., “phase‑as‑component”). Compose‑CAL deliberately refuses any “serial/parallel/temporal constructor,” delegating such concerns to Γ_method and Γ_time and aligning with B.1’s flavour separation.
Relations
Builds on
- A.14 Advanced Mereology. Uses its structural catalogue (Component/Portion/Aspect vs Member) as the target of constructive narratives; never collapses Member into Part.
- E.5 Guard‑Rails (Notational Independence). Meanings are given in prose; diagrams are illustrative only.
- E.5 Guard‑Rails (Unidirectional Dependency). Compose‑CAL depends downward only; it never imports alias layers or higher planes.
- E.8 Authoring Conventions. Conforms to the canonical pattern template (Grounding section for architectural patterns; CC placement).
Coordinates with
- B.3.5 CT2R‑LOG.
tv:groundedByrefers (conceptually) to Compose‑CAL traces whenvalidationMode = axiomatic; Working‑Model relations remain the publication interface. - B.1 flavours. Keeps order (
Γ_method) and time (Γ_time) outside structure; may co‑appear in narratives when relevant but never as constructors. - Kind-CAL / Lang‑CHR. Provide the Mapping shoulder of assurance (labels, type alignment) that complements constructive narratives in this pattern.
- KD‑CAL. Provides the Logical shoulder when authors justify relations inferentially instead of constructively.
- C.16 (Measurement substrate). Supplies quantitative hooks when a constructive narrative benefits from explicit counts/ratios (e.g., cardinalities, coverage), while keeping metrics distinct from mereology.
Constrains
- Any pattern that creates or reasons about structural wholes SHOULD narrate them using only
sum | set | slice. - Structural publication MUST NOT encode order/time; such claims belong to their dedicated flavours.
- Introducing new structural constructors requires a separate parsimony argument and is discouraged unless the triad cannot narrate the case without ambiguity.
Provides
- A minimal generative basis (
Γ_m.sum | Γ_m.set | Γ_m.slice) and the corresponding reading discipline for constructive narratives. - A stable interface with CT2R‑LOG for
tv:groundedBylinks undervalidationMode = axiomatic.
C.13:End
Measurement & Metrics Characterization (MM‑CHR)
Status: Stable
Intent (Normative)
Name. Measurement & Metrics Characterization (MM‑CHR). This is a user‑oriented name: in user‑facing narrative we may say metrics; in Tech register we speak Characteristic, Scale, Level, Coordinate, Value, Score, Unit, and ScoringMethod; in Formal register we use U.DHCMethod(Ref), U.Measure, U.Unit, and U.EvidenceStub.
Intent. Provide a transdisciplinary substrate for measurement that any FPF pattern can rely on: a small, stable set of measurement-definition constructs and relations—U.DHCMethodRef, U.Measure, U.Unit, U.EvidenceStub—disciplined by CSLC (Characteristic, Scale, Level, Coordinate) so that every recorded value is interpretable, and any claim of “comparability” is auditable (physics lab time‑of‑flight, figure‑skating judging, architectural modularity, etc.). C.16 does not re‑define Characteristic (A.17) nor the CSLC kernel Standard (A.18); instead, it exports the measurement substrate that binds an FPF pattern’s measurable notions to one Characteristic and one Scale and frames a conceptual link to evidence. This characterization is notation‑neutral, tool‑agnostic, and open‑ended (no “lifecycle” narrative; evolution proceeds via RSG moves with checklists).
One‑minute mental model (didactic; non‑normative).
- Template (
U.DHCMethod) says what a value means: the Characteristic, Scale (and Unit when applicable), plus polarity and applicability. - Measure claim (
U.Measure) says what was claimed about a subject: a value on that Scale, with a time stance and (when required) an EvidenceStub. - Direct comparability is conservative: same template; everything else requires a named and cited comparability basis governed by the relevant FPF pattern, Bridge, method description, or specification record.
Boundary to neighboring governing patterns and specification records. C.16 governs measurement templates, readings, score meanings, scale legality, direct comparability, and evidence-stub adequacy. It does not govern (i) characterization mechanisms such as normalization, indicatorization, scoring, comparison, or selection, (ii) normalization and equivalence notions such as method tokens, invariant-value notions, or equivalence relations, (iii) claim-use policies such as comparability modes and legality gates, or (iv) suite protocol obligations. Those meanings are governed by their FPF patterns or specification records, such as CN-Spec, CG-Spec, and the CHR mechanism-governing patterns. C.16 may cite those patterns or records when motivating evidence or interpretability, but MUST NOT introduce or restate their terminology or laws.
Use this when a value, score, rating, metric label, QL probe output, dashboard reading, or comparison is being treated as meaningful without a visible characteristic, scale, unit, polarity, comparability basis, or evidence pointer. The action is to rebuild the measurement claim as a typed reading: name the subject, bind one characteristic to one scale, state the coordinate or level, declare unit and polarity when they matter, attach the evidence stub, and keep comparison or scoring claims with broader scope, higher evidence requirement, or release or admission use with the governing pattern or specification record that governs that comparison or scoring claim.
Thin precision-restoration pointer: if the issue under repair is still whether wording such as metric, measure, score, axis, dimension, level, coordinate, quality, or stronger/weaker value names a characteristic, scale, coordinate, score, unit, scoring method, quality-term repair, or application of the pattern governing the recovered claim, use C.16.P first. Do not copy the C.16.P trigger table here; C.16 resumes after the measurement or characteristic construction is recoverable.
Useful output: a measurement claim that a reader can interpret and compare only within its declared measurement basis, without turning a convenient number into a free-floating fact.
Metric legality does not make causal use admissible. If a measured value, score, dashboard reading, or metric disparity reaches CausalUseActivation by being used to claim effect, intervention success, causal fairness, policy optimality, counterfactual comparison, or causal method superiority, keep the measurement repair in C.16 and carry the causal-use question, causal-ladder rung, estimand, support basis, support verdict, admissible causal use, and inadmissible causal use in C.28.
Outcomes. (1) A uniform way for FPF patterns to declare what is measured and read what has been measured; (2) explicit Characteristic binding and Scale typing per CSLC; (3) principled comparability and polarity (declared at the template level); (4) traceability via conceptual evidence stubs; (5) seamless alignment with cross‑domain quantity notions (ISO 80000, ISO/IEC 25024, QUDT, SOSA/SSN, Verspoor) through Unification rows (Part F).
Scope & Status (Normative)
Scope. C.16 specifies the measurement substrate for FPF patterns: the roles of U.DHCMethodRef, U.Measure, U.Unit, U.EvidenceStub; their CSLC discipline (by reference to A.17 and A.18); and evidence linkage semantics at the level of conceptual conditions. It defines direct interpretability and direct comparability (same template), and it equips other patterns to state—and audit—comparability claims beyond direct comparability by citing the governing FPF pattern, method description, Bridge, or specification record. It exports these constructs for all FPF patterns (KD‑CAL, Arch‑CAL, etc.) without prescribing domain formulae, procedures, or any CHR mechanism semantics.
Status. Normative C.16 depends on A.17 (canonical Characteristic) and A.18 (minimal CSLC in Kernel). Where C.16 cites external CG‑frames, the stance is through Part F rows and Bridges (with CL and loss notes), not by vocabulary import.
Out of scope. No computational recipes, no workflow prescriptions, no governance or process guidance. No definitions of normalization, indicatorization, scoring, comparison, or selection mechanisms, no comparability policy specifications, and no legality gate specifications. C.16 concerns measurement-definition constructs and their validity conditions for measurement claims, not records or tooling. (Implementation guidance, if any, belongs outside Part C.)
Problem & Context (Informative)
The problem C.16 solves
Across FPF patterns, people say “score”, “metric”, “rating”, “property”. Without a shared substrate, numbers drift: 42 of what? on which scale? comparable to whom? C.16 eliminates drift by requiring every metric notion to bind to one Characteristic and one Scale, and by separating Characteristic/template bindings from descriptions and ScoringMethods. The result is portable meaning: a measure is always readable as a Coordinate on a declared Scale of a named Characteristic, with a principled path to evidence.
Context and prior art
- Kernel canon. A.17 makes Characteristic the sole canonical head for measurability; A.18 fixes CSLC as the minimal sufficiency for interpretability. C.16 relies on both.
- Cross‑domain alignment. The MM‑CHR family already maps FPF U.Types to ISO 80000‑1 (Quantity), ISO/IEC 25024 (Data‑quality Characteristic), QUDT (QuantityKind and QuantityValue), W3C SOSA/SSN (Observable, Observed, and Result), and domain “feature/metric” usage (Verspoor, TF Metrics). C.16 uses these rows as Bridges (Part F), preserving local senses and documenting losses.
- Open‑ended evolution. FPF replaces “lifecycle” with Role‑State Graph (RSG) style state checklists (A.2.5): movement is along certified states with checklists; re-entry is valid when distinctions change. C.16 uses this device only to frame readiness and revision of metric notions conceptually (no processes implied).
Forces (Informative)
F1 — Interpretability first. A value detached from its Characteristic and Scale is meaningless; CSLC supplies minimum context.
F2 — Transdisciplinarity. Physics, architecture, curation, sport judging—one substrate must cover all while respecting scale types and polarity.
F3 — Characteristic/template vs description. Confusing the U.Characteristic or measurement template with its rubric or exemplar text (descriptions) corrupts claims; C.16 keeps them distinct.
F4 — Comparability without coercion. Ordinal ≠ interval; ratio admits unit change, ordinal does not; polarity matters for “better/worse”. C.16 encodes these as conceptual constraints, not formulas.
F5 — Evidence sufficiency. A measure should be checkable in principle; evidence is a conceptual link (not storage advice).
F6 — Lexical discipline. One canon in normative register; narrative labels are didactic only (Part E). C.16 reuses E.10’s register mapping.
Solution Outline (Normative)
S1 — Exported objects. C.16 exports four measurement constructs to be used by any FPF pattern:
U.DHCMethod— a measurement template (a Definition) that binds oneU.Characteristicto one Scale form, with declared polarity and (optionally) a citation point to the governing FPF pattern, method description, Bridge, or specification record for any non-trivial equivalence or comparability claim that is relied upon elsewhere. References to this template useU.DHCMethodRef. It is a measurement-definition specification, not a record layout.U.Measure— an assertion that a subject occupies a Coordinate (or Level, if discrete) on that Scale; the measure references its template and carries a conceptual pointer to evidence (U.EvidenceStub).U.Unit— the unit kind associated with the Scale where applicable (physical quantities, normalized “points”, “stars”, “%”); unit coherence is part of comparability conditions.U.EvidenceStub— a conceptual locator of grounds for the asserted value (type, identifier, brief summary, optional integrity notion); sufficiency criteria are conceptual (see §9 below).
S2 — Comparability stance (boundary‑aware). C.16 states only the direct comparability condition for measurement claims: same template (hence, same Characteristic, Scale, and Unit semantics by reference to A.17 and A.18). Any comparability claim that relies on transformations (normalization, scoring, aggregation, cross‑context transport, bridge losses, legality gating) MUST cite the governing CN-Spec record, CG-Spec record, or relevant mechanism pattern. C.16 does not define those transformations or their laws. (Details: §7–§8 below.)
S3 — Evidence stance. A measure that, by its template, requires evidence, is inadmissible without a meaningful U.EvidenceStub. C.16 defines what it means conceptually for evidence to “connect” the subject, the Characteristic, and its symbolic description; mechanisms are out of scope. (Details: §9 below.)
S4 — RSG framing (open‑endedness). Readiness, calibration, and revision of metric notions are expressed as RSG node moves with checklists (e.g., “characteristic bound”, “Scale typed”, “Unit coherent”, “ScoringMethod declared”), allowing re‑entry when distinctions change; there is no terminal “lifecycle”. (Details: §10 below.)
Lexical Discipline & Registers (Normative)
L1 — Canon. Use Characteristic, Scale, Level, Coordinate, Value, Score, Unit, and ScoringMethod in Tech register; their U.* counterparts in Formal. Narrative labels (e.g., axis, points, stars) are didactic only, and are mapped at first mention to the Tech canon (E.10).
L1‑bis — “metric”. The noun metric is not a Tech‑register canonical token for measurables; use Characteristic, Scale, Coordinate, Score, and ScoringMethod. It may appear in the pattern title and in the Formal names U.DHCMethodRef and U.Measure. Do not use metric as a synonym for Characteristic or Score in normative prose.
L2 — Characteristic/template vs Description. Keep C.16 measurement-definition objects (U.DHCMethodRef, U.Characteristic) distinct from descriptions (rubrics, exemplars) and from claims (U.Measure). No collapsing of names across these positions.
L3 — No synonym sprawl. In normative clauses do not substitute dimension, axis, property, or feature for Characteristic; A.17 governs canonicalization. (C.16 inherits A.17’s rename policy.)
L4 — Bridge‑only unification. Cross‑vocabulary sameness appears only via F.9 Bridges with CL and loss notes; C.16’s lexicon is the source side for measurement rows.
L5 — Plain‑register shorthand. In Plain register metric MAY be used as shorthand for “template + readings”, but on first use it MUST be mapped to U.DHCMethod (template) and U.Measure (reading), and to the Tech canon terms that matter for meaning.
L6 — No local CHR-mechanism terminology canon. Tokens and laws governed by characterization mechanisms (e.g., normalization method tokens, invariant-value notions, indicatorization policy terms) MUST be introduced only by their governing FPF patterns. C.16 may mention them only as cited external terms, never as locally defined canon.
Relations (pointers; details below)
To A.17 and A.18. C.16 uses A.17’s canonical Characteristic and A.18’s CSLC sufficiency; it neither re‑states nor weakens them.
To Part F. C.16 is the exporting pattern behind measurement rows in UTS rows and Bridges (e.g., result‑value ↔ SOSA Result, ISO QuantityValue).
To Arch‑CAL. Architectural qualities (Coupling, Cohesion, Evolvability) become Characteristics measured via C.16 templates; architectural dynamics read as trajectories in CharacteristicSpace (A.17 context).
Normative Core Model (types & Standards)
Position. MM‑CHR does not redefine kernel terms; it binds them to an FPF‑level Standard that every metric must satisfy. Canonical vocabulary and CSLC duties are inherited from A.17 and A.18 and referenced here without duplication.
Governing references. A.17 and A.18 govern Canon and CSLC; C.16 adopts by reference and keeps restatements of their definitions out of scope. C.16 only exports
U.*constructs, comparability stance, evidence semantics, and RSG touch‑points.CHR boundary reminder. Any notion that belongs to characterization mechanisms (normalization, indicatorization, scoring, aggregation, comparison, selection) appears in C.16 only as a pointer to its governing FPF pattern or specification record. C.16 MUST NOT become a shadow governing pattern for any such terminology or laws.
U.DHCMethod — the measurement template (normative)
Role. A measurement-template Standard that fixes what is measured and how values must be read—without producing any values itself. It is a Definition, not a Measure. References to this template use U.DHCMethodRef. (Didactic: think “the meaning declaration for a reading”.)
R-MT-1 (CSLC binding). A DHCMethod SHALL bind to exactly one U.Characteristic and exactly one Scale‑form admissible for that Characteristic (cf. A.18). Level is optional (used when the scale is enumerated); otherwise values are given directly as Coordinates.
R‑MT‑2 (Unit). If the scale carries units (interval or ratio), the template SHALL designate a Unit of presentation. For ordinal or nominal scales, unit may be absent or a nominal label (e.g., “stars”). (Old MM‑CHR Annex A already listed these structural elements; here we fix the conceptual obligation. )
R‑MT‑3 (Polarity). For any ordered scale, the template SHALL declare polarity (higher-is-better, lower-is-better, or target-is-best), as a semantic reading aid and as an input to consuming patterns. If polarity is target-is-best, the template SHALL name the target value (or target set) and MAY cite by reference the governing method description, scoring pattern, normalization pattern, selection pattern, or policy publication that carries any tolerance or fall-off convention used by downstream mechanisms or methods. C.16 does not standardize tolerance or fall-off semantics.
R‑MT‑4 (Applicability). A template SHALL state the applicability frame (what kinds of subjects it meaningfully applies to) in conceptual terms; this is a property of the definition, not of any measure.
R‑MT‑5 (Template vs description). The template is a measurement template. Any rubric, checklist, or prose that explains it is a Description; they are related but not identical (E.10 discipline).
R‑MT‑6 (Cardinality hint). A Template MAY declare its intended cardinality semantics for a subject within a time stance (e.g., latest‑only, at‑most‑one‑per‑day, time series). Where declared, claims outside that semantics are inadmissible conceptually (they must be reframed or versioned). Purpose: prevent silent duplicates and mixed regimes without imposing storage logic.
R‑MT‑7 (MAY). UncertaintyPolicy — optional conceptual guidance on how uncertainty is expressed or read (e.g., band, confidence interval, or quantile), without prescribing methods/tools.
(Informative examples: calibrated probability with a confidence band; a prediction interval; a set‑valued reading such as a prediction set.)
U.DHCMethod — the measurement template (normative)
Role. A measurement-template Standard that fixes what is measured and how values must be read—without producing any values itself. It is a Definition, not a Measure. References to this template use U.DHCMethodRef. (Didactic: think “the meaning declaration for a reading”.)
R-MT-1 (CSLC binding). A DHCMethod SHALL bind to exactly one U.Characteristic and exactly one Scale‑form admissible for that Characteristic (cf. A.18). Level is optional (used when the scale is enumerated); otherwise values are given directly as Coordinates.
R‑MT‑2 (Unit). If the scale carries units (interval or ratio), the template SHALL designate a Unit of presentation. For ordinal or nominal scales, unit may be absent or a nominal label (e.g., “stars”). (Old MM‑CHR Annex A already listed these structural elements; here we fix the conceptual obligation. )
R‑MT‑3 (Polarity). For any ordered scale, the template SHALL declare polarity (higher-is-better, lower-is-better, or target-is-best), as a semantic reading aid and as an input to consuming patterns. If polarity is target-is-best, the template SHALL name the target value (or target set) and MAY cite by reference the governing method description, scoring pattern, normalization pattern, selection pattern, or policy publication that carries any tolerance or fall-off convention used by downstream mechanisms or methods. C.16 does not standardize tolerance or fall-off semantics.
R‑MT‑4 (Applicability). A template SHALL state the applicability frame (what kinds of subjects it meaningfully applies to) in conceptual terms; this is a property of the definition, not of any measure.
R‑MT‑5 (Template vs description). The template is a measurement template. Any rubric, checklist, or prose that explains it is a Description; they are related but not identical (E.10 discipline).
R‑MT‑6 (Cardinality hint). A Template MAY declare its intended cardinality semantics for a subject within a time stance (e.g., latest‑only, at‑most‑one‑per‑day, time series). Where declared, claims outside that semantics are inadmissible conceptually (they must be reframed or versioned). Purpose: prevent silent duplicates and mixed regimes without imposing storage logic.
R‑MT‑7 (MAY). UncertaintyPolicy — optional conceptual guidance on how uncertainty is expressed or read (e.g., band, confidence interval, or quantile), without prescribing methods/tools.
(Informative examples: calibrated probability with a confidence band; a prediction interval; a set‑valued reading such as a prediction set.)
U.Measure — the recorded reading (normative)
Role. A claim that a subject occupies a Coordinate (or named Level) on the template’s scale, backed by a minimal pointer to its grounds.
R‑ME‑1 (Template binding). Every Measure SHALL reference exactly one DHCMethodRef; its Value or Coordinate must be valid for that template’s scale (type, range, category).
R‑ME‑2 (Subject). A Measure SHALL identify its subject‑of‑measurement (the bearer) unambiguously in the same Context of meaning as the template’s applicability frame.
R‑ME‑3 (Evidence stub). Where the template requires it, a Measure SHALL include an EvidenceStub—a conceptual pointer sufficient to support independent reasoning about the claim’s origin. (The old spec framed this as “traceability or provenance”; we keep only the conceptual role here. )
R‑ME‑4 (Time stance). A Measure SHALL carry a time stance (e.g., “as‑observed at T”, or “as‑aggregated over W”), expressed conceptually; it disambiguates the reading’s intended window without prescribing formats.
R‑ME‑5 (Entity vs relation). If the Characteristic is relational, the subject is a tuple (pair, k‑tuple); the wording of the claim reflects that arity and the template’s relation topology (cf. A.17).
R‑ME‑6 (MAY). UncertaintyStub — optional conceptual pointer to the adopted uncertainty estimation for this Measure, if required by the template.
Informative source reference. The old Annex B example “Article Completeness” illustrates the split template/measure/evidence; C.16 keeps the split but keeps storage-level talk out of scope.
U.Unit — semantics of quantities (normative)
Role. A conceptual marker of quantity kind and admissible conversions within that kind; not every scale requires it.
R‑UN‑1 (Quantity kind). Where units apply, the template SHALL indicate the quantity kind (e.g., Time, Length, Dimensionless‑Score). Units are meaningful only within one kind.
R‑UN‑2 (Convertibility). Comparisons across different units are valid iff they are convertible by kind-preserving transformation (ratio or interval scales); for ordinal or nominal scales, no numeric conversions exist. (Old Annex A listed conversion hints; here we assert the conceptual boundary. )
R‑UN‑3 (Canonical labels). % denotes “fraction×100”; “points” denotes dimensionless magnitudes used for scores; “stars” denotes discrete ordinal marks. These are labels of representation, not new characteristics.
R-UN-4 (Quantity-kind bridge). A Template on an interval or ratio Scale SHOULD name the underlying quantity kind (e.g., ISO 80000/QUDT category) to enable safe external bridges. This does not import external vocabularies; it declares an alignment point.
U.EvidenceStub — pointer to grounds (normative)
Role. A compact tie from a Measure to the grounds sufficient for reasoned audit (not a repository prescription).
R‑EV‑1 (Minimal sufficiency). An EvidenceStub SHALL carry, at minimum, a type‑of‑ground and an identifier sufficient to retrieve or reconstruct the grounds in the appropriate Context of meaning.
R‑EV‑2 (Compositionality). Multiple grounds may be composed as a finite set; composition is commutative, associative, and idempotent at the level of stubs, enabling conceptual merge of corroborations.
R‑EV‑3 (Soundness axiom). A Measure is MM‑CHR‑admissible only if at least one auditable chain of grounds can be stated from the bearer to the Characteristic via an appropriate description episteme that carries the measured subject, characteristic, and evidence relation. (Note: mechanism‑level admissibility gates (e.g., legality thresholds or evidence thresholds in CG‑frames or CHR mechanisms) are governed by their FPF patterns or specification records; C.16 defines only the conceptual “has grounds” link.)
R‑EV‑3 (Soundness axiom). A Measure is MM‑CHR‑admissible only if at least one auditable chain of grounds can be stated that connects:
bearer (subject) -> grounds -> Characteristic -> Coordinate or Level on the declared Scale,
in the appropriate Context of meaning. (Informative: this is the measurement-claim binding chain.)
(Boundary note: mechanism‑level admissibility gates (e.g., legality thresholds or evidence thresholds in CG‑frames or CHR mechanisms) are governed by their FPF patterns or specification records; C.16 defines only the conceptual “has grounds” link.)
Polarity, Comparability, and ScoringMethods (normative)
Notation. To avoid clashes with the kernel’s global aggregation symbol, this FPF pattern denotes a ScoringMethod (score‑level mapping) by 𝒢 (calligraphic 𝒢).
R‑POL‑1 (Declared polarity). Every ordered scale SHALL declare polarity at the template. Any disclosed scoring method 𝒢 that issues a Score for that template SHALL be order‑compatible with the declared polarity semantics (monotone for ↑/↓ polarity; target‑aware only when the target semantics is explicitly declared and cited where it depends on external conventions).
R‑CMP‑1 (Direct comparability). Two readings are directly comparable only when they reference the same U.DHCMethodRef (hence share Characteristic, Scale, and Unit semantics by reference to A.17 and A.18). “Same‑template” is the only comparability relation defined by C.16.
(Clarification: sharing a name, unit label, or scale type across distinct templates is not sufficient for comparability in MM‑CHR; cross‑template comparability must be established via R‑CMP‑2.)*
R‑CMP‑2 (Transformed comparability is cited, not defined). If a comparison relies on any transformation or supporting step (e.g., normalization, indicatorization, scoring, aggregation, cross‑context transport, bridge conversions, legality gates), that step SHALL be named and cited via its governing FPF pattern or specification record. C.16 does not define such transformations, their law sets, or their admissibility conditions.
R‑G𝒢‑1 (ScoringMethod disclosure). If a pattern issues a Score (a value on a score scale), its scoring method 𝒢 : Coordinate -> Score SHALL be identified by reference to its governing method-description episteme or FPF pattern, and SHALL disclose: (i) a bounded codomain and score range, and (ii) an explicit order‑compatibility statement (e.g., monotonicity) consistent with the template’s declared polarity. When reproducibility matters, the reference SHOULD be edition-pinned according to that episteme or pattern's authoring discipline. C.16 does not define scoring methods; it only requires that a score be interpretable as a reading on a declared scale.
R‑G𝒢‑2 (Ordinal respect). For ordinal inputs, any cited scoring method must be order‑preserving; interval assumptions MUST NOT be smuggled in. (Normative source for scale legality remains A.18; C.16 only enforces “no silent semantics upgrade”.)
Entity vs Relation bindings (normative clarifications)
R‑ER‑1 (Arity preservation). If the Characteristic is U.EntityCharacteristic, the subject is one bearer; if U.RelationCharacteristic, the subject is a k‑tuple (k ≥ 2). The Measure’s claim text SHALL reflect this arity.
R‑ER‑2 (Relation scale). Relation‑valued scales SHALL fix their symmetry/antisymmetry and directionality (e.g., distance symmetric; influence directional), at the template level.
R‑ER‑3 (Bridge to CG‑frames). In architectural CG‑frames, Coupling/Cohesion are Characteristics over modules (structure) or roles (function). Their measures are relational (Coupling) or unary (Cohesion within an element), but both live in the same MM‑CHR substrate. (Alignment hinted in the old mapping rows across contexts. )
Acceptance (conceptual, RSG‑aware)
Acceptance here is thought‑level. It uses the Role‑State Graph (A.2.5) pattern to organise mental checks—no “lifecycle” narratives.
SCR‑C16‑A (Template sufficiency). You can check—without invoking tooling—that the template has: (i) a fixed Characteristic (A.17), (ii) a typed Scale form (A.18), and (iii) coherent Unit semantics where applicable (plus declared polarity for ordered scales).
SCR‑C16‑B (Reading sufficiency). For a given subject, you can check that the reading: (i) cites the template, (ii) states a value valid for the Scale (Coordinate/Level), (iii) states a time stance, (iv) names 𝒢 when a Score is issued, and (v) provides EvidenceStub(s) where the template requires them.
SCR‑C16‑C (Comparability). When two readings are placed side‑by‑side, you can state in one breath whether they are comparable as‑is or only after 𝒢, and why.
SCR‑C16‑D (Evidence adequacy). For any required EvidenceStub, you can sketch at least one auditable chain of grounds from the subject to the Characteristic via a Description in the right Context.
C.16:5.7 Cross-references & source references
- A.17 (CHR‑NORM). Canonical Characteristic and Entity/Relation split; lexical rules and alias sunset.
- A.18 (CSLC‑KERNEL). One Characteristic + one Scale per template; Level optional; operation guard by scale type.
- Annex C (old MM‑CHR). Cross‑domain alignment hints for Characteristics, Observations, and Quantities across ISO 80000, ISO/IEC 25024, QUDT, SOSA/SSN (used here only as conceptual witnesses).
Scale‑type legality quick reference (Informative)
Didactic note. This table is a memory aid for engineers and managers. It does not introduce new legality rules. Normative legality of operations by scale type is governed by A.18 (CSLC) (and, where mechanized in CG‑frames, by the relevant legality profiles). If any row below conflicts with A.18, treat it as an illustrative example and follow A.18.
Reminders (informative; see A.18 for normative rules). G‑1 (Order). On ordinal, transforms should be monotone. G‑2 (Differences). On interval or ratio, Δ is meaningful; on ordinal or nominal, it is undefined. G‑3 (Ratios). Only ratio Scales admit x/y semantics; interval, ordinal, or nominal do not. G‑4 (Unit coherence). Interval or ratio arithmetic presumes compatible units (or a declared conversion). G‑5 (Target polarity). If polarity is targeted, comparisons use distance‑from‑target semantics as declared by the relevant governing pattern, template, and cited method or mechanism.
(These rules line up with the MM‑CHR exposition of CSLC and term discipline; A.17 fixes the lexical side.)
Evidence Semantics (Normative)
What an Evidence Stub is (and is not)
Definition. U.EvidenceStub is a conceptual pointer that ties a measure to the grounds sufficient for independent checking (observations, arguments, admissible transformations). It is not the run log, not the evidence carrier, and not the characteristic itself. This keeps EntityOfConcern and Description-episteme boundary and specification use distinct per E.10.D2 and the Clarity Lattice.
Rule Σ‑1. Whether evidence is required is a property of the metric template; if required, each U.Measure SHALL include an U.EvidenceStub.
Rule Σ‑2. Evidence composition is commutative, associative, idempotent at the concept level (sets/multisets of grounds); combining grounds can never reduce what is knowable about the measure’s warrant.
Rule Σ‑3. Soundness minimum: there exists a conceptual chain linking bearer → Characteristic → Scale and Unit → admissible method or episteme. (No “free‑floating numbers”.)
Rule Σ‑4. Any declared agreement construct used as evidence (e.g., dual readings, panels) SHALL respect the template’s scale type (per A.18) (e.g., order‑based concordance for ordinal; tolerance‑based agreement for interval or ratio).
Note (boundary). CG‑frame evidence thresholds (e.g., “minimal evidence” gates used by selection, scoring, or comparison mechanisms) are governed by their FPF patterns or specification records. C.16 defines only the EvidenceStub semantics that such gates may cite.
Source references: MM‑CHR units and evidence notion; Strict Distinction and the separation of objects from their descriptions and specifications.
Integration with RSG & Dynamics (Normative and Clarifying)
RSG (Role‑State Graph) touch‑points
MM‑CHR supplies recognisers used in State Checklists. A checklist criterion may refer to a measure (e.g., “Cohesion ≥ T on ordinal ladder”), but the state itself remains the EntityOfConcern of the checklist; the checklist is its description, and a StateAssertion is an evidence‑backed verdict over a Window. No lifecycle language is implied; RSGs are open‑ended graphs with re‑entry edges.
Rule RSG‑M1. When a checklist cites a measure, it SHALL do so by Characteristic + Scale semantics (and unit if applicable), not by colloquial aliases; Tech and Formal registers apply. Rule RSG‑M2. Thresholds in checklists MUST respect the scale type (no ratio talk on interval scales; no arithmetic on ordinal ladders).
Dynamics & CharacteristicSpace
U.Dynamics.stateSpace is a CharacteristicSpace—a named set of Characteristics with units and topology. MM‑CHR provides the measurement side of that space; patterns specify the transition law. Architectural or epistemic dynamics are then trajectories in the declared CharacteristicSpace. No procedural or storage commitments are implied.
Conformance Checklist (Normative)
Thought‑level acceptance conditions for authors and assessors; they constrain meaning, not tooling.
CC-MCHR-1 - CSLC binding. Each U.DHCMethodRef binds exactly one U.Characteristic and exactly one scale; each U.Measure carries a value valid for that scale (cf. A.18).
CC‑MCHR‑2 - Polarity declared. Every ordered scale in a template declares polarity; any Score via 𝒢 is monotone w.r.t. that polarity.
CC‑MCHR‑3 - Unit coherence. Claims that compare or combine values are grounded in unit coherence (or declared conversions for interval or ratio).
CC‑MCHR‑4 - Comparability honesty. Ordered comparisons are asserted only when R‑CMP‑1 holds (same‑template direct comparability) or when a named and cited transformation basis is provided per R‑CMP‑2; otherwise authors use qualitative/set‑level language.
CC‑MCHR‑5 - Evidence sufficiency. Where evidence is required by the template, the measure’s grounds are conceptually sufficient to retrace the claim; composition respects Σ‑1…Σ‑4.
CC‑MCHR‑6 - RSG alignment. If a measure gates a state in an RSG, the checklist criteria respect scale semantics and the EntityOfConcern vs Description-episteme split. No lifecycle phrasing; use RSG open‑ended moves.
CC‑MCHR‑7 - Dynamics awareness. Where discussions involve change, the CharacteristicSpace is named (characteristics, units, topology) and separated from the transition law.
CC‑MCHR‑8 - Lexical guard‑rails. Tech identifiers and headings use Characteristic, Scale, Level, Value, Score, Unit, and ScoringMethod; aliases (axis, dimension, points, or stars) appear only in explanatory Plain register with a first‑mention mapping to the Tech canon.
CC‑MCHR‑9 - Causal-use metric boundary. A measurement, metric disparity, score, dashboard reading, or benchmark value that reaches CausalUseActivation SHALL keep measurement construction, scale legality, comparability, and evidence-stub repair in C.16, and SHALL carry causal-use question, causal-ladder rung, causal estimand, support basis, support verdict, admissible causal use, and inadmissible causal use in C.28.
Invariants & Anti‑Patterns (Normative unless marked “Informative”)
Invariants (N‑rules)
N‑1 — One Characteristic + one Scale per template.
Every U.DHCMethodRef binds exactly one Characteristic and exactly one Scale (its type + admissible range or level‑set). This is the CSLC sufficiency condition for interpretability.
N‑2 — Value validity.
A U.Measure holds a Value that is admissible for the template’s Scale (numeric range, categorical level); when a Level is used, it is among the named levels declared for that Scale.
N‑3 — Polarity is declared at the template. For ordered Scales, the template states the comparison direction (↑ better, ↓ better, or target-is-best). Any ScoringMethod mapping to Score preserves that monotonic ordering. (Note: we use “ScoringMethod mapping” instead of the Greek letter used elsewhere in FPF to avoid symbol conflicts.) For ordered Scales, the template states the comparison direction (↑ better, ↓ better, or target-is-best). Any scoring method 𝒢 that issues a Score is order‑compatible with that declared polarity semantics.
N‑4 — Unit coherence. Within one template there is one primary Unit of expression (or an explicit level‑set for non‑numeric Scales). Conversions are conceptually valid only where the Scale supports meaningful arithmetic (interval or ratio); nominal/ordinal Scales are not subject to numeric conversions.
N‑5 — Comparability guard. Two Measures are comparable iff they share the same template (hence, the same Characteristic, Scale, and Unit) or stand in an explicit comparability relation whose governing FPF pattern or specification record is cited (e.g., an F‑cluster Bridge, or a cited characterization mechanism’s declared equivalence). Otherwise, comparability is not presumed.
N-6 - Evidence as conceptual relation. If a template requires it, each Measure includes an EvidenceStub that conceptually links the Value to its grounds; absence where required makes the Measure inadmissible for use. (This is a conceptual obligation; no process mechanics are implied.)
N‑7 — Arity clarity. If the Characteristic is relational (applies to a pair or tuple), the subject of measurement is the relation itself; the reading must not be re‑described as a unary property of either participant.
N‑8 — Open‑ended evolution; graph, not lifecycle. When MM‑CHR is used in change reasoning, movement happens in a CharacteristicSpace and along a Role‑State Graph (RSG). There is no lifecycle terminal; revisions may re‑enter earlier framing nodes as per A.17. (Conceptual control structure only.)
Anti‑Patterns (A‑rules) — with cures
A‑1 — Scale drift under the same template. Smell: the Scale meaning (bounds, categories) shifts while the template ID remains. Cure: version the template; declare the relation in the Unification suite.
A‑2 — Arithmetic on ordinal. Smell: averaging “stars” or ranking labels as if they were intervals. Cure: either keep order‑respecting operations only, or introduce a ScoringMethod that defines a proper Score range.
A‑3 — Unit soup. Smell: mixing milliseconds and seconds for the same template, or “%” and “points” for one Scale. Cure: one primary Unit per template; conversions (when meaningful) are declared conceptually, not ad‑hoc.
A‑4 — Alias leakage. Smell: “axis”, “dimension”, “point”, or “ladder” in normative identifiers or headings. Cure: use only canonical tokens in normative prose; narrative labels are valid solely in Plain register with first‑mention mapping (A.17).
A‑5 — Multi‑Characteristic stuffing. Smell: one template tries to carry a vector of Values for several Characteristics. Cure: separate templates (one Characteristic each) and compose coordinates explicitly when needed.
A‑6 — Evidence afterthought. Smell: Measures required to have grounds are introduced without an intelligible EvidenceStub. Cure: treat the EvidenceStub as part of the measurement claim itself, not an accessory.
A‑7 — Template mutation after Measures exist. Smell: retro-editing Characteristic, Scale, and Unit of an active template. Cure: immutability of that triad post‑use; publish a successor template if the concept changes.
A‑8 — Score‑of‑everything. Smell: collapsing heterogeneous Values into a single “points” Score without declared ScoringMethod and SCP. Cure: retain the Value on its Scale; add an explicit scoring method by reference to its governing method-description episteme or FPF pattern and an explicit legality profile governed by the relevant FPF pattern or specification record only when there is a justified need for a Score.
Cross‑Domain Vignettes (Informative, transdisciplinary)
Each vignette shows an CSLC‑conformant template → measure, without duplicating the A.17 and A.18 glossaries.
V‑A (Architecture — relational property). Characteristic: Coupling (relational) between modules; Scale: ordinal {Low, Med, High}; Unit: level‑labels; Polarity: ↓ better. Reading: subsystem pair ⟨M₁, M₂⟩ gets Med; ScoringMethod (optional) maps levels monotonically to a bounded Score for comparative dashboards.
V-B (Physics — interval or ratio). Characteristic: ResponseTime; Scale: ratio with non‑negative reals; Unit: seconds; Polarity: ↓ better. Reading: subject S has 0.237 s; direct comparability holds with readings on the same template; cross‑template comparability requires an explicitly cited equivalence relation, Bridge, or transformation relation with its governing FPF pattern or specification record named.
V‑C (Performing arts — ordinal). Characteristic: EdgeControlQuality; Scale: ordinal levels 1…5; Unit: level‑labels; Polarity: ↑ better. Reading: performance P gets 4; any aggregation remains order‑respecting. If a numeric dashboard score is needed, cite a scoring method 𝒢 that maps levels monotonically to a bounded Score.
V‑D (AI ethics — ratio). Characteristic: ParityGap (difference of positive rates); Scale: interval with symmetric bounds; Unit: percentage points; Polarity: ↓ better (0 is target). Reading: model M on cohort C shows 3.2 pp; evidence points conceptually to the derivation rationale (inputs, reference cohorts).
Relations & Placement (Informative)
Precision-restoration relation. C.16.P is the first-stage wording-use restoration pattern for characteristic, scale, coordinate, score, metric, axis, dimension, and related characterization wording when the measurement or characteristic object is not yet recoverable. C.16 keeps the measurement substrate and resumes after the bearer, characteristic, scale, coordinate/value, unit, evidence stub, or exact non-C.16 governing pattern has been recovered.
C.27 temporal-claim relation.
- C.27 may flag: a rate/rate-change reading whose admissible use depends on admissible measurement construction, evidence, sampling window, or finite-difference method.
- This pattern keeps: measurement construction, comparability, units, sampling windows, evidence, and admissible metric use.
- Non-admissible use: a rate-change label is not a measurement template, and temporal words such as velocity, acceleration, throughput, cadence, or recovery speed are not admissible measures by themselves.
- Exit: when load-bearing, the claim cites
baseCharacteristicRef, the relevant measure reference, sampling window, construction method such asDHCMethodRef, andC16RouteRef; C.27 keeps only the temporal-claim adequacy question.
C.28 causal-use relation. C.16 governs measurement templates, readings, score meanings, scale legality, direct comparability, and evidence-stub adequacy. C.28 governs the causal-use relation when the same reading is used to claim effect, intervention success, causal fairness, policy optimality, counterfactual comparison, off-policy causal evaluation, causal-RL evaluation, or causal method superiority. A C.16-admissible measure is therefore not by itself admissible for causal use under C.28.
Kernel. MM‑CHR imports the canonical Characteristic vocabulary and the CSLC discipline fixed by A.17 and A.18; it does not redefine them. CharacteristicSpace reasoning (for change) lives in the patterns that consume MM‑CHR readings.
Using patterns. KD‑CAL, Arch‑CAL and others instantiate templates and produce measures; MM‑CHR remains a neutral measurement substrate. Trade‑off analyses and architectural trajectories operate over coordinates that MM‑CHR makes available, not inside MM‑CHR.
Unification (F‑cluster). External standards (e.g., ISO 80000 quantity types; W3C SOSA/SSN observable properties; QUDT units/quantity kinds) are related via Concept‑Set rows and Bridges; MM‑CHR treats those alignments as context supplied by F‑patterns, not as local re‑definitions.
Measurement and probe note for quantum-like readings
Use C.16 first when the question under repair concerns a measure, metric, score, survey, dashboard, sensor, coordinate, scale, or characteristic. A metric is not quantum-like because it is noisy, probabilistic, discrete, gamed, or difficult to interpret. Metric gaming is not QL; a metric-caused state update may be QL only when the publication, probe, order, frame, or export changes what the result can admissibly support.
Action path:
- Name the Characteristic, Scale, Coordinate or Value, Unit when relevant, and EvidenceStub.
- Separate the observable, probe method, measurement scheme, emitted output or result record, state update, and evidence carrier.
- Ask whether the measurement frame or probe frame changes the represented state, whether probe order changes the admissible reading, whether frames cannot share one sample space, or whether exporting the measured state loses the structure needed for intended use.
- If no, stay in C.16 and ordinary evidence or engineering-justification patterns.
- If yes, add a C.26 reading only for that remaining passive-read, shared-frame, or lossless-export mistake.
- State the local stop condition: which decision, audit, release, comparison, or work use with a higher evidence requirement the measurement does not support.
Minimum measurement and probe note:
Useful outputs:
- a C.16 measure/template repair when the issue is metric legality;
- an A.10/B.3 route when the issue is evidence or assurance;
- a C.26.1 route when the probe changes the state it reports;
- no QL wording when noise, uncertainty, discreteness, or metric gaming is the whole issue.
C.29 mathematical-lens use relation
If a mathematical lens depends on measurement construction, scale, unit, polarity, direct comparability, or evidence-stub adequacy, write that measurement-dependent relation in
C.16before treating the lens as usable for those measurement-dependent claims. AC.29output may state only the measurement-dependentLensUseAdmissibilityValuefor the mathematical-lens use claim; it does not construct the measure, make values comparable, or supply an evidence stub. Evidence paths remainA.10; assurance remainsB.3.
C.16:End
Characteristic and Scale Precision Restoration
Type: Characterization precision-restoration pattern Status: Stable Normativity: Normative unless explicitly marked informative
Plain-name. Characteristic-scale wording repair.
Intent.
Recover characteristic, scale, coordinate, score, metric, indicator, threshold, comparison, and scalar-quality wording whose construction is hidden before a reader applies C.16, A.17, A.18, A.19, C.25, C.29, E.21, or another governing pattern.
This pattern is not a metrics-only pattern, not a measurement-method replacement, not a Q-bundle pattern, and not a gate or decision pattern. It repairs overloaded characterization wording so the exact Characteristic, Scale, Coordinate, Value, Score, Unit, ScoringMethod, indicator role, comparison reference or comparator set, proxy role, admissible use, and governing pattern become recoverable.
Builds on. E.10, E.10.ARCH, A.17, A.18, C.16, A.19, C.25, C.29, E.21, F.18, and A.6.P.
Coordinates with. C.16.Q, A.19.ECS, CHR mechanism patterns, G.0, G.5, G.9, C.11, A.10, B.3, A.20, A.21, C.28, A.15, evidence, assurance, gate, decision, causal-use, release, work, benchmark, and publication patterns governing those claims.
E.10.ARCH governing relation. When E.10 encounters metric, score, axis, dimension, feature, property, indicator, strong, weak, robust, level, coordinate, threshold, benchmark, or scalar-quality wording whose characteristic and scale construction is hidden, E.10.ARCH selects C.16.P only until bearer, characteristic, scale, value or score construction, comparison reference or comparator set, threshold rule or reference, proxy relation, admissible use, and governing pattern are recovered. After that recovery, the governing pattern governs its own invariant.
Use this when
Use this pattern when wording such as axis, dimension, feature, property, metric, indicator, score, strong, weak, robust, level, coordinate, threshold, rating, benchmark, quality coordinate, or architecture score carries a characterization claim but does not yet show the recoverable construction.
What goes wrong if missed. A metric becomes a measure without a scale, a score becomes proof, strong becomes a verdict without a characteristic, a level becomes an undefined maturity status, an indicator becomes the thing indicated, or a benchmark result becomes gate passage or release permission.
What this buys. The reader can recover the bearer, characteristic, scale, value, score, unit, scoring method, indicator role, comparison reference or comparator set, threshold, admissible use, and governing pattern before treating a number, adjective, coordinate, or comparison as actionable.
First useful move. Ask which bearer, characteristic, scale, value or score construction is recoverable; then apply C.16, A.19, C.25, C.29, E.21, or the neighboring pattern governing that claim instead of letting the compact word decide.
Not this pattern when.
- If the
Characteristic,Scale, value set, scoring method, and admissible use are already recoverable, useC.16,A.17,A.18, orA.19directly. - If the claim being made is a Q-bundle, quality-term or evaluative characterization, or pattern-quality coordinate, use
C.25,C.16.Q, orE.21directly after any needed characteristic-scale repair. - If the claim being made is mathematical-lens use, use
C.29. - If the claim being made is evidence, assurance, gate, work, decision, causal-use, release, benchmark harness, or project-side authority claim, use the governing pattern for that claim after characteristic and scale construction is recovered or blocked.
Problem frame
Working texts often need compact characterization words. The problem starts when compact words begin to carry comparison, proof, selection, gate, readiness, release, quality, or decision claim without recoverable characteristic and scale construction.
The repair question is:
What characteristic or scale construction is recoverable, and what governing pattern carries the remaining claim?
The recoverable item may be:
- a
CharacteristicunderA.17; - a
Scale, coordinate, value, unit, scoring method, measure, or measurement use underA.18andC.16; - a
CharacteristicSpaceunderA.19; - a Q-bundle under
C.25; - quality-term or evaluative characterization under
C.16.Q; - pattern-quality coordinate use under
E.21; - mathematical-lens use under
C.29; - comparison, threshold, indicator, proxy, benchmark, gate, evidence, decision, or work claim under neighboring patterns governing those claims;
- ordinary prose with no FPF-governed use.
Problem
How can FPF repair characterization wording without:
- treating
metricas a universal measurement kind; - treating
scoreas proof, readiness, gate passage, release permission, or decision; - treating
axis,dimension,feature,property, orlevelas a recoverable characteristic by appearance; - treating
strong,weak,robust,high,low, orbetteras meaningful without a scale and comparison reference or comparator set; - turning
C.16.Pinto a CHR super-pattern or replacement forC.16,A.17,A.18,A.19,C.25,C.29, orE.21; - copying first-stage characterization repair lists into every governing pattern.
Forces
Solution
Repair compressed characterization wording by producing a characteristic-scale repair note or equivalent local rewrite.
Minimum fields:
Use the full note only when the repair must remain inspectable. Use a local rewrite when one sentence clearly states the characteristic and scale construction and governing pattern.
Recovery sequence
- Capture the trigger. Copy the exact word or phrase and the sentence that uses it.
- Recover the bearer. Name what is being characterized: holon, pattern, DRR, architecture description, structure, model, method, work result, publication, candidate, relation, decision option, evidence path, or another FPF kind named by value.
- Recover the construction. Decide whether the trigger means
Characteristic,Scale, coordinate, value, score, unit, scoring method, indicator, threshold, comparison reference or comparator set, proxy, Q-bundle, mathematical lens, gate, evidence, decision, or ordinary prose. - Select direct governing pattern when possible. If
C.16,A.17,A.18,A.19,C.25,C.29,E.21, or another governing pattern is already recoverable, use it directly. - Repair hidden characteristic and scale construction. When construction is hidden, recover the minimal needed set: characteristic, scale, value set, score, unit, scoring method, indicator role, comparison reference or comparator set, threshold rule or reference, admissible use, and non-admissible use.
- Exit adjacent claims. Evidence, assurance, gate, work, decision, causal-use, release, benchmark, publication, or authority claims go to governing patterns.
- State remaining reader move. Say what the reader can now compare, measure, score, block, or assign to a neighboring pattern. If the result is type-correct but gives no action or recognition reason, the repair is incomplete.
Trigger split
Governing-Pattern Exits Named by Value
Refresh and reopen conditions
Reopen or narrow C.16.P when current pattern-language ecology changes the first characteristic and scale entry:
- a new characteristic named by value, scale, evaluation, benchmark, proxy or indicator, gate or decision, mathematical-lens, quality, OEE, NQD, or publication pattern can receive one row directly;
- current best-known practice changes comparability, proxy-risk, threshold, measurement, scoring-method, or benchmark-harness discipline adopted in
C.16.P:8; - README, ToC,
E.11, retrieval, or local Problem-frame entry cues change the first practical entry for hidden characteristic and scale wording; - a governing pattern starts copying first-stage
metric,score,axis,strong, orindicatortrigger lists that belong here; C.16.Pbegins to act as a metrics catalog, maturity scheme, or CHR super-pattern rather than a wording-use repair pattern for hidden construction.
The refresh action is to remove, narrow, or redirect the first-stage row. It is not to preserve old exits as history.
Worked cases
Reduced SoTA row
Current measurement, quality, proxy-risk, and comparison practice distinguishes characteristics, scales, measures, scores, indicators, thresholds, comparability, proxy status, and decision use. FPF adopts this line only where it changes examples, non-comparability boundaries, indicator and proxy boundaries, scale and scoring method fields, gate and comparison exits, or conformance checks.
This row blocks scalar verdicts without declared scale and admissible use. It does not import metric lists, maturity-status schemes, or external scoring traditions as FPF ontology.
Conformance checklist
Common anti-patterns
Related patterns
E.10catches hidden characteristic and scale wording and selects this pattern only when construction is hidden.E.10.ARCHdefines the shared wording-use recovery order and applicability row.A.17,A.18, andC.16govern characteristics, scales, values, measures, and measurement use.A.19governs characteristic-space construction.C.25governs Q-bundles.C.16.Qgoverns quality-term or evaluative characterization wording.E.21governs pattern-quality evaluation characteristic spaces.C.29governs mathematical-lens use.- Exact evidence, assurance, gate, work, decision, causal-use, release, benchmark, and publication patterns govern their own claims.
C.16.P:End
Quality-Term Precision Restoration
Type: Characterization precision-restoration pattern Status: Stable Normativity: Normative unless explicitly marked informative
Plain-name. Quality-term precision restoration.
Intent. Provide a reusable discipline for repairing overloaded quality and evaluative-characterization wording in FPF texts.
This pattern lives in the C.16 characterization pattern nest. It rewrites bare evaluative prose either into one explicit endpoint-pattern-governed evaluative form or, when endpoint selection is still being stabilized, into one explicit transitional quality-term repair form with a declared sense family, admissible normal form (SignalPack | Characteristic | Bundle | Objective), reference-plane accountability, and lexical guardrails.
It allows philosophical, neuro-symbolic, control-theoretic, engineering, and open-ended-search uses to coexist without false identity by label. It does not treat quality-term or evaluative characterization as relation construction by default. When the found problem is relation construction, bridge, basedness, action-invitation relation, endpoint mismatch, or another relation-shaped claim, use A.6.P or the relation named by value specialization.
Placement.
Part C > C.16 characterization pattern nest > precision-restoration pattern for overloaded quality and evaluative-characterization wording.
Builds on.
E.10, E.10.ARCH, C.16.P, C.16, C.25, E.21, A.17, A.18, A.19, A.7, C.2.1, E.8, F.9, and F.18.
Coordinates with.
A.6.P for relation-construction exits; A.6.A for action-invitation exits; C.2.2a, A.16, A.16.1, A.16.2, and B.4.1 for language-state chart positions, admissible moves, early cue handling, responsibility handoff, and admissible retreat when an evaluative publication must be reopened; B.5.2.0 when the admissible continuation is still an open explanatory probe rather than a stable endpoint characterization; C.2.LS, C.2.4, C.2.5, C.2.6, and C.2.7 for articulation, closure, anchoring, and representation-factor facets referenced but not governed here; E.17.0, E.17, and E.18 for viewpoint publication; A.10 and B.3 for evidence and assurance; A.19.CN for comparability governance; F.9.1 for bridge-stance annotations; C.3.3 for explicit kind-bridge repair when endpoint kind mismatches appear.
E.10.ARCH governing-pattern relation.
When E.10 encounters quality, good, fit, high-quality, quality metric, quality score, quality characteristic, quality requirement, model quality, architecture quality, solution quality, or evaluative -ility wording whose quality sense, bearer, evaluation frame, endpoint normal form, or governing pattern is hidden, E.10.ARCH assigns the repair to C.16.Q only until those values are recovered or the claim being made exits to C.16.P, C.25, E.21, A.6.P, A.6.A, C.29, A.10, B.3, A.20, A.21, C.11, C.2.P, or another pattern governing the recovered claim. C.16.Q does not keep evidence, assurance, gate, decision, work, release, relation, action-invitation, mathematical-lens, source-use, or publication invariants after that exit is recoverable.
Non-goal.
This pattern does not assert that phenomenal character or qualia, phenomenological preconceptual fit, Pirsig-style dynamic quality and static quality, latent fit in learned representations, explanatory merit, engineering -ilities, QD and NQD selector value, and control adequacy are one concept.
Its job is to publish a disciplined evaluative-characterization use across those traditions while preventing false identity by shared label.
It also does not assert that every trigger use of "quality" is admissibly repaired by the transitional quality-term repair form: where the repaired statement is primarily about an action invitation under A.6.A, relation construction under A.6.P, or a requirement or commitment over explicit heads, the admissible move is to exit to the pattern governing the recovered claim rather than assigning a quality-term or evaluative characterization.
Use this when
Use this pattern when wording such as quality, good, fit, high-quality, quality characteristic, quality improved, or an evaluative -ility claim hides which quality or evaluative-characterization use is live.
Lowest sufficient use. Keep ordinary praise or quoted source-local wording ordinary when it carries no FPF-governed use. When the evaluative endpoint is already known, prefer a direct endpoint-governed rewrite. Use qualityTermAscription(...) only when transitional ambiguity must remain inspectable. Use the full slot set only when decision-bearing, publication-bearing, cross-tradition-bearing, or boundary-bearing claim is live.
What goes wrong if missed. A broad quality word becomes a scalar verdict, a gate, an evidence claim, a relation, a bridge, an action invitation, or a bundle by appearance, while the bearer, evaluation frame, quality sense, admissible normal form, and pattern governing the recovered claim remain hidden.
What this buys. The reader can recover the bearer, evaluation frame, candidate quality sense, admissible normal form, bridge or relation exit when live, and the pattern governing the recovered claim before using the quality word as action guidance.
First useful move. Name the bearer and evaluation frame, choose whether the wording is quality-term or evaluative characterization, characteristic-scale construction, Q-bundle, pattern-quality coordinate, relation construction, bridge stance, action invitation, or ordinary prose, then apply the pattern governing the recovered claim.
Not this pattern when.
- If the issue under repair is hidden characteristic, scale, score, metric, coordinate, threshold, or comparison construction, use
C.16.Pfirst. - If the claim being made is already a Q-bundle, pattern-quality coordinate, relation construction, action invitation, evidence, assurance, gate, work, decision, causal-use, release, or source-use claim, use the pattern governing the recovered claim directly after any needed quality-word repair.
- If the word is ordinary praise or source-local wording with no FPF-governed use, keep it ordinary, quote-only, or reduced-use rather than publishing a quality-term repair.
Problem frame
FPF repeatedly encounters a predictable precision failure mode around the token quality:
drafts say:
- “this design has quality”
- “the model quality improved”
- “quality matters before formalisation”
- “quality characteristics”
- “quality in QD and NQD”
- “the world model is higher quality”
- “the explanation is high-quality”
…but the intended meaning is actually one of several different evaluative families, for example:
- Phenomenal character or qualia when the experienced quality itself is the topic of description rather than an externally measured characteristic.
- Preconceptual fit or felt rightness before stable EntityOfConcern characterization.
- Latent and distributed fit signals in learned representations, world models, or active inference loops.
- Explanatory merit of a theory, problem frame, or conjecture.
- Architectural-description fitness and compression merit of an architecture description or architecture model under a declared viewpoint.
- Engineering quality families such as reliability, maintainability, security, evolvability.
- Usefulness and selection value in open-ended search, novelty–quality–diversity, or portfolio selection.
- Control adequacy of a policy, model, or controller in a closed loop.
The failure modes are recurrent:
- Sense elision. One broad evaluative noun hides several non-equivalent evaluative kinds.
- Bearer confusion. The bearer of the evaluation is unclear: record, publication carrier when the carrier itself is evaluated, episode, model, policy, explanation, candidate, architecture, relation, or action loop.
- Form confusion. A non-metric signal is rewritten as a metric; a bundle is treated as one scalar; an objective is mistaken for a characteristic.
- Substrate confusion. Embodied and preconceptual, latent and distributed, and symbolic-local representations are silently collapsed.
- Plane confusion. Quality of the EntityOfConcern being described, quality of the description, quality of the carrier, and quality of the publication face are silently collapsed across
ReferencePlanevalues and A.7 lanes. - Bridge illusion. Similar wording across traditions is mistaken for sameness.
- Illegal scalarisation. Composite engineering families or explanatory merit are compressed into one number without an admissible scoring method.
- Viewpoint conflict. One stakeholder means architectural attributes, another means usefulness, another means preconceptual fit.
Problem
How can FPF let working texts keep the communicative convenience of the word quality while preventing category errors when the term crosses:
- phenomenological and epistemological discourse,
- architecture-description fitness discourse and viewpoint-fit discourse,
- representation-learning and neuro-symbolic discourse,
- Popper- and Deutsch-style explanation-and-criticism discourse,
- engineering architecture and quality-characteristic discourse,
- open-ended evolution, NQD, and selection discourse,
- control, world-model, and active-inference discourse,
- ecological affordance discourse, including source-tradition
affordancecases that must leave quality-term restoration forA.6.Aor another action-invitation governing pattern?
Forces
- Breadth vs precision. “Quality” is attractive because it is broad; that same breadth makes it unsafe at boundaries.
- Preconceptuality vs auditability. Some uses refer to something real but not yet stably characterised.
- Distributed substrate vs local publication. Some evaluative signals arise in distributed or embodied substrates but must later be published in explicit local forms.
- Comparability vs non-reduction. Engineering and selection settings need comparability, but not every evaluative signal is an admissible metric.
- Cross-tradition dialogue vs false unification. The framework should permit parallels without asserting identity.
- Progressive articulation. A term may begin as a felt signal and later become a bundle, proxy set, or objective.
Solution
Stable repair frame > Sense Family > Slots > Normal Form > Change Lexicon > Guardrails
Trigger rule
A use of quality is in scope for C.16.Q when any of the following holds:
- the token quality or high-quality or low-quality appears in Tech or normative prose;
- a boundary statement relies on “quality” for admission, selection, explanation, comparison, assurance, or requirement-setting;
- different traditions are compared using the same word quality;
- a draft introduces quality metric, quality score, quality characteristic, quality requirement, model quality, architecture quality, solution quality, or quality in QD without a declared sense;
- the occurrence is intended to carry more than one of: evaluative fit, measurable characteristic, bundle, utility, or optimization objective.
Operational repair sequence
When the trigger fires, follow the E.10.ARCH recovery order specialized to quality-term or evaluative characterization:
-
Capture the trigger span. Copy the trigger phrase using quality or a red-flag derivative such as high-quality, quality metric, quality characteristic, or model quality.
-
Recover the bearer and publication lane. Name the bearer and the relevant A.7 lane or kind: EntityOfConcern being described, description,
epistemeor publication face, carrier when the carrier itself is evaluated, pattern, model, policy, explanation, candidate, architecture description, work result, relation, action loop, or ordinary prose. -
Reconstruct candidate quality senses and endpoint patterns. Enumerate plausible candidate senses and, when relevant, candidate endpoint-governing FPF patterns or explicit endpoint source references. If the occurrence is decision-bearing, publication-bearing, or cross-tradition-bearing, record a short quality-term candidate note before selecting the repair.
-
Exit when the claim being made is not quality-term or evaluative characterization. If the occurrence is primarily action invitation, relation construction, bridge, basedness, endpoint mismatch, evidence, assurance, gate, work, decision, causal-use, release, mathematical-lens use, characteristic and scale construction, or source-use, do not assign a
QualitySense. ApplyA.6.P,A.6.A,C.16.P,C.29,C.2.P, or the pattern governing the recovered claim. -
Select one explicit quality sense. Pick one
QualitySensetoken and state why rival senses were rejected in this local context. -
Emit an endpoint-explicit or transitional rewrite. Rewrite the sentence either into one explicit endpoint-pattern-governed evaluative form (
Characteristic | Q-Bundle | Objective | ExplanatoryMeritBundle | selector-value endpoint) or, when endpoint choice is still being stabilized, into one explicitqualityTermAscription(...)transitional repair form with bearer, frame, evaluator and viewpoint, normal form, and explicit qualifiers. -
Classify boundary-bearing consequences. If the repaired statement is used for admissibility, commitments, publication, evidence-bearing decisions, gates, release, or work, apply the governing pattern instead of letting quality carry the required claim by itself.
Transitional repair frame: evaluative classification anchored by qualityTermAscription(...)
C.16.Q stabilizes the ambiguity cluster by treating every in-scope quality statement as explicit evaluative content that must name the endpoint governing pattern or publication with named authority-reference relation that carries it, not as a bare adjective.
qualityTermAscription(...) is the canonical transitional quality-term repair form when the endpoint choice is not yet fixed. It is not the universal resting place, not a relation kind by default, and not a shadow endpoint source.
Entry into C.16.Q presupposes enough articulation explicitness to name the bearer, evaluation frame, and at least one candidate evaluative family. Closure degree may remain low while qualityTermAscription(...) is serving as a transitional repair form, but if the content is still only a cue pack, forwarded cue, or open explanatory probe, keep it in A.16.1, B.4.1, or B.5.2.0 rather than publishing it here prematurely. If a previously published evaluative record later loses the evidence, witness, or authority-reference relation needed to keep even that transitional status live, retreat via A.16.2.
The transitional form is:
So the sentence "X has quality" is never accepted as a terminal form. It must be rewritten either into an explicit endpoint-pattern-governed evaluative form or into this transitional repair form with a declared endpoint-governing pattern or explicit endpoint source relation.
Discipline note.
QualitySense is a slot value inside the transitional repair form; it is not a replacement for the endpoint FPF pattern or explicit endpoint source reference. The sense token refines what kind of evaluative characterization is being made while the endpoint source, governing pattern, or EntityOfConcern remains explicit.
Separation note.
evaluator and viewpoint are not synonyms. When both matter, publish them separately: the evaluator is the observing, criticizing, or selecting party or policy, while the viewpoint is the declared U.Viewpoint under which the ascription is presented.
Polarity discipline (bearer-centred; no silent inverse)
qualityTermAscription is bearer-centred.
Tech and normative prose SHALL keep the evaluated participant in the bearer position and SHALL publish evaluator and viewpoint separately.
- “Architects rate the system highly” rewrites to
qualityTermAscription(bearer=System, evaluator=ArchitectureReviewBoard, …). - “The benchmark says model quality is high” rewrites to
qualityTermAscription(bearer=Model, evaluator=BenchmarkPolicy, …).
There is no inverse token that silently makes the evaluator the bearer. If inverse wording is used in Plain prose, the wording SHALL be rewritten into the bearer-centred form (or publish an explicit inverse form under the pattern governing the recovered claim that governs it).
Endpoint-first discipline
When the admissible endpoint-governing FPF pattern or explicit endpoint source reference is already known, the endpoint-pattern-governed evaluative form SHOULD be published directly, and qualityTermAscription(...) SHOULD remain only when preserving the transitional ambiguity is itself informative. qualityTermAscription(...) is therefore a transitional characterization record, not a shadow endpoint source.
Typical direct endpoints are:
- engineering
-ilityheads published as oneCharacteristicor oneQ-Bundle, - selector-context uses published as an
Objectiveheaded byQS.UseValueunless overridden explicitly, - architecture-description uses published under the description-side evaluative head already selected by the viewpoint bundle,
- explanatory-merit uses published under the explicit merit bundle when that bundle head is already known.
Core construct: QualitySense
Every in-scope use SHALL resolve to an explicit QualitySense token.
A QualitySense token publishes at least:
Where:
articulationMode∈{ preconceptual, exemplar-grounded, proxy-grounded, characteristic-bound, bundle-bound, objective-bound }representationSubstrate∈{ embodied-kinesthetic, latent-distributed, symbolic-local, hybrid }defaultNormalForm∈{ SignalPack, Characteristic, Bundle, Objective }admissibleNormalFormsis the explicitly declared set of admissible evaluative normal forms for the sense.defaultNormalFormnames the primary evaluative normal form; any additional endpoint forms MUST be declared here rather than inferred ad hoc. If the quality ascription is published, route publication face, form, unit, carrier, and rendering questions to E.17, E.8, or the publication pattern governing the claim.
Normative starter set of sense families
A Context MAY add local senses, but the following starter set is normative as the initial disambiguation menu:
Default-form note.
QS.EngineeringQualityFamily and QS.ControlAdequacy default to Bundle.
A local Context MAY operationalize one explicit head as a Characteristic, but that is a declared operationalization, not a second default normal form.
Normative rewrite note.
-
In NQD, QD, or selector contexts, bare quality SHALL rewrite to
QS.UseValueunless a differentQualitySenseis explicitly declared. -
In engineering contexts, bare quality SHALL rewrite either to:
- one explicit
U.Characteristic+ CSLC Scale, or - one explicit
Bundle, preferably published as aQ-Bundlewhen composite.
- one explicit
-
In phenomenological contexts, bare quality SHALL rewrite to
QS.PhenomenalCharacterwhen the experienced quality itself is the topic of description, and toQS.PreconceptualFitwhen the talk is about preconceptual fit or felt rightness before stable characterisation. -
In representation-learning and world-model contexts, bare model quality SHALL rewrite to
QS.LatentFit,QS.ControlAdequacy, or both, with the distinction made explicit. -
In epistemic evaluation contexts, “good explanation” SHALL rewrite to
QS.ExplanatoryMerit. -
In architecture-description fitness or viewpoint contexts, bare architecture quality or architectural quality SHALL first disambiguate the bearer lane: if the bearer is the system-side bearer, use
QS.EngineeringQualityFamily; if the bearer is the description or episteme, useQS.ArchitecturalDescriptionFitness.
Required slots for a conforming qualityTermAscription
A conforming qualityTermAscription SHALL make explicit:
-
Bearer tuple. What is being evaluated, with arity explicit.
-
QualitySense. Which evaluative family is intended. -
Evaluation frame. The evaluation criterion or criterion frame under which the ascription is made. Examples: exemplar pack, probe pack, criticism or test pack, Q-bundle definition, CG-frame, acceptance spec, control horizon.
-
Evaluator or viewpoint. State the evaluator (observer, critic, selector policy, stakeholder family, or review body) and, when relevant, the
U.Viewpoint, separately. The two SHALL NOT be silently collapsed when they differ. -
Normal form. Whether the ascription is published as
SignalPack,Characteristic,Bundle, orObjective. -
Scope and time when relevant. The relevant USM scope (
U.ClaimScope,U.WorkScope,U.PublicationScope, or genericU.Scope) andΓ_timeSHALL be explicit when omission changes meaning. Freshness windows, qualification windows, or evidence decay windows SHALL be declared in the appropriate evidence or capability lane rather than smuggled into “quality” as an adjective. -
Reference plane when relevant. Especially when the same trigger phrase can refer to the EntityOfConcern being described, its description, its carrier, or a publication face under a different
ReferencePlane. -
Reference and representation scheme when relevant. Especially when the ascription depends on a declared reference scheme, representation scheme, or viewpoint-specific decoding convention.
-
Representation substrate when relevant. Especially when discussing parallels between preconceptual, latent-distributed, and symbolic-local treatments.
-
Witness and evidence mode. Exemplars, probes, measurements, bundle members, tests, traces, or closed-loop performance carriers.
Normal-form discipline
A QualitySense SHALL declare one admissible default evaluative normal form and MAY declare additional admissible evaluative normal forms explicitly.
The normal forms in this section are endpoint or evaluative forms. They are not publication forms by themselves. Publication face, publication form, publication unit, carrier, rendering, export, and front-end questions remain with E.17, E.8, or the endpoint-governing publication pattern named by value.
QNF-1 - SignalPack.
Use for QS.PhenomenalCharacter, QS.PreconceptualFit, and many cases of QS.LatentFit.
A conforming SignalPack contains:
- exemplar or contrast set or probe set,
- articulation notes,
- source episode, carrier, and observer,
- optional ordinal or thresholded summaries,
- explicit warning that the signal is not yet a
Characteristicunless an admissible proxy is later declared.
QNF-2 - Characteristic.
Use only when the sense is truly one measurable characteristic on one declared scale.
This uses A.17, A.18, and C.16 and inherits full scale legality.
QNF-3 - Bundle.
Use when the sense is composite.
Typical for QS.ExplanatoryMerit, many engineering quality families, and QS.ControlAdequacy.
A conforming bundle contains:
- member heads,
- whether each head is Characteristic, status, mechanism, scope, or test,
- aggregation policy if any,
- prohibition on hidden scalarisation.
Engineering note.
For engineering -ility families, the preferred bundle endpoint is Q-Bundle (C.25), because it keeps Measures[CHR] distinct from ClaimScope and WorkScope and from Mechanisms and Status.
Q-Bundle is a C.25-governed bundle endpoint rather than a fifth normal form beside SignalPack | Characteristic | Bundle | Objective.
Do not use a free-floating bundle with hidden metric semantics.
QNF-4 - Objective.
Use for QS.UseValue in selection, generation, or search contexts.
A conforming objective contains:
- CG-frame or objective endpoint source reference,
- admissible comparators,
- acceptance or selector policy,
- reference plane and window,
- relation to novelty, diversity, and constraints.
Functional vs quality-family discipline
C.16.Q SHALL prevent the collapse of function or capability claims into quality-family claims.
- A statement about what a system does uses
A.6.Ffirst when function-like wording hides the FPF kind named by value, relation, or claim, then the pattern governing the recovered capability, method, work, role,A.6.Mmodule-interface, architecture, mathematical, evidence, assurance, gate, decision, or release claim whose primaryEntityOfConcern, bearer, relation record, or characteristic-space construction is recovered. - A statement about how well, how safely, how robustly, or how maintainably it does so belongs to
QS.EngineeringQualityFamily. - “Quality characteristic” and “functional characteristic” SHALL NOT be used as interchangeable labels.
- In engineering contexts,
-ilitynames are quality-family labels, not automatically Characteristics. They become admissible only as one explicitU.Characteristicor one explicitBundle(preferably expressed throughQ-Bundlewhen composite). - Cross-references are allowed; category collapse is not.
Bridge discipline across traditions
Whenever two different traditions are compared using the word quality, the repair SHALL publish an explicit bridge stance and loss note.
Allowed bridge stances:
localRename— near-synonymous within one Context.operationalizes— one sense is turned into a proxy or measurable form.partialAnalogy— structurally similar but not identical.projection— one richer sense is projected into a narrower evaluative frame.nonEquivalent— same word, no admissible bridge asserted.
Examples:
QS.PreconceptualFit-QS.LatentFitis usuallypartialAnalogy, not identity.QS.PreconceptualFit-QS.PhenomenalCharacteris usually a progression-by-articulation relation, not identity.QS.PreconceptualFit> engineering measures is usuallyoperationalizesorprojection, with loss notes.QS.EngineeringQualityFamily>QS.UseValueis usuallyprojectionunder a CG-frame.QS.ExplanatoryMerit-QS.UseValueis not identity unless a Context explicitly defines such a projection.- Pirsig-style dynamic quality usually applies
QS.PreconceptualFit(sometimesQS.LatentFit) only aslocalRenameorpartialAnalogyunder a declaredU.BoundedContext; it is not identity by label. - Pirsig-style static quality usually applies
CharacteristicorBundlepublication under some other declared sense; it is not identity with dynamic quality. QS.ArchitecturalDescriptionFitness-QS.EngineeringQualityFamilyis usuallyprojectionornonEquivalentunless the Context explicitly states which heads of description-fitness are intended to proxy which system-side characteristics.
Change lexicon
A conforming quality-term repair publication SHALL narrate changes with a stable change lexicon aligned to A.6.P:
declareQualityTermAscription(...)— create a new explicit quality ascription record.withdrawQualityTermAscription(...)— retire a prior record.retargetBearer(...)— change the evaluated bearer tuple while keeping the same quality-term repair form.reviseSense(...)— change the value in thequalitySenseslot.reArticulate(...)— changearticulationModewhile preserving sense family.reProxy(...)— change proxy, probe, or operationalisation details.reBundle(...)— change bundle members or aggregation policy.reScale(...)— change characteristic scale or scale type.reFrame(...)— change evaluation frame.reView(...)— change evaluator and viewpoint.rescope(...)— changeU.Scope.retime(...)— changeΓ_time.refreshWitnesses(...)— refresh evidence or witness bindings.assignToGoverningPattern(...)— semantic move to a non-quality governing pattern; never edit in place silently.
A silent sense rewrite is a breaking semantic change.
If the ascription ceases to mean “quality ascription” at all, use assignToGoverningPattern(...) rather than pretending the same record survived unchanged.
A.6.P rewrite note.
retargetBearer(...) is the family-specific form of retargetParticipant(BearerSlot, …).
reviseSense(...), reArticulate(...), reProxy(...), reBundle(...), reScale(...), reFrame(...), and reView(...) are family-specific refinements of reviseByValue(...) and SHALL preserve the A.6.5 distinction between ref retargeting and by-value edits.
A.6.B boundary classification template for quality-term repair
When a repaired quality statement becomes boundary-bearing, classify it explicitly:
- L —
qualityTermAscriptionrepair-form skeleton,QualitySensesemantics, normal-form admissibility, and declared bridge stances; - A — admissibility conditions for using the ascription in selector, gating, and publication lanes (required qualifiers, witnesses, thresholds, qualification windows);
- D — publication requirements (lexical firewall, mandatory rewrites, publication duties);
- E — carrier-anchored evidence and work effects (measurements, traces, critique sheets, probe packs, selector logs).
Where this family is published as a reusable boundary publication, stable L-Q*, A-Q*, D-Q*, and E-Q* claim ids SHOULD be published (or the reused L/A/D/E-classified claim set should be cited by location), and paraphrase drift across quadrants SHALL be avoided.
Do not let the bare word quality carry L/A/D/E claim by itself.
Lexical guardrails
In Tech and normative prose:
-
bare quality MUST NOT appear without immediate resolution to a
QualitySense; -
high-quality, low-quality, quality metric, quality score, quality requirement, model quality, architecture quality, and solution quality are red-flag tokens;
-
quality characteristic MAY appear only as:
- a bridge label to an external standard or tradition, or
- a family label immediately rewritten into one explicit
U.CharacteristicorQ-Bundle;
-
quality requirement or quality requirements MUST NOT remain bare noun phrases; the text SHALL rewrite them into explicit
RequirementRole,U.Commitment, orU.PromiseContent.acceptanceSpecstructures over one namedU.Characteristic, oneQ-Bundlehead, or one explicit objective head; -
architecture quality or architectural quality MUST NOT appear without an explicit bearer lane (
EntityOfConcern being described,description,epistemeor publication face, or carrier when the carrier itself is evaluated) and, when omission changes meaning, an explicitreferencePlane; -
in QD and NQD contexts, bare quality MUST default to
QS.UseValue; -
preconceptual uses MUST NOT be presented as if they were already Characteristics;
-
latent and distributed fit MUST NOT be presented as if it were automatically explanatory merit;
-
if the occurrence is primarily action-invitation talk, the text MUST NOT assign a
QualitySense; it SHALL exit toA.6.Aor another action-invitation governing pattern, with source-traditionaffordancewording kept only as a quoted cue when needed; -
scope words (applicability, envelope, generality, validity) MUST NOT be used as hidden substitutes for
U.Scope,U.ClaimScope (G), orU.WorkScope; -
quoted metalinguistic uses of the token quality are allowed, but SHALL be marked as token-under-discussion, not as a boundary-bearing term.
Progressive elaboration
C.16.Q permits monotone elaboration:
- Start by selecting a
QualitySenseand capturing rival candidates when ambiguity is live. - Declare bearer, frame, viewpoint, and substrate.
- Choose an admissible normal form.
- Add exemplars, probes, characteristic heads, bundle members, and objective pins.
- Add bridges and loss notes if comparing traditions.
- If the repaired sentence is boundary-bearing, emit
L/A/D/Ehooks rather than letting “quality” carry them implicitly. - Never move between sense families silently.
Archetypal Grounding
Tell
If a draft says quality, the draft has not yet named the evaluative family.
A conforming rewrite publishes either one explicit endpoint-pattern-governed evaluative form or one explicit qualityTermAscription(...) transitional record with one QualitySense, one bearer tuple, one evaluation frame, one evaluator and viewpoint, one admissible normal form, explicit scope, time, and bridge qualifiers when they matter, and declared endpoint-governing pattern or explicit endpoint source relation.
Show (System lane)
Draft: “The model quality improved.”
Repair A — latent representation line
qualityTermAscription( bearer = Model_v5, qualitySense = QS.LatentFit, evaluationFrame = ProbePack_PP2, evaluator = RepLearningReviewBoard, normalForm = SignalPack, Γ_time = Window_W5, witnesses = {ProbeSeparationRun_22, AliasRiskCard_9} )
Repair B — closed-loop control line
qualityTermAscription( bearer = PolicyModelPair_PM5, qualitySense = QS.ControlAdequacy, evaluationFrame = Horizon_H × EnvClass_E, evaluator = ControlReviewBoard, viewpoint = ControlView_VP, normalForm = Bundle, scope = U.WorkScope(ControlDeploymentScope_7), Γ_time = RunWindow_RW, witnesses = {ClosedLoopTraceSet_41} )
Show (Episteme lane)
Draft: “Quality matters before definition.”
Repair A — preconceptual or phenomenological line
qualityTermAscription( bearer = ProblemFramingEpisode_PF3, qualitySense = QS.PreconceptualFit, evaluationFrame = ExemplarPack_EP3, evaluator = ReviewerGroup_A, normalForm = SignalPack, representationSubstrate = embodied-kinesthetic, witnesses = {EpisodeNotes_3} )
Repair B — explanatory line
qualityTermAscription( bearer = Explanation_N5, qualitySense = QS.ExplanatoryMerit, evaluationFrame = CriticismBundle_CB4, evaluator = TheoryReviewPanel, referencePlane = episteme, normalForm = Bundle, witnesses = {CritiqueSheet_14, CounterexampleSet_2} )
Show (Architecture description lane)
Draft: “The architecture quality improved.”
Repair A — quality of the system-side bearer
qualityTermAscription( bearer = PaymentPlatform_v4, qualitySense = QS.EngineeringQualityFamily, evaluationFrame = Q_Bundle_AvailabilitySecurityEvolvability_3, evaluator = ArchitectureReviewBoard, viewpoint = TEVB_ArchitectureViewpointSet, referencePlane = world, normalForm = Bundle, witnesses = {AvailabilityReport_8, CouplingCheck_3, EvolvabilityNote_2} )
Repair B — quality of the architecture description
qualityTermAscription( bearer = ArchitectureDescription_AD12, qualitySense = QS.ArchitecturalDescriptionFitness, evaluationFrame = ViewpointBundle_TEVB × DecisionQuestionSet_DQ7, evaluator = ArchitectureReviewBoard, viewpoint = TEVB_ArchitectureViewpointSet, referencePlane = episteme, normalForm = Bundle, witnesses = {CoverageMatrix_4, CorrespondenceCheck_7, ViewConsistencyNote_2} )
Show (QD or selector lane)
Draft: “Quality in our QD loop.”
Repair
qualityTermAscription( bearer = Candidate_7, qualitySense = QS.UseValue, evaluationFrame = CG_Frame_9, evaluator = SelectorPolicy_P4, normalForm = Objective, Γ_time = SelectionWindow_SW, witnesses = {ObjectiveCard_9, AcceptanceSpec_4} )
Bias-Annotation
Lenses tested: Gov, Arch, Onto-Epist, Prag, Did. Scope: Universal for overloaded evaluative uses of quality in FPF-governed wording.
- Gov bias: this pattern favors explicit evaluative publication and explicit L/A/D/E hooks, which improves auditability but adds drafting overhead.
- Arch bias: this pattern prefers one stable ascription relation over free-form philosophical prose, which improves reuse but can feel rigid in exploratory notes.
- Onto-Epist bias: this pattern refuses to collapse preconceptual, latent, explanatory, engineering, and selector senses into one concept; that increases honesty at the cost of extra lexical work.
- Prag bias: this pattern defaults QD and NQD uses toward
UseValue, which improves selector clarity but can feel narrower than colloquial “quality”. - Did bias: this pattern is intentionally teachable through repeated rewrites; the risk is over-formalizing early exploratory language.
Conformance Checklist (CC-C16Q)
A text or pattern conforms to C.16.Q iff:
-
CC-C16Q-1 - Explicit endpoint classification and explicit sense. Every in-scope use of quality resolves either to one declared endpoint-pattern-governed evaluative form or to one declared
qualityTermAscription(...)transitional record with one declaredQualitySenseand explicit endpoint classification. -
CC-C16Q-2 - Explicit bearer and arity. The evaluated bearer tuple is explicit.
-
CC-C16Q-3 - Explicit frame. Evaluation frame is explicit and reviewable.
-
CC-C16Q-4 - Evaluator and viewpoint are explicit. The ascription states who evaluates, from which viewpoint, or under which selector or observer policy.
-
CC-C16Q-5 - Substrate and referencePlane are declared when relevant. Cross-talk between preconceptual, latent-distributed, symbolic-local, and
ReferencePlanevaluesworld,concept, andepistemeis not allowed without an explicit substrate declaration and, when live,referencePlanedeclaration when those distinctions are live. -
CC-C16Q-6 - Scope and
Γ_timeare explicit when omission changes meaning. If scope or time selection affects interpretation, the ascription declaresU.Scopeand, when live,Γ_timeexplicitly. -
CC-C16Q-7 - Admissible normal form. The ascription uses
SignalPack,Characteristic,Bundle, orObjectiveas its endpoint or evaluative normal form, with the corresponding discipline observed. -
CC-C16Q-8 - No illegal scalarisation. Composite senses are not collapsed into one score without an explicit scoring method.
-
CC-C16Q-9 - No silent sense rewrite. Any semantic change in the ascription uses the declared change lexicon; changing sense silently is forbidden.
-
CC-C16Q-10 - QD default. In search, selection, or NQD contexts, quality resolves to
QS.UseValueunless overridden explicitly. -
CC-C16Q-11 - Engineering family discipline. Engineering
-ilityuses resolve to one explicitU.Characteristicor one explicitBundle(preferably published asQ-Bundlewhen composite); they are not left as free-floating adjectives. -
CC-C16Q-12 - Functional separation. Function or capability claims remain distinct from quality-family claims.
-
CC-C16Q-13 - Bridge accountability. Cross-tradition parallels publish bridge stance and loss notes; cross-context or cross-plane reuse cites explicit Bridge ids and CL policy where applicable.
-
CC-C16Q-14 - Boundary-claim hook when needed. If a repaired quality ascription is used for admissibility, commitments, publication, or adjudication, the downstream
L/A/D/Ehooks are explicit rather than carried implicitly by the word quality. -
CC-C16Q-15 - Lexical firewall. Bare quality is absent from Tech and normative prose except as quoted metalinguistic discussion.
-
CC-C16Q-16 -
qualityTermAscriptionrepair-form skeleton is published. The family-specific transitional tokenqualityTermAscriptionresolves to a repair-form skeleton that publishes bearer position, evaluator and viewpoint slots, qualifier expectations, repair paths for bearer-kind mismatches, witness discipline, admissible change classes, and cross-context or cross-plane policy. -
CC-C16Q-17 - Candidate-Set Note is used when ambiguity is live. If sense selection, bearer facet, or A.7 lane or kind (
EntityOfConcern being described,description,epistemeor publication face, or carrier when the carrier itself is evaluated) is non-obvious, the text records a short Candidate-Set Note before the rewrite is treated as decision-bearing or publication-bearing. -
CC-C16Q-18 - Evaluator and viewpoint are not silently collapsed. When both an evaluator and a
U.Viewpointmatter, they are represented as separate slots or fields. -
CC-C16Q-19 - Family-specific change verbs dock cleanly with A.6.P and A.6.5.
retargetBearer(...)is used only for ref retargeting; sense, frame, bundle, scale, and view edits are narrated as explicit by-value revisions; silent retyping is forbidden.
Common Anti-Patterns and How to Avoid Them
Consequences
Benefits. This pattern makes evaluative language auditable across phenomenology, engineering, and search and selection contexts. It also makes subsequent wording repair easier because the repair is carried by one explicit quality-term repair form plus endpoint governing-pattern assignments rather than by ad hoc prose rules.
Trade-offs and mitigations. The pattern adds drafting overhead and can feel heavy in exploratory notes. Mitigation: allow bare quality in Plain commentary during exploration, but require repair before the term enters Tech and normative, boundary, selector, or assurance use.
Rationale
C.16.Q makes one strategic move:
The word “quality” is not treated as one concept. It is treated as a family of evaluative ascriptions whose members differ by substrate, articulation mode, bearer, frame, and admissible publication form.
This lets FPF discuss:
- Pirsig-like preconceptual fit,
- representation-learning and neuro-symbolic latent fit,
- explanation quality in criticism-driven inquiry,
- architecture-description fitness under a viewpoint,
- engineering quality families,
- use-value in open-ended evolution,
- control adequacy in action loops,
without forcing them into one false universal scalar.
It also makes the distributed-vs-local issue explicit:
- some senses originate in embodied or latent-distributed substrates,
- some are only publishable as symbolic-local CHR, bundle, and objective forms,
- and some require an explicit projection from the first into the second.
It also makes the bearer and plane issue explicit:
- some uses evaluate the EntityOfConcern being described,
- some evaluate its description under a viewpoint,
- some evaluate a carrier or publication face,
- and those uses must not be collapsed without an explicit bearer lane and, when needed, a declared
referencePlane.
That is exactly where semantic drift usually starts; C.16.Q turns that drift into an auditable design choice.
SoTA-Echoing
Evidence binding note. If your Context maintains a SoTA Synthesis Pack for evaluative language, architecture-quality vocabularies, selector and objective semantics, world-model evaluation, or embodied and preconceptual articulation, this section SHALL cite its ClaimSheet IDs, CorpusLedger entries, and BridgeMatrix rows and keep the adoption statuses below consistent with those IDs. Otherwise, use the table below as the current source-use and source-currentness record for this pattern revision, not as a generic seed list.
This section follows the required structure: claim > practice > source use and currentness > source > alignment > adoption status. C.16.Q aligns with contemporary practice across architecture-description standards, software-quality standards, evolutionary architecture, QD search, active-inference and world-model research, phenomenology and TAE, source-tradition affordance work, and philosophy of explanation, while making one explicit FPF move that those traditions usually leave implicit: the overloaded token quality is repaired into explicit evaluative endpoint forms, with qualityTermAscription(...) available as a declared transitional record carrying QualitySense, bearer, frame, admissible normal form, and bridge disposition while governing-pattern assignment remains open.
Source-use convention. Current-best source use means the row is used as the best-known current line for the narrow effect named in the alignment cell. Current-standard and reference-only use means an official standard supplies a useful distinction but does not by itself solve C.16.Q's quality-term restoration question. Current-practice reference use means the source family records a widely used current practice that C.16.Q adapts. Lineage and local-gloss material means the row helps recognition or terminology only. Rejected import states what C.16.Q refuses to import as FPF ontology.
Short alignment notes.
Architecture-description practice. ISO 42010 is a current-standard reference for not collapsing the selected system or other entity under description into its description. C.16.Q adopts that guardrail and adds lexical discipline: a draft may not say architecture quality without publishing which bearer lane is under evaluation and whether the evaluation is description-side or system-side.
Engineering quality practice. ISO 25010 gives a mainstream current-standard reason not to leave quality as a free noun: contemporary quality work is organized around named characteristics and subcharacteristics that are specified, measured, and evaluated. C.16.Q adopts that explicit-head discipline, but adapts it by assigning composite cases to Bundle or Q-Bundle and by treating quality requirement(s) as requirements over explicit heads rather than as self-standing nouns.
Evolutionary-architecture practice. Fitness functions treat architecture-relevant concerns as continuously monitored heads tied to change and governance, not as one mystical scalar. C.16.Q adopts that operational spirit, but adapts it by keeping engineering-family evaluation, control adequacy, and selector value distinct and by forbidding function and quality-family collapse.
QD and NQD practice. Modern QD work is explicit that search returns a collection of solutions that are high with respect to an objective and diverse with respect to declared measures. C.16.Q therefore adopts the default rewrite of selector-context quality to QS.UseValue in Objective form and rejects any rewrite that silently blends novelty, diversity, constraints, and utility into an unexplained scalar.
World-model and active-inference practice. Contemporary world-model and active-inference work uses generative and predictive models for perception, planning, learning, and action, which makes evaluation inherently multi-factor: latent representation quality, model evidence or predictive adequacy, policy adequacy, and task and objective value are not one thing. C.16.Q adapts this by separating QS.LatentFit, QS.ControlAdequacy, and QS.UseValue, and by requiring explicit evaluation frames and witnesses for each ascription.
Phenomenology and TAE practice. TAE-style work treats a felt sense as something that can be clarified and worded progressively, with tentative language that stays responsive to lived experience. C.16.Q adopts this progressive-articulation stance by giving QS.PreconceptualFit an admissible SignalPack form and by keeping QS.PhenomenalCharacter separately available when the experienced character itself, not action-guiding fit, is the topic.
Action-invitation boundary. Recent source-tradition affordance work emphasizes that affordances can be perceptually experienced as action possibilities that position or invite the agent to act. C.16.Q uses that insight only as a governing-pattern boundary cue: when the trigger use of quality is really action-invitation talk, the text should use assignToGoverningPattern(...) into A.6.A or another action-invitation governing pattern rather than forcing a QualitySense or qualityTermAscription(...).
Explanation practice. Contemporary philosophy of explanation keeps explanatory understanding and epistemic value distinct from engineering performance or utility maximization. C.16.Q adapts this by publishing QS.ExplanatoryMerit as its own evaluative family, typically Bundle-shaped, and by rejecting hidden scalarization into “high-quality explanation” without explicit heads.
Scale legality. The rows above do not license free arithmetic on the word quality. Whenever C.16.Q operationalizes engineering heads, selector objectives, or control adequacy numerically, it SHALL bind the comparison to an explicit ComparatorSet, CG-Spec, or declared aggregation policy and SHALL reject covert scalarization of bundles, explanations, or preconceptual signals.
Cross-Context and plane note. This section states alignment and non-identity only; it does not assert silent sameness across U.BoundedContexts or across planes. Any actual reuse of a quality vocabulary, selector head, or viewpoint-bound quality family across Contexts and planes SHALL publish BridgeId, CL, and loss-note policy and, where planes differ, the relevant Φ(CL) and Φ_plane policy ids.
Historical-lineage note. Earlier touchstones such as Pirsig, Popper, and Deutsch remain useful as lineage and local-gloss resources, but C.16.Q does not use them as formal SoTA anchors here because E.8 requires post-2015 primary sources for Architectural patterns unless the row is explicitly lineage or local-gloss material.
This SoTA alignment backs the pattern’s central move: quality is not one universal evaluative noun. In contemporary practice, the relevant work is already distributed across explicit characteristics, objectives, viewpoints, world-model criteria, explanatory virtues, felt signals, and action invitations; C.16.Q makes that distribution first-class and auditable.
Refresh and reopen conditions
Reopen or narrow C.16.Q when any of these current-pattern-language conditions becomes live:
- a recurring quality or evaluative family appears that is not covered by the current
QualitySensestarter set and cannot be treated as an existing endpoint-pattern-governed form; - a new endpoint governing pattern can govern a class of uses that currently require transitional
qualityTermAscription(...); A.7,C.2.P,C.2.1, or bridge-policy vocabulary changes the admissible lane, EntityOfConcern, publication-face, carrier, orReferencePlanewording used by this pattern;- current best-known practice changes a
QualitySense, normal-form boundary, action-invitation boundary, scale-legality boundary, or source-use and currentness row used inC.16.Q:11; - README, ToC,
E.11, retrieval, or local Problem-frame first-entry cues change for quality, characteristic, action-invitation, architecture-description, selector, or explanation wording; - subject patterns begin copying quality trigger lists,
QualitySenserows, or transitional repair-form slots that belong in this first-stage quality-term precision-restoration pattern.
The refresh action is to remove, narrow, or redirect the affected row or exit. Do not preserve a stale QualitySense, endpoint exit, lane wording, or source row as historical compatibility text.
Relations
- Lives in: C.16 characterization pattern nest as the quality-term realization of E.10.ARCH and C.16.P.
- Builds on: E.10.ARCH for shared wording-use restoration architecture; C.16.P for characteristic and scale exits; A.2.6 for explicit scope and
Γ_time; A.17, A.18, and C.16 for admissible measurable characteristics; C.25 for engineeringQ-Bundlepublication. - Coordinates with: A.6.P when the recovered content is relation construction rather than quality-term or evaluative characterization; A.6.A or another action-invitation governing pattern when the trigger invites action rather than evaluates a bearer; C.2.2a, A.16, A.16.1, A.16.2, and B.4.1 for language-state chart positions, admissible moves, early cue handling, responsibility handoff, and admissible retreat or reopen; use A.16.0 only when lineage, branch, loss, or handoff history itself must be published as an explicit trajectory account; B.5.2.0 for prompt-shaped continuations that are not yet stable endpoint publication; C.2.LS, C.2.4, C.2.5, C.2.6, and C.2.7 for language-state facet governance; C.17, C.18, and C.19 for
QS.UseValue, novelty and diversity discipline, and selector policy; E.17.0 and E.17.2 for architecture-description and viewpoint bundles; F.9 and F.9.1 for Bridges, CL, and bridge-stance annotations; A.6.B when repaired ascriptions become boundary-bearing. - Publishes vocabulary through: E.10, F.17, and F.18 when the
qualityTermAscriptionrepair-form skeleton, theQualitySensestarter set, and the red-flag rewrites become stable shared vocabulary.
Language-space refactor note
This pattern uses endpoint-first assignment rather than universal governance of all quality language. qualityTermAscription(...) remains useful as a transitional repair form, but it is not the required resting place or durable local record kind for every repaired use of quality.
Explicit endpoint selection
Admissible endpoints after repair include:
- a single
Characteristic, - a
Q-Bundle, - an
E.21 PatternQualityQBundle, when the bearer is one FPF pattern version and the evaluative claim asks whether the pattern is good enough for a declared reader, use, and scope. In this case, do not assign the claim to generalC.25unless the bearer is a non-pattern engineering quality family, - an
Objective, - an explanatory-merit bundle,
- a selector-value endpoint.
Bare quality in Tech prose should therefore be banned or rewritten immediately under an explicit endpoint-governing FPF pattern or explicit endpoint source reference. If that endpoint source is already known, qualityTermAscription(...) need not remain in the published normal form.
Endpoint-governance boundary
This pattern does not govern articulation-state characteristics, bridge stances, or representation factors. Those remain governed by A.16, C.2.LS, C.2.4, C.2.5, C.2.6, C.2.7, and F.9.1.
C.16.Q:End
Characterising Generative Novelty & Value (Creativity‑CHR)
Status. Mechanism specification (CHR) — normative where stated. Depends on. A‑kernel (A.1–A.15), CHR‑CAL (C.7), MM‑CHR measurement infrastructure (C.16), KD‑CAL and Sys‑CAL for carriers and holons, Decsn‑CAL (utility), Norm‑CAL (constraints/ethics). Coordinates with. B.5.2.1 NQD (abductive generator) for search instrumentation, Agency-CHR (C.9) for agential capacity, B-cluster trust/assurance (B.3), Canonical Evolution Loop (B.4), Role Assignment & Enactment Cycle (Six-Step) (F.6) and Naming Discipline for U.Types & Role Names (F.5). Guard‑rails. Obeys E‑cluster authoring rules (Notational Independence; DevOps Lexical Firewall; Unidirectional Dependency).
What this pattern provides (exports):
This pattern exports Characteristics and measurement templates only. It does not export any Γ_* operators, retained-set composition rules, Front/Archive/Shortlist heads, or selection/scalarization policies; those live in C.18 NQD-CAL, C.19 E/E-LOG, and G.5 (or Decsn-CAL for decision lenses). A Context publishes the measurement space and admissible policies; later choice using that space is attributed to a declared DecisionSubject at explicit DecisionSubjectGranularity under a named lens.
U.CreativitySpace— a CharacteristicSpace (CHR) with named Characteristics and scale metadata for evaluating creative work/outcomes inside aU.BoundedContext.U.CreativityProfile— a vector of coordinates inU.CreativitySpaceattached by aU.Evaluationto a specific Outcome (usually anU.Epistemeproduced byU.Work).- Core Characteristics (kernel nucleus; Context‑extensible):
Novelty@context— distance from aReferenceBasein the current Context/time window; ∈ [0, 1].Use‑Value(alias:ValueGain) — measured or predicted improvement against a declared objective; interval/ratio scale per Context.Surprise— negative log‑likelihood under a GenerativePrior; bits or nats.ConstraintFit— degree of must‑constraint satisfaction (Norm‑CAL / Service acceptance); ∈ [0, 1].- Diversity_P (declared retained-set / portfolio-level) — coverage/dispersion (set-level). Illumination is a report-metric over Diversity_P (coverage/QD-score summaries). It is report-only and never part of the primary dominance test.
AttributionIntegrity— provenance/licensing discipline for lawful, transparent recombination; ∈ [0, 1].FamilyCoverage— (count, polarity ↑, scope=declared retained set or portfolio, unit=families, provenance: F1‑Card)MinInterFamilyDistance— (ratio [0,1] or metric units, polarity ↑, scope=declared retained set or portfolio, DistanceDef@F1‑Card)AliasRisk— (ratio [0,1], polarity ↓, diagnostic; drop if dSig ≥3/5 characteristics collide)U.DomainDiversitySignature (dSig)— 5‑tuple over discrete characteristics [Sector, Function, Archetype, Regime, MetricFamily] attached to eachU.BoundedContext. Used for Near‑Duplicate diagnostics andAliasRisk. Policy: flag as Near‑Duplicate when ≥3 characteristics match; see F.1 invariants and SCR‑F1‑S08..S09.- Note (AliasRisk binding).
AliasRiskMAY be computed usingdSigcollision diagnostics; a Context MUST declare the collision rule and policy id in DescriptorMap provenance when AliasRisk is reported.
-
Supporting types (linking points):
U.ReferenceBase— the domain‑local corpus (by Context & time window) used to computeNovelty@context.U.SimilarityKernel— a declared similarity metric class for the Context (text/image/design/code/etc.), with invariance notes.U.GenerativePrior— a predictive model over the Context’s artifacts/behaviours used to computeSurprise.U.CreativeEvaluation— a specialisation ofU.Evaluationthat yields aU.CreativityProfileand the Evidence Graph Ref.EffortCost(advisory) — resource outlay to achieve the outcome; from WorkLedger (Resrc‑CAL). (For normalization and planning; not itself “creativity.”)
-
Operators (first tranche):
composeProfiles(set → declared retained-set profile),dominates(partial order in space),frontier(Pareto set),normaliseByEffort. (Formal laws introduced in Quarter 2.) -
Relations (informative; not exported): dominance relation (partial order in the space), frontier predicate (Pareto set), retained-set composition view. C.17 exports no operators and does not mint public set-result family heads; these are mathematical relations only.
Scope note. This pattern does not define who is “a creative person.” It characterises creative outcomes and episodes as observed in Work and expressed as Epistemes. Agency (capacity to originate) is measured in Agency‑CHR (C.9); here we measure what came out and how it scores against stated goals and references. A Context publishes the measurement space and admissible policies; later choice is attributed to a declared
DecisionSubjectat explicitDecisionSubjectGranularity, using a named lens within that space. CHR exports no Γ‑operators and no team workflow rules.
Motivation & Intent (manager’s read‑first)
Problem we solve. Teams talk past each other about “creativity”: some prize novelty, others business value, others originality or risk‑managed invention. Without a shared, context‑local measurement space, reviews derail, portfolios drift, and safety constraints are waived ad‑hoc.
Intent. Provide a small, universal measurement kit that turns “this is creative” into checkable, context‑local statements — grounded in evidence, aligned to objectives, and composable from individuals to portfolios.
Manager’s one‑screen summary (what you can do with it):
- Score a design/code/theory change on Novelty–Value–Surprise–ConstraintFit with declared references and models.
- Compare options in a Pareto sense (no single magic score forced).
- Consider constraints as a coordinate in the space; compare options on frontiers while keeping Context for high‑novelty options
- Track the declared retained set’s Diversity_P to avoid local maxima and groupthink.
- Defend decisions with an auditable CreativeEvaluation that cites what was new relative to which base, how value was measured, and why this counts here.
Forces
Design answer. A context‑local CreativitySpace with a small set of characteristics, each with clear measurement templates and Evidence Graph Ref; composition uses frontiers and partial orders, not forced scalarisation.
Solution Overview — The context‑local CreativitySpace
Idea. Creativity is not a type; it is a profile measured on an outcome (episteme) or episode (set of works) inside a bounded context. The context supplies the ReferenceBase, SimilarityKernel, GenerativePrior, objective function(s), and acceptance constraints.
Objects in play (A‑kernel alignment):
- A system (person, team, service) performs
U.Workunder a role (A.2). - That work yields a carrier (doc/model/design/code), i.e., an
U.Episteme. - We apply a
U.CreativeEvaluationto that episteme (and linked work) to produce aU.CreativityProfilewith evidence.
CreativitySpace (first‑class CHR):
U.CreativitySpace(Context) := 〈Novelty@context, ValueGain, Surprise, ConstraintFit, Diversity_P, AttributionIntegrity, EffortCost?〉
with scale/unit metadata from MM‑CHR (C.16), and Context‑specific measurement methods bound by MethodDescription.
DesignRunTag split (A.4):
- Design‑time: score concepts or specs against surrogate value models and priors; record assumptions (USM scopes; A.2.6).
- Run‑time: recompute ValueGain and ConstraintFit from Work evidence (service acceptance, KPIs) and refresh Surprise if priors update.
Vocabulary (CHR terms & D‑stubs)
Names are context‑local; below are kernel terms. Roles like “Designer/Reviewer” are contextual (A.2). Documents don’t act (A.7/A.12); they are evaluated.
-
U.ReferenceBase(D). A curated, versioned set of artifacts (epistemes) and/or behaviours that define “what exists already” in this Context and time window. Conformance (RB‑1): must declare inclusion criteria, time span (TimeWindow), and coverage notes. -
U.SimilarityKernel(D). A declared metric family with invariances (e.g., text: cosine over embeddings, image: LPIPS, code: AST graph edit). Conformance (SK‑1): must cite MethodDescription and test corpus; state limits. -
U.GenerativePrior(D). A model that yields likelihood of artifacts given the Context’s history (n‑gram/LM, design grammar, trend model). Conformance (GP‑1): must publish training slice, fit method, perplexity/fit metrics, and refresh policy. -
U.CreativeOutcome(D). AnyU.Epistemeput forward for creative evaluation (e.g., new design, algorithm, spec, policy draft). Note. If the outcome is a system change without a single carrier, attach the evaluation to a bundle (set) of carriers referenced from Work. -
U.CreativeEvaluation(D). AU.Evaluationthat outputs aU.CreativityProfileand anchors to ReferenceBase, Kernel/Prior, objective(s), acceptance tests, and Work evidence. -
U.CreativityProfile(D). The coordinate tuple inU.CreativitySpacewith provenance to the above inputs and USM scopes. Conformance (CP‑1): profile must include scales/units, scopes, confidence bands (B.3), and the edition of space definitions.
The Core Characteristics (kernel nucleus)
Each characteristic is specified per MM‑CHR (C.16) with: name, intent, carrier, polarity, scale type, measurement template, evidence, scope (USM), and didactic cues. Context profiles MAY add characteristics; kernel characteristics MAY NOT be removed without a Bridge.
Novelty@context — “How unlike the known set is this?”
-
Intent. Quantify distinctness of the outcome relative to
U.ReferenceBase(global or targeted slice). -
Carrier.
U.Episteme(the outcome). -
Polarity. Higher is “more novel.”
-
Scale. [0, 1]; ratio (0 = duplicate under kernel; 1 = maximally distant).
-
Measurement template (normative pattern):
- Declare ReferenceBase
Band TimeWindow window. - Declare SimilarityKernel
σand its invariances. - Compute
Novelty@context := 1 − max_{b∈B} sim_σ(outcome, b), or a robust variant (top‑k mean). - Publish sensitivity note (how results shift with kernel/
B).
- Declare ReferenceBase
-
Evidence. Kernel/version id; top‑k neighbours with distances; ablation on invariances.
-
Scope hooks (USM).
Bmust be a declared slice; Cross‑context use needs a Bridge with CL and loss notes. -
Didactic cues.
- Not “randomness.” Noise has high novelty, low value.
- Local, not global. Novelty is to this Context now, not timeless originality.
Use‑Value (alias: ValueGain) — “What good did this add under our objective?”
-
Intent. Quantify benefit vs a baseline objective (Decsn‑CAL utility, Service acceptance, KPI).
-
Carrier. Outcome (episteme) with Work evidence.
-
Polarity. Higher is better.
-
Scale. Interval/ratio, unit declared by the Context (e.g., ΔSNR, % defects, profit/period).
-
Measurement templates (pick one):
-
Measured:
ValueGain := metric_after − metric_before(declare counterfactual method). -
Predicted:
E[ValueGain | model]with error bars; update post‑run. -
Evidence. Declared objective/criterion; measurements or credible predictions; counterfactual method (A/B, back‑test, causal inference).
-
Scope. State the context window used for the objective; claims outside that window are informative only.
-
Didactic cues.
-
Value is relative to stated objective; if the objective is wrong, the value reflects it.
-
Keep counterfactual discipline; otherwise “gain” is storytelling.
-
Surprise — “How improbable under our learned world?”
-
Intent. Capture unexpectedness given
U.GenerativePrior. -
Carrier. Outcome.
-
Polarity. Higher surprise = more unexpected.
-
Scale. bits or nats:
Surprise := −log p_prior(outcome). -
Measurement template:
- Declare GenerativePrior (training slice, model class).
- Encode outcome for the prior; compute likelihood proxy.
- Publish calibration curve (reliability diagram / PIT histogram).
-
Evidence. Model cards; fit metrics; OOD diagnostics; refresh policy.
-
Scope. Training slice declared as ContextSlice; Bridges penalise R (trust), not the value itself (A.2.6).
-
Didactic cues.
- Novelty vs Surprise: high novelty under one kernel may be low surprise under a broad prior; publish both.
ConstraintFit — “Did it honour the non‑negotiables?”
- Intent. Ensure mandatory constraints (safety, ethics, standards, SLOs) are satisfied.
- Carrier. Outcome + Work evidence.
- Polarity. Higher is better (1 = all mandatory satisfied).
- Scale. [0, 1], ratio or pass/fail.
- Measurement template: declare set
C_must(Norm‑CAL / Service acceptance), computeConstraintFit := |{c∈C_must : pass(c)}| / |C_must|; optionally weight per criticality. - Evidence. Checklists, tests, audits; Who/Role performed the SpeechActs (approvals/waivers).
- Scope. Constraints are context‑local; Cross‑context requires Bridge; waivers are SpeechAct Work with RSG gates (A.2.5).
- Interpretation note. Low
ConstraintFitsignals tension with declared must‑constraints and warrants reframing or redesign; this pattern does not prescribe go/no‑go rules.
Diversity_P (declared retained-set / portfolio-level) — “Are we exploring the space?”
- Intent. At the set level, avoid myopic exploitation; promote coverage.
- Carrier. A set of outcomes.
- Polarity. Higher means broader coverage (not “better” per se).
- Scale. Set‑functional; Context defines metric (e.g., average pairwise distance, k‑cover over features).
- Template. Declare kernel and covering policy; compute score and coverage map (illumination); relate to USM ClaimScopes.
- Alignment note. The illumination/coverage view corresponds to IlluminationScore used by B.5.2.1 NQD‑Generate; no separate characteristic is introduced here—measure it as part of
Diversity_P. - Evidence. Distance matrix/cover plots; sensitivity to kernel.
- Didactic cue. Use Diversity_P to shape portfolios, not to pick single winners.
- Marginal gain (for generators) — normative. For a candidate h and current set S, ΔDiversity_P(h | S) := Diversity_P(S ∪ {h}) − Diversity_P(S). Contexts using NQD SHALL compute D as this marginal and publish the Diversity_P definition alongside the CharacteristicSpace/kernel and TimeWindow.
Heterogeneity Characterisation
- FamilyCoverage (polarity ↑) — count of distinct domain‑families covered by a declared retained set, portfolio, or triad; unit: families; window: declared.
- MinInterFamilyDistance (polarity ↑) — min distance between selected families in DescriptorMap for that declared retained set, portfolio, or triad; unit: per DistanceDef; window: declared.
- AliasRisk (polarity ↓) — collinearity/near‑duplicate risk indicator for contextual signatures; unit: score (0–1) with policy id.
Lexical special case (F.18 naming).
For lexical CandidateSets used by Name Cards (F.18), Diversity_P SHALL be computed over head-term families, not over raw strings. Variants that share the same lexical head (e.g., “Reference plane”, “Plane of reference”, “Planar reference”) MUST be treated as one family for coverage and distance; only candidates with distinct heads contribute to lexical Diversity_P. This aligns lexical use of Diversity_P with FamilyCoverage / AliasRisk and prevents inflating diversity by near-synonyms of a single head.
AttributionIntegrity — “Did we credit sources and licences correctly?”
- Intent. Discourage “novelty theft”; ensure recombination is lawful and transparent.
- Carrier. Outcome + provenance graph.
- Polarity. Higher is better.
- Scale. [0, 1]; fraction of required attributions/licence duties satisfied.
- Template. Trace graph coverage against Context policy; licence constraints as Norm‑CAL rules.
- Evidence. PROV‑style links; licence scans; acknowledgements.
- Didactic cue. High
AttributionIntegritysignals lawful and transparent recombination; low values indicate unacceptable practice in most Contexts. - Default role.
AttributionIntegrityis measurable but non‑dominant. It MAY serve as a policy filter/tie‑break (C.19). If certain attribution duties are must‑constraints, they belong to ConstraintFit (Norm‑CAL) and act as eligibility gates. It is not part of the default dominance set. - Dominance & gating note (normative).
AttributionIntegrityis a measurable Characteristic; it is not in the default dominance set. Contexts MAY use it as a filter or tie‑break via policy (C.19). Legal/ethical must‑fit checks live in ConstraintFit (Norm‑CAL); failing those blocks eligibility before dominance.
EffortCost (advisory) — “What did it take?”
- Intent. Normalise comparisons by cost; not part of “creativity” per se.
- Carrier. WorkLedger.
- Polarity. Lower is better when used as denominator.
- Scale. Resource units (hours, energy, $).
- Template. Sum cost categories over Work that produced the outcome.
- Evidence. Time/resource logs; BOM deltas.
- Didactic cue. Use
CreativityPerCost := f(Novelty@context, ValueGain, Surprise)/EffortCostfor operations planning, not for excellence awards.
Conformance Checklist (first tranche)
Manager’s Quick‑Start (apply in 5 steps)
- Name the Context (context + edition).
- Pick measurement defaults (kernel, prior, objective, constraints) from the Context’s handbook.
- Score outcome →
Novelty@context,Use‑Value,Surprise,ConstraintFit. - Decide by declared set result: identify the non-dominated
Front; emit aShortlistonly through one named lens or policy when selector-facing publication is needed; use ConstraintFit as a gate; apply policy if a scalar is approved. - Record a CreativeEvaluation with evidence; if crossing Contexts, attach the Bridge id.
Mental check. New to our base? Helpful to our objective? Unexpected under our model? Safe & licenced? If any answer is “unknown,” you are not done measuring.
Archetypal Grounding (three domains)
(a) Manufacturing design change)
Outcome. New impeller geometry for Pump‑37.
Context. PlantHydraulics_2026.
Novelty@context 0.42 (shape‑descriptor kernel vs last 5 years).
ValueGain. +6.8% flow @ same power (bench Work).
Surprise. 1.3 bits (within evolutionary trend prior).
ConstraintFit. 1.0 (materials, safety, noise).
Decision. Frontier-based choice: modest novelty, clear value, safe. The retained exploration set keeps Diversity_P by also funding one high‑surprise concept for exploration.
(b) Software architecture refactor)
Outcome. New concurrency model for ETL.
Context. DataPlatform_2026.
Novelty_G. 0.27 (AST/edit kernel vs internal corpus).
ValueGain. −20% latency, −35% p95 stalls (A/B Work).
Surprise. 0.5 bits (trend prior expected co‑routines).
ConstraintFit. 0.83 (fails SoD—same author as reviewer).
Decision. Return for SoD fix; then likely adopt. Creativity is not a waiver over governance.
(c) Scientific hypothesis)
Outcome. A new scaling law claim.
Context. GraphDynamics_2026.
Novelty_G. 0.66 (formula kernel vs literature base).
ValueGain. Predicted: explains 12 prior anomalies (model check).
Surprise. 3.7 bits (strongly unexpected under prior).
ConstraintFit. 1.0 (ethics N/A; evidence roles bound with decay windows).
Decision. Fund replication Work; track R decay per policy.
Anti‑Patterns (fast fixes)
Relations
- A.2 Role & A.15 Run‑alignment. Creative Work is performed by systems in roles; outcomes are epistemes. Creativity is measured by
U.Evaluation, not “done by a document.” - B.3 Trust/Assurance. Coordinates carry confidence bands; Bridges lower R by CL. Evidence roles (A.2.4) bind datasets/benchmarks used in measurements.
- C.9 Agency‑CHR. Agency measures capacity to originate; a high‑agency system may still output low‑creativity outcomes (and vice versa with strong scaffolding).
- A.2.6 USM (Scope). All measurements sit on ContextSlices;
G‑ladderis explicitly not used (C.17 follows A.2.6’s set‑valued scopes). - D‑cluster ethics. ConstraintFit is where must constraints, ethics, and safety bind the evaluation; waivers are explicit SpeechActs.
Authoring Aids (didactic cards)
- Write the Context. Context + edition on every profile.
- Name the base & kernel. Without them,
Novelty@contextis undefined. - State the objective. Value without a KPI is a story.
- Publish priors. Surprise needs a trained model with cards.
- Gate by musts.
ConstraintFit< 1 blocks enactment unless waived. - Prefer frontiers. Identify non-dominated options on the declared
Front; emit aShortlistonly through one named lens or policy when publication needs that head. - Bridge explicitly. Cross‑context talk needs CL and loss notes.
CSLC recap and the Creativity CharacteristicSpace
Purpose. Ground “creativity” as a measurable family of characteristics (CHR) rather than a role, capability, or virtue. Each characteristic is scoped to a U.BoundedContext, evaluated on U.Work episodes, U.Episteme values such as design sketches or models, or holders (systems/teams) via MM‑CHR exports (U.DHCMethodRef, U.Measure, U.Unit, U.EvidenceStub), using the CSLC discipline (Characteristic / Scale / Level / Coordinate).
Strict Distinction (A.7) reminders. Creativity is not a Role (no one “plays CreativityRole”). It’s a characterisation of outcomes/process. Creativity is not Work (no resource deltas). Work produces work results or publications that we later characterise. Creativity is not a service promise clause (no external promise). Promise clauses are judged from Work; creativity may correlate with value.
The Creativity CharacteristicSpace (CHR‑SPACE)
The core characteristics below are kernel‑portable names; Contexts specialise them (rename if needed, but keep semantics). Each characteristic declares: what we measure, on what carrier, typical scale, and where it lives in FPF.
Locality. Every characteristic is context‑local (e.g., Novelty@context). Cross‑context claims must use a Bridge and record CL penalties (B.3). No global novelty.
Context extensions & policy‑level characteristics (non‑kernel)
The following context‑local characteristics remain available but are not part of the kernel nucleus; use them as derived or policy measures:
- ReframeDelta — change in the problem frame that improves solvability (episteme‑pair; ordinal).
- Compositionality — degree of re‑use and new relations among parts (
U.Epistemevalue; boolean + structure score). - Transferability@X — portability to Context X via a Bridge (
U.Epistemevalue; ordinal + CL penalty). - DiversityOfSearch — breadth of approach classes tried (work set; count/rate).
- Time‑to‑First‑Viable — elapsed time to first Use‑Value = Pass (work; duration).
- Risk‑BudgetedExperimentation — planned vs realized exploration share (workplan vs work; ratio; policy gate).
Compatibility note. This split removes duplicate “core lists” and aligns C.17 with B.5.2.1 NQD and C.16/A.17–A.18: the kernel nucleus captures creativity qualities; the items above instrument Work, policy, or declared retained-set shaping without renaming
Front,Archive, orShortlist.
Scale choices (CSLC discipline)
For each characteristic, declare the scale explicitly (nominal / ordinal / interval / ratio). Do not average ordinal scores; fold with medians or distributional summaries. Choose units (when applicable) and coordinate semantics (e.g., what “distance” means).
- Novelty@context.
Coordinate =
1 − max_similarity(candidate, corpus)with a declared encoder (text, graph, CAD). Unitless in [0..1]. Document encoder & corpus freeze (A.10Evidence Graph Ref). - Use‑Value.
Passiff acceptanceSpec (fromU.PromiseContentor Decision KPI) is met from Work evidence; elsePartial/Fail. For scalar KPIs, publish mean ± CI and the acceptance threshold; predicted values carry error bars and are updated post‑run. - ConstraintFit.
Ratio = satisfied / declared must constraints. Constraints are
Norm‑CALrules; count only declared ones (no unspoken “norms”).
Metric templates (normative kernels + manager‑ready variants)
Template syntax (MM‑CHR):
U.DHCMethod { name, context, carrierKind, definition, unit?, scale, EvidencePin, acceptanceHook? }
Note: Data instances carry DHCMethodRef pointing to this template.
Templates (kernel definitions)
MT.Novelty@context
- carrierKind: candidate
U.Epistemevalue or work output. - definition:
1 − max_sim(encode(x), encode(y))over y in ReferenceSet@Context. - scale: ratio [0..1].
- EvidencePin:
{ReferenceSetId, EncoderId, Version}; frozen byA.10. - notes: Publish encoder & corpus drift in RSCR.
MT.Use‑Value
- carrierKind: work-fulfillment occurrence and resulting decision-memo publication.
- definition: Evaluation of an outcome against a declared objective/criterion for the current context (or predicted value with explicit model & error).
- scale: ordinal {Fail, Partial, Pass} or scalar KPI.
- EvidencePin: links to
U.Workthat fulfilPromiseContent`; cite acceptanceSpec edition.
MT.ConstraintFit
- carrierKind:
U.WorkorU.Epistemevalue. - definition:
|{c∈C_must : pass(c)}| / |C_must|within the MethodDescription scope; optional weighting by criticality allowed if declared. - scale: ratio [0..1].
- EvidencePin: constraint list from Norm‑CAL; checks from Work telemetry.
MT.ReframeDelta
- carrierKind: Episteme pair (ProblemStatement v0→v1).
- definition: Categorise frame change as {None, Local, BoundaryShift, Systemic}; justify with a Scope diff (
[A.2.6](/generated/patterns/A.2.6) U.ContextSlicedelta) and causal map simplification. - scale: ordinal 0–3.
- EvidencePin: diff publication plus Bridge notes if Cross‑context.
MT.DiversityOfSearch
- carrierKind: Work set (episode).
- definition: Count of distinct approach classes tried (domain‑local typology) / time.
- scale: count; derived rate.
- EvidencePin: tagged Work items; typology lives in the Context glossary.
MT.Compositionality
- carrierKind:
U.Epistemevalue. - definition: set aggregator (Compose‑CAL) of reused components ≥ K and presence of novel relation among ≥ 2 parts.
- scale: boolean + secondary “structure score” (e.g., depth or edge novelty).
- EvidencePin: component graph + provenance of parts.
MT.Transferability@X
- carrierKind:
U.Epistemevalue. - definition: Applicability in target Context X via a Bridge; report CL and residual scope slice.
- scale: ordinal {not portable, portable with loss, near‑iso}; record CL (0–3).
- EvidencePin: Bridge id + pilot Work in X.
MT.Time‑to‑First‑Viable
- carrierKind: Work episode.
- definition: elapsed wall‑clock to first
UsefulnessEvidence = Pass. - scale: duration.
- EvidencePin: first passing
U.Workid.
MT.Risk‑BudgetedExperimentation
- carrierKind: WorkPlan vs Work.
- definition:
(Planned exploratory spend) / (Allowed risk budget)and realised counterpart; flag overrun. - scale: ratio + policy gate (pass/fail).
- EvidencePin: WorkPlan ledger vs
WorkLedger.
Manager’s quick checks (plain‑language adapters)
- Novelty without a frozen corpus is storytelling—freeze corpus, fix encoder, then score.
- Use‑Value without a consumer‑facing acceptance is a proxy—bind to a Service or explicit Objective.
- Diversity counts approach classes, not color‑swap variants—publish your typology.
Novelty & transfer are context‑local (Bridges mandatory)
Rule N‑1 (Locality). Novelty@context is defined only within its U.BoundedContext. Never compare scores across Contexts without an Alignment Bridge (F.9).
Rule N‑2 (Directional mapping). A Bridge may assert a directional substitution (e.g., Novelty@DesignLab → Novelty@Manufacturing with CL = 2, loss: aesthetics encoder absent). Reverse mapping is not implied.
Rule N‑3 (Penalty to R, not to G). Cross‑context novelty does not change scope G; it reduces R (reliability) by the CL penalty (B.3), unless validated by pilot Work in the target Context.
Practical pattern. Publish novelty with its Context tag and—when reused—attach the Bridge id and target‑context pilot outcomes.
Anti‑Goodhart guard (use creativity metrics safely)
Goodhart’s Law: “When a measure becomes a target, it ceases to be a good measure.” — We bake in guards so creativity scoring improves outcomes instead of gaming them.
Guard‑rails (normative)
- G‑1 Paired appraisal. Never assess Novelty in isolation; pair it with Use‑Value or ConstraintFit to avoid proxy myopia
- G‑2 Frozen references. Novelty requires frozen corpus + encoder; changes create a new edition and RSCR rerun. Portfolio-publication heuristics and selection heuristics are policy-level (see C.19); do not “reward” Illumination beyond its role as a report-metric.
- G‑3 Time‑lag sanity. Include a post‑fact check (e.g., 30–90‑day retention or cost‑to‑serve delta) before celebrating “creative wins.”
- G‑4 Exploration budget. Tie DiversityOfSearch to Risk‑BudgetedExperimentation; flag overspend.
- G‑5 No ordinal averaging. Do not average ordinal scales; use distributions/medians or convert only under declared models.
Conformance Checklist — CC‑C17‑M (metrics & guards)
Worked mini‑cases (engineer‑manager focus)
All names are context‑local; bridges and editions are explicit. We show (a) what is measured, (b) who acts, (c) what is accepted, and (d) how evidence flows.
Case A — Hardware ideation sprint (manufacturing design)
- Context.
DesignLab_2026. - Objective. Reduce fastener count by ≥ 30 % without tooling changes.
- MethodDescription. “Morphological matrix ideation v2.”
- Work. 1‑day sprint, 6 sessions.
- Metrics.
Novelty@context(encoder: CAD‑graph v1; ReferenceSet: in‑house assemblies),ConstraintFit(no‑tooling‑change),Use‑Value(acceptance: Pass if sim shows ≤ +5 % assembly time). - Roles. Performers = design cell (#TransformerRole); Observer = methods coach (#ObserverRole ⊥).
- Outcome. 22 candidates; 4 Pass usefulness; best
Novelty=0.41 with 100 % constraints respected;Time‑to‑First‑Viable= 3 h 40 m. - Evidence. Scorecard episteme holds metrics; links to Work ids; acceptance tied to internal promise content “Design‑for‑Assembly Simulation”.
Manager’s read. “We didn’t just produce ‘novel’ shapes; 4 passed the sim and respected constraints, within the day.”
Case B — Data‑science hypothesis generation (health analytics)
- Context.
Cardio_2026. - Objective. Find a new risk factor candidate for readmission (< 30 days).
- MethodDescription. “Causal discovery v3 + clinician review.”
- Metrics.
DiversityOfSearch(approach classes: feature ablation, IVs, DAG‑learners),Novelty@context(text encoder over prior hypotheses),Use‑Value(AUROC uplift ≥ 0.03 on hold‑out),Transferability@Hospital_B(Bridge CL=2). - Roles. SRE pipeline (#ObserverRole) computes metrics; clinicians (#ReviewerRole) set acceptance; data squad (#TransformerRole) performs experiments.
- Outcome. Two candidates; one meets AUROC uplift; Transferability requires follow‑up (CL penalty).
- Evidence. Episteme bundle: model cards, hold‑out plots, Bridge note.
Manager’s read. “One candidate works here; plan a pilot at Hospital B (we recorded CL=2).”
Case C — Product squad reframing (software UX)
- Context.
SaaS_Onboarding_2026. - Objective. Reduce time‑to‑value (TTV) by 20 %.
- MethodDescription. “JTBD interviews + onboarding flow experiments.”
- Metrics.
ReframeDelta(BoundaryShift: split onboarding into ‘job setup’ and ‘first result’),Use‑Value(TTV ‑22 % on A/B),Risk‑BudgetedExperimentation(within cap),Compositionality(reuse of existing workflow widgets). - Roles. UX researcher (#ObserverRole), squad (#TransformerRole), product ops (#ReviewerRole).
- Outcome. Frame changed; TTV target passed; experiments within budget.
- Evidence. Reframing episteme with Scope diff + A/B report.
Manager’s read. “We changed the problem frame and proved the value drop—within risk limits.”
C.17:15.4 What these cases illustrate (tie‑backs)
- Locality. All novelty/usefulness claims are Context‑tagged; Cross‑context steps use Bridges with CL.
- Dual‑gate. Novelty never acts alone; usefulness/constraints co‑gate decisions.
- SoD & Evidence. Observers are separate from performers; metrics live on epistemes with frozen hooks; Work proves fulfillment.
Working examples
Software (algorithmic/architectural ideation)
Kernel characteristics (↑/↓/gate). Novelty↑ (algorithmic / compositional), Use‑Value↑ (targeted user/job metric), ConstraintFit=gate (resource/latency envelope), Cost‑to‑Probe↓ (hours to runnable spike), Evidence‑Level↑ (tests/benchmarks confidence), Option‑Value↑ (paths unlocked), RegretRisk↓ (scope of adverse impact if wrong).
Priors.
- Novelty prior skeptical beyond nearest known family (discount by conceptual distance).
- Evidence prior at L0 (B.3) until benchmarks exist; regression tests act as ObserverRole evidence.
Context card (one screen).
- Γ_bundle: Cost = sum; ConstraintFit = AND; Novelty = subadditive; Evidence = min (chain) / SpanUnion (indep).
Hardware (mechanical/electro‑mechanical concepting)**
Kernel characteristics. Novelty↑ (principle/material), Use‑Value↑ (performance delta), ConstraintFit=gate (manufacturability window), Time‑to‑Probe↓ (bench jig), Cost‑to‑Probe↓, SafetyRisk↓ (hazard), Evidence‑Level↑ (bench data), Option‑Value↑ (platform reuse).
Priors.
- SafetyRisk has WLNK priority (R must cover hazard chain).
- ConstraintFit must pass manufacturing gate before frontier inclusion.
Context card.
- Γ_bundle: Hazard = max; ConstraintFit = AND; Cost = sum+coupling; Evidence = min on chain; Scope via WorkScope (A.2.6).
Policy design (rules/standards/programs)
Kernel characteristics. Novelty↑ (institutional), Use‑Value↑ (measurable social/operational effect), ConstraintFit=gate (legal/operational), Cost‑to‑Probe↓ (pilot), Evidence‑Level↑ (triangulated), EthicalRisk↓ (D‑cluster), Option‑Value↑ (coalitions/pathways), Scope (ClaimScope G) explicit.
Priors.
- EthicalRisk uses status‑only eligibility conditions; Evidence aging (decay) is fast; cross‑context Bridges carry CL penalties.
Context card.
- Γ_bundle: EthicalRisk = max; ConstraintFit = AND (legal & operational); Cost = sum; Evidence = min/SpanUnion; Scope = ClaimScope (A.2.6).
Consequences & fit (for engineer‑managers)
- You can reason on paper about creativity: compare with dominance, pick along a frontier, and steer exploration with a few policy characteristics.
- Changes to the space (scales, eligibility conditions, operators) are handled by RSCR, so decisions are explainable over time.
- The Context handbooks are a thinking OS: one screen to start ideating without importing tool stacks or management playbooks.
Cross-scale characteristics need one visible distortion account
- Cross-scale talk should state what characteristics are being preserved, aggregated, projected, or lost when the line moves between scales such as organism, species, population, or ecosystem.
BridgeDistortionNoteis the explicit warning that one bridge, aggregation, or projection changes what can be compared directly.- A distortion note does not cancel the declared
Front,Archive, orShortlist; it says how far one cross-scale reading can be trusted without further qualification. - When one retained set, frontier view, or transition path is projected into one atlas-like reading, keep the distortion note near that projection instead of leaving the loss to implication.
- If that projection also depends on one declared
OutcomeMapReforTransitionRelationRef, cite that support next to the distortion note so the reader can see both why the projection is useful and where it stops being faithful. - Different atlas-like projections over the same retained set or frontier may preserve different characteristics; keep those differences visible instead of treating one cross-scale view as information-preserving by default.
- This lets the line say both
the bridge is usefulandthe bridge is not information-preserving in every respect.
Use-Value is not the whole Q-set by default
Use-Valuemay be one member of a declaredQ-set, but it is not the wholeQ-setby default.- When creativity or novelty characteristics stay outside the declared
Q-set, keep that placement visible as tie-breaker, telemetry, archive-retention reason, or explicitly promoted criterion under policy. - Do not let
Use-Valuelanguage silently promoteNovelty@context,DeltaDiversity_P,Surprise, orIlluminationSummaryinto current dominance.
Relations
- Builds on: B.1 Γ‑algebra (WLNK/COMM/IDEM/MONO), B.3 Trust & Assurance (F–G–R, CL), A.2.6 USM (Claim/Work scopes), A.10 Evidence Graph Referring.
- Coordinates with: A.2 Role suite (Observer/Evidence roles for probes), A.15 (Work & plans for probes), C.16 MM‑CHR (scale polarity & units). C.18 NQD-CAL (generation/illumination operators Γ_nqd.*) and C.19 E/E-LOG (policies, selection, and declared retained-set rules). This CHR remains measurement-only.
- Defers to: F.9 Bridges for Cross‑context transfers; D‑cluster for ethical/speech‑act gates.
Quick reference cards (tear‑out)
- Dominance test: apply indicators + eligibility conditions + trust; then partial order.
- Frontier use: show frontier + name the lens that picked your choice.
- Retained-set policy: keep
ExploreShareandWildBetQuota; setBackstopConfidence; rebalance on cadence.
Conformance Checklist (pattern‑level, normative)
Pass these and your CS modelling remains a thinking architecture, not a team‑management manual.
CC‑C17‑1 (context‑local CS).
Every CreativitySpace (the characteristic set where ideation and selection are measured) MUST be defined inside one U.BoundedContext; all characteristics and their scales are local to that Context. (Bridges with CL penalties are required across Contexts; see §C.17.16.)
CC‑C17‑2 (Characteristics, not “characteristics”).
Each CS dimension SHALL be a named Characteristic per MM‑CHR, with kind (qualitative, ordinal, interval, ratio, or set‑valued), unit and scale, polarity, and admissible operations. No free‑floating coordinates. (A.CHR‑NORM / A.CSLC‑Kernel.)
CC‑C17‑3 (Profile ≠ plan). A Profile is a state description over characteristics (what the option is in CS); a Plan or Method is how you will act. Never encode choices or schedules into the profile.
CC‑C17‑4 (Portfolio / retained-set view = set + rule).
A Portfolio or retained-set view is a declared set of candidate profiles plus a selection or retention rule (objective + constraints) declared in the same Context. It is not a synonym for Palette, Front, Archive, Shortlist, or RankedShortlist; use the specific set-result family head when that head is recoverable. Presenting only a scatterplot is non‑conformant.
CC‑C17‑5 (Dominance operator well‑typed). A dominance claim MUST name the characteristic subset and polarity under which it is evaluated. Dominance on incomparable scales (or mixed polarities without explicit transformation) is invalid.
CC‑C17‑6 (Frontier from rule, not from taste). A Frontier (Pareto or constraint‑bound) SHALL be computed from the declared selection rule; drawing a “nice hull” by eye fails conformance.
CC‑C17‑7 (Search–Exploit as dynamics, not policy dogma). Exploration/exploitation MUST be expressed as a dynamics on the declared retained-set measure(s) (e.g., exploration share as a function of marginal value of information), not as a prescriptive budget recipe. Objective, constraint, and decision-policy statements belong to Decsn‑CAL / C.19; C.17 may cite them, but does not own or restate them.
CC‑C17‑8 (Evidence Graph Referring for scores). Any numeric score in a profile MUST cite its MeasurementTemplate (MM‑CHR) and the observation/evaluation that yielded it. No anonymous numbers.
CC‑C17‑9 (Separable uncertainty lanes). Keep aleatory vs epistemic uncertainty separate on characteristics; their combination rule MUST be stated (e.g., interval arithmetic, conservative bound).
CC‑C17‑10 (Time is explicit).
Comparisons across iterations MUST state TimeWindow (snapshot window) and whether drift or refit occurred (§C.17.14). “Latest” is not a time selector.
CC‑C17‑11 (No proxy collapse). If a composite “creativity index” is used, its aggregation algebra (weights, monotone transforms) MUST be declared; the primitive characteristics remain queryable.
CC‑C17‑12 (Work stays on Work).
Resource/time actuals and run logs live on U.Work; CS never carries actuals. We reason about profiles / retained sets; we do not audit operations here.
Worked‑Context Handbooks (concept cards, not runbooks)
Each Context publishes one page per card. These are thinking kernels: priors, objectives, admissible characteristics, and example transforms. No staffing, no process charts.
(a) Kernel Card — “What is a creative win here?”
- Context:
<Context/Edition> - Purpose Characteristic(s): what “win” means (e.g., Novelty, Usefulness, Adoptability), with polarity and admissible ops.
- Constraint Characteristics: Risk, Cost of change, Time to learn, etc.
- Objective (Decsn‑CAL pointer): Maximise
<purpose>subject to declared constraints. - Frontier Rule: Pareto over
{purpose ↑, risk ↓, cost ↓, time ↓}. - Evidence Hooks: which observations/evaluations populate each characteristic.
(b) Priors Card — “What we believe before seeing data.”
- Default priors on uncertainty for each characteristic (e.g., Beta for adoption probability).
- Bridge policy: minimal CL acceptable for imported profiles.
- Exploration prior: initial exploration share as a function of prior entropy.
(c) Objective Variants Card — “Admissible objective shapes.”
- Catalog the few objective forms this Context allows (lexicographic tie‑break, ε‑constraint, max‑min fairness), with didactic pictures of their frontiers.
- State when to switch objective (e.g., during bootstrapping vs exploitation).
(d) Ready‑to‑use transforms (MM‑CHR aligned)
- Monotone maps (e.g., log utility), normalizations, ordinal→interval “do & don’t” (only with evidence of order‑to‑interval validity).
- Forbidden transforms list (e.g., averaging ordinal ranks).
These cards are conceptual fixtures; Tooling may implement them, Pedagogy may teach them, but C.17 only standardises their content as thinking supports.
Placement sanity‑check across the pattern language (avoid scope creep)
- MM‑CHR (C.16): defines Characteristic/Scale/Unit/Measure and the characterisation discipline. All CS dimensions live there; C.17 uses them, never re‑defines scales.
- A.CHR‑SPACE (A.19): exports CharacteristicSpace & Dynamics hooks; C.17 is a Contexted specialisation for creative reasoning (profiles / retained sets / selection).
- Decsn‑CAL (C.11): defines objective functions, constraints, preference orders, utility proofs, and the search–exploit dynamics as decision policies. C.17 only names the hooks (objective, rule), keeps policy math out.
- KD‑CAL (C.2) & B.3 (Trust): carry evidence provenance, assurance and congruence penalties (CL) for Cross‑context reuse. C.17 requires anchors; it does not invent confidence calculus.
- Compose‑CAL (C.13): governs set/union/slice aggregation; a declared retained set is a Γ_m.set over profiles; frontier is derived without ad‑hoc geometry.
- B.4 Canonical Evolution Loop: where Run→Observe→Refine→Deploy sits. C.17 supplies the view in which refinement is judged.
Out of scope here: team staffing, budgeting workflows, data‑governance procedures, ticket states, any “how to manage people”. This pattern organises thought, not teams.
Anti‑patterns & canonical rewrites (conceptual hygiene)
- characteristic‑speak. “Along the novelty characteristic…” → Rewrite: “Along the Novelty characteristic (ordinal; higher is better)…”.
- Pretty hulls. Drawing a convex hull and calling it a frontier → Rewrite: compute Pareto under declared characteristic polarities.
- Ordinal arithmetic. Averaging ranks or Likert values → Rewrite: either treat as ordinal and use order‑safe operators, or justify an interval mapping via MM‑CHR evidence.
- Proxy tyranny. Single composite index driving choice unseen → Rewrite: publish primitive characteristics, index formula, and sensitivity.
- Policy‑as‑math. “10% wild bets” as a rule → Rewrite: declare an exploration dynamics tied to value‑of‑information; if keeping a heuristic, label it as such.
- Global meaning. Porting a profile from another Context by name → Rewrite: attach a Bridge with CL and loss notes; adjust trust, not scales.
- Plan‑profile blur. Putting milestones into profiles → Rewrite: move schedules to
U.WorkPlan; keep CS for how options compare, not how to execute.
Minimal didactic cards (one screen each)
(1) Profile Card
- Option id & Context
- Characteristics table (value, unit and scale, uncertainty split)
- Evidence Graph Ref (Observation/Evaluation ids)
- Notes (bridges used, CL penalties)
(2) Declared Set-with-Rule Card
- Set of candidate profiles (refs)
- Objective & constraints (Decsn‑CAL pointer)
- Dominance subset & Frontier snapshot (with TimeWindow)
- Delta vs previous (entered/exited/moved)
(3) Search–Exploit Card (conceptual)
- Exploration share as function of marginal VOI (symbolic)
- Update cadence (TimeWindow policy)
- Stop conditions (e.g., VOI below threshold; risk bound reached)
(4) RSCR Summary Card
- What changed? (refit/Δ±)
- Sentinels status
- Frontier churn
- Bridge CL drift
These cards are thinking scaffolds; they do not prescribe org process.
Consequences (informative)
Trade‑offs: upfront ceremony (declare characteristics, polarity, TimeWindow) and disciplined bridges. The payoff is comparability and explainability.
C.17:26- Open questions (non‑normative, research hooks)**
- Information geometry of CS: can certain Contexts justify canonical distance metrics across characteristics without violating MM‑CHR parsimony?
- Multi‑agent exploration: how to couple individual CS frontiers into a co‑exploration equilibrium without importing team governance?
- Learning‑to‑rank vs measurement: what minimal evidence suffices to treat an ordinal characteristic as interval for the purpose of frontier estimation?
C.17:End
Open‑Ended Search Calculus (NQD‑CAL)
Status. Calculus specification (CAL). Exports Γ_nqd.* operators for open‑ended, illumination‑style generation. ΔKernel = 0 (no kernel primitives added). Minting note: this CAL does not mint new U‑types; it defines CAL‑records that MAY alias to registered U‑types where present via E.10/UTS.
Depends on. A‑kernel (A.1–A.15), MM‑CHR (C.16) for measurements, KD‑CAL for similarity/corpora, Sys‑CAL for carriers, Decsn‑CAL (objectives; advisory), Compose‑CAL (set aggregation; advisory).
Coordinates with. B.5.2.1 (binding), C.17 Creativity‑CHR (characteristics & scales), C.19 E/E‑LOG (policies: emitter selection, explore/exploit).
Exports (CAL; no U‑type minting here).
- Records:
NQD.DescriptorMap(alias ofU.DescriptorMapif minted),NQD.NQDArchive(alias ofU.NQDArchive),NQD.Niche,NQD.ArchiveCell,NQD.EmissionSeed?,U.EmitterPolicyRef,U.InsertionPolicyRef,U.IlluminationSummary, andNQD.CandidateSet(alias ofSet<U.Hypothesis>).
Problem frame
Open‑ended search (NQD) equips FPF with illumination‑style generation and Pareto / selected-set selection in multi‑criteria, partially ordered spaces; it feeds G.5 without scalarising ordinal or mixed‑scale characteristics.
Problem
Without a disciplined NQD calculus, contexts (a) conflate illumination telemetry with dominance, (b) lose reproducibility due to undeclared DescriptorMap/DistanceDefRef.editions, and (c) perform illegal aggregations across scales.
Forces
• Posets vs. scalarisation — selectors must return sets (Pareto/archive) rather than illegal weighted sums across mixed scales. • Exploration vs. exploitation — emitters must adapt while preserving provenance and editioning. • Telemetry metric vs. objective — Illumination (coverage/QD‑score) informs health but is not a dominance characteristic by default. • Reproducibility vs. adaptivity — budgets, ε, K, and InsertionPolicy must be edition‑tracked.
Solution
Provide Γ_nqd.* operators and U.Types for DescriptorMap, Archive/Niche, policies, and illumination telemetry summaries; bind measurement legality to MM‑CHR and policy control to E/E‑LOG. (Exports/Type notes/Operator specs below are normative parts of this Solution.)
- Operators (Γ):
Γ_nqd.generate(seed?, EmitterPolicyRef, Budget, DescriptorMapRef, QualityMeasuresRef, NoveltyMetricRef, CoverageGrid, CellCapacity K=1, EpsilonDominance ε=0, DedupThreshold?, InsertionPolicyRef?) → CandidateSet<U.Hypothesis>Γ_nqd.updateArchive(Archive, CandidateSet, InsertionPolicyRef?) → Archive'Γ_nqd.illuminate(Archive) → IlluminationSummary{coverage, QD-score, occupancyEntropy, filledCells}(report‑only telemetry summary; not a dominance characteristic unless a policy explicitly promotes it).Γ_nqd.selectFront(Archive|CandidateSet, characteristics={Q components, Novelty@context, ΔDiversity_P, …}) → ParetoFront
Type notes.
U.DescriptorMap (Tech; twin‑labelled Plain) : Hypothesis → ℝ^d(declares encoder, invariances, version, CharacteristicSpaceRef). Publish Tech/Plain per E.10; declareDescriptorMapRef.editionandDistanceDefRef.edition. Dimensionality rule. Required≥2only when QD/illumination surfaces are active; for non‑QD contextsd≥1is lawful.NQD.CandidateSet≡Set<U.Hypothesis>with attached per‑item vectors{Q_i, N_i, D_i:=ΔDiversity_P, S_i?, provenance_i}.U.NQDArchiveholds per‑cell elites and genealogy refs; context‑local.U.Nicheis a region in CharacteristicSpace (grid bucket / CVT centroid / cluster).U.EmitterPolicyRefpoints to a named policy in C.19 E/E‑LOG.U.InsertionPolicyRef— named archive‑update policy (e.g.,replace_if_better | replace_worst | bounded_age | bounded_regret); versioned.U.IlluminationSummaryis a telemetry summary overDiversity_P(see C.17), not a dominance characteristic.
Operator specs (normative).
Γ_nqd.generate(… )SHALL: (a) respect Budget, (b) compute{Q_i}(vector),N_i(Novelty@context),D_i := ΔDiversity_P(h_i | Pool)under the same CharacteristicSpace & TimeWindow as the Pool, and optionalS_i(Surprise), (c) deduplicate byDedupThresholdin CharacteristicSpace, (d) recordDescriptorMapRef.edition,DistanceDefRef.edition,EmitterPolicyRef,ε,K,Seeds, and genealogy references (parent/seed ids) to enable replay and selection auditing.Γ_nqd.updateArchiveSHALL apply local competition per cell (keep up to K elites), preserve genealogy, and enact the declaredInsertionPolicyRef; default isreplace_if_betterwith deterministic tie‑breakers.Γ_nqd.illuminateSHALL return coverage and QD‑score computed against the declared grid and archive edition.Γ_nqd.selectFrontSHALL compute the (ε‑)Pareto front over the declared characteristics; Illumination is excluded by default (report‑only).
Pipeline: apply Eligibility (ConstraintFit=pass) → Dominance over the declared DominanceSet → Tie‑breakers (Novelty@context, ΔDiversity_P, Surprise; Illumination telemetry metric). When the context relies on the ordinary default, consume DefaultId.DominanceRegime from G.Core/G.5 together with the active C.19 emitter/archive policy instead of restating one local dominance doctrine here.
Ordinary default Q-front mode: When no narrower promotion policy is declared, dominance stays on the context-declared Q components while N/ΔD work through archive occupancy and tie-breakers. Any deviation SHALL be declared by policy id and recorded in provenance.
Reproducibility & editions. Each call SHALL emit provenance sufficient for replay: {DHCMethodRef.edition, DescriptorMapRef.edition, EmitterPolicyRef (params), **InsertionPolicyRef**, DedupThreshold?, ε, K, Seeds, TimeWindow}.
Telemetry hook: whenever IlluminationSummary increases (Δcoverage>0 or ΔQD‑score>0), the Context SHALL emit a Telemetry(PathSlice) record that cites {EmitterPolicyRef, DescriptorMapRef.edition, DistanceDefRef.edition, InsertionPolicyRef?, TimeWindow}. (Aligns with G.6/G.7/G.11 PortfolioMode/edition constraints.)
Measurement alignment. Novelty@context, Use‑Value (ValueGain), Surprise, Diversity_P SHALL be measured per C.17 (MM‑CHR templates). IlluminationSummary is a telemetry summary over Diversity_P (coverage/QD‑score); when CharacteristicSpace includes domain‑family cells, publish grid id and FamilyCoverage, plus DescriptorMapRef.edition/DistanceDefRef.edition.
.
Front and archive are different returns
- Start from one declared
EligibilitySet. - Return the non-dominated
Frontover the declaredDominanceSet. - When archive mode is active, return the corresponding
ExplorationArchiveseparately. - Archive membership may use novelty, diversity, stepping-stone potential, or coverage policy and is not by itself evidence of membership in the current
Q-Front. - Keep
TieBreakerSetandTelemetrySetexplicit so diversity or illumination signals do not silently rewrite the front semantics. - Use
RetentionIntent=steppingStonewhen the point of retention is frontier expansion rather than current dominance. - Here
EligibilitySet,DominanceSet,TieBreakerSet, andTelemetrySetare comparison-bundle sets, whileRetentionIntent=steppingStoneis one archive-retention field value; none of them renames the returnedFrontorExplorationArchive. - If one line keeps both returns, say that the front answers current non-domination while the archive answers retained exploration value.
- When retained exploration value depends on future reachability or curriculum expansion across transitions, cite the declared reachability or transfer rule together with
LearningProgressSignal,CompetenceModelRef, orGoalSpaceExpansionCue. That bridge stays archive/pool-policy-side unless one explicit policy promotes it; it does not require the heavier atlas layer and it does not rewrite front semantics.
Conformance Checklist
- C18‑1 Declare
DescriptorMap(encoder, invariances, corpus edition) before generation. - C18‑1b When used in F/G triads, DescriptorMap SHALL declare a domain‑family coordinate (grid/cells) and reference an F1‑Card::DistanceDefRef & δ_family.
- C18‑1c When a domain‑family coordinate is declared, the Context SHALL compute and publish AliasRisk for each front / declared set-result emission, together with the dSig collision rule and the policy id. AliasRisk is computed against
U.DomainDiversitySignature (dSig); the DescriptorMap SHALL publish: (i)collisionRuleId(near‑duplicate threshold, e.g. “≥3 characteristics equal”), (ii)dSigSourcepointers used for coding the five characteristics. The collision rule and formula MUST be part ofDescriptorMapprovenance (see Creativity‑CHR, Heterogeneity Characterisation). - C18‑2 Record
EmitterPolicyRef(policy id from C.19) and parameter set. - C18‑3 Compute
D = ΔDiversity_P(h | Pool)under the same DescriptorMap & TimeWindow as the Pool (see C.17). - C18‑4 Exclude Illumination from dominance unless policy explicitly promotes it.
- C18‑5 Keep
Use‑Valueseparate from assurance scores; do not alterF/G/Rsemantics (see B.3, C.17 §Use‑Value). - C18‑6 Emit full provenance; thinning after front computation MUST be recorded.
- C18‑7 Before computing any front, apply ConstraintFit = pass as a hard eligibility filter.
Defaults. Default-governance responsibility is split on purpose: G.Core and G.5 govern DefaultId.DominanceRegime and selector-facing default routing, while C.19 governs emitter, insertion, and pool-policy defaults. C.18 consumes those defaults and records the active refs instead of restating them locally. Minimum provenance remains: DescriptorMapRef.edition and DistanceDefRef.edition, DHCMethodRef.edition, EmitterPolicyRef, InsertionPolicyRef, TimeWindow, Seeds, DedupThreshold?; also record FamilyCoverage/MinInterFamilyDistance.
Didactic quickstart (Context).
- Pick 2–4 Quality coordinates and a simple DescriptorMap (2–4 dims).
- Set defaults:
K=1,ε=0, a conservativeEmitterPolicy. - Run
Γ_nqd.generateto fixed Budget; inspect the front; log coverage (IlluminationSummary). - Apply abductive plausibility filters; promote prime hypothesis to L0.
Archetypal Grounding
System. Legged‑robot gait exploration: Q = {forward speed, energy efficiency}; DescriptorMap/CharacteristicSpace = morphology/coordination descriptors (ℝ^d); D = ΔDiversity_P(h | Pool) computed over that declared descriptor space; Archive = CVT grid; illumination reports coverage without entering dominance.
Episteme. SoTA palette synthesis: Q is one declared objective tuple for the current synthesis task, for example external-validity gain, reuse value, or Use-Value only when the Context explicitly declares it inside Q; DescriptorMap/CharacteristicSpace carries method-family or claim-graph descriptors; D = ΔDiversity_P(h | Pool) is computed over that declared descriptor space or niche grid. Publish DescriptorMapRef.edition and DistanceDefRef.edition so the front remains reproducible.
Bias‑Annotation
Lexical firewall and notation independence apply; no vendor/tool tokens; ordinal characteristics never averaged; illumination treated as report‑only telemetry unless a policy promotes it. (E.5.1, E.5.2, C.16)
Consequences
• Selected-set honesty (no forced scalarisation). • Reproducibility (editioned maps/policies). • Healthy diversity signals via telemetry metrics.
Rationale
Post‑2015 Quality‑Diversity (MAP‑Elites & successors) demonstrates illumination efficacy; NQD‑CAL captures these ideas while preserving MM‑CHR legality and LOG governance.
Relations
Builds on: C.16, C.2. Coordinates with: B.5.2.1 (binding), C.17, C.19, G.5, G.6, G.11.
C.18:End
Scaling‑Law Lens Binding (SLL)
Status: Stable
One‑screen purpose (manager‑first). Make generation/selection scale‑savvy: at the level of conceptual descriptors, declare (a) which monotone knobs we would scale, (b) the ScaleWindow over which we claim behaviour, and (c) the elasticity class we observed—without imposing numeric fits or vendor tools at Core level. This surfaces knees early and keeps comparisons lawful and fair across families. (Parity is handled by G.9; illumination remains a report-only telemetry unless a CAL policy promotes it.)
Builds on. C.16 (MM‑CHR), C.17 (Creativity‑CHR), C.18 (NQD‑CAL); advisory: C.5 (Resrc‑CAL). Coordinates with. C.19 (E/E‑LOG), G.5 (Selector & Registry), G.9 (Parity Harness), G.10 (Shipping), G.11 (Refresh‑Telemetry), C.24 (Agent‑Tools‑CAL). Keywords. scaling law; Scale Variables (S); ScaleWindow; knee; diminishing returns; iso‑scale parity; UNM/NormalizationMethod‑based mapping; scale‑probe; DoE (design‑of‑experiments); segmented regression; knee detection.
Problem frame
Teams often say a method “scales” without disclosing which resources, across what window, and how outcomes respond (convex rise → knee → plateau). Without that, parity is skewed (unequal budgets, unmatched windows), coverage/illumination report-metrics leak into dominance, and “knees” are found late. SLL supplies a notation‑independent lens to make scale behaviour explicit and comparable.
Problem
Omitting Scale Variables and the comparison window causes: (i) unfair parity (compute/data/FoA mismatched), (ii) illumination/coverage report-metric creep into dominance by default, (iii) late detection of knees and budget waste. G.9 already forbids scalarising mixed scales and mandates equal FreshnessWindows/pinned editions; SLL complements this with ScaleWindow & elasticity.
Forces
Notation independence vs useful scaling heuristics; local context vs cross‑context generality; telemetry vs objectives (illumination stays report‑only telemetry unless policy promotes it); early exploration vs reproducible policy.
Solution — binding lens for generator/selector profiles (normative)
Types (aliases; ΔKernel = 0).
SLL.Profile is an annotation on a MethodFamily/Generator or a Selector profile; no new U.Types are minted (LEX discipline).
Fields (conceptual descriptors).
- S — Scale Variables. Minimal set of monotone knobs for the Context:
compute(steps/tokens/FLOPs/time/energy),data(size/quality),model capacity(params/branches),iteration budget,freedom‑of‑action (FoA)/environment richness, etc. Declare units via Resrc‑CAL and bind to a ScaleWindow. Where training/inference trade, name the phase the claim concerns. - ScaleWindow. Declared range of
Svalues for which behaviour claims hold (editioned). This is distinct from FreshnessWindow used by parity. - Scale‑Probe. At least two (preferably ≥ 3) parity‑respecting points in
Swithin the ScaleWindow, recorded with replicates/seeds and CI/error bars to support elasticity classification. Pick points via a small factorial or Latin‑hypercube when multiple knobs vary. - ElasticityClass
χ ∈ {rising, knee, flat, declining}— a qualitative class; numeric exponents/fits live in domain annexes, not Core. - ParityNotes.
iso‑scale parity?flag (and loss notes if not achieved), plus Bridge/Φ/Ψ IDs when crossing contexts (penalties route to R only).
Norms (SLL).
- SLL‑1 (Declaration). Any profile claiming scale behaviour SHALL declare
Sand a ScaleWindow for the Context. - SLL‑2 (Probe). Early investigation SHALL include a scale‑probe (≥ 2 points in
S, with replicates/CI) and record χ. Multi‑knob probes SHALL hold unspecified knobs fixed or pinned, and disclose invariants. - SLL‑3 (Parity). Where
Sis declared, comparisons SHALL ensure iso‑scale parity and lawful UNM/NormalizationMethod‑based mapping across heterogeneous knobs (e.g., FLOPs↔tokens) before comparing outcomes; FreshnessWindows/editions must be equal/pinned per G.9. Record seeds/replicates, ComparatorSet, and policy‑ids in telemetry/SCR. - SLL‑4 (Selection lens). Within the same Context and ScaleWindow, if other heads (N/U/C) are tied, selectors MAY use illumination as a tie‑breaker, but it SHALL NOT change default dominance; illumination remains report‑only telemetry unless a CAL policy promotes it.
- SLL‑5 (Knee test). A knee is claimed only where a monotone rise is followed by a statistically significant slope drop across adjacent probe points within the ScaleWindow; thresholds (e.g., Δslope & CI level) are policy‑defined (E/E‑LOG) and must be cited. Absent such evidence, classify as rising.
- SLL‑6 (Telemetry invariants). Probes SHALL export seeds/replicates, edition pins, policy‑ids, and Resrc‑CAL units to G.11.
Method — minimal SoTA probe recipe (notation‑agnostic; informative).
- Choose knobs
Sthat are plausibly monotone in the Context (compute/data/capacity/FoA). - Pick 3–5 probe points per active knob (edge/mid/edge) under iso‑scale parity; use a fractional factorial if >2 knobs.
- Run replicates (≥ 3 preferred) and bootstrap 95% CI on the primary objective(s); log seeds.
- Estimate local slopes on a log‑log grid; apply piecewise/segmented regression or a knee detector (e.g., L‑curve/Kneedle) to support
χ. - Record invariants (pinned knobs, safety envelope) and publish SLL.Card@Context.
- If χ changes across the window, split the ScaleWindow and re‑classify per segment.
Interfaces — minimal I/O (conceptual)
G.9 Plan/Run Parity consumes S/ScaleWindow to align budgets, pin editions, and perform UNM/NormalizationMethod‑based mapping; G.11 carries policy‑id, PathSliceId, seeds/replicates, CI level, and edition pins per parity CC.
Conformance Checklist (CC‑SLL)
Sdeclared orS = N/Awith rationale.- Scale‑probe performed; χ recorded with replicates/CI; invariants disclosed.
- iso‑scale parity or loss notes + penalties → R only; editions/seeds pinned; ComparatorSet cited.
- If used as tie‑breaker, the selector cites χ and lens id in E/E‑LOG provenance.
- Knee claims cite the policy threshold and CI level used.
Anti‑patterns & remedies
Hidden budget mismatches; averaging ordinals across families; illumination in dominance by default; unpinned editions; slope claims without replicates/CI; training/inference phase mixing → cure with G.9 parity (equal windows/editions; normalize‑then‑compare; return sets), phase‑label the claim, and record slope uncertainty per Scale‑Audit discipline.
Archetypal grounding (post‑2015; informative)
- LLM scaling. Kaplan‑style & Chinchilla‑optimal regimes; Mixture‑of‑Experts and retrieval‑augmented families shift effective capacity with different inference budgets; prompt‑policies often transfer better than narrow pipelines.
- RL/Planning. Model‑based optimization & general agents vs hand‑tuned controllers; slopes reported wrt budget/FoA under safety envelopes.
- QD/OEE. MAP‑Elites, CMA‑ME, DQD, QDax; POET/Enhanced‑POET families: coverage/illumination as telemetry metrics; parity uses fixed grids/spaces and edition pins.
Payload — exports
SLL.Card@Context (UTS row; editioned):
⟨S{knobs, units, phase}, ScaleWindow, Scale‑Probe{points≥2, design=one‑liner, seeds, CI}, ElasticityClass χ, ParityNotes{iso‑scale?|loss, invariants}, BridgeIds?/Φ/Ψ, PolicyIds? (E/E‑LOG), PathSliceId?⟩.
UTS row template (conceptual; pencil‑ready).
SLL.Card@Context := S=(COMPUTE|DATA|CAPACITY|FOA; units=…; phase=TRAIN|INFER), ScaleWindow=[LOW…HIGH], Probe=(points=…, design=factorial|LHD, seeds=…, CI=…), χ=rising|knee|flat|declining, ParityNotes=(iso=true|false; invariants=…), Bridge/Φ/Ψ=(…), PolicyIds=(…), PathSliceId=(…).
Relations
C.27 temporal-claim relation.
- C.27 may flag: a claim that more review capacity, tool calls, tokens, data, model capacity, parallelism, freedom of action, sprints, or another declared scale variable changes rate, learning, recovery, throughput, stabilization, or improvement.
- This pattern keeps: scale variable, scale window, scale probes, and elasticity posture.
- Non-admissible use: more scale is not linear improvement, and a scale word does not create a C.27 rate-change claim by itself.
- Exit: if comparison or benchmark use is live, cite G.9 for parity; if the statement is only a linear effort fantasy, name the scale variable and scale window or downgrade.
Builds on: C.16/17/18. Coordinates with: C.19 (lenses/policies), G.5 (set‑returning selector), G.9 (parity; ParetoOnly default; UNM/NormalizationMethod‑based mapping), G.10 (shipping).
Pedagogical cue. Say what you would scale, probe it twice, and use the slope‑class to steer.
C.29 mathematical-lens use relation
C.18.1supplies scale-window and scaling-law evidence forC.29when a mathematical lens claims scale behavior, universality, knees, exponents, coarse-graining validity, or diminishing returns.C.29cannot treat mathematical compression as scalable without an SLL or BLP-compatible scale-window account where scale is load-bearing. If no scale claim is live,C.29uses a local stop condition rather than opening scale-law work.
C.18.1:End
Explore–Exploit Governor (E/E‑LOG)
Type: Calculus (C) Status: Stable Normativity: Normative
Plain-name. Explore-exploit governor.
Intent. Govern exploration/exploitation policy over still-live candidate pools so frontier treatment, graduation, narrowing, and sunset treatment stay explicit, auditable, and stated as one pool-policy result without taking over local choice, enactment, or publication questions.
Export relation. No Γ operators are exported; policies parameterize calls in C.18 NQD-CAL.
Depends on. C.18 NQD-CAL (generators), C.17 Creativity-CHR (measurements), Decsn-CAL (objectives/constraints and scalarization lenses), B.3 (trust adjustments), and Compose-CAL (set aggregation; advisory).
Coordinates with. C.11 for local choice among already-available options, C.24 for enactment planning after choice, G.5 for selector-facing publication, C.17, and G.9.
Use this when
- several candidate lines, family regions, or frontier segments remain live under one declared exploration/exploitation policy and the question is now policy over that pool rather than one more local choice result
- the next result should say how the pool will be treated next:
widen,keep frontier,narrow to subset,sunset line, orreroute - the governing lens or policy state must be explicit rather than inferred from vague exploration language
What goes wrong if missed
- scalarized top-1 picks are mislabeled as "the frontier", so it becomes unclear whether the result names one lens-ranked winner or the lawful live set
- exploration continues without one named pool, one named governing lens, or one explicit next treatment
- local option choice, pool policy, enactment planning, and published shortlist semantics collapse into one blurred result
What this buys
- one explicit pool-governance result for exploration, graduation, narrowing, and sunset treatment
- one explicit link from lens or policy state to the next pool-side treatment
- one repeatable way to preserve heterogeneity and frontier discipline without forcing illegal totalization
First-minute questions
- Which still-live pool, frontier segment, or family region is actually under governance now?
- Which lens or policy state is governing it?
- Is the next lawful treatment
widen,keep frontier,narrow to subset,sunset line, orreroute? - What event or threshold would justify changing that treatment next?
First output
The first useful output is one explicit pool-policy result that names the live pool, the governing lens or policy state, the current treatment (widen, keep frontier, narrow to subset, sunset line, or reroute), and the exact event that would justify changing that treatment next.
That result records how the pool will be treated next under the current exploration/exploitation policy; it does not replace one local C.11 choice record, one C.24 enactment plan, or one G.5 published selector result.
If that first output still cannot be written honestly, the current pool-policy result is not finished C.19 policy yet.
Problem frame
The E/E governor provides named, versioned policies and lenses that steer NQD generation/selection under lawful dominance and provenance constraints.
When C.11 has already made local choice among one fixed OptionSet explicit, C.19 begins where the question becomes policy over several still-live candidate lines, family regions, or frontier segments rather than one more local ChoiceResult record.
Immediate failure indicators for this pattern:
- the current pool-policy result cannot name the still-live candidate pool it is governing
- the governing lens or policy state is missing
- the next pool-side treatment exists only as one vague promise to continue exploration later
If the question is still which single option should survive now, apply C.11. If the next artifact must already be one enactment-facing plan, apply C.24. If the retained set must be published for downstream consumption, apply G.5.
Problem
Ad‑hoc exploration mixes ordinal and interval folds, silently scalarises posets, and loses lens/policy provenance—undermining legality and reproducibility.
Forces
• Trust gates vs. discovery — graduation requires backstop confidence while maintaining explore_share. • Heterogeneity vs. focus — fairness quotas by family vs. depth on proven lines. • Lens expressiveness vs. audit — scalarised choices must not be called 'the frontier' and MUST record lens ids.
Solution
Causal data and causal-policy exploration hook
When an exploration/exploitation policy collects data to support a causal claim, changes intervention budget, learns a causal policy, evaluates a policy from behavior/logging-policy data, or treats a counterfactual strategy as a candidate line, the pool-policy result keeps C.19 authority and cites C.28 for causal-use support.
Optional PoolPolicyResult.causalUseSpec?:
The causal-use support tail may be omitted only when the pool-policy result does not reach CausalUseActivation: it does not make, publish, rank, retire, deploy, or reuse a causal claim. If exploration or exploitation is justified by effect, counterfactual replay, causal policy support, or causal data collection, the support tail is present or the result is downgraded to a non-causal pool-policy reason.
What changes in practice: a frontier policy that explores "to learn what works", exploits a causal policy, or graduates a line because counterfactual replay looks better must declare the causal-use question, CausalUseClaimKind, causality-ladder rung, causal evidence support basis, and supported use and unsupported use before the pool-policy result can carry a causal claim.
What this does not authorize: [C.19](/generated/patterns/C.19) does not become causal identification, causal fairness, off-policy causal evaluation, or counterfactual-realizability authority; it governs pool treatment and redirects causal-use support to [C.28](/generated/patterns/C.28).
Define EmitterPolicy (regime key, params, ε, K, insertion/dedup) and selection lenses with a fixed pipeline (Eligibility → Dominance → Tie‑breakers); bind provenance (policy id, lens id) and guard promotions of Surprise/Illumination to dominance to explicit policy declarations.
Decision-subject clarification. Later choices are attributed to one declared DecisionSubject at explicit DecisionSubjectGranularity. Contexts publish measurement spaces and admissible policies as semantic frames; LOG profiles lenses and policies but does not enact choices.
Depends on. C.18 NQD‑CAL (generators), C.17 Creativity‑CHR (measurements), Decsn‑CAL (objectives/constraints, scalarization lenses), B.3 (trust adjustments), Compose‑CAL (set aggregation; advisory).
EmitterPolicy (named profile). A context‑local, versioned policy with fields:
{ name, regimeKey ∈ {UCB, Thompson, BO‑EI, GP‑UCB, PES, InformationGain, …}, params, explore_share∈[0,1], temperature τ≥0, rebalance_period, wild_bet_quota≥0, backstop_confidence (assurance level), epsilon_dominance ε, cell_capacity K, **insertion_policy**, **dedup_threshold** }.
Policies are referenced as U.EmitterPolicyRef by NQD generator call (C.18) and are conceptual lenses, not staffing/budget instructions.
Ordinary default tokens remain governed by G.Core/[G.5](/generated/patterns/G.5); [C.19](/generated/patterns/C.19) explains their pool-policy consequences but does not become one rival default authority.
Decision-theory bridge. [C.11](/generated/patterns/C.11) governs theory-side choice among already-available options and the meaning of ProbeBudget, ValueOfInformation, and ValueOfComputation. [C.19](/generated/patterns/C.19) may consume such outputs only as criteria for pool policy, graduation, keep-frontier, or sunset treatment; it does not re-govern local choice doctrine.
Ordinary default routing (if policy is unspecified):
• Dominance: consume DefaultId.DominanceRegime from G.Core/[G.5](/generated/patterns/G.5); in ordinary Q-front use this means {Q components} with ConstraintFit=pass as eligibility gate.
• Tie‑breakers: Novelty@context, ΔDiversity_P, Surprise; Illumination (telemetry over Diversity_P: coverage/QD‑score) MAY be used as a tie‑breaker but is not in the dominance set.
• Archive: K=1, ε=0, deduplication in CharacteristicSpace.
• Policy family: one uncertainty-aware explore policy family with one declared regime key and explicit change triggers; UCB-class with moderate temperature and explore_share ≈ 0.3–0.5 is one didactic starter profile, not the semantic default family.
• Provenance (minimum): record DescriptorMapRef.edition, DistanceDefRef.edition, DHCMethodRef.edition, EmitterPolicyRef, InsertionPolicyRef, dedup_threshold?, TimeWindow, Seeds.
Scalarization lenses (policy‑level). A lens J_ℓ declares: (a) hard eligibility conditions (e.g., ConstraintFit=pass), (b) soft aggregation (weights/curves), (c) trust policy (how assurance/CL discounts enter).
Conformance. A Context MUST name the lens used to pick from a frontier; scalarized rankings MUST NOT be presented as “the frontier”; the lens id MUST be recorded in provenance of each selection.
Promotion rules (policy).
- Tie‑breaks.
SurpriseandIlluminationMAY act as tie‑breakers; promotion into the dominance set MUST be declared by lens or policy id and captured in provenance. - Graduation. Profiles graduate from Explore→Exploit when backstop_confidence (B.3 level) and eligibility conditions are met.
- Sunset/Pivot. Profiles failing VOI/backstop thresholds are sunset or pivoted at
rebalance_period.
Explore/Exploit loop (per rebalance_period).
- Recompute frontier with trust discounts.
- Enforce
explore_share(minimum attention on high‑Novelty, not‑yet‑proven profiles). - Update generator
temperature τ/ emitter mix. - Apply
backstop_confidenceto graduate; sunset stale probes. - Satisfy
wild_bet_quotaby seeding fresh high‑Novelty candidates. - HET‑FIRST — apply group‑fairness quotas by domain‑family and/or DPP/Max‑min repulsion before exploit lenses; log quotas and sampler policy id.
Named lenses (heuristics; policy‑level, not norms)
The following lens profiles are illustrative heuristics. Contexts MAY reuse/modify them; they are not normative.
• Frontier‑sweeper — maintain attention on the full front; promote only when backstop_confidence holds.
• Barbell — enforce explore_share ≥ θ with a wild_bet_quota; otherwise exploit top‑trust region.
• Spike‑first — pick highest Use‑Value subject to ConstraintFit=pass and a small Cost‑to‑Probe cap.
• Safety‑first — minimize SafetyRisk subject to Use‑Value ≥ θ and ConstraintFit=pass.
• Platform‑option — maximize Option‑Value under probe cost bounds.
• Pilot‑then‑scale — optimize Use‑Value on pilot scope with BackstopConfidence ≥ L1; widen G once R holds.
• Heterogeneity‑first (policy id). Eligibility → Dominance → Tie‑breakers; Hard gate: FamilyCoverage ≥ k, MinInterFamilyDistance ≥ δ_family; Fairness quotas: ≤1 candidate per sub‑family at pre‑front sampling; DPP/Max‑min sampler allowed.
Conformance (lens recording). A decision that uses any lens MUST record its lens id alongside EmitterPolicyRef. (This restates and localizes C19-3.)
Explicit pool-policy result
A finished C.19 pass should publish one explicit pool-policy result rather than one atmospheric statement that exploration will continue somehow.
That result should state:
- the still-live pool, frontier, or family scope under governance now;
- the governing lens id or policy state;
- the next treatment, chosen from
widen,keep frontier,narrow to subset,sunset line, orreroute; - the event or threshold that would justify changing that treatment next.
A compact result may therefore state, for example:
poolScope = frontier_FgoverningLens = barbell_policy_v2nextTreatment = keep_frontierchangeTrigger = backstop_confidence reaches L1 for one retained line
or, for one narrower family region:
poolScope = family_region_betagoverningLens = heterogeneity_firstnextTreatment = narrow_to_subsetchangeTrigger = quota satisfaction plus one explicit novelty floor
Those fields define the result: governed pool, governing lens, next treatment, and change trigger.
Closure rule over the live pool
A C.19 pass may close only when one explicit pool and one explicit next treatment are both visible.
- Close as
widenwhen the current frontier is too narrow for the declared exploration policy or when the evidence basis is too thin to justify current narrowing. - Close as
keep frontierwhen several lines must remain live under the current lens and no narrower lawful subset is yet justified. - Close as
narrow to subsetwhen one declared lens now justifies retaining one smaller internal live set without pretending that one scalar winner has already been chosen. - Close as
sunset linewhen one line or family region no longer clears the current lens, quota, or backstop requirements. - Close as
reroutewhen the question has stopped being pool policy and has become local choice, enactment planning, or selector-facing publication.
One internal retained subset here is still one pool-treatment result. It is not yet one public Shortlist, RankedShortlist, or ShortlistId-bearing selector artifact. If the retained subset must be published for downstream comparison, handoff, or registry-facing consumption, C.19 closes only by rerouting to G.5.
If the result still cannot say which pool remains live, which lens governs it, and which event would justify changing the treatment, it is still unfinished pool policy rather than one finished C.19 result.
Minimal pool-policy record
The smallest useful C.19 record usually states:
livePool = ...governingLens = ...currentTreatment = widen | keep frontier | narrow to subset | sunset line | reroutechangeTrigger = ...learningProgressSignal? = ...when an autotelic or capability-discovery reason materially supports widening, keeping the frontier live, or probing one goal region furthercompetenceModelRef? = ...when the pool policy depends on a model of what the system or method family can learn nextgoalSpaceExpansionCue? = ...when the lawful next treatment widens the goal/task palette rather than merely re-ranking current candidatesgoalSpaceExpansionPolicyRef? = ...when goal/task-space growth is itself governed by one declared archive/curriculum expansion policywhyNotLocalChoice = ...when the result might otherwise be mistaken forC.11
A lawful short record may therefore read:
When currentTreatment = narrow_to_subset, livePool still names one internal retained subset or one live pool subset. It does not yet mint one public Shortlist, one public RankedShortlist, or one ShortlistId. If selector-facing publication is now required, the lawful [C.19](/generated/patterns/C.19) record closes as reroute to [G.5](/generated/patterns/G.5) rather than silently renaming the internal subset as though publication had already happened.
Goal/task-space growth is one pool-policy doctrine over the archive/curriculum side. When autotelic or capability-discovery pressure is active, cite one GoalSpaceExpansionPolicyRef together with the supporting LearningProgressSignal, CompetenceModelRef, or GoalSpaceExpansionCue; that doctrine may justify widen, keep frontier, or one further probe decision value, but it does not become default Q, does not rename the front, and does not publish one selector-facing shortlist without a [G.5](/generated/patterns/G.5) handoff.
If the record does not already state which pool remains live, what governs it, and what would change that policy treatment next, it is still one unfinished [C.19](/generated/patterns/C.19) result.
Worked closure slice
Three short contrasts keep the closure law practical.
Several family regions remain live.
When the point is to keep several lines active under one declared lens, C.19 should not pretend it has already made one local choice:
One region should now be sunset.
When one region no longer clears the active novelty floor or backstop, [C.19](/generated/patterns/C.19) should say so directly rather than leaving that retirement implicit:
The pool has already been narrowed and the next question is selector-facing publication.
When one internal retained subset is already explicit and the next question is to publish it for downstream use, [C.19](/generated/patterns/C.19) should close by rerouting instead of naming that subset as though it were already one public shortlist artifact:
Bounded shortlist from declared source sets
- Treat
Shortlistas the set emitted by one named lens from one declared source set, not as a synonym forFront. - If the mathematical set object must be named, treat it as the choice set underlying that shortlist rather than as one second public head.
- When the current Context consumes the ordinary default
DefaultId.DominanceRegime, keepDominanceSetequal to the declared currentQtuple and cite that consumed default rather than re-governing it here. Novelty@context,DeltaDiversity_P,Surprise, andIlluminationSummarystay outside default dominance unless one declaredPromotionPolicypromotes them.- If
Use-Valuebelongs inQ, declare it there; do not let it drift between core objective and side note. ExplorationArchiveis the exploration-specific specialization ofArchive; useArchiveas the wider family head only when that exploration-specific subtype does not matter.- Resource bounds govern how much probing, comparison, or retention is warranted, but they do not by themselves redefine the front.
- Decision under budget may draw from the front, from the archive, or from both, but the source set and the decision lens must be explicit.
- The selected-set kernel floor here is:
- one set-return comes first
- one named lens acts over that declared return
- one
Shortlistis emitted from that lens-declared source set - one
ShortlistIdmay later name that shortlist when it must be carried as one stable public token - one
RankedShortlistmay appear later when the shortlist is explicitly ordered
PortfolioModemay state how the selector operated, but it does not rename the emitted set result.- When the comparison question becomes load-bearing, the minimum mathematical substrate should stay visible:
- the compared candidates live in one declared outcome or characteristic space
- the archive may depend on one declared search, niche, or reachability space
- the shortlisted result is emitted from one explicit selected-set return rather than from one hidden scalar winner
- When a context-local creativity or novelty characteristic remains outside the declared
Qtuple, keep that distinction visible rather than treating it as one silent override of the current dominance basis.
First public wording for shortlisted outputs
- Prefer wording like
shortlist from the declared Q-Front under LensId=...over wording that makes the shortlisted result sound like one second front. - When one stable emitted object must be cited across documents or tools, say
ShortlistId for that shortlistrather than letting the token name replace the shortlist result itself. - If the shortlist later acquires order, say
RankedShortlistand keep the prior shortlist result recoverable. - Reserve
choice set underlying that shortlistfor mathematical discussion, proofs, or object-level set operations.
Choice doctrine stays source-set explicit
- State the declared source set and the declared decision lens in the same place as the shortlisted-choice rule.
CostToProbe,ValueOfInformation,ValueOfComputation,explore_share, andbackstop_confidencemay appear here when they justify choice from one declared source set.- Those terms explain why another probe, defer, or stop decision is warranted; they do not rename
Front,Archive, orShortlist. - When teams need a fuller account of budgeted probing or sequencing, add that as one separate resource-aware choice explanation rather than overloading the shortlist doctrine itself.
- Selector-facing publications should keep speaking about the emitted set and its source set rather than trying to explain the whole budgeted-choice rationale there.
System grounding
A product-search or architecture-search team often keeps several family regions alive even after one tempting line starts to look best locally. A lawful C.19 result might therefore keep the frontier live under frontier_sweeper_v3 until one retained line actually clears the declared backstop_confidence, instead of collapsing the whole pool into one premature winner.
Episteme grounding
A SoTA pack often compares traditions that stay non-dominated for different reasons: one clears current evidence quality, one keeps broader transfer value, one preserves family coverage. The lawful C.19 result is then often keep frontier or narrow to subset, not one fake scalar champion.
Collective and contextual grounding
A regional or stakeholder-diverse pool may have to sunset one line while keeping others alive to preserve coverage, fairness quotas, or contextual fit. The practical point is that C.19 governs that pool-treatment decision only while the question under repair is still about the live set; once the result must become one local choice, one enactment plan, or one published selected set, reroute immediately.
Bias-Annotation
No global scalarisation of partial orders; ordinal scales excluded from arithmetic; all selections record lens id and policy id; notation/tool neutrality.
Conformance Checklist
-
C19-1 Each NQD generator call (C.18) SHALL cite
U.EmitterPolicyRef(policy id + params) and the activeInsertionPolicyRef/dedup_thresholdwhen not inherited. -
C19-2 The characteristic set and indicators used for dominance MUST be declared; eligibility conditions applied first. (References to C.18 generator operators are descriptive only; LOG exports no Γ.)
-
C19-3 If a lens is used, its id MUST be recorded; do not label scalarized top-1 as "frontier".
-
C19-4 Promotion of Surprise/Illumination into dominance MUST be explicit in policy.
-
C19-5 USM/RSG gate applies: policy actions SHALL operate within the Context's scope and enactable RSG states.
-
C19-6 Each selection lens MUST implement and document the pipeline
Eligibility (ConstraintFit=pass) → Dominance (declared set) → Tie-breakers (declared). Any promotion of Surprise/Illumination into the dominance set MUST be named by lens/policy id and recorded in provenance. -
C19-7 (LEX-AUTH trigger). Any change to
EmitterPolicydefaults that affects domain-family quotas/samplers (HET-FIRST), or any change toDescriptorMapfamily coordinates,DistanceDef, or theδ_familythreshold MUST be authored via E.15 LEX-AUTH. Any resulting LAT lives in the relevant LAT/evidence authority; the DRR need only carry the content decision itself plus any decisive evidence or validation consequence by value when that consequence materially shaped the choice (see CC-DRR.6). Record policy/card ids in SCR. -
C19-8 When the Heterogeneity-first lens is used, provenance MUST include: (i) the family-quota vector (including the default triad quota k), (ii) the subFamilyDef id (from F1-Card) if sub-family quotas apply, (iii) the sampler class, seed, and policy id.
-
C19-9 When
C.19returns one pool-policy result, that result MUST identify the still-live pool or family scope, the governing lens or policy id, and the next treatment (widen,keep frontier,narrow to subset,sunset line, orreroute). -
C19-10 If the question under repair is still local option choice, already one enactment-facing plan, or already one selector-facing publication result,
C.19MUST reroute rather than restateC.11,C.24, orG.5. -
C19-11 If autotelic or capability-discovery evidence is used, the record MUST name the
GoalSpaceExpansionPolicyRefwhen one governs widening and theLearningProgressSignal,CompetenceModelRef, orGoalSpaceExpansionCuethat supports the pool treatment, and it MUST keep those signals outside default dominance unless an explicit promotion policy is recorded. -
C19-12 If exploration/exploitation collects data for a causal claim, changes intervention budget, learns a causal policy, evaluates a policy from behavior/logging data, or treats counterfactual replay as support,
PoolPolicyResult.causalUseSpec?MUST carrytargetCausalityLadderRung,causalUseClaimKind: CausalUseClaimKind, causal evidence support basis when known, supported use and unsupported use, and relevantC.28support refs.
Common Anti-Patterns and How to Avoid Them
- Treating one scalarized top-1 as the frontier. Avoid by naming the governing lens and keeping the live frontier distinct from any lens-ranked pick.
- Running exploration without one explicit next treatment. Avoid by ending each pass with one explicit pool-side action:
widen,keep frontier,narrow to subset,sunset line, orreroute. - Letting
SurpriseorIlluminationquietly become dominance criteria. Avoid by promoting them only through one declared lens or policy id and recording that promotion in provenance. - Absorbing neighboring questions. Avoid by rerouting fixed-option choice to
C.11, enactment-facing call planning toC.24, and selector-facing publication toG.5.
Consequences
- the result states whether the pool is being widened, kept live, narrowed, sunset, or rerouted
- heterogeneity can remain lawful without pretending every frontier is one scalar winner
- the cost is stricter provenance and the need to name lenses, policies, and change triggers explicitly
Rationale
C.19 exists because pool governance is neither local choice nor execution. Once several candidate lines remain live, the key question is no longer which single option should survive now; it is how the pool should be governed next under one explicit lens or policy. That question needs its own explicit pool-policy result, otherwise frontier drift, silent scalarization, and policy amnesia return immediately.
- Post-2015 bandit and Bayesian-optimization practice treats explore/exploit policy as an explicit policy object, not as one hidden side effect of whichever candidate looked best first. The practical implication here is to emit one explicit pool treatment plus one change trigger, not one atmospheric frontier story.
- Contemporary frontier and quality-diversity practice also distinguishes the live frontier from any scalarized pick taken under one declared lens. The practical safeguard is to keep
keep frontier,narrow to subset, andsunset lineas visible alternatives rather than silently totalizing the pool. - Modern pool-management and fairness-preserving lines keep coverage or heterogeneity pressures explicit until one declared reason justifies retirement or reroute. The practical implication is simple: sunset or reroute only when the current pool-policy result can already say why the pool no longer belongs to
C.19.
Relations
C.27 temporal-claim relation.
- C.27 may flag: a temporal claim that changes exploration, exploitation, narrowing, widening, convergence speed, or search cadence in a way that changes admissible use.
- This pattern keeps: pool-policy result and explore/exploit governance, including
keep frontier,narrow to subset, andsunset line. - Non-admissible use: faster narrowing is not automatically a positive result; it may collapse exploration health, diversity, archive coverage, or frontier discovery.
- Exit: use C.19 for the pool-policy result; use C.27 only for the temporal-claim adequacy question when speed or change affects admissible use.
Builds on: Decsn-CAL, B.3. Coordinates with: C.11 for local choice among already-available options, C.18 for candidate generation and open-ended search, C.24 for post-choice enactment planning, G.5 for selector-facing publication, C.28 for causal-use question/rung/support vocabulary when pool policy is used causally, C.17, and G.9.
C.19:End
Bitter‑Lesson Preference (BLP)
One‑screen purpose (manager‑first). Establish, at governing policy level, the empirical Bitter Lesson: prefer general, scale‑amenable methods—those that improve with more data/compute/capacity and greater freedom‑of‑action—over bespoke narrow heuristics when safety and legality are equal. Exceptions require a transparent Scale‑Audit under the parity harness.
Builds on. C.19 (E/E‑LOG), C.24 (Agent‑Tools‑CAL; ATC‑2), B.3 (Assurance), E.3 (Precedence), E.5 (Guard‑Rails). Coordinates with. G.5 (Selector), G.8 (SoS‑LOG Bundles), G.9 (Parity), G.11 (Refresh‑Telemetry), A.0 (On‑Ramp). Keywords. general‑method preference; scale‑amenability; BLP‑waiver; iso‑scale parity; Scale‑Audit; slope vector; α/δ tolerances.
Problem frame
Bespoke heuristics can win locally but do not scale; general methods (search/learning/planning) improve with scale and transfer across bridges/planes. Without a standing policy, selectors drift toward bespoke local heuristics and single-winner leaderboards, violating parity and admissible order relations.
Policy clauses (normative; synchronized with Core)
BLP‑1 — Scale‑Audit requirement. Any DRR that selects a narrower/hand‑engineered method over a general/scalable alternative while claiming scale advantage, BLP override, selector-facing method preference, publication-facing method superiority, or durable project-side method preference MUST include a Scale‑Audit: (a) Parity harness: equal FreshnessWindows, a common ComparatorSet, replicates/seeds, set-returning evaluation; Dominance = ParetoOnly unless a CAL policy says otherwise (policy‑id cited). (b) Budget sweeps: vary compute, data, and FoA within a fixed safety envelope; pin any unsweepable knob and record the invariant. (c) Slopes & uncertainty: report ∂quality/∂compute, ∂quality/∂data, and (where applicable) ∂coverage/∂FoA, with CI/error bars and edition/policy pins in telemetry. Use bootstrapped CIs or repeated‑seed estimates; disclose heteroscedasticity handling. (d) Resources: publish Resrc‑CAL accounts (time/energy/FLOPs) and assurance deltas (B.3). (e) Objective vector: list Q/Risk/Cost and—only if policy promotes them—illumination/coverage telemetry metrics. (f) DoE recipe: for ≥2 active knobs, apply a fractional factorial or Latin‑hypercube with ≥ 3 levels per knob to avoid aliasing; justify any lower design. (g) Knee & regret tests: if claiming a heuristic wins, show either (i) a knee inside the audited window for the general method (per SLL‑5 policy thresholds) or (ii) budget‑constrained regret over the sweep where the heuristic dominates within CI.
BLP‑2 — Preference rule (with α/δ tolerances). Among admissible options with comparable assurance (within δ) and budget (within α), prefer the method whose slope vector Pareto‑dominates over the audited range; if no dominance within error bounds, prefer the more general method; else resolve by the E/E‑LOG tie‑breakers declared in policy. (Agentic contexts implement this as ATC‑2; BLP_delta_α/δ live in ATC.Policy.)
BLP‑2.1 — Valid waiver grounds (override transparency). Overrides of BLP‑2 are allowed only when: • Deontic override: regulation/ethics make the general method inapplicable (E.5/E.3). • Scale‑probe overturn: under iso‑scale parity in the declared ScaleWindow, the heuristic sustainedly outperforms with uncertainty accounted for. • Complementary bias: the heuristic is an inductive bias that improves the general method without blocking scale (graceful degradation as
Sgrows). All overrides record a BLP‑waiver with rationale, responsible role, and expiry/review in the DRR.
BLP‑2.2 — Task-family specialization compatibility.
A bounded task-family specialization remains BLP-compatible when it is produced by a general, scale-amenable substrate, when it acts as a complementary bias that does not block scale, or when it survives the ordinary BLP comparison discipline on the same declared task family and work target. If the user is not claiming scale advantage or overriding a general method, a bounded task-family specialization may be used with explicit task family, work target, budget guard rails, and evidence source or evidence locus. Full Scale-Audit is triggered by scale-advantage, override, selector-facing publication, publication-facing superiority, or durable reusable-method claim, not by the mere existence of specialization. BLP therefore governs whether the narrower current method was generated, compared, audited, waived, and overridden admissibly; it does not require the final local behavior at every moment to look maximally generic.
Low-human-overlap or newly discovered approaches remain admissible when the task family, budget guard rails, and evidence source or evidence locus are explicit by value and the same Scale‑Audit, α/δ, waiver, and override discipline is preserved.
BLP‑3 — Minimal‑prescription default.
Author rules‑as‑prohibitions (negative constraints) instead of stepwise scripts; encode limits in Φ policy tables (and Φ_plane) and allow agents to sequence autonomously within those constraints. Scripts are permissible only when mandated by safety/regulation or with compelling DRR evidence reviewed under E.3/E.5.
BLP‑4 — Heuristic‑Debt register (mandatory).
Record Heuristic Debt only when an admitted heuristic functions as reusable method-family policy, selector-facing method preference, durable override of a general scale-amenable alternative, DRR-backed scale waiver, or project-side method choice that claims scale advantage or BLP override. Ordinary local bounded tactics that make no reusable-method, scale-advantage, selector-facing, or override claim may remain local and bounded without Heuristic Debt publication. BLP.HeuristicDebtEntry is a C.19.1-local or G.11-linked policy/debt entry; it is not a universal U.* record kind unless separately admitted through F.18, C.3, and E.9. For a live debt entry, record scope, responsible role, expiry/review window, and a de-hardening plan; track in CalibrationLedger/BCT and cite in SCR.
BLP‑5 — Continuous‑learning posture. Where product policy allows, enable feedback‑driven adaptation (preference learning, critique loops) within Guard‑Rails and privacy controls; disabling adaptation requires DRR justification and review date.
BLP‑6 — Precedence & safeguards. BLP is constitutional (instantiates P‑10/P‑11/P‑7/P‑1), but does not supersede Guard‑Rails (E.5) or precedence rulings (E.3). Where NQD/E/E‑LOG promotes illumination into dominance, BLP adopts that lens for the audited window.
BLP‑7 — Publication discipline. Scale‑Audit artefacts SHALL be exported to G.11 with edition pins, CI level, α/δ, ComparatorSet, and BLP.Policy@Context reference so downstream selectors can reuse evidence without re‑running audits.
Conformance Checklist (CC‑BLP)
-
α/δ tolerances declared in DRR or via policy profile (and CI level stated).
-
DRR includes a Scale‑Audit (BLP‑1a–g) with slopes, CI, edition/policy pins, and Resrc‑CAL.
-
Selection cites BLP‑2 and precedence checks.
-
Any heuristic that meets the BLP‑4 trigger is recorded as a
BLP.HeuristicDebtEntrywith scope, responsible role, expiry or review window, and de‑hardening plan; ordinary local bounded tactics do not create a debt entry. -
Authoring defaults to rules‑as‑prohibitions; deviations are DRR‑justified and safety‑anchored.
-
Resrc‑CAL accounts and assurance deltas reported.
-
Replicate counts/seeds and confidence intervals recorded for slope estimates; heteroscedasticity handling disclosed.
-
Audit artefacts exported to G.11 with BLP.Policy@Context id.
-
When a narrower specialist method is selected or returned for one declared task family, the record names the task family/work target and the Scale‑Audit, waiver, or override ground that keeps the choice BLP‑compatible.
Anti‑patterns & remedies
Single‑winner leaderboards; hidden budget mixing; promoting illumination into dominance without policy; missing edition pins; heuristics without expiry; slope estimates without CI or with aliased designs → remedy with G.9 parity + edition pins, explicit policy‑ids, DRR publication, Heuristic‑Debt entries, and BLP‑1f DoE discipline.
Elegant-math override. A specialized or elegant mathematical lens is selected over a more general or scale-amenable alternative because of elegance or prestige while scale advantage is live. Remedy: use BLP scale-audit when the claim is scale advantage; otherwise mark the lens as local and bounded by C.29 stop condition.
Archetypal grounding (post-2015; informative)
Source posture: this section is informative grounding for scale-amenable method comparison, not a current SoTA table. A concrete BLP claim still needs the local context, comparator set, alpha/delta tolerances, budget, assurance boundary, and source-currentness row named by the applying pattern or parity harness.
- LLMs: prompt-programs, retrieval-augmented and MoE policies vs narrow task-specific pipelines; set-returning selection across editions/budgets.
- RL & planning: model-based optimization/general agents vs hand-coded controllers (subject to alpha/delta and safety).
- Preference learning: RLHF <-> DPO families.
- QD/OEE: MAP-Elites/CMA-ME/DQD/QDax; POET/Enhanced-POET; illumination remains report-only telemetry unless policy promotes it.
Payload — exports
BLP.Policy@Context (UTS row; editioned):
⟨PreferenceDefault, α/δ tolerances + CI, Scale‑Audit recipe (G.9 link; DoE), WaiverRegister{reason, responsibleRoleRef, expiry}, E/E‑LOG lens policy‑ids, ATC.PolicyRef? (agentic), G.11.TelemetryPins⟩.
UTS row template (conceptual; pencil‑ready).
BLP.Policy@Context := PreferenceDefault=(prefer‑general|neutral), α/δ=(α=…, δ=…, CI=…), Scale‑Audit=(parity=G.9; sweep=S={…}; DoE=factorial|LHD; kneeTest=policy‑τ), WaiverRegister=[{reason=…, responsibleRoleRef=…, expiry=…}], E/E‑LOG=(policyIds=…), ATC.PolicyRef=(…), TelemetryPins=(edition=…, seeds=…, comparatorSet=…).
Relations
Depends on: G.5/G.9 (selector/parity), G.11 (refresh telemetry), C.5 (Resrc‑CAL), C.18 (NQD‑CAL), C.19 (E/E‑LOG), F.7/F.9 (Bridges, CL/Φ/Ψ). Constrained by: E.5 Guard‑Rails and E.3 precedence.
C.29 mathematical-lens use relation
When a mathematical lens is chosen over a general, scale-amenable method because it is elegant, specialized, or theoretically prestigious, C.19.1 governs the scale-advantage and method-preference claim. A C.29 application may state CandidateMathObject, LensMappingMode, PreservedStructure, LostStructure, LensUseAdmissibilityValue, admissibleUse, nonAdmissibleUse, and StopCondition; it does not supply BLP compatibility, scale dominance, or waiver evidence.
If scale advantage is live, cite a Scale-Audit or BLP-waiver. If scale advantage is not live, keep the mathematical lens local and bounded by its C.29 stop condition.
Memory hook. Prefer what scales; explain when you don’t.
When E.23 selects between a Ralph-like general adaptive loop, a specialized object-family cycle, or a mixed operation-family set, C.19.1 governs the BLP comparison and waiver discipline. The local E.23 cost and risk prompt token_or_compute_cost + tool_cost + adaptation_attempt_cost + human_supervision_cost + rework_cost - avoided_loss_value is not a scalar quality score; it is a practical accepted-work cost account for deciding whether the next pass, added operation, or method-family switch is BLP-compatible. Repeated automation alone does not satisfy BLP; the record must still name the object under improvement, object-under-improvement evaluation, protected trade-offs, bounded cost and risk posture, and stop or switch condition.
C.19.1:End
Composition of U.Discipline (Discipline‑CAL)
Builds on. C.2 KD‑CAL (F–G–R & CL routing), A.19/G.0 CG‑Spec (comparability), F.9 Bridges (cross‑Context alignment), E.10 LEX (registers & twin labels). Coordinates with. C.21 (Discipline‑CHR, field health), C.23 (Method‑SoS‑LOG), F.17–F.18 (UTS).
Problem Frame
Disciplines persist as knowledge canons (epistemes), codified practices & standards, and institutional carriers (journals, bodies, curricula). FPF needs a typed, provenance‑preserving way to compose these into a reusable holon of talk that travels across contexts admissibly. Composition must honour KD‑CAL lanes and the CG‑Spec Standard so that any numeric comparison or aggregation remains auditable and legal.
Problem
Without a composition calculus for disciplines:
- fields degenerate into labels; editions and rival Traditions/Lineages blur;
- cross‑Context reuse silently drops meaning (no Bridge/CL), or performs illegal aggregations (means on ordinals; unit mixing);
- selectors (Part G) cannot admissibly gate methods because maturity and evidence are not tied to a field's canon and carriers.
Forces
Solution — the Discipline holon and Γ_disc
U.Types (minting & registers)
U.Discipline— a Holon that composes an EpistemeCanon, Standards/Practices, and Organisational Carriers into a durable unit of talk (R‑core name; twin labels).U.AppliedDiscipline,U.Transdiscipline— subtypes ofU.Discipline. (Kernel U‑types; LEX‑governed).U.Tradition,U.Lineage— auxiliary holons that organise variants/editions within aU.Discipline.
Placement/LEX. U.Discipline and its subtypes are Kernel U‑types introduced under the Open‑Ended Kernel & Ontological Parsimony guards (A.5, A.11) and registered per E.10/F.17. This CAL uses them, it does not redefine them. If not yet present in A‑cluster, mark as “provisionally minted” and open a DRR to finalize placement (E.10 strata).
All are UTS‑published with twin labels; minting follows E.10 registers/prefix policy and A.11 parsimony.
What a U.Discipline is / is not
- A
U.Disciplineis not aU.BoundedContextand not a Domain. Domain remains a catalog label (stitched to D.CTX + UTS): Discipline ≠ Domain is enforceable via E.10 LexicalCheck; any cross‑Domain/Context reuse MUST cite a Bridge (F.9) + CL + loss notes; penalties to R only; F/G invariant (USM/KD‑CAL). - Comparability of a discipline flows only through the discipline’s CG‑Spec entries (no ad‑hoc formulas).
- Cross‑Context/Tradition reuse MUST use Bridge(s) with CL and loss notes; CL penalties route to R (KD‑CAL/B.3); F/G remain invariant.
- Public naming surfaces obey LEX (EntityOfConcern / Description / specification-use; twin labels; banned heads); “discipline column” is didactic only and carries no semantics (enforced by LexicalCheck).
Constructor Γ_disc (CAL export)
Signature.
Γ_disc : ⟨EpistemeCanon, StandardsSet, OrgCarriers, {Bridges}, Policy⟩ → U.Discipline
Intent. Fold the three constituents into a U.Discipline, preserving provenance, publishing UTS cards, and enabling lawful comparability via referenced CG‑Spec rows.
Obligations.
- Provenance & lanes. Each imported episteme/standard declares A.10 anchors and lane tags {TA, VA, LA}; freshness windows are recorded.
- Assurance fold. Use KD‑CAL weakest‑link on R with Φ(CL) (and, where applicable, Φ_plane for ReferencePlane crossings) table‑backed and monotone; publish policy ids. For any justification path P, compute
R_eff(P) = max(0, min_i R_i − Φ(CL_min(P))); for parallel independent lines to the same claim takeR(Γ) = max_P R_eff(P);F(Γ)=minalong used paths. No thresholds inside CHR/CAL (Acceptance‑only). Unknowns propagate as {pass|degrade|abstain} to Acceptance. - CG‑Spec guard. Any numeric comparison/aggregation in Discipline reports MUST cite the discipline’s CG‑Spec with lawful ScaleComplianceProfile (SCP), Γ‑fold, and MinimalEvidence; units/scale/polarity legality via MM‑CHR/CSLC precedes aggregation.
- Scale/Unit/Polarity legality. Before any comparison/aggregation, prove legality via MM‑CHR/CSLC and cite CG‑Spec characteristic ids used in the fold (A.17–A.19).
- ReferencePlane guard. When crossings touch
world|concept|episteme, apply CL_meta and route penalties to R only; record plane on the UTS row. - Edition discipline. Changes to canons/standards that alter computed ⟨F,G,R⟩ create a new edition; DRR captures the rationale; UTS edition-continuity records transitions.
- No stealth globalisation. Cross‑Context mappings are by Bridge only; “by‑name reuse” is forbidden** even with similar labels.
Discipline ESG (state graph, informative surface)
Export a Discipline.ESG with named states and guarded transitions (e.g., Emerging → Consolidating → Codified → Fragmenting), where guards reference C.21 metrics (CHR‑typed; Scale/Unit/Polarity + freshness windows) and cite CG‑Spec ids; all thresholds live only in AcceptanceClauses (G.4). ESG is descriptive; all gating remains in CHR/CAL/LOG packs.
Archetypal Grounding (Tell–Show–Show)
Bias‑Annotation
Lenses: Governance (naming/UTS), Architecture (CAL+CHR split), Onto/Epist (discipline ≠ domain; triangle fidelity), Pragmatic (authoring/editions), Didactic (twin labels; System/Episteme scenes). Scope: context‑local; no “global discipline”.
Conformance Checklist (normative)
Canonical rewrites (anti‑ambiguity)
- “TDD discipline” →
Tradition: Test‑Driven(Plain twin keeps “Tradition”). - “Safety Discipline Owner” →
Holder#DisciplineStewardRole:Safety‑Context. - “ClinicalSafetyDomain Governance” →
DisciplineSpec: Clinical‑Safetywith comparability in CG‑Spec; the Domain mention remains a D.CTX + UTS catalog stitch.
Consequences
Benefits. Auditable field composition; lawful federation across traditions; selector‑ready maturity/evidence linkage; didactic surface for stewardship. Trade‑offs. Discipline authoring requires CG‑Spec literacy and Bridge hygiene; paid back by safe reuse and clearer governance.
Rationale
The calculus keeps entityOfConcern local, comparability lawful, and assurance explicit. It aligns with KD‑CAL’s weak‑link folds and CL routing, with CG‑Spec’s ScaleComplianceProfile (SCP) and Γ‑fold rules, and with LEX twin‑label governance. It avoids “phlogiston disciplines” by tying fields to measurable CHRs (C.21) and evidence lanes.
Relations
Builds on. KD‑CAL (C.2); CG‑Spec (A.19/G.0); Bridges (F.9); LEX (E.10).
Coordinates with. C.21 (field‑health CHRs), C.22 (Problem‑CHR), C.23 (Method‑SoS‑LOG).
Constrains. G.2 MUST publish TraditionCards/BridgeMatrix sufficient for Γ_disc to assemble ≥2 Traditions and ≥3 U.BoundedContext per SoTA synthesis to avoid monoculture. G.5 selector SHALL cite Discipline CG‑Spec ids and EvidenceGraph rows when admitting families.
C.20:End
Field Health & Structure (Discipline-CHR)
Purpose. Give FPF a typed, reviewable way to characterize the health, maturity, and structure of a scientific or engineering discipline, without collapsing into taste, anecdotes, dashboard views, audit labels, or single-number scores. The pattern defines a portable set of Characteristics and guards (legality, freshness, scope) that any Context can specialize.
This pattern supplies the CHR vocabulary of health for disciplines. C.20 composes the discipline; C.21 declares discipline-health characteristics and admissible readings; Part G may publish SoTA palettes or time-series views; Bridges keep cross-context meaning honest; penalties touch R only.
Status & placement. Part C (Kernel Extention Specifications) → Cluster C.I (Core CHRs/CALs).
Depends on: MM-CHR (C.16), KD-CAL (C.2), USM/Scope (A.2.6), Trust & Assurance (B.3), E.10 (LEX‑BUNDLE).
Coordinates with: C.20 Discipline‑CAL (what a U.Discipline is), G.2 (SoTA palette), G.12 (dashboard), G.0 (CG‑Spec registry).
Problem Frame
FPF treats disciplines as first-class holons (see C.20): they aggregate epistemes, practices, standards, institutions, and observed Work. Teams routinely say “the field is fragmented,” “standards are converging,” or “replication is improving,” but these claims are rarely typed (scale/unit/polarity) or replayable (evidence lanes, freshness, scope). C.21 supplies the CHR vocabulary: named Characteristics with CSLC typing, so discipline-health claims can be compared admissibly (CG-Spec) and monitored through time (G.12) when a project needs that use. Each published value declares ReferencePlane ∈ {world|concept|episteme} and DisciplineId (U.Discipline@UTS); cross-plane use applies CL^plane in Assurance (penalty to R_eff only).
Problem
Narrative health claims cause three recurrent failure modes:
- Illegality. Averaging ordinals, mixing units, or comparing incommensurate Contexts ⇒ nonsense roll-ups.
- Staleness. Health “scores” rarely declare freshness windows or evidence lanes (TA/VA/LA).
- Scope slippage. “The field” is left implicit; cross-Context reuse lacks Bridges & CL, leading to silent semantic loss. Any numeric comparison or aggregation cites a CG-Spec row (characteristics, ScaleComplianceProfile (SCP), Γ-fold, MinimalEvidence) before computation.
Forces
Solution — Discipline Health Characterisation (DHC)
Ontology quick sheet (normative, clarifying)
What “DHC” is. DHC is a CHR vocabulary pack that defines Characteristics + Scales/Units/Polarity for discipline health; it is not a document or a run.
Artifacts.
• U.DHCPack (I-lane name; published as an episteme): the slot set (Characteristic/Scale declarations) for a Context.
• U.DHCMethodSpec (S-lane): the computational specification(s) for deriving each DHC slot (e.g., replication‑window definition, CD‑index class), table‑backed; multiple per slot allowed, editioned separately.
• U.DHCSeries (episteme w/ EditionSeries): a time‑indexed publication of computed DHC readings for a Discipline×Context, each value bound to …Ref.edition for every referenced method/metric/distance.
Edition subjects.
(i) DHCPack.edition — when the slot semantics (Characteristic/Scale) change.
(ii) DHCMethodSpecRef.edition — when a computation method (formula/class/policy) changes.
(iii) DHCSeries.edition — when the published series changes its content (not carriers).
Publication. Releases are Work on Carriers; no edition change unless content changes per U.EditionSeries.
Ref discipline. All bindings to packs/methods/distances use ...Ref.edition (dot on the Ref).
Define a portable minimal set of CHR slots. Each slot is CHR-typed (Characteristic, Scale/Unit/Polarity per A.17–A.18), Context-local, and guarded by USM (Claim scope G), freshness windows, and evidence lanes (TA/VA/LA). Contexts may extend the set; conforming extensions do not alter scale types illegally.
“Health” is a vector of CHR‑typed coordinates; no single scalar is implied. Lawful scalarization lives in Acceptance (G.4) under an explicit CG‑Spec ScaleComplianceProfile (SCP) and Γ‑fold rules, and is never embedded in CHR.
Core Characteristics (kernel-portable names)
-
ReproducibilityRate (ratio ∈ [0,1]; polarity ↑; ReferencePlane=episteme; CG‑Spec‑bound) Fraction of tested claims/benchmarks that independent teams replicate under a declared ContextSlice and Γ_time window. Lane tags: LA (validation) with TA (typing) for protocols.
-
StandardisationLevel (ordinal; polarity ↑; ReferencePlane=episteme) {none, emerging, de facto, de jure}. No mean. Use medoid/mode; legal comparisons are ≤/=/> only. Tracks convergence on vocabularies, interfaces, or procedures.
-
AlignmentDensity (ratio; polarity ↑; ReferencePlane=episteme; CG‑Spec‑bound) Density of Substitution Bridges (same senseFamily, CL≥2) between major
U.Traditions per 100 DHC‑SenseCells (G.2 F‑hooks) in the SoTA palette. Substitution rule: free substitution permitted at CL=3; at CL=2 substitute only with extra‑guard (count in reporting, but this is not «free substitution») Units:bridges_per_100_cells. Cross‑Context use requires Bridge+CL; penalties → R_eff only. -
DisruptionBalance (interval; polarity = target band; ReferencePlane=episteme; CG‑Spec‑bound) Relative share of disruptive vs consolidating works within Γ_time using a registered CD‑index class (editioned; cite method id in UTS). Default plane: episteme. Publish the target band via Acceptance (G.4); not in CHR.
-
EvidenceGranularity (Context-declared: ordinal|ratio; polarity ↑; ReferencePlane=episteme) If ratio: units =
claims_per_artifactoranchors_per_claim(declare). If ordinal: publish level names and ORD_COMPARE_ONLY. Fineness of evidential units and declared envelopes (experiment cards, benchmark tasks, audit granules). Encourages smaller, well-scoped claims over monoliths. -
MetaDiversity (portfolio dispersion; polarity ↑ to band; ReferencePlane=episteme; CG‑Spec‑bound) Use entropy/HHI over MethodFamily/Tradition shares (method edition id in UTS); publish guard‑band as Acceptance binding; cross‑ordinal scalarisation is forbidden. Entropy/Herfindahl-type dispersion across
U.Traditions, method families, or data regimes, bounded by a Context-declared guard-band (too low ⇒ monoculture; too high ⇒ incoherence).
Typing & legality. Each slot declares Scale/Unit/Polarity; illegal ops (e.g., mean on ordinals; unit mixing) are fail-fast per A.18/MM-CHR.
Engineering-grade and semio-substitution extension slots
Contexts MAY add these DHC slots when the discipline-health question includes engineering-grade reasoning, architecturing, optimization, prediction, comparison, assurance input, decision input, first-principles justification, mathematical-lens use, or source-publication overread. These slots remain discipline-health characteristics. They do not become evidence relations, assurance relations, gate decisions, mathematical-lens use, measurement legality, release permission, or project authority.
-
EngineeringClaimJustificationRecoverability (ordinal; polarity ↑; ReferencePlane=episteme|world by declared claim; CG-Spec-bound when aggregated) Degree to which engineering-grade claims in the discipline or Context expose the exact justification that carries their force for the declared use. The justification may be a named construction, source, model, lens, evidence relation, characteristic relation, assurance relation, gate relation, method relation, or heuristic triage boundary, but it must cite the neighboring pattern governing the claiming FPF pattern when that force is live (
A.10,B.3,A.15,A.20,A.21,C.16,C.29, or another governing pattern). Heuristic examples may carry recognition and triage only; prediction, comparison, optimization, falsification, assurance-input, decision-input, or architecture-readiness force requires the recoverable justification. -
SemioSubstitutionPressure (ordinal or ratio; polarity ↓ to band; ReferencePlane=episteme; CG-Spec-bound when aggregated) Degree to which discipline texts, patterns, dashboards, views, publications, source chains, or review artifacts substitute wording, publication form, record appearance, source appearance, or explanation fluency for the operative engineering entity, relation, work, evidence, assurance, gate, decision, method, or mathematical-lens claim. Lower pressure is healthier when the discipline keeps EntityOfConcern, episteme, publication, source, carrier, and project-side claim kind or admissible-use boundary separable and names the pattern governing the recovered claim for any claim being made or admissible-use boundary.
Extension guard. Activating either extension slot requires a local EngineeringClaimJustification note or semio-substitution note that names the claim kind being made or admissible-use boundary, neighboring pattern governing the claiming FPF pattern, admissible use, non-admissible overread, and stop or reopen condition. The note is a DHC value explanation, not a new evidence source, assurance case, gate, release record, or work authority.
Guard Macros (normative)
- ORD_COMPARE_ONLY(x) — for StandardisationLevel (ordinal).
- UNIT_CHECK(x) — forbid cross-unit aggregation (AlignmentDensity, ReproducibilityRate).
- POLARITY_CHECK(x) — enforce declared polarity (↑/↓/target-band) per MM‑CHR.
- FRESHNESS(x; window) — ensure values come from evidence within declared Γ_time; record valid_until; stale ⇒ {degrade|abstain} at Acceptance.
- PLANE_NOTE(x) — record ReferencePlane; compute CL^plane on crossings; penalties → R_eff only.
- LANE_TAGS(x; {TA|VA|LA}) — annotate contribution lanes.
- SCOPE_COVERS(x; TargetSlice) — enforce USM coverage of the computation.
- BRIDGE_CL(x; id, CL≥k) — on cross‑Context roll‑ups, require Bridge with CL; penalties route to R only. If planes differ, apply CL^plane and cite Φ_plane policy id. Hint: for AlignmentDensity reporting, set k=2 (CL≥2); CL=3 counts as free substitution.
Legality Matrix (extract)
Note: For MetaDiversity/EvidenceGranularity (ordinal) use median/mode; forbid affine ops; unit mix always fails.
Interfaces & Data Paths
- Inputs.
U.Disciplinefrom C.20 (composition), SoTA Palette/BridgeMatrix from G.2 (DHC‑SenseCells included), EvidenceProfiles from G.4/G.6. - Outputs. Per‑Context DHC rows (these six slots), UTS Name Cards with twin labels (E.5/F.17–F.18), Registry/RSCR hooks on method edition changes; feeds G.12 (time‑series).
- Cross-Context reuse. Only via F.9 Bridges with CL and loss notes; Φ(CL) penalties applied to R (never F/G).
Archetypal Grounding (three fields)
Computer Vision (Benchmarks 2015→)
- ReproducibilityRate. Ratio of independently reproduced results on ImageNet-style tasks within rolling 24 mo (LA lane).
- StandardisationLevel. de facto for dataset specs and metrics in Vision_2024; emerging for robustness protocols.
- DisruptionBalance. Use an editioned CD‑index class (e.g., Wu‑style disruption family) with method id; publish target band via Acceptance; annotate ReferencePlane=episteme.
- AlignmentDensity. Bridges with CL≥2 across sub-traditions (supervised vs self-supervised).
- MetaDiversity. Entropy across method families (CNN/ViT/Hybrid) kept within guard-band to avoid monoculture.
Biomedicine (Gene–Disease Associations)
- ReproducibilityRate. Fraction of associations replicated in independent cohorts within Γ_time(36 mo); LA lane with TA (typing of protocols).
- StandardisationLevel. de jure for certain reporting guidelines; emerging for pre-registration norms.
- EvidenceGranularity. Move from “paper-level” to claim-level units (Context raises the score).
- DisruptionBalance. Target band discourages sustained “novelty spikes” unbacked by replication.
Software Performance Engineering (SPE)
- StandardisationLevel. emerging → de facto for SLO taxonomies and trace schemas across vendors.
- AlignmentDensity. CL-rated Bridges between tracing ecosystems.
- ReproducibilityRate. Share of publicly replicable perf claims in rolling windows.
- MetaDiversity. Balance across load models, failure modes, and toolchains.
Decision‑Making (2015→)
• ReproducibilityRate — share of causal effect estimates replicated across independent datasets within Γ_time; LA lane. • StandardisationLevel — emerging for identification checklists; de facto for SCM notation in leading stacks (ordinal; no means). • AlignmentDensity — CL‑rated Bridges between SCM/DoWhy‑style and RL/BO traditions per 100 DHC‑SenseCells. • MetaDiversity — dispersion across method families (SCM/RL/BO/DT) within guard‑band; entropy/HHI (units declared in CG‑Spec).
Evolutionary Architecture (software)
• ReproducibilityRate — fraction of architecture fitness results reproduced on independent workloads (rolling 18–24 mo; LA lane). • StandardisationLevel — de facto for ADR/ATAM patterns; emerging for continuous fitness protocols. • AlignmentDensity — Bridges across ATAM/SAAM/ADR style guides (CL≥2) normalised per 100 DHC‑SenseCells. • MetaDiversity — portfolio dispersion across patterns (microservices, event‑driven, layered) with guard‑bands; no ordinal arithmetic.
Characteristic reading and publication path
- Declare Context & TargetSlice. (USM) Name editions, Standards, env params,
Γ_time. - Collect evidence. Bind sources via G.6 EvidenceGraph; tag lanes and freshness.
- Compute DHC slots. Enforce Legality Matrix and Guard Macros.
- Bridge (if needed). Map via F.9; attach CL and loss notes; apply R penalties.
- Publish to UTS. Name Cards (Tech/Plain), twin labels; bind
DHCMethodSpecRef.edition,DistanceDefRef.edition, and, where templates are used,DHCMethodRef.edition; register RSCR triggers (method change, ScoringMethod/NormalizationMethod edits). - Publication view. Feed G.12 with time-series and guard-bands (disruption, diversity) when a dashboard or trend publication is live.
Bias-Annotation (E-cluster lenses)
- Didactic. Plain names + twin labels; one-screen tables for managers.
- Architectural. No ordinals averaged; all cross-Context movement goes through Bridges+CL; penalties never touch F/G.
- Pragmatic. Freshness-aware; unknowns tri-state; values are decision-input cues, not trophies.
- Epistemic. Evidence lanes explicit; reproducibility is LA, typing is TA; validation distinct from dashboard or report publication.
Conformance Checklist
This checklist verifies a DHC reading after the practitioner has selected the live discipline-health question. It is not an audit form and not a dashboard specification.
Consequences
Benefits. Scale-legal comparisons; freshness-aware governance; explicit cross-tradition alignment; dashboard views that do not lie by averaging ranks. Costs. Some ceremony (scales, windows, lanes, bridges), offset by template macros and UTS automation. Risks avoided. “Phlogiston disciplines” (charisma-driven fields) surface as unhealthy in DHC readings; No-Free-Lunch preserved by G.5 (selector returns sets, not universal scalars).
SoTA-Echoing and rationale
The practical consequence is that C.21 reads discipline health through typed characteristics. It can feed dashboards or time-series publications, but the dashboard is only a publication view over DHC readings; it is not the discipline-health ontology and not project authority.
Relations
- Builds on: A.17–A.18 (Characteristic/CSLC), A.2.6 (USM scopes), B.3 (assurance lanes), C.16 (MM-CHR templates).
- Coordinates with: C.20 (what a
U.Disciplineis), G.2 (SoTA palette and BridgeMatrix), G.12 (Dashboard operationalization), G.9 (parity harness for fair comparisons). - Constrains: G.10 (pack ships DHC rows + method ids), G.11 (refresh windows/decay), G.5 (selector may reference DHC only via admissible predicates; no cross‑ordinal scalarisation). Coordinates: F.9 (Bridges for cross‑Tradition comparisons).
Annex — Author’s quick template (copy-paste)
C.21:End
Problem Typing & TaskSignature Assignment (Problem-CHR)
Purpose. Give FPF an admissible, minimal, and portable way to type a problem for downstream selector-facing use after the problem-side representation is stable enough for Principles-to-Work, eligibility, acceptance, or policy-governed choice. C.22.2-selector-facing use carries the first problem-framing record for a messy signal; C.22-selector-facing use attaches the stabilized problem to CHR-grounded traits and a minimal TaskSignature (S2) record for downstream selector-facing use. The TaskSignature attachment is Context-local, evidence-relation-traceable, tri-state-aware, and bridge-visible. TaskSignature is minimal but sufficient for eligibility, acceptance, and policy-governed choice.
Status & placement. Part C (Kernel Extensions Specifications) → Cluster C.I (Core CHRs/CALs). Depends on: C.16 MM‑CHR (measurement admissibility), G.5 (selector S2/S3), G.0 (CG‑Spec invariants). Coordinates with: G.4 (Acceptance and Evidence profiles), C.23 (MethodFamily admissibility and maturity), C.18 NQD‑CAL (QD and illumination), C.19 E/E‑LOG (emitters and policies), E.10 (LEX).
Intent
Operationalise No-Free-Lunch discipline in selection by making every run-time decision against a typed TaskSignature (S2), not a paragraph. A problem reaches C.22 when its problem-side representation is stable enough for a selector-facing typed attachment record; a task or work target is ready for selection only when that attachment can be made to a declared TaskKind, task family, or work target without pre-binding a method. Method absence, method contestability, or method-family ambiguity is a common practical cue for this transition, but it is not the ontology of problemhood. The signature is the smallest CHR-typed set sufficient to drive Eligibility -> Acceptance -> policy-governed selection without inadmissible arithmetic or silent coercions; crossings are reviewable (Bridge+CL -> R_eff only).
Term split used in this pattern
TaskSignatureattachment means attaching one typed problem record to one declared task family or work target; it does not pre-bind a method.ScopeSlice(G)means the claim-bounding scope cut overEntityOfConcernRefand scope; it is not an evidence-path slice and not a baseline-set slice.thresholdis not one undifferentiated family here:- articulation and closure thresholds stay with cue or prompt governing patterns such as
B.4.1andB.5.2.0 - acceptance-gate thresholds stay with
G.4 - the work-measure threshold target used in specialization claims is only the declared success mark for the current task family or work target
- articulation and closure thresholds stay with cue or prompt governing patterns such as
ProblemCard@Context relation
ProblemCard@Context is the C.22.2-problem-side record-side record shape for stabilizing one context-bound problem representation before downstream Principles-to-Work (P2W).
A ProblemCard@Context record can be used to prepare ProblemProfile, TaskKind, or candidate TaskSignature material for later use. Binding to one TaskSignature is admissible only when the downstream selector-facing object is ready. If several downstream signatures remain plausible, keep them as candidate signatures rather than binding one chosen TaskSignature.
This relation does not move problem-card fields into TaskSignature. TaskSignature remains the minimal C.22 attachment record for eligibility, acceptance, and selection. ProblemCard@Context remains the reviewable problem-side record that carries the reason this problem, in this context, can proceed to P2W, characterization, comparison, search, refresh, retirement, or another governing pattern.
The corresponding claims are governed by their named governing patterns.
Problem Frame (DesignRunTag split; crossing-visible)
Selector-facing problem case
For selector-facing C.22 use, a problem case applies when the problem-side representation is stable enough to attach or emit a minimal TaskSignature for eligibility, acceptance, and policy-governed selection. Method absence, method contestability, or method-family ambiguity is a common downstream reason for C.22 use, but it is not the only reason a ProblemCard@Context may be needed upstream. C.22 therefore does not define problemhood by method absence; it defines the downstream typed attachment record used once problem-side readiness is truthful. When the question under repair is still a symptom, contested framing, stale context, set-derived candidate, opportunity cue, or preselected work item, use C.22.2 before binding one chosen TaskSignature. When selection or synthesis of a method becomes live, strategy or policy is governed by G.5 and E/E-LOG; C.22 use does not introduce a strategy or policy kernel type.
Unknown‑first discipline. Author S2 with unknown traits rather than coercions; SoS‑LOG branches MUST specify {admit|degrade|abstain|sandbox} handling for unknown via closed enums registered at UTS.
Un‑typed "problems" collapse into informal prose; selectors cannot filter or abstain admissibly; acceptance-gate thresholds leak into scoring; cross‑Context reuse is by name, not Bridge. We need a Context‑local descriptor that (i) obeys MM‑CHR admissibility (Scale/Unit/Polarity proven before any aggregation), (ii) records Assurance lanes (TA/VA/LA) per A.10 and ReferencePlane, (iii) carries tri‑state unknowns explicitly, and (iv) records crossing attestations (BridgeCard + UTS row) with Φ(CL)/Φ_plane policy‑ids.
Problem
Without typed descriptors, Eligibility and Acceptance degenerate into prose; inadmissible operations creep in (ordinal means; unit mixing); cross‑plane comparisons lose CL/Φ penalty assignment (penalties to R_eff only).
Forces
Solution — Problem‑CHR (fields) + TaskSignature (S2) attachment (normative)
Minimal CHR fields (tri‑state aware).
Selector-side field boundary. The fields below are live only after problem framing has been stabilized enough to ask eligibility, acceptance, selection, method-family, or policy-governed choice questions. They are not a universal problem-framing checklist and must not replace the C.22.2 Thin ProblemCard@Context pass for a messy signal. Each live field is CHR-typed (Characteristic, Scale, Unit, Polarity; MM-CHR discipline). Every predicate admits unknown (tri-state). Unknown-handling policy propagates {degrade|abstain|sandbox} per Acceptance profile or EvidenceProfile policy (recorded in SCR). (G.4/G.6 alignment)
Optional extension absence rule. If QD, OEE, archive, generator, parity, specialization, or another optional relation is not live for the current case, the corresponding optional fields are absent, not unknown. Use unknown only for a live field whose value is currently unknown. An absent non-live extension does not trigger {degrade|abstain|sandbox} propagation.
DataShape— data regime and admissible transforms (e.g., tabular, sequence, graph; density; stationarity claims).NoiseModel— uncertainty class and robustness envelope (e.g., iid Gaussian; heavy‑tailed; adversarial budget).ObjectiveProfile— objective heads (Scale, Unit, Polarity and ReferencePlane declared), polarity, and admissible order relations (lexicographic, Pareto, medoid or median where admissible). Weighted sums across mixed scale types are forbidden; ordinal heads use order-only guards. For QD tasks, explicitly enumerate quality heads, diversity or descriptor-space heads, and any policy-authorized QD contribution heads; see DominanceRegime below. Do not introduce a default QD score. If a scalar or set-scalarization policy is live, cite the governing CAL policy and keep dominance and telemetry roles explicit.RegularityTraits— method‑relevant structure (convexity, differentiability, separability, monotonicity) as CHR‑typed predicates with guard‑macros (e.g.,ORD_COMPARE_ONLY,UNIT_CHECK,POLARITY_CHECK). IncludeConditionClass(e.g., stiffness/κ‑proxies) where applicable.Constraints— explicit hard and soft constraint classes (feasibility predicates; ResourceEnvelope and RiskEnvelope). Acceptance-gate thresholds live inG.4only; never inside CHR or code paths.ShiftClassand stationarity — CHR‑typed claims about regime stability (iid | covariate‑shift | concept‑drift | adversarial). Default=unknown. Acceptance or flow use is governed by this field in gating; otherwise abstain.EvidenceGraphRef (A.10)— carriers & lane tags (TA/VA/LA) with freshness windows; no self‑evidence; default Γ‑fold = weakest‑link unless CAL proves an alternative.ScopeSlice(G)— the USM claim-bounding scope cut over EntityOfConcernRef and scope (discipline governance in CG‑Spec; Domain is a catalog mark only).Size/Scale— size and condition proxies (n, m, κ, sparsity) with declared units; unit mismatch ⇒ {sandbox|refuse}.Freshness— validity window for descriptors.Missingness— MCAR, MAR, or MNAR (or mapped equivalents) per CHR.Missingness; MUST be honoured by Acceptance and Flows.KindSet—U.Kind[]for the selected entities addressed by the TaskKind; separates EntityOfConcern kind from Scope (USM).
QD and Illumination extensions (normative; ties to C.18 and C.19).
Use this extension block only when QD, illumination archive, set-return, or OEE generator relation is live for the current case. It is not part of every TaskSignature.
CharacteristicSpaceRef— reference toU.CharacteristicSpace, with declared d≥2; characteristics are CHR‑typed; ReferencePlane per characteristic; pin edition viaCharacteristicSpaceRef.edition.ArchiveConfig— archive topology (grid, CVT, or graph), resolution (bins or centroids), K‑capacity,InsertionPolicyRef(elite replacement, dedup, or novelty), andDistanceDefRef.edition(declare metric or pseudometric status and invariances; any normalisation MUST cite admissible scale transforms in CG‑Spec); admissibility follows CG‑Spec.EmitterPolicyRef— pointer to emitter/governor policy (C.19) applicable to this TaskSignature; edition id recorded.DominanceRegime—{ParetoOnly | ParetoPlusIllumination}. Default =ParetoOnly(illumination remains report‑only telemetry unless CAL explicitly authorisesParetoPlusIllumination, policy‑id cited).IlluminationSummary— a telemetry summary overDiversity_P; reported by default; excluded from dominance unless a CAL enablesParetoPlusIllumination(policy‑id cited).IlluminationMap(parity‑run) — required IlluminationMap publication (grid, CVT, or graph perArchiveConfig) recording coverage per niche or cell withDescriptorMapRefandDistanceDefRef.edition. Leaderboards as single‑score lists are forbidden; comparisons MUST be under CG‑frames.PortfolioMode—{Pareto | Archive}. Default =Archive: selectors preserve retained archive evidence (QD archives) rather than a single “best” set; ε‑fronts remain admissible for local decisions under CG‑Spec.Budgeting— evaluation, time, and batch budgets, including E/E‑LOG exploration budget id; units declared (CG‑Spec).TelemetryHooks— PathSliceId, decay and refresh policy ids, and edition counters to record U.DescriptorMap and policy‑id updates upon illumination gains.GeneratorIntent(OEE) — optional intent to use a registeredGeneratorFamily(G.5), with pointers toEnvironmentValidityRegion,TransferRulesRef, and coverage and regret reporting expectations.
Admissibility. Before any numeric comparison or aggregation, prove CSLC admissibility (Scale, Unit, Polarity) and cite CG‑Spec.Characteristics; record ReferencePlane. Unknowns propagate as {degrade|abstain|sandbox}; no unknown→0/false coercions.
TaskSignature (S2) — attachment definition (design‑time + run‑time).
A TaskSignature is the minimal typed record consumed by selector-facing use:
⟨Context, TaskKind, TaskFamilyRef?, KindSet:U.Kind[], DataShape, NoiseModel, ObjectiveProfile, Constraints{incl. Resource/Risk Envelopes}, ScopeSlice(G), EvidenceGraphRef, Size/Scale, Freshness, Missingness, ShiftClass?, BehaviorSpaceRef?, ArchiveConfig?, EmitterPolicyRef?, DominanceRegime?, PortfolioMode?, Budgeting?, TelemetryHooks?, GeneratorIntent?⟩
Minimality rule. S2 carries only fields required for Eligibility→Acceptance→admissible selection; any additional traits derived at design‑time are recorded as provenance (UTS) but do not expand S2.
Values are CHR‑typed with provenance; traits may be inferred from CHR and CAL bindings (e.g., convexity known? differentiable? ordinal vs interval scales?) and from USM scope metadata. Unknowns are tri‑state; Missingness semantics MUST align with CHR.Missingness and be honored by Acceptance and Flows.
TaskKind names the governing kind of work or problem under this context. TaskFamilyRef? names one comparison-relevant family inside that task kind when specialization, transfer, or parity question is live. TaskSignature is the context-bound typed attachment record for one current case under that kind and scope cut. KindSet continues to name the selected entities addressed by the task kind; it is not a substitute for the task-family reference.
DesignRunTag hygiene. Do not mix DesignRunTag in one signature; record GateCrossings as CrossingBundles (E.18; Bridge+UTS through F.9, F.17, E.17, and E.18) when importing design‑time traits into run‑time.
Specialization-claim reference discipline (normative)
Any claim that one holder, dyad, team, or explicitly scoped specialist portfolio acquired usable specialization SHALL state one declared TaskFamilyRef or TaskSignature, one named work-measure threshold target, an adaptation budget, and the freshness or provenance basis for reuse. A method may be selected, refined, or retired as part of that story, but the method is not the bearer of the specialization claim. The attached task-family record should stay rich enough for the same task family and work target to remain admissible in C.22.1 adaptation signatures, G.5 specialization profiles, and G.9 adaptation parity without reconstructing the claim from narrative prose.
Low-human-overlap or newly discovered task families remain admissible when those task-family or signature references are explicit by value.
Provenance & planes.
Record Context and ReferencePlane for each value; on any cross-Context or cross-plane reuse, attach BridgeDescription + UTS row, apply CL (and, if planes differ, CL^plane) penalties to R_eff only; both Φ(CL) and (if used) Φ_plane MUST be monotone, bounded, and table‑backed; no “distance” language; penalties never mutate F/G. Record policy‑ids in SCR and cite Bridge ids on crossings.
Attachment & use.
- Eligibility gates read TaskSignature against each MethodFamily.Eligibility (C.23) and CG‑Spec.MinimalEvidence for referenced characteristics.
- Acceptance clauses (G.4) use these fields for acceptance-gate threshold predicates (acceptance-gate thresholds live in Acceptance only).
- Selection kernel (G.5.S3) applies an admissible order (often partial); weighted sums across mixed scale types are forbidden. If only a partial order remains, return a Pareto (non‑dominated) set with tie notes. If
PortfolioMode=Archive, the selector may return a QD archive (perArchiveConfig) in addition to or instead of a Pareto set. Illumination enters dominance only ifDominanceRegime=ParetoPlusIlluminationis enabled by CAL (policy id cited); otherwise, QD telemetry values are reported but excluded from dominance. - When
GeneratorIntentis present, G.5-governed selection may use a registeredGeneratorFamily(POET‑class); the selection domain becomes pairs{environment, method}, with Environment guarded byEnvironmentValidityRegionandTransferRulesRef(C.23 wiring). ReportIlluminationSummaryas a telemetry summary overDiversity_P(report‑only by default) in telemetry; dominance remains unaffected unless policy changes as above.
Unknowns.
Every field admits unknown; downstream degrade, abstain, or sandbox behavior is explicit per Acceptance profile or EvidenceProfile; no implicit coercions.
Publication.
Output a ProblemProfile (...Description) that carries the bound TaskSignature, UTS Name Cards for any minted values (twin labels), and SCR-visible provenance (A.10 evidence relations, lane tags, freshness, ReferencePlane). Mark any vendor or tool examples as Plain‑register only (LEX V‑4); they are non‑normative.
Open‑Ended tasks (GeneratorFamily) (normative).
If the problem requires open‑ended generation of tasks or environments, S2 SHALL include GeneratorIntent with pointers to EnvironmentValidityRegion (admissible region for generated environments), TransferRulesRef (cross‑environment transfer constraints), and coverage and regret telemetry expectations. Selector outputs are then declared sets over {environment, method}; coverage and regret are reported telemetry values and IlluminationSummary is a telemetry summary (reported), excluded from dominance unless a CAL policy promotes them (policy‑id recorded in SCR; see DominanceRegime). Edition increments of CharacteristicSpaceRef.edition, DescriptorMapRef.edition, DistanceDefRef.edition, and (OEE) TransferRulesRef.edition, and the policy‑id associated with illumination increases SHALL be recorded in SCR.
Archetypal Grounding (Tell–Show–Show)
Tell–Show–Show hook (per E.8): label examples as Show‑1 (continuous ODE) and Show‑2 (MIP) and cite CHR guard‑macros in‑line so engineers can see which field supplied which Eligibility or Acceptance input. Explicitly annotate which S2 fields triggered each Eligibility and Acceptance decision (e.g., service_level@ordinal → ORD_COMPARE_ONLY, budget@ratio → unit alignment check).
A. Differential equations (continuous systems, solver choice).
ProblemProfile. DataShape=ODE, stiff?=unknown, Size/Scale={n≈10^3}, ObjectiveProfile={↓error@ratio, ↑throughput@ratio}, Constraints={budget≤X, safety_gate@ordinal}, RegularityTraits={Lipschitz known?=unknown, Jacobian sparsity=high}, Missingness=MAR.
Attachment. Selector consumes TaskSignature; eligibility filters MethodFamilies that require known stiffness or differentiability (unknown ⇒ degrade/abstain per family); Acceptance enforces safety_gate as ordinal predicate, not averaged (ORD_COMPARE_ONLY), and budgets with unit‑aligned sums (ratio). The selector returns a Pareto set; no cross‑ordinal weighting.
B. Mixed‑integer optimisation (planning and scheduling).
ProblemProfile. DataShape=MIP, NoiseModel=deterministic, ObjectiveProfile={↓cost@ratio, ↑service_level@ordinal}, Constraints={SLA hard, workforce soft}, RegularityTraits={convex_relaxation=available}, Size/Scale={vars~10^5}, Missingness=MCAR.
Attachment. CG‑Spec forbids means over service_level (ordinal); Acceptance holds acceptance-gate thresholds; Eligibility checks convex‑relaxation availability; Selection applies lexicographic guard (assumption‑fit ≻ evidence‑fit ≻ resource), compute R_eff with Γ‑fold, apply CL penalty to R only; if partial order remains, return a Pareto set.
Contemporary source references (informative): modern Julia ecosystems illustrate a registered outer interface with specialised implementations inside (e.g., DifferentialEquations.jl, JuMP), aligning with C.22→G.5 multi‑method selection under NFL.
C. Quality-Diversity archive and declared set (illumination).
ProblemProfile. DataShape=policy‑search; ObjectiveProfile={↑reward@ratio, ↑coverage@ratio (report‑only)}, DominanceRegime=ParetoOnly, PortfolioMode=Archive, CharacteristicSpaceRef(d=3, characteristics=CHR‑typed), ArchiveConfig(grid, res=32×32×16, K=1, InsertionPolicyRef=elite‑replace, DistanceDefRef.edition=v1), EmitterPolicyRef=v2, Budgeting{eval=1e6}, TelemetryHooks{PathSliceId=…}.
Binding. Selector may return an archive; coverage and illumination are reported but excluded from dominance (default). Any change of DistanceDefRef.edition or Emitter policy is editioned and logged in SCR.
D. Open‑ended environment generation (POET‑class).
ProblemProfile. GeneratorIntent{GeneratorFamilyRef=…, EnvironmentValidityRegion=… (CHR‑typed), TransferRulesRef=…, CoverageMetric=…}, PortfolioMode=Archive.
Binding. Selector outputs {environment, method} pairs that pass Eligibility; TransferRules govern cross‑environment policy reuse; telemetry reports coverage and regret and IlluminationSummary with edition and policy‑id when improved.
Bias‑Annotation (LEX/discipline guards)
- No minted
U.Type“Strategy”. Strategy and policy remain roles insideG.5; keep “strategy” as Plain-register wording where it helps recognition, but do not introduce a newU.Typeor strategy head. - Transdiscipline vs domain. Comparability flows through
U.DisciplineCG‑Spec; “Domain” is a catalog mark stitched to D.CTX + UTS; do not attach norms to Domain labels. - Plain twins and head selection. Use Description and Spec morphology correctly (I, D, S; E.10.D2).
Anti‑patterns (normative):
- AP‑1 Pre‑binding a Method into S2 (“problem as if task”); Remedy: keep S2 method‑agnostic; bind only admissible traits.
- AP‑2 Silent
unknown→falseorunknown→0in Eligibility and Acceptance. - AP‑3 Cross‑ordinal averaging or ordinal–interval scalar mixes.
- AP‑4 DesignRunTag chimera signatures (mixing stances).
- AP‑5 Domain treated as governance (attach governance to U.Discipline and CG‑Spec, not Domain).
- AP‑6 Implicit handling of data‑shift (assume iid); Remedy: declare
ShiftClass(orunknown) and gate via Acceptance. - AP‑7 Tool or vendor tokens in normative text; Remedy: move to Plain‑register note; keep Tech references on CHR and CAL ids (LEX V‑4).
Remedies: tri‑state predicates; admissible order relations (lexi, Pareto, median, or medoid); explicit GateCrossing visibility through CrossingBundle (BridgeCard + UTS row + CL/Φ policy‑ids; E.18, F.9, F.17, E.17, and A.21 where live); Domain stitched to D.CTX + UTS only.
Conformance Checklist (normative)
-
Minimal S2. S2 contains only fields necessary for Eligibility, Acceptance, and selection; any extra derived traits remain provenance.
-
TaskSignature present (S2). Every exported TaskKind has a TaskSignature with all fields declared and CHR‑typed;
unknownis an admissible value for each. -
CHR admissibility proven. Any numeric comparison or aggregation cites CG‑Spec by Characteristic id and proves CSLC admissibility; no mean on ordinals; no unit mixing.
-
Unknowns propagate. Unknowns must map to {pass|degrade|abstain} in Acceptance and Eligibility; no implicit coercions; behavior recorded in SCR.
-
Evidence lanes. A.10 evidence relations + Assurance lanes (TA/VA/LA) + freshness windows recorded; Γ‑fold default=weakest‑link unless proved otherwise.
-
ReferencePlane guarded. ReferencePlane noted per value and per ObjectiveProfile head; on crossings apply CL (and CL^plane if planes differ); Φ(CL)/Φ_plane are monotone, bounded, table‑backed and documented in the
CG‑Spec; penalties → R_eff only (F/G invariant). -
Acceptance thresholds live in CAL. No acceptance-gate thresholds in CHR or code paths; only in G.4 AcceptanceClauses.
-
Selector admissibility. Selection uses admissible (possibly partial) orders; weighted sums across mixed scale types are forbidden; return a Pareto set when appropriate.
-
Crossings visible. Any cross-stance/cross-Context reuse records BridgeCard/BridgeDescription + UTS row with CL notes and (if planes differ) CL^plane + Φ_plane.
-
UTS twin labels. All exported cards include Name Cards with twin labels; Bridges carry loss notes.
-
GateCrossing checks. Exported TaskSignature and any referenced crossings satisfy: (i) stance tagging (if used; informative only), (ii) CrossingBundle presence/consistency (E.18; F.9; F.17; E.17; A.21 when gate checks are live), (iii) LanePurity (CL→R only; F/G invariant; Φ tables present), and (iv) Lexical SD (E.10). Failures are blocking under the active GateProfile / GateChecks (A.21).
-
QD fields (when QD is in scope). If
PortfolioMode=Archiveor QD heads are present, CharacteristicSpaceRef (d>=2), ArchiveConfig (topology, resolution, K,InsertionPolicyRef,DistanceDefRef.edition), and EmitterPolicyRef SHALL be present and CHR-typed; characteristics declare ReferencePlane. -
DominanceRegime default.
DominanceRegimedefaults toParetoOnly; inclusion of illumination in dominance MUST be enabled by a CAL.Acceptance policy; the policy id SHALL be recorded in SCR. -
Telemetry. PathSliceId, decay and refresh policy ids, and edition counters for CharacteristicSpaceRef, DistanceDefRef, and EmitterPolicyRef SHALL be recorded; any illumination increase SHALL log the policy-id that triggered it.
-
GeneratorIntent (when OEE is in scope).
GeneratorIntentSHALL citeEnvironmentValidityRegionandTransferRulesRef(ids resolvable in G.5/C.23); absence =>Abstainfor OEE generator-family use. -
Budgets.
Budgeting(evaluation, time, and batch) SHALL declare units and E/E-LOG exploration budget id when used. -
Archive admissibility.
DistanceDefRef.editionand any novelty measures SHALL be CSLC-admissible and editioned; inadmissible operations => Abstain. -
Planes. ReferencePlane SHALL be declared for all QD heads or characteristics; plane crossings apply Phi_plane (penalty to R only).
-
Unknowns. Unknown QD fields map to
{degrade|abstain|sandbox}; no coercions. -
Specialization claims referenced. Any declared specialization on this TaskSignature SHALL name the task family/work target, named work-measure threshold target, adaptation budget, freshness or provenance basis for reuse, and enough attachment detail for the same claim to remain admissible in
C.22.1,G.5, andG.9use.
Interfaces & Data Paths
Inputs. ProblemProfile (...Description), CG-Spec ids, Evidence Graph Ref (A.10), D.CTX; CharacteristicSpaceRef, ArchiveConfig, and EmitterPolicyRef configs when QD is live; GeneratorIntent when OEE is live.
Produces. TaskSignature under a declared Context field (S2) with provenance; SCR-visible fields; UTS Name Cards for any minted traits; archive, PortfolioMode semantics, and telemetry hooks declared when QD is live. Do not introduce TaskSignature@Context as a separate kind.
Used by. G.5 (Eligibility and Selection kernel), G.4 (Acceptance and Evidence), C.23 (admit, degrade, and abstain rules and method-family maturity checks).
Consequences (informative)
- Admissible selection. Selection is explainable and review-ready; every reason in/out cites TaskSignature fields, CG-Spec rows, and Gamma-fold contributors.
- Local first, portable later. Context-local semantics are primary; Bridges make portability deliberate and costed (penalties to R only).
- Frictionless downstream. G.1-G.5 use one single, typed TaskSignature; thresholds are cleanly separated into Acceptance; unknowns are not guessed.
- QD and OEE-ready. Typed QD and GeneratorIntent fields make declared returned-set structure and open-ended generation contexts explicit, with admissible dominance, editioned distances, and policy-aware illumination.
Relations
Builds on: C.16 MM-CHR, G.0 CG-Spec. Coordinates with: G.4 Acceptance, G.5 Selector, C.18 NQD-CAL, C.19 E/E-LOG, C.23 Method-SoS-LOG. Constrained by: E.10 (selected EntityOfConcern, Description-episteme, specification-use, and publication-lane wording), E.18 (GateCrossing visibility and publication gating).
Practical use checks
- If two candidate approaches are answering different
TaskKinds or differentScopeSlice(G)cuts, a direct comparison is not admissible yet. - If specialization is the live specialization question, the task-family reference, threshold target, adaptation budget, and provenance basis should already be recoverable from the attached
TaskSignature. - If crossing, normalization, or missingness changes what comparison means, state that in the signature and its cited refs rather than hiding it in code, local memory, or later prose.
- If
QDorOEEheads are in scope, archive and generator fields belong in the same typed signature rather than in a detached explanatory appendix.
Goldilocks hook (design‑time)
When generating candidate solutions for a TaskKind, aim for “goldilocks” slots (feasible‑but‑hard) so that the TaskSignature is informative (neither trivial nor impossible); this aligns with G.1 (goldilocks target, abductive provenance) and ensures the TaskSignature is informative (neither trivial nor impossible) for G.5 selection.
C.22:End
Task-family adaptation signature
Status: Stable
One-screen purpose (manager-first).
Make a specialization claim publishable as one typed adaptation record over a declared TaskFamilyRef or TaskSignature, so later selector and parity work compares the same threshold target, budget burn, prior exposure, transfer, durability, downside, and corridor-entry field rather than reconstructing that story from narrative prose.
Builds on. C.22 (TaskSignature attachment and task-family anchoring), C.19.1 (BLP compatibility), A.15 (role, method, work-plan, and work-occurrence split for scout/probe work), C.24 (CheckpointReturn planning semantics), E.16 (budget enforcement).
Coordinates with. G.5 (selector specialization profiles), G.9 (adaptation parity), G.11 (later telemetry and refresh reuse).
Keywords. adaptation signature; task-family specialization; time-to-threshold; budget-to-threshold; prior exposure; corridor entry; stepping stone; transfer; retention; downside field.
Problem frame
Final task score alone does not tell whether a holder, dyad, or bounded specialist portfolio acquired usable specialization quickly, under what budget, with what prior exposure, whether the resulting competence transferred, or whether it entered a genuinely new solution corridor. If those elements are not published together, the adaptation claim splinters across task typing, probe notes, selector prose, and parity notes, and later readers can no longer tell what exactly was being compared.
Problem
FPF needs one compact way to publish a bounded specialization claim on the same declared task family and work target without retyping the task anchor from C.22 or silently pushing the adaptation-signature question into selector/parity prose.
Use this when
- the live task-family adaptation claim is not only that a holder or dyad solved a task, but how fast it acquired usable specialization on a declared task family
- comparison must stay honest about the work-measure threshold target, prior exposure, adaptation budget, transfer field, and reuse window
- movement into a new solution corridor or stepping-stone family is part of the real novelty claim
What goes wrong if missed
- adaptation claims collapse into vague
got betterlanguage with no declared work-measure threshold target or budget-to-threshold account - parity later compares outcomes that were reached under different prior exposure, different work-measure threshold targets, or different reuse windows
- nonhuman or unfamiliar solution corridors are either romanticized as novelty or dismissed as noise because the corridor entry was never typed
What this buys
- adaptation speed becomes reviewable by value on the same declared
TaskFamilyand work target - later
G.5 / G.9portfolio and parity work can compare the same specialization object instead of reconstructing it from narrative prose - stepping-stone or solution-corridor movement becomes visible as one typed part of the adaptation claim rather than one afterthought
Forces
Solution — one adaptation signature over the C.22 anchor
- Use one shared adaptation-signature field set for this question.
G.5,G.9, and later notes may cite or consume it, but they should not silently rename threshold, prior-exposure, transfer, downside, or corridor-entry terms. - When specialization is the live adaptation question, publish one adaptation signature bound to the declared
TaskFamilyReforTaskSignature, not one generic improvement claim. - The signature should expose at least:
thresholdTargettimeToThresholdbudgetToThresholdpostThresholdEfficiency?priorExposureDeclarationtransferTarget?transferGain?retentionWindow?downsideEffect?corridorEntryBaseline?corridorEntryEvidence?steppingStoneEvidence?
- These fields stay anchored to the same work target and work-measure threshold semantics already declared by
C.22, so adaptation is typed as movement toward usable specialization rather than as an ungrounded growth story. C.22continues to carry the declared task-family anchor, task typing, and baselineTaskSignature.C.22.1narrows the adaptation-signature question to threshold timing, reuse, downside, and corridor-entry disclosure over that existing anchor.
Corridor, transfer, and durability discipline
- If the adaptation claim depends on entering a new solution corridor, publish the
corridorEntryBaselinefirst: the prior repertoire, baseline set, or comparison family relative to which corridor entry is being claimed. - Then publish the
corridorEntryEvidencethat marks real entry into that corridor rather than exotic accident, for example a reproducible solution class, a stable descriptor shift, or one explicit stepping-stone sequence. - If a stepping stone mattered, publish the stepping-stone evidence as part of the adaptation signature rather than treating it as retrospective color.
- Corridor or stepping-stone notes do not replace the work-measure threshold account; they explain why the adaptation path matters, not whether the threshold was actually reached.
- A fast threshold result is not yet enough to claim durable specialization.
- If transfer to a neighboring task family is claimed, name the transfer target and the observed gain explicitly.
- If retention is claimed, name the reuse or retention window rather than letting durability hide inside one isolated run.
- If specialization harms neighboring task families, narrows reusable competence, or creates de-specialization cost, publish that in
downsideEffect?rather than telling only the upside story. - If post-threshold performance matters to later exploitation, publish
postThresholdEfficiency?so the claim is not trapped at the threshold-crossing moment only.
Worked moment
- Two agentic research setups both eventually reach an acceptable threshold on a new catalyst-search task family.
- One of them reaches threshold after a small probe budget, shows a declared transfer gain on one adjacent task family, and records that the winning path entered a previously unused solution corridor.
- The other reaches threshold only after much larger budget and without any reusable transfer.
- The adaptation signature makes that difference publishable without pretending that both runs express the same specialization story.
Consequences
- Threshold speed, budget burn, prior exposure, and post-threshold efficiency become part of the same reviewable object instead of one after-the-fact prose explanation.
- Selector and parity pattern applications can consume a stable upstream specialization object without minting shadow vocabularies.
- Corridor-entry and downside fields stay visible in the same claim that celebrates the specialization gain, reducing romanticized novelty talk.
Rationale
The reader needs one place where the adaptation claim stays whole. C.22 keeps the task family and work target explicit. A.15, C.24, and E.16 may generate the probe, checkpoint, and budget evidence. G.5 and G.9 later compare several candidates or parity runs. C.22.1 keeps the specialization story readable across those neighbouring pattern applications by making threshold timing, reuse, downside, and corridor-entry field recoverable in one short read instead of forcing the reader to reconstruct it from scattered notes.
SoTA-Echoing
Claim 1. Current frontier adaptation work judges usable specialization by threshold-crossing under bounded resources, not by terminal score alone.
Practice source, local alignment, and adoption decision. Current QD and agentic-adaptation sources such as A survey on Quality-Diversity optimization: Approaches, applications, and challenges, Swarm and Evolutionary Computation 100:102240 (2026), FactorMiner arXiv:2602.14670v1 (2026-02-16), and SkillOpt arXiv:2605.23904v2 (2026-05-25) repeatedly separate threshold target, budget burn, transfer evidence, reuse evidence, and changed object/version from one final benchmark score. This pattern adopts that practical field set, adapts it through one TaskFamilyRef or TaskSignature-bound adaptation signature, and rejects generic got better narratives that leave threshold and budget semantics implicit.
Claim 2. Current open-ended exploration work treats corridor entry and stepping stones as evidence-bearing novelty signals rather than decorative commentary.
Practice source, local alignment, and adoption decision. Current QD/OEE source-use role/currentness plus current FPF C.17, C.18, C.19, G.5, G.9, and G.11 neighbours distinguish real corridor entry from one exotic sample by asking for explicit baseline, stable descriptor shift, reproducible solution class, or an explicit stepping-stone trace. This pattern adopts explicit corridor baseline/evidence discipline, adapts it as declared adaptation-signature fields, and rejects novelty talk that names no baseline, evidence source, or evidence locus.
Claim 3. Current selector and parity practice needs one stable shared field set for specialization claims.
Practice source, local alignment, and adoption decision. Current FPF selector and parity neighbours keep compared candidates reviewable only when candidates reuse the same published field set for threshold, prior exposure, transfer, retention, downside, and corridor-entry field. This pattern adopts that reuse discipline, adapts it by publishing one stable adaptation-signature field set here, and rejects silent downstream field redefinition in G.5 or G.9.
Evidence-source note. Peer-reviewed or archived frontier anchors carry the most direct evidence for threshold, budget, and parity claims. Fast-moving frontier lines remain explicit evidence for corridor-entry and open-ended exploration pressure only when the row names their local contribution; they are not a flattened single evidence status.
Relations
C.27 temporal-claim relation.
-
C.27 may flag: a claim that a holder, dyad, team, specialist portfolio, method, or agent acquires usable specialization faster on one declared
TaskFamilyReforTaskSignature. -
This pattern keeps: threshold target, time-to-threshold, budget-to-threshold, prior exposure, transfer, retention, downside, corridor-entry evidence, and adaptation-signature fields.
-
Non-admissible use: generic "learns faster" wording without task-family anchors does not create a C.27 profile or a complete adaptation signature; faster threshold crossing is not durable specialization unless transfer, retention, downside, and corridor-entry evidence are stated when claimed.
-
Exit: downgrade to Dyn1 trend when only a trend is live; use C.24 when the question is only tool-use planning; use C.22.1 when specialization is the live adaptation question.
Builds on: C.22 TaskSignature anchoring, C.19.1 BLP compatibility, A.15 role, method, work-plan, and work-occurrence separation, C.24 scout/probe and CheckpointReturn semantics, E.16 budget enforcement.
Coordinates with: G.5 selector specialization profiles, G.9 adaptation parity, G.11 later telemetry/refresh reuse.
Coordinates with: E.23 when a quality-improvement loop claims durable task-family specialization. C.22.1 carries the adaptation-signature fields for threshold target, time-to-threshold, budget-to-threshold, prior exposure, transfer, retention, downside, and corridor entry; it does not restate the E.23 loop method, E.22 review framing, or pattern-quality or DRR-adequacy object-under-improvement evaluations.
Constrained by: E.10 lexical discipline and E.19 pattern-quality review when this child section is newly landed or materially revised.
Not this pattern when
- the claim only needs to name the task family and work-measure threshold target, with no adaptation-speed or transfer claim at all; ordinary
C.22anchoring is enough - the question under repair is already selector or parity law across candidate selected sets; that belongs to
G.5 / G.9 - the text cannot yet declare one work-measure threshold target, one prior-exposure stance, or one evidence source or evidence locus for corridor entry
Conformance checklist
CC-C22.1-1An adaptation signature SHALL bind to one declaredTaskFamilyorTaskSignature, one work target, and one work-measure threshold target rather than one generic improvement story.CC-C22.1-2An adaptation signature SHALL publishtimeToThreshold,budgetToThreshold, andpriorExposureDeclaration; if threshold was not reached, the signature SHALL say so explicitly instead of implying success.CC-C22.1-3Any declared transfer, retention, post-threshold-efficiency, downside, corridor-entry, or stepping-stone claim SHALL be explicit by value with the target, baseline, evidence source, or evidence locus named, not left as narrative garnish.CC-C22.1-4This pattern may refine specialization timing and reuse claims over the declaredC.22anchor, but it SHALL NOT redefine acceptance-gate thresholds, task-family attachment, or selector/parity law governed by another FPF pattern.CC-C22.1-5Downstream selector/parity pattern applications SHALL cite or consume the same published adaptation-signature field set rather than silently redefining threshold, prior-exposure, transfer, retention, downside, or corridor-entry terms.
C.22.1:End
ProblemCard@Context
Type: Calculus (C) Status: Stable Normativity: Normative
Plain-name. Context-bound problem card.
Intent. Give a practitioner one compact problem-side record that turns a messy problem signal into a reviewable problem-side record before downstream Principles-to-Work (P2W) or selector use, while leaving claims outside the card to the governing FPF patterns that govern those claims.
Use this when. Use this pattern when a signal, anomaly, drift, risk, hypothesis, stakeholder pressure, set-derived candidate, underused capability, new constraint, new environment, opportunity-like cue, or solution-shaped request must become reviewable before task typing, method-family selection, work planning, evidence use, gate passage, autonomy control, or P2W. Also use it when P2W would otherwise use a slogan, wish, ticket-shaped task, preselected work item, or solution-shaped task as if it were reviewable problem-side output.
Do not use this when. Use another pattern directly when the question under repair is already work planning, method selection, evidence, provenance, assurance, gate decision, autonomy, archive, selected-set governance, mathematical-lens use, or ordinary discussion with no project-side move.
Builds on. E.2, E.9, E.10, C.2.P, A.6.P, C.16.Q, C.16, A.19, C.22, C.25, C.29, G.5, G.9, A.6.3.RT, and A.6.4.
Coordinates with. C.11, C.18, C.19, C.22.1, C.24, C.27, C.28, A.15, A.21, E.16, G.6, G.11, A.10, B.3, E.17, E.17.ID.CR, A.6.3, F.9, and E.18.
Boundary summary. C.22.2 use starts from messy problem-side signals and yields one reviewable ProblemCard@Context, a P2W-ready problem-side input for downstream C.22, or a stop with a governing-pattern cue for the claim being made, relation, or boundary outside the card.
Problem Frame
A working team can reach the beginning of development with symptoms, anomalies, stakeholder signals, constraints, risks, old solution evidence, comparison ideas, solution temptations, underused capabilities, new environments, and opportunity-like cues. Opportunity-like signals still need context, scope cut, not-wish reason, improvement or acceptance probe, and honest next move; they do not turn this pattern into an ideation pattern. If FPF only says "type the task" or "choose a method", P2W can start from a slogan, a ticket-shaped wish, or a solution-shaped task before the problem itself is reviewable.
Problematization becomes useful for FPF use when it makes the problem side explicit. A problem needs symptom detection, improvement check, acceptance probe or candidate acceptance criterion, mandatory constraints, risk condition, problem-formulation next-move reason, validation boundary, freshness or expiry, and a relation to candidate solution search. Many problems also arrive from a retained set: candidates, anomalies, hypotheses, non-dominated fronts, shortlists, selected sets, live pools, and retained stepping stones.
Current FPF already has patterns for archive, pool, front, selected set, parity, refresh, method selection, evidence, autonomy, gate, representation transition, bridge, and mathematical-lens use. The missing piece is a compact problem-side output that lets a practitioner see what is present before P2W use starts from the problem-side output and which current FPF pattern carries each heavier question.
The first-minute working question is:
Can I write or review a problem-side record that is specific enough to guide P2W, selection, acceptance, evidence, and first-principles or mathematical-lens use, while keeping archives, fronts, pools, selected sets, parity, evidence, autonomy, and work planning in their existing FPF patterns?
Thin First Use and Output Kind
Thin First-Use Form
The first substantive use of this pattern is the Thin form. It is a practitioner-facing prompt for writing the smallest reviewable problem card, not a demand to complete a field list.
A ProblemCard@Context is complete for its current use when it states:
- why this signal matters now;
- what problem representation is being carried under which context and scope;
- why this is not merely a wish, ticket, slogan, or preselected work item;
- what would count as improvement or an acceptance probe;
- what the honest next move is.
The Thin form asks for:
- the problem signal or selected-problem cue: what made the practitioner stop before downstream task typing or work selection;
- context grounding and scope cut, including what is outside the current problem;
- the reason this is not merely a wish, slogan, ticket, or preselected work item;
- a provisional improvement check or acceptance probe;
- one honest next move:
P2W-ready, characterize, compare, search, refresh, retire, archive,abstain/no-change, or apply the FPF pattern governing the named claim kind, relation kind, or boundary that changes the problem-card move.
If the Thin form lacks an improvement check or acceptance probe, it may preserve the signal and choose characterization, comparison, search, refresh, retirement, archive, abstain/no-change, or governing-pattern application for the claim being made; it must not declare P2W-ready.
Only after the Thin pass is legible, recover the output-kind boundary:
C.22.2 - ProblemCard@Context is the compact problem-side output under current C.22.
C.22.2 - ProblemCard@Context is the pattern heading. ProblemCard@Context is the C.22.2 problem-side record shape; an instance is a reviewable problem-side record before P2W. ProblemCard@ContextRef may be used as a reference form when downstream text cites such an instance, but it is not a separate durable kind unless a separate naming or kind decision approves one under F.18 and A.6.P. The Tech heading remains C.22.2 - ProblemCard@Context. Plain-register glosses or section-local practitioner labels may appear in this pattern, but those labels do not replace the Tech heading.
Local labels in this pattern are local to the C.22.2 record shape unless a separate accepted FPF naming or kind decision assigns them a broader FPF kind. This includes problem-formulation next-move reason, validation boundary, risk condition, solvability band, P2W-ready, reviewable, stale, refreshed, retired, archived, abstain/no-change, and firstPrinciplesCue; they do not create FPF kinds, gate statuses, state-machine kinds, or local mathematical-lens objects. When a claim outside C.22.2 is live, do not mint a local reference field for it; name the governing FPF pattern, claim kind named by value, project-side reference when known, and stop condition in the next move or source cue. When a mathematical or first-principles cue is live, cite C.29; local problem-formulation next-move reason names only why the problem formulation or structure cue is worth reviewing or moving onward from C.22.2; C.29 carries mathematical-lens use and the problem-formulation next-move reason for that lens.
Reference labels ending in Ref are reference roles, not object names. This includes ProblemCard@ContextRef, setContextRef, rivalProblemFormulationRef, and representationOrWordingUseRelationRef; do not shorten or promote them into local object kinds such as ProblemCardRef, SetContext, RivalFrame, or RepresentationRelation.
@Context means that the card is bound to declared context grounding: a named U.BoundedContext, a project-side context reference, or an explicitly bounded practice situation with recoverable local meaning. Domain or practice wording may identify the informative locus of the problem, but it does not replace context grounding. A broad label such as healthcare, education, engineering, research, or operations is not context grounding by itself. When domain or practice wording is used for context grounding, recover the named bounded context, project-side context reference, or explicit bounded practice situation and state what local meaning or rule is being used. The card does not assert global problem identity outside that declared context grounding.
Plain gloss for P2W-ready: problem-side input ready. It means ready as input to downstream P2W or selector reasoning, not ready to execute work, pass a gate, or select a method.
Required Solution Moves
The C.22.2 Solution is organized around practitioner moves from signal to reviewable problem to one admissible next move, not around schema completion.
- Capture the symptom, anomaly, risk, stakeholder cue, drift, hypothesis, or other source signal before naming the problem.
- Stabilize the cheap problem-side record: context grounding, scope cut, EntityOfConcern when it changes the problem-side move, primary viewpoint or role concern, and provisional problem framing.
- Make action possible by separating the symptom detector, improvement check, candidate acceptance criterion, optimization target when live, monitored risk signal when live, and proxy-distortion risk when an indicator can be gamed or substitute for value; then state mandatory constraints, risk condition when live, and intended next move before downstream selection.
- Pay only for live complexity: add conditional fields only when their kind is live for the problem-card move; otherwise stop at the lighter card or name the governing FPF pattern and claim kind named by value that must be used next.
- Run the representation-continuity check: if the problem formulation changes the EntityOfConcern, representation scheme, diagram, functional description, or TGA path interpretation, name the representation-transition, retargeting, bridge, structural-reinterpretation, or wording-use relation before reusing an inherited local cue or readiness disposition.
- Close by the honest next move rather than by a completed form. A filled card without a truthful next move is not a successful
C.22.2result.
Cheap-stop rule: the smallest card that gives a truthful next move is sufficient. A conforming C.22.2 use must not require heavier fields merely because the full field list exists.
First practitioner pass before governing-pattern cues:
- Capture the problem signal or selected-problem cue, context grounding, and scope cut.
- State why it is not merely a wish, slogan, ticket, or preselected work item.
- State the provisional improvement check or acceptance probe.
- Choose the honest next move. Use the relation boundary aid only when a conditional relation is live.
This is the Thin-form writing order, not a completion sequence for the whole pattern. It adds no fields; it keeps the practitioner on the smallest truthful card before Standard or High-relation material is paid for.
Relation Boundary Aid
Use this aid only after the Thin ProblemCard@Context is legible: signal, context grounding, scope cut, not-wish reason, improvement check or acceptance probe, and honest next move. It is not a second writing order and not a catalogue of other patterns. It answers one question:
Which claim being made, relation, or boundary changes the problem-card move, and which FPF pattern governs that item?
If the item does not change the current problem-card move, leave it out of the card. If it does change the move, keep only the local cue or reference that makes the card reviewable, then apply the governing pattern for that claim, relation, or boundary.
Over-capture symptom: the practitioner spends the pattern use classifying FPF patterns while the problem signal, context, scope, improvement check, acceptance probe, and next move remain unstable.
Repair: return to the Thin problem-side action. State the signal, context, scope, why this is not merely a wish, ticket, slogan, or preselected work item, the improvement check or acceptance probe, and the honest next move. Reopen this aid only for the claim, relation, or boundary that changes that move.
Use Boundaries and Profiles
Use C.22.2 when a signal must become a problem-side record before downstream task typing, P2W, method-family selection, work planning, evidence use, gate passage, autonomy control, or selected-set use. A known method does not close this pattern when the problem signal, scope, acceptance probe, or EntityOfConcern remains unstable.
Use another pattern directly when the question under repair is already that pattern's EntityOfConcern or governed relation: A.15 for work planning or performed work, A.10/G.6/B.3 for evidence, provenance, or assurance, A.21 for gate decision, E.16 for autonomy, C.11 for a local choice among explicit options, and C.18/C.19/G.5 for archive, pool, front, or selected-set governance. C.22.2 may still preserve the problem-side cue or reference that explains why that pattern is now live.
Use profiles as record budgets:
- Thin profile: signal, context grounding, scope cut, not-wish, not-slogan, not-ticket, or not-preselected-work reason, provisional improvement check or acceptance probe, and one honest next move.
- Standard profile: Thin fields plus the live comparison, acceptance, risk, validation, freshness, unknown-handling, or P2W-readiness fields needed for downstream use.
- High-relation profile: Standard fields plus only the relation references needed when public, disputed, high-risk, set-derived, cross-context, evidence-adjacent, autonomy-adjacent, gate-adjacent, agentic, temporal, causal, representation, or Part-G relations are live.
Stop at Thin when it gives a truthful next move. Stop at Standard when it is enough to emit or bind a minimal TaskSignature, TaskKind, or ProblemProfile. Apply the governing FPF pattern for the claim being made, relation, or boundary instead of enlarging the card when the issue under repair is no longer the problem-side record itself.
Field Labels and Liveness
The first problem-side move is to make one problem usable before P2W by stating these field labels when they are live for the case:
- problem signal;
- source signal reference: prior solution-use evidence, environmental drift observation, new constraint, new environment, underused capability, opportunity-like cue, risk signal, anomaly, hypothesis, stakeholder signal, accepted local theory, or safe-probe or environment cue;
- domain or practice locus when helpful, plus the context grounding that carries local meaning;
- EntityOfConcern or project-side FPF kind or reference named by value when it changes the problem-side move;
- context grounding;
- primary viewpoint or role concern;
- scope cut;
- symptom detection;
- problem hypothesis or cause-theory cue;
- rival-frame reference when multiple plausible problem frames remain live;
- improvement check;
- comparison-and-acceptance cue or acceptance-criterion reference;
- characterization relation;
- characteristic or Q-bundle relation;
- indicator selection;
- comparability or parity relation, or explicit current reason it is not needed;
- mandatory constraints;
- risk condition;
- problem-formulation next-move reason;
- validation boundary;
- freshness or expiry condition;
- unknown handling;
setContextRefwhen a set, pool, front, archive, shortlist, selected set, or portfolio context is live;firstPrinciplesCuefor a first-principles or mathematical structure cue that changes problem formulation;- governing-pattern cue when a claim outside
C.22.2changes the problem-card move: governing pattern for that claim, relation, or boundary; claim kind named by value; project-side reference when known; and stop condition;
Field liveness for C.22.2 is determined as follows:
Field absence rule: if a conditional field kind is not live, the field is absent, not unknown. Use unknown only for a live field whose value is currently unknown. If a live value is unavailable, state whether the next move is blocked, degraded, sandboxed, or requires the FPF pattern governing the named claim kind before that use. If a value is stale, use the freshness or expiry disposition in C.22.2:12 and G.11. If a field is intentionally omitted, state the record-budget reason and do not imply that the omitted kind has been checked. A minimal ProblemCard@Context contains the always-core fields; conditional fields are added only when live for the problem-card move.
When the card compares options, selected-set members, retained candidates, or rival problem formulations, it must state the live comparison or parity relation, or state why comparison is not live for the current move. Absence of a parity relation is not automatically a defect; it is a disposition. The admissible result is either parity not live for the current card, or a G.9-governed parity relation before P2W-ready is claimed. A local fair-comparison result or selected-set result is not admissible inside C.22.2.
A conforming C.22.2 use includes minimal source and context witness material when source, set, selection, characterization, parity, freshness, representation relation, or wording-use relation is live. Otherwise a Thin card may cite the observed signal in plain form. The field-group label problemCardSource may be used inside the pattern, but it is not a new FPF object and not an evidence graph. It is a recoverability field group for source cues and project-side references that make the problem-side record reviewable:
Generated problem variants, evaluator feedback, and open-ended problem mutation may be recorded only as sourceSignalRef, selectionOrRetentionCriterion, or setContextRef when they make the problem-side record reviewable. They do not provide problem-side validity, evidence sufficiency, or permission to probe or act.
Anti-Pattern Checks and Worked Slices
Anti-pattern checks start from the local card move:
- card-as-work-item: the card is treated as executable work while method, plan, and work occurrence remain undecided;
- form-completion: every field is filled because the template exists, even though the Thin next move would be truthful;
- readiness shortcut:
P2W-readyis declared from signal and scope alone, without improvement check or acceptance probe; - source-claim shortcut: a preselected solution, work item, proof-looking reference, gate-looking cue, or permission-looking cue replaces the problem-side signal, context, scope, acceptance probe, and next move;
- scalar shortcut: archive, set-return, Goldilocks, NQD, OEE, partial-order, stepping-stone, or indicator material collapses into one readiness score;
- prestige shortcut: first-principles or mathematical wording is kept without practical payoff, preserved/lost structure when live, problem-formulation next-move reason, and stop condition.
Local stop rule: if the encountered material tries to carry a claim outside C.22.2, the card keeps only the cue or reference that changes problem formulation or the next move, then names the governing FPF pattern and claim kind named by value to use before that claim is relied on.
A conforming C.22.2 use is testable against at least one Thin worked slice, such as repeated task rework or another compact source signal, showing signal, context, not-preselected-work reason, improvement check, and next move. It is also testable against at least one High-relation worked slice from a set, archive, pool, front, shortlist, selected set, or portfolio context, showing setContextRef, candidate acceptance criterion, risk condition, and the claim being made, relation, or boundary without creating a local portfolio or archive kind.
Conformance Checklist Requirements
The checklist protects a completed or reviewed card from overread. It is not the writing order and not a gate. The writing order remains Thin form, honest next move, and relation references only when they change the move.
Problem-Kind Recovery
For this decision, problem remains an ordinary word in non-FPF-governed prose. Recovery is required only when the wording changes an admissible move, FPF kind, FPF relation kind, downstream selector reference, evidence claim, causal-use claim, bridge claim, assurance claim, decision claim, admissibility claim, or another exact governed claim. The preferred center is the framed problem representation: a problem-side representation of a selected EntityOfConcern under context, scope, viewpoint or role concern, constraints, and improvement or acceptance probe. When problem carries FPF work, selection, evidence, causal, bridge, assurance, decision, or admissibility claim, it must be recoverable through this table:
Local interpretation rule: ProblemCard@Context is the problem-side record shape before downstream typing or work. It may name candidate ProblemProfile, candidate TaskSignature, setContextRef, source cue, governing-pattern cue, or first-principles cue material only when those references change the problem-card move. It does not promote those references into local objects or claims outside C.22.2.
Problem, Task, Method, Work, and Result Split
ProblemCard@Context is admissible while the method is unknown, contested, not yet selected, or not yet specific enough for downstream work. A known method does not by itself make the problem ready: if the proposed method is known but the problem signal, scope, acceptance probe, or EntityOfConcern remains unstable, C.22.2 remains live. If both the problem representation and the method are already accepted and the remaining question is planned execution, apply A.15. The card may carry method-family cues and reasons for method search, but it must not present downstream work as already known task execution.
Use this split:
Transition condition: ProblemCard@Context may prepare a candidate ProblemProfile, bind an existing ProblemProfile, emit a candidate TaskSignature, or bind a TaskSignature only when P2W or selector readiness is declared. If several downstream signatures remain plausible, keep them as candidate signatures instead of binding one chosen TaskSignature. When the issue under repair becomes method-family selection, selected method, planned work, performed work, result record, or result measurement, apply the governing FPF pattern for that claim; do not expand the card.
Relation to C.22
C.22 remains the foundation for ProblemProfile, TaskKind, TaskFamilyRef, and TaskSignature. ProblemCard@Context is earlier and more explicit: it explains why this problem, under this context, is admissible for P2W, search, comparison, characterization, refresh, retirement, or governing-pattern application.
A ProblemCard@Context may prepare a candidate ProblemProfile, bind an existing ProblemProfile, emit a candidate TaskSignature, or bind a TaskSignature only when P2W or selector readiness is declared. If several downstream signatures remain plausible, keep them as candidate signatures instead of binding one chosen TaskSignature.
This relation does not move problem-card field detail into TaskSignature. TaskSignature stays minimal for eligibility, acceptance, and selection. Downstream method, work, result, evidence, gate, autonomy, archive, portfolio, and selected-set claims remain with their governing patterns.
Characterization, Indicators, and Comparability
ProblemCard@Context must state either a recoverable characterization relation and comparability or parity relation, or an explicit current reason why the problem can proceed without one.
The heavy content stays with existing FPF patterns:
C.16carries measurement characterization, backing, and comparability discipline;A.19carries characteristic, scale, unit, polarity, and indicator admissibility discipline;C.25carries Q-bundles and quality-like multi-characteristic bundles;G.9carries parity, comparison-window, comparator, budget, unit, repeatability, and reproducibility pins;G.0carries comparison-frame and CG-Spec governance;G.4carries acceptance clauses and threshold predicates;G.5governs selected-set publication when the problem enters a selected set.
Missing characterization or parity relation is a current disposition. The record applies the characterization, parity, search, or pool pattern when that relation is live instead of pretending the problem is ready for P2W.
The C.22.2 candidate acceptance criterion must distinguish functional check, constraint compliance, risk or safety boundary, parity or comparison relation, and freshness window when those relations are live. Comparison frame, CG-Spec, or comparability governance is governed by G.0. Acceptance clauses and acceptance threshold predicates apply G.4; C.22.2 may name only the need, cue, or reference. Passing a test, improving one observed indicator value, or naming an acceptance phrase is not by itself admissible acceptance for P2W.
Source Record-Form Recovery
Source record names are recovered by use, not by label shape. This section prevents source prose from becoming local C.22.2 subobjects.
| Source form family | C.22.2 preservation | Governing pattern named by value for outside use
|
|---|---|---|
| Problem card, problematization passport, problem-side note, or ordinary source signal | Carry the problem signal, context grounding, scope cut, improvement check or acceptance probe, and next move. | C.22.2 governs only the problem-side record shape; downstream selector-facing use remains with C.22. |
| Archive, portfolio, palette, front, shortlist, selected set, live pool, set-return, or retained candidate | Preserve setContextRef, source-set kind, selection or retention criterion, budget/window when live, and non-scalar next move. | C.18, C.19, G.5, G.9, G.11, A.6.P:7a, and C.16.Q according to the relation named by value. |
| Characterization passport, characteristic card, parity plan, comparison note, rule-of-choice card, or acceptance-looking row | Preserve the cue, candidate criterion, comparator/window cue, and current reason the relation changes formulation. | C.16, A.19, C.25, G.0, G.4, G.9, or C.11 according to the relation named by value. |
| Evidence pack, provenance note, assurance row, gate log, autonomy budget, runbook, rollback plan, method selection, work plan, performed-work note, result record, or result measurement | Preserve only the problem-side cue, risk or validation boundary, source reference, and stop condition before that use. | A.10, G.6, B.3, A.21, E.16, G.5, A.15, C.16, or G.11 according to the claim named by value. |
| Candidate solution, described system, ordinary log, budget, ledger, protocol, plan, pack, or factory wording | Recover the use under repair: problem-side source, selected-set material, work/evidence/gate/autonomy material, or ordinary example. | Apply the governing pattern for the recovered relation; do not mint a local C.22.2 kind from the label. |
The repair rule is short: if the source form supplies problem-side material, copy the material into the card's live fields. If it supplies another FPF-governed claim, keep only the local cue and apply the pattern that governs that claim.
Portfolio, Archive, and Set-Return Treatment
Archive, portfolio, pool, front, shortlist, selected-set, and set-return material remain source and set cues for the current problem-side record. ProblemCard@Context preserves setContextRef, source-set kind, selection or retention criterion, and the non-scalar next move when live; portfolio and archive governance stays with the named governing patterns and does not become a local problem-card kind.
Archive, portfolio, palette, front, shortlist, ranked shortlist, selected set, live pool, and set-return material remain live source distinctions, but their current FPF governing patterns are already available:
A singleton problem card is the degenerate case. If it came from a portfolio, front, archive, or pool, the selected problem remains traceable through setContextRef: the lightweight reference to the source set kind, source reference, selection or retention criterion, budget or window, review cadence, and pattern reference named by value when live. setContextRef is a reference field, not a new SetContext kind and not a downstream claim carrier.
setContextRef must preserve the recoverable source-set form when live: Palette, Front, Archive, ExplorationArchive, Shortlist, RankedShortlist, SelectedSet, LivePool, or another accepted source-set form. If the source-set form is not recoverable, the card may keep a source cue, but it must not claim selected-set readiness or archive-derived readiness.
When multiple plausible problem formulations remain live, C.22.2 must not bind one TaskSignature prematurely. Each optional rivalProblemFormulationRef must state the rival formulation, EntityOfConcern, context, preserved concern, lost concern, reason not selected yet, and next discrimination move. It is not a CG-Frame, not the E.8 Problem Frame, and not a representation-frame object.
The next discrimination move may be to characterize, compare, retarget, reopen the source, choose a local problem formulation, or apply the relation-bearing pattern. Reframing is triggered when context grounding, EntityOfConcern, viewpoint, scope cut, or cause-theory cue changes the problem representation enough that readiness or admissibility cannot be inherited by wording continuity.
Goldilocks and Set-Return Docking
Goldilocks problem selection is the problem-side adaptation of the current NQD, OEE, and set-return family. It is not direct QD or OEE vocabulary import, not a new scalar readiness doctrine, not a local QD or OEE vocabulary, and not a single score. C.22.2 must not mint GoldilocksProblem, GoldilocksScore, GoldilocksReadiness, or any equivalent local kind; Goldilocks remains a readiness and selection interpretation carried by current governing patterns.
A Goldilocks, stepping-stone, or archive-derived problem must be represented as source context or set context, selection or retention criterion, and current next move, not as problem difficulty, priority, or readiness score.
ProblemCard@Context carries only the problem-side readiness fields and relation references:
- source set kind when archive, pool, front, shortlist, selected set, or portfolio language is live;
- solvability band;
- characteristic-space, declared problem-side characteristic descriptor, or Q-bundle relation;
- declared difference criterion when novelty or diversity is claimed, or apply the governing characterization or comparison pattern;
- non-scalar trade-off, dominance, partial-order, or set-return relation when that relation is being made;
- measurability or explicit unknown handling;
- reversibility or containment for safe probing when live;
- stepping-stone option value when retention matters;
- expiry or refresh condition;
- selected-set, archive, pool, front, or parity relation when that relation is being made.
The local solvability band label means a context-bound, non-scalar interpretation of feasible-but-not-trivial fit under current capability, constraints, validation boundary, and optional set-return relation. It is not a universal difficulty claim, not a hidden readiness scale, and not a single-score ranking.
If the band cannot be tied to a characteristic, Q-bundle, comparison, retention, or capability-context cue, treat Goldilocks wording as informal recognition only and bind any selection, set-return, or parity claim to the governing FPF pattern for that claim.
The current governing family is C.18, C.19, G.5, G.9, G.11, A.6.P:7a, and C.16.Q. The relation to C.22:14 is a role and timing relation inside the same family: C.22.2 uses the family before P2W, while C.22:14 uses it downstream when candidate solutions for a TaskKind make TaskSignature informative.
Structure Cue That Improves Formulation
C.29 carries mathematical-lens use for first-principles or mathematical structure cues used by ProblemCard@Context.
firstPrinciplesCue is a local cue label for a formulation-changing structure and a cue to apply C.29; it is not a local mathematical-lens kind or a substitute for a C.29 lens-use result.
The problem card may ask whether a first-principles or mathematical structure helps find or improve the problem formulation, not only whether an already-mentioned mathematical object is admissible. Useful cues include state space, graph, boundary, topology, symmetry, invariant, variational or constrained-optimization structure, probability or information structure, resource bound, obstruction, scale window, composition, or coarse-graining choice.
The admissible practitioner move is:
State the structure that improves the problem formulation, the preserved structure, the lost structure, the practical payoff, the problem-formulation next-move reason, and the stop condition.
Distribution by principles:
When no useful mathematical structure survives, record that absence and proceed without forcing mathematical prose into the problem card.
Validation, Reliance, AI-Agent Pressure, and Safe Probing
ProblemCard@Context exposes three local fields for downstream use:
- problem-formulation next-move reason: why this formulation is worth keeping, reviewing, discriminating, or moving onward now;
- validation boundary: what has been checked for the current next move, what may be used now, and which use needs another pattern;
- risk condition: the monitored risk, cost-of-error concern, or containment concern that may change the safe next move.
Use these fields to state a local reliance disposition, not to authorize downstream action.
Cause-theory cues may focus problem formulation inside ProblemCard@Context. Association, intervention, counterfactual, responsibility, expected-effect, or causal-evidence claims are governed by C.28 plus evidence, provenance, or assurance patterns when those claims are being made.
Environment design and safe probing may appear as source signal reference, validation boundary, risk condition, or governing-pattern cue. If the next move can affect a controlled object, the card names the probe need plus the claim kind named by value that blocks local action; it does not authorize the probe locally.
Freshness, Expiry, and Unknown Handling
C.22.2 includes a section-local state and disposition vocabulary for ProblemCard@Context; this vocabulary is not a new FPF kind. These labels describe the card's current admissible use; they are not required states in a transition sequence, event kinds, or gate records. The local labels are:
Freshness must name the affected locus: problem signal, context, characterization or parity relation, problem-formulation reason or source, set-source reference, representation relation, or wording-use relation. For the problem-signal locus, ask whether the original signal is still present, recurring, solved, absorbed, duplicate, unnecessary, or no longer worth downstream work. For context, ask whether the local context or scope cut has changed enough to alter the formulation. For characterization or parity, ask whether measurement, comparison, and parity relations are current enough for the intended next move. For problem-formulation reason or source, ask whether cited sources, provenance, and stated reason/source references are fresh enough for the problem-formulation next-move reason. For set-source reference, ask whether archive, front, pool, shortlist, or selected-set membership and the selection or retention criterion are still current. For representation relation or wording-use relation, ask whether wording, diagram, functional description, TGA path, bridge, retargeting, or representation change alters the EntityOfConcern, admissibility inheritance, context grounding, viewpoint or role concern, scope cut, comparison relation, admissible next move, or relation needed for inheritance.
A stale source or evidence reference does not always retire the problem; it may require refresh while the problem remains reviewable. A stale problem signal may lead to refresh, retire, archive, abstain or no-change, or a governing-pattern cue for the claim, relation, or boundary that must be checked.
Freshness or expiry failure is a current disposition. A stale or unknown-bearing problem card may remain reviewable as a problem-side record, but it does not become P2W-ready unless freshness and unknown handling permit the intended downstream move. A stale problem card does not silently remain admissible for P2W.
When freshness, expiry, or unknown handling fails, choose one of these current dispositions:
- refresh the problem card or its characterization or comparison relation under
G.11,C.16,A.19,C.25, orG.9; - retire or deprecate the problem-side record under the relevant archive, pool, selected-set, or refresh pattern;
- continue only as explicitly governed bounded-risk use under the governing pattern for the claim being made, relation, or boundary.
Unknown-handling fields must state whether they permit use, require degraded use, abstention, or sandbox treatment, or make the current problem formulation inadmissible. No P2W, no change, or abstain-for-now may be a successful next move when the signal is stale, duplicate, already solved, already absorbed, unnecessary, or not currently worth downstream work. Before ProblemCard@Context emits or binds TaskSignature, it must check whether the problem signal is still present and whether prior work has already solved or removed the problem.
Representation and Wording-Use Relation Continuity
C.22.2 names A.6.3.RT, A.6.4, E.17, F.9, E.18, and E.10 only when changed problem formulations, diagrams, functional descriptions, TGA paths, wording, or PathSlice examples carry a live representation, bridge, retargeting, structural-reinterpretation, or wording-use claim. The card may preserve the local cue, reference, or problem-formulation next-move reason, but it does not prove continuity or admissibility inheritance by wording similarity.
Framing is not wording repair. A framing change applies when EntityOfConcern, context grounding, scope cut, viewpoint, comparison relation, admissibility inheritance, or honest next move changes. Wording-use repair is live only when wording, diagram, functional description, TGA path, bridge, retargeting, or representation change alters the carried problem-side representation, EntityOfConcern, admissibility inheritance, context grounding, viewpoint or role concern, scope cut, comparison relation, admissible next move, or governing-pattern cue. Ordinary wording cleanup does not trigger a representation-continuity relation and does not block a Thin ProblemCard@Context.
C.22.2 may not treat changed-problem examples as admissible relations unless the appropriate accepted FPF relation is named.
Source and P2W Carry-Forward
The source presentation is not compressed into a generic problem-card summary. The following source details become carry-forward constraints for C.22.2 use and for the P2W-facing relation from C.22.2.
This carry-forward preserves detail, not broader scope. C.22.2 remains the problem-side output; P2W uses it with enough source cues and project-side references to select method families, plans, performed work, and result measurement without making the problem card a P2W pattern.
SoTA Decision-Use Source Material
The following external anchors are adopted or adapted only where they change this pattern's local answer by value.
If a C.22.2 use carries a wider external claim than these dispositions, the claim is outside this pattern and requires a separate content decision or demotion to a non-FPF-governed example.
Each FPF-governed SoTA use is recovered as a local test: source idea, FPF invariant, practitioner check, and popular shortcut rejected. A source citation without that local test is not enough to carry pattern use.
Local SoTA-to-action tests:
Rationale
ProblemCard@Context gives the practitioner one compact problem-side record between vague problem talk and downstream P2W. The card is useful because it is light enough for ordinary use and exact enough to show when comparison, characterization, evidence, selection, mathematical-lens use, method, work, gate, autonomy, bridge, representation transition, or refresh must apply another FPF pattern.
The card gives the practitioner one thing to write, inspect, and challenge. A practitioner can see whether a problem is ready without first assembling the problem-side record from TaskSignature, Q-bundle, parity report, evidence note, selected-set output, and refresh record. Claims beyond the problem-side record stay with their governing patterns.
The archive and portfolio distinctions remain live when they matter because the card preserves setContextRef and names the governing pattern for any live set, archive, or portfolio claim. Changed problem formulations, diagrams, functional descriptions, or TGA path interpretations require the accepted representation or retargeting relations before a local cue or readiness disposition is reused. Current SoTA and first-principles cues matter only when they change fields, relation references, boundaries, or the problem formulation itself.
Problem-Card Use Invariants
Misuse Modes and Repairs
Use-Quality Checks
These checks protect the card's practical use; they do not add fields.
Worked Slices and Anti-Cases
Five-Case Worked Slices
Compact P2W-ready Disposition Slice
A support team sees repeated failed hand-offs after a new interface policy. The incoming request says "rewrite the escalation workflow." A conforming ProblemCard@Context first repairs the problem-side record instead of accepting the work-shaped request.
The P2W export is narrow: accepted problem-side material, context grounding, improvement check, validation boundary, freshness condition, and governing-pattern cues. If the improvement check or acceptance probe is missing, the card stays reviewable-only or source-finding and cannot claim P2W-ready. If the next user wants evidence sufficiency, a gate decision, work authorization, or selected method, the card preserves the cue and the corresponding governing pattern carries that later claim.
Anti-Cases
Machine-Assisted Drafting Boundary
Machine-assisted ProblemCard@Context drafting is admissible only as drafting aid. Before the draft is used for P2W or selector-facing work, a practitioner checks the card's local fields and any governing-pattern cues for claims outside C.22.2.
Required practitioner checks for a machine-assisted draft:
- source signal;
- improvement check or acceptance probe;
- problem-formulation next-move reason;
- unknown handling;
- freshness or expiry disposition;
- governing-pattern cues for claims being made, relations, or boundaries outside
C.22.2.
First Practical Entry Aid
This section is a discoverability aid only. It helps a practitioner or assistant find a candidate pattern; it does not prescribe a transition sequence and does not require opening C.22.2 for every problem-sounding text.
These likely practitioner entry phrases point to C.22.2:
- "We have a problem, but it is not yet clear what work should be done."
- "This looks like a ticket, but I am not sure the problem is stated."
- "A signal or anomaly keeps recurring before method selection."
- "We selected this candidate from a front, archive, pool, or selected set, but need to state why it is a problem now."
- "P2W would otherwise use 'implement X' as if it were reviewable problem-side output."
- "There is a symptom, but we do not yet know what to solve."
- "We need to know whether this problem is ready for P2W or should apply another pattern."
Direct-entry cues that are not C.22.2:
- accepted method or work planning: use
A.15; - proof, provenance, reliability, or assurance claim: use
A.10,G.6, orB.3; - local choice among explicit options: use
C.11, orG.5when set publication or selected-set semantics are live; - agent tool-call, gate, or autonomy claim: use
C.24,E.16, orA.21;ProblemCard@Contextmay only name the problem-side cue or relation named by value; - ordinary discussion with no downstream project-side move: no
C.22.2use.
First-use Thin-card test:
Given a messy signal, a practitioner must be able to produce a Thin ProblemCard@Context in under one page and correctly choose one admissible next move: P2W-ready, characterize, compare or parity, search or pool, refresh, retire, abstain/no-change, or apply the FPF pattern that governs the claim being made, relation, or boundary outside the card.
Entry relation:
The entry relation is local: C.22.2 is introduced under C.22, and C.22 names the ProblemCard@Context relation. The C.22.2 body carries the Problem frame, first-entry phrases, tempting-wrong-pattern boundaries, and first-use Thin-card test needed for ordinary discovery.
Downstream Cue Export
ProblemCard@Context exports problem-side material, not a claim over downstream use.
The compact export fields are:
- problem signal and context grounding;
- EntityOfConcern and scope cut when they change the move;
- improvement check or acceptance probe;
- readiness disposition: reviewable-only,
P2W-ready, no-work orabstain/no-change, refresh, retire, archive, or governing-pattern application cue; - source-set or representation relation reference when live;
- problem-formulation next-move reason and validation boundary when P2W relies on the card.
For P2W carry-through, use E.18.1 with the accepted problem-side material and the live relation named by the card. For selector-facing readiness and candidate TaskSignature relation, use C.22. For selected-set or search cues, use G.5 only when that relation is live. For work need, use the A.15 family only after work planning, performed work, or work-relevant source restoration is live. For any other claim being made, apply the pattern that governs it; do not treat the whole card as carrying that claim.
Consequences
Benefits
- FPF gains a clear problem-side output for problematization as the input P2W can use.
- P2W uses a typed problem-side record rather than a slogan, ticket-shaped wish, or preselected method.
C.22.2has practical value for FPF when it reduces at least one expensive failure: a wish enters P2W asTaskSignature; a preselected work item is treated as the problem; method selection happens before the problem is reviewable; a problem from a set losessetContextRef; an indicator is used without admission; problem-formulation next-move reason is cited as proof; a stale problem remains active; scalar readiness replaces set-return; or the problem-formulation next-move reason is inherited across a changed representation without the governing representation-continuity or wording-use relation.- Current archive, pool, front, shortlist, set-return, parity, refresh, evidence, and
C.29patterns are reused instead of duplicated. - The positive role of mathematical and first-principles thinking is preserved: it can find missing structure, not only check already-written mathematics.
- Characterization and parity are no longer optional background when they are prerequisites for problem reviewability.
- Representation-change relations are handled through named relation references rather than local proof inside the problem card.
Costs of Use
- A
ProblemCard@Contextadds a small writing step before P2W. The cost is justified only when the signal must become reviewable before downstream use. - The practitioner must keep the card small: preserve the split between problem, task, method, work, and result; keep
TaskSignatureminimal; and add conditional fields only when their relation is live. - For problems emitted from archives, pools, fronts, selected sets, or portfolios, the practitioner must preserve
setContextRefor the set-source relation without turning the card into a portfolio, archive, selected-set, or work-planning object. - External or source-local terms may guide recognition only when they change a concrete boundary, field, relation, or validation obligation. Otherwise they remain examples or source cues.
Relations
- Builds on:
E.2,E.9,E.10,C.2.P,A.6.P,C.16.Q,C.16,A.19,C.22,C.25,C.29,G.5,G.9,A.6.3.RT, andA.6.4. - Coordinates with:
C.11,C.18,C.19,C.22.1,A.15,A.21,E.16,G.6,G.11,A.10,B.3,E.17,E.17.ID.CR,A.6.3,F.9,E.18, andE.18.1.
C.22.2:End
MethodFamily Evidence & Maturity (Method‑SoS‑LOG)
LOG (logic) for deductive shells for admissibility First use expansion: SoS‑LOG = Science‑of‑Science LOG (LEX short‑form discipline applied).
RegistrationContext. For this pattern, RegistrationContext means the U.BoundedContext where a MethodFamily is registered (LEX D.CTX).
Builds on. G.5 (MethodFamily registry/selector), G.4 (Acceptance & EvidenceProfiles), C.22 (TaskSignature S2), C.18 NQD‑CAL (QD/illumination), C.19 E/E‑LOG (emitters/policies), B.3 (Assurance lanes & R_eff), A.10 (Evidence Graph Ref), E.10 (LEX), E.18 (GateCrossing / CrossingBundle visibility). Coordinates with. G.6 (EvidenceGraph), G.8 (LOG bundling), G.9 (Parity), G.11 (Refresh).
Problem frame
Families of methods compete inside a CG‑Frame. The selector (G.5) must admit, degrade, or abstain per family without universal scores, using typed problem descriptors and auditable evidence. Maturity of a family (how far it has travelled from “clever idea” to “run‑safe”) must be visible to LOG rules yet separate from thresholds (which live only in AcceptanceClauses, G.4).
Problem
Unstructured “readiness” stories and undisciplined evidence lead to:
- (i) Illicit scalarisation across mixed scale types,
- (ii) Prose‑only gating that a dispatcher cannot execute,
- (iii) Cross‑Context reuse without Bridges/CL, and
- (iv) Immature families leaking into production.
We need a notation‑independent LOG layer that turns TaskSignature (S2) + EvidenceProfiles into executable rules for admit / degrade / abstain, routing any CL penalties to
R_effonly (never mutating F/G).
Forces
- Pluralism vs. dispatchability. Competing Traditions expose different invariants; selection must compare without semantic flattening.
- Maturity vs. opportunity. Open‑ended exploration (E/E‑LOG) must coexist with run‑safe exploitation; immature ≠ forbidden → provide safe degrade paths.
- Unknowns (tri‑state). Missing or
unknownS2 fields must propagate explicitly to degrade/abstain/sandbox; no silent coercions. - Lexical discipline. Head‑anchoring, EntityOfConcern / Description / specification-use separation, Bridge hygiene; no tool names in Core.
Solution — Method‑SoS‑LOG: deductive shells over Eligibility & Evidence
Objects & heads (LEX/I‑D‑S)
Tech heads; Plain twins are published via UTS.
MethodFamily (registered in G.5) carries Eligibility and artefact identity; MaturityCard (this pattern) carries evidence‑aware maturity; SoS‑LOG.Rule (this pattern) is an executable rule schema that returns one of {Admit | Degrade(mode) | Abstain} for a (TaskSignature, MethodFamily) pair. Descriptions live as …Description; when harnessed they become …Spec.
Rule schema (normative)
For each MethodFamily f, author an executable rule set:
with the following branch obligations:
R0 — CG‑Spec gate (precondition, RegistrationContext). Before R1–R3, verify CG‑Spec.MinimalEvidence for every CHR characteristic referenced by f’s Acceptance/Flows in the registered U.BoundedContext; failure ⇒ Abstain with reasons (no silent sandbox). Publish the CG‑Spec ids consulted.
Rationale: selector legality requires the CG‑Spec gate to be explicit, not implicit in prose. Publish associated ReferencePlane notes alongside the consulted ids.
R0.QD — QD/OEE pre‑gates (if applicable). If S2 declares BehaviorSpaceRef/ArchiveConfig/EmitterPolicyRef or PortfolioMode=Archive, verify:
(i) CharacteristicSpaceRef characteristics are CHR‑typed, d≥2, ReferencePlane per characteristic declared;
(ii) ArchiveConfig is lawful (topology, resolution, K>0, InsertionPolicyRef, DistanceDef with edition id and declared metric/pseudometric status);
(iii) EmitterPolicyRef present (with edition id);
(iv) DominanceRegime present; if absent, default= ParetoOnly.
Failure of any ⇒ Abstain with reasons.
R1 — Admit. Admit IFF
(a) S2 satisfies Eligibility predicates of f (tri‑state aware),
(b) EvidenceProfile minima referenced by Acceptance/Flows for f are met (lanes/anchors/freshness) in the registered U.BoundedContext (post R0),
(c) all relevant CAL.AcceptanceClauses (G.4) evaluate to true under lawful CHR comparisons,
(d) any maturity gating (e.g., a floor on Maturity rungs) is expressed as an AcceptanceClause and referenced here by id (no thresholds inside LOG).
LOG never sets thresholds; it only executes and cites Acceptance verdicts.
R2 — Degrade. If (a) holds but (b) or (c) is partially satisfied or unknown, return Degrade(mode) where mode ∈ {scope‑narrow | sandbox | probe‑only} and emit scope notes (USM Scope(G), Γ_time). Record which S2 unknowns or Evidence minima caused the degrade. LOG‑Degrade never changes CHR scales or planes; it narrows Scope (G) or execution mode.
Note (CAL vs LOG). CAL‑level degrade.order (fall‑back to order‑only comparisons) is governed by G.4/CG‑Spec and is not a LOG mode. SoS‑LOG never overrides CAL outcomes; a LOG branch only narrows Scope(G) or execution mode (e.g., sandbox, probe‑only), it does not alter CHR scales or admissible orders.
probe‑only MUST cite an E/E‑LOG policy id (exploration budget) and Acceptance‑bound guards.
R3 — Abstain. If S2 violates Eligibility or R0 fails, return Abstain (with reasons). Abstain is mandatory on illegal CHR operations (e.g., ordinal means) and when Bridge/CL requirements are unmet.
R4 — CL routing. Any cross-Context or cross-plane reuse must cite Bridge ids (with loss notes). Apply Φ(CL) and (if planes differ) Φ_plane that are monotone, bounded, table‑backed; publish policy‑ids in the SCR; penalties reduce R_eff only; F/G must remain invariant.
R5 — Proof hooks. Every branch MUST cite Evidence Graph Ref (A.10), lane tags (TA/VA/LA), freshness windows, and (if bridged) Bridge ids + loss notes; the decision is SCR‑visible. When G.6 EvidenceGraph is present, also publish EvidenceGraph path id(s) for the branch (admit/degrade/abstain). No self‑evidence.
R6 — QD archive / PortfolioMode semantics (if applicable). If PortfolioMode=Archive, Admit may return a QD archive (per ArchiveConfig) instead of only a Pareto set. Unless CAL authorises DominanceRegime=ParetoPlusIllumination (policy‑id recorded in SCR), IlluminationSummary is a report‑only telemetry summary and any coverage/regret are telemetry metrics (reported) that do not affect dominance.
R7 — GeneratorFamily branches (open‑ended). If S2 includes GeneratorIntent, SoS‑LOG MUST:
(i) verify EnvironmentValidityRegion is declared and lawful;
(ii) verify TransferRulesRef exists; if unknown ⇒ Degrade(scope‑narrow) or Abstain per family policy;
(iii) treat the selection surface as pairs {environment, method}; publish coverage/regret and IlluminationSummary as report‑only telemetry (IlluminationSummary = telemetry summary; coverage/regret = telemetry metrics); dominance participation per R6.
R8 — Telemetry & Refresh hooks. On any illumination increase or archive change, publish edition increments for CharacteristicSpaceRef/DistanceDefRef and the policy‑id (Emitter/Acceptance) that caused the change; expose PathSliceId for refresh/decay in SCR.
Aphorism. “Admit on admissibility and sufficiency; degrade on uncertainty; abstain on inadmissibility.”
Maturity ladder (poset, not a scalar; Description, not Spec)
Publish a MethodFamily.MaturityCardDescription@Context (UTS enum ids; Scale kind = ordinal; ReferencePlane declared). Do not embed thresholds here; any maturity floors used for admission are authored as G.4 AcceptanceClause and referenced by id from R1.
- L0 — Anecdotal. Claims exist; lanes sparse; examples ad‑hoc.
- L1 — Worked‑Examples. Multiple worked examples with lane tags and Scope slices declared; no replication yet.
- L2 — Replicated. Independent replication(s) in distinct Context slices (publish D.CTX + UTS rows), lane separation observed, decay windows explicit.
- L3 — Benchmark‑Severe. Repeated wins or parity on community baselines or severe tests; cross‑Tradition bridges declared with loss notes.
Optional rung (for QD/OEE‑heavy families; ordinal, closed enum):
- L4 — QD‑Hardened. Archive stability under declared InsertionPolicy/DistanceDef editions; reproducible IlluminationSummary improvements under controlled budgets; OEE generators pass EnvironmentValidityRegion severe tests.
Norms. M1. The ladder is lane‑aware (TA/VA/LA) and freshness‑aware; it is not a global numeric score. Declare Scale kind=ordinal and the closed enumeration of rungs; register the enum at UTS (twin labels; editioned). M2. Transitions MUST be justified by EvidenceGraph paths (once G.6 is available) and UTS publication; missing anchors ⇒ no advance. M3. Any maturity floor used for admission (e.g., “run‑critical Context requires ≥L2”) MUST be authored as a CAL.AcceptanceClause and referenced by id from R1; SoS‑LOG does not embed thresholds. M4. Declare ReferencePlane for the MaturityCard; on ReferencePlane crossings apply published Φ_plane policy (penalty to R_eff only), with Bridge id and loss notes.
Rationale note. Treating maturity as a poset aligns with B.3’s lane calculus and avoids scalarisation across ordinal/ratio scales; assurance penalties remain on R, never F/G.
Unknowns & Shift classes (tri‑state discipline)
U1. (LEX). Enumerations for Degrade(mode) and Maturity rungs MUST be declared as closed value sets and registered at UTS (twin labels). Lexical SD (E.10) applies.
U2. Every S2 field is tri‑state; unknown MUST map to a branch (Degrade or Abstain) declared on the family (no coercions). Each branch publishes a branch‑id and (where used) a mode from a closed enum registered at UTS (LEX enum clarity).
U3. ShiftClass semantics follow C.22. If ShiftClass ∈ {covariate‑shift, concept‑drift, adversarial} or unknown, default outcome is Degrade(scope‑narrow) unless a CAL.AcceptanceClause explicitly guards the regime.
Publication & wiring
W1. Each family publishes a MaturityCardDescription@Context (UTS twin labels; ReferencePlane declared) and registers SoS‑LOG rule ids; editions are versioned and RSCR‑tested for branch‑coverage (Admit/Degrade/Abstain, unknown paths). Φ(CL)/Φ_plane policy‑ids must be present in SCR where applicable.
W2. Admissibility Ledger. Publish an AdmissibilityLedger@Context: rows = (MethodFamilyId, RuleId, MaturityRung, BranchIds, BridgeIds, ΦPolicyIds, EvidenceGraphPathIds?, DominanceRegime, PortfolioMode, Edition), UTS‑registered; this ledger is the selector‑facing export.
W3. Strategy token. Do not mint a U.Type “Strategy”; strategy remains a composition inside G.5 (Compose) under E/E‑LOG.
W4. Selector (G.5) consumes these rules; results appear in the Dispatcher Report with reasons in/out and cited anchors/bridges.
Archetypal Grounding (Tell–Show–Show)
(Plain register for pedagogy; Core remains notation‑independent per E.10/E.8.)
Show‑1 - Continuous dynamics (ODE task).
S2 excerpt. DataShape=ODE; stiff?=unknown; Size≈10^3; Objective={↓error@ratio, ↑throughput@ratio}; Constraints={safety_gate@ordinal}; Jacobian_sparsity=high; Missingness=MAR.
Families. Implicit‑BDF vs Explicit‑RK vs Symplectic.
Rules.
— Implicit‑BDF: Eligibility tolerates stiff?=unknown if Jacobian_sparsity=high (guarded precondition); MaturityCard=L3 (replicated & benchmarked). Outcome: Admit.
— Explicit‑RK: requires stiff?=false; with unknown ⇒ Degrade(sandbox) (probe).
— Symplectic: eligible only when Hamiltonian=true; here ⇒ Abstain.
Didactic anchor. This mirrors C.22’s typed‑signature discipline and CHR legality (no ordinal means; unit alignment for ratio).
Contemporary ecosystem examples of these families (post‑2015) are organised in DifferentialEquations.jl, which exposes multiple solver families under one call surface—precisely the pattern G.5 expects. (Journal of Open Research Software)
Show‑2 - Planning/scheduling (MIP task).
S2 excerpt. DataShape=MIP; NoiseModel=deterministic; Objective={↓cost@ratio, ↑service_level@ordinal}; Size≈10^5 vars; convex_relaxation=available.
Families. MILP (branch‑and‑bound), Constraint‑Programming, Heuristic meta‑search.
Rules.
— MILP: Eligibility requires convex_relaxation=available; MaturityCard=L3 in the registered U.BoundedContext ⇒ Admit.
— Constraint‑Programming: MaturityCard=L2; Acceptance demands service_level≥B (ordinal predicate). With B met but baseline parity unknown ⇒ Degrade(scope‑narrow).
— Heuristic meta‑search: MaturityCard=L1 ⇒ Degrade(sandbox) or Abstain depending on RSCR parity policy.
Didactic anchor. Selector returns a Pareto set (no cross‑ordinal weighting), as required by G.5.
Contemporary “single call / many solvers” packaging that motivates MethodFamily rows is exemplified by JuMP (2017–2022), which cleanly separates model description from solver choice. (Miles Lubin)
— DifferentialEquations.jl illustrates family‑based solver packaging (multi‑method under one interface), 2017–2024 ecosystem. (Journal of Open Research Software) — JuMP illustrates model/solver separation and registry‑like selection (2021–2022 papers, site). (Miles Lubin) — Science of Science review (2018) supports the emphasis on replication/benchmarks in maturity assessment. (Science)
Show‑3 - QD archive (policy search).
S2 excerpt. PortfolioMode=Archive; CharacteristicSpaceRef(d=2); ArchiveConfig(CVT, res=1k cells, K=1, DistanceDefRef.edition=v2, InsertionPolicyRef=dyn‑elite); EmitterPolicyRef=v3; DominanceRegime=ParetoOnly.
Rules. Admit returns an archive; illumination reported; changes to DistanceDef/Emitter editioned in SCR; dominance remains ParetoOnly.
Show‑4 - Open‑ended GeneratorFamily (POET‑class).
S2 excerpt. GeneratorIntent{GeneratorFamilyRef=GF‑01, EnvironmentValidityRegion=EVR‑A, TransferRulesRef=TR‑A, CoverageMetric=…}; PortfolioMode=Archive.
Rules. Admit yields declared sets over {environment, method}; Degrade(scope‑narrow) if TransferRules=unknown; telemetry publishes coverage/regret and IlluminationSummary with edition/policy‑id on improvements.
Bias‑Annotation
Principle‑taxonomy lenses. Universality (trans‑discipline), Didactic primacy (Tell–Show–Show), Open‑ended evolution (refresh‑ready), Lexical firewall (no tool names in Core), Notation independence. Limits: Worked examples reference widely‑used ecosystems in Plain register only.
Conformance Checklist (normative)
Consequences
- Explainable admission. Every Admit/Degrade/Abstain is backed by anchored evidence and explicit unknown handling (selector reports are SCR‑linked).
- Run‑safe pluralism. Multiple families can co‑exist with policy‑governed exploration (E/E‑LOG) and maturity‑aware gating.
- Portable governance. Bridge hygiene and CL routing make cross‑Tradition reuse deliberate and costed (penalties to R only).
Rationale
The ladder and LOG shells align with FPF’s Assurance calculus: F (form) is governed by artefact kind, G (scope) by USM slices, and R (reliability) accumulates via WLNK then Φ(CL) penalties. Treating maturity as evidence‑typed rungs—rather than a “score”—avoids illegal arithmetic and lets DesignRunTag values remain separate via DesignRunTag discipline (A.4) and explicit GateCrossings. This mirrors contemporary science‑of‑science insights: replication, benchmarking, and field health indicators are the currency of maturity, not anecdote. (Science)
Relations
Builds on: G.5 (selector consumes these rules), G.4 (Acceptance & EvidenceProfiles), C.22 (S2 typing), C.18 NQD‑CAL, C.19 E/E‑LOG, B.3 (Assurance tuple & WLNK). Publishes to: UTS (MaturityCards, rule ids), SCR/RSCR (branch coverage; parity hooks). Constrains: G.8 (LOG Bundling must cite MaturityCards), G.9 (parity harness draws baselines per rung), G.11 (refresh windows per rung & decay), G.5 (Open‑Ended Family mode for GeneratorFamily). Outcome. The pattern introduces new content (LOG shells + maturity poset + degrade modes + publication Standard) and does not duplicate CG‑Spec legality rules, CHR guard‑macros, or CAL acceptance mechanics; it integrates them into admissibility logic for MethodFamilies.
C.23:End
Agentic Tool-Use and Call Planning (C.Agent-Tools-CAL)
Type: Calculus (C) Status: Stable Normativity: Normative
Plain-name. Agentic tool-use and call planning.
Intent. Govern admissible tool-call planning and replanning under explicit budget, assurance, and policy while keeping upstream choice, pool policy, planning, and execution distinct.
Instantiates and refines Pillars. E.2 P-3 Scalable Formality, P-7 Pragmatic Utility, P-10 Open-Ended Evolution, P-11 SoTA Alignment, and the Bitter-Lesson Preference: prefer scalable, general methods that benefit from more data or compute over fragile hand-tuned heuristics when assurance and cost stay comparable.
Depends on. A-kernel (A.1–A.15) for holonic basics and Role-Method-Work separation; B.3 Trust & Assurance (F–G–R with CL penalties); E.3/E.5 (precedence and Guard-Rails); C.5 Resrc-CAL; C.18 NQD-CAL (candidate generation and declared set results); C.19 E/E-LOG (explore-exploit policies); optional Compose-CAL and KD-CAL where available.
Coordinates with. U.WorkPlan and U.PromiseContent bindings (acceptance gates), Working-Model publication discipline per B.3, and evidence or provenance (G.6).
Use this when
- one concrete choice result already exists and the next task is now how to plan, gate, sequence, and replan tool calls admissibly
- the next admissible output should be one enactment-facing
CallPlanor oneCheckpointReturn, not one more local choice result or pool-policy result - budget, assurance, and stop conditions must be visible before calls are burned
What goes wrong if missed
- calls get scheduled by ad-hoc heuristics, so the plan cannot say which budget is being burned or what event should stop or replan execution
- planning quietly collapses into execution, or execution quietly inherits unresolved upstream choice and pool-policy questions
- a successful probe is mistaken for committed rollout even though the commit trigger was never made explicit
What this buys
- one tool-agnostic planning record for admissible calls, budgets, stop conditions, and replan triggers
- one explicit enactment record with objective, budget, stop conditions, and next move
- one replayable call graph and assurance record instead of one opaque chain of tool invocations
First-minute questions
- Has one choice result already been fixed, with the accepted decision material named, so that planning may begin now?
- Which budget is being burned now: enactment budget, tool-call budget, or still one upstream probe budget?
- What event stops or replans the route?
- Is the next admissible output one
CallPlan, oneCheckpointReturn, or a neighbouring-pattern exit?
First output
The first useful output is either one enactment-facing CallPlan with the current objective, cited route descriptions, the planned budget envelope, the stop or replan condition, and the next move stated explicitly in one place, or one bounded CheckpointReturn with the current objective or task family, the burned and residual actual budget, the commit trigger, and the recommended next action stated explicitly in one place.
If that first output still cannot be written honestly, the current planning result is not finished C.24 planning yet.
Problem frame
Modern systems in agential roles increasingly rely on tool-call planning: selecting admissible tool-service routes, arranging intended call work, and replanning under uncertainty. Without a calculus:
- calls are scheduled by ad-hoc heuristics,
- budgets (compute, cost, wall-time) are implicit,
- assurance and policy provenance are lost, and
- systems in agential roles either over-constrain themselves with brittle scripts or wander without guard-rails.
This CAL provides the conceptual API for thought that lets any implementation (LLM-based, search-based, code-based, robotic) plan calls admissibly, auditably, and scalably. (Role-Method-Work alignment; didactic primacy.)
Immediate failure indicators for this pattern:
- the current planning result cannot say whether one choice result already exists,
- the current text cannot distinguish route description, call plan, and executed call work,
- the budget being burned is still only probing-before-choice budget rather than enactment or tool-call budget, or
- the next admissible output is still undefined as one enactment-facing plan, one
CheckpointReturn, or one neighbouring-pattern exit.
If the question under repair is still which fixed option should survive now, apply C.11. If it is still pool policy over several still-live candidate lines, apply C.19. If it is already public selected-set publication, apply G.5.
Problem
We need a tool-agnostic way to (i) identify admissible route descriptions, (ii) compose one call work plan that cites them, (iii) allocate an explore/exploit share, (iv) enforce budget & harm gates, and (v) replan on signals—without baking domain-specific heuristics into the core and without collapsing U.MethodDescription, U.WorkPlan, and U.Work into one object.
Forces
Solution — Signature & Realization
Types (aliases).
ATC.CallRouteDescription ≡ U.MethodDescription with accessSpec for one tool service or callable route;
ATC.CallPlan ≡ U.WorkPlan specialised for intended tool-call work; it cites one or more ATC.CallRouteDescription editions plus planned order, budget ceilings, stop or replan triggers, and next move;
ATC.CallGraph ≡ Evidence/Provenance graph over a U.Work ledger;
ATC.Policy references U.EmitterPolicyRef (E/E-LOG) and local call gates including BLP tolerances (alpha, delta).
Roles. A System in AgentialRole prepares or revises one CallPlan that cites one or more CallRouteDescription editions. Upon enactment, a Performer executes Work (calls), and Observers record Observations with acceptance checks. Route descriptions stay design-time; the call plan stays schedule-of-intent; actual call work stays run-time. (A.15 strict distinction.)
Operators (Gamma_agential; CAL, conceptual):
-
Gamma_agential.eligible(tool, TaskSignature, K_ctx) -> {true|false, notes}Eligibility gate based on capability fit, policy allow-list or deny-list, and context K (including safety constraints). -
Gamma_agential.enumerate(TaskSignature, K_ctx) -> CandidateSet<ATC.CallRouteDescription>Returns admissible callable route descriptions. It MAY delegate to NQD-CAL for heterogeneous route families and MUST apply the current E/E-LOG lens (objectives & telemetry) to tag candidates. -
Gamma_agential.plan(Objective, CandidateSet, Budget, ATC.Policy) -> ATC.CallPlanProduces one call plan that cites the selected route descriptions, declares one planned budget envelope (compute, cost, time, risk), one intended call order, and one stop or replan policy. Internal route logic remains in the cited method descriptions; the plan is aU.WorkPlanthat cites method descriptions, not a method description and not yet work. -
Gamma_agential.execute(ATC.CallPlan) -> {ATC.CallGraph, Observations}Executes with hard gates (budget, risk, constraint-fit) and logs provenance suitable for B.3 assurance reporting (design-time and run-time separated). -
Gamma_agential.replan(Signals, ATC.CallPlan, BudgetPrime) -> ATC.CallPlanPrimeTriggered by sentinel breaches, assurance drops, or policy events; preserves editioned policy, cited route descriptions, and context. -
Gamma_agential.score(Route or PlanAlternative) -> <ValueProxies, Cost, Risk, FGR_floor>Computes selection signals without illegal scalarisation across mixed scales; uses Pareto comparison under the C.19 E/E-LOG lens and leaves final dominance to declared policies.
Bounded scout/probe cycle for unfamiliar task families
When the choice result is already fixed enough that enactment planning is admissible under C.24, but the route across heterogeneous or unfamiliar callable approaches is still uncertain, the system may spend a bounded scout/probe budget before committed rollout and return one checkpoint package that compares the tested routes.
If additional probing could still change which option survives the current OptionSet, the budget is still C.11-side epistemic budget and the question reroutes upstream. If choice result is already fixed and the uncertainty is only about route or rollout shape, the budget is now enactment budget and the checkpoint belongs in C.24.
That CheckpointReturn should state the declared utility objective and current TaskFamily, the route descriptions or candidate approaches tested, the evidence on each route, the burned and residual actual budget, the recommended next action, and the commit trigger named by value that would justify leaving probe state.
A successful probe does not by itself justify a larger burn or a committed rollout. C.24 carries the CheckpointReturn record and call-plan semantics for this probe loop; A.15 carries the DesignRunTag split and E.16 carries the budget partition plus guard and ledger enforcement. Low-human-overlap approaches remain sound only while they stay tied to the declared utility objective, budget boundaries, and evidence locus explicitly.
Bridge to neighboring patterns. ProbeBudget belongs to C.11 while it means epistemic budget for further probing before choice. C.24 carries budgets once they are enactment, tool-call, or rollout budgets. If the question is still which option survives now, apply C.11; if it is now pool policy over several still-live candidate lines, apply C.19; if it is selector-facing publication of the selected result, apply G.5.
Explicit enactment result. A conformant C.24 pass should therefore leave either one enactment-facing CallPlan that states the current objective, the cited route descriptions or planned call order, the planned budget envelope, the stop or replan condition, and the next move, or one CheckpointReturn that states the current objective or task family, the burned and residual actual budget, the evidence locus, the commit trigger, and the recommended next action.
Unfinished-state rule. A C.24 result remains unfinished when it cannot say whether execution should continue now, pause at one checkpoint, or reroute, when it confuses route description with plan or plan with executed work, or when it does not state which budget is planned versus already burned and what event would stop or replan the current route.
Normative Laws (ATC-Laws).
- ATC-1 (Model-the-Call, not the App). A tool call is one Work instance that enacts a referenced MethodDescription promised by a Service; plans schedule intended calls and cite route descriptions but are neither the route descriptions themselves nor the calls. (A.15.)
- ATC-2 (Bitter-Lesson Preference). When two admissible choices are within delta (assurance) and alpha (budget), prefer the more general, scale-benefiting method whose slope vector Pareto-dominates under the declared E/E-LOG objectives; any override MUST record a BLP-waiver with expiry. (E.2; precedence governed by E.3.)
- ATC-3 (Budget & Harm Gates). Plans SHALL declare ceilings on compute, cost, wall-time, and risk; execution MUST abort or replan on breach. Actual burned or residual budget belongs in
CheckpointReturn,CallGraph, or other work-side reporting, not inside theCallPlanfield set. - ATC-4 (Explore-Share Discipline). Plans MUST declare
explore_share; defaults inherit from E/E-LOG profiles. Informative defaults:0for safety-critical or deterministic tasks;approx 0.2-0.4for ambiguous tasks with heterogeneous tool families. Promotion of illumination telemetry into dominance requires explicit policy. - ATC-5 (Provenance & Replay). Every call MUST emit a CallGraph with: Service id, cited MethodDescription edition, inputs and outputs (redacted per privacy),
CallPlanref, EmitterPolicyRef, and budget deltas. (NQD/E/E provenance fields apply when used.) - ATC-6 (Assurance-First Decisions). Selection MUST respect B.3: WLNK minima on F/R (weakest-link floors), CL penalties on integration, and no chimera scores across design-time and run-time scopes. Publish <F,G,R> for the typed claim
this plan is admissible under K,S. - ATC-7 (Notation/Vendor Independence). Core pattern text MUST NOT encode vendor-specific tokens; bindings occur in Context via Bridges/Profiles. (Lexical guard-rails.)
Planning under budget must consume the same declared doctrine
Causal action-use spec for call plans
When a tool-call plan selects observation, intervention, counterfactual-rung evidence collection, counterfactual policy conditioning, or off-policy causal evaluation work, the CallPlan carries an optional causal action-use spec and cites C.28 for the causal-use authority.
Optional CallPlan.causalActionUseSpec?:
The causal action-use tail may be omitted only when the call plan does not reach CausalUseActivation: it is not using the call sequence as causal support, not choosing between observation/intervention/counterfactual-policy regimes, and not publishing the result as causal evidence. If the plan says the call will prove, estimate, improve, prevent, or counterfactually establish an outcome, the support tail is present or the wording is downgraded.
What changes in practice: a call plan that probes, intervenes, samples, simulates, or evaluates a policy for a causal purpose must state CausalUseClaimKind and the causal regime of the planned action before execution evidence is treated as support for a causal-use claim.
What this does not authorize: [C.24](/generated/patterns/C.24) does not estimate effects, prove identification, certify fairness, or turn simulation output into realized counterfactual-rung evidence; it governs admissible call planning and redirects causal-use support to [C.28](/generated/patterns/C.28).
- Planning should reuse the declared source set, decision lens, probe budget, and stopping condition rather than creating one planning-only choice semantics.
- Budgeted sequencing may mix exploitation and exploration, but the declared source set and the declared reason for the next probe must stay recoverable.
- Use planning language such as
probe next,hold as archive,apply [G.5](/generated/patterns/G.5) for shortlist publication, orstop for nowonly when the relevant lens-side reason is stated directly. explore_share,backstop_confidence, probe budgets, and replan triggers are planning harmonization terms for that same declared choice doctrine.- They may regulate sequence and stopping; they do not redefine
Front,Archive,Shortlist, orSelectionSlot. - If the next planned move is one public
ShortlistorRankedShortlist,[C.24](/generated/patterns/C.24)should name that as a neighbouring-pattern exit to[G.5](/generated/patterns/G.5), not emit the selector artifact itself.
Policy profile and BLP precedence
ATC-Policy fields (conceptual).
{ backstop_confidence, explore_share, risk_bound, cost_ceiling, time_ceiling, tie_breakers, novelty_quota?, wild_bet_quota?, stop_conditions, BLP_delta_alpha, BLP_delta_delta } - realised by referencing an E/E-LOG EmitterPolicy and adding Bitter-Lesson-Preference clauses. Defaults inherit from C.19; any deviation is editioned.
BLP precedence. In conflicts with tactics that hard-code narrow scripts, the Bitter-Lesson Preference applies subject to E.3/E.5 precedence. Where scripts encode safety-critical gating or regulatory compliance, scripts prevail unless the governing context publishes the override rationale, expiry, measured hazard avoided, and planned re-evaluation window.
Didactic quick card
Agentic Call Plan (public field set).
Objective - Context(K) - RouteRefsInOrder[edition-pinned] - BudgetEnvelope{time_budget, compute_budget, cost_budget, risk_limit} - PolicyRef - Explore-share - StopConditions - ReplanConditions - BLP tolerances - BLP waiver (if any) - Assurance<F,G,R|K,S> - Provenance ids
Explicit enactment outputs and closure rule
A finished C.24 pass should publish one enactment result rather than one vague statement that the system now has a plan.
Two output shapes are admissible here:
- one enactment-facing
CallPlan; or - one bounded
CheckpointReturnwhen probing is still the admissible next move inside enactment planning.
A CallPlan should state at least these fields:
- current objective;
- cited route descriptions or planned call order;
- active policy or planning state;
- planned budget envelope or reserved budget;
- stop or replan condition;
- next move if the current plan is accepted now.
A CheckpointReturn should state at least these fields:
- current task family or objective;
- candidate routes tested so far;
- evidence on those routes;
- burned and residual actual budget;
- recommended next action;
- explicit commit trigger.
A compact result may therefore look like:
or:
Close as one enactment-facing CallPlan when the choice result is already fixed enough that execution order, gating, and replanning are now the call-planning question. Close as one CheckpointReturn when bounded scout/probe work is still admissible inside enactment planning. Return to the neighbouring pattern when the result has actually fallen back into local choice, pool policy, or selector-facing publication.
If the result still does not state what should execute now, what budget is planned or already burned, and what event stops or replans the route, it is still unfinished [C.24](/generated/patterns/C.24) work.
Worked closure slice
Two short contrasts keep the closure law practical.
Known route, execution should begin now.
When the objective and route are already fixed enough, C.24 should close as one enactment-facing call plan:
Unfamiliar route, one bounded scout pass still admissible.
When the route is still uncertain inside enactment planning, [C.24](/generated/patterns/C.24) should close as one CheckpointReturn:
The practical distinction is simple: if route order and budgeted execution are already the call-planning question, emit one CallPlan; if bounded scout work is still the call-planning question inside planning, emit one CheckpointReturn.
-
Research-assistance system in agential role. Task: answer a novel technical question. Candidate tools: retrieval, structured web search, code runner, table or plot generator. Plan: cite route descriptions for
search,retrieve,synthesize, andcode_check; declareexplore_share approx 0.4; replan on sentinellow_R. The admissible structure here is one declared budget envelope, one explicit route order, and one visible replan trigger. -
Program-repair system in agential role. Task: propose a patch against a failing test suite. Candidate tools: repo introspection, static analyzer, unit runner. Plan: keep repo-introspection, patch-application, and targeted-test route descriptions distinct; use scout quota across patch families before committed rollout.
-
Lab-automation system in agential role. Task: adjust a wet-lab protocol under drift. Candidate tools: planner, pipetting controller, spectrometer, Bayesian optimizer. Plan: a bounded probe or pilot can inform the route, but committed rollout waits for the declared commit trigger and assurance floor.
Bias-Annotation
Lexical firewall and notation independence apply; no vendor tokens; mixed-scale characteristics are never averaged; route descriptions remain distinct from U.WorkPlan, and both remain distinct from executed U.Work; a successful probe remains distinct from committed rollout until the commit trigger is satisfied.
Conformance Checklist
- CC-ATC-1 - Declared separation.
ATC.CallRouteDescriptionis aMethodDescription;ATC.CallPlanis aU.WorkPlanthat cites route descriptions; execution isWork; acceptance is viaU.PromiseContent. No method-side route logic or actual burn is smuggled into theU.WorkPlanfield set. - CC-ATC-2 - Budgets on record. Time budget, compute budget, cost ceiling, and risk limit exist ex ante; stop conditions are listed.
- CC-ATC-3 - E/E policy.
EmitterPolicyRef(or equivalent) andexplore_shareare editioned and logged. - CC-ATC-4 - Assurance tuple. Publish the typed claim
Plan admissible under K,Swith<F,G,R>and CL penalties traceable in theCallGraphSCR. Design-time and run-time never merged. - CC-ATC-5 - BLP waiver discipline. Any heuristic override against a general method includes expiry and re-evaluation date.
- CC-ATC-6 - Provenance minimum. Record
{PromiseContentRef, CallPlanRef, MethodDesc.edition, EmitterPolicyRef, DescriptorMapRef? (if NQD), DistanceDefRef? (if NQD), TimeWindow, Seeds?, Dedup?}. - CC-ATC-7 - Notation independence. No vendor tokens in conceptual text; bindings via Bridges or Profiles only.
- CC-ATC-8 - BLP tolerances declared.
alpha/deltatolerances are present inATC.Policyor referenced via the activeE/E-LOGprofile. - CC-ATC-9 -
CheckpointReturnfor bounded specialization. When one route still uses scout/probe discipline on a new task family, it SHALL publish oneCheckpointReturnwith candidate routes, evidence, burned/residual actual budget, next action, and commit trigger; a successful probe alone never counts as committed rollout. - CC-ATC-10 - Recoverable enactment closure. When
C.24returns one enactment-facing call plan or oneCheckpointReturn, theCallPlanSHALL state current objective, route refs in order, planned budget envelope, stop or replan condition, and next move, whileCheckpointReturnSHALL state burned/residual actual budget plus next action and commit trigger. - CC-ATC-11 - Neighboring-pattern boundary. If the question under repair is still fixed-option choice, pool policy over several live lines, or selector-facing publication,
C.24SHALL applyC.11,C.19, orG.5rather than restating those patterns. - CC-ATC-12 - Role discipline. User-facing prose and emitted artifacts SHALL speak about systems in agential roles or equivalent typed performers, not one generic
agenthead, when that generic head would blur the holder kind. - CC-ATC-13 - Causal action-use spec. If one
CallPlanselects observation, intervention, counterfactual-rung evidence collection, counterfactual policy conditioning, or off-policy causal evaluation for a causal purpose, it SHALL carryCallPlan.causalActionUseSpec?withtargetCausalityLadderRung,causalUseClaimKind: CausalUseClaimKind, supported use, unsupported use, and aC.28causal-use support reference rather than letting call-planning vocabulary certify the causal claim.
Common Anti-Patterns and How to Avoid Them
- Treating route description as plan. Avoid by keeping callable logic in
ATC.CallRouteDescriptionand keepingATC.CallPlanas oneU.WorkPlanthat cites it. - Treating planning as execution. Avoid by publishing actual burn only through
CheckpointReturn,Work, andCallGraph, not inside theCallPlanfield set. - Burning enactment budget while the question under repair is still upstream choice or pool policy. Avoid by rerouting unresolved fixed-option choice to
C.11and unresolved live-pool governance toC.19before building one call plan. - Counting a successful probe as committed rollout. Avoid by publishing one
CheckpointReturnwith a visible commit trigger instead of smuggling rollout through a positive scout result. - Hiding stop conditions or replan triggers. Avoid by making them part of the public
CallPlanfield set rather than one private implementer intuition.
Consequences
- tool use under systems in agential roles becomes inspectable as one admissible plan, not one opaque sequence of calls
- downstream work receives one explicit enactment record with objective, route refs, budget envelope, stop conditions, and next move
- the cost is stricter discipline around route-description versus plan versus work separation, explicit budgets, and visible policy state before execution begins
Rationale
C.24 exists because tool-use systems fail in a distinctive way: they can look adaptive while actually hiding route choice, budget burn, stop conditions, and replan logic inside one opaque execution chain. A separate planning calculus is therefore necessary so that tool use remains auditable, replayable, and governable before the first irreversible call is made.
Source-use role/currentness for this rationale: these rows are current-practice pressure and BLP-neighbour alignment, not a standalone SoTA-Echoing table. A current tool-use or agentic-loop source becomes load-bearing only when it changes one CallPlan, CheckpointReturn, budget, stop or replan condition, BLP waiver, or relation row.
- Contemporary tool-use systems in agential roles work best when planning, feedback, and replanning stay explicit rather than collapsing into one brittle script. The practical implication is to publish one
U.WorkPlanthat cites route descriptions and carries stop or replan triggers before execution. - Post-2015 search, optimization, and agentic systems also show that bounded probing is useful but dangerous when it silently becomes commitment. The safeguard here is the explicit
CheckpointReturnplus visible commit trigger and one explicit split between planned budget envelope and burned actual budget. - Scaling-first practice favors general, learnable methods over fragile hand-tuned tactics when assurance and cost remain comparable. The practical implication is not blind optimism but disciplined BLP: when a narrow heuristic wins, record the waiver, expiry, and re-evaluation window.
Relations
C.27 temporal-claim relation.
-
C.27 may flag: a tool-use plan claiming that tool use changes debugging, learning, search, repair, rollout, narrowing, uncertainty reduction, stabilization, or stop/replan rate.
-
This pattern keeps: call planning, tool-use sequence, budget, stop/replan, and work trace.
-
Non-admissible use: tool-call count, more context, or faster narrowing is effort evidence or input evidence at most; it is not task-success, reasoning-quality, evidence-quality, repair-success, cost, or validity-window evidence by itself.
-
Exit: a speed-up claim names task outcome, evaluation harness, repair-success evidence locus when claimed, cost or budget condition, validity window, stop or replan condition, and non-admissible use as a benchmark claim; C.24 remains the tool-use pattern.
Builds on: A.15 Role-Method-Work alignment (planning vs execution vs service), B.3 Trust and Assurance (F-G-R with CL), C.5 Resrc-CAL, C.18 NQD-CAL (candidate generation and declared set results), and C.19 E/E-LOG (policies). Coordinates with C.28 when a call plan is used to observe, intervene, collect counterfactual-rung evidence, condition a counterfactual policy, or evaluate a policy for causal-use support. Coordinates with E.23 when a repeated quality-improvement loop is enacted through tool-using agents: C.24 carries call plans, checkpoint returns, tool-call budgets, stop or replan conditions, and the separation among CallRouteDescription, call plan, and executed work; it does not restate the E.23 loop method, BLP comparison and cost discipline, or pattern-quality or DRR-adequacy object-under-improvement evaluations. Constrains: any U.PromiseContent used as a tool MUST expose acceptance conditions and observation hooks sufficient for B.3 reporting. Enables: human-facing Working-Model publication forms with policy and assurance disclosures while keeping design-time and run-time separated.
C.24:End
Q-Bundle: Authoring "-ilities" as Structured Quality Bundles
Type: Definitional (D) Status: Stable Normativity: Normative unless marked informative
Plain-name. Quality-bundle normal form.
Builds on.
A.2.6 (USM scope algebra), A.6.1 U.Mechanism, C.16 MM-CHR, A.18 CSLC, B.3 Trust & Assurance Calculus.
Coordinates with.
C.17-C.19 for quality-related measurement families, C.16.P when characteristic/scale/score wording is not yet recoverable, A.15 for method, work-plan, or work-occurrence gating, and C.16.Q for quality/evaluative-characterization wording before the endpoint is one explicit characteristic, Q-Bundle, objective, or another governing pattern.
Problem frame
Engineering quality language repeatedly drifts into one of two invalid simplifications: either every -ility is treated as one scalar characteristic, or every engineering-quality statement is left as loose evaluative prose. A conforming engineering corpus therefore needs a uniform discipline that keeps admissible measurements, scope declarations, mechanisms, statuses, and evidence visibly separated without inventing a new kernel ontology.
Problem
Without a normal form for engineering quality families:
- Composite families are scalarized illegally. Terms such as resilience, security, or maintainability are treated as if one number exhausted them.
- Scope is confused with measurement.
A claim's
ClaimScope/WorkScopeis spoken of as if it were a magnitude rather than a USM set-valued applicability object. - Mechanism and status are mistaken for evidence or metrics. Presence of redundancy, certification, or audit controls is described as if it were itself a measurement value.
- Guards become unstable. Admission checks silently mix scope coverage, numerical thresholds, mechanism presence, and evidence freshness in one phrase.
- Evaluative routing remains underspecified.
After
C.16.Qrepairs a bare quality term, orC.16.Prepairs characteristic, scale, score, metric, or proxy wording inside that term, the admissible endpoint is unclear unless FPF distinguishes single-CHR cases from bundle-shaped quality families.
Forces
Solution - Q-Bundle normal form
C.25 defines a lightweight authoring normal form for engineering quality families. A publisher facing a quality term first decides whether the intended endpoint is:
- one admissible CHR characteristic, or
- one structured quality bundle whose measurable slots, scope slots, mechanisms, statuses, and evidence remain explicit.
Endpoint split
Use a single U.Characteristic when the quality claim is genuinely one measurable aspect with one declared scale and ordinary CHR legality.
Use a Q-Bundle when the quality family depends on more than one of the following:
- one or more measurable characteristics,
- a declared claim/work scope,
- mechanism or status requirements,
- qualification windows,
- evidence anchors that are not reducible to one scalar.
Q-Bundle shape
Q-Bundle := <Name, Carrier, ClaimScope?, WorkScope?, Measures[CHR], QualificationWindow?, Mechanisms?, Status?, Evidence?>
The pattern adds no new Kernel kind for these slots. It reuses existing kinds and keeps them in one disciplined authoring structure.
Field roles
- Name. The engineering quality family label, such as
Availability,Resilience, orSecurity. - Carrier. The bearer of the quality claim: typically
U.System,U.PromiseContent, orU.Episteme. - ClaimScope / WorkScope. USM sets over
U.ContextSlicedescribing where the claim holds or where the capability can deliver. These are set-valued scope objects, not characteristics. - Measures[CHR]. One or more admissible CHR characteristics, each bound to one declared scale.
- QualificationWindow. The temporal policy under which the quality claim is judged.
- Mechanisms / Status. References to
U.Mechanismrealizations, control presences, certification states, or similar gating structures. They are not measurements. - Evidence. Anchors that justify the measures, mechanisms, or scope claims.
Guard reading
A conforming quality guard typically has the conceptual form:
Scope covers TargetSlice AND Measures meet thresholds AND QualificationWindow is valid AND required Mechanisms/Status are present
This keeps coverage, thresholding, and admissibility in separate typed slots instead of hiding them inside one quality adjective.
Archetypal Grounding
Tell. A quality family is not automatically one metric. Sometimes it is one characteristic; often it is a structured bundle whose measurable, scope, and mechanism slots must remain explicit.
Show (Availability). Availability may be authored as one CHR-centric bundle with AvailabilityRatio[%] as the principal measure, a declared service/time scope, and explicit redundancy mechanisms. The measure is scalar; the scope is not.
Show (Resilience / Security). Resilience or security usually requires more than one measure, plus scenario scope, mechanism references, and qualification windows. Treating either as one scalar "quality score" erases the bundle structure that the claim actually needs.
Bias-Annotation
The pattern biases authors toward explicit decomposition. That bias is intentional. It is better to publish a visibly structured quality bundle than to gain short-term convenience by collapsing scope, measures, and mechanisms into one overloaded quality label.
Conformance Checklist
CC-C.25-1If an engineering quality claim is intended as one measurement characteristic, the publisher SHALL bind it to one namedU.Characteristicwith one declared scale.CC-C.25-2If the claim requires multiple measures, scope slots, mechanism slots, status slots, or qualification windows, the publisher SHALL use a Q-Bundle rather than an undeclared scalar surrogate.CC-C.25-3ClaimScopeandWorkScopeSHALL remain USM set-valued scope objects; they MUST NOT be treated as ordinal or numeric quality levels.CC-C.25-4Mechanism or status slots MUST NOT be conflated withMeasures[CHR].CC-C.25-5Any scalar comparison or thresholding inside a Q-Bundle SHALL apply only to declared CHR measures, not to scope slots.CC-C.25-6Cross-context penalties and bridge losses SHALL route toRperB.3/F.9; they MUST NOT silently alter the type of the bundle'sF, scope, or CHR type authority.
Common Anti-Patterns and How to Avoid Them
Consequences
Rationale
Engineering quality language is useful precisely because it groups recurring concerns under memorable family labels. The same grouping becomes dangerous when those labels are mistaken for one universal metric. C.25 preserves the family labels but forces the underlying structure to stay typed and visible.
SoTA-Echoing
Contemporary engineering quality practice routinely mixes service-level measures, capability windows, scenario envelopes, mechanism presence, certification state, and evidence traces. C.25 adopts that practical richness but refuses the common shortcut of compressing the whole family into one undefined score.
Relations
E.21 specialises the Q-Bundle normal form for FPF pattern-quality claims. C.25 remains the general endpoint for engineering quality families; E.21 is the endpoint governing pattern when the quality claim evaluates one FPF pattern version as action-guiding FPF text.
C.27 temporal-claim relation.
-
C.27 may flag: a quality-family statement where agility, resilience, adaptability, recovery, or robustness depends on braking, redirection, stabilization, recovery rate, or rhythm under effort.
-
This pattern keeps: quality-family bundle structure, scope, mechanism/status slots, evidence, qualification window, and failure mode.
-
Non-admissible use: temporal adequacy is not quality adequacy; speed, recovery, or rhythm becomes quality content only when C.25 declares the quality family, scope, mechanism/status slots, evidence, and failure mode.
-
Exit: use C.27 to state the dynamic slot only when it changes admissible use; do not make every quality bundle carry dynamic slots.
-
Builds on:
A.2.6for scope algebra,A.6.1for mechanism references, andC.16 / A.18for CHR legality. -
Coordinates with:
C.2.2a,A.16.0,B.3for assurance penalties,A.15for gate use,C.16.Pfor unresolved characteristic, scale, score, metric, or proxy wording inside a quality-family statement,C.16.Qfor overloaded quality or evaluative-characterization wording,C.17, C.18, and C.19for adjacent quality-family measures, andF.9 / F.9.1when cross-context bundle comparison or bridge stance annotation is required. -
Constrains: engineering quality authoring whenever a quality term would otherwise drift between single-CHR and composite-bundle readings.
Endpoint role in evaluative classification
Within language-state trajectories and their endpoint docks, C.25 is the system-side endpoint pattern for engineering quality families after overloaded quality wording has been repaired by C.16.Q and any hidden characteristic, scale, score, metric, or proxy wording has been repaired by C.16.P. qualityTermAscription(...) may remain a transitional repair record, but it is not the universal resting place when the admissible endpoint is a single Characteristic, a Q-Bundle, or an explicit objective-oriented quality bundle.
Decision Test: Single Characteristic or Bundle?
The most common authoring failure is not in the bundle syntax itself; it is in choosing the wrong endpoint shape. The quickest useful test is to ask what would make the quality claim false.
Use one U.Characteristic when
A quality claim should terminate in one admissible CHR characteristic only when all of the following hold together:
- one measurable aspect is actually doing the evaluative work,
- one declared scale is enough to compare relevant cases,
- the bearer and scope are already clear without introducing extra quality slots,
- mechanism or status presence is not itself part of the core quality head,
- and downstream gates can read the claim without needing a bundle decomposition.
Examples include a narrowly declared AvailabilityRatio[%], a specific latency percentile, or one response-time threshold under one fixed window.
Use a Q-Bundle when
A quality claim belongs in C.25 when one family label is standing over several distinct typed concerns, for example:
- several measures are needed together,
- scenario or claim scope is load-bearing,
- mechanism presence or certification state constrains admissibility,
- qualification windows alter the reading materially,
- or one scalar head would hide which part of the family is actually failing.
The bundle is not a fallback for laziness. It is the explicit authoring form for claims whose truth conditions are already composite.
Borderline cases
Some quality families contain both a bundle-shaped form and a narrow single-characteristic form. For example, a service team may use:
- one CHR characteristic for a very narrow uptime commitment, and
- one Q-Bundle for the broader service-availability family that includes scope, windows, failover mechanisms, and evidence.
This is legitimate as long as the text states clearly which head is currently in play. The single-characteristic form does not replace the broader family; it selects one evaluative slice of it.
Slot Interaction Law
The practical payoff of C.25 is not just that it names the slots. It also stabilizes how those slots interact.
Scope and measure remain orthogonal
ClaimScope and WorkScope answer where or under what contextual slice the quality claim holds. Measures[CHR] answer how a measurable aspect behaves. A broader scope is not a larger measurement value; a narrower scope is not a penalty value. Scope is governed by set inclusion and coverage, not by scalar order.
Mechanism and status are gating slots
Mechanisms and statuses may be load-bearing for admissibility, but they do not become measurements merely because they matter. A redundancy mechanism may be required for claiming a resilience bundle, and a certification status may be required for external publication, yet neither slot is itself the Measures[CHR] head.
This matters because many quality arguments fail by turning mechanism presence into an implicit hidden score.
Qualification windows are not decorative
A quality claim that depends on rolling windows, observation periods, maintenance intervals, or disruption horizons must publish that temporal qualifier explicitly. If the truth of the quality claim changes when the window changes, then the window is part of the declared bundle record rather than optional commentary.
Report-only summary proxies
A publisher may compute a report-only summary proxy for convenience, for example a compact quality summary proxy value or an oversight-facing composite score. Such a proxy is admissible only if:
- it is explicitly declared as a report-only proxy,
- the underlying bundle slots remain visible,
- and no norm, gate, or bridge silently substitutes the proxy for the bundle itself.
This prevents a convenience summary from becoming a covert replacement for the typed quality claim.
Worked Quality Families
Availability family
A narrow service commitment may use AvailabilityRatio[%] as one characteristic. A broader availability family usually still needs a bundle because the claim depends on:
- declared service and time scope,
- observation and qualification window,
- one or more mechanism slots such as failover or redundancy,
- and evidence tying the measurement to declared observation conditions.
The bundle form makes it possible to distinguish "the measurement fell short" from "the measurement is fine but the declared mechanism prerequisite was absent".
Resilience family
Resilience is almost never one scalar. It commonly binds together:
- disruption scenario scope,
- restoration-related measures such as
MTTR,RTO, orRPO, - recovery mechanisms and preparedness states,
- and scenario-specific evidence about drills, restorations, or incident traces.
Trying to compress this into a single resilience value usually destroys the difference between fast recovery in one scenario and structural fragility in another.
Security family
Security claims routinely combine:
- trust-zone or attack-class scope,
- measurable characteristics such as patch latency, control coverage, or response interval,
- control-set and certification slots,
- and evidence from audit, observation, or incident review.
C.25 therefore treats broad security-family claims as bundle-shaped unless the claim has already been narrowed to one admissible CHR characteristic.
Maintainability and evolvability
Maintainability or evolvability claims often drift into pure rhetoric. In C.25, they become usable only when the publisher separates:
- the declared scope of systems or change classes,
- the measurable slots (for example change lead time, defect reintroduction rate, restoration interval, review load),
- the enabling mechanisms (modularity rules, test harnesses, interface discipline),
- and the window or evidence conditions under which those measures were observed.
This is exactly the kind of quality family that looks scalar in speech but turns composite once the claim is made explicit.
Authoring and Review Guidance
For authors
Authors should begin with the question: what is the actual head of this quality claim? If the truthful answer is "several measures plus scope plus mechanism constraints," start with a bundle and narrow only if a later slice genuinely deserves one CHR head.
A useful authoring order is:
- name the family label,
- identify the bearer,
- publish scope,
- publish measures,
- add mechanism/status slots,
- publish qualification window,
- bind evidence,
- and only then consider whether a report-only summary proxy is needed.
For assessors
A checking reader should ask:
- whether the chosen endpoint shape is admissible,
- whether any scope slot has been smuggled into scalar language,
- whether mechanism presence has been mistaken for a metric,
- whether the window is truly optional or actually load-bearing,
- and whether any summary proxy is trying to replace the underlying bundle.
In practice, most defects are visible as soon as the checking reader asks what exactly one reported number stands for.
For gate designers and assurance leads
Gate designers should resist writing guards against vague family labels such as resilience must be high. A conforming gate should instead name the relevant bundle slots:
- coverage over the target slice,
- threshold satisfaction on declared measures,
- qualification-window validity,
- and any required mechanism or status slots.
This keeps the gate auditable and prevents later disputes about what the family label was supposed to mean.
Migration and Boundary Notes
Migration from bare quality requirements
Legacy phrases such as quality requirement, security requirement, or availability requirement should not survive as bare heads when the underlying endpoint is actually a characteristic or bundle. The migration rule is:
- choose the endpoint shape first,
- then bind the requirement or commitment to that explicit head.
C.16.Q may still be the entry repair for overloaded quality wording, and C.16.P may repair characteristic, scale, score, metric, or proxy wording inside the same statement; C.25 is the resting place only after the engineering quality family has been made explicit.
Boundary to assurance penalties
Cross-context transport, bridge loss, or plane mismatch do not change whether the endpoint is one characteristic or one bundle. Those effects route to R and its penalties. C.25 therefore should not be used to hide assurance degradation inside the quality-family ontology.
Boundary to publication convenience
A report, summary publication, or executive summary may expose only one slice of a Q-Bundle, but the underlying authoring structure remains the bundle. Publication convenience is not a reason to collapse the ontology at the source.
Serviceability and supportability
Serviceability, supportability, and adjacent family labels often look simple in prose but become composite as soon as operational use is declared. An admissible bundle for this family may need:
- support-scope slices,
- measured restoration or service intervals,
- mechanism slots for support mechanisms, access discipline, or replacement procedures,
- and evidence from service traces or support records.
The lesson is the same as elsewhere in C.25: once the truth of the family claim depends on several typed contributors, the bundle should stay explicit.
Boundary to description-side and selector-side evaluation
C.25 is for engineering quality families whose bearer is a system-side, promise-side, or explicit quality-bearing artifact. It does not automatically cover:
- viewpoint-fit or grounded architecture adequacy claims, which may belong in viewpoint or evaluative-ascription patterns,
- or selector/objective heads where quality means use-value under a search or portfolio frame.
This boundary matters because the same word quality appears across those zones. C.16.Q repairs overloaded quality wording, C.16.P repairs characteristic, scale, score, metric, or proxy wording when that is the hidden object, and the resting endpoint depends on what is actually being evaluated.
Bundle Decomposition and Comparison Law
Local decomposition rule
A family label may remain stable while its internal slots differ materially across contexts. Conforming comparison therefore starts by aligning the bundle decomposition: scope slots with scope slots, measure slots with measure slots, mechanism/status slots with their own kinds, and evidence/window slots with their own kinds. Comparing one bundle's measure directly to another bundle's mechanism claim is a category error even if both sit under the same family label.
Narrow slice versus whole family
A context may admissibly extract one narrow slice from a broader Q-Bundle and publish that slice as a single CHR characteristic, but the publication should say that the slice is only one member of the broader family. What is not admissible is to report the slice as though it exhausted the entire family claim.
Cross-context family comparison
Cross-context comparison of quality families should proceed through explicit bundle alignment and, where needed, F.9 bridge discipline on the relevant heads or slots. The bundle ontology stays in C.25; bridge loss, translation-relation adequacy, and cross-context penalties remain outside the bundle itself.
Gate, Proxy, and Reporting Discipline
Report-only summary proxy
A context may publish a summary proxy for reporting convenience, but the proxy remains secondary to the Q-Bundle. The proxy should state what it summarizes and what it leaves out. No report-only proxy may replace the bundle in norms, gates, or endpoint ontology.
Gate binding rule
When a gate uses a quality family, the gate should bind to explicit bundle slots: declared scope, specific measures, qualification window, and any required mechanism or status slots. Gate authors should not rely on the family label alone, because labels invite different local decompositions.
Roll-up caution
A summary publication or review may aggregate several bundle instances, but the roll-up must remain visibly downstream from the underlying bundle structure. If the roll-up begins to drive local engineering decisions directly, the governing bundle slots should be surfaced again rather than hiding them behind one summary score.
Review Matrix and Migration Tests
A checking reader can test a Q-Bundle with five questions:
- Is the endpoint shape admissible? One characteristic where one characteristic is live, one bundle where several typed contributors are load-bearing.
- Are scope and mechanism slots kept distinct from measures?
- Is any summary number trying to replace the bundle?
- Would a gate still be auditable if the family label were removed?
- If the claim crosses contexts, is bridge work kept in
F.9rather than hidden inside the family bundle?
Migration from legacy family prose should therefore recover bundle shape first, then choose whether any narrow slice deserves a separate CHR publication.
Viability-envelope, quantum-like, and temporal-claim relation note
Use C.25 when the question under repair is a quality bundle, "-ility" decomposition, proxy metric, trade-off, gate, or report. A viability claim should not become quantum-like merely because it involves uncertainty, feedback, several qualities, or changing operating conditions; a temporal claim should not become a Q-Bundle merely because the working phrase mentions speed, cadence, rhythm, or recovery.
Practical reading:
- Decide whether the quality claim is one admissible Characteristic or a Q-Bundle.
- If it is a bundle, name bearer, scope, measures, qualification window, mechanisms/status, and evidence.
- Ask whether the claim is really viability-envelope work: protected promise/function, viable region/bounds, several variables, disturbance, sensors/probes, actuators, boundary conditions, adaptation cost, and failure mode.
- If one proxy or bundle is enough, stay in
C.25. - If the envelope reading depends on a probe, sensor, frame, export, action, coarsening, or boundary interaction that changes what can be said admissibly, the remaining viability-envelope question belongs with
C.26.3. - If the sentence is an intervention-sensitive temporal claim about rate-change under effort, window, resistance, or cadence, inspect
C.27for the smallest honest temporal-claim adequacy card before using the quality label for action. - State viable region/bounds, trade-off, admissible use, non-admissible use, and failure mode before viability language is used for action.
Minimum viability-envelope note:
Useful outputs:
- a Q-Bundle when the issue is quality decomposition;
- a
C.26.3envelope-regulation note when probes/actuators/boundary conditions change the admissible viability reading; - a
C.27temporal-claim adequacy card when rate-change, effort, window, resistance, or cadence changes the admissible use; - no QL wording when ordinary quality-bundle, proxy, feedback, or control tuning carries the work.
C.25:End
Quantum-Like Modeling Lens
Type: Architectural pattern Status: Stable Normativity: Normative unless explicitly marked informative
Problem frame
FPF already has local patterns for decisions, boundaries, bridges, work, measurement, search, and quality bundles. Some real architecture cases still break when those patterns are applied as if every read, question, dashboard, workshop, bridge, or simplified representation were a passive view of a stable state.
Use this pattern when the ordinary FPF pattern remains active but misses one extra representational issue: the act of probing, framing, exporting, comparing, or coarsening changes what can admissibly be inferred from the represented state. The useful move is small. Add a quantum-like mathematical lens only where it tells the user how to avoid a concrete representational mistake.
This pattern is not a physics claim. In FPF, quantum-like names a detached mathematical and representational lens, comparable in role to probability, calculus, optimization, or state-space modeling. It is cheap as a QL-lite note and expensive only when the claim becomes reusable law, assurance evidence, empirical superiority, formal reconstruction, or ontology.
Unifying principle: use QL to cheapen the first correct move, not to make the first mention more expensive.
What this lens buys in practice:
Plain glosses:
quantum-like: a detached mathematical / representational lens, not a claim about what the target is made of.probe: an operation that both produces an output and may change the represented state or admissible use of the output.frame: a probe frame, measurement frame, comparison frame, or model frame. If the text means FPF semantic context, sayU.BoundedContextor bounded context explicitly.state: the represented condition relevant to the current decision, not a generic newU.Statekind.state update: a typed update claim. When load-bearing, say whether the update is a system change, work change, epistemic reading update, carrier update, emitted-output update, formal model update, or update-law change; do not let one phrase carry all of them.context: not a shorthand for frame. Use it only in explicit FPF terms such asU.BoundedContext, bounded context, or cross-context bridge.export: a carried representation whose use may lose timing, coordination, role, use conditions, confidence, or relation structure.coarsening: an intentionally cheaper state representation with declared loss and reopen conditions.
Phrase hygiene:
Example style:
Informative bilingual translation note:
Problem
Without this pattern, teams make five recurring mistakes.
They treat a probe as a neutral read when the probe changes later answers or behavior. They combine two posterior-looking outputs as if both came from one shared sample space. They export a team state, dashboard value, or context-map result as if it were a faithful-enough export for the intended use. They compress a large state representation for speed and then reuse the shortcut outside its admissible-use scope. They let words such as quantum, entanglement, collapse, or field import ontology that the model never earned.
The result is not merely loose wording. The team may approve a release from a dashboard whose publication and operational use changed the work it was supposed to report, average incompatible risk estimates, copy a local decision into another bounded context after the bridge lost the live coordination, or claim a speed gain because the representation was low-bit, linear, symbolic, or compressed without naming the loss.
Forces
Solution
Start with the ordinary FPF pattern. Add this lens only when ordinary wording would falsely treat a probe, question, metric, dashboard, API read, workshop, bridge, comparison frame, or coarsened representation as passive, stable, jointly comparable, or faithfully exportable. The main entry question for the whole cluster is: "What should the user do with this lens so that the representational mistake does not arise here?"
Action path:
- Name the ordinary FPF pattern that already carries the baseline question.
- Name the concrete representational mistake: passive read, shared comparison frame, false faithful-enough export claim for the intended use, exact-state shortcut, or unsupported coarsened representation.
- Test the positive QL cue and the negative activation list.
- Fill the QL-lite card if the cue survives.
- Emit one practical result: use ordinary pattern only, add QL-lite note, select one C.26 child pattern as the applicable pattern body, add evidence and assurance, or drop the QL wording.
- Escalate only when the claim becomes reusable, assurance-bearing, formal, empirical-superiority-bearing, or ontology-bearing.
C.26 ordinary output: produce one of these, then stop or select the neighboring applicable pattern body:
- no C.26 pattern selection because the ordinary FPF pattern carries the case;
- QL-lite note with the minimum sufficient field set;
- use the ordinary pattern that carries the question under repair;
- escalation to evidence, assurance, or formal-model work when the claim’s evidence or authority demand requires it.
Keep the entry cost proportional to the use. A QL situation does not begin with a full record.
Do not make the decision-bearing or assurance record the ordinary entry cost. The everyday pattern move is a small recognition note plus a bounded action.
Affordability by working-reader situation:
Do not require a practitioner or architect to produce a researcher-level record when the claim is only recognition or local-working support condition.
Checking discipline:
Cluster maxim: quantum-like wording does not raise assurance load by default. Assurance load rises only when the claim itself is reused, contested, evidence-bearing, release-facing, high-impact, comparative, formal, or ontology-bearing.
Pattern-local-note dependency rule: when an existing FPF pattern cites C.26 or a C.26.* child, the pattern's ordinary action guidance and conformance text remain primary. The citation means only: if a residual QL cue remains after the ordinary FPF pattern has carried its part, use this lens for that residue. It does not make every citing-pattern case depend on the full C.26 record or on every child-pattern semantic.
QL boundary selection:
The default output is a QL-lite card:
Decision diff examples:
Minimum viable QL-lite note:
This is enough for QLP-0 / QLP-1 ordinary working use unless the claim is reused, externalized, contested, assurance-facing, comparative, formal, or ontology-bearing.
Use the [C.11](/generated/patterns/C.11) mini-output discipline across the cluster: finish with one next move, not with an interesting label.
Retire QL when the residual cue disappears. If [A.6](/generated/patterns/A.6), [F.9](/generated/patterns/F.9), [C.16](/generated/patterns/C.16), [A.10](/generated/patterns/A.10), [B.3](/generated/patterns/B.3), [A.15](/generated/patterns/A.15), [C.25](/generated/patterns/C.25), [A.6.3.CSC](/generated/patterns/A.6.3.CSC), [A.6.3.RT](/generated/patterns/A.6.3.RT), or another ordinary FPF pattern now carries the claim without a false passive read, false shared frame, false faithful export, unsupported distributed-state reading, or QL-specific coarsening residue, remove QL wording from the active working note or pattern prose.
Use the lens only after the activation test survives both sides. QL remains active only when the ordinary FPF pattern cannot admissibly treat the output as a passive read, a shared-frame comparison, a faithful-enough export, or a use-scope-preserving state representation. Bridge loss, feedback, coupling, openness, compression, and coarsening are not QL cues unless they change the admissible state, probe, frame, or export reading for the current use. C.26 carries the full negative activation catalog; child and citing patterns should repeat only the local non-trigger that is frequent enough to matter for that pattern.
Canonical cue grammar:
Practical payoff in ordinary prose:
- "the metric reported readiness" becomes "the metric publication or measurement regime functioned as a probe interaction that changed readiness behavior";
- "two risk scores disagree" becomes "the two scores may come from non-shared comparison frames with no declared admissible joint comparison route";
- "the workshop discovered the split" becomes "the workshop was a probe whose order and framing changed alignment and local meaning";
- "the team knows" becomes "coordinated work evidences a low-recoverability distributed-state reading with carriers, window, and export loss";
- "this smaller model is enough" becomes "this coarsened state representation carries only its declared admissible-use scope and reopen condition".
Inherited QL boundary
Invariant QL-NQ: within FPF, quantum-like is a detached mathematical and representational modeling lens. It may use quantum-theory-derived structures such as contextual probability, Hilbert-like state spaces, non-Boolean logic, instruments, operator-like update, order effects, open-system descriptions, or incompatible probes.
Quantum-like does not assert physical quantum substrate, microscopic quantum process, qubits, quantum computation, physical entanglement, nonlocal causality, literal collapse, mystical observer effects, social substance, or collective mind. A physical-quantum claim is a different claim and needs separate physical or empirical support outside this pattern cluster.
Child patterns inherit QL-NQ. They should not restate the global boundary as local guidance unless they are repairing a specific confused phrase.
Pattern selector
Causal-use exit before QL retention
Before retaining QL-lite, QL-NQ, or a quantum-like framing for a claim being made, check whether the actual question is intervention, counterfactual comparison, causal effect, causal fairness, causal policy, off-policy causal evaluation, or realizability of counterfactual-rung data. If so, redirect the claim/question to C.28 before any quantum-like retention.
What changes in practice: "the model is quantum-like" cannot be used to skip causality-ladder rung declaration, causal identification, causal evidence support basis, or counterfactual sampling realizability.
What this does not authorize: [C.26](/generated/patterns/C.26) does not become a causal-use pattern and does not treat counterfactual material as a quantum-like subcase; it keeps quantum-like modeling discipline and sends causal-use support to [C.28](/generated/patterns/C.28).
Use this as a diagnostic sequence before retaining QL wording. DDD, microservice domain analysis, and ordinary boundary/bridge patterns stay first for bounded contexts, service cuts, integration points, and exported meaning; QL is retained only when a workshop, probe, export, or frame changes what can admissibly be inferred.
- Measurement, metric, scale, method, evidence, or assurance load goes first to measurement and evidence patterns:
[C.16](/generated/patterns/C.16),[A.10](/generated/patterns/A.10), or[B.3](/generated/patterns/B.3). - Bridge, translation, publication, rendering, or exported-loss question goes first to bridge and publication patterns:
[F.9](/generated/patterns/F.9),[E.17](/generated/patterns/E.17), or[E.17.EFP](/generated/patterns/E.17.EFP). - Causal intervention, command, work enactment, role alignment, or routine question goes first to work and authority patterns:
[A.15](/generated/patterns/A.15)and the relevant neighboring pattern. - Boundary/interface wording, service-interface typing, bridge endpoint, relation precision, or lexeme-collision question goes first to boundary and language patterns:
[A.6](/generated/patterns/A.6),[A.6.B](/generated/patterns/A.6.B),[A.6.P](/generated/patterns/A.6.P),[A.7](/generated/patterns/A.7),[E.10](/generated/patterns/E.10), or[F.18](/generated/patterns/F.18). - Quality, viability, feedback, or control-tuning question goes first to quality, dynamics, and measurement patterns:
[C.25](/generated/patterns/C.25),U.Dynamics, and[C.16](/generated/patterns/C.16). - Suspect option menu, unknown alternative, local plateau, basin movement, or candidate-generation question goes first to search and regime patterns:
[B.5.2](/generated/patterns/B.5.2),[C.18](/generated/patterns/C.18),[C.19](/generated/patterns/C.19), or[A.19](/generated/patterns/A.19). - Retain QL only for the remaining declared state, probe, export, frame, open-information-system, or coarsening cue.
C.26 does not choose among options, generate missing alternatives, or settle [C.11](/generated/patterns/C.11) decision quality. It can mark that the available readings sit in non-shared comparison frames or lack a declared admissible joint comparison route; the choice/search output still belongs to [C.11](/generated/patterns/C.11), [B.5.2](/generated/patterns/B.5.2), [C.18](/generated/patterns/C.18), [C.19](/generated/patterns/C.19), or [A.19](/generated/patterns/A.19).
Escalation by evidence or authority demand
Math reveal sequence:
Most C.26 use should stay at M0 or M1.
Evidence-use class is escalation by consequence, not an admission gate. QLP-0 or QLP-1 is the ordinary entry class for quick QL-lite use; QLP-2 / QLP-3 appears only when the claim is reused, contested, decision-bearing, assurance-facing, high-impact, or made part of reusable pattern action guidance or conformance text.
Evidence-use class scales by use:
Recognition case matrix
State-representation coarsening card
This card discipline is active when a fuller state representation is too detailed, unstable, unavailable, or expensive for the current bounded decision and a reduced-detail state representation is useful only under a declared QL cue. It is not a standalone speed pattern, not a standalone coarsening pattern, and not a new state-representation kind.
C.26 does not carry ordinary coarsening. A.6.3.CSC carries controlled coarsened rendering; A.6.3.RT carries same-selected-entity representation-scheme transition; A.19, U.Dynamics, modeling patterns, and ordinary abstraction patterns carry ordinary state abstraction. C.26 carries only the residual QL cue plus the loss/use boundary for this shortcut.
Question-to-pattern map:
Start with this coarsening mini-card:
For the representation shortcut itself, fill this coarsening card:
If the text claims that the shortcut is faster, cheaper, more compressed, more linear, more stable, or more tractable, add this claim declaration. The claim is separate from the coarsening card: the card controls the reduced-detail state representation; the declaration controls the performance or tractability assertion.
No speed, compression, linearity, or tractability claim follows merely from the words linear, operator, quantum-like, quantized, tokenized, low-bit, finite-dimensional, compressed, or symbolic.
If the shortcut carries a transition-speed, stabilization, or control claim, add the optional dynamics card:
Archetypal Grounding
Tell: A reliability dashboard says "Ready" after a new readiness metric is published. Before publication, teams treated incidents as local triage. After publication, they change priorities to satisfy the metric, while unmeasured recovery work gets delayed.
Show, System side: the delivery system, teams, dashboard, incident-handling cycle, and release decision form one operational situation. The dashboard is not only a window; it is part of the work ecology because it changes attention, escalation, and behavior.
Show, Episteme side: the QL-lite card says the ordinary FPF patterns are C.16, A.10, B.3, and C.25. The QL cue is an instrument-like metric publication that changes readiness behavior. The minimal admissible output is "treat the dashboard as probe-coupled evidence, not release proof." The local stop is release approval without fuller evidence.
Second grounding: a large state-space model is too expensive for triage, so the team uses four typed operational states. That shortcut is admissible only if the source model, state reduction, loss, admissible use, and reopen trigger remain explicit. The shortcut helps choose a work response; it does not prove the four states are the full system.
Bias-Annotation
This pattern intentionally biases authors toward ordinary FPF patterns before QL vocabulary. That bias prevents prestige use of the word quantum-like and keeps the mathematical lens useful rather than theatrical.
It also biases authors toward minimal admissible outputs. In ordinary use, the right result is often "apply the neighboring FPF pattern", "do not merge these comparison frames", "mark this dashboard as an instrument", or "return to the source representation if the shortcut fails", not a new doctrine about the target system.
The pattern may under-admit some mathematically valid QL models when the author cannot explain the practical payoff. That is acceptable for FPF pattern prose: a model that cannot say what it buys the working reader is not ready for Core-facing law.
Conformance Checklist
Common Anti-Patterns and How to Avoid Them
Near-miss taxonomy:
Cluster conformance scenarios
Use these as quick applicability tests. A good C.26 use leaves one practical output, not just a clever label.
QL can also generate better design options:
AI and LLM work-cycle route examples
LLM-mediated work cycles often create the same representational mistakes C.26 repairs: false passive read, false faithful summary, false shared comparison frame, and shortcut without loss/use declaration. This does not make LLMs quantum-like.
Consequences
This pattern gives FPF a single place to define QL-lite and the inherited non-quantum boundary. That reduces repeated disclaimers in child patterns and makes ordinary use lighter.
Cluster success criteria:
The best outcome may be fewer but better QL mentions.
Do not retrofit QL into existing FPF examples merely because they involve measurement, context, service boundaries, feedback, coarsening, or distributed work. Patch only examples where a named false passive read, false shared frame, false faithful export, low-recoverability distributed-state reading, or QL-specific coarsening residue changes the decision.
The cost is authoring discipline. A writer must name the ordinary FPF pattern, the actual QL cue, and the local stop. That is more work than saying "context matters", but it prevents the most expensive mistake: treating a changed, thinned, or frame-bound representation as if it were a full state.
The state-representation coarsening card makes speed and tractability claims more honest. It lets teams use cheaper state descriptions while keeping loss and reopen conditions visible.
Rationale
The cluster stays small on purpose. A single giant "Quantum-Like Architecture" pattern would hide distinct modeling concerns. Scattering the lens across local pattern bodies would repeat the same definition and boundary notes. This modeling-lens pattern lets the common lens live once while child patterns carry their own primary EntityOfConcern and admissible move.
The key rule is simple: quantum-like is not quantum. Once that is typed, FPF can use the math lens normally. The lens earns its keep when it prevents a passive-read, one-space comparison, faithful-copy, or exact-state shortcut.
Evidence is not prestige. Literature supports the modeling move; local evidence supports the local state, export, or probe claim. A source anchor can justify why order effects, contextual probability, instrument-like readings, or open-system modeling are legitimate modeling patterns. It does not prove that this dashboard changed this team's state, that this workshop changed a boundary, or that this export lost the live coordination. That proof or evidence still belongs under A.10, C.16, A.15, B.3, and the ordinary pattern for the local claim.
SoTA-Echoing
Selected operational source anchors
This section is intentionally short. It carries operational anchors for using the pattern, not an expanded bibliography.
Relations
C.28 causal-use relation.
- C.28 governs causal-use question, causality-ladder rung, causal estimand, identification, counterfactual sampling realizability, causal evidence support basis, causal-use verdict, causal fairness, causal policy, and causal method parity.
- This pattern keeps residual quantum-like probe, frame, order, export, or coarsening discipline after ordinary causal-use explanation has been tried.
- Non-admissible use: intervention, causal effect, causal fairness, causal policy, counterfactual comparison, causal method parity, or counterfactual-rung-data realizability do not activate quantum-like modeling by themselves.
- Exit: when the question under repair is causal, cite
C.28before retaining QL-lite or QL-NQ.
C.27 temporal-claim relation.
-
C.27 may flag: ordinary state/rate/rate-change, effort-window, rhythm, braking, coasting, or intervention-timing claims before any quantum-like cue is considered.
-
This pattern keeps: residual quantum-like probe, frame, order, export, or coarsening discipline.
-
Non-admissible use: discreteness, finite differences, typed states, state-space reduction, tokenization, dashboards, probes, measurement plans, speed words, rhythm words, or Dyn2 words do not activate quantum-like modeling by themselves.
-
Exit: use C.27 and ordinary FPF patterns first; use C.26 only where residual probe, frame, order, export, or coarsening cue remains after those relations are named.
-
Builds on:
E.8,E.9,C.11,C.16,C.25,A.6,A.6.P,F.9,A.15,A.10,B.3,A.3,C.18,C.19,A.19. -
Constrains: QL wording in
C.26.1,C.26.2, andC.26.3. -
Carries: state-representation coarsening as a card inside
C.26:4.5, not as a separate pattern. -
Does not cover: physical quantum claims, a generic probe ontology, a generic state ontology, a service/cell pattern, or a field-like synchronization pattern.
-
Name boundary:
Quantum-Like Modeling Lensis a pattern label for a modeling lens and modeling discipline, notU.Lens, notQuantumLikeArchitecture, notQuantum Substrate, notQuantum Ontology, and not a universal architecture doctrine.
C.29 mathematical-lens use relation
C.26is a C.29-compatible specialization for quantum-like modeling. It carries a pre-filled adequacy profile for QL work: preserved structure includes order, probe, and contextual-probability effects when supported; lost structure includes physical quantum ontology; the canonical stop condition remainsQL-NQ. A QL-lite note does not inherit a blank fullMathLensUse.FullCard. A full C.29-compatible profile is needed only when the QL claim is decision-bearing, reusable, publication-bearing, assurance-bearing, bridge-bearing, or formal-model-bearing.
C.26:End
Probe-Coupled Boundary Interaction
Type: Architectural pattern Status: Stable Normativity: Normative unless explicitly marked informative
Problem frame
Use this pattern when a boundary read, meeting, metric, API read, dashboard, workshop, survey, split, bridge, or message is being used as if it merely revealed or transferred state, but the probe or interaction changes the represented state enough to alter the architecture decision.
This is the main everyday entry into the QL cluster. It is useful because many teams already know how to talk about boundaries, interfaces, metrics, and workshops. The missing move is to notice when the act of reading or crossing the boundary participates in the state being read.
Plain glosses:
passive read: treating a workshop, metric, dashboard, API read, survey, or message as if it only reports state.probe-coupled: the read/export/intervention participates in the represented state enough to change the lawful decision.coupling channel: the concrete workshop, metric, message, API, dashboard, meeting, bridge, or event stream through which the effect travels.export loss: what the carried output cannot faithfully carry into another context or decision.
Problem
Architecture work often treats boundary interactions as passive. A dashboard "shows readiness". A workshop "discovers the context map". An API read "returns state". A meeting "collects alignment". A message "transfers a decision".
Sometimes that is good enough. Sometimes it is false for the current decision. Publishing the dashboard changes readiness behavior. Running the workshop changes alignment and local meaning. Reading the API changes timing assumptions. Sending the message changes trust, escalation, or error handling. Splitting the service changes the viability envelope that the split was meant to optimize.
When the false passive reading survives, the team may keep the wrong boundary, trust the wrong export, combine incomparable outputs, or redesign the system around an artifact that partly created what it reports.
Forces
Solution
Before accepting a passive read or unjustified lossless-transfer reading, ask whether the probe or interaction changed what the output may admissibly mean.
C.26.1 is active only when the interaction both participates in the represented state and its output is being used as evidence, export, comparison input, or decision input as if it were passive. Mere behavior change, ordinary feedback, or ordinary influence is not enough.
A probe-coupled interaction may be useful and intentionally state-shaping. The repair is not to avoid it; the repair is to stop using its output as if it were a neutral pre-probe read.
Start with this recognition note:
Use the fuller decision-bearing record below when the boundary result will be reused, contested, used as evidence, or used to change an architecture decision.
Full decision-bearing record:
Activation boundary
This pattern is active only when the interaction both participates in the represented state and its output is being used as evidence, export, comparison input, or decision input as if it were passive. A passive-read, unjustified lossless-transfer, one-way-message, or ordinary-bridge treatment must be materially false for the current decision.
Ordinary influence is not enough. A meeting that changes attention is ordinary work unless the meeting output is later used as a passive reading of alignment. An API call that is a mutating operation by its interface semantics is ordinary service/API semantics unless the call result is used as a neutral state export. A feature flag that changes behavior is ordinary intervention unless the flag readout is being used as evidence of the state it changes.
Performative prediction is also an important ordinary rival. If a prediction, score, or metric changes behavior because people act on it, but no incompatible probe frame, order-sensitive reading, contextual-probability cue, or instrument-like state/export support load remains, try performative-prediction analysis and the ordinary C.16, A.10, and B.3 patterns first. Keep C.26.1 only for the residual probe admissibility question.
Finish conditions
The pattern emits one of these results:
Probe-coupled context-cut worked use slice
This worked use slice is not a standalone pattern. It tests DDD and bounded-context work when the context cut is not only discovered but also changes meaning, coordination, export validity, or viability.
Ask: was the bounded-context cut merely discovered, or did the workshop, dashboard, API extraction, bridge, split, merge, or orchestration change alignment, ownership, vocabulary, export validity, or viability?
Boundary interaction under concern and operational sequence
The boundary interaction under concern is a boundary interaction used as evidence, export, comparison input, or architecture decision input. The interaction may be a meeting, question sequence, dashboard, metric, API read, survey, workshop, event stream, canary, test harness, service split, bridge, message, or management review. The pattern is active only when that interaction participates in the represented state enough that passive-read wording or unjustified lossless boundary-to-decision inference would change the decision.
The pattern governs one move: convert an apparently passive boundary read into a typed probe-coupled boundary decision. That decision says what the interaction read, what it changed, what the output can support, what it cannot support, and which neighboring FPF pattern takes over if the question is really bridge, measurement, evidence, work, decision, or viability.
Action path:
- Name the boundary or relation being crossed.
- Name the probe lane, including the concrete artifact or work act that produced the output.
- State the false passive reading: what the team would have assumed if the probe were only a window.
- State the pre-probe hypothesis and the observed or inferred post-probe state.
- State the evidence carriers and uncertainty posture.
- State the export loss, memory, order effect, or frame effect that makes the output not faithful enough for the declared use.
- Choose the finish result: keep boundary with probe note, redesign probe, order, or frame, redesign bridge or export, change the split, merge, or orchestration, or apply a neighboring FPF pattern.
Required output: produce a probe-coupled interaction reading, a corrected use of the output, and, when it would reduce the problem, a redesign or decoupling move for the probe, order, frame, bridge, metric, dashboard, API read, or boundary interaction.
This sequence is deliberately small. It is the boundary analogue of the C.11 local choice pass: the pattern should end with a usable result, not with a richer vocabulary label.
Well-formed probe-coupled boundary state
A probe-coupled boundary decision is usable only when the record states all of the following:
- the boundary, context bridge, service interface, team boundary, role relation, authority relation, or system edge involved;
- the probe lane and output carrier;
- the state reading before the interaction and the state reading after the interaction;
- the state-change evidence, including traces, changed labels, changed priorities, changed timings, changed routines, changed bridge fields, or changed downstream decisions;
- the local stop condition: which use the output does not support without another pattern;
- the neighboring FPF pattern that would carry the other claim.
The record is unfinished when any of these remains true:
- the output is named, but the operation that produced it is hidden;
- the operation is named, but the state that changed is not named;
- the state changed, but the decision that changes because of that fact is not named;
- the bridge/export loss is stated only as a vague warning rather than as a concrete non-admissible use;
- the same interaction is alternately treated as evidence, command, measurement, and bridge without role split.
The minimal admissible output is often enough: "this dashboard value is probe-coupled evidence for readiness behavior under window W"; "this workshop work changed alignment and therefore the workshop note cannot be treated as passive discovery"; "this API read is a non-neutral observation under these interface semantics"; "this context cut needs both F.9 bridge loss and C.26.1 probe-coupling treatment."
Probe, observable, output, and carrier split
Do not identify the thing being asked with the method that asks it, the output that appears, or the output carrier.
This split prevents a common mistake: "the dashboard says ready" hides at least four objects. The dashboard definition, the displayed result, the behavior it changes, and the readiness decision are distinct.
Reroute and disambiguation guide
Use this guide when a draft says that a boundary, system, team, or service is "coupled", "aligned", "interacting", "measured", "exported", "synchronized", or "read".
When relation wording is load-bearing, do not mint a relation token here. Keep the sentence as local explanatory prose or apply A.6.P or F.18 to reusable relation work.
Positive examples and near misses
The positive examples are intentionally ordinary. QL value here is not exotic formalism; it is noticing that a read, metric, workshop, or interface often participates in the state it later claims to report.
Evidence posture for probe-coupled claims
Use the least-committing evidence posture that still supports the intended use.
Do not make QLP-3 the ordinary entry cost. Most practical C.26.1 use lives at QLP-0 or QLP-1, with escalation only when the output is reused or carries higher consequence.
Archetypal Grounding
Tell: A team runs a service-boundary workshop after a series of incidents. The first map says "Payments is separate from Checkout". A week later, incident triage and backlog priorities have changed because the workshop reframed payment failure as a customer-promise risk.
Show, System side: the teams, services, dashboards, event stream, workshop format, and escalation routine are part of the boundary situation. The workshop is not only a carrier of information; it changes alignment and future work.
Show, Episteme side: the minimal evidence-bound claim is not "the workshop discovered the true topology." It is "the workshop work functioned as a probe lane that changed the represented boundary state and exposed export loss across Checkout and Payment." The next admissible move is a boundary or probe decision plus F.9 bridge notes.
Bias-Annotation
This pattern biases authors against passive-reading convenience. That bias is useful when dashboards, workshops, surveys, and API reads are treated as if they carry state without changing it.
The pattern also biases authors against overusing QL. It keeps ordinary intervention, ordinary message passing, ordinary bridge loss, ordinary API semantics, and ordinary work enactment with their existing FPF patterns when no probe-coupled reading remains.
Conformance Checklist
Common Anti-Patterns and How to Avoid Them
Consequences
This pattern makes boundary decisions more honest. It turns "the workshop showed the split" into "the workshop both showed and changed the split-relevant state." It turns "the dashboard says ready" into "the dashboard is probe-coupled evidence with a limited decision use."
The cost is that some familiar artifacts lose false authority. Dashboards, workshops, surveys, API reads, and messages remain useful, but they no longer get to pretend they are always neutral windows.
Rationale
The pattern exists because boundary work is where the QL lens becomes practically visible fastest. Teams already experience dashboard effects, workshop effects, order effects, and bridge loss. The pattern gives those experiences a lightweight, typed, ordinary-pattern-compatible form.
The pattern is not a generic interaction theory. It is a boundary/probe repair for cases where passive read or unjustified lossless-transfer reading is materially false.
SoTA-Echoing
Worked-use-slice discipline from these rows:
- start from the ordinary FPF pattern before QL wording;
- show the concrete operation that produced the output;
- show the state update or export loss that changes the decision;
- keep relation tokens local unless
A.6.P/F.18gives them a reusable declaration; - keep source-formalism language as modeling support, not as pattern-body ontology.
Relations
- Builds on:
C.26,A.6,A.6.B,A.6.P,F.9,A.15,C.16,A.10,B.3,C.25,A.1.1. - Coordinates with:
C.26.2when coordinated work evidences a non-exportable distributed state;C.26.3when the boundary interaction changes a viability envelope. - Carries: a worked use slice inside
C.26.1:4.3, not a standalone pattern or relation token. - Does not mint:
U.Probe, a new boundary kind, or reusable relation predicates. - Name posture:
Probe-Coupled Boundary Interactionnames a boundary and probe relation, notEntangled Boundary,CoupledBy(...),Interaction Field,State-Changing Communication, or a reusable relation token. Relation wording remains local untilA.6.PandF.18ratify it.
C.26.1:End
Enacted Distributed State Evidence
Type: Architectural pattern Status: Stable Normativity: Normative unless explicitly marked informative
Problem frame
Use this pattern when coordinated work, behavior, or trace patterns give evidence that a team, organization, service mesh, market, or other collective system is acting from a state that no single participant report, survey, policy sentence, dashboard, or API export faithfully carries.
The pattern supports only a minimal evidence-bound claim. It lets an author say that coordinated work, behavior, or trace patterns are consistent with a distributed-state reading during a declared window, while keeping the claim tied to carriers, probes, rival explanations, and export loss.
Plain glosses:
collective bearer: the declared team, organization, service mesh, market slice, or otherU.Systemwhose coordinated work, behavior, or trace pattern is being read.coordinated work or behavior: role-work, service behavior, market participant traces, routine, commitment, artifact use, or coordinated action.distributed-state reading: a minimal evidence-bound interpretation of coordinated work or behavior, not a new hidden group entity.carrier: a log, trace, artifact, commitment, routine, dashboard, report, API response, or document that grounds but does not equal the state.faithful-enough export: a representation good enough for the current decision; when it is not faithful enough, state what was lost and why.
Problem
Teams often need to talk about latent alignment, readiness, market posture, service-mesh behavior, or an enacted "we already decided" before one explicit representation exists. Without a pattern, they oscillate between two bad options.
One option is magic language: "the organization knows", "the culture decided", "the market wants", or "the service mesh understands". The other option is false reduction: a survey answer, policy sentence, dashboard, or report is treated as the whole state.
Both fail. Coordinated behavior may evidence a real working state, but it does not automatically identify a durable mind, internal representation, causal mechanism, or faithful-enough export for the intended use.
Forces
Solution
Model the claim as evidence-bound U.Episteme over a declared collective U.System. Do not make the distributed state a bearer-independent thing. Do not treat a survey, dashboard, report, or API response as the state itself.
If the bearer is a market slice or service mesh, declare whether it is a collective U.System, delivery system, trace population, or evidence set. Do not infer systemhood from coordinated-looking traces alone.
The primary evidence family is coordinated work, service behavior, market participant traces, distributed cognition, routine dynamics, team cognition, work traces, and socio-technical evidence. QL enters only when probe, frame, export, incompatible read, or carrier/export structure that is not faithful enough for the declared use changes the admissible state reading.
The canonical EDSE move is to separate the factorable part from the coordination residue before making the minimal state reading:
- state what ordinary routines, policies, incentives, shared stimuli, dashboard-following, or copied artifacts explain;
- state what the carriers show;
- state what residue remains as a minimal state reading;
- state what action this residue supports.
Start with this recognition note:
Use the fuller EDSE record below when the reading will change coordination, be reused, be contested, support evidence, or leave the immediate local discussion.
Full EDSE record:
Minimal claim principle
Preferred wording stays close to observed work:
- "During window W, the incident-response organization acted consistently with a rollback-readiness posture, evidenced by release timing, escalation criteria, and shared trace use."
- "The service mesh exhibited a coordinated throttling regime under policy P, evidenced by route changes and saturation traces."
- "Market traces support an expectation-shift claim under probe Q, with media amplification still a rival explanation."
Avoid wording that asserts a heavier claim, such as "the organization decided", "the market knows", or "the team has a distributed mind", unless another FPF pattern and evidence requirement independently support it.
Finish conditions
This pattern emits one of these results:
Rival explanation rule
Before using this pattern, name the principal ordinary rivals:
Export-loss discipline
The phrase "not faithfully exportable under current probe and bridge conditions" is supported only when the text says:
- what export was attempted;
- what would have counted as faithful enough for the current decision;
- what state, coordination, evidence path, timing, role alignment, option structure, survivor relation, or use limit was lost;
- whether the loss comes from bridge, measurement, representation, audience, timing, state change, or another cause;
- whether a more discriminating probe, bridge, representation, or time window could produce a higher-fidelity export.
Compound-state decomposition card
When the distributed-state reading is load-bearing, state the decomposition explicitly. Its practical purpose is the canonical EDSE move: ordinary rivals first, carriers second, coordination residue third, admissible use or action invitation fourth.
Evidence-bound state reading and claim floor
The evidence-bound state reading is an evidence-bound U.Episteme reading over coordinated work, behavior, or trace patterns by a declared collective U.System. The pattern does not govern an inner group entity, a culture substance, a market mind, a hidden service intelligence, or a reusable kernel state kind.
The minimal state-reading move is to turn coordinated work, behavior, or trace patterns into the minimal useful state reading while keeping the reading bound to:
- the collective bearer and its boundary;
- the observed work and evidence carriers;
- the time window and persistence support;
- the probe or export conditions;
- the ordinary rival explanations;
- the current export loss and higher-fidelity export possibility;
- the next neighboring FPF pattern if a claim requiring additional evidence is needed.
This pattern is useful because many real work states are enacted before they are articulable. A team may behave as if a release freeze exists before any single person states it cleanly. A service mesh may exhibit one routing posture before any one dashboard carries the whole situation. A market may shift expectations before any one survey faithfully exports the shift. The pattern lets FPF say that much, and no more, without pretending that one carrier is the state.
Operational evidence sequence
Action path:
- Name the collective bearer as a declared
U.Systemboundary, not a bare social label. - Name the coordinated work, behavior, or trace pattern being read through
A.15: actions, routines, commitments, role-work, service behavior, market participant traces, artifacts, or timing. - Name the evidence carriers through
A.10so the reading is inspectable. - State the time window, persistence support, decay/refresh condition, reprobe cost, and ordinary rival explanations.
- Name the candidate state reading only as a minimal evidence-bound
U.Epistemereading. - State the attempted export and what it lost.
- State the minimal supported claim, the supported action or use it carries now, and the other uses that remain unsupported by this reading.
- Add
B.3assurance only when consequence level, audit, release, or accountability use demands it.
Required output: produce a minimal evidence-bound distributed-state reading, the time window that bounds it, the live rival explanations, and the supported bounded action or use that follows from that reading.
The pass is complete only when the resulting sentence can survive without magical collective wording. A good output sounds like:
During incident window W, the incident-response organization acted consistently with rollback-readiness posture P, evidenced by deployment queue changes, escalation messages, rollback artifacts, and support-routing changes; this reading is not faithfully exported by survey S because S loses timing, role-work, and trace linkage.
That sentence is narrower than "the organization decided", but it is much more useful. It supports adjusting incident communication and release-triage posture during window W; it does not support a durable culture claim or release-readiness assurance claim.
Well-formed EDSE record
A usable EDSE record has this shape:
The syntax is illustrative. The content is not optional when the state reading is used for a decision.
Well-formedness constraints:
collectiveBeareris a declared collective system, not a metaphorical subject.evidenceCarriersare inspectable publication units, traces, records, commitments, logs, or work-result records.timeWindowbounds the claim; persistence beyond that window needs its own support.ordinaryRivalsinclude at least the principal policy, incentive, routine, shared stimulus, dashboard-following, copied-artifact, or social-desirability explanation that could explain the same coordination.minimalSupportedClaimstates only what survives after rivals and export loss are named.unsupportedUsenames the neighboring claim or use that the current claim does not carry without applying the neighboring FPF pattern governing that claim that governs that claim.
Carrier, probe, report, and state split
The pattern keeps four objects separate:
A survey can be an evidence carrier and a probe. It is not the distributed state. A policy can be a carrier or a routine explanation. It is not automatically evidence that everyone shares one state. A dashboard can be a carrier, a probe, and a behavior-changing instrument. It is not automatically faithful enough for the intended use.
Case bank and near misses
Evidence posture and confidence
EDSE claims become useful when the text says how much consequence the evidence can carry.
For QLP-0 or low-consequence QLP-1, do not force persistence, decay, or reprobe-cost fields when the claim is explicitly momentary and the bounded action is local. Name the bearer, carriers, window, minimal reading, rival, practical change, and local stop; add the fuller temporal fields only when reuse, contest, or consequence makes them load-bearing.
The ordinary EDSE claim is minimal but actionable. It says: "this coordinated work or behavior supports this bounded reading for this use." It does not say: "the collective has one hidden durable state that a report can copy."
Archetypal Grounding
Tell: During an incident, several teams independently stop non-critical releases, reroute support, and prepare rollback evidence before any single manager issues a written decision. Later, a survey asks whether "we had decided to freeze release", and answers conflict.
Show, System side: the collective bearer is the incident-response organization during a declared incident window. Its carriers include deployment logs, meeting records, escalation messages, rollback preparation, support routing, and release queue changes.
Show, Episteme side: the supported claim is minimal. The organization acted consistently with a release-freeze readiness posture during window W. The claim does not say every participant knew the same proposition or that the coordination exists apart from the declared evidence carriers. A management directive, playbook, or dashboard effect remains a rival unless evidence narrows it.
Bias-Annotation
This pattern biases authors toward minimal evidence-bound claims and explicit evidence. That may feel conservative, but it makes distributed-state language usable without magic.
It also biases authors to keep primary grounding in distributed cognition, team cognition, organizational routines, socio-technical work, and evidence practice. The QL lens is secondary and only becomes active when probing, exporting, or comparing the state changes or loses load-bearing structure.
Conformance Checklist
Common Anti-Patterns and How to Avoid Them
Consequences
This pattern lets FPF discuss enacted collective states without mysticism. It gives authors a disciplined way to use traces, routines, coordinated work, and export loss in one minimal claim.
The cost is that many attractive claims become narrower. That is the point. Minimal evidence-bound claims are often more useful than confident but ungrounded stories.
Rationale
Existing FPF patterns can carry parts of the support requirement, but no single ordinary pattern makes the combined minimal distributed-state claim easy to write. A.15 carries work, A.10 and B.3 carry evidence and assurance, F.9 carries export loss, and C.16 carries formal measurement. C.26.2 coordinates those neighboring-pattern applications for the specific case where coordinated work evidences a non-articulated state.
SoTA-Echoing
Worked-slice discipline from these rows:
- ground the claim in coordinated work before QL vocabulary appears;
- state the evidence carriers and time window before stating the state reading;
- name rivals before retaining a distributed-state claim;
- treat survey/report/dashboard outputs as carriers or probes, not as the state;
- escalate to measurement, evidence, assurance, or authority patterns when the use requires measurement, evidence, assurance, or authority support.
Relations
- Builds on:
C.26,A.15,A.10,B.3,F.9,C.16,E.17.EFP,C.11. - Coordinates with:
C.26.1when the probe changes the state being evidenced;C.26.3when the coordinated state is part of viability-envelope regulation. - Does not mint:
U.DistributedState, a bearer-independent group entity, or a durable state beyond declared evidence and time window. - Name posture:
Enacted Distributed State Evidencenames an evidence-boundU.Epistemereading over work carriers, notDistributed Mind,Collective Consciousness,Social Field, orOrganization Knows.
C.26.2:End
Viability-Envelope Boundary Regulation
Type: Architectural pattern Status: Stable Normativity: Normative unless explicitly marked informative
Problem frame
Use this pattern when architecture work is maintaining, recovering, or changing viable operating ranges across boundaries. The working problem is not "optimize one metric"; it is "keep a bundle of characteristics inside a viable region while disturbances, probes, actuators, boundary conditions, and operating regimes change."
Most envelope work covered by this pattern is ordinary control, quality, SRE, causal, or work discipline, not QL. FEP, allostasis, and active inference are source analogies for envelope discipline, sensor and action coupling, and partial observability; ordinary control, SRE, quality-bundle, causal, and work patterns remain primary unless probe, order, export, or coarsening cue remains load-bearing after ordinary viability, quality, dynamics, measurement, boundary, and work patterns have carried their part.
Plain glosses:
viability bearer: theU.System, collective system, delivery system, role configuration, organism-as-system, or explicitly modelled market slice whose viable range is being regulated.protected promise / function: theU.PromiseContent, stakeholder value, function, operating regime, commitment payload, or delivery promise the bearer is trying to keep viable.service situation: anA.6.8facet-binding lens that identifies access point, delivery system, provider principal, promise content, commitment, delivery work, and evidence; it is not itself a new root bearer unless the relevant system facet is declared.viability envelope: the region where the bearer can still keep the relevant promise or function, across several dimensions.envelope variable: one characteristic that must stay within bounds, such as latency, reliability, support load, compliance exposure, safety margin, energy, or operator attention.actuator: a work move that can change the situation, such as cache policy, throttle, staffing, routing, bridge rewrite, protocol, access, escalation, or measurement design.allostasis: preserving function by changing settings, environment, boundary condition, actuation, or operating regime when circumstances change.
Problem
Teams often collapse viability into one dashboard value or fixed target. They optimize latency and damage operator load. They improve availability and increase compliance exposure. They preserve one metric while exhausting the team, hiding risk, or making recovery slower.
A second failure is passive sensing. A metric, probe, dashboard, alert, or health check is treated as a neutral window into viability, even when it changes behavior, hides unmeasured dimensions, or becomes an actuator through Goodhart effects.
A third failure is static stability. Teams say "keep the system stable" as if stability always means holding one internal variable fixed. In real architecture work, preserving viability may require changing environment, access, staffing, caching, throttling, routing, protocol, context split, or measurement design.
Forces
Solution
Use C.25 / U.Dynamics alone for ordinary envelope work. Use C.26.3 only when the viability-envelope reading is distorted or constrained by probe, frame, export, coarsening, or incompatible representation cue. Otherwise use ordinary viability, quality-bundle, dynamics, measurement, boundary, and work patterns.
Start with this recognition note:
Use the fuller envelope-regulation record below when the viability reading will change a metric, actuator, boundary, staffing, routing, promise, or evidence decision.
Full envelope-regulation record:
Homeostasis and allostasis reading
Homeostasis means keeping a parameter or bundle inside viable bounds. Allostasis means preserving functioning by changing internal settings, external environment, boundary conditions, actuation, or operating regime when circumstances change.
Do not say that all architecture is homeostasis. Say that some architecture decisions are viability-envelope decisions.
Finish conditions
This pattern emits one of these results:
Metric-induced distortion
Treat sensors, probes, dashboards, alerts, and metrics as possible participants in the viability relation, not as neutral windows by default.
Conditional dynamics detail
When rate, acceleration, second-order change, inertia, damping, resistance, effort, or actuator strength is load-bearing, state:
- what rate or acceleration matters;
- what slows or speeds the change;
- whether the rate of change itself is changing, rebounding, overshooting, or damping out;
- which inertia is useful and which is harmful;
- which actuator can actually change the envelope fast enough;
- which evidence shows the dynamic state.
If those variables are not load-bearing, do not force dynamics machinery into the case. The short recognition note or the full envelope-regulation record is enough.
Primary EntityOfConcern and operational sequence
The primary EntityOfConcern is a viability-envelope claim or plan. It is not a generic quality score, not a control-theory survey, and not a biological analogy. The claim says that some bearer can keep a promise, function, or operating regime viable only if a set of variables remains inside a usable region under declared disturbances, probes, sensors, actuators, boundary conditions, and adaptation costs.
The first useful move is to turn a one-scalar stability story into an inspectable envelope-regulation decision.
Action path:
- Name the viability bearer and the promise or function being preserved; if service or market language is used, declare whether the bearer is a collective
U.System, delivery system, trace population, evidence set, or relevantA.6.8facet-binding before treating the situation as a bearer. - Name the envelope variables and the viable range or qualitative boundary for each.
- Name the disturbance or regime change.
- Name sensors/probes and say whether they only report, also frame, or also change behavior.
- Name available actuators and who or what can enact them in time.
- State the boundary condition being preserved or changed.
- State the trade-off condition and adaptation cost.
- State the failure mode and re-probe/destabilization condition.
- Add dynamics detail only if rate, inertia, damping, latency, resistance, or acceleration changes the decision.
Ordinary output: produce a viability-envelope record with envelope variables and viable region, a disturbance/sensor/actuator map, and a trade-off, adaptation, and failure condition that tells the practitioner what changes in the work.
The output should tell a practitioner what changes in the work: redesign the metric, change cache policy, adjust staffing, reroute traffic, split or merge a context, add a bridge note, change an escalation promise, or drop the envelope claim.
Viability envelope record
A usable envelope record is a pattern-local writing card, not a constructor. Use the fields below when envelope regulation is load-bearing:
The record is not U.ViabilityEnvelopeRegulation, not a new kernel kind, and not a universal architecture constructor. It is a pattern-local normal form for writing envelope work clearly.
Well-formedness constraints:
- the bearer is a declared
U.System, collective system, delivery system, role configuration, organism-as-system, explicitly modelled market slice, or other explicitly bounded bearer of viability; - service-situation language identifies its
[A.6.8](/generated/patterns/A.6.8)facets rather than treating the situation label as a root bearer by itself; - at least two envelope dimensions are visible when the claim says "viability" rather than one ordinary metric;
- at least one actuator is named when the text proposes regulation rather than only diagnosis;
- the actuator has an authority and latency story, otherwise the recommendation is only a wish;
- the adaptation cost is named, because allostasis hides cost when phrased as "stability through change";
- the failure mode is named, because viability is otherwise indistinguishable from optimism.
Sensor, probe, actuator, and metric split
Do not let one dashboard value stand for the whole envelope.
A metric value or dashboard carrier is not an actuator by itself. A measurement regime, publication act, alerting workflow, or governance routine may function as an actuator when the system responds through work: routing changes, escalation changes, staffing changes, cache policy changes, access changes, or boundary changes. An actuator can damage another envelope variable while repairing the one that triggered the work.
Homeostasis, allostasis, and architecture work
Homeostatic wording is useful when the work preserves one variable or bundle inside a stable range. Allostatic wording is useful when the work preserves function by changing settings, boundary conditions, environment, access, staffing, routing, protocol, cache policy, or operating regime.
Use the minimal reading that carries the case:
Do not call every adaptation allostasis. The term earns its place only when stability-through-change is the useful architecture reading.
Case bank and near misses
Source-to-pattern translation
Allostasis, active inference, FEP, Markov blankets, and computational-boundary sources are useful here only after translation into FPF architecture terms:
This translation keeps the pattern practical for architects. The reader should be able to move from a source line to an action: change a metric, change a probe, change an actuator, change a boundary condition, state a trade-off, or reroute.
Archetypal Grounding
Tell: A platform team tries to preserve checkout latency during a traffic spike. The first move is to increase cache aggressiveness. Latency improves, but support load rises because stale payment-failure status causes confused customer contacts.
Show, System side: the viability bearer is the checkout/payment service situation. Envelope variables include latency, payment correctness, support load, customer-promise reliability, and operator attention. Actuators include cache policy, retry policy, routing, dashboard query, escalation promises, and context bridge changes.
Show, Episteme side: the supported claim is not "latency is the viability state." It is an envelope-regulation claim: latency was preserved by an actuator that damaged another envelope dimension. The repair is to state the trade-off, adaptation cost, actuator authority, and failure mode.
Bias-Annotation
This pattern biases authors against scalar comfort. That bias prevents "green dashboard" from replacing viability.
It also biases authors toward actionable architecture work. The pattern asks who or what can actually change the boundary, access, protocol, staffing, cache, throttle, bridge, or measurement setup, and how quickly that action can matter.
The pattern may feel too broad if it is applied to every quality concern. It is not for every quality concern. Use C.25 alone when one quality bundle or metric can be handled without envelope, disturbance, boundary condition, actuator, adaptation cost, or viability failure mode.
Conformance Checklist
Common Anti-Patterns and How to Avoid Them
Consequences
This pattern helps architects see stability-through-change. It supports decisions such as throttling, staffing, routing, protocol redesign, context split/merge, cache changes, measurement redesign, and escalation changes as envelope-regulation moves.
The cost is that simple metric stories become less simple. That is acceptable when the metric story hides the actual viability relation.
Rationale
Ordinary quality-bundle work does not always show boundary conditions, actuators, disturbances, adaptation cost, and failure modes together. C.26.3 coordinates those elements while preserving ordinary FPF patterns.
The QL lens is secondary. It matters when the way viability is probed, exported, or coarsened changes the state reading or admissible use of the representation.
SoTA-Echoing
Worked-slice discipline from these rows:
- state the envelope before importing source terminology;
- translate source terms into selected structures,
ArchitectureOf@Contextrelations, architecture descriptions, structural views, or named C.30 subcases; - keep sensors, probes, actuators, and metrics distinct;
- state adaptation cost and failure mode;
- apply ordinary quality and measurement patterns to one-scalar quality concerns.
Relations
C.27 temporal-claim relation.
-
C.27 may flag: braking, throttling, cadence, recovery, or stabilization moves in claims such as slow rollout protecting support capacity, request throttling preventing collapse, or cadence change preserving attention/team health.
-
This pattern keeps: viability bearer, protected promise/function, viable region, disturbance, sensor/probe/action split, adaptation cost, and failure mode.
-
Non-admissible use: stabilization wording is not a viability envelope, and C.27 is not the pattern for all stability-through-change claims.
-
Exit: if the claim being made is only better quality, healthier team, or more resilient service without a declared viability envelope, use C.25, E.13, or the relevant quality/proxy/value pattern rather than C.26.3 or a C.27 profile.
-
Builds on:
C.26,C.25,U.Dynamics,A.6,A.15,C.16,A.10,B.3,A.3,A.19,C.18,C.19. -
Coordinates with:
C.26.1when sensors, probes, dashboards, or metrics change represented state;C.26.2when coordinated work evidences the envelope state. -
Does not replace: ordinary quality-bundle patterns, generic control theory, full FEP doctrine, or biological homeostasis claims outside FPF bridge and loss discipline.
-
Name boundary:
Viability-Envelope Boundary Regulationnames architecture work over a viability envelope and boundary/action conditions, notHomeostasis Pattern,Allostasis Doctrine,Control Ontology,Quality Optimization Pattern, orViability Substance.
C.26.3:End
Temporal Claim Adequacy: State Readings, Temporal Trends, and Intervention-Sensitive Temporal Change
Type: Architectural (A) Status: Stable Normativity: Normative unless marked informative
Plain-name. Temporal claim adequacy.
Primary EntityOfConcern. C.27 concerns authored temporal claims: descriptions in prose, plans, benchmark lines, dashboards, method notes, promises, or explanations that treat state, rate, rhythm, recovery, braking, coasting, redirection, stabilization, or rate-change as sufficient for some use.
Described-system, description, and carrier discipline. The described system, work, practice, method, service, or benchmark is not the C.27 record. A Dyn2TemporalClaimAdequacyCard or Dyn2TemporalClaimProfile is an authored description of temporal-claim adequacy. A document, table, page, report, or card may carry that description; it is not the temporal claim, not the dynamic system, and not the work trace.
Use-context and evidence/assumption discipline. When this pattern says supportedUse, it means the decision, plan, diagnosis, comparison, publication, promise, assurance-facing relation, or other practical use that this C.27 record named by value can carry
given its dynClaimPosture, evidence path, model or planning assumption, source-use reference when that source use is being made
, windows, resistance or cost statement, and reopen condition. unsupportedUse means one nearby downstream claim, effect, or use that this record named by value does not carry. These fields do not create permission; they state the pragmatic reach of the authored temporal-claim description.
Bare "support" should not do hidden ontology work in C.27. Use supportedUse and unsupportedUse only for the pragmatic reach of a temporal-claim record; use an evidence path, model assumption, source-use reference, or planning assumption for the reason a reading is credible; use RouteRef or a named FPF pattern relation when an existing FPF pattern governs the other question.
Boundary-crossing claim use. The object remains an authored temporal claim. What changes is the use context: the claim is used as citable evidence, assumption, source-use reference, or pattern-relation input outside the immediate local discussion, published, benchmarked, promised, assured, made durable rationale, repeated in a reusable method description, used in a gate/public dashboard/Part G pack, or carried across context or scale. Casual reuse in a neighboring chat is not enough by itself. Boundary-crossing use is what can require a Dyn2TemporalClaimProfile.
Use this pattern when a claim about speed, rhythm, throughput, recovery, convergence, rollout, adoption, braking, coasting, redirection, or stabilization is used to change action and therefore needs effort, window, resistance, evidence path or assumption relation, supported-use, unsupported-use, and reopen discipline.
Do not use this pattern when the temporal wording is ordinary prose, a state reading or snapshot, a rate reading or trend reading whose measurement construction is enough, a formal U.Dynamics model, an actual work trace, a benchmark harness, a service promise, a quality judgement, or a residual quantum-like probe case without an intervention-sensitive temporal claim.
C.27 in 60 seconds. Use C.27 only if:
- temporal wording is used to justify action, comparison, budget, gate, promise, assurance, or an explicit relation to another FPF pattern;
- the difference between state, rate, and rate-change changes admissible use;
- the text can name at least target, intervention, window, resistance or cost, evidence path or assumption relation, supported use, and unsupported use or reopen trigger.
Otherwise stop at ordinary prose, a Dyn0 state reading, a Dyn1 rate reading or trend reading, C.16.P when characteristic, scale, score, metric, or proxy wording is hidden, C.16 measurement discipline when the measurement construction is already recoverable, C.16.Q or C.25 when overloaded quality wording or a quality-family endpoint is the issue under repair, U.Dynamics model discipline, or the existing FPF pattern that governs the other question.
For local diagnosis or planning, C.27 usually ends with one Dyn2TemporalClaimAdequacyCard. Plain references are enough while the use stays local. A local card should normally fit in 5-9 short lines; if it does not, clarify the claim, narrow it, or cite the existing FPF pattern that governs the other question. RouteRef, C16RouteRef, G9ParityPlanRef, and similar references appear only when the use is FPF-governed beyond the local note.
Quick refusals. "Backlog is 120" is Dyn0; no C.27 record. "Backlog fell 20/week" is Dyn1, with C.16 if the measure is FPF-governed; no C.27 record unless a rate-change use appears. "This section accelerates orientation" is ordinary prose unless the PublicationUnit carries that acceleration claim as method-effectiveness evidence.
Dyn2 is not maturity. Dyn2 classifies the use made of an authored temporal claim, not the system, team, method, or service being described. Higher DynOrder is not better; it only says what the authored temporal claim treats as sufficient for supported use.
Local refresh boundary. A local card carries only a reopen, downgrade, or pattern-reference condition. G.11, B.3.4, and assurance refresh discipline become relevant only when the temporal claim is public, Part G-facing, assurance-facing, or otherwise durable beyond local planning/diagnosis.
Problem frame
Causal-use boundary
C.27 can say that a temporal claim is dynamic, intervention-sensitive, rate-sensitive, inertia-sensitive, braking-sensitive, coasting-sensitive, or rhythm-sensitive. When the temporal claim already depends on causal-use question, causalInterventionSpecRef, comparator/counterfactual, estimand, assignment or intervention window, causal follow-up window, outcome measure, causalAssumptionSetRef, rivalCauseSetRef, identification strategy, counterfactual-sampling realizability claim, CausalUseEvidenceDesignRecord, supported causal use, or unsupported causal use, cite C.28 as the governing causal-use source.
What changes in practice: a sentence such as "this effort changes adoption speed" may remain a Dyn2 temporal claim, but "this intervention causes adoption speed to improve" must also declare its C.28 causal-use class and causal-use support.
What this does not authorize: C.27 does not estimate causal effects, certify counterfactual comparisons, or judge counterfactual sampling realizability; it keeps temporal claim adequacy, rate-change, effort, inertia, rhythm, braking, coasting, and intervention-sensitive temporal wording.
FPF already has established constructs and patterns for time, work, resources, measurement, CharacteristicSpace, dynamics laws, planning, publication, and quantum-like probe and frame issues. What is missing is a cheap claim-adequacy lens for authored temporal claims when a state/rate reading is used as if it supplied the evidence path, assumption, or pattern relation for a rate-change, rhythm-change, regime-change, braking, coasting, redirection, recovery, or stabilization claim.
The first-minute working situation is simple: a manager, method author, researcher, operator, or agentic-tool planner says that something should speed up, slow down, converge faster, recover sooner, sustain rhythm, improve throughput, accelerate learning, brake risk, or redirect effort. FPF should help the reader ask whether the claim is only a state reading, only a rate/trajectory reading, or an intervention-sensitive claim about changing a rate under effort, resistance, rhythm, feedback, constraint, or cost.
What goes wrong if missed: the text measures or names a rate and then behaves as if it knows how to change that rate. This produces speed-only management, benchmark theater, hidden promises, causal overclaim, effort-free acceleration, rhythm-as-vibe, and false QL relevance.
The intended FPF gain is not "add physics metaphors". The gain is a compact thinking-and-action discipline for cases where speed talk hides effort, timing, resistance, evidence, scale, reversibility, and admissible use.
Anti-case: if a phrase uses speed or rhythm only as ordinary explanatory prose, or if a state/rate reading is enough for the use, C.27 should be easy not to use.
Use C.27 because it gives a working reader a useful pause before acting on speed talk. The intended use is not to formalize every temporal sentence. The intended use is to stop a small set of expensive mistakes:
- a rate is measured and then treated as if the intervention mechanism is known;
- visible throughput improves while hidden queues, rework, quality loss, or burnout worsen;
- a past slope is treated as a future control model;
- a local rate-change is projected across scale without aggregation relation or evidence;
- rhythm or cadence is used as a vibe label with no bearer, timing reference, window, proxy/evidence, or supported use;
- a planning note becomes a
C.28-governed causal-use claim, benchmark result, service promise, or assurance claim; - quantum-like modeling is treated as relevant merely because the text contains discreteness, types, probes, tokens, or state-space wording.
The positive reader use compact is short:
- If the statement is only a state reading, use the ordinary state/evidence relation.
- If the statement is only a rate or trajectory reading, use measurement and sampling-window discipline.
- If the statement claims that effort, policy, input, rhythm, constraint, or resistance changes the rate, use the least-committing C.27 record that changes admissible use.
- If the claim crosses the local working boundary into comparison, benchmark,
publication, gate, assurance, public promise, durable rationale,
reusable method, formal/control/prediction use, or cross-context transfer,
strengthen the C.27 record and name the existing patterns that carry the
specialist claim questions. Local decision-use can often remain a
Dyn2TemporalClaimAdequacyCard.
This is the central anti-bureaucracy invariant: no C.27 record unless the Dyn0, Dyn1, and Dyn2 distinction changes interpretation, decision-use, evidence path, resource allocation, benchmark reading, supported use, or reopen trigger.
Dyn2-Affordability: a correct C.27 use leaves less work behind than the ambiguity would have caused. If applying C.27 creates more work than the temporal distinction changes, exit.
At the point of use, the C.27 question is concrete. Before adding a C.27 record, recover:
- what rate, rhythm, trajectory, regime, or stability claim is in play;
- whether the text is reading state, reading rate, or claiming rate-change;
- what effort, input, policy, method, intervention actor/role assignment, or resource envelope is supposed to change the temporal behavior;
- what resists, delays, stores momentum, introduces lag, or makes reversal costly;
- what evidence, trace, assumption, model, or diagnostic judgement supplies the reason for the reading;
- what use the claim can carry and what downstream claim, effect, or use remains unsupported;
- when the simplified reading should reopen, downgrade, or cite the fuller FPF pattern that governs the other question.
The pattern buys practical action, not a vocabulary test. A person can explain the check as: "A trend is not yet an intervention model; show the effort, window, resistance, use, and reopen condition, or keep the claim narrower."
Some useful temporal observations arrive before they are claim-ready:
- the team may not only be slow; it may be unable to brake;
- the problem may not be throughput but rhythm mismatch;
- a metric may improve while operational-support load accumulates;
- "the process sped up" may hide orders, invoices, shipments, support tickets, PRs, tests, and deployments moving through different paths and interaction windows;
- more tool calls may accelerate activity traces without accelerating reasoning or repair.
These are temporal-claim adequacy cues, not C.27 records. C.27 should preserve their cue-only disposition. When the reader suspects a hidden Dyn2 claim question but cannot yet state target, intervention, window, resistance/cost evidence or assumption, evidence or assumption, and supported use, the correct output is a partly-said material cue held through A.16, A.16.1, B.4.1, or B.5.2.0, with possible later C.27 record.
The cue may become a Dyn2TemporalClaimAdequacyCard only when a rate-change,
rhythm-change, braking, coasting, recovery, stabilization, or intervention
claim becomes explicit enough to name the card minimum. If the question under repair is
not temporal-claim adequacy, use the pattern that carries that question: C.16
for measurement, C.26 for residual QL cue, E.17.AUD for publication-unit stability, or
viability/assurance patterns when the observation has insufficient evidence, witness,
or currentness support for staying inside a viability or assurance boundary.
Problem
C.27 governs the adequacy of intervention-sensitive temporal claims.
C.27 does not govern:
- transition laws or reusable dynamics models, which
A.3.3 U.Dynamicscarries; - state-space or coordinate construction, which
A.19andC.16carry; - measurement legality, evidence construction, provenance, assurance claim,
or evidence decay, which
C.16,A.10,B.3,B.3.4, andG.6carry as applicable; - work actuals and resource burn, which
U.WorkandGamma_workcarry; - planning structures and authorized work, which
U.WorkPlan,U.MethodDescription,C.24, and relevant planning patterns carry; - autonomy-budget declarations, guard checks, ledgers, depletion, pause/resume,
or freedom-of-action governance, which
E.16carries; - state-change or evolution loops and language-state movement, which
A.4,B.4,A.16, andB.4.1carry; C.28-governed causal-use claim, whichC.28carries, or evaluation/evidence claim, which the relevant evaluation/evidence patterns carry;- metric proxy/value substitution, which
E.13carries; - service promises, agreement text, SLA-like statements, release gates, public
commitments, and service-acceptance bindings, which
A.2.3,A.2.8,A.2.9,A.6.C,F.12, and assurance patterns carry; - benchmark harnesses, which
G.9carries; - dashboard time-series, telemetry pins, path/slice publication, pack shipping,
discipline-health slots, and refresh orchestration, which
C.21,G.12,G.6,G.10, andG.11carry; - selector publication roles, which
G.5carries only when a concrete selector-publication case consumes a dynamic benchmark result; - quantum-like probe, frame, export, or coarsening residues, which
C.26carries; - publication roles, MVPK faces, primary EntityOfConcern values of related FPF patterns, or Kernel
U.*kinds.
Dynamic-order labels are pattern-local claim classifications, not FPF kinds.
C.27 does not mint U.Force, U.Mass, U.Acceleration,
U.Rhythm, U.Practice, or U.SecondOrderProcess.
FPF gains a compact discipline for claims that otherwise hide behind words such as speed, agility, throughput, adoption, rhythm, velocity, convergence, debugging speed, service recovery, faster improvement, acceleration, braking, redirection, or cadence.
The main failure to prevent is:
A text measures or names a rate and then behaves as if it knows how to change that rate.
C.27 should make three distinctions cheap:
Dyn0: state or snapshot reading;Dyn1: rate, trend, trajectory, flow, throughput, tempo, or cadence reading;Dyn2: intervention-sensitive temporal reading: rate-change, regime transition, braking, redirection, coasting, pause, stabilization, rhythm fit, effort profile, resistance, inertia, policy effect, feedback, uncertainty, or constraint handling.
C.27 protects against the managerial speed cult. Faster is not the default value. Braking, pausing, stabilizing, redirecting, coasting, delaying, widening before narrowing, or slowing rollout can be the correct C.27 outcome.
Local temporal-value boundary:
C.27 can classify the temporal move. It does not decide that acceleration, braking, stabilization, coasting, recovery, convergence, or release speed is valuable. The FPF patterns for value alignment, assurance, promise, ethics, safety, legal, or proxy/audit concerns carry value, utility, constraint fit, harm, promise impact, and proxy distortion.
This boundary applies to claims such as "faster onboarding is better", "more throughput is better", "faster convergence is better", or "rapid release is our goal". C.27 may make the temporal claim adequate enough to inspect, but it does not turn speed into value by default.
These are claim-relation boundary tests, not keyword exclusions. C.27 may still supply a short temporal-claim note when the state/rate/rate-change/rhythm/regime reading changes admissible use. The named neighbouring pattern then carries the non-C.27 question. If the temporal distinction does not change admissible use, exit C.27 completely.
Do not make C.27 the governing pattern when:
- the text only reports a state or snapshot and no rate/use distinction changes interpretation;
- the text only reports a rate, trend, throughput, cadence, or trajectory and no intervention-sensitive rate-change claim is made;
- a word such as speed, rhythm, acceleration, agility, or inertia is only a teaching metaphor or casual Plain wording;
- the issue under repair is publication-unit stability: one overloaded local head, drifting publication-unit primary entity of concern, bounded comparison, explanation faithfulness, or approval/action wording should use E.17.AUD, E.17.ID.CR, E.17.EFP, or the pattern that governs the downstream claim, effect, or use before C.27;
- the question under repair is whether a measure is legal, comparable, or interpretable:
C.16carries measurement construction, with C.27 only citing the temporal C.27 relation if the measure supplies evidence for an intervention-sensitive claim; - the question under repair is a transition law, simulation, prediction, or control model:
A.3.3 U.Dynamicsand formal/evidence patterns carry the formal dynamics, with C.27 only naming the admissible-use limit of the authored claim; - the question under repair is work/resource actuals:
U.WorkandGamma_workcarry the evidence, with C.27 only using it as effort evidence or planning assumption for a Dyn2 claim; - the question under repair is scaling-law or elasticity adequacy: C.18.1 carries scale variables, scale window, scale probes, and scale-elasticity value, with C.27 only naming the temporal-claim adequacy question if scale change is used as the scale-variable relation for rate-change, learning, recovery, throughput, or stabilization;
- the question under repair is a work plan, call plan, method description, or authorized intervention actor/role assignment: the planning pattern carries the plan, with C.27 only active when the plan's admissible use depends on rate-change, recovery, stabilization, or braking;
- the question under repair is task-family specialization: C.22.1 carries adaptation signature fields, with C.27 only naming the temporal-claim question when learning or adaptation speed changes admissible use;
- the question under repair is preserving a viability envelope under disturbance, adaptation cost, latency, operational-support load, or boundary regulation: C.26.3 carries the envelope claim, with C.27 only naming the temporal move if braking, throttling, cadence change, recovery timing, or stabilization changes supported use;
- the question under repair is causal attribution:
C.28carries causal-use claim, and evaluation/evidence patterns carry non-causal evaluation/evidence claims; C.27 may mark the temporal claim's causal use as unsupported until thatC.28relation is satisfied; - the question under repair is a benchmark, budget, promise, service boundary, SLA-like statement, public commitment, assurance, or release gate: the relevant benchmark, boundary, promise, service, assurance, or planning pattern carries that claim/use, with C.27 only naming the temporal claim that the other pattern inspects;
- the question under repair is residual quantum-like probe, frame, export, or coarsening cue:
C.26carries it only after ordinary dynamics, work, measurement, benchmark, proxy, and assurance patterns have carried their parts.
Overlap example: "Adding review capacity for two sprints will double backlog
reduction rate and justify a budget increase" is not solved by C.27 alone. C.27
types the Dyn2 temporal-claim question; the planning pattern carries planned effort,
C.16 carries the rate/rate-change measure, the budget/planning pattern carries
approval, and C.28 carries any causal-use claim. The short
temporal-claim note is a Dyn2TemporalClaimAdequacyCard: it prevents those
patterns from missing the hidden rate-change question, but it does not replace
them.
C.27 does not introduce:
- literal Newtonian or physical ontology for organizations, practices, services, dances, learning, or work cycles;
- physical quantum ontology or quantum-like superiority;
- mandatory ODE/PDE/calculus formalism for all temporal claims;
- new Kernel types for force, mass, acceleration, rhythm, or practice;
- a new publication role, separate pattern, law sheet, or MVPK face;
- default C.27 profiling for every temporal word;
- thin C.27 echo records when a local C.27 card or profile can cite the FPF FPF pattern that governs the other question.
Forces
The source article contributes three practical ideas that should survive into C.27 prose.
First, the useful question is an effort-profile question, not a derivative-word question. In management, learning, tool-use, incident response, practice transfer, dance, and service operations, the relevant change is often a profile of effort over windows: impulse, scheduled push, feedback policy, adaptive regime, brake, pause, coast, or redirect. C.27 should preserve effort over time, not just a scalar acceleration label.
Second, rhythm is interval-structured. A rhythm claim needs a timing reference, bearer, window, evidence proxy or observation relation, and admissible use. "Rhythm" as mood or vibe is not enough; it must be possible to recover whose rhythm, across which intervals, by which observation or proxy, and for which decision. Coupling, phase, synchronization, or entrainment-like wording is only needed when the claim depends on a relation between bearers.
Third, useful formalization improves replicable practice code. C.27 should help make a practice transferable by recording effort windows, rhythm timing references, bearer, resistance proxy, evidence path or assumption, and reopen condition. It should not force equations merely because the source analogy used dynamics language.
Borrowed-frame translation:
Solution
Use the least-committing dynamic-order output that changes the admissible use. Dyn0 and Dyn1 are readings in ordinary prose, not C.27 record classes; C.27 records start only when a Dyn2TemporalClaimAdequacyCard or Dyn2TemporalClaimProfile for boundary-crossing claim use is needed.
A Dyn2 classification is not evidence that a U.Dynamics model exists. It is
only evidence that the authored claim is using temporal change in a way that may
need a dynamics pattern relation if a downstream claim, effect, or use is claimed.
Normativity follows boundary-crossing use:
- normative when the claim carries decision, gate, budget, benchmark, publication, assurance, public promise, or reusable method;
- advisory when the claim is exploratory, abductive, or early planning;
- informative when the pattern teaches examples, vocabulary, or anti-patterns.
This is the ordinary first-minute reader-facing form and the main visible C.27 record for ordinary C.27 use. It remains referenced to an authored claim rather than becoming a free-standing consulting card.
Window default: for a local card, one window line may stand for claim, sampling,
effort, rhythm, and validity when the distinction does not change admissible use.
Split windows only when evidence is sampled over a different interval than the
claim, effort or intervention occurs over a different interval than the outcome,
benchmark baseline/adaptation/follow-up windows differ, the rhythm timing reference/window
differs from the measurement window, or validity/refresh depends on a separate
freshness window.
Do not add a compact basis/status field to a local card. If boundary-crossing use appears, name the actual evidence path, trace, measurement relation, model assumption, planning assumption, benchmark reference, [C.28](/generated/patterns/C.28) causal-use route, promise pattern, or assurance pattern that carries the added claim. That named neighbour relation helps choose the matching dynClaimPosture; the local card itself does not strengthen the claim.
claimText and claimRef keep C.27 tethered to the PublicationUnit or claim-bearing U.EpistemePublication that carries the temporal claim. target
separates the bearer/reading from the intervention, so "we accelerate the team"
gets repaired into a rate/rhythm/trajectory question. move protects against
acceleration bias: braking, pausing, stabilization, recovery, coasting,
widening, and narrowing are also Dyn2 moves when they change admissible use.
If the author cannot answer these in short lines, the correct repair is usually
to clarify the claim, not to escalate immediately to a full Dyn2TemporalClaimProfile.
Compact C.27 rhythm-claim discipline:
Cadence as observed interval rate may be Dyn1. Rhythm becomes Dyn2 only when interval structure, effort pattern, coordination, recovery, stabilization, or intervention-sensitive use changes admissible use.
This discipline keeps rhythm connected to a dynamic claim. A plain "release cadence" or "workshop rhythm" does not need phase or entrainment language unless the admissible use depends on a relation between bearers. If the rhythm wording does not change a rate, intervention, recovery, coordination, or admissible-use reading, it should remain ordinary prose rather than make C.27 relevant.
Compact C.27 coasting-claim discipline:
Coasting becomes a full Dyn2TemporalClaimProfile block only when a promise,
gate, assurance, benchmark, cross-scale transfer, or public comparison depends
on continued movement or stability after effort changes or stops. Local cases
such as adoption continuing after incentives stop, quality degrading after
acceleration stops, operational-support load continuing after rollout, a trained practice
persisting after training, or a queue draining after intervention ends usually
need only the card fields above.
Coasting/debt fork:
- Use
dyn2CoastingClaimBlock?when supported use depends on continued movement, stability, adoption, queue drain, practice persistence, or operational-support load after effort changes or stops. - Use
dyn2DebtHysteresisBlock?when supported use depends on residue, reversibility, hidden cost, delayed damage, repayment, braking, or recovery plan. - If both are live, coasting describes continued motion or stability; debt and hysteresis describe what remains and how costly reversal or recovery is.
Rare boundary-crossing escalation. Use the Dyn2TemporalClaimProfile only for authored temporal claims used beyond the local working context. It is a pattern-local authored temporal-claim adequacy record, not a model of the dynamic system itself, not a publication role, not a Part G record, not an MVPK face, and not the default C.27 record.
Read the profile-block menu only when boundary-crossing use is already live. The list below is a pattern-relation menu, not a form. The absence of an inactive block is normal; it is not a missing field.
The shape is a header plus present profile blocks. The header carries the minimum boundary-crossing claim-use classification. Each block should be read from its applicability sentence first, and a block appears only when supportedUse relies on that claim relation. These blocks are not fields of one universal dynamic object; they are different evidence descriptions and pattern relations made relevant by supported use.
Profile-block closure rule: every present block is either defined by C.27,
a pattern-reference-only block that cites the existing FPF pattern carrying the
other question and adds no new C.27 object, or absent from activeBlocks.
A block name is not a new EntityOfConcern.
Active-block naming rule: read each activeBlocks name by one of three statuses.
localAdequacyBlock means C.27 states local adequacy fields for an authored
temporal claim. patternReferenceOnly means C.27 states only the temporal
move/window/supported-use boundary and cites the FPF pattern that carries the
other question. relationOnly means the concern appears in relations or
examples but not as an active block. dyn2PromiseBoundaryRoute?,
dyn2HighStakesTemporalMoveRoute?, and dyn2PolicyTransferRoute? are
pattern-reference-only by default; dyn2PolicyTransferRoute? is folded into
dyn2ControlPolicyRoute? when behavior-policy/evaluation-policy transfer is
FPF-governed.
Absence of an inactive block is normal. It is not a missing field. A block
becomes active only when the admissible use relies on it; otherwise the Dyn2TemporalClaimProfile
should stay smaller or downgrade to a Dyn2TemporalClaimAdequacyCard, Dyn1 reading, or ordinary prose.
Pattern-reference-only blocks:
dyn2PolicyTransferRoute?is handled insidedyn2ControlPolicyRoute?when behavior-policy/evaluation-policy or off-policy transfer is FPF-governed. C.27 namesbehaviorPolicyRef,proposedPolicyRef,offPolicyRisk, and the evaluation/control pattern relation; it does not create a separate policy-transfer pattern.dyn2PromiseBoundaryRoute?states only the temporal move, window, supported use, unsupported downstream claim, effect, or use, and references to the patterns that carry promise, commitment, instituting speech act, service acceptance, contract unpacking, and assurance:[A.2.3](/generated/patterns/A.2.3),[A.2.8](/generated/patterns/A.2.8),[A.2.9](/generated/patterns/A.2.9),[A.6.C](/generated/patterns/A.6.C),[F.12](/generated/patterns/F.12), and assurance patterns.dyn2HighStakesTemporalMoveRoute?states only the high-stakes temporal move, window, unsupported downstream claim, effect, or use, and reference to the pattern that carries the harm, quality, safety, ethics, legal, financial, operational-support, or human-wellbeing question.
Header discipline: for a Dyn2TemporalClaimProfile for boundary-crossing claim use, claimRef,
entityOfConcernRef, dynClaimPosture, dynOrder, claimWindowRef,
supportedUse, unsupportedUse, and reopenTrigger are mandatory.
temporalBearerRef is present when the temporal bearer differs from the
EntityOfConcern or is otherwise FPF-governed. profileCarrierRef is present
when publication or evidence needs the authored carrier named. baseCharacteristicRef
is mandatory only when measurement, comparison, or C.16 relation is FPF-governed; for a Plain diagnostic claim it may remain a local phrase in the target line.
Window split rule: one local window is enough only when the claim window, sampling window, effort/intervention window, validity window, baseline window, and follow-up window are the same for the admissible use. Split them when the evidence is sampled over a different interval than the claim, effort is applied before or after the measured change, a comparison needs a baseline, an outcome is observed after exposure, or the claim remains valid only for a shorter period than the historical trace. If the split is unknown and the admissible use depends on it, downgrade the use or add the relevant window reference before relying on the temporal claim.
C.16 rate-measurement relation: when rate or rate-change is FPF-governed, C.27 cites the C.16 measurement relation. C.27 does not define measurement legality.
C.27 effort/work block: when a rate-change claim depends on effort, resource,
method, intervention actor, or role-assignment capacity, C.27 separates planned
effort, method description, resource envelope, actual work trace, and
authority relation, proposed-work plan, hypothetical-use note, and U.Capability reference when live. It does not turn work evidence into a dynamics law.
interventionActorRef means the actor, role assignment, tool, system, policy
rule, or human/work arrangement claimed to apply the intervention, plus an
authority relation, proposed-work plan, hypothetical-use note, and U.Capability reference when live. If a planning claim says "add review capacity", C.27 should make visible whether there is a role assignment, work plan, authority relation, or U.Capability reference that can carry the intervention claim, while leaving role, method, work-plan, and work-occurrence alignment to A.15 and work patterns.
C.27 resistance/inertia block: dyn2ResistanceInertiaBlock? is present when admissible use depends on what resists, delays, stores momentum, creates residue, or makes the change costly. This is core C.27 content because it prevents effort-free acceleration claims. The Dyn2TemporalClaimAdequacyCard asks the question locally; the Dyn2TemporalClaimProfile uses a separate active profile block only when that answer matters beyond the local working context.
resistanceProxyEvidenceOrAssumption = unknown is an acceptable C.27 result. Unknown resistance need not
block a local diagnostic Dyn2TemporalClaimAdequacyCard, but it should block durable
acceleration, causal, benchmark, promise-like, or assurance use until the relevant evidence path, measurement relation, model assumption, or carrying pattern reference is supplied.
C.27 control/policy relation: dyn2ControlPolicyRoute? is present only when dynClaimPosture is controlModel, policyRule, adaptive, a feedback-bearing planningModel, or an explicit C.24/C.19/evaluation relation. This relation says that the authored temporal claim has crossed into control/policy model or policy-evaluation use. It does not make C.27 an MPC, reinforcement-learning, or policy-evaluation pattern.
C.27 causal-use relation: dyn2CausalUseRoute? is present only when the authored temporal claim uses a rate-change, intervention, effort, workshop, policy, or practice change as a causal-use basis. Core rule: C.27 can say a claim is Dyn2 and intervention-sensitive; C.27 cannot turn that basis into a [C.28](/generated/patterns/C.28)-governed causal-use claim. The fields below are [C.28](/generated/patterns/C.28) refs consumed by C.27, not [C.27](/generated/patterns/C.27)-defined causal aliases.
C.27 dynamic benchmark requirement: dyn2BenchmarkParityBlock? is present only when a comparison or benchmark depends on rate, rate-change, recovery speed, rhythm improvement, intervention effect, effort budget, or dynamic outcome. Content rule: C.27 declares the dynamic claim question of the benchmark; [G.9](/generated/patterns/G.9) carries parity.
C.27 metric-target effect block: dyn2MetricTargetEffectBlock? is present only
when metric publication, target use, incentive use, dashboard use, gate use, or
public comparison changes temporal behavior or admissible use. C.16 carries the
measure; E.13, assurance, or governance patterns carry proxy/utility distortion;
C.26 is relevant only if residual probe, frame, order, or export cue remains.
C.27 object-centric trace block: dyn2ObjectCentricTraceBlock? is present only
when a work-cycle/process rate claim depends on several object bearers, event
traces, interactions, or aggregation basis rather than one scalar speed label.
C.27 records why scalar throughput is insufficient; object-centric process
mining or local process evidence carries the detailed log discipline.
C.27 cross-scale transfer field: dyn2CrossScaleTransferBlock? is present only when a dynamic claim transfers rate, rate-change, rhythm, recovery, acceleration, braking, or agility from one bearer/level/aggregate to another. Aggregate rate-change and local rate-change are different readings unless aggregation basis and bearer continuity are declared.
C.27 scale-variable claim block: dyn2ScaleVariableClaimBlock? is present only when the
authored temporal claim says that changing a resource or scale variable changes
rate, improvement, learning, recovery, throughput, or stabilization. This is
not the same as cross-scale transfer: scale-variable claim asks which variable is
changed and over what scale window; cross-scale transfer asks whether a dynamic
reading is carried across bearer, level, or aggregate. C.18.1 carries scale
variables, scale windows, scale probes, and scale-elasticity value; C.27 records
only that the scale change is being used as the basis for a temporal-claim reading.
C.27 task-family adaptation relation: dyn2TaskFamilyAdaptationRoute? is present
only when the temporal claim says that a holder, dyad, team, specialist
portfolio, method, or agent reaches usable specialization faster on one declared
TaskFamilyRef or TaskSignature. C.22.1 carries the task-family adaptation
signature. C.27 records only the learning/adaptation-rate question and the
admissible use that made it relevant.
C.27 viability-envelope relation: dyn2ViabilityEnvelopeRoute? is present only when
a temporal claim says braking, slowing rollout, throttling, cadence change,
recovery timing, adaptation cost, operational-support load, or stabilization keeps a
viability bearer inside usable bounds. C.27 may type the temporal move and its
window. C.26.3 carries the viability-envelope claim: protected promise or
function, viable bounds, disturbance, sensor/probe/action split, adaptation
cost, and failure mode. Do not make C.27 the pattern for all "stability through
change" claims.
C.27 residual QL relation: dyn2QLResidualRoute? is present only when ordinary FPF
patterns have already carried the temporal-claim, measurement, work, benchmark,
value/proxy, scale, adaptation, viability, promise, or evidence basis and a
residual probe, frame, order, export, or coarsening cue still changes the admissible
reading. C.26 carries the residual QL reading. C.27 only records that the authored
temporal claim has a residual QL relation; this block stays hidden by default when
no such residue exists.
C.27 debt/hysteresis block: dyn2DebtHysteresisBlock? is present only when admissible use depends on sustained acceleration, braking, recovery, stabilization, domain residue after effort changes, or a public promise/gate/assurance/high-stakes decision about rate-change. Unknown reversibility is allowed, but it bounds supported use.
These C.27 dynamic-claim profile-block field definitions are boundary-crossing
material for Dyn2TemporalClaimProfile and for higher-stakes authored temporal
claims used beyond the local working context. They are not the default C.27 user
interface, not a data model, and not a universal C.27 dynamic-claim field list
that every user must fill.
C.27 uses physical words only as Plain analogies. Tech prose uses effort,
input, and work references rather than force; resistance/inertia proxies rather
than mass; rate-change readings rather than acceleration as a new kind; and
rhythm bearer/timing-reference/window rather than U.Rhythm.
Each field-definition item either carries a small local C.27 temporal-claim adequacy value or points back to the existing FPF pattern that governs the referenced object. A field name is not a pattern. Metric, process, service, practice, policy, harm, operational-support, and envelope wording does not create a free C.27 slot. It must resolve to a local C.27 value, an existing FPF kind and reference, or a governing-pattern relation; otherwise it remains Plain example language.
dynClaimPosture discipline: in Dyn2TemporalClaimProfile, dynClaimPosture is a
pattern-relation declaration, not a maturity scale. A diagnosticReading does not mature
into a causalClaim by adding fields; [C.28](/generated/patterns/C.28) carries causal-use
questions and records. A planningModel does not become promiseBoundaryUse by
publication; promise, boundary, commitment, service, or assurance patterns carry
promise-like claim use. Changing dynClaimPosture may change the governing relation, pattern,
evidence path, model/planning assumption, or assurance-facing relation.
No C.27 field completion upgrades dynClaimPosture; a higher-stakes dynClaimPosture is a
relation change.
C.27 has a small core. Specialized cases are C.27 dynamic-claim relations or optional profile blocks for authored temporal claims used beyond the local working context; they are not mandatory rules for every C.27 use.
These entries are not a general relation list. They apply only after an authored temporal claim already has C.27 relevance because it changes admissible use. Each entry names the neighbouring FPF pattern to inspect when that C.27-typed dynamic claim also depends on one non-C.27 question. If the text has no state, rate, rate-change, rhythm, regime, recovery, stabilization, transfer, or intervention relation that changes admissible use, no entry here applies.
Plain words may remain didactic. Tech prose must name the FPF pattern that carries the FPF-governed question.
Problem frames, Forces, and worked examples may use speed, force, inertia,
acceleration, rhythm, cadence, agility, or process-speed language when it helps
recognition. Field definitions, conformance requirements, and governing-pattern
relations should use the Tech readings below.
Minted C.27-local labels must carry the dynamic claim question in the label: use
Dyn2, Temporal, RateChange, Rhythm, Inertia,
CrossScale, MetricTarget, ControlPolicy, or another explicit dynamic
qualifier. A generic head such as Profile, Card, Process, Service,
Practice, Policy, Harm, OperationalSupport, or Envelope is not enough by itself.
Ordinary prose may use those words only as Plain examples or after resolving the
actual FPF kind and reference or governing pattern.
Avoid as Tech tokens unless already governed by the named pattern:
carrierOrSubject, D2DynamicsProfile, Metric, Axis, Dimension,
Process, Practice, Service, generic card names, Profile, ProcessBearer,
PolicyEvaluation, HarmEnvelope, force, mass, acceleration, and
rhythm.
Prefer: DynOrder, Dyn2TemporalClaimAdequacyCard, Dyn2TemporalClaimProfile,
entityOfConcernRef, temporalBearerRef, profileCarrierRef,
baseCharacteristicRef, MeasureRef, DHCMethodRef, claimWindowRef,
samplingWindowRef, effortWindowRef, rhythmWindowRef,
plannedEffortRef, actualEffortTraceRef, inputCharacteristicRefs,
interventionActorRef, authorityRelationRef, proposedWorkPlanRef,
hypotheticalUseNote, actorCapabilityRef, resistanceOrInertiaProxy,
resistanceProxyEvidenceOrAssumption,
dyn2MetricTargetEffectBlock?, dyn2ObjectCentricTraceBlock?,
dyn2CrossScaleTransferBlock?, dyn2HighStakesTemporalMoveRoute?,
supportedUse, unsupportedUse, and reopenTrigger.
The dynamic-order labels are values of a claim classification, not kinds of
things. Dyn0, Dyn1, and Dyn2 classify what a temporal claim treats as sufficient
for its use. They do not become U.Dyn0, U.Dyn1, U.Dyn2,
U.Acceleration, U.Rhythm, U.Practice, U.Force, or
U.SecondOrderProcess.
Kind-locality rule: DynOrder, Dyn0, Dyn1, Dyn2,
Dyn2TemporalClaimAdequacyCard, and Dyn2TemporalClaimProfile name readings
or records of authored temporal claims. They do not classify the primary EntityOfConcern
itself unless an existing FPF pattern separately types that object. "Team
throughput accelerated" may receive a Dyn2 claim reading; the team does not
become a Dyn2System, throughput does not become U.Acceleration, and the
card/profile does not become a dynamics law.
Dyn2TemporalClaimProfile is a pattern-local episteme record about the adequacy of
a temporal claim. It is not U.Dynamics, U.Work, U.WorkPlan,
U.MethodDescription, U.Measure, or CharacteristicSpace. If materialized
as a document, card, table, or file, that material is a carrier of the Dyn2TemporalClaimProfile
content, not the actual work, process, law, practice, or system being discussed.
A.7 EntityOfConcern/Description-episteme/publication-carrier split: Dyn2TemporalClaimAdequacyCard and
Dyn2TemporalClaimProfile are authored descriptions of temporal-claim adequacy.
They are not the dynamic system, not the work trace, not the measure, not the
service promise, not the intervention actor/role, not the dynamics law, and not identical to the
document/card/page that carries them.
The object split is:
Loose words require resolution in Tech prose. A process may be a method recipe, dated work run, transition law, event-log view, or service situation. A practice may be method description plus work traces. A service claim may involve system, promise content, delivery work, boundary semantics, or assurance. C.27 should not use these as untyped substitutes for named FPF kinds/references.
Copy-paste authoring forms (informative). These forms make C.27 cheap enough to use without jumping straight to a full profile.
Dyn0 or Dyn1 exit:
Local Dyn2 card:
Boundary-crossing profile header:
AI-assisted drafting rule (informative). An AI-assisted draft may propose that C.27 is relevant, but a profile appears only after the admissible use and the boundary-crossing reason are named. First classify the prose as ordinary prose, Dyn0, Dyn1, Dyn2 card, or profile/pattern relation. The draft does not infer: more tool calls means better reasoning; faster narrowing means better search; higher throughput means better quality; metric improvement means system improvement; or trend means intervention model.
Archetypal Grounding
Read these cases before the fuller field definitions. They show admissible stopping points for ordinary work:
- no C.27 record for ordinary state, metaphor, or unsupported broad-use language;
- Dyn1 or C.16 when the issue under repair is only measured rate;
Dyn2TemporalClaimAdequacyCardwhen a local temporal intervention, rhythm, braking, coasting, or tool-use rate-change claim needs a bounded evidence path, model assumption, planning assumption, or neighbouring-pattern relation;Dyn2TemporalClaimProfileor a named FPF pattern relation only when the authored temporal claim is used beyond the local working context, benchmarks, promises, assures, becomes causal, crosses scale, or carries decision-use that affects gate, release, assurance, benchmark, or work-plan use.
Example breadth (informative). C.27 appears across several work domains, not only project-velocity prose.
Additional dynamic near-misses:
These slices show what C.27 changes in use. They are action examples, not extra forms to fill.
Operations / backlog acceleration:
The value is not that every backlog sentence gets a profile. The value is that a decision-bearing acceleration claim cannot hide effort, window, resistance, and unsupported downstream claim, effect, or use.
Learning / practice transfer:
This carries the source article's replicable-practice idea: the useful formal payload is an effort/rhythm/window description that can be copied and checked, not a forced equation.
Rhythm/practice style vignette:
This keeps the article's useful dance/practice insight: style distinction may depend on effort and rate-change patterns over rhythm intervals, not only on static poses, single trajectories, mood words, or a general rhythm theory.
Rhythm / embodied or team coordination:
The important correction is that rhythm has a bearer and proxy. It is not a decorative label for good mood or smoothness.
Agentic tool-use / AI work cycle:
This keeps C.24 useful without turning tool-use quantity into a proxy for thinking quality.
Benchmark / faster improvement:
This prevents "faster" from hiding unequal effort, unequal windows, or unequal measurement templates.
Service / boundary promise:
The key point is that C.27 does not become a hidden promise pattern. It prevents temporal claims from silently widening into promises.
Aggregate or cross-scale transfer:
This protects multi-scale FPF reasoning: a rate-change does not transfer across levels merely because the same speed word appears at each level.
Goodhart / performative metric:
This is the practical bridge between C.27, C.16, C.26, and evidence patterns.
Bias-Annotation
Use C.27 only where it improves FPF as a first-practical entry and pattern relation pattern for temporal-claim adequacy. It is not enough for C.27 to be a correct dynamic-claim schema. The useful result is that a cold reader can notice when a state/rate reading is being used as a rate-change, rhythm-change, intervention, braking, coasting, recovery, stabilization, benchmark, promise, or assurance claim; choose the least-committing admissible next output; and stop or cite the carrying pattern without making C.27 absorb that pattern's governed concern.
The missing-question content belongs here only where it strengthens three practical abilities:
- how a reader finds C.27 from ordinary working language such as speed up, slow down, recover, stabilize, sustain cadence, improve faster, change direction, or reduce risk faster;
- how source ideas become FPF-facing guidance without turning physical or dynamic metaphors into new ontology: adopted, adapted, carried by another FPF pattern, or rejected as literal dynamics ontology;
- how C.27 keeps higher-demand claim relations with existing FPF patterns instead of becoming a general pattern for measurement, dynamics law, work, search, benchmarks, promises, assurance, viability, publication-unit stability, or QL.
Additional detail is useful only when it improves one of those three abilities or clarifies a stopping condition. More fields, case notes, or pattern-relation prose is rejected when they only make C.27 harder to refuse, harder to stop, or easier to misread as a general theory of change.
Gov. C.27 reduces hidden decision-claim inflation: local diagnosis, planning basis, benchmark use, public promise, and assurance use remain different claim uses.
Arch. C.27 is biased against stealing work from neighbouring patterns. It types authored temporal-claim adequacy question while measurement, formal dynamics, work, search, benchmark, promise, causality, quality, value, viability, scale, adaptation, and QL relations remain with the patterns that govern those concerns.
Onto/Epist. C.27 is biased toward described system, description, and carrier separation and toward explicit temporal-claim-use classification. It treats Dyn0, Dyn1, and Dyn2 as readings of authored temporal claims, not as kinds of systems.
Prag/Did. C.27 is biased toward cheap stopping, card-first use, and teaching through cases before field machinery. The first lesson is: a trend is not yet an intervention model.
Conformance Checklist
Use these requirements to judge whether a C.27 record or C.27-facing paragraph is sufficiently supported for the use it is making. Ordinary local use can stay small.
Value and harm boundary. A temporally adequate claim is not automatically a valuable claim. A valuable claim is not automatically temporally adequate. If value, harm, safety, legal, ethics, quality, or promise impact is FPF-governed, C.27 states only the temporal move, window, supported use, unsupported downstream claim, effect, or use, and pattern relation. The value, harm, safety, legal, ethics, quality, or promise pattern governs the other question.
Conceptual lint classes (informative). These labels describe cheap inspection faults, not a required tool.
Common failure modes after adoption (informative).
Common Anti-Patterns and How to Avoid Them
C.27 starts with the anti-patterns most likely to make a working reader misuse a state/rate reading as a Dyn2 temporal claim. Less frequent traps belong in the extended bank and should not become a first-screen checklist.
Use the negative cases to make non-use easy. They are not profile triggers.
Use the extended anti-patterns only when the live temporal claim actually raises that trap.
Consequences
C.27 should make FPF better at planning and reviewing dynamic claims while keeping ordinary state and rate claims cheap. Its main cost is one more C-pattern and several neighbour notes in existing FPF patterns. The mitigation is the central affordability rule: C.27 must be easier not to use than to misuse.
C.27 claims decay over time. Refresh or reopen when: Refresh demand stays proportional:
- sampling window, cadence, or time base changes;
- effort envelope or resource budget changes;
- intervention actor/role capacity, authority, or availability changes;
- inertia/resistance proxy changes: new tooling, team, queue topology, domain, work mix, constraints, or service environment;
- metric becomes a target, incentive, gate, dashboard, or public comparison;
- cross-scale transfer is attempted;
- outcome reverses, overshoots, oscillates, or becomes unstable;
- hidden queues, rework, burnout, quality loss, operational-support load, safety load, or coordination debt appear;
- rhythm bearer, timing reference, window, proxy, or coupling changes;
- claim use changes from assumption/diagnostic to benchmark, assurance, causal, promise-like, publication, or formal model use;
- the claim is reused outside its original validity window or domain;
- a coasting, braking, or recovery claim continues after effort changes or stops.
Local Dyn2TemporalClaimAdequacyCards normally need only a reopen, downgrade,
or pattern-reference condition. Dyn2TemporalClaimProfiles for boundary-crossing claim use should cite
validityWindowRef or evidence valid_until when the claim carries a
benchmark, gate, assurance, promise-like use, reusable method, publication, or
formal-model relation. If rate-change evidence decays, freshness and epistemic-debt
handling belongs with B.3.4 or G.11 rather than becoming a C.27 freshness calculus.
When a Dyn2 benchmark, task-family adaptation claim, public method claim,
selector-facing claim, SoTA-bearing publication claim, or other Part G publication carries a
temporal-claim record, C.27 reopenTrigger is not enough by itself. C.27 states
the temporal-claim question and its validity/reopen condition; G.9 carries benchmark parity
when comparison is being made; G.11 carries refresh orchestration such as refresh
queue, refresh plan, refresh report, deprecation notice, or edition bump when
evidence, comparator editions, method editions, claim windows, or validity
windows drift.
Rationale
The source material is most relevant where it replaces the question "what is the speed?" with "what effort profile, over which windows, changes speed, rhythm, direction, or stability under resistance and cost?" The C.27 keeps that practical move while rejecting physics ontology, mandatory calculus, false QL relevance, and default full-profile bureaucracy.
C.27 acts in FPF as a small modern correction for one recurring failure: working texts observe or name a rate and then behave as if they know how to change that rate. The pattern brings FPF up to modern practice only in the following shape:
- the state/rate/rate-change distinction remains the cheap recognition gain;
- control, policy evaluation, causal inference, process mining, benchmarking, rhythm, and high-stakes temporal-move cases appear as present profile blocks;
- quantum-like residual cases appear only as C.26 relations, not as C.27 claim-adequacy content blocks or fields of one universal dynamic object;
- control fields stay absent by default and appear only for control-style use;
- behavior-policy versus evaluation-policy discipline is visible when off-policy or sequential-policy transfer is claimed;
- causal claims carry intervention contrast, time zero, follow-up, outcome, assumptions, and identification/evaluation relation rather than C.27 shorthand;
- performative and Goodhart cases separate metric-as-measure, metric-as-target, and metric-as-intervention;
- work-cycle/process claims name bearer, object/event trace, interaction, and convergence/divergence rather than one generic process-speed label;
- dynamic benchmarks use C.27 to type the temporal-claim question while G.9 carries parity;
- rhythm claims stay bearer+timing-reference+window+evidence/proxy relation+supported-use by default, with entrainment or coupling claims with cross-bearer evidence commitments only when the claim needs them;
- quantum-like use stays out of C.27 unless a residual probe/order/frame/export cue remains after ordinary C.27, C.24, C.16, G.9, and E.13 pattern relations;
- full
Dyn2TemporalClaimProfiles remain rare, and the pattern improves action quality more than it increases paperwork.
One-line SoTA formulation for C.27: it makes
intervention-sensitive temporal claims explicit - policy, effort, window,
resistance, feedback, evidence, bearer, and supported use - while refusing to
treat every speed/rhythm phrase as control theory, C.28-governed causal-use claim, benchmark
superiority, or quantum-like modeling.
SoTA-Echoing
C.27 should be shaped by current modeling practice without becoming a survey paper. The C.27 SoTA claim is: C.27 is intervention-sensitive temporal claim adequacy with explicit evidence relation and temporal-claim-use classification, not literal second derivative everywhere and not universal control theory.
Source binding used by this section:
SoTA lesson -> FPF obligation map:
Source id references:
D2-SRC-1: Статика, динамика первой производной, динамика второй производной.D2-SRC-2: Learning-Based Model Predictive Control: Toward Safe Learning in Control and Review on model predictive control: an engineering perspective.D2-SRC-3: A Survey of Constraint Formulations in Safe Reinforcement Learning, A Review of Off-Policy Evaluation in Reinforcement Learning, Conservative Q-Learning for Offline Reinforcement Learning, and Methods in dynamic treatment regimens using observational healthcare data.D2-SRC-4: Causal Inference: What If and Causal Inference About the Effects of Interventions From Observational Studies in Medical Journals.D2-SRC-5: Performative Prediction, Performative Prediction: Past and Future, and Categorizing Variants of Goodhart's Law.D2-SRC-6: OCEL 2.0 and Object-Centric Event Logs: Specifications, Comparative Analysis and Refinement.D2-SRC-7: Active Inference: A Process Theory and Embodied decisions as active inference.D2-SRC-8: Neural entrainment underpins sensorimotor synchronization to dynamic rhythmic stimuli, A review of psychological and neuroscientific research on musical groove, and Finding the rhythm.
Control and MPC. Control-style claims need horizon, constraints, uncertainty,
feedback update, and stability only when control language is live. A local
Dyn2TemporalClaimAdequacyCard can say "we plan to brake rollout for two weeks to protect operational-support
capacity" without becoming MPC. If the claim is not control-style, do not fill
control fields. A control claim used beyond the local working context needs the neighboring governing-pattern relation.
C.27 control/policy relation: dyn2ControlPolicyRoute? is present only when
dynClaimPosture is controlModel, policyRule, adaptive, a feedback-bearing
planningModel, or an explicit C.24/C.19/evaluation relation. The block says that
the temporal claim has crossed into control/policy claim-use; it does not make
C.27 an MPC, reinforcement-learning, or policy-evaluation pattern.
Sequential decision and reinforcement-learning practice. Many real rate-change
claims are policy/regime claims, not one-shot effort claims. Policy-transfer
control/policy details live inside dyn2ControlPolicyRoute?, not in the default
Dyn2TemporalClaimAdequacyCard. When live, the block should recover behavior policy, evaluation policy,
overlap note, uncertainty or bound reference, unsafe-exploration note,
and pattern reference to C.19, C.24, U.Dynamics, or the evaluation pattern. This matters for
adaptive rollouts, agentic tool-use, clinical-like treatment regimes, and
repeated operational interventions.
Causal inference. C.27 is not a C.28 causal-use claim pattern. Effort plus observed rate-change may
carry a planning or diagnostic reading, but a causal attribution needs a separate
C.28 causal-use relation. When dyn2CausalUseRoute? is present, it should name the causal question,
intervention reference, comparator or counterfactual, estimand, time-zero or
assignment window, follow-up window, outcome measure, assumptions, rival causes,
identification strategy or evidence design when available, supported causal use,
and unsupported causal use.
Core rule: C.27 can say a claim is Dyn2 and intervention-sensitive. C.27 cannot
turn that basis into a C.28-governed causal-use claim with estimand, identification, realizability, evidence design, and supported-use judgment. Dyn2 can describe an intervention-sensitive
temporal-claim question; it does not estimate causal effect unless dyn2CausalUseRoute?
is active and C.28 causal-use discipline carries the causal question.
Performative prediction, Goodhart, and metric-induced behavior. When a metric becomes a target, dashboard, incentive, gate, or public comparison, it may change behavior. C.27 should branch the case instead of becoming a Goodhart pattern.
C.27:4 - Solution defines the dyn2MetricTargetEffectBlock? fields; this
section explains why metric publication and target use must be split from
measurement legality, proxy distortion, and residual probe or frame cue.
Content split:
- C.16 carries metric-as-measure;
- E.13, assurance, or governance patterns carry metric-as-target, incentive, proxy, utility distortion, or optimization target;
- metric publication as temporal intervention may make C.27 relevant;
- C.26 carries metric/probe changes to the admissible state reading only if residual probe, frame, order, or export cue remains after ordinary C.27, C.16, and E.13 pattern relations are named.
This keeps Goodhart from becoming a catch-all warning and keeps C.27 focused on the dynamic effect of metric publication or metric-target use.
Process mining and object-centric process mining. Scalar throughput is often a
thin view. Some dynamic claims need trace topology, multiple object bearers,
interaction notes, and evidence about how queues, tickets, incidents, customers,
orders, services, engineers, deployments, or review windows interact. When this question is live, C.27:4 - Solution defines the
dyn2ObjectCentricTraceBlock? fields. This section explains why multi-object
trace requirements should be named instead of pretending that one scalar
throughput rate says enough.
Active sensing and active inference. Measurement may be an action rather than a passive read, but that is still usually ordinary FPF pattern relations: measurement, state-space, planning, evidence, control, causal, or process-log basis. QL is not made relevant by typing, discreteness, state reduction, tokenization, or planned measurement. C.27 may notice dynamic or probe pressure, but it must not promote active inference, quantum cognition, or QL mathematics unless C.26 remains relevant after ordinary-pattern exit tests.
Rhythm and embodied dynamics. Load-bearing rhythm claims need bearer, timing reference, window, basis, and admissible use. Coupling, phase relation, entrainment-like relation, perturbation response, tempo drift, or synchronization evidence are downstream claim, effect, or use fields only when the claim depends on coordination between bearers. This preserves the useful dance/practice analogy without minting a rhythm ontology.
C.27 is a middle recognition-and-relation lens, not a general dynamic-theory pattern. It notices when a claim has moved from state/rate reading to intervention-sensitive temporal adequacy, then keeps higher-demand claim relations with the existing FPF pattern that carries them:
The following lines connect common failures to C.27 action, not to a literature catalog:
Relations
C.27 is the pattern for authored temporal-claim adequacy. It asks whether a claim about speed, rhythm, throughput, recovery, convergence, rollout, adoption, braking, coasting, redirection, or stabilization is sufficiently supported for the use being made of it. It does not become the pattern for the described system, work, measurement, benchmark, promise, quality bundle, or formal dynamics model.
When a temporal claim also touches another FPF concern, use the FPF pattern that governs that concern and let C.27 state only the temporal-claim adequacy question.
Use pattern references before expanding a C.27 record. When measurement,
transition law, work evidence, planning, benchmark parity, C.28 causal-use
claim, promise content, assurance claim, quality, viability, or residual QL
discipline governs the other question, the C.27 record cites that pattern and
keeps only the temporal-claim adequacy question.
When a temporal claim touches neighbouring work, keep these boundaries:
- Fields in a C.27 card do not imply new Kernel kinds.
- State space, measurement, transition law, work, planning, benchmark, causality, promise, service, quality-bundle, publication, and QL questions stay with the FPF pattern that governs each question.
- The EntityOfConcern, temporal bearer, profile content, and profile carrier remain distinct.
- If the text says process, work cycle, practice, service, method, system, or rhythm, the real bearer is named through a named FPF kind and reference rather than treated as one generic moving thing.
- Derivative-like readings remain C.16-compliant.
- Full
Dyn2TemporalClaimProfiles remain rare and justified rather than default. - At least one golden case exits or downgrades from Dyn2 correctly.
- Braking, pause, stabilization, redirection, and coasting are first-class temporal moves rather than failures to accelerate.
- QL relevance stays inactive unless ordinary pattern relations leave residual probe, frame, export, or coarsening cue.
- Causal, benchmark, promise-like, and assurance claims cite the governing
pattern relation that carries the claim rather than relying on an ordinary
Dyn2TemporalClaimAdequacyCard.
At use time, the concrete relation is enough: name the temporal-claim adequacy question, name the pattern that governs the other question, state the unsupported downstream claim, effect, or use, and choose the minimal C.27 output or the pattern relation that carries the other claim.
This informative matrix states the neighbouring-question boundaries. Ordinary C.27 use does not fill it as a separate form.
Core discipline: C.27 does not name new objects in the world. It names when an authored temporal claim has started to need intervention-sensitive temporal adequacy, then keeps each higher-demand claim relation with the FPF pattern that already governs that concern.
Practitioner-readable problem:
A trend is not yet an intervention model. Use C.27 when a claim about speed, rhythm, throughput, recovery, convergence, rollout, or adoption is used to change action and therefore needs effort, window, resistance, evidence path or assumption relation, and reopen discipline.
One-minute working script:
When a text says something should get faster, slower, recover, stabilize, or keep rhythm, first ask: are we only reading a state, only reading a rate, or claiming that an intervention changes the rate, rhythm, recovery, or stabilization? If it is only state or rate, stop. If it is an intervention claim, write the smallest
Dyn2TemporalClaimAdequacyCard: what changes, by what effort, in what window, against what resistance or cost, with what evidence path or assumption relation, for what admissible use, and what downstream claim, effect, or use is not carried by the temporal-claim record. Only boundary-crossing claims need aDyn2TemporalClaimProfile. Formal laws, measurements, work,C.28causal-use claim, benchmarks, promises, assurance, viability envelopes, scale-variable claims, adaptation signatures, and QL residues stay with the existing FPF patterns that govern those concerns.
C.27 also carries an early non-improvement boundary:
C.27 is not a temporal theory of everything. It is the smallest useful repair for one recurring authored-claim failure: rate talk pretending to know rate-change.
C.27 does not present itself as improving all temporal reasoning, all
process modeling, all practice description, all rhythm theory, all
control/RL/causal inference, all performance management, all QL or
active-inference modeling, all scaling claims, or all adaptation claims. It
improves one narrow working failure: it prevents state/rate readings from being
laundered into intervention-sensitive temporal claims without effort, window,
resistance, evidence/assumption relation, and supportedUse and unsupportedUse field discipline.
The first C.27 record should be the one-screen Dyn2TemporalClaimAdequacyCard, not a full Dyn2TemporalClaimProfile.
The Dyn2TemporalClaimProfile is a boundary-crossing claim-use C.27 record. Existing formal patterns carry formal models; a C.27 record cites them when the other question is live instead of copying C.27 theory into another pattern relation.
The durable bottom line is:
C.27 improves FPF only if it improves first-practical entry and pattern relation: it notices state/rate-to-rate-change laundering, produces the least-committing admissible next output, and keeps every higher-demand claim relation with the existing FPF pattern that governs that concern.
It should help FPF users act more carefully with speed, rhythm, effort, inertia, braking, coasting, and redirection claims. It does not make FPF carry mathematical theater, physics ontology, false QL relevance, or a hidden compliance backpack.
C.29 mathematical-lens use relation
C.29may state that a mathematical lens supports a prediction, distinction, obstruction, diagnostic boundary, or validation boundary. If the claim-bearing text is about forecast, rate, trajectory, rhythm, recovery, convergence, stabilization, speed, temporal window, or rate-change as sufficient for a use,C.27supplies the temporal-claim adequacy record or states that the temporal concern is not live. Formal transition-law, prediction, or control-model semantics stay withA.3.3plus evidence and assurance loci where those uses are live.
C.27:End
CausalUse-CAL: Causal-Use Questions, Causality-Ladder Rungs, Identification and Realizability
Type: Calculus (C) Status: Stable Normativity: Normative unless explicitly marked informative
Plain-name. Causal-use calculus.
Intent. Govern live causal questions and decision-bearing causal use: improvement, intervention effect, causal fairness, counterfactual comparison, causal policy optimality, realized counterfactual-rung evidence, identified counterfactual estimate, or simulation-only counterfactual output.
Primary EntityOfConcern. A causal-use question or claim together with the causal-use basis and follow-on records needed to use it admissibly: causality-ladder rung, estimand or contrast, evidence basis, identification status, counterfactual sampling realizability status, supported use, unsupported use, and next move.
Not a physical ontology. C.28 governs how FPF authors, reviewers, and operators use causal models, evidence, and counterfactual reasoning in records, policy claims, fairness claims, method comparisons, and work plans. It does not define physical causality in general and does not replace local domain science.
Use This When
Use C.28 when a claim is being used causally:
- "method A improves result";
- "users who received intervention X had better outcomes";
- "this practice is fair";
- "the agent chose optimally";
- "the model simulates what would have happened";
- "the system can collect counterfactual data";
- "this benchmark shows a causal method is better";
- "this policy should be deployed because it would have changed the outcome".
Use C.28 especially when the claim must distinguish:
- observed association;
- intervention or action effect;
- counterfactual comparison;
- direct counterfactual-rung data collection;
- identified counterfactual estimate;
- simulation-only counterfactual output;
- causal policy class;
- causal fairness use;
- causality-ladder parity in method comparison.
Not this pattern when. If no causal use is claimed, keep the work in the neighboring pattern: C.16 for measurement, C.27 for temporal trend or rate-change adequacy, B.3 for assurance result, A.10 for evidence graph reference, G.9 for ordinary parity, C.11 for local choice, C.19 for pool policy, C.24 for call planning, or C.26 for a surviving quantum-like modeling cue after ordinary causal explanations have been tried.
Activation boundary. C.28 activates at CausalUseActivation: causal wording changes what the claim makes admissible for publication, choice, deployment, assurance, audit, benchmark, or support treatment. The trigger is admissible downstream use, not the presence of a causal-looking word. If the wording is only exploratory prose and no causal use governed by C.28 is made, rewrite to association, trend, measurement, or simulation-only wording and stop.
Exploratory causal-looking prose is not a CausalUseActivation by itself. A note may say that a relation is plausible, worth probing, or suggested by traces and still remain in C.16, C.27, A.10, C.11, C.19, C.24, G.5, or G.9 until the text makes a causal use governed by C.28 admissible. The moment the text makes publication, choice, deployment, assurance, audit, benchmark, or support treatment depend on causal support, C.28 governs the causal-use boundary.
What Goes Wrong If Missed
A causal-looking phrase backed only by association, proxy, simulation-only, or rhetorical support gets promoted into a causal use that requires a named C.28 support basis and verdict.
Correlation becomes intervention effect. Interventional proxy becomes counterfactual fairness. A simulation becomes realized counterfactual-rung evidence. A benchmark compares methods across different causality-ladder rungs and still publishes one scalar superiority claim. An agentic policy is called optimal without saying whether it is a natural behavior policy, an interventional policy, or a counterfactual policy.
The practical error is laundering: the reader sees causal language but cannot recover what rung, estimand, evidence basis, and supported use are actually admissible.
What This Buys
C.28 gives FPF one cheap first stop for causal use.
The first useful result is not a heavy record. It is one small causal-use triage that says whether causal use is present, which causality-ladder rung is being used, what comparator or counterfactual is in play, what causal evidence-use class supports it, and what the next move is.
Durable cards and profiles appear only when the claim needs them. The pattern buys explicit causal discipline without turning every causal word into a paperwork exercise.
First-Minute Questions
C.28 in 60 seconds is the operational entry into CausalUseTriageRecord:
- Detect whether the claim reaches
CausalUseActivation: it changes what publication, choice, deployment, assurance, audit, benchmark, or support treatment is admissible. - Stop with
nextMove.cheapStopif the claim only reports association, trend, description, measurement, or simulation-only output. - If causal use is live, fill
targetCausalityLadderRung,comparatorOrCounterfactualRef, andcausalEvidenceUseClass. - Fill
supportedUse: CausalUseSupportStatementandunsupportedUse: CausalUseUnsupportedStatementas one action pair. - Fill
nextMove: CausalUseNextMove: choosecheapStopor escalate only when the claim is decision-bearing, publication-bearing, assurance-bearing, fairness-bearing, benchmark-bearing, or reusable.
First Output
The first output is a CausalUseTriageRecord:
cheapStop values are terminal or downgrade actions. They close the local causal-use question for now by saying what narrower use remains admissible, which neighboring pattern governs the remaining non-causal question, or that causal use is declined. escalateOnlyIfLoadBearing values are record-opening actions. They are admissible only when the supported-use and unsupported-use boundary cannot safely carry the reader's next action by itself.
If this first output cannot be written honestly, the causal-use claim is not ready.
CausalUseSupportStatement is one concrete causal-use action the current support makes admissible, such as publish association-only wording, use a bounded interventional estimate for a named decision, deploy only under a named policy constraint, run a fairness audit under a named causal estimand, or compare methods only inside one declared causality-ladder rung. It is not a confidence label, graph name, method name, or generic "evidence exists" phrase.
CausalUseUnsupportedStatement is the matching concrete causal-use action the current support does not make admissible, such as intervention-effect wording, realized counterfactual sample wording, causal fairness certification, causal policy optimality, cross-rung benchmark superiority, or release/deployment use. The supported and unsupported statements travel as a pair so the reader can act without inferring the boundary from prose tone.
The triage record may be the final causal-use carrier. Triage lines are enough when they block the overclaim and tell the reader what narrower use remains admissible. Do not open a local card merely because the word "cause", "effect", or "counterfactual" appears.
The triage causalEvidenceUseClass field is the first-pass alias for CausalEvidenceSupportBasis | missing. If a claim escalates beyond triage, the value must dock to CausalEvidenceSupportBasis; missing becomes unsupportedUse, CausalUseSupportVerdict = unsupported, or abstain.
Problem Frame
FPF already has dedicated neighboring patterns for measurement, evidence, assurance, temporal claims, decisions, exploration, call planning, fairness, method dispatch, parity, and quantum-like modeling. None of those neighbors should become the general authority for causal use.
C.28 exists because causal use cuts across those neighbors. The same sentence can be:
- a measurement description handled by
C.16; - a temporal trend handled by
C.27; - an assurance claim handled by
B.3; - an evidence graph reference handled by
A.10; - a decision record handled by
C.11; - a pool-policy record handled by
C.19; - a call-planning record handled by
C.24; - a fairness audit handled by
D.5; - a parity report handled by
G.9; - a quantum-like residual handled by
C.26; - or a causal-use claim governed here.
The first pattern task is therefore not to classify wording for its own sake. It is to recover the live causal question, the target causality-ladder rung, the support basis currently available, and the cheapest truthful next move. Sometimes that move is to downgrade the claim to association, temporal change, metric-only fairness, or simulation-only use. Sometimes it is to open identification, realizability, evidence-design, fairness, policy-evaluation, or benchmark-parity work. C.28 exists to keep those moves distinct and to stop teams from acting as if an identification, realizability, or intervention-support basis had already been earned.
Problem
Causal language is easy to overclaim because ordinary prose hides the difference between association, action, counterfactual comparison, realized counterfactual sample, identified estimate, and simulation.
Three collapses are especially dangerous:
- Rung collapse. Observational association, interventional action/effect, and counterfactual comparison are treated as one causality-ladder rung.
- Support collapse. Observed data, experimental data, direct counterfactual-rung samples, identified estimates, and simulations are treated as one evidence basis.
- Use collapse. A result that supports one use, such as association reporting, is reused for another use, such as causal fairness, policy optimality, or method superiority.
C.28 prevents those collapses by making rung, support, and use explicit before claims requiring higher causal support are admitted.
Forces
Solution
Use a three-level causal-use escalation:
- Start with
CausalUseTriageRecord. - Escalate to
LocalCausalUseQuestionCardorDurableCausalUseQuestionCardonly when the claimed use needs a reusable causal-use record. - Add profiles or specialized records only when the claim triggers that exact need: identification, realizability, evidence design, fairness, policy evaluation, transportability, estimation validity, causal-variable representation, or parity.
The default move is cheap. The heavy move is triggered.
Causal-use governance and consumer carry-through boundary
C.28 governs causal-use objects and causal-use support roles. Neighbor patterns keep their local authority and consume only the causal-use pieces they need: measurement, evidence path, assurance, fairness, decision, exploration, call-planning, dispatch, parity, and refresh records do not become causal-use governing patterns by carrying C.28 fields.
A neighbor may quote the C.28 values it consumes for by-value readability. Quoting the values does not transfer governing authority. A neighbor pattern governs only its local record and must cite C.28 when the causal-use question or causal-support basis is live.
Compact crosswalk:
Rung-support-use examples:
Causality-Ladder Rung
CausalityLadderRung is a controlled value set:
observationalAssociationRungmeans passive observation, natural behavior, association, or seeing-only case.interventionalActionRungmeansdo(x), intervention, action setting, experiment, policy change, or action-effect case.counterfactualComparisonRungmeans counter-to-fact comparison, unit-history-conditioned comparison, potential-outcome contrast, or counterfactual-imagination case.
A higher causal-use rung is not supported by lower-rung data unless a CausalIdentificationProfile, CounterfactualSamplingRealizabilityProfile, or bounded-use statement says exactly what is supported and what is not.
Causal-Use Claim Kind
CausalUseClaimKind is the controlled value set for the local causal-use claim being made:
causalEffectClaimmeans a result is used as an effect, improvement, harm, or intervention/outcome claim.counterfactualComparisonClaimmeans a counter-to-fact, potential-outcome, or unit-history-conditioned comparison is being used.causalFairnessClaimmeans fairness is claimed through a causal path, intervention, counterfactual, or causal estimand rather than only a metric.causalPolicyClaimmeans a policy, action rule, exploration rule, or agentic strategy is claimed as causally preferable.causalBenchmarkParityClaimmeans causal methods are compared for parity, superiority, or benchmark consumption.causalEvidenceSupportClaimmeans an evidence path is being used as causal-use support.causalAssuranceSupportClaimmeans an assurance tuple or support verdict is being used for a causal-use claim.
Simulation-only causal use stays inside the existing claim-kind set. simulationOnlyCounterfactualOutputBasis is a support/use value, not a new CausalUseClaimKind. Use the relevant claim kind, usually counterfactualComparisonClaim, causalPolicyClaim, causalBenchmarkParityClaim, or causalEvidenceSupportClaim, and set CausalEvidenceSupportBasis = simulationOnlyCounterfactualOutputBasis with bounded model-supported use and unsupported use. Bounded model-supported simulation use does not become realized counterfactual sample evidence or intervention-effect evidence. Do not mint a separate simulation-only claim kind merely to avoid naming the support basis value.
Encoding rule: choose the causal-use claim kind by the question being answered, then choose simulationOnlyCounterfactualOutputBasis as the support basis and write CausalUseSupportStatement / CausalUseUnsupportedStatement for the bounded simulation use.
Causal-Use Cards
Use a local card when the claim needs a small working record:
Use a durable card when the claim is decision-bearing, publication-bearing, fairness-bearing, benchmark-bearing, assurance-bearing, or reusable:
The durable card is not the default. It is the record used when a causal note without the required [C.28](/generated/patterns/C.28) support basis would be unsafe.
Causal Evidence Support Basis
CausalEvidenceSupportBasis is a controlled value set:
This is the [C.28](/generated/patterns/C.28)-governed value set for causal evidence support basis. causalAssumptionOnlySupport and noCausalEvidenceSupport are not values of CausalEvidenceSupportBasis: assumption-only support condition belongs in causalAssumptionSetRef plus supported use and unsupported use; no-support basis value belongs in CausalUseSupportVerdict, unsupportedUse, or abstain.
Simulation-only output never becomes realized counterfactual-rung evidence by name alone. It may support model-based use only when assumptions, validation, and supported use and unsupported use are declared.
realizedCounterfactualSampleSupportBasis does not mean observing two incompatible outcomes for the same unit in one realized world. It means physically obtaining samples from the declared target counterfactual distribution under the profile's constraints.
CausalEvidenceSupportBasis names a support basis value. It is distinct from an evidence source, an [A.2.4](/generated/patterns/A.2.4) evidence role, and an [A.10](/generated/patterns/A.10) evidence path. Some support bases are direct empirical support-basis classes, such as observational or interventional support. Other support bases are inferential support-basis classes, such as identified counterfactual estimate support. Do not read this value set as only a raw evidence-source kind.
realizedCounterfactualSampleSupportBasis does not mean observing two incompatible outcomes for the same unit in one realized world. It means physically obtaining samples from the declared target counterfactual distribution under the profile's physical, ethical, operational, unit-history, and graph constraints.
Identification Profile
CausalIdentificationProfile answers whether a causal or counterfactual estimand can be expressed from available data plus assumptions, graph representation, and inferential calculus.
Identification is inferential support. It is not direct physical sampling.
Realized counterfactual data may change an identification route, tighten a bound, or change which assumptions are still needed. When it does, the profile names the data refs, identification method, and bound ref that changed the result. It does not erase the distinction between identification and direct sampling; the profile must still state what is identified, bounded, unknown, or not identified.
Counterfactual Sampling Realizability Profile
CounterfactualSamplingRealizabilityProfile answers whether samples from a counterfactual-comparison target distribution can be physically obtained through admissible actions under physical, ethical, operational, unit-history, and graph constraints.
Realizability is operational. It asks what work can be done, by which system, with which action primitives, under which constraints.
Applied Causal-Inference Profiles
Target-trial and potential-outcomes claims use TargetTrialProtocolRecord and U.PotentialOutcomeContrast when the causal-use claim is an applied intervention-effect claim.
Target-trial emulation from observational data adds a mapping/reporting record. TargetTrialEmulationMappingRecord records the fit between the protocol and the observed data; TargetTrialProtocolRecord alone does not state emulation adequacy.
Numerical causal estimates use CausalParameterEstimationProfile when estimation validity is live:
Transported support uses CausalTransportabilityProfile:
Off-policy causal evaluation uses OffPolicyCausalEvaluationProfile when a policy is evaluated from data generated by another behavior or logging policy:
Causal representation learning uses CausalVariableRepresentationRecord when abstract causal variables are learned, selected, abstracted, or represented from fine-grained observations rather than given by the domain:
Causal Graph Representation Names
Use names that causal inference specialists can recognize:
When graph separation or graphical calculus is part of the causal-use support, use controlled values rather than open prose:
CausalGraphRepresentationKind, GraphSeparationCriterionKind, and CausalInferenceCalculusKind are formal-support classification values, not minted model objects. They classify the formal support form being used for causal support. Concrete ...Ref fields point to actual models, diagrams, proof objects, assumptions, or epistemes and must be present when that formal support form is load-bearing. For example, StructuralCausalModelRef cites a concrete SCM object, while structuralCausalModelTwinNetworkRepresentation classifies a representation form.
StructuralCausalModel is the causal model kind with endogenous variables, exogenous variables, structural assignments, and intervention semantics. structuralCausalModelTwinNetworkRepresentation means the SCM twin-network representation used in counterfactual reasoning with shared exogenous variables. It is not a deep-learning twin network.
Acronyms such as SCM, DAG, ADMG, SWIG, and AMWN may appear as source/plain labels and bridge notes. FPF Tech values expand the source name when expansion reduces alias risk.
Causal Use Evidence Design
Use CausalUseEvidenceDesignRecord when the causal-use claim needs evidence planning, evidence graph support, experiment or quasi-experiment design, counterfactual randomization, mixed-design accountability, or simulation validation.
This record does not replace [A.10](/generated/patterns/A.10) or [B.3](/generated/patterns/B.3). It gives them causal-use structure.
Higher-requirement causal evidence is worth planning only when it can change a choice, deployment decision, fairness consequence, assurance consequence, or benchmark conclusion enough to justify its cost, risk, and delay. If additional support would not change the next action, keep the narrower supported use explicit and stop.
Verdicts
CausalUseSupportVerdict is the action grammar:
supportedmeans proceed only under the named supported use.boundedmeans proceed only inside the named limit and recordcausalBoundedUseReason.unsupportedmeans downgrade the claim or remove causal use.abstainmeans no causal-use conclusion and recordscausalAbstainReason.
No verdict is allowed to silently widen the claim beyond its evidence support basis.
Causal Action Policy Class
Use CausalActionPolicyClass when a decision, exploration policy, call plan, or agentic strategy depends on causal rung:
naturalBehaviorPolicyfollows observed or natural behavior.interventionalPolicychooses an action ordo(x).counterfactualPolicyacts conditioned on natural action, unit history, or counterfactual response.
This distinction matters for [C.11](/generated/patterns/C.11), [C.19](/generated/patterns/C.19), and [C.24](/generated/patterns/C.24); it does not make those patterns the authority for causal evidence, identification, or realizability.
CausalActionPolicyClass is a classification value for policy-use class: natural behavior, interventional action, counterfactual policy, mixed policy, or unknown policy. It is not the policy object, not U.Policy, not [C.19](/generated/patterns/C.19) pool policy, and not the executable policy used by an agent.
Local U.* Docking
U.CausalUseQuestion names the question whose answer would make a causal use admissible: association use, intervention-effect use, counterfactual-comparison use, causal fairness use, causal policy use, causal evidence support use, causal assurance use, or causal parity use. It governs the question-to-use relation, not the evidence path, estimator, policy object, graph object, or local neighbor pattern.
U.CausalEstimand names the target quantity, contrast, distribution, or functional answer shape for a U.CausalUseQuestion. It binds the question to what would have to be estimated, identified, sampled, bounded, or emulated. It is not the estimator, not the observed metric, not the graph, not the policy object, and not the support verdict.
The card/profile family docks to those heads this way: triage decides whether a U.CausalUseQuestion is live; local and durable cards stabilize the question, U.CausalEstimand, and supported use and unsupported use boundary; profiles and specialized records state what support basis, formal support form, operational work, assumptions, and admissible use the question-estimand pair can carry.
Local name cards:
Lexical tripwires:
Neighbor Routing Table
Non-Goals
C.28 does not:
- define physical causation or decide what causation is in the modeled world;
- choose one causal school, such as SCM/PCH, potential outcomes, target-trial emulation, transportability, causal ML, causal RL, or causal fairness, for all FPF use;
- certify a DAG, SCM, SWIG, AMWN, or other graph as true or sufficient causal support by naming it;
- replace local domain science, domain intervention definitions, outcome definitions, or substantive rival-cause knowledge;
- replace
C.16measurement and metrics characterization, including metric construction, calibration, and non-causal score interpretation; - replace
A.10evidence graph referring, provenance paths, evidence-role carriers, or evidence graph path discipline; - replace
B.3trust and assurance calculus, assurance tuples,F-G-R/CLconsequences, or assurance publication use; - replace
D.5bias audit and ethical assurance, causal-fairness audit responsibility, or human/group-impact review; - replace
G.9parity benchmark harness, causal-rung parity screen, or benchmark report structure; - replace
C.11choice,C.19exploration/exploitation policy, orC.24call-planning patterns; it only supplies causal-use support boundaries consumed by those patterns.
Cheap Downgrade Library
Use a downgrade sentence when a narrower admissible use is enough:
Each sentence below is an admissible cheapStop wording. It closes the causal-use question for the named insufficient-support case unless the author keeps a publish, choose, deploy, assure, audit, benchmark, or support-treatment use that commits the text beyond the cheapStop boundary alive.
CausalUseBureaucracySniffTest
CausalUseBureaucracySniffTest keeps a causal-use carrier only when it changes the admissible next action or blocks a concrete overclaim. Keep the causal-use record only when at least one answer is "yes":
PublicationUnit Stability Relation
When the live problem is only local wording pressure inside one PublicationUnit, local lexical-head repair under E.17.AUD.LHR, whole-unit primary entity-of-concern stabilization under E.17.AUD.OOTD, relational precision restoration, explanation faithfulness, or conservative retextualization, apply the governing publication-side FPF pattern rather than C.28. C.28 opens at CausalUseActivation, when the wording makes publication, choice, deployment, assurance, audit, fairness, policy, or benchmark use depend on causal support.
Causal-Laundering Golden Cases
Archetypal Grounding
Tell. A causal-use claim is a promise about what a reader may do with a result. The claim is safe only when the rung, contrast, support basis, and allowed use are named.
Show (System). A product team observes that users who received an intervention had better outcomes. C.28 first records an observational association unless the team can name an interventional-action design, target trial protocol, identification profile, or evidence design that supports intervention-effect use. If the team only has observational association, the next move is to publish association or build evidence, not to claim causal improvement.
Show (Episteme). A fairness report says one model is fair because a metric improved after a policy change. C.28 asks whether the fairness claim is associative, interventional, or counterfactual. If it is interventional-action-rung only, it cannot be published as counterfactual fairness without identification or realizability support.
Show (Policy). A team wants to deploy a causal policy learned from logged behavior data. C.28 records causalPolicyClaim, interventionalActionRung or counterfactualComparisonRung as appropriate, CausalActionPolicyClass, OffPolicyCausalEvaluationProfile, support/overlap checks, uncertainty, supported policy use, and unsupported policy use. If the behavior policy cannot support the target policy, the admissible output is bounded use or abstain rather than "the policy is optimal".
Show (Causal RL). An online learner uses behavior-policy logs and counterfactual data-fusion to choose a treatment, ranking, or action policy. C.28 records the natural behavior policy, evaluation policy, CausalActionPolicyClass, target rung, confounding/support assumptions, OffPolicyCausalEvaluationProfile, uncertainty, supported policy use, and unsupported policy use. The learner may publish bounded causal policy support only for the declared regime; it must not turn replay reward, exploration success, or counterfactual strategy output into an unqualified optimal-action claim.
Show (Evidence Work). A lab can physically run a counterfactual-rung sampling procedure by assigning compatible action regimes to matched units under ethical and operational constraints. C.28 separates CounterfactualSamplingRealizabilityProfile from CausalIdentificationProfile: the realized sampling work becomes U.Work with evidence carriers and guards, while identification remains the inferential route from assumptions, graph, calculus, and available data.
Show (Simulation-Only). A simulator produces "what would have happened" traces for a rollout decision. C.28 can allow useful model-supported use without calling the traces realized counterfactual-rung evidence: the record uses simulationOnlyCounterfactualOutputBasis, names counterfactualModelAssumptionSetRef, simulationValidationRef, supported simulation use, and unsupported use. The output may support rehearsal, sensitivity exploration, or model-based explanation inside declared limits; it does not support direct counterfactual sample wording or intervention-effect publication by vocabulary alone.
Show (Benchmark). A benchmark compares one observational predictor, one intervention optimizer, and one counterfactual strategy. C.28 does not ban the comparison, but it requires CausalMethodRungParityRecord through G.9: if rung, estimandRef, interventional-action basis, support basis, consumed C.28 support record and verdict, transportability, follow-up window, and estimation-validity basis are not comparable, the benchmark publishes bridge and loss relation, degraded use, or abstain instead of one superiority claim.
Bias-Annotation
C.28 is mainly a causal-discipline and anti-overclaim pattern for decision-bearing causal use. One part of that work is catching language laundering, but the larger job is to keep causal reasoning, evidence design, realizability, policy evaluation, fairness use, and benchmark parity from silently borrowing a C.28 support basis, support verdict, or admissible-use value they do not actually have.
Common biases:
- Causal prestige bias. A result sounds more important when phrased causally, so under-supported evidence gets overused.
- Simulation laundering. A simulated counterfactual is treated as observed or realized counterfactual-rung evidence.
- Metric proxy bias. A fairness or performance proxy is treated as a causal result without rung and estimand.
- Benchmark scalarization bias. A method comparison collapses different causal rungs, estimands, or transport assumptions into one score.
- Graph sufficiency bias. A named graph is treated as enough without assumptions, data regime, calculus, and admissible use.
The repair is not to ban causal language. The repair is to recover the live causal question, choose the least-committing admissible causal use supported by the available evidence, and then either downgrade, bound, design a causal-evidence plan with the required C.28 support basis, open identification or realizability work, or abstain.
Conformance Checklist
Common Anti-Patterns and How to Avoid Them
Consequences
C.28 makes causal use slower only when the claim commitment, consequence risk, or evidence demand warrants it. Cheap causal triage remains cheap.
Positive consequences:
- Causal claims become inspectable by rung, support basis, and admissible use.
- Counterfactual sampling realizability becomes operational rather than merely philosophical.
- Identification and realizability no longer collapse.
- Fairness, policy, and benchmark claims stop borrowing causal force beyond what their evidence supports.
- Neighbor patterns receive narrow causal hooks without becoming general causal authorities.
Costs:
- Authors must learn a small causal vocabulary.
- Some attractive claims will be downgraded to association, bounded use, simulation-only, or abstain.
- Higher-rung claims need more evidence, assumptions, or work-plan detail.
The cost is intended. It is cheaper than publishing an unsupported causal use.
Rationale
FPF needs this pattern because causal language changes what a reader may do.
Temporal language can say that something changed. Measurement language can say that a score is higher. Assurance language can say that evidence has more or less support. None of those alone says that an action caused a result, that a counterfactual comparison is supported, or that a causal policy should be deployed.
C.28 therefore uses a semantic-authority split:
C.28governs causal-use question, rung, estimand, identification, realizability, causal evidence support basis, and causal-use verdict.- Neighbor patterns keep their own authority and cite
C.28only when causal use is live. C.26receives a causal exit: intervention, causal effect, causal fairness, causal policy, and counterfactual-rung-data realizability are ordinary causal-use questions before they are quantum-like modeling questions.
The pattern is not Pearl-only. SCM/PCH provides the rung discipline, but potential outcomes, target-trial emulation, causal ML estimation, transportability, causal representation learning, causal RL, and causal fairness all change the fields that FPF must preserve.
SoTA-Echoing
Relations
C.16governs measurement and metrics.C.28activates only when a measurement is used causally.C.27governs temporal claim adequacy.C.28activates when temporal change is used as causal effect, intervention evidence, or counterfactual comparison.A.10governs evidence graph referring.C.28supplies causal evidence support basis and causal-use support refs for evidence paths.A.2.4governs evidence roles.C.28requires the evidence-role distinctions that keepsimulationOnlyCounterfactualOutputBasis,identifiedCounterfactualEstimateSupportBasis, interventional evidence, andrealizedCounterfactualSampleSupportBasisfrom being confused.A.6/A.6.B/A.6.Cgovern boundary, deontic, promise, commitment, utterance, contract-language, and L/A/D/E-classified claim language.C.28supplies only causal-use support when mixed boundary sentences claim causal effect or counterfactual support.A.15governs role, method, plan, and work alignment.C.28supplies the causal-use semantics for intervention assignment, target-trial emulation, counterfactual sampling work, and causal evidence collection.B.3governs trust and assurance.C.28supplies the causal-use verdict thatB.3can degrade, bound, or abstain over.C.11governs decision theory.C.28supplies causal-use question and causal action-policy class when value, utility, regret, or optimality depends on causal rung.C.19governs explore/exploit pool policy.C.28supplies causal rung and policy/regime fields when exploration collects causal data or learns causal policy.C.24governs agentic tool use and call planning.C.28suppliescausalActionUseSpecwhen calls select observation, intervention, counterfactual-rung evidence collection, or counterfactual policy conditioning.D.5governs bias audit and ethical assurance.C.28supplies causal fairness rung, estimand, support, and supported fairness use.G.5governs method dispatch and MethodFamily registry.C.28supplies causal method or policy class declarations when method dispatch compares causal methods.G.9governs parity and benchmarks.C.28supplies causal method rung parity.G.11governs refresh orchestration.C.28supplies causal-use support records whose realizability, identification, fairness, representation, off-policy, target-trial, and simulation-validation shifts can trigger refresh.C.26governs quantum-like modeling.C.28is a required causal exit before QL retention when the question under repair is intervention, causal effect, causal fairness, causal policy, counterfactual comparison, or counterfactual-rung-data realizability.
Footer Marker
C.29 mathematical-lens use relation
C.29may document that a mathematical mapping appears abstraction-like, quotient-like, coarse-graining-like, simulation-like, or macro-model-like. It does not decide causal-use support. When the supported use includes intervention, policy, counterfactual, causal explanation, or causal decision, applyC.28; otherwise recordCausalUseDisposition = noCausalUseClaimorcausalUseBlocked.
C.28:End
Mathematical Lens Use
Type: Architectural pattern Status: Stable Normativity: Normative unless explicitly marked informative
Plain-name. Mathematical lens use.
Primary EntityOfConcern. C.29 concerns a declared mathematical-lens use for a stated phenomenon, EntityOfConcern, relation, claim, or structure-bearing situation. The use names the mathematical object, formalism, learned representation, simulation object, local formal role, or mathematical family; the mapping mode; the preserved structure; the lost structure; the visible payoff or obstruction; the admissible use; the non-admissible use; and the stop condition. FPF-governed wording, pattern examples, method notes, review records, PublicationUnits, decision-facing text, comparison-facing text, bridge-facing text, and assurance-input text can contain or cite that use, but they are not the primary EntityOfConcern of C.29.
Slot discipline. C.29 uses CandidateMathObject for the mathematical object, formalism, learned representation, simulation object, local formal role, or family in a declared mathematical-lens-use relation. U.Signature(profile=FormalSubstrate) in A.6.0 is a different relation position: it declares vocabulary, laws, imports, and applicability for a formal substrate. A.6.1 governs mechanism import or realization when that formal substrate is used in a mechanism; E.18.1 governs P2W transduction when accepted problem-side material needs that formal declaration for later work. The same mathematical object may appear in several of these positions, but the governing pattern is selected by relation position and claim being made, not by the word substrate.
Output boundary. C.29 outputs are lens-use notes, one-line entries, mini-cards, full cards, and neighboring-pattern notes. They state which declared mathematical-lens use is admissible, what remains blocked, and which neighboring FPF pattern governs any non-lens claim being made. Project approval, work, evidence, assurance, decision, or release use must be recorded through the governing pattern for that use.
No new U.* from C.29 local lens-use outputs. MathLensUse.OneLine, MathLensUse.MiniCard, MathLensUse.FullCard, MathLensUse.Card@Context, MathLensUseOutputRef, and CC-C29-* are C.29-local instruments. They do not mint U.MathLens, U.MathLensUseRecord, LensKind, MathLensUseCompliance, or a durable record family. Durable names, kinds, or records require explicit FPF admission through F.18, C.3, F.8, and E.9.
First-use card
Use this card before the full card. It is enough for the first use pass unless publication, bridge, assurance input, benchmark, model selection, prediction, formal pattern claim, or repeated cross-case use is being made.
Start with the useful lens decision: choose, apply, bound, replace, or remove a mathematical lens when the mathematical structure changes explanation, decision, prediction, comparison, publication, bridge, assurance input, reusable transfer, or the next admissible repair. If no next admissible move changes, keep ordinary prose or write NoMathLensUseNeededNote. If state, transition, measurement, causal use, bridge semantics, temporal adequacy, assurance, selector, benchmark, or release is the claim being made, apply the governing FPF pattern and keep C.29 to the mathematical-lens use part.
Problem frame
FPF already uses mathematical structures in several local patterns. A.6.P asks for stable mathematical substrate during relation precision restoration; A.3.3 governs dynamics; A.19 governs characteristic spaces and structural overlays; C.18.1 and C.19.1 govern scale-law and Bitter-Lesson claims; C.26 contains the separation of a quantum-like lens from physical quantum ontology; F.9 governs cross-context bridges and loss.
The positive need is as important as the guard. In working projects, first-principles mathematical thinking starts from the smallest declared structure that can make a next move derivable, inspectable, or honestly blocked. A queue can expose waiting and bottlenecks, a state space can expose variables and transitions, a graph can expose dependencies, a metric-space distance or topology can expose comparability limits, a symmetry can expose invariants, a variational principle or constrained optimization functional can expose an extremal condition, admissible variation space, boundary condition, conservation link, or trade-off, an information or probability measure can expose uncertainty, a resource bound can expose realizability limits, and an obstruction can expose where a transfer or simplification stops.
The missing FPF rule is general but narrow: when FPF-governed wording, a pattern example, method note, review record, PublicationUnit, or neighboring-pattern note uses or plausibly needs a mathematical object, formalism, or family for explanation, decision, prediction, comparison, publication, bridge, assurance input, or reusable application, the C.29 application records the useful first-principles modeling structure and its boundary. It names the candidate mathematical object or family, what structure is preserved, what structure is lost, what invariant, admissible distinction, obstruction, diagnostic boundary, or constructive limit becomes visible, which LensUseAdmissibilityValue value is declared for that use, and where the mathematical-lens use stops.
A C.29 application is justified when a mathematical object is used for explanation, decision, prediction, comparison, publication, bridge, assurance input, or reusable transfer, or when a stable working problem is under-lensed and a cheap candidate lens could expose useful structure for the next move. Mathematical appearance alone is not enough.
The first move is not a full-card demand. It is a first-principles entry decision: choose the smallest mathematical structure that changes the next admissible move, keep ordinary prose when no mathematical structure changes the move, or apply the governing FPF pattern when the claim being made is outside the declared lens use. The result records what the lens preserves, what it loses, what it makes visible, what remains blocked, and where the use stops.
Selected compact formulation:
A useful mathematical lens is compression with invariants and declared losses.
This compact line is retained as a Plain-register orientation, not as a substitute for the card. It keeps the useful metaphor of a lens: a mathematical object can make a hidden structure visible, but only by carrying some structure and dropping other structure. The first practitioner questions are: what survives the transfer, what is lost, what can now be done, and where does the lens stop?
First-minute working situation
A practitioner applying FPF faces a working situation where ordinary prose can hide useful structure, or where a mathematical phrase is already doing work:
- waiting, backlog, bottleneck, or throughput can call for a queue or flow lens;
- state change, stabilization, control pressure, or forecast can call for state-space or dynamics vocabulary;
- dependency, interface, composition, or transfer failure can call for graph, hypergraph, category, operad, or compositional vocabulary;
- similarity, distribution shift, population movement, or shape change can call for metric-space distance, topology, embedding, or optimal-transport vocabulary;
- scale transition, coarse behavior, universality, knee, or scaling pressure can call for coarse-graining, RG, or scaling-law vocabulary;
- probe effects, order effects, context effects, or incompatible frames can call for quantum-like or contextual-probability vocabulary.
The useful first-minute intuition is not “hunt for overclaim.” It is “find the structure that would improve the next move, then name the limits.” A vivid phrase can remain when the C.29 output records what the lens makes visible, what it does not license, and which governing pattern governs any causal, evidence, bridge, dynamics, scale, measurement, assurance, or release claim.
Without a general lens-use discipline, the reader cannot tell whether the phrase is a bounded structure-preserving representation, an analogy-only prompt, an unsupported ontology import, a local domain model, or prestige language.
Minimum scenario and anti-case set
Positive scenario. A production line is represented as a queueing network. The lens preserves flow, bottlenecks, service rates, and waiting times; it loses human meaning, contractual obligations, rare failure modes, and causal interventions not represented by the network; the stop condition says that the queueing lens is admissible for throughput and latency reasoning, not a full organizational ontology.
Anti-case. “The organization is a quantum system” is written without a candidate mathematical object, probe distinction or readout distinction, preserved structure, lost structure, LensUseAdmissibilityValue, or stop condition. The C.29 result is either a downgrade to local metaphor or a repaired use through C.29 and, where relevant, C.26.
Under-lensed anti-case. “The work stream has dynamics” or “this portfolio is a network” is used for a diagnosis that affects prediction, comparison, repair, or stop conditions, but no mathematical object changes what can be predicted, compared, diagnosed, repaired, or stopped. The repair is to choose a cheap candidate lens that exposes useful structure, or keep the sentence as ordinary prose.
False-positive scenario. A Markov kernel appears inside accepted local reliability modeling. If no contested lens-transfer, publication, assurance, bridge, or reusable explanation claim is being made, the claim stays under A.3.3 and does not require a C.29 output.
Intended FPF use-value
C.29 gives a cheap use path before any full card or boundary table. Its first job is to help the working reader introduce, choose, repair, bound, or decline a mathematical lens by selecting the cheapest honest output: no C.29 output, a candidate note, a one-line repair, a mini-card, a full card when high-reliance use requires it, or a neighboring-pattern note when the claim being made is outside declared mathematical-lens use. Use it only when the mathematical lens affects a claim or next move; ordinary local math and decorative prose stay outside C.29. A successful C.29 result makes useful mathematical compression available to FPF as a disciplined modeling move while reducing ontology smuggling, prestige vocabulary, loss-free transfer, causal laundering, bridge duplication, evidence laundering, and assurance laundering.
Problem
Accepted FPF mathematical-lens use criteria are distributed and local:
A.6.Pgoverns relation precision restoration, but not every mathematical-object transfer.A.3.3governs state, transition, observation, validity, constraints, and calibration for dynamics, but not all mathematical representation choices.A.19governs characteristic spaces, structural overlays, comparability, normalization, and bridge-aware state comparison, but not the adequacy of all mathematical lenses.C.18.1andC.19.1govern scale-law and BLP claims, but not non-scale mathematical lenses.C.26is the local precedent for mathematical-lens detachment, but only for quantum-like modeling.F.9governs cross-context semantic bridges, but does not decide whether a mathematical object, formalism, or learned representation is adequate inside one context or as a domain-transferring lens.
There are two symmetric failure modes.
The first failure mode is mathematical under-lensing: a working situation needs a mathematical lens that changes prediction, comparison, diagnosis, repair, or stop conditions, but the record contains only ordinary prose, familiar school math, or a broad family name such as graph, field, space, score, trend, dynamics, or quantum-like without a useful invariant, obstruction, state variable, mapping, scale behavior, rival lens, or action-changing payoff.
The second failure mode is mathematical overread:
a mathematical phrase begins as a helpful representation and then silently becomes ontology, evidence, causality, comparability, assurance, or admissibility.
Forces
Solution and selected answer
Selected answer in one paragraph
C.29 — Mathematical Lens Use is the general FPF discipline for mathematical lenses used in explanation, decision, prediction, publication, comparison, assurance input, bridge, or reusable transfer. It handles two first-use cases, with the positive case first: an under-lensed situation where the next admissible move can benefit from a cheap first candidate lens; and an existing candidate lens proposed for application, repair, bounding, replacement, or rejection. Its job is to help the reader introduce, choose, apply, limit, replace, or remove a mathematical lens so that a useful admissible next move survives. A mathematical lens is admissible for a declared use when it compresses a phenomenon by preserving declared structure, exposing useful invariants, and producing lens-admissible predictions, distinctions, obstructions, or diagnostic boundaries inside a bounded context. It is inadmissible for an undeclared or unadmissible use when it imports source-domain ontology, hides loss under metaphor, treats source prestige as evidence, or licenses claims outside its declared scale, context, validation, bridge, causal, or assurance boundary.
C.29 does not mint MathLens, U.MathLens, LensKind, or any universal FPF lens object. In this pattern, “mathematical lens” names a declared use of a mathematical object, formalism, learned representation, simulation object, or mathematical family under declared mapping, preserved structure and lost structure, LensUseAdmissibilityValue, admissible use, and stop condition; the target phenomenon and any claim outside that declared lens use keep their own FPF kinds.
Admission guard: C.29 governs mathematical-lens use claims. It does not mint mathematical-lens kinds, and it does not govern or create the EntityOfConcern named by a neighboring claim-bearing episteme, Bridge, evidence path, causal-use relation, assurance score, measurement construction, dynamics semantics, decision record, work record, explanation rendering, comparative review unit, representation transition, coarsened rendering, selector, benchmark, or scale audit. Its outputs are local lens-use outputs unless a separate FPF naming and admission decision makes one durable.
Mathematical Lens Use Principle
Mathematical Lens Use Principle. A mathematical lens is admissible for a declared use when it compresses a phenomenon by preserving declared structure, exposing useful invariants, and producing lens-admissible predictions, distinctions, obstructions, or diagnostic boundaries inside a bounded context. It is inadmissible for an undeclared or unadmissible use when it imports source-domain ontology, hides loss under metaphor, treats source prestige as evidence, or licenses claims outside its declared scale, context, validation, bridge, causal, or assurance boundary.
Compact plain form:
A useful mathematical lens is compression with invariants and declared losses.
Register policy: Tech exactness below, Plain metaphor above. Plain phrases such as “structures that survive transfer,” “what the lens makes visible,” and “where the lens stops” are admissible as recognition aids. When a sentence makes an FPF-kind, relation, evidence, admissibility, causal, assurance, bridge, gate, work, decision, or pattern-application commitment, the corresponding C.29 output recovers the fields named by value and governing patterns.
Zero and first-principles compatibility note: E.1 and E.2 govern the mission and pillar authority. C.29 serves them by making mathematical first-principles lens use inspectable for one declared use: candidate mathematical object, preserved structure, lost structure, visible payoff, admissible move, neighboring-pattern boundary, and stop condition. It does not replace pillar authority, neighboring governing patterns, ordinary FPF reasoning, or E.9 design-rationale basis for normative changes.
Mathematics is not a prerequisite for FPF use. Ordinary prose is valid when no mathematical structure changes the next admissible move. C.29 earns its place only when a mathematical object, formalism, learned representation, simulation object, or mathematical family changes explanation, decision, prediction, comparison, publication, bridge, assurance input, reusable transfer, or the next admissible repair.
Plain and Tech bridge:
State, scale, and dynamics trigger: if the lens use names state, transition, forecast, rate, temporal window, scale window, observation, measurement, comparison, score, strong wording or weak wording, or causal implication, the cheapest honest output either names the minimal relevant field or names the governing FPF pattern. If characteristic, scale, coordinate, score, metric, indicator, or comparison wording is itself hidden, use C.16.P before relying on C.29; if a valid measurement relation is already recoverable, measurement construction and direct comparability stay with C.16. State and transition semantics stay with A.3.3; characteristic spaces and overlays stay with A.19; temporal-use adequacy stays with C.27; scale-law and general method-scale preference claims stay with C.18.1 and C.19.1; architecture scale-preference claims stay with C.31.ASAP; causal-use question and verdict stay with C.28.
Mathematicalization Utility Principle
A mathematical lens is worth introducing only when it changes the working reader's next admissible move by making at least one first-principles modeling structure visible:
- a declared signature, structure, state variable, transition, or observation map;
- a symmetry, invariant, conservation-like constraint, equivalence, or composition rule;
- a local-global relation, boundary relation, scale variable, coarse-graining rule, scale window, or correspondence condition;
- a variational principle, action, energy, free-energy, loss, or value functional, Euler-Lagrange or stationarity condition, constrained optimization target, dual view, objective vector, or resource trade-off;
- an uncertainty, probability, information, typicality, approximation, sensitivity, or validation boundary;
- an algorithmic, constructive, resource, realizability, implementation, or adversarial limit;
- a bottleneck, obstruction, impossibility, consistency boundary, or failed transfer in the candidate-model space;
- a rival-lens distinction that changes model choice;
- a causal, intervention, or counterfactual preservation question governed by
C.28; - a bridge or export loss governed by
F.9; - a measurement or comparability condition governed by
C.16.
If no next admissible move changes, keep the text as ordinary prose, downgrade it to a didactic metaphor, or return NoMathLensUseNeededNote. A lens that merely makes prose more impressive is not a successful C.29 result.
First-principles lens-family use
C.29 admits first-principles use only when the principle family changes what the working reader can derive, inspect, compare, observe, or honestly block. The family name is never enough. Each row below is a discovery and recovery discipline: it tells the reader what must be named before claim-bearing mathematical-lens use is admissible.
This table is normative as a recovery guide, not as a mandatory taxonomy. A local project may name a closer family, but it must recover the same claim-bearing structure: CandidateMathObject or candidate family, preserved structure, lost structure, visible payoff, use-admissibility value, and stop condition.
P2W and formal-declaration boundary: when one of these families is used in a P2W transduction from accepted problem-side material into later work, C.29 still records only the declared mathematical-lens use. A declared formal relation can make mathematical-to-mathematical exactness or near-sameness visible; it does not by itself declare a FormalSubstrate signature, PrincipleFrame, mechanism, observation-bound world claim, evidence path, causal-use relation, Bridge-admissible use, or work. Use A.6.0 for the U.Signature(profile=FormalSubstrate) declaration, A.6.1 when mechanism import or realization is being claimed, and E.18.1 when accepted problem-side material needs a formal declaration for later FPF use.
Bounded-observer structural-information lens
Use this subcase when a mathematical lens estimates, compresses, codes, compares, or otherwise exposes how much selected structure a bounded observer can recover from a description, relation trace, generated graph, model, or reusable-structure accounting result. Typical examples include MDL-like two-part codes, epiplexity-style extracted-structure estimates, compression-complexity comparisons, and information-functionals over relation graphs. The EntityOfConcern remains the declared mathematical-lens use, not the architecture, not the description, and not the observer.
Minimum record:
When the target is a physical, organizational, or project-world situation, the record must say whether the structural-information claim is observational, postulated, simulated, or only a description-local compression. When the lens is used in architecturing, [C.30](/generated/patterns/C.30) governs architecture as EntityOfConcern, [C.30.ASV](/generated/patterns/C.30.ASV) governs structural-view adequacy, [C.30.AD](/generated/patterns/C.30.AD) governs architecture descriptions, and [C.31](/generated/patterns/C.31) or [C.31.RSA](/generated/patterns/C.31.RSA) governs modularity or reusable-structure accounting. [C.29](/generated/patterns/C.29) records only the declared lens use: what recoverable structure the mathematical lens makes visible, what it loses, and where that use stops.
Architecture-local lens descriptions
Architecture work may use C.29-local descriptions for graph, flow, control, structural-information, RG or coarse-graining, and multilevel-learning or frustration lenses. These names are C.29 output descriptions, not architecture ontology, not proof, and not durable FPF kinds by themselves.
MLU.Description@RGArchitecture applies only when the use names a declared aggregation scope, scale variable or scale window, coarse-graining rule, preserved structure, lost structure, source-return condition, and the overread named by value that the lens does not license. If the claim becomes a scale-preference claim, C.31.ASAP governs the architecture preference side; C.29 keeps only the declared mathematical-lens use.
Minimum RG architecture description:
For architecture work, a common RG-shaped candidate object is:
The index _l is a declared aggregation-scope index inside this C.29 lens, not a generic level, tier, layer, or ladder. Each use names the aggregation scope, the coarse-graining rule, the lost structure, and the source-return condition.
MLU.Description@MultilevelLearningFrustration applies only when the use names declared holon levels or declared scopes, a mapping between them, conflicting constraints or residuals, preserved structure, lost structure, and the nearest neighboring FPF pattern for any measurement, causal, evidence, assurance, work, selected-set, or decision claim.
Minimum multilevel-learning and frustration description:
Admissible use: triage, explanation, candidate generation, rival-lens comparison, scale-window reasoning, source-return triggers, and architecture-decision rationale only when the neighboring pattern governs any non-C.29 claim. Non-admissible use: no proof that the project literally optimizes one global function, no causal proof, no assurance score, no claim that complexity necessarily grows, and no replacement for [C.11](/generated/patterns/C.11), [C.28](/generated/patterns/C.28), [B.3](/generated/patterns/B.3), [C.16](/generated/patterns/C.16), [G.5](/generated/patterns/G.5), or stakeholder and ethics patterns.
Use boundary
This boundary prevents C.29 from being over-applied.
Use C.29 when a mathematical object, formalism, learned representation, simulation object, or mathematical family is used as a lens for explanation, decision, prediction, publication, comparison, assurance input, bridge, or reusable transfer over a physical, organizational, epistemic, social, computational, scientific, or methodological phenomenon, or when a phenomenon, decision, explanation, comparison, model-selection, diagnosis, or method-choice problem is stable enough that the first useful move is to choose a cheap candidate lens that makes relevant structure visible.
Do not use C.29 as the governing pattern when:
- the mathematics is ordinary local domain theory already governed by a domain pattern;
- the phrase is a purely didactic analogy that is not reused for decisions, evidence, assurance, publication, bridge, comparison, or transfer;
- the question under repair is causal-use question, causal-use justification, or verdict, which is governed by
C.28; - the question under repair is measurement construction, scale legality, direct comparability, or evidence-stub adequacy, which is governed by
C.16; - the question under repair is cross-context meaning or substitution safety, which is governed by
F.9; - the question under repair is dynamics semantics without a separate lens-transfer claim, which is governed by
A.3.3; - the question under repair is a
CharacteristicSpaceoverlay with no domain-transfer, prediction, assurance, publication, or reusable explanation claim, which stays underA.19. - the use under repair is a
ChoiceResult, local choice record, selected-set publication, selected method,U.WorkPlan, performedU.Work, work-result record, or work-relevant source restoration; those claims stay withC.11,G.5orG.9,A.15,A.15.1, orA.15.4as appropriate. - the use under repair is an explanation-facing rendering, bounded comparative review unit, same-EntityOfConcern representation-scheme transition, or controlled semantic coarsening; those claims stay with
E.17.EFP,E.17.ID.CR,A.6.3.RT, orA.6.3.CSC, with C.29 fields carrying only mathematical-lens use when the mathematical lens affects the stated admissible use. - the claim being made is about forecast, rate, trajectory, rhythm, recovery, convergence, stabilization, speed, temporal window, or rate-change as sufficient for use; temporal-claim adequacy stays with
C.27.
This boundary keeps mathematical-lens use from becoming a shadow record for neighboring work.
Lexical rule: use structure-preserving representation rather than structure-preserving identification in discoverability-bearing prose, unless equivalence or identity is explicitly the declared LensMappingMode.
Action path before the full card
Begin with action guidance, not with the full card.
First action choices: keep ordinary prose, introduce a cheap candidate lens, name the CandidateMathObject or formal role that fits the stated use more directly, add visible payoff, add loss, choose the principal rival lens, add validation regime, narrow an existing claim, downgrade an overclaim, or apply the governing FPF pattern to any non-lens claim being made.
Memory hook: a successful C.29 application can raise or lower the mathematical claim-bearing use. It can introduce a first candidate lens, keep ordinary domain prose, remove a mathematical lens, repair relation wording through A.6.P, declare a CharacteristicSpace through A.19, use C.16 for measurement and comparability, apply F.9 for bridge semantics, ask the C.28 causal-use question, restore work or source responsibility through A.15, or apply C.27 for temporal-use adequacy.
No-lens cheap path: name the ProblemStructureCue, choose the cheapest candidate lens family that makes it visible, test whether that lens changes the next admissible move, and if no move changes, keep ordinary prose or collect more observations before using mathematical-lens wording.
First neighboring-pattern map:
Math-apparatus boundary: C.29 coordinates the declared mathematical-lens use across relation substrate, state spaces and characteristic spaces, measurement, dynamics, scale, bridge, causal, evidence, assurance, selector, and benchmark patterns. It does not replace any one of them.
- Find the claim-bearing phrase. Mark the mathematical phrase named by value that affects explanation, decision, prediction, comparison, publication, bridge, assurance-input, or reusable transfer.
- Choose the smallest output class that preserves honesty. The output-class decision happens before any full-card fields.
- Name the concrete mathematical object or structure. Family labels such as
category theory,field,graph,quantum,RG, orgeometryare entry prompts, not adequateCandidateMathObjectvalues for the stated use by themselves. - State the lens mapping mode. Use the least committing honest
C.29-local lens mapping mode: analogy-only prompt, representation, empirical fit, simulation, quotient, abstraction, coarse-graining, embedding, homomorphism, isomorphism, functor-like transfer, cross-context lens-transfer candidate, or accepted local theory. If cross-context meaning, substitution, CL, sense cells, or Bridge-admissible use is being claimed,F.9governs that claim; the C.29 fields record only mathematical-lens use for the declared transfer. - State preserved structure and lost structure. This is the central repair move.
- State what becomes visible. Name the invariant, obstruction, fixed point, symmetry, conservation law, diagnostic boundary, lens-admissible distinction, model-selection consequence, or other payoff.
- State the admissible use and blocked use. Say what is now admissible, what remains blocked, and which governing FPF pattern governs any claim being made outside the declared lens use.
- If the claim does not pass, repair rather than merely fail. Downgrade, narrow, switch to a principal rival lens, add
LensUseAdmissibilityValueor validation regime, split any non-lens claim to its governing FPF pattern, or remove the mathematical phrase from claim-bearing use.
Application output classes:
Micro-template examples:
Architecture and P2W first-use slice:
This filled slice is a C.29 first-use output. It does not declare the formal signature, perform the P2W transduction by itself, select the method, or create work. Those claims are governed by [A.6.0](/generated/patterns/A.6.0), [E.18.1](/generated/patterns/E.18.1), [A.15](/generated/patterns/A.15), [A.15.1](/generated/patterns/A.15.1), [A.15.4](/generated/patterns/A.15.4), [A.10](/generated/patterns/A.10), [C.28](/generated/patterns/C.28), or [B.3](/generated/patterns/B.3) when those claims are being made.
For MathLensUse.OneLine, VisiblePayoff says what the lens makes visible, such as a bottleneck, invariant, obstruction, incompatibility, loss boundary, or diagnostic split. AdmissibleNextMove says the now-admissible user move, such as compute a local quantity, compare only inside a declared structure, run a validation slice, apply a neighboring pattern, keep the phrase as local metaphor, or remove the phrase from claim-affecting use. ObservationOrReadoutNeeded? names the missing observable, readout, assignment, outcome, validation slice, or scale point needed before the repaired line makes the stated move admissible. OrdinaryRivalOrFallback says what the reader would use without this mathematical lens: ordinary prose, accepted local domain theory, direct measurement, a causal model, a queueing model instead of a quantum-like metaphor, an [A.19](/generated/patterns/A.19) space declaration instead of [C.29](/generated/patterns/C.29), or an [F.9](/generated/patterns/F.9) bridge instead of category-like wording. If two mathematical lenses already change the next move at this cheap-output class, add one ordinary-language note about the disagreement and use MathLensUse.MiniCard or MathLensUse.FullCard before claiming a reusable rival-lens relation.
MathLensUse.LensCandidateNote is not evidence, assurance, a bridge, a decision record, a selector result, a literature survey, or a full lens-use card. It is a cheap first-candidate lens selection note. Its successful next outputs are NoMathLensUseNeededNote, MathLensUse.OneLine, or a named neighboring governing-pattern note.
Name guard for this note: ProblemStructureCue is a recognition cue, not a FPF signature; CandidateLensFamily is a family prompt, not a kind; AdmissibleNextMove is action guidance, not a work record; NextMathLensUseOutput is the next C.29 output class, not a new record family.
Do not use MathLensUse.OneLine with an empty CandidateMathObject. If the candidate object has not yet been named, use MathLensUse.LensCandidateNote first, keep ordinary prose, or write a NeighborGoverningPatternNote when a non-lens claim is being made.
Cheap stop: if the mathematical phrase does not affect any claim beyond orientation, do not use the full card. If the first honest output is NoMathLensUseNeededNote, that is a successful [C.29](/generated/patterns/C.29) result, not an underfilled card.
Output set and use-rights
After applying C.29, the output is one of these:
Positive warning: a successful C.29 output makes the mathematical lens honest for its declared use. Any empirical truth, causal-use, bridge, assurance, release, decision, or benchmark claim still needs its governing FPF pattern.
LensMappingMode, LensUseAdmissibilityValue, and admissible use are separate fields.
LensMappingMode names construction, not permission. Typical local values include representation, abstraction, quotient, coarse-graining, embedding, homomorphism, isomorphism, functor-like transfer, simulation, and learned or fitted representation. A broad family name such as graph, field, category, geometry, quantum-like, variational, or Bayesian is only a prompt until the concrete construction and preserved structure and lost structure are named.
LensUseAdmissibilityValue grants only limited use-rights:
Admissible use is not inferred from elegance, familiarity, source prestige, or mapping type. It is stated in admissibleUse, nonAdmissibleUse, and StopCondition. Any empirical truth, causal-use, bridge, assurance, release, decision, or benchmark claim remains a separate neighboring-pattern claim.
From lens to local action
Local action change from a mathematical lens is limited to these cases unless a neighboring pattern governs the needed non-C.29 use:
- observe or measure a newly named variable or relation;
- compare only under a declared structure and loss boundary;
- diagnose a bottleneck, obstruction, mismatch, invariant, or failed transfer;
- choose or reject a principal rival lens for this local use;
- narrow, downgrade, or block a tempting overread;
- apply the governing FPF pattern when a claim being made exceeds the declared lens use.
Each item closes either as a local C.29 output or as a named neighboring-pattern application. If the needed result is a work plan, choice result, selector output, benchmark, or evidence record, publish that neighboring result in its governing pattern rather than from this list.
No-lens entry: choosing a first candidate lens
Use this when the next admissible move can benefit from a mathematical lens but no adequate mathematical object has been named. The output is MathLensUse.LensCandidateNote, not MathLensUse.OneLine and not a full card. State the ProblemStructureCue, choose one cheap CandidateLensFamily, say what it could make visible, name the ObservableOrControllableCue? when available, state the AdmissibleNextMove, compare it with the OrdinaryRivalOrFallback, and stop if no action changes. If the cue is still pre-articulation and no stable ProblemStructureCue can be named, do not mathematize it; preserve cue plurality through C.2.LS, A.16, A.16.1, B.4.1, B.5.2.0, or the relevant language-state pattern before applying C.29.
Candidate guidance rows are examples for first recognition. Use the row that fits the working cue, or state a closer local cue using the same fields.
MathLensUse.LensCandidateNote is local first-candidate guidance. It does not replace G.2 SoTA synthesis, tradition mapping, or broad lens-family review. Use G.2 when the work being done is tradition-scale source synthesis; use C.29 when the local need is to choose one cheap candidate lens that changes the next admissible move. The cheap observation and control check does not apply C.16 or A.10 by default; it only asks what the user can observe, read out, assign, vary, or validate now. Measurement construction, evidence strength, intervention-use claim, or validation is still governed by the governing pattern when that claim is being made.
First honest C.29 entry cases
For E.11-style first-entry recognition, distinguish the working entry case before choosing an output:
False-positive bank and entry stops
Do not use a C.29 output for these non-use cases unless a separate lens-transfer, publication, assurance, bridge, comparison, or reusable-explanation claim is being made:
- ordinary ODE inside accepted physics or local engineering model;
- Markov kernel inside accepted stochastic dynamics;
- graph used as a local data structure;
- metric-space distance, topology, order, product, subspace, or embedding declared inside
A.19CharacteristicSpacewith no domain-transfer claim; - category-theoretic proof internal to a domain where that formalism is the local theory;
- one-off pedagogical metaphor not reused for decision, evidence, assurance, publication, bridge, comparison, or transfer.
False-negative bank: use C.29 even when no polished mathematical buzzword appears if the working problem has a structure that changes an admissible next move and ordinary prose is currently hiding it.
Entry guidance states when C.29 is the first governing pattern and when another pattern is first:
Admissible entry stops are: no C.29 output needed, MathLensUse.OneLine used, or a neighboring governing pattern applied.
Governing-pattern boundary table
A C.29 application uses this governing-pattern discipline so mathematical-lens use stays in the C.29 discipline rather than becoming a second authority over neighboring claims.
Positive claim kind:
A C.29 application gives a pattern-local adequacy discipline for claims that use a mathematical object, formalism, learned representation, simulation object, or mathematical family as a mathematical lens for a stated use. The application asks for candidate mathematical object, lens mapping mode, preserved and lost structure, visible invariant or distinction,
LensUseAdmissibilityValueor validation regime, admissible use, non-admissible use, and stop condition.
Boundary application rule: when the claim being made is a choice result, work plan, evidence path, assurance tuple, explanation rendering, comparative review unit, representation shift, temporal claim, bridge, causal-use claim, measurement claim, scale-law claim, selector, or benchmark, the NeighborGoverningPatternNote names the governing FPF pattern and project-side record. A C.29 application can contribute a lens-admissible prediction, distinction, obstruction, diagnostic boundary, or rival-lens note that the governing record can cite; it does not create that neighboring record.
MathLensUse.Card@Context shape
MathLensUse.Card@Context is a pattern-local card in C.29. It is not U.MathLensUseCard, U.LensUseRecord, or any universal U.* kind.
Namespace note: MathLensUse.Card@Context, MathLensUseOutputRef, MathLensUse.OneLine, MathLensUse.MiniCard, MathLensUse.FullCard, and CC-C29-* are C.29-local instruments unless they cite existing FPF kinds or refs. MathLensUseOutputRef references the applicable C.29 output for the stated use; it is not a demand for MathLensUse.FullCard. Do not mint generic suffixes such as SystemMathLensUse, MathLensUseQuality, or MathLensUseCompliance. Durable cross-pattern MathLensUse.* names, records, or refs require explicit minting or reuse plus naming, kind, and design-rationale decisions through F.8, F.18, C.3, and E.9; otherwise they remain pattern-local labels.
Read MathLensUse.Card@Context through three aspects:
Validity boundary: mathematical validity of the object under its assumptions is not the same as representational adequacy to the phenomenon; representational adequacy is not empirical validation for a use; empirical validation is not a causal-use verdict; a causal-use verdict is not assurance, release confidence, decision sufficiency, or benchmark superiority.
Conditional fields apply only when the corresponding neighboring claim, claim-bearing use, or publication use is being made:
Plain card gloss. A useful mathematical lens says: what phenomenon is being seen, through which mathematical object, by what mapping, what survives, what is lost, what becomes visible, what use-admissibility value and validation boundary make this use admissible, the now-admissible user move, the blocked user inference, and where the lens stops.
Conditional overlays
The base card stays light. These overlays are used only when their corresponding use is being made. Ordinary C.29 use does not fill this block; it escalates here only when the claim is already publication-facing, assurance-input, benchmark, bridge, model-selection, prediction, scientific or model, learned-lens, or causal-use facing.
Use the validation overlay when the lens is used for prediction, publication, assurance input, benchmark use, model selection, or scientific claim or model claim. LensUseAdmissibilityValue alone is then insufficient. Keep the neighboring notions separate: verification is proof or formal checking under stated assumptions; validation is fit for a declared use and regime; calibration aligns model parameters or readouts with observations; explanation states why the lens makes a distinction intelligible. The C.29 output does not let any one of these four labels silently stand in for the others.
Use the learned-lens overlay when the mathematical object is fitted, learned, latent, simulation-trained, data-derived, a neural operator, a surrogate solver, an embedding, or a world-model representation.
Learned-lens stop variants are named explicitly when they are tempting:
This is not a first-class causal abstraction card. It is a lightweight check: when LensMappingMode is abstraction, quotient, coarse-graining, macro-model, or simulation, and admissibleUse would include intervention, policy, counterfactual, or causal explanation, apply [C.28](/generated/patterns/C.28) for causal-use question and verdict.
Repair decision table
Field meanings
Neighboring-pattern boundaries
Neighboring patterns remain necessary and are not displaced. A retained neighboring-pattern application note answers the working question for the neighboring pattern being used: what does the reader do with the mathematical lens now? State the neighboring-pattern trigger and the first admissible move for that neighboring pattern. If a note only repeats that C.29 does not replace a neighbor, keep that boundary in the C.29 governing-pattern table instead of copying generic boundary prose into the neighboring pattern:
A.6.Phandles relation precision restoration.A.3.3handles dynamics semantics.A.19handles characteristic spaces, overlays, normalization, and comparability.F.9handles cross-context semantics and Bridge loss.C.18.1andC.19.1handle scale-law and BLP claims.C.26handles one specific quantum-like lens family.C.28handles causal-use admissibility.A.10andB.3handle evidence and assurance.C.11,A.15,A.15.1, andA.15.4handle choice results, method and work separation, work plans, performed work, and work-relevant source restoration.E.17.EFP,E.17.ID.CR,A.6.3.RT, andA.6.3.CSChandle explanation-facing renderings, bounded comparative review units, same-EntityOfConcern representation-scheme transitions, and controlled semantic coarsening.C.27handles temporal-claim adequacy.
Use the C.29 discipline when the question under repair is: Is this mathematical lens adequate for this declared use, and where does it stop?
Naming, ontology, and epistemic precision-restoration account
Name
Name: C.29 — Mathematical Lens Use.
Local namespace: MathLensUse = Mathematical Lens Use. No prior temporary code is reused; the pattern-local card and reference namespace uses MathLensUse; checklist IDs use CC-C29-*.
The stable name is Mathematical Lens Use because C.29 governs a declared use and its admissibility boundary, not strength on an unnamed scale. Plain prose can still say that a useful mathematical lens compresses many cases while preserving declared distinctions; claim-bearing use is recovered through CandidateMathObject, LensMappingMode, PreservedStructure, LostStructure, LensUseAdmissibilityValue, and StopCondition.
C.29-local naming guard
MathLensUse.* instruments are C.29-local unless separately admitted. They are not U.* kinds, not durable FPF record families, and not substitutes for U.Kind, KindSignature, KindBridge, BridgeCard, EvidenceGraph, ChoiceResult, U.WorkPlan, U.Work, or assurance records.
Do not mint LensKind, MathLensKind, MathLensUseQuality, MathLensUseCompliance, or MathLensUseRecord from C.29 use.
When one C.29 application needs a mathematical-lens name to become reusable outside that application, use F.18 local-first naming; when it quantifies over a class of described entities, use C.3 Kind-CAL; when it creates or reuses a durable concept or record family, use F.8 minting or reuse and E.9 design-rationale discipline.
Tempting wrong names rejected
Ontology guard selected for FPF
A physical, organizational, or epistemic phenomenon is not directly identified with a mathematical object; it is represented through a mathematical object by an explicitly declared mapping that preserves some structures and loses others.
C.2.P recoveries applied
Rationale
Why this improves FPF
The selected first-principles position in C.29 is operational, not metaphysical. It treats first-principles mathematical thinking as local construction discipline: declare the smallest structure, rule, invariant, resource condition, observation, or consistency boundary from which the next move follows or is blocked. In that sense, a C.29 application puts mathematical construction before adequacy control: the reader can introduce a queue, graph, state space, measure, topology, algebraic structure, variational quantity, simulation object, or learned representation when that structure improves the work, and then record the mapping, preserved structure, lost structure, use-admissibility value, and stop condition.
First-principles mathematical structures can come from several families without turning any one family into an FPF-wide foundation: signatures, logics, axioms, type or abstraction distinctions, symmetries, invariants, compositional structure, local-global relations, scale relations, boundary conditions, variational principles, action, energy, free-energy, loss, or value functionals, constrained optimization structure, probability, information, typicality, algorithmic construction, resource bounds, implementation constraints, consistency boundaries, causal or intervention-preservation questions, operator or function-space mappings, and admissible observation maps. Each use still needs declared mapping, preserved structure, lost structure, validation regime or use-admissibility value, and stop condition.
This fits FPF because FPF already commits to state explicitness, bounded contexts, evidence and assurance, cross-context bridges, open-ended evolution, SoTA alignment, notational independence, and avoidance of ornamental formalism.
C.29 makes an existing discipline explicit: when FPF uses a CandidateMathObject, local formalism, learned representation, simulation object, or mathematical family as a mathematical lens for a stated use, the C.29 application declares what that use preserves, what it loses, what it makes visible, which rival lenses still change the next admissible move, and where its admissible use stops.
The compact Plain line remains useful because it points to a real heuristic: good mathematical lenses are not decoration; they are compact ways of seeing structures that survive transfer. The Plain line stays readable, while the card and checklist record the FPF commitments named by value.
Alternatives rejected
Pillar impact analysis
Principle-taxonomy balance
Consequences and validation harness
Validation harness for Stable admission and material refresh
For Stable admission or material refresh of C.29, run a small C.29 validation harness. The harness is not a benchmark mandate and not a tool requirement. It is a repeatable admission check that the pattern yields correct first outputs, avoids false positives, preserves neighboring-pattern writing boundaries, and keeps the first useful move visible.
This subsection governs steward-side validation, not the ordinary C.29 user path. A working user applies the action path and chooses the cheapest honest output; they do not run the harness merely to decide between ordinary prose, MathLensUse.OneLine, MathLensUse.MiniCard, or NeighborGoverningPatternNote.
C.29 output-change conditions:
Smallest source-return and output-change conditions:
AI-assisted thin-echo result rule:
C.29 edge-case boundary results:
Harness shape:
Minimum harness cases:
Reader-fit checks for admission or material refresh:
Archetypal grounding
Worked micro-cases by failure mode:
Vanchurin-style universe-as-learning is not an ordinary first grounding archetype. Keep it in the validation harness and SoTA use as a candidate stress test: it can teach overclaim control and adapt-not-adopt discipline, but it does not ground accepted physics, assurance, quantitative law, or routine lens use.
Bias annotation
Conformance checklist
C.29 checklist verifies the action path without replacing the Solution. Candidate-lens guidance belongs in C.29:4.4.3 or worked grounding, not in this checklist; the checklist verifies only that the cheapest honest output and next admissible move remain visible.
Common anti-patterns
SoTA-echoing account
SoTA source use for C.29 is accepted only when it changes action guidance. A citation that only decorates the file does not establish C.29 use.
C.29 separates source-use roles from source-use disposition. Adopt, Adapt, Reject, and candidate-stress-test disposition say what FPF does with the source; SourceUseRole says what work the source may perform inside a C.29 application.
Sandberg Thread and Structural Sameness Examples
Adopt the Sandberg thread as a recognition cue, with two distinct source roles retained: the original X post is the source identity locator, while the Axis of Ordinary Math section is the checked text carrier used here.
The source-basis examples are not a proof source and not an exhaustive taxonomy. They are a checked example carrier for InvariantsExposed: generalized Stokes and boundary-exterior derivative duality; de Rham, cohomology, and topological obstruction; CLT as RG or fixed-point viewpoint; Lawvere-style diagonal family; Noether and symmetry-conservation; and Legendre, potential-duality, and tropical-limit family.
Plain register: the thread illustrates mathematical compression that makes hidden structure visible. Tech register: every FPF use still needs CandidateMathObject, LensMappingMode, PreservedStructure, LostStructure, LensUseAdmissibilityValue, and StopCondition.
Do not adopt the thread as a proof source, peer-reviewed taxonomy, or authority for all mathematical details.
Vanchurin 2026 as candidate lens
Adopt and adapt the following as a candidate lens family:
learning dynamics → coarse-graining → effective geometry → gauge fields, metric-tensor fields, or distance-like structure → variational or thermodynamic optimality
Use this source as the case for why FPF needs a lens-use card: the source discusses many mathematical structures, but its claims are broad and speculative. The candidate-lens stress-test value comes through trainable variables, local update rules, Legendre transforms, thermodynamic potentials, gauge-field, metric-tensor-field, and distance-language claims, memory and processing trade-offs, and RG-like re-optimization of compressed representations.
The Plain lesson is “this is a useful candidate lens, not a new FPF cosmology.” Selected lens use:
Adoption stance: Adapt, not Adopt.
Adapt:
- learning dynamics as a general language of change,
- resource constraints as a possible source of effective laws,
- coarse-graining as a mechanism for simple macrodescriptions,
- thermodynamic or variational potentials as links between cost, memory, processing, and geometry,
- RG-like re-optimization as a scale-transition discipline.
Do not adopt as FPF norm:
- “the universe really is a neural network,”
- “physics has already been proven from learning,”
- “quantum, GR, or gauge theory reduce to a learning rule or learning dynamics” as established fact.
Known limitations from the checked source-use disposition remain material for mathematical-lens use: non-Abelian gauge fields are not treated as a landed FPF result; thermodynamic RG flow is not treated as a quantitative FPF law; quantitative predictions require explicit learning-algorithm specification.
Plural foundations source-use decision
Adopt the plural-foundations source-use decision: several structural families can be reusable across domains, and their adequacy depends on declared mapping, local use, mutual interpretability, and recoverable loss.
Source-use role: Rodin supplies source material for the positive decision that several structurally useful families recur across domains. C.29 records this as local adequacy discipline: select the family that fits the declared use, state the mapping, and publish recoverable loss.
Rodin/P2W micro-slice:
Read the slice by relation position. [C.29](/generated/patterns/C.29) records preserved and lost structure for the mathematical-lens use. [A.6.0](/generated/patterns/A.6.0) declares vocabulary, laws, imports, and applicability when the formal substrate must be written as a signature. [E.18.1](/generated/patterns/E.18.1) governs P2W transduction of the accepted problem-side distinction into the next admissible FPF use. If the claim becomes measurement, evidence, causal use, Bridge semantics, mechanism realization, or work, apply [C.16](/generated/patterns/C.16), [A.10](/generated/patterns/A.10), [C.28](/generated/patterns/C.28), [F.9](/generated/patterns/F.9), [A.6.1](/generated/patterns/A.6.1), or [A.15](/generated/patterns/A.15) to that claim being made.
Applied category theory
Adopt applied category theory as one major organizer for cross-domain transfer, especially composition, interfaces, views, transformations, and bridges. Retain the concrete source-basis examples: databases, electric circuits, and dynamical systems as application families; adjoint functors, enriched categories, and toposes as categorical structures that organize transfer.
In C.29, category-theoretic material is used through the same local adequacy fields as any other lens: stated use, named structure, preserved composition or interface, lost structure, failed transfer, and neighboring-pattern applications. It is especially useful when composition, interfaces, views, transformations, or bridges matter to the admissible move.
Obstructions to compositionality
Adapt the obstructions and failures-of-compositionality perspective into LostStructure and StopCondition: a lens can be useful precisely because it exposes where transfer fails, not only where it succeeds. In Plain language, a good lens does not only say “this travels”; it also names the boundary where transfer stops.
Source locators and source-basis guard
SoTA materials are not nameless background. Decision grounds and governing inheritance remain recoverable by value, and SoTA rows shape action guidance rather than decorate the file. The source locators and the source-use role of each external source are retained here.
Source and governing basis
Source-use boundary notes
VAN-GEOM-LEARNING-2025/2026is a replayable candidate-lens source for geometric learning dynamics. Its useful FPF contribution is the metric-tensor, noise-covariance, and learning-dynamics lens family and the stress it puts onCandidateMathObject,LensMappingMode, preserved and lost structure, validation boundary, and stop condition.- Vanchurin-style physical or biological interpretations remain source-side claims unless a local C.29 output and neighboring evidence, causal-use, validation, or assurance pattern make the use admissible. C.29 does not promote those interpretations to FPF law.
SAND-THREAD-MATH-LINKS-2026-05-12is a recognition cue, not a mathematical proof source or FPF law.- CLT-as-RG or fixed-point wording is retained only as a structural modeling viewpoint. A safe formulation is: under the usual normalization, the Gaussian is an attractive fixed point for finite-variance distributions; other stable laws are other fixed points under suitable normalization.
- The intake correction from direct identification to structure-preserving representation is selected and becomes a central ontology guard.
Informative taxonomy seed
Use this recognition menu only to identify a possible lens family and likely neighboring-pattern applications. After selecting a row, state the local C.29 fields that make the lens adequate or stop the use.
Relations
-
Builds on:
A.1.1,A.6.P,A.3.3,A.19,A.10,A.15,B.3,C.16.P,C.16,E.17.EFP,E.17.ID.CR,A.6.3.RT,A.6.3.CSC,F.9. -
Constrained by:
E.8,E.10,C.2.P,E.19. -
Decision basis:
E.9design-rationale discipline and the source-basis rows inC.29:13a. -
Contributes to:
E.2pillar-impact analysis when a pillar argument relies on mathematical first-principles structure; only declared mathematical-lens use is in scope, with no amendment to pillar content, priority, or constitutional authority. -
Coordinates with:
A.6.0,A.6.1,E.18.1,C.11,A.15.1,A.15.4,C.18.1,C.19.1,C.26,C.27,C.28,C.31.ASAP,G.5,G.9,G.2,G.10. -
Specialization relation:
C.26is selected as a C.29-compatible specialization for quantum-like modeling, with affordability qualifications. -
Neighboring claims stay with their governing patterns. Use
F.9for bridges;C.28for causal use;A.3.3for dynamics semantics;A.19andC.16for characteristic-space and measurement construction;A.10andB.3for evidence and assurance;C.11,A.15,A.15.1, andA.15.4for decision, method, and work records;E.17.*for explanation and comparative-review publication use;A.6.3.RTandA.6.3.CSCfor representation transition and coarsening;C.27,C.18.1,C.19.1, andC.31.ASAPfor temporal, scale-law, method scale-preference, and architecture scale-preference claims; and Part G for selector and benchmark work. C.29 records only the declared mathematical-lens use and the governing-pattern boundary for the claim being made.
C.29:End
Grounded Architecture and Selected-Structure Adequacy
Type: Architectural pattern Status: Stable Normativity: Normative unless explicitly marked informative
Problem frame
Use this pattern when architecture talk is doing more than naming modules, diagrams, documents, tool outputs, or a general engineering topic. Apply C.30 when the question under repair is what architecture claim is being described, what selected structures carry it, what artifact role the text or model being inspected has, and what the next admissible architecture move is.
The ordinary first output is intentionally small:
Use ArchitectureConcernCue only to recognize the architecture problem family that chooses the first structure kind and architecture move:
Typical architecture problem cues:
Use the cue only to choose the first architecture move: described holon, bounded context, one candidate structure kind, artifact role, and one admissible next move. If those fields cannot yet be named, keep the material as a concern cue or ProblemCard@Context-style issue rather than promoting it to ArchitectureOf@Context by wording alone. ISO 42010-style concern language may remain as lineage or project wording, but C.30 recovers the FPF representation fields as architectureConcernCue, governingArchitectureConcernRefs?, or architectureConcernNotes?.
ArchitectureQuestionCard@Project is a project-side triage aid for choosing one architecture move. Quality scores, risk ratings, proof, evidence, assurance, gate, decision, release, or publication-authority claims are governed by their FPF patterns when they are being made.
Use this when:
- a practitioner says "architecture" and needs to know whether the claim being made is about a holon, selected structure, architecture description, view, carrier, decision, work, evidence, assurance, or mathematical lens;
- downgrade an artifact to publication, diagram, carrier, source relation, or generated relation graph when it is not a Description or view;
- name the selected architecture-relevant structure and the next architecture move before writing a full architecture-description record;
- state a minimal architecture structural view only when it changes the next move;
- keep architecture-description machinery conditional instead of making every architecture discussion a multi-view description exercise;
- state
NoMathLensUseNeededwhen no mathematical lens changes the next architecture move; - apply C.29 when a formal substrate, preserved and lost structure, or mathematical-lens use is being claimed.
Use a conditional ArchitectureDescription@Context bridge only when durable architecture-description use is being made: cross-team reuse, regulated or safety use, reusable design, comparison, source or lens reuse, or another named full-mode architecture-description use. Ordinary use stops at ArchitectureQuestionCard@Project when it makes one next architecture move clear. If the architecture description itself becomes the EntityOfConcern under repair, use [C.30.AD](/generated/patterns/C.30.AD).
What goes wrong if C.30 is missed: architecture collapses into a document, a module diagram, a workflow graph, a mathematical lens, a benchmark, a maturity score, or a decision record. Then the practitioner cannot see which holon is described, which structures matter, what the first architecture move is, which source or lens relation is being relied on, and which non-architecture claim must be governed elsewhere.
What C.30 buys in practice: a practitioner can separate architecture claim, selected structure, architecture description, view, publication, source relation, and non-architecture claim kind, then choose one small next architecture move.
Not this pattern when the EntityOfConcern under repair is only a general selected structure, a full architecture description, an architecture structural view, a TGA flow relation, an LCA/control view, a mathematical-lens use, measurement, evidence, assurance, gate, work, decision, or publication. Use [A.22](/generated/patterns/A.22), [C.30.AD](/generated/patterns/C.30.AD), [C.30.ASV](/generated/patterns/C.30.ASV), C.30.TGA-FLOW-REL, [C.30.LCA](/generated/patterns/C.30.LCA), [C.29](/generated/patterns/C.29), [C.16](/generated/patterns/C.16), [A.10](/generated/patterns/A.10), [G.6](/generated/patterns/G.6), [B.3](/generated/patterns/B.3), [A.20](/generated/patterns/A.20), [A.21](/generated/patterns/A.21), [A.15](/generated/patterns/A.15), [C.11](/generated/patterns/C.11), or [E.17](/generated/patterns/E.17) respectively, and keep C.30 only for the architecture-claim portion if that portion is being claimed.
Thin precision-restoration pointer: if the issue under repair is still whether architecture, architecture description, structural view, module diagram, model, artifact, functional architecture, or a source label such as layer, level, tier, stack, block, expert, cache, router, or gate names an architecture claim, description, view, carrier, source, structure, or non-architecture governing-pattern application, use [C.30.P](/generated/patterns/C.30.P) and [C.30.STRAT](/generated/patterns/C.30.STRAT) as triggered before applying C.30 to the recovered architecture portion. Keep the trigger tables in those patterns; C.30 is applied only after ArchitectureOf@Context, selected architecture-relevant structure, conditional ArchitectureDescription@Context bridge use, [C.30.AD](/generated/patterns/C.30.AD) application, or the non-architecture application named by value is recoverable.
Problem
Engineering teams use "architecture" for several different things:
- the selected structure of a holon;
- a diagram, model, table, dashboard, generated relation graph, or document;
- a module layout;
- a TGA graph or flow description;
- a functional, control, information, deployment, logical, or physical structure view;
- an ADR-like publication;
- a project-side claim carried by another governing FPF pattern.
These uses are all useful in ordinary engineering speech, but they cannot carry the same FPF claim. The core distinction is the one already used across FPF: the architecture-relevant selected structure, the architecture claim over that structure, the Description episteme or view of that claim, the publication of that description or view, and the project decision about changing architecture are different records.
The first-minute practitioner can ask: Are we choosing an architecture, or just naming a module layout? Which structure is being described: function, flow, control, module structure, interface relation, work, role relation, enactor structure, evidence relation, assurance relation, information structure, data structure, placement structure, deployment structure, scale structure, or declared logical structure? What artifact are we looking at: architecture claim, description, view, carrier, publication, decision, source relation, or mathematical lens?
How can FPF describe architecture without:
- creating
U.Architectureas a new root kind; - treating a description, view, diagram, graph, ADR, dashboard, or generated relation graph as the architecture;
- reducing architecture to module structure or interface relation;
- letting TGA, LCA, C.29 lenses, quality language, evidence, assurance, gates, work, or decisions silently become architecture ontology;
- making architecture descriptions so heavy that ordinary practitioners cannot get a first useful move.
Forces
Solution
C.30 starts from one architecture move over one described holon in one bounded context: recover the ArchitectureOf@Context claim record when it is being claimed, selected structures, structure kind refs, artifact role, and first admissible architecture move. Use a conditional architecture-description bridge when durable, reusable, multi-view, regulated, comparison, or reliance-bearing description is being made. If ArchitectureQuestionCard@Project gives one usable next move, stop there.
In C.30, the EntityOfConcern for this use is the architecture claim, one of its selected structures, or the relation record or claim record named by value for the architecture use being made. The description is not the architecture itself, and description hygiene is not the center of C.30.
Architecture-description material in C.30 is deliberately minimal. C.30 itself is not the full architecture-description mechanism. It binds ArchitectureDescription@Context to ArchitectureOf@Context, selected structures, structural views, correspondence, source return, and admissible use only when durable description use is being made. C.30.AD carries the full architecture-description EntityOfConcern: multi-view description sets, viewpoint-based views, correspondences, source return, freshness, specification use, and publication boundary over ArchitectureOf@Context. Generic Description, view, viewpoint, publication-face, and carrier machinery still remains in A.7, E.17.0, E.17.1, E.17.2, and E.17. C.30.ASV carries the selected-structure-kind-to-view relation; C.30.TGA-FLOW-REL, C.30.LCA, and other named subpatterns carry named structure relations.
C.30 does not mint U.Architecture and does not redefine U.Viewpoint. It specializes A.22 structure records and U.MultiViewDescribing only for architecture descriptions whose DescriptionContext EntityOfConcernRef is the ArchitectureOf@Context claim record for a holon, while preserving the EntityOfConcern and Description-episteme and specification-use distinction between architecture and its descriptions.
C.30 governs grounded architecture adequacy for one ArchitectureOf@Context claim record over selected U.Structure references for one described holon in one bounded context. It governs ArchitectureOf@Context, ArchitectureQuestionCard@Project, selected architecture-relevant structures, architecture structure-kind recovery, artifact-role recovery, first architecture-question assignment, characteristic assignment, small boundary notes, and the thin ArchitectureDescription@Context bridge when durable description use is being made. It does not mint U.Architecture and does not govern all architecture structure-kind views; C.30.ASV governs architecture structural views, and C.30.AD governs the full architecture-description mechanism. Generic guards about publication, permission, promise, evidence sufficiency, gate passage, work authority, decision authority, or release authority stay in the publication-use boundary or in governing patterns.
Architecture claim record
ArchitectureOf@Context is a project-side architecture claim record over selected structures. It is not the selected structure itself, not a Description episteme, not a view, not a diagram, not a publication face, not a decision, and not a new root U.* kind.
ArchitectureOf@ContextRef is admissible as a DescriptionContext.EntityOfConcernRef for architecture Description epistemes and views. The holon whose architecture is claimed remains ArchitectureOf@Context.describedHolonRef; it is not the DescriptionContext EntityOfConcernRef for those architecture descriptions unless a separate direct holon description is opened.
EntityOfConcern bridge. In C.30, the primary EntityOfConcern is the ArchitectureOf@Context claim record, one of its selected structures, or an neighboring relation record or claim record selected by the use under repair. Selected architecture structure is dependent, non-agentive, and claim-bearing through episteme or view records, but it is not a second EntityOfConcern family beside EntityOfConcern. Publication faces, forms, units, carriers, and renderings publish descriptions or views; they do not become the architecture claim or the selected structure.
Conditional architecture-description bridge
C.30 does not define a second local ArchitectureDescription@Context record shape. The canonical ArchitectureDescription@Context record is governed by C.30.AD:4.1. C.30 admits only a thin bridge to that record when durable architecture-description use changes the first architecture move.
The minimum bridge recoverable in C.30 is:
This bridge does not mint another ArchitectureDescription@Context definition, does not add local fields to the canonical record, and does not collect non-architecture claim kinds as architecture-description ontology. It lets the C.30 reader say why a description matters for the next architecture move, then applies [C.30.AD](/generated/patterns/C.30.AD) whenever the architecture description itself becomes the EntityOfConcern under repair or the full mechanism is needed: multi-view composition, correspondence, source return, freshness, specification-use boundary, publication-use boundary, or reusable architecture-description use.
An architecture-description freshness cue is also canonical in C.30.AD:4.4. C.30 may point to that cue only to bound the admissible use of the first architecture move; the cue is not evidence sufficiency and not assurance.
Publication-use boundary
This subsection is the C.30 publication-use boundary. It says what an architecture description or its publication does not carry by itself, while the subject Solution stays about architecture claim, described holon, selected structures, structural views, and the next architecture move. If a guard concerns permission, promise, prescription, evidence sufficiency, assurance, decision, gate passage, work authority, release, or authority-source claim, keep it here, in C.30.AD, or in the description or publication pattern governing that claim rather than expanding C.30's thin bridge.
ArchitectureDescriptionPublication@Project is subordinate to E.17 and MVPK machinery. It publishes one source episteme or episteme-lane view reference. publicationViewpointRef? names the publication-side viewpoint only when MVPK needs one; it is not an architecture viewpoint and not a TEVB viewpoint. mvpkFaceRef is a publication-lane face reference, not an alternative source episteme, source view, or source relation. Publication does not add architecture claims, evidence sufficiency, gate decision state, work authority, assurance, decision authority, or release permission.
Model cards, system cards, and evaluation harness reports enter C.30 through the same publication boundary or source-relation boundary. They may describe a model, deployed AI system, architecture claim, evaluation harness, or policy, but they do not by themselves establish architecture adequacy, safety proof, release authority, or gate passage.
If the card or harness is used beyond transparency, recover the architecture structure kind being used first and then apply [A.10](/generated/patterns/A.10), [G.6](/generated/patterns/G.6), [B.3](/generated/patterns/B.3), [A.20](/generated/patterns/A.20), [A.21](/generated/patterns/A.21), [C.16](/generated/patterns/C.16), [C.28](/generated/patterns/C.28), or [C.11](/generated/patterns/C.11) for the non-architecture claim kind.
Architecture name formation
The word architecture is shorthand only after the described holon, bounded context, selected structures, structure kind, and artifact role are recoverable. Without those qualifiers, it is a recovery trigger, not a stable FPF term.
Architecture characteristic assignment
C.30 uses three bearers before any quality, fitness, measure, metric, score, modularity, or ility wording carries an architecture-adequacy claim. Those words are triggers for bearer recovery, not stable architecture adequacy by themselves.
C.30 keeps only a thin bridge from structural characteristics to Q-Bundle relevance. If the claim says architecture causes an outcome improvement, assign the causal-use claim to [C.28](/generated/patterns/C.28) before causal use. If a structural characteristic is used as a mechanism, constraint, predictor, proxy, evidence relation, or causal hypothesis for a Q-Bundle slot, start with ArchitectureStructuralCharacteristicQBundleRelationLine rather than a formula such as low coupling = maintainability; assign measurement, modularity scoring, reusable-structure share or accounting, bespoke-residue accounting, evidence sufficiency, assurance, gate, causal proof, and scale audit to their governing patterns.
ArchitectureStructuralCharacteristicQBundleRelationLine is the only ordinary first-contact relation shape C.30 introduces for this case. Do not add a second generic characteristic relation record in C.30. Use the line when the useful move is to show why one structural characteristic may matter without opening the full relation record. Do not use this line as a measurement record, modularity score, evidence sufficiency statement, assurance verdict, or causal proof:
Minimal structural-characteristic relation-line examples:
ArchitectureCharacteristicQBundleRelationRecord is a triggered full-mode record, not the ordinary first-contact shape. Use the full record only when publication, comparison, causal use, evidence reliance, assurance, gate, decision, or reusable cross-case relation reliance is being claimed and the thin line cannot keep the relation inspectable, reusable, or bounded. This preserves the protection against causal or quality overread without turning C.30 into a measurement-first pattern.
Relation kinds in this record are C.30-local relation tokens. They must remain recoverable as A.6.P-style relation specifications: polarity, participant slots, qualifiers, witness expectations, admissible semantic change classes, and bridge or loss boundary where those boundary conditions are being claimed. ISO/IEC 25010-like quality models may be used as quality vocabulary or comparison lineage for product qualities such as reliability, security, maintainability, usability, efficiency, compatibility, or portability. C.30 does not inherit them as architecture theory. Architecture relates to qualities through Q-Bundle slots, mechanism slots, relation class or admissible-use value, evidence or causal governing patterns, or report-only use.
Relation to structural views
C.30.ASV governs ArchitectureStructuralView@Context. C.30 governs the ArchitectureOf@Context claim and, only when durable description use is being made, how its thin ArchitectureDescription@Context bridge uses structural views, with hidden or lost structure, correspondence, source or reliance relation, and source-return boundaries recoverable when those boundaries affect action. C.30.AD governs the full architecture-description mechanism.
A diagram, model, table, TGA graph, LCA diagram, C.29 lens output, ADR, dashboard, generated explanation, or other publication face may carry an architecture description or an architecture structural view. It does not become the architecture, and it does not become a conforming view only because it looks like a view.
Use AffectedArchitectureStructureNote when the next architecture move needs to name affected structures or view losses without using an architecture decision, ADR, gate, evidence, assurance, or release record:
This note only names affected architecture structure for the next move. Decision, ADR, gate-passage, evidence-sufficiency, and release-authority claims apply the patterns governing those claims.
Minimal boundary notes
Use these notes when a common architecture phrase is close to a governing pattern but the full governing-pattern application is not yet needed for an asserted claim.
Use the thinnest relation form that preserves the next architecture move. Use fuller relation governing the asserted use records only when the relation being used cannot be inspected, used, compared, refreshed, or bounded without it. Typical thin forms are ArchitectureMathLensUseBoundary before C.29 Mini or Full, AffectedArchitectureStructureNote before an architecture decision record, and ArchitectureStructuralCharacteristicQBundleRelationLine before full measurement records, causal records, or evidence records.
These notes are not substitutes for the module named by value-and-interface repair pattern, interface specifications, signature records, conformance evidence, or module-and-interface repair. An open or platform label is not substitutability proof, security proof, scale proof, assurance, or universal maturity evidence. A source label such as layer, stack, block, expert, cache, router, or gate enters this note only after [C.30.STRAT](/generated/patterns/C.30.STRAT) recovers a module-interface or adjacent architecture-relevant item. It becomes architecture-relevant only through local structure, interface, variation, substitution, migration, update, and hardening boundaries. Relation-heavy wording inside these notes remains a Plain cue until an module relation reference named by value, interface relation ref, relation governing the asserted use record, or governing FPF pattern application is named. The note keeps first use honest until the non-architecture claim kind named by value is being made.
Architecture mathematical-lens boundary
Architecture descriptions may use C.29 lenses, but the lens does not become architecture ontology.
Use the one-line boundary only when it is enough to keep the lens from being overread. Use a C.29 Mini or Full card when the lens choice, preserved structure, lost structure, relation class or admissible-use value, or stop condition changes the architecture move.
Lens use by architecture problem:
This table is not a C.29 replacement and does not make mathematics mandatory. It helps the practitioner see when a lens may add a useful architecture move; C.29 still carries lens-use result, preserved structure, lost structure, relation class or admissible-use value, and stop condition when those description or view uses are being made.
Epiplexity-like use remains a C.29 bounded-observer structural-information lens. It may help recover learnable structure from traces, but it is not an architecture quality, task relevance proof, causal proof, assurance, or selector authority.
Boundary and repair table
Worked slices
"We have the architecture in this diagram." The diagram is a carrier or publication face unless it explicitly carries an ArchitectureDescription@Context or ArchitectureStructuralView@Context.
"Low coupling gives maintainability." C.30 does not allow that formula to carry the claim by itself. The ordinary repair starts with the thin relation line:
Use ArchitectureCharacteristicQBundleRelationRecord only when publication, comparison, causal use, evidence reliance, assurance, gate, decision, or reusable cross-case relation reliance needs the fuller record. The useful move is to decide whether a structural characteristic has a bounded relation to a maintainability slot, not to accept the slogan as architecture truth.
"We replaced the neural-network block, so the architecture improved." Treat block first as a source label and apply [C.30.STRAT](/generated/patterns/C.30.STRAT) unless the changed item is already recovered. The phrase is admissible architecture recognition only after the changed structure kind, flow or transduction relation, module or interface claim kind, preserved and lost structure, changed characteristic, source relation, and decision or evidence governing patterns are named. A block label, benchmark result, ablation, pruning mask, or distillation result is not an architecture decision, evidence sufficiency, gate passage, assurance, or architecture adequacy by itself.
Archetypal Grounding
Bias-Annotation
Lenses tested: Arch, Onto, Epist, Prag, Did, Gov. Scope: FPF architecture-description use over holons.
This checklist verifies the preceding guidance after the practitioner has chosen the selected move; it is not a required project control form and not a substitute for the card, note, view, relation, or repair move above.
Conformance Checklist
Common Anti-Patterns and How to Avoid Them
Consequences
Rationale
Architecture is most useful in FPF when it stays close to selected structure over a holon and far away from document-as-architecture, graph-as-architecture, model-as-architecture, and decision-as-architecture collapses. The ArchitectureOf@Context record gives the selected structure a project-side claim handle without minting U.Architecture.
C.30 and C.30.ASV establish an FPF architecture kernel: architecture as selected EntityOfConcern structure for a described holon, with Description epistemes and structural views, structure-kind discipline, correspondence and source-return boundaries, and characteristic-relation applications. They do not by themselves provide full measurement, synthesis, decision, causal proof, safety proof, or assurance.
The small first card is deliberate. Architecture discussions often need one immediate move: name the holon, choose the structure kind under consideration, downgrade an artifact, assign an evidence or assurance claim to its governing pattern, or stop. A full architecture description is useful only when durable publication, cross-team use, comparison, regulated use, source reuse, or reliance-relation reuse is being made.
The DescriptionContext structure also preserves plurality. The same architecture claim may have several descriptions and views; several publications may render one description; several source records may be source relations for a view with different validation boundaries. C.30 keeps those variants usable without turning any one carrier into the architecture.
SoTA-Echoing
Relations
Builds on: A.22, C.30.P, C.2.1, A.6.3, A.7, E.10.D2, E.17.0, E.17.1, E.17, E.17.2, A.6.P, F.18, E.10, and C.2.P.
Coordinates with: C.30.STRAT, C.30.ASV, A.6.F, C.30.TGA-FLOW-REL, C.30.LCA, C.30.ILC, E.18, C.29, C.16, C.25, C.28, A.10, G.6, B.3, A.20, A.21, A.15, C.11, E.17, and named governing patterns for architecture decision and candidate-set claims when those claim kinds are being made.
Neighboring claims stay with their governing patterns: A.22 for selected-structure EntityOfConcern, C.30.STRAT for stratification-wording and source-label repair, C.30.ASV for structural-view adequacy, E.TGA for graph, path, and crossing discipline, C.29 for mathematical-lens use, C.16 for characterization, C.25 for Q-Bundles, C.28 for causal use, A.10 and G.6 for evidence, B.3 for assurance, A.20 and A.21 for gate or release records, A.15 for work, C.11 for decisions, and E.17 for publication. C.30 governs the grounded architecture claim, selected structures, and the next admissible architecture move.
C.30:End
Architecture Description Adequacy
Type: Architectural pattern Status: Stable Normativity: Normative unless explicitly marked informative
Plain-name. Architecture-description adequacy.
Intent. Keep an architecture description useful without letting the description, view, diagram, publication, or tool publication face become the architecture itself.
Builds on. C.30, C.30.ASV, A.22, A.7, A.6.3, E.17.0, E.17.1, E.17.2, E.17, C.2.P, E.10, and E.10.ARCH.
Coordinates with. C.30.P, C.30.TGA-FLOW-REL, C.30.LCA, C.30.ILC, A.6.F, A.6.M, C.29, C.16, C.16.P, A.10, B.3, A.20, A.21, A.15, C.11, C.28, E.8, and F.18.
Use this when
Use this pattern when an architecture description is the EntityOfConcern under repair: a durable description, multi-view description set, architecture documentation set, model set, generated architecture relation graph, view set, or specification-use record over one ArchitectureOf@Context.
Use C.30.AD when the practitioner needs to know:
- which
ArchitectureOf@Contextclaim the description is about; - which selected structures or architecture structure kinds are described;
- which views are used under which viewpoints;
- which correspondences, source returns, freshness boundaries, or specification-use boundaries make the description usable;
- what the description can guide and which uses are non-admissible.
What goes wrong if missed. A diagram, documentation set, generated relation graph, model card, ADR publication set, or architecture model starts acting as architecture, proof, gate, assurance, decision, work authority, or release permission by presentation alone.
What this buys. The practitioner can keep one architecture description inspectable across views, viewpoints, selected structures, correspondences, publications, source returns, and neighboring-pattern applications.
First useful move. Write one ArchitectureDescriptionUseCard@Project:
The use card is a controlled first-pass slice. It can close ordinary use only when it names one architecture claim, one usable description purpose, the selected structures or structure kinds being described, viewpoint refs being used, admissible use, non-admissible use, and one remaining architecture move or neighboring-pattern application. Expand to the fuller ArchitectureDescription@Context record when cross-view correspondence, reuse, source return, freshness, specification use, regulated use, comparison, or project-side authority use is being made.
Not this pattern when.
- If the use under repair is a grounded architecture claim or one first architecture question, use
[C.30](/generated/patterns/C.30). - If the use under repair is a selected structure or structural description outside architecture, use
[A.22](/generated/patterns/A.22). - If the use under repair is one architecture structural view, use
[C.30.ASV](/generated/patterns/C.30.ASV). - If architecture or structure wording is still ambiguous, use
[C.30.P](/generated/patterns/C.30.P). - If the use under repair is only a publication face, carrier, report, dashboard, file, or source-current relation, use
[C.2.P](/generated/patterns/C.2.P),[E.17](/generated/patterns/E.17), or the publication or source pattern governing the claim. - If the description is being used as evidence, assurance, gate passage, decision, work authority, causal-use claim, release permission, or mathematical-lens use, keep
[C.30.AD](/generated/patterns/C.30.AD)only for the description boundary and apply the neighboring pattern governing that claim to the claim being made.
Problem frame
Architecture practice needs durable descriptions: multi-view documents, view models, generated relation graphs, TGA-flow views, LCA control sketches, module or interface diagrams, deployment views, model cards, system cards, and architecture decision description sets. These descriptions are useful because they let teams compare, reuse, refresh, inspect, and use architecture claims across viewpoint families and working concerns; A.15 role-enactor semantics apply only when a project role relation itself is being governed.
The difficulty is that the description is not the architecture. The same architecture can have several descriptions. The same description set can contain several views. Each view is written from one viewpoint or concern-framed practice and can hide, lose, coarsen, or emphasize different structure. A view can describe functional structure, flow or transduction structure, control structure, module or interface structure, placement structure, information custody, evidence-reuse relation, assurance relation, scale or coarsening relation, or another declared architecture-relevant structure.
The first-minute practitioner can ask:
- What
ArchitectureOf@Contextis this description about? - Which selected structures or structure kinds does this view describe?
- Which viewpoint makes this view useful?
- What correspondence connects this view to the architecture claim and other views?
- When does source return to a source episteme, source view, or neighboring pattern governing that claim become necessary?
- What admissible architecture move remains after the description has been used?
Problem
How can FPF govern architecture descriptions without:
- treating a description, model, view, diagram, graph, card, table, dashboard, file, publication, carrier, or rendering as the architecture itself;
- treating all architecture documentation as one generic description with no selected-structure recovery;
- losing the link between a viewpoint and the architecture structure kind being described;
- letting one attractive view hide lost structure, stale source, or missing correspondence;
- letting publication quality become evidence sufficiency, assurance, gate passage, decision authority, work completion, or release permission;
- making ordinary architecture triage too heavy for a first useful architecture move.
Forces
Solution
Use ArchitectureDescription@Context when the EntityOfConcern under repair is the description episteme or specification-use record over one ArchitectureOf@Context. The described holon is recovered through ArchitectureOf@Context.describedHolonRef; the DescriptionContext.EntityOfConcernRef for the architecture description points to the architecture claim record.
C.30.AD does not mint U.Architecture, does not redefine U.Viewpoint, and does not replace generic Description, view, publication, or carrier machinery. It specializes those records for architecture descriptions whose views remain tied to selected architecture-relevant structures.
Architecture-description record
describedHolonRef is a recoverable field copied from the referenced ArchitectureOf@Context; it is not the architecture description's DescriptionContext.EntityOfConcernRef.
Minimum conformance for the record:
architectureClaimRefnames oneArchitectureOf@Context;selectedStructureRefsorstructureKindRefsname the architecture-relevant structures being described;- every architecture structural view names its viewpoint and selected structure or structure kind;
correspondenceRefsor a source-return condition is present when cross-view or source reuse is being made;admissibleUseandnonAdmissibleUsesay what the description can and cannot carry.
Traceable architecture multi-view description chain
A full architecture description is traceable only when the reader can recover the chain that makes a view useful without turning the view into the architecture. The chain is a trace obligation, not a prescribed method or work plan:
[E.17.0](/generated/patterns/E.17.0) carries the generic multi-view Description machinery. [C.30.ASV](/generated/patterns/C.30.ASV) carries the selected-structure-kind-to-view relation and view adequacy. [C.30.AD](/generated/patterns/C.30.AD) carries the architecture-specific composition and use boundary: which architecture claim the description is about, which structural views it uses, what correspondence or source return keeps the use honest, and which architecture move or neighboring pattern remains admissible.
If any link in the chain is absent, do not fill it with a documentation label. Either add the missing reference, reduce the admissible use, or return to the governing pattern that can recover the missing relation.
View membership, viewpoint, and structure-kind binding
Architecture descriptions can contain several ArchitectureStructuralView@Context records. Each such view remains governed by C.30.ASV; C.30.AD does not mint a second structural-view record and does not decide whether the view has the right structure kind, viewpoint, hidden or lost structure note, correspondence, or source return.
C.30.AD records only membership or use of an already recoverable architecture structural view inside one architecture description:
Use [C.30.ASV](/generated/patterns/C.30.ASV) when the question under repair is whether the view has the right structure kind, viewpoint, hidden or lost structure note, correspondence, or source return. Use [A.22](/generated/patterns/A.22) when the question under repair is structure as such. Use [C.30](/generated/patterns/C.30) when the question under repair is the grounded architecture claim. Use [C.30.AD](/generated/patterns/C.30.AD) only for the description's membership, composition, correspondence, source-return, freshness, specification-use, publication-use, or remaining-move boundary.
Common architecture-description views:
Correspondence and source return
Architecture descriptions become risky when a reader cannot tell whether two views describe the same architecture claim, the same selected structure, related structures, or different entities of concern. Use correspondence records or source-return conditions when the description is reused across viewpoints, source editions, tool outputs, generated views, or regulated use.
Correspondence is not proof, assurance, or gate passage. It is a relation that lets a reader use more than one architecture view without silently changing the EntityOfConcern.
Freshness and currentness boundary
Use a freshness cue only when the architecture description's admissible use depends on source edition, structure edition, model version, deployment context, or external condition.
Freshness does not make the description evidence-sufficient. It only bounds the use of the description.
Specification-use and publication boundary
An architecture description can be used as a specification only when that use is declared. Specification use is not a new architecture kind; it is a use boundary over a Description episteme or its publication.
If the specification use becomes evidence, assurance, gate, work, decision, causal-use, or release authority, apply the neighboring pattern governing that claim to that authority claim. The architecture description remains the description boundary, not the authority.
Publication forms, diagrams, model faces, files, cards, dashboards, and generated relation graphs remain publications, views, faces, carriers, source-current records, or renderings unless the source episteme and use boundary are explicit.
Neighboring-pattern applications
| Generic description, view, viewpoint, publication, carrier, MVPK face | A.7, E.17.0, E.17.1, E.17.2, E.17, or C.2.P |
| Function or functionality wording | A.6.F |
| Module, interface, port, signature, or reusable structure relation | A.6.M, a signature or interface pattern named by value, C.31, or C.31.RSA |
| Mathematical lens or preserved and lost mathematical structure | C.29 |
| Characteristic, scale, coordinate, score, or quality claim | C.16.P, C.16, A.19, C.25, or quality pattern governing the claim |
| Evidence, assurance, gate, work, decision, causal-use, release | A.10, B.3, A.20, A.21, A.15, C.11, C.28, release or admissibility pattern, or governing pattern |
Worked cases
Conformance checklist
Common anti-patterns
SoTA-Echoing
Related patterns
C.30governs grounded architecture and selected-structure adequacy.C.30.Prepairs overloaded architecture or structure wording before this pattern is used.C.30.ASVgoverns architecture structural views and structure-kind and viewpoint separation.C.30.TGA-FLOW-REL,C.30.LCA, andC.30.ILCgovern architecture structure-relation subcases named by value.A.7,E.17.0,E.17.1,E.17.2, andE.17govern generic EntityOfConcern, Description, view, viewpoint, publication, and MVPK machinery.C.2.Prepairs source-current and publication or carrier relation-set overreads.
C.30.AD:End
Architecture and Structure Precision Restoration
Type: Architectural pattern Status: Stable Normativity: Normative unless explicitly marked informative
Plain-name. Architecture-structure wording repair.
Intent.
Recover architecture or structure wording whose selected structure, architecture relation, architecture-description use, structural-view use, source-return relation, or named C.30 subcase is hidden before a reader applies A.22, C.30, C.30.ASV, or a named C.30.* pattern.
This pattern does not mint U.Architecture, does not fuse architecture and structure into one kind, and does not replace grounded architecture adequacy or structural-view adequacy. It repairs overloaded wording so the architecture, structure, description, view, publication, source, relation, characteristic, mathematical-lens, evidence, assurance, gate, work, decision, causal-use, release, or ordinary-prose use becomes recoverable by value.
Builds on. E.10, E.10.ARCH, A.22, C.30, C.30.ASV, C.2.P, A.6.P, A.6.F, C.29, C.16.P, C.16, C.25, E.17, and E.8.
Coordinates with. C.30.TGA-FLOW-REL, C.30.LCA, C.30.ILC, named C.30.* structure and view patterns, A.10, B.3, A.20, A.21, C.11, C.28, A.15, E.11, and work, release, and publication patterns governing those claims.
E.10.ARCH governing relation. When E.10 encounters architecture or structure wording whose selected structure, architecture relation, architecture-description use, structural-view use, source-return relation, source label, or neighboring claim is hidden, E.10.ARCH selects C.30.P only until the use under repair and governing pattern are recovered. C.30.P then stops applying; it does not become a registry of architecture topics or a substitute for A.22, C.30, C.30.AD, or named C.30.* patterns.
Use this when
Use this pattern when architecture or structure wording hides which use is being made and recoverable by value.
Typical triggers:
architecture,architecture description,architecture model,architecture diagram,architecture map,architecture dashboard,architecture score;structure,structural view,structural model,module layout,component structure,interface structure, or stratification wording or source-label wording such aslayer,level,tier,stack,ladder,rung,block,expert,cache,router, orgatethat must go toC.30.STRATbefore local architecture or structure assignment;graph,flow,TGA graph,control sketch,LCA diagram,ADR,dashboard,benchmark,source, orviewbeing treated as architecture or structure by wording alone;- a function, module, interface, signature, flow, control, quality, score, evidence, assurance, gate, work, decision, causal-use, or release claim being smuggled under architecture or structure wording.
What goes wrong if missed. A diagram becomes the architecture, a graph becomes proof, a view becomes the selected structure, a source document becomes an architecture decision, a score becomes architecture adequacy, or a function, module, or interface claim becomes architecture by default.
What this buys. The reader can recover the architecture or structure use under repair, block the overread, and move to the governing pattern: selected structure under A.22, grounded architecture claim or conditional architecture description under C.30, architecture structural view under C.30.ASV, stratification-wording repair and source-label repair under C.30.STRAT, TGA-flow relation under C.30.TGA-FLOW-REL, control-structure view under C.30.LCA, mathematical lens under C.29, characteristic and scale repair under C.16.P, or a project-side evidence, assurance, gate, work, decision, causal-use, release, or publication pattern.
First useful move. Ask which selected structure, architecture relation, architecture-description use, structural-view use, source-return relation, or neighboring claim the architecture or structure wording is actually naming, then either apply the architecture or structure pattern named by value directly or use one architecture-structure repair note to assign the claim elsewhere.
Not this pattern when.
- If the use under repair is already a selected structure, use
A.22directly. - If the use under repair is already
ArchitectureOf@Context, useC.30directly. If the use under repair is the fullArchitectureDescription@Contextmechanism, useC.30.AD; useC.30only for the thin architecture-description bridge tied to one architecture move. - If the use under repair is already an architecture structural view, use
C.30.ASVor a namedC.30.*view pattern directly. - If the claim being made is evidence, assurance, gate, work, decision, causal-use, release, mathematical-lens use, characteristic and scale construction, quality characterization, source-use, or relation construction, use the governing pattern for that claim after any architecture or structure wording is demoted or assigned.
Problem frame
Working engineers often say "architecture" or "structure" while pointing at a useful artifact: a diagram, model, graph, table, dashboard, ADR, code-agent relation graph, neural-network architecture-operation diagram, benchmark result, or source document. Ordinary speech is acceptable; FPF-governed prose is not. If the artifact is named by a source label such as block, layer, expert, cache, router, or gate, use C.30.STRAT before assigning the recovered use locally.
The repair question is:
Which selected structure, architecture relation, architecture-description use, structural-view use, source-return relation, or neighboring claim does the wording name, and which FPF pattern governs that claim?
The architecture or structure use under repair may be:
- selected structure under
A.22; - an
ArchitectureOf@Contextclaim underC.30, a thin architecture-description bridge underC.30, or the full architecture-description mechanism underC.30.AD; - an
ArchitectureStructuralView@Contextor namedC.30.*subcase; - a publication, view, face,
PublicationUnit, carrier, dashboard, ADR, source document, or source-return relation underC.2.PorE.17; - a relation construction under
A.6.P; - a function or functionality-kind use under
A.6.F; - a mathematical-lens use claim under
C.29; - a characteristic, scale, score, coordinate, threshold, or quality-coordinate claim under
C.16.PorC.16; - a Q-bundle or quality-characterization claim under
C.16.Q,C.25, orE.21; - an evidence, assurance, gate, work, decision, causal-use, release, or method claim under its governing pattern;
- ordinary prose with no FPF-governed use being made.
Problem
How can FPF repair architecture or structure wording without:
-
creating
U.Architecture; -
treating architecture and structure as one fused kind;
-
treating a description, view, diagram, graph, dashboard, source, ADR, model, or publication as the architecture itself;
-
assigning all function, flow, module-interface, signature, control, evidence, assurance, gate, decision, work, quality, mathematical-lens, or source claims to architecture;
-
duplicating first-stage repair lists inside
A.22,C.30,C.30.ASV, and every namedC.30.*subpattern?
Forces
Solution
Repair architecture or structure wording by producing an architecture-structure repair note or an equivalent local rewrite.
Minimum fields:
Use the note only when the repair must remain inspectable. A direct local rewrite is enough when one sentence clearly names the selected-structure claim being made, architecture relation, architecture-description use, structural-view use, source-return relation, or governing pattern.
Recovery sequence
- Capture the trigger. Copy the architecture or structure wording and the sentence that uses it.
- Recover the encountered FPF kind or reference. Decide whether the text points to a selected structure, architecture claim, description, view, diagram, graph, model, dashboard, ADR, source document, carrier, publication, stratification-wording case or source-label case for
C.30.STRAT, function, module-interface relation, signature, flow, control, score, quality term, evidence, gate, work, decision, release, or ordinary prose. - Recover source-publication relations before architecture assignment. If the wording relies on a source, publication, view, face,
PublicationUnit, dashboard, ADR, file, carrier, or source-return relation, applyC.2.Pfor source-use, source-currentness, and publication relations before assigning the architecture or structure claim. - Choose the governing pattern for the architecture or structure use.
- selected structure ->
A.22; ArchitectureOf@Context, selected architecture-relevant structure, or thin conditionalArchitectureDescription@Contextbridge use ->C.30;- full
ArchitectureDescription@Contextmechanism ->C.30.AD; - architecture structural view ->
C.30.ASV; - TGA-flow relation ->
C.30.TGA-FLOW-REL; - control-structure view ->
C.30.LCA; - cross-scope conflict or frustration triage ->
C.30.ILC; - stratification wording or source-label wording such as
layer,level,tier,stack,ladder,rung,block,expert,cache,router, orgate->C.30.STRATbefore choosing the final governing pattern; - named C.30 subcase -> that subpattern.
- selected structure ->
- Assign non-architecture claims to their governing patterns. If the sentence uses architecture wording to carry relation, function or functionality, mathematical-lens, characteristic and scale, quality, evidence, assurance, gate, work, decision, causal-use, release, or method claim, apply the governing pattern for that claim and keep this pattern only for the architecture or structure wording repair.
- State admissible and non-admissible use. Say what the reader may do with the repaired wording and what non-admissible adjacent interpretation is blocked.
- Stop C.30.P after assignment. Stop after the governing pattern or ordinary-prose demotion is named.
Direct governing-pattern assignments
Refresh and reopen conditions
Reopen or narrow C.30.P when the FPF pattern-language ecology changes the first architecture or structure entry:
- a named
C.30.*, structural-view, TGA-flow, LCA or control, module-interface, mathematical-lens, characteristic, evidence, assurance, gate, work, decision, causal-use, release, or publication pattern now governs one row directly; - source-current architecture-description, view, model, decision-record, or architecture-documentation practice changes one adopted distinction in
C.30.P:7; - README, ToC,
E.11, retrieval, or local Problem-frame entry cues change the first practical entry for hidden architecture or structure wording; - a governing pattern starts copying first-stage architecture or structure trigger lists that belong here;
C.30.Pbegins to act as a registry of architecture topics rather than a wording-use repair pattern for hidden selected structure, architecture relation, architecture-description use, structural-view use, source-return relation, or named C.30 subcase.
The refresh action is to remove, narrow, or reassign the first-stage row. It is not to preserve old assignment wording as history.
Worked cases
Reduced SoTA row
Current architecture-description, model, view, and decision-record practice treats architecture as distinct from architecture descriptions, models, views, viewpoints, diagrams, and decision records. FPF adopts that line only where it changes action guidance: examples, non-use boundaries, governing-pattern assignments, source-return conditions, and conformance checks.
This row belongs in this pattern because it blocks diagram-as-architecture, graph-as-proof, view-as-structure-kind, publication-as-claim, and ADR-as-decision overreads. It does not import any external standard as FPF ontology.
Conformance checklist
Common anti-patterns
Related patterns
E.10catches architecture or structure wording and selects this pattern only when the selected structure, architecture relation, architecture-description use, structural-view use, source-return relation, or named C.30 subcase is hidden.E.10.ARCHdefines the shared wording-use recovery order and applicability row.A.22governs selected structure and structural views as structure.C.30governs groundedArchitectureOf@Contextadequacy and thin conditionalArchitectureDescription@Contextbridge use.C.30.ADgoverns the full architecture-description mechanism whenArchitectureDescription@Contextis the EntityOfConcern under repair.C.30.ASVgoverns architecture structural views.C.30.STRATgoverns stratification wording or source-label wording before C.30.P assigns any recovered architecture or structure portion.- Named
C.30.*patterns govern their own structure adequacy or view adequacy questions. C.2.Precovers source, publication, view, face,PublicationUnit, carrier, and source-use disposition.A.6.Prepairs relation construction;A.6.Frepairs function and functionality wording;A.6.Mrepairs module-relation and interface-specification wording.C.16.Prepairs characteristic-and-scale wording, andC.16.Qrepairs quality-term or evaluative characterization wording before score or quality use.C.29governs mathematical-lens use and does not become architecture by analogy.
C.30.P:End
Stratification Wording Precision Restoration
Type: Architectural precision-restoration subpattern under
C.30Status: Stable Normativity: Normative unless explicitly marked informative
Plain-name. Stratification and architecture-operation source-label repair.
Intent. Recover source wording such as layer, level, tier, stack, ladder, rung, block, expert, cache, router, and gate by completing the E.10.ARCH recovery row for that wording use: semanticAreaBaseConcept, semanticAreaSenseFamily, selected ontologicalNeighborhood, primary EntityOfConcern kind, encountered FPF kind or reference, relation to the primary EntityOfConcern, recovered kind, relation, or claim-use, source-use disposition, governing pattern, admissible use, non-admissible use, and remaining reader move. No conforming C.30.STRAT use mints U.Layer, U.Level, U.Tier, U.Stack, U.Ladder, U.Rung, U.Block, U.Expert, U.Cache, or one universal U.Stratification.
Builds on. E.10, E.10.ARCH, E.8, F.18, C.30.P, A.22, and C.30.
Coordinates with. C.30.ASV, C.30.LCA, C.30.TGA-FLOW-REL, C.30.ILC, A.6.M, A.6.F, E.18, C.16.P, C.16, A.19.SPR, C.2.P, E.17, C.29, C.28, A.10, G.6, B.3, A.20, A.21, A.15, A.2, G.5, and C.11.
E.10.ARCH governing relation. When E.10 encounters a stratification or architecture-operation source label whose ontologicalNeighborhood, primary EntityOfConcern kind, recovered kind, relation, claim-use, source-use disposition, or governing pattern is hidden, E.10.ARCH selects C.30.STRAT only until those row fields are recovered or the wording is lowered to ordinary source label, quote-only wording, reduced-use cue, blocked use, or incomplete rewrite. C.30.STRAT then stops at the source-label repair row; the governing pattern carries any recovered non-source-label claim or relation.
Use this when
Use this pattern when stratification or architecture-operation wording is doing FPF-governed work but the selected ontologicalNeighborhood and governing pattern for the source-label use are not yet recoverable by value.
Typical source labels:
layer,level,tier,stack,ladder,rung;block,expert,cache,router,gatewhen architecture-operation prose uses them as recognition labels before the FPF kind is known.
What goes wrong if missed. A source label starts acting as ontology. Layer may be taken as a holon level, control layer, publication layer, scale window, or module boundary without saying which ontological neighborhood is being used. Stack may become architecture by label. Block may become a module. Expert may become a role. Cache may become a memory relation or state. Router may become a decision policy. Gate may become a gate decision. None of those interpretations is admissible by word shape alone.
What this buys. The practitioner can keep useful source language while recovering the selected ontologicalNeighborhood and applying the governing pattern, instead of replacing the source label with another umbrella word.
First useful move. Treat the word as a sourceLabel and complete the recovery row: source label, bounded text, selected ontologicalNeighborhood, primary EntityOfConcern kind, relation to that EntityOfConcern, recovered kind, relation, or claim-use, governing pattern, admissible use, non-admissible use, and remaining reader move.
Not this pattern when. If the governing pattern is already recoverable by value, use it directly. Do not use C.30.STRAT merely because a familiar word appears. If the wording is only ordinary source prose with no FPF-governed use, keep ordinary prose or quote-only wording and stop.
Problem frame
Architecture and engineering sources use compact labels because they work in local practice. Neural-network architecture prose says block, expert, cache, or router. Control architecture says layer. Organizations say level or tier. Documentation says section, stack, or view. Mathematical and scale prose says level, resolution, or coarse-graining step.
Those labels are useful recognition cues, but FPF cannot rely on them as kinds. A label is not enough to know whether the next admissible move is module-relation repair, structure selection, functional-structure record, control-structure view, scale-window naming, source-publication return, or non-source-label claim assignment named by value.
The repair question is:
Which
ontologicalNeighborhooddoes this source-label use belong to, and which governing pattern now governs the recovered kind, recovered relation, recovered claim-use, source-use disposition, or non-use disposition?
Problem
How can FPF keep common stratification and architecture-operation language without:
- minting false root kinds for
layer,level,tier,stack,ladder,rung,block,expert,cache,router, orgate; - making
C.30govern all structure-like wording; - making
A.6.MorC.30.LCAcarry a duplicate local trigger registry; - treating source labels as non-source-label FPF-governed claims by appearance;
- removing useful source language before a remaining admissible reader move is recoverable?
Forces
Solution
Produce a StratificationSourceLabelRepairNote or an equivalent local rewrite. The note records the recovered E.10.ARCH row fields for this source-label use. It is not itself the selected structure, relation, source publication, neighboring claim record, or governing-pattern result.
Recovery sequence
- Bound the text and label. Name the sentence, table row, diagram label, publication unit, or source span; copy the source label; and state the local sentence role.
- Check cheap closure. If there is no FPF-governed use, keep ordinary prose or quote-only wording and stop. If one small local rewrite restores the intended non-FPF use, close locally under
E.10. - Recover candidate ontology. Recover candidate primary
EntityOfConcernkinds, candidate encountered FPF kinds or references, relation candidates, claim-use candidates, source-use candidates, scope, time, viewpoint, and context facets. Include literal and intended candidates when metonymy or compression is plausible. - Select the ontological neighborhood. Select the first applicable neighborhood by recovered relation, claim-use, source-use disposition, formal apparatus, or governing-pattern field set, not by the source label.
- State the apparatus that makes the repair checkable. Use relation slots, control roles and rate bands, module-interface fields, flow fields, transduction fields, characteristic and scale construction, publication relation set, source-use disposition, mathematical-lens fields, evidence path, assurance argument, gate record, work occurrence, decision record, causal-use record, or ordinary non-use disposition, with scope, time, viewpoint, and context facets only where the recovered claim or use needs them.
- Project back to wording. Produce the repaired wording, compact note, direct governing-pattern application, or non-use disposition. The replacement candidate is accepted only after it passes
E.10. - State use and move. State admissible use, non-admissible wider or adjacent use, and one remaining reader move. If no move remains, the disposition is reduced-use, quote-only, blocked use, or incomplete rewrite.
Ontological-neighborhood governing-pattern applications
Same-sentence claim boundary
When one sentence uses a source label to carry another FPF-governed claim, do not repeat a local "not proof, not gate, not work" catalogue at every occurrence. Keep the source-label repair in C.30.STRAT and apply the governing pattern for each recovered non-source-label claim. C.30.STRAT:4.2 names the common choices; worked cases keep only local false positives that the source label itself makes tempting.
Source-label cue table
Placement discipline
semanticAreaBaseConcept: stratification wording and architecture-operation source labels.
semanticArea: the Part-F semantic row-set used for layer, level, tier, stack, ladder, and rung plus architecture-operation labels such as block, expert, cache, router, and gate when they are used as source labels before the governing FPF pattern recovers their selected kind, relation, or publication-use boundary.
semanticAreaSenseFamily: source-label wording for stratification, ordering, aggregation, and architecture-operation recognition; not a topic label, pattern-placement claim, or pattern-nest grouping.
ontologicalNeighborhood: the applicability neighborhood selected by the recovery row, not a second ontology. The admissible neighborhoods are the rows in C.30.STRAT:4.2: control structure; selected structure or structural view; module-interface and substitution; function-like, flow, or transduction; characteristic, scale, or mathematical-lens use; episteme, publication, view, or source-use; state, currentness, temporal, or dynamics; evidence, assurance, gate, work, decision, or causal-use; and ordinary source-label non-use.
The pattern nest is C.30.* because the recurring first failure is architecture or structure wording in architecture-operation prose. That placement does not make C.30 the governing pattern for non-source-label claims named in C.30.STRAT:4.2. The selected ontologicalNeighborhood and governing-pattern row decide which pattern governs the case.
Worked cases
Filled repair note
A compact local rewrite can therefore say: The response cache is a candidate state-bearing architecture structure. Architecture scaling, mathematical-lens use, proof, and assurance claims are separate claims; apply [C.16.P](/generated/patterns/C.16.P), [C.29](/generated/patterns/C.29), [C.31.ASAP](/generated/patterns/C.31.ASAP), [A.10](/generated/patterns/A.10), [B.3](/generated/patterns/B.3), or [G.6](/generated/patterns/G.6) only when one of those claims is being made.
Lowering and reopen conditions
A StratificationSourceLabelRepairNote remains admissible only while its source span, selected ontologicalNeighborhood, governing pattern, and remaining reader move stay recoverable. Reopen or lower the repair when:
- the source label starts carrying a new relation, characteristic, publication, evidence, assurance, gate, work, decision, causal-use, or mathematical-lens claim;
- a direct governing pattern becomes recoverable and
C.30.STRATno longer buys action guidance; - the selected neighborhood was chosen by label similarity rather than by recovered apparatus;
- the repair preserves kind recovery but leaves no useful admissible reader move;
E.10.ARCHchanges the required recovery fields,C.30.Pchanges architecture-wording repair law,F.19changes apparatus-vs-usability policy, or a more source-label realization pattern now governs a label family currently repaired here.
Lower the result to quote-only, reduced-use cue, blocked use, or incomplete rewrite when the governing pattern, admissible use, non-admissible use, or remaining move cannot be stated.
Archetypal Grounding
Bias-Annotation
Lenses tested: Arch, Onto and Epist, Prag, Did, and Gov. Scope: architecture and engineering source-label precision restoration, with non-architecture governing-pattern applications when recovery selects them.
This pattern intentionally biases away from lexical replacement and toward ontology-first recovery. The mitigation is the cheap-closure rule: ordinary source prose stays ordinary, quote-only wording stays quote-only, and already recovered cases skip C.30.STRAT.
Conformance checklist
Common Anti-Patterns and How to Avoid Them
Consequences
Rationale
Stratification words are common because they compress local practice. That compression is useful at entry time and unsafe as ontology. FPF therefore keeps the word as a source label, recovers the ontologicalNeighborhood, and then uses the governing pattern for the recovered claim.
The pattern is placed under C.30 because architecture and structure prose is the recurring entry point. The placement does not make C.30 the governing pattern for every recovered case. If the recovery result is outside source-label repair, the governing pattern named in C.30.STRAT:4.2 carries the recovered claim content.
SoTA-Echoing
Reduced SoTA is sufficient for this precision-restoration pattern. The source practice being adopted is not a new external ontology; it is the observed architecture and engineering habit of using compact labels such as layer, level, tier, stack, block, expert, cache, router, and gate as local recognition language. FPF adapts that practice by keeping labels as source labels and requiring ontology-first recovery before they carry FPF-governed use.
Internal FPF current practice is the governing source here: E.10 supplies trigger handling, E.10.ARCH supplies the recovery architecture, C.30.P supplies architecture and structure wording repair, F.19 supplies apparatus-vs-usability discipline, and governing patterns carry recovered cases. The Solution, checklist, worked cases, and relations in this pattern change because that source-use disposition rejects lexical replacement and trigger-table fanout.
Currentness front. Recheck this pattern when E.10.ARCH changes the recovery row fields, C.30.P changes architecture or structure wording repair, F.19 changes apparatus policy, or a more source-label realization pattern now governs a label family currently repaired here. The smallest changed locus is the affected row field, Relations entry, worked case, or subject-pattern thin pointer; do not rebuild a local trigger registry.
Relations
E.10catches the trigger and selects this pattern only when stratification or architecture-operation source-label recovery is needed.E.10.ARCHsupplies the recovery architecture, placement rule, and anti-fanout discipline.C.30.Premains the broader architecture and structure wording repair.C.30.STRATis the narrower stratification source-label realization when those labels recur with stable recovery apparatus.A.6.Mgoverns only recovered module-interface relation and interface-specification cases.C.30.LCAgoverns only recovered control-structure view cases with control roles, relations, rate bands, control-layer labels, and bounded context.C.31andC.31.RSAgovern only recovered characteristic, reusable-locus, bespoke-residue,accountingBasisRef, or report-only share cases.C.2.P,E.17,A.6.F,E.18,C.30.TGA-FLOW-REL,C.16.P,A.19.SPR,C.29,C.28,A.10,G.6,B.3,A.20,A.21,A.15,A.2,G.5, andC.11carry their recovered cases when the case is named by value.
Neighboring claims stay with their governing patterns: A.22 for selected-structure EntityOfConcern, C.30 for grounded architecture and selected-structure adequacy, C.30.P for architecture and structure precision restoration, C.30.ASV for structural-view adequacy, C.30.LCA for control-structure view adequacy, A.6.M for module-interface repair, A.6.F for function-use repair, E.18 for graph, path, crossing, and flow-valuation discipline, C.16 for characterization, C.29 for mathematical-lens use, C.2.P for source and publication relation repair, and the non-source-label governing patterns named in C.30.STRAT:4.2. C.30.STRAT governs stratification wording and architecture-operation source-label repair only.
C.30.STRAT:End
Architecture Structural View Adequacy (ASV)
Type: Architectural pattern Status: Stable Normativity: Normative unless explicitly marked informative
Problem frame
Use this pattern when an architecture discussion needs to say which selected structure is being viewed, not merely that there is a diagram, model, table, dashboard, ADR, generated relation graph, or generic "view".
The first useful move is ArchitectureStructureKindTriage@Project:
Ordinary minimum: name the architecture claim being made or selected structure, or the described holon and bounded context when the claim is not yet recoverable, the one structure kind or structure-kind set that changes action, one non-admissible overread, and the next admissible architecture move or stop. All other fields are conditional and may be not used.
Start with [C.30](/generated/patterns/C.30) when the architecture claim itself is unclear. Use C.30.ASV only when a view over selected architecture-relevant structure changes the next architecture move. Use the triage record when it names the structure kind under consideration and the next admissible architecture move. Use a full ArchitectureStructuralView@Context only when the view changes action, selected reliance relation, correspondence, source return, publication, comparison, or another governing-pattern use.
What goes wrong if C.30.ASV is missed: "architecture" silently means "module diagram"; a view becomes a publication face; a viewpoint becomes a structure kind; TEVB is stretched into a full architecture ontology; a Transduction Graph Architecture (TGA) graph, Layered Control Architecture (LCA) control sketch, code-agent relation graph, or neural-network block diagram becomes the architecture by appearance.
What C.30.ASV buys in practice: the practitioner can name the architecture claim, selected structures, structure kind, viewpoint, selected relation kinds, selected constraints, selected invariants, operation or dynamics descriptions being used, hidden or lost structure, correspondence, source or reliance relation, source-return condition, admissible use, and non-admissible use before relying on a view.
Not this pattern when the question under repair is only the general architecture claim, structure as such, or a TGA graph relation, path relation, or crossing relation. Use [C.30](/generated/patterns/C.30), [A.22](/generated/patterns/A.22), [E.18](/generated/patterns/E.18), or C.30.TGA-FLOW-REL as appropriate. If the view is used for another claim being made, use the governing pattern and keep C.30.ASV only to the view portion.
Thin precision-restoration pointer: if the issue under repair is still whether view, architecture view, architecture structural view, diagram, model, graph, layer, or functional architecture names a structural view, an architecture description, a publication face, a carrier, a source relation, or another governed claim or relation named by value, use [C.30.P](/generated/patterns/C.30.P) first. Do not copy the [C.30.P](/generated/patterns/C.30.P) trigger table here; apply C.30.ASV only after the architecture structural-view claim or non-ASV claim named by value is recoverable.
Problem
An architecture structural view is selected-structure triage for an ArchitectureOf@Context claim: which architecture-relevant structure is being viewed, which structure kind is under consideration, what relation, constraint, invariant, operation, dynamics description, hidden or lost structure, correspondence, source or reliance relation, and source-return condition changes the next architecture move. The view is represented as a Description episteme, including an episteme-lane U.View when the view claim is being made, only to record that selected-structure move. Publication faces, forms, units, carriers, and renderings may publish the view; they are not the view and do not become the selected structure.
Without this pattern:
- a module-interface view is treated as all architecture;
- a TGA graph or control diagram is treated as proof;
- a structure kind is treated as a
U.Viewpoint; - a TEVB viewpoint bundle is mutated to carry architecture-specific structure kinds;
- a diagram, table, dashboard, generated relation graph, or ADR is treated as the view itself;
- functional architecture is treated as a peer ontology rather than a structure-kind interpretation under C.30;
- cross-view consistency is asserted by prose instead of correspondence records;
- omitted structure is relied on in subsequent work without a source-return condition.
Forces
Solution
Govern architecture structural views by first naming the selected architecture-relevant structure, structure kind, view construction, correspondence, hidden or lost structure, source or reliance relation, source-return condition, admissible use, and next architecture move. Use ArchitectureStructuralView@Context as the record form when that view must be durable, reusable, comparable, or reliance-bearing.
A conforming ArchitectureStructuralView@Context record is a Description or view over selected U.Structure references in one ArchitectureOf@Context claim record, under one declared ArchitectureStructureKindRef and one DescriptionContext.ViewpointRef. The description and view machinery makes the selected-structure move inspectable; it does not replace that move.
C.30.ASV is the selected-structure-kind-to-view relation pattern for architecture work. It explains how different selected structure kinds become views under declared viewpoints and concerns. It is not a complete architecture-description pattern; a durable ArchitectureDescription@Context composes one or more structural-view records through C.30 and E.17.0 only when description use is being made.
C.30.ASV does not extend the TEVB core viewpoint set by implication. It defines architecture structure kinds and architecture-specific structure-kind and view-record bindings. TEVB viewpoints are reused when the structure-kind view uses one of the TEVB core viewpoints; other structure-kind views use VF.ARCH.STRUCTURE, a declared local viewpoint bundle, a governing FPF pattern, or a source or reliance record.
Architecture structural view record
StructuralAspectDescription@Context describes one selected structural aspect under A.22. It is not an ArchitectureStructureKindRef by itself. ArchitectureStructuralView@Context is a C.30.ASV view over structures selected by ArchitectureOf@Context and typed by ArchitectureStructureKindRef.
DescriptionContext.EntityOfConcernRef names the selected structure or selected structure set represented by structureRefs. architectureClaimRef names the enclosing ArchitectureOf@Context claim, and the described holon and bounded context are recovered through that claim record.
EntityOfConcern discipline. C.30.ASV treats selected structure as the EntityOfConcern for this view use when the view concerns dependent, non-agentive organization rather than one publication artifact. This does not add a parallel EntityOfConcern head: DescriptionContext.EntityOfConcernRef, selectedStructureEntityOfConcernRef, and structureRefs must converge on the same selected structure or structure set, while architectureClaimRef remains the enclosing architecture-claim context.
viewpointRef is a recovery label for descriptionContext.ViewpointRef, not a second independent viewpoint slot. If the implementation stores only DescriptionContext, the viewpoint remains recoverable there.
structureKnowledgeState? states how the selected structure is known when partial knowledge matters: declared, observed, inferred, generated, simulated, extracted, hypothesized, or with an unknown region present. Unknown or inferred structure may guide inspection or source return; it cannot by itself supply assurance, gate, release, causal proof, or architecture decision.
Architecture structure-kind classifier
ArchitectureStructureKindRef is a C.30-local DiscriminatorToken enumeration over architecture-relevant U.Structure references selected by ArchitectureOf@Context. It is not U.Kind, U.Viewpoint, U.ViewpointBundle, StructuralAspectDescription, StructuralView@Context, or a root U.* kind. ArchitectureStructuralView@Context uses structureKindRef to say which selected structure kind is being viewed.
The first group is the seed classifier set for ordinary architecture structural-view use. WorkMethodStructure, RoleEnactorStructure, EvidenceAssuranceStructure, and ScaleEvolutionStructure are neighbor-governed classifier values: ASV may use them to name the selected architecture-relevant structure, but their full semantics stay in the named work and method, role-enactor, evidence and assurance, scale, characterization, or mathematical-lens patterns.
Do not enumerate structure kinds by default. Choose the smallest useful structure-kind set that changes the next architecture move. If no structure kind changes action, keep the phrase as ordinary recognition wording or a source note. This does not weaken kind discipline; it prevents ArchitectureStructureKindRef from becoming an audit checklist.
Inside C.30.ASV, OtherDeclaredStructureKind is always an architecture-structure-kind classifier value over U.Structure; it does not mint a general FPF root kind.
OtherDeclaredStructureKind is admissible only when the local text names:
declaredStructureKindName;declaredStructureKindDefinition;- allowed relation families;
- common false interpretations;
- governing-pattern applications;
boundedContextRef.
Each structure kind needs a short definition, allowed relation families, common false interpretations, typical governing-pattern applications, and example architecture structural view records. This is not a new root-kind set; it is a controlled classifier set over U.Structure.
Small triage output
Use ArchitectureStructureKindTriage@Project before a full view record when the practitioner only needs to identify the structure kind under consideration and next architecture move.
primaryGoverningPatternApplicationRef names the pattern that carries the next claim kind being made. candidateGenerationPatternApplication? marks that the next admissible move is candidate generation; candidate generation is not ASV work. temptingWrongPatternRefs? names tempting wrong first patterns when that repair is needed. None of these fields governs the triage record itself; C.30.ASV governs the triage record family.
When architectureClaimRef is absent, describedHolonRef and boundedContextRef are required for triage. This pre-claim form does not create a new kind and does not publish an ArchitectureOf@Context claim by itself; it only lets the practitioner identify the structure kind under consideration before forming a full architecture claim. A full ArchitectureStructuralView@Context still requires architectureClaimRef; do not promote triage to a full view record until that architecture claim is available.
Practitioner prompt labels are first-entry cues, not ArchitectureStructureKindRef values. FPF-governed records use the Tech values below:
Architecture viewpoint bundle and binding rows
Architecture structural views use VF.ARCH.STRUCTURE without turning structure kinds into viewpoints. The bundle is separate from VF.TEVB.ENG: it may import TEVB, but it does not expand the TEVB core engineering viewpoint set.
Declaration source: VF.ARCH.STRUCTURE is an E.17.1 and F.18 declared viewpoint bundle for architecture structural-view records. Its VP.Architecture* ids are viewpoint ids only. They do not add TEVB viewpoints, name structure kinds, define publication faces, or carry decision, evidence, gate, or assurance authority.
Structural-view publication-use boundary
This subsection is the C.30.ASV structural-view publication-use boundary. C.30.ASV governs architecture structural-view adequacy: selected architecture-relevant structure, structure kind, view construction, correspondence, hidden structure and lost structure, source return, and next architecture move. When a view, diagram, graph, card, benchmark, probe output, model publication, or architecture note is used for evidence sufficiency, safety assurance, gate passage, release permission, work record, or decision authority, apply the pattern governing that claim; keep only the structural-view record and the next architecture move in C.30.ASV.
TEVB is the small engineering viewpoint bundle over holons. The architecture problem is broader than TEVB, but the broader coverage is not solved by placing record sets inside a U.ViewpointBundle. The U.ViewpointBundle carries viewpoints; a separate architecture-local description binds structure kinds, view record sets, construction modes, correspondence obligations, and governing-pattern applications.
viewRecordSetRef names the allowed Description-episteme or specification-use record set for one structure-kind binding. It is not a package grouping, not a U.ViewpointBundle, not a ViewFamilyId, and not a new TEVB viewpoint.
Initial architecture structure kinds and view records
The initial set is a seed for first architecture moves, not an atlas. Use the table to choose one structure kind under consideration and the governing-pattern application that carries any non-ASV claim kind.
Externally governed classifier values remain admissible when they are the architecture-relevant structure under consideration, but C.30.ASV does not define their full record families:
Minimum useful seed examples:
SecurityTrustBoundaryStructure carries adversarial-boundary interpretation: which protected assets or effects are under consideration, who or what is trusted, where untrusted input crosses, what authority or privilege is exposed, which adversarial paths and attack exposures matter, which data-flow or control-flow security boundaries matter, and where secure defaults, hardening, update or supply-chain channels, detection, or response boundaries change the next architecture move.
Apply evidence, assurance, gate, or compliance patterns only when the architecture move relies on evidence sufficiency, assurance verdict, gate passage, regulatory acceptance, or release authority. If the selected move is structural, first recover the structure: trust boundary, loss-control relation, control relation, evidence reuse structure, or affected structure or affected view.
Use a SafetyLossControlStructureNote when a safety-architecture concern first needs the architecture-side loss-control structure rather than a safety-case verdict:
The note gives a positive first architecture move: find the loss-control structure, controlled process or plant, constraint, foreseeable misuse, operational design scope, and action-relevant boundary. It does not replace evidence, assurance, gate, causal, dynamics, or temporal claims.
Functional structure view boundary
FunctionalStructureView@Context under C.30.ASV does not mint U.Function. A functional element is a description-side architecture element under VP.Functional unless separately grounded as U.Capability, U.Method, U.Work, U.Role, or another existing FPF kind.
A transduction graph, path slice, crossing, or flow valuation is not a functional element. When a flow relation is being used, connect the functional view to FlowTransductionStructure through C.30.TGA-FLOW-REL. When module allocation is being claimed, connect the functional view to [A.6.M](/generated/patterns/A.6.M) module-relation repair rather than treating function and module as one kind.
Composability and quality compositionality are separate claims. If the view says parts can be assembled, keep that as a structure claim or use claim. If it says a quality of the whole follows from parts, assign the quality-composition claim to [C.25](/generated/patterns/C.25) and C.16-backed measurement or quality claim.
Compositional formalisms may express explicit composition structures and view relations and model relations. They do not make safety, latency, reliability, or another quality propagate automatically.
Correspondence and source return
Use correspondence records when the view relates functional, flow, control, module-interface, information, runtime, placement, work, evidence, scale, or logical structures. Do not assert cross-view consistency by prose alone.
Correspondence examples:
Use SourceReturnCondition when compression, extraction, coarsening, evidence reuse, ML evaluation, bounded exception, many-to-many allocation, publication, or decision claim hides a distinction needed for action, assurance, causal use, legal review, regulatory review, comparison, or reopening.
If viewConstruction is query, extraction, coarsening, correspondenceSlice, or sourceReturnSlice, and omitted structure changes action, assurance, causal use, legal or regulatory review, or subsequent decision reopening, SourceReturnCondition is needed.
When the view is used to name affected structures for a next move but no decision record is being used, use C.30 AffectedArchitectureStructureNote: affected structure kinds, affected structure refs when known, affected ASV refs, accepted or suspected view loss, source-return condition, and the next admissible move. The note is not an architecture decision, ADR, gate passage, evidence sufficiency, or release authority.
Use the thinnest source or reliance relation that preserves the next architecture move. Use fuller source, evidence, assurance, or claim-kind relation only when the source or reliance relation being used cannot be inspected, used, compared, refreshed, or bounded without it. A ControlStructureViewNote may precede full C.30.LCA use or proof-governing pattern applications when one control relation and its boundary are enough for the architecture move being made.
Treat source return as a user action, not only a metadata field:
Do not make source return mandatory for ordinary local recognition when no hidden distinction is being used for action. Do not omit source return when a hidden distinction carries a selected reliance relation, assurance, legal, comparison, causal, gate, or decision commitment. The condition is needed only when the repaired text still relies on the hidden source-side distinction.
Model cards, system cards, and evaluation harness reports may publish or substantiate an architecture structural view only when the structural-view claim is recoverable. The view must name the relevant structure kind, such as RuntimeInteractionStructure, InformationDataStructure, SecurityTrustBoundaryStructure, EvidenceAssuranceStructure, ModuleInterfaceStructure, or another declared structure kind; it must also state intended-use scope, evaluation scope and known loss when evaluation is used, deployment-context mismatch when that mismatch is being claimed, and the evidence or assurance governing pattern when the publication is used beyond transparency. A card or harness is not architecture adequacy, safety proof, or release claim or gate claim by publication alone.
Worked slices
Runtime degradation. A team says, "The architecture is fine, but incidents happen when failover starts." The first architecture move is to recover runtime interaction, control relation, failover relation, placement, and evidence-assurance structures before turning a dashboard or deployment diagram into proof:
Use [C.24](/generated/patterns/C.24) only when tool-use, call planning, call graph, work execution, or budgeted agentic tool-use is the claim being made. Do not absorb those claims into architecture structure.
CPS or plant architecture. A plant drawing, P&ID-like artifact, LCA sketch, or safety-case view is not the plant architecture by itself. First recovery may need:
Chiplet or device architecture. A packaging diagram or interconnect sketch may involve several structure kinds:
Organization or operating-model architecture. An org chart or work-method diagram can be architecture-relevant only after the work, role, information, and evidence records are separated:
Evidence reuse across product variants. A certification or test package reused across module variants may be architecture-relevant as an evidence-and-assurance structure view, but it is not an assurance verdict:
AI agent diagram. A "planner-memory-tools" diagram is not the agent's architecture by itself. It may start first recovery as a structure-kind set, without minting an AI-domain ontology:
Structural AI-agent security is architecture structure when these structure kinds change the next architecture move. When the claim being made is latent representation, decoding, or effect adequacy rather than architecture structure, keep the phrase as a reduced-use source cue until the representation, decode, or effect-adequacy pattern governing that claim carries that claim.
Generated code-agent relation graph. A probe JSON or code-agent architecture relation graph can be an architecture structural view publication only after observed, inferred, or unknown observation value, evidence pointers or source pointers, unexplored regions, typed relation semantics, and source-return conditions are present. Belief-state proof and downstream-change safety assurance apply the patterns governing those claims.
Neural-network block replacement. Replacing attention, FFN, convolution, SSM, recurrent, memory block or cache block, MoE expert-selection, pruning, distillation, or another block is an architecture move only when the changed structure kind, flow relation, module-interface claim kind, preserved and lost structure, affected characteristic, source relation, and decision or evidence governing pattern are named.
Archetypal Grounding
Bias-Annotation
Lenses tested: Arch, Onto, Epist, Prag, Did, Gov. Scope: architecture structural-view claims over holons.
This checklist verifies the preceding guidance after the practitioner has chosen the selected move; it is not a required project control form and not a substitute for the card, note, view, relation, or repair move above.
Conformance Checklist
Common Anti-Patterns and How to Avoid Them
Consequences
Rationale
C.30.ASV exists because architecture descriptions are multi-view by nature, but FPF cannot let "view" absorb every architecture claim. A structure kind and a viewpoint are different. A structure kind says what kind of selected structure is being described; a viewpoint says how an episteme or view is oriented toward a concern. They may be bound, but they are not interchangeable.
The pattern keeps first use light by providing ArchitectureStructureKindTriage@Project. If triage identifies the structure kind under consideration and the next admissible architecture move, no full view record is needed. The full record is used when a view changes action, correspondence, publication, source return, source or reliance use, or non-view claim kind.
The TEVB decision is conservative. TEVB remains the small engineering viewpoint bundle over holons. Architecture may import it, but architecture-specific structure kinds and view-record bindings are defined beside TEVB rather than mutating TEVB.
SoTA-Echoing
Relations
Builds on: C.30.P, C.30, A.22, A.6.3, E.17.0, E.17.1, E.17.2, A.7, E.10.D2, E.10, C.2.P, and F.18.
Coordinates with: A.6.F, A.6.M, C.30.TGA-FLOW-REL, C.30.LCA, C.30.ILC, E.18, C.29, C.16, C.25, C.28, A.10, G.6, B.3, A.20, A.21, A.15, C.11, and governing patterns for architecture decision and candidate-set claims. Use A.6.M when the module-interface claim kind is being made.
Neighboring claims stay with their governing patterns: C.30 for grounded architecture and selected-structure adequacy, A.22 for selected-structure EntityOfConcern, E.TGA for graph, path, and crossing discipline, C.29 for mathematical-lens use, C.16 for characterization, C.25 for Q-Bundles, C.28 for causal use, A.10 and G.6 for evidence, B.3 for assurance, A.20 and A.21 for gate or release records, A.15 for work, C.11 for decisions, and E.17 for publication. C.30.ASV governs architecture structural-view adequacy for the selected structure being viewed.
C.30.ASV:End
Control Structure View Adequacy (LCA)
Type: Architectural subpattern under
C.30Status: Stable Normativity: Normative unless explicitly marked informative
Problem frame
Use this pattern when a selected control structure or control-structure relation changes the next architecture move: a controller regulates a plant, an observer or estimator changes what can be known, a planner provides references to lower-rate control, a supervisor constrains a subsystem, a policy loop changes allowed behavior, or an LCA cue makes roles, rates, observation boundaries, actuation boundaries, feedback, or externalities architecture-relevant.
The first-minute working situation is ordinary engineering talk: a diagram says the supervisor watches a subsystem, a controller regulates a plant, an observer estimates state, a planner gives references to a lower-rate controller, or a policy relation or control relation changes allowed controller behavior. The useful first move is to recover a ControlStructureView@Context: which architecture claim is being described, which control roles and relations are present, which rate bands or recovered control-layer relations are being claimed, which feedback or externality boundaries are named, and which governing pattern carries any additional claim being made. If the source only says layer, level, tier, or stack without a control-specific relation, use C.30.STRAT first.
What goes wrong if C.30.LCA is missed: a control diagram becomes proof; stratification labels bypass C.30.STRAT and start carrying undeclared scope; and B.2.5, Transduction Graph Architecture (TGA), or Layered Control Architecture (LCA) prose is overread as control adequacy.
What C.30.LCA buys in practice: the practitioner can keep useful controller, plant, observer, regulator, supervisor, feedback, rate, and control-layer language while recovering the control-structure view and the governing pattern that carries any proof or claim named by value.
Not this pattern when the issue under repair is generic stratification or source-label repair, only a TGA path slice, function description, module boundary, measurement head, causal intervention, or safety case. Use C.30.STRAT, C.30.TGA-FLOW-REL, A.6.F, A.6.M, C.16, C.28, or the assurance or evidence pattern governing the claim as appropriate.
The primary EntityOfConcern for this pattern use is the selected control structure or control-structure relation set under an ArchitectureOf@Context. The ControlStructureView@Context is a describing episteme for that selected structure; proof, safety, evidence, gate, and architecture-as-whole claims remain claim named by value refs governed by their governing patterns. Ordinary use may stop with a typed control-structure view note:
The full ControlStructureView@Context is used when the control claim being made needs declared roles, relations, rates, recovered control-layer labels, boundary refs, or explicit governing-pattern applications beyond that note.
Problem
Control diagrams are persuasive because they look operational: arrows imply feedback, boxes imply responsibility, and recovered control-layer labels imply separation. In practice that is often enough for orientation, but not enough to make the architecture claim admissible. A control-stack description can quietly overclaim that stability, safety, evidence sufficiency, gate validity, assurance, or causality has already been established; a non-control layer, level, tier, or stack label belongs first to C.30.STRAT, not to C.30.LCA.
FPF needs a pattern that preserves the useful recognition of control architecture without letting the recognition cue become a proof. The control roles, feedback relations, externality boundaries, and rate separations belong in an architecture structural view. Claims about dynamics, temporal adequacy, causal use, evidence, assurance, gates, or mathematical lens transfer belong in the governing pattern that governs that claim kind.
Forces
- Control talk is useful and current engineering practice uses it, so deleting it would make architecture prose less usable.
- The same source labels can name different things. C.30.LCA applies only to recovered control-layer, rate-band, control-relation, bounded-context, and
B.2.5supervisor-subholon uses; otherlayer,level,tier, orstackuses are recovered withC.30.STRATand then governed by their governing patterns when those claims are being made. - Layered and multi-rate control descriptions often need timing and dynamics claim before they can carry stability or safety claims.
B.2.5already gives FPF a supervisor-subholon feedback-loop pattern, but it does not turn every loop diagram into proof.- TGA graphs can describe flow and transduction relations that participate in control, but the TGA graph is still a description or view, not the control structure itself.
- Practitioners need one small first output; dynamics, C.29, evidence, assurance, and gate records are used only when the question under repair calls for that governing pattern use.
Solution
Treat LCA-like material as a control-structure view under C.30. Recover the described architecture claim, the selected control structure or control-structure relation set, the control roles, the control relations, the relevant rate bands or recovered control-layer labels, and the boundary refs that make the view checkable. If the source label is not yet control-specific, apply C.30.STRAT before applying C.30.LCA to the case. Then state the admissible use and the non-admissible overread.
The ordinary minimum may stop with a compact ControlStructureViewNote:
Use rateBandRefs?, controlLayerRefs?, and externalityBoundaryRefs? only when rate, recovered control-layer, or externality wording carries a control-structure claim being made. Otherwise the ordinary note may stop after one control relation, loop state, and the proof-governing pattern application named by value if that claim is being made. Generic stratification labels stay with [C.30.STRAT](/generated/patterns/C.30.STRAT) until recovered.
When a recovered control-layer relation is used to justify decomposition, substitution, or design reliance, recover the inter-layer assumption-guarantee relation or mark the control-layer relation as orientation only. interLayerControlRelationRefs? is used only when the relation is already control-specific and is used for decomposition, substitution, design reliance, safety, or stability claim kinds.
Use this note only when a recovered control-layer relation is used for decomposition, substitution, safety or stability claim, or architecture decision claim. It is not proof. Otherwise keep C.30.LCA at the small note or ordinary view form, or return the source label to [C.30.STRAT](/generated/patterns/C.30.STRAT).
DescriptionContext.EntityOfConcernRef names the selected control structure or control-structure relation set represented by selectedControlStructureEntityOfConcernRef. architectureClaimRef names the enclosing architecture claim and supplies the bounded context and described holon; it is not the EntityOfConcern of the control-structure view itself.
Safety-loss control-structure note
Use a SafetyLossControlStructureNote only when safety wording is being used for a loss-control claim and the practitioner first needs the architecture-side loss-control structure, not a safety-case verdict:
The note gives a positive safety-triggered architecture move: find the loss-control structure, controlled process or plant, constraint, foreseeable misuse, operational design scope, and action-relevant boundary. It does not replace the generic control-structure view and does not replace evidence, assurance, gate, causal, dynamics, or temporal claims.
Role interpretation.
Control-specific stratification gate. Layer, level, tier, and stack enter C.30.LCA only after [C.30.STRAT](/generated/patterns/C.30.STRAT) or the local sentence recovers a control-specific item: controlLayerRef, controlRoleRef, controlRelationRef, interLayerControlRelationRef, rateBandRef, bounded context, and, where the supervisor-subholon relation is being claimed, [B.2.5](/generated/patterns/B.2.5) supervisor-subholon relation. Generic system level, aggregation scope, organization level, work or evidence scope, scale window, coarse-graining, deployment tier, and publication section do not stay in C.30.LCA. A layer label is not a control structure, not a system level, not a rate band, and not evidence of separation by itself.
B.2.5 boundary. [B.2.5](/generated/patterns/B.2.5) remains the supervisor-subholon feedback-loop check pattern. [C.30.LCA](/generated/patterns/C.30.LCA) can cite a [B.2.5](/generated/patterns/B.2.5) relation when a supervisor-subholon loop is part of the control view. It does not use [B.2.5](/generated/patterns/B.2.5) prose as proof of stability, safety, causality, evidence sufficiency, gate validity, or assurance. If an episteme appears in a control example, the acting Transformer, publication or review practice, and publication relation, source relation, or reliance relation are named; an episteme does not sense, judge, plan, adapt, or act as an agent.
TGA boundary. A TGA path slice may supply flow-structure or transduction-structure input to the control view when a flow or transduction relation is being used. The TGA graph remains a description or view of flow or transduction structure. It does not become the functional architecture, the control structure, or proof of control adequacy.
C.29 boundary. LCA may be an accepted local control-theory description in one context and a transferable mathematical lens in another. When transfer, prediction, assurance input, or reusable cross-domain explanation is being claimed, use MathLensUse.FullCard or at least MathLensUse.MiniCard. Dynamics, temporal adequacy, and causal claims are still assigned to [A.3.3](/generated/patterns/A.3.3), [C.27](/generated/patterns/C.27), and [C.28](/generated/patterns/C.28).
Nesting and scale rule. If a control-structure view nests without a local depth limit, the record uses scaleAuditRef? when the nesting affects latency, stability, observability, accountability, or assurance.
Worked slice A - LCA diagram used as proof. A safety note says: The Layered Control Architecture proves the plant is safe because the supervisor monitors the lower controller. A conforming repair keeps the control-structure view and names planner, controller, plant, and supervisor relations, observation and actuation boundaries, and any rate bands. Safety and assurance claims use [B.3](/generated/patterns/B.3), evidence to [A.10](/generated/patterns/A.10) or [G.6](/generated/patterns/G.6), temporal adequacy to [C.27](/generated/patterns/C.27), and dynamics or stability claims use [A.3.3](/generated/patterns/A.3.3) or the appropriate dynamics claim.
Worked slice B - multi-rate controller. A source says a control stack has a slow planner, a faster regulator, and an observer with a different update period. Apply [C.30.LCA](/generated/patterns/C.30.LCA) to the case only after the stack label has been recovered as control roles, relations, and rate bands; otherwise the label is recovered first by [C.30.STRAT](/generated/patterns/C.30.STRAT). C.30.LCA does not claim rate adequacy. If the rate relation matters for oscillation, latency, stability, or safety, the next admissible move is [C.27](/generated/patterns/C.27) plus the dynamics or assurance pattern named by value when that claim kind is being made.
Worked slice C - supervisor-subholon loop. A subsystem is supervised by an external controller that changes allowed modes. [C.30.LCA](/generated/patterns/C.30.LCA) records the supervisor-subholon relation and may reference [B.2.5](/generated/patterns/B.2.5). If the text claims that this loop authorizes work, passes a gate, or proves a policy constraint, the claim uses [A.15](/generated/patterns/A.15), [A.20](/generated/patterns/A.20), or [A.21](/generated/patterns/A.21).
Archetypal Grounding
Bias-Annotation
- Diagram authority bias. A neat feedback diagram can look more persuasive than the source relation, reliance relation, or claim pattern it actually uses. Repair by naming that relation named by value and the governing pattern that carries the claim kind being made.
- Stratification-label bias. A
layer,level,tier, orstacklabel can hide whether it names a control relation, rate band, aggregation, scale, organization, work scope or evidence scope, deployment, or publication section. Repair withC.30.STRAT; C.30.LCA applies only to the recovered control-specific case. - Supervisor anthropomorphism. A supervisor label can make an episteme, policy, or dashboard sound agentive. Repair by naming the acting transformer, method, or work practice.
- TGA and LCA conflation. A flow graph and a control view can inform each other, but neither replaces the other. Repair by naming the description context and structure kind for each view.
This checklist verifies the preceding guidance after the practitioner has chosen the selected move; it is not a required project control form and not a substitute for the card, note, view, relation, or repair move above.
Conformance Checklist
Common Anti-Patterns and How to Avoid Them
Consequences
The gain is a small, usable control-structure output that preserves common architecture language while blocking proof overread. Practitioners can still say controller, plant, supervisor, feedback, and control layer, but the record shows what those words carry; generic stratification labels use C.30.STRAT before they are allowed to enter this pattern.
The cost is an extra relation note before downstream reliance. When the claim being made is only recognition, that cost is small. When the claim being made is safety, stability, evidence, assurance, or gate passage, the cost is appropriate because those claims were never carried by the diagram alone.
Rationale
Control architecture is too important to leave to diagram authority and too useful to remove from architecture language. The FPF move is to keep the practice cue and recover the control-structure content first: controlled holon or architecture claim, control roles, control relations, recovered rate or control-layer labels, observation and actuation boundaries, externality boundaries, and the next admissible control-architecture move. The record may be a Description episteme or episteme-lane view, possibly admitted for specification use, but that is the record lane for the control-structure move, not the center of the pattern. It can cite C.30.STRAT, B.2.5, TGA, dynamics, C.27, C.28, evidence, assurance, gates, and C.29, but it does not absorb their claim kinds.
This also protects the architecture ontology's EntityOfConcern and Description-episteme boundary plus specification-use discipline. The architecture-relevant EntityOfConcern is the selected control structure under ArchitectureOf@Context; the LCA diagram or control note is an architecture description or view when description or view use is being made. Several descriptions may describe the same control structure, and one description may be published without becoming the structure it describes.
SoTA-Echoing
Relations
- Builds on
C.30for grounded architecture and selected-structure adequacy andC.30.ASVfor structural-view adequacy. - Uses
A.22for structure and structural-view kind discipline. - Coordinates with
C.30.STRATwhen layer, level, tier, stack, ladder, rung, block, expert, cache, router, gate, or similar source labels must be recovered before any control-specific use enters C.30.LCA. - Coordinates with
B.2.5for supervisor-subholon feedback-loop recognition. - Coordinates with
E.18andC.30.TGA-FLOW-RELwhen flow or transduction path slices supply structure input to the control view. - Applies
A.3.3for dynamics and stability claims,C.27for temporal and rate adequacy,C.28for causal-use claims,A.10orG.6for evidence claim,B.3for assurance,A.20orA.21for constraint validity and gate decisions,A.15for work authority, andC.29when LCA is used as a transferable mathematical lens.
Neighboring claims stay with their governing patterns: C.30.STRAT for stratification and source-label precision restoration, C.30 for grounded architecture and selected-structure adequacy, C.30.ASV for architecture structural-view adequacy, B.2.5 for supervisor-subholon feedback-loop discipline, E.18 for graph, path, and crossing discipline, A.3.3 for dynamics claims, C.27 for temporal and rate adequacy, C.28 for causal use, A.10 or G.6 for evidence, B.3 for assurance, A.20 or A.21 for gate and constraint-validity records, A.15 for work, and C.29 for mathematical-lens use. C.30.LCA governs only the control-structure view relation being claimed.
C.30.LCA:End
Cross-Scope Architecture Residual Triage
Type: Architectural subpattern under C.30 Status: Stable Normativity: Normative for FPF pattern, companion-text, and project-description use that claims architecture-specific residuals across declared scopes.
Problem frame
Use this pattern when a project situation contains a cross-scope architecture residual for a described holon, often described in project speech as:
The first useful move is CrossScopeArchitectureResidualTriage@Context: name the affected declared holon levels or declared scopes, the selected structure in which those levels or scopes are recoverable, residual-bearing locus, local repair already attempted, why local repair is insufficient, and the first admissible architecture move or governing-pattern application.
The primary EntityOfConcern is the cross-scope or interlevel architecture residual in the described holon or holon family under a bounded context. The described holon may be a system, episteme, method, organization, publication family, or another structured holon. A phrase in a description, a diagram label, or a mathematical-lens output may make the residual visible, but it is not the residual itself and does not become the center of this pattern.
InterlevelConflict@Context applies when two or more declared holon levels, declared scopes, or level-bearing structure relations of the same described holon or holon family impose incompatible or tensioned constraints, objectives, admissibility conditions, tempos, resource allocations, information paths, or assurance requirements. Examples include declared system levels, declared episteme levels, aggregation scopes, typed control layers, declared organizational scopes, work scopes, evidence scopes, system scopes, environment scopes, description-use scopes, publication-use scopes, or other declared scopes. A selected structure matters here only when it carries, separates, or relates the declared levels or scopes. A conflict between structures belongs in C.30.ILC only when those structures are assigned to different declared holon levels, declared scopes, scale windows, or coarse-graining steps; a same-level, same-scope, or unassigned conflict between structures belongs elsewhere until a level, scope, scale-window, or coarse-graining assignment is recovered.
FrustrationResidual applies when a persistent cross-scope or interlevel residual remains after local repairs have been attempted or deemed insufficient: local optimization in one declared holon level or declared scope improves local fit while degrading, blocking, or destabilizing another declared holon level, declared scope, or level-bearing structure relation.
ComplexityGrowthPressure is admitted only as conditional architecture pressure: reducing an interlevel residual may require adding, splitting, mediating, or stabilizing a declared holon level, declared scope, aggregation scope, interface grammar, control loop, evidence scope, work-method scope, abstraction scope, source-return scope, or declared system level when that special case is being claimed. It is not a claim that complexity is good or that complexity necessarily grows.
Entry condition: if declared holon levels or declared scopes, the selected structure or architecture structure kind that carries them, one residual-bearing locus, and one first admissible architecture move cannot be named for the described holon in context, keep the issue at ordinary problem framing or ProblemCard@Context; do not claim CrossScopeArchitectureResidualTriage@Context yet.
What goes wrong if C.30.ILC is missed: a local improvement, control layer, scale label, interface grammar, or evidence reuse is treated as whole-holon architecture adequacy while the residual moves into another declared holon level or declared scope.
What C.30.ILC buys in practice: the practitioner can keep useful conflict or frustration language as an entry label while governing the architecture residual itself: affected holon levels or scopes, the selected structure that carries them, residual-bearing locus, and one admissible architecture move or governing-pattern application.
Interlevel conflict and frustration may appear in ordinary project descriptions, but the conforming record governs the residual through declared holon levels or declared scopes, the selected structure that carries them, and a residual-bearing locus. The pattern does not create a generic level scale or U.Frustration. It asks which declared holon level, declared scope, aggregation scope, control layer, organizational scope, work scope, evidence scope, system scope, environment scope, scale window, interface grammar, allocation boundary, publication section, or source-return condition bears the residual. A system level or episteme level is a special case of a declared holon level.
Not this pattern when the issue under repair is only stakeholder negotiation, ethics, measurement, scale relation, coarse-graining relation, mathematical-lens validation, candidate generation, residual-reducing candidate-set work, final selection, causal outcome, evidence, or assurance. Use the governing pattern and keep C.30.ILC only to the architecture residual-bearing locus.
Problem
Architecture work often starts from a residual: a local fix works in one declared holon level or declared scope and fails in another. Component optimization increases whole-holon or product-line integration cost. A new module boundary reduces local complexity and increases exceptions at the product-line scope. A control layer improves local safety and creates accountability or latency claims elsewhere. A reusable evidence set reduces repeated work and hides a new source-return obligation.
The useful architecture intuition is narrower than a new Frustration kind: local optimization at one declared holon level or declared scope can create a persistent residual in another declared holon level, declared scope, or level-bearing structure relation. Depending on the claim being made, that residual is governed by C.29 only when a recoverable multilevel mapping, scale mapping, or coarse-graining mapping is being claimed; by C.31.ASAP when architecture scale preference over declared alternatives is being claimed; or by G.5 when residual-reducing candidate architecture moves form a candidate set being used. An ordinary conflict between structures is not enough for the RG lens or frustration mathematical lens, but a conflict between structures assigned to different declared holon levels or scale windows may be enough when the mapping, preserved-structure line, and lost-structure line are recoverable. The first C.30.ILC output is only the grounded triage record.
Without a pattern, teams either discuss the residual as vague complexity, treat it as ordinary stakeholder conflict, jump into measurement, use mathematical frustration language as proof, or jump to candidate generation too early. C.30.ILC keeps the first move small: identify whether the residual is architecture-shaping and name the first admissible architecture move or governing-pattern application.
The practical work is often not to draw another view. It is to assign the residual to the locus named by value that can bear it: declared holon level, declared scope, level-bearing selected structure, structure kind, constraint, characteristic or Q-bundle, evidence-reuse boundary, source-return condition, or non-architecture claim kind.
Forces
- Local optimization can be real and still be harmful at another declared holon level or declared scope.
Level,layer,scope,scale,abstraction,organization,system, andenvironmentlabels can sound precise while naming different project-side entities, relations, scopes, or claim kinds.- Frustration language can be useful because it points to incompatible constraints or fitness contributions, but it can also smuggle a physics, biology, psychology, or global-optimizer ontology into architecture prose.
- Measurement is tempting because the residual feels numeric, but a measure before declared-scope and structure-kind recovery can hide the real conflict.
- Ethics and stakeholder mediation may be present, but not every cross-scope residual is a mediation problem.
- Architecture synthesis may be needed, but a small triage output often identifies a narrower move: split scope, add mediator, add interface grammar, change allocation, expose coupling, add evidence scope, accept bounded exception, or return to source.
- The pattern is not a prescribed sequence of moves; architecture work is often case-managed through loops, checks, and dead ends.
Solution
Create a CrossScopeArchitectureResidualTriage@Context record when an architecture concern is carried by residuals across declared holon levels, declared scopes, or level-bearing structure relations.
Layer, level, tier, stack, and declared-scope labels. Declared holon level is the general level-bearing recovery field for this pattern; system level and episteme level are special cases when the described holon or selected structure makes them relevant to the claim. System level may remain as ordinary recognition language when a practitioner would naturally use it, but the record recovers the project-side scope references through declaredHolonLevelRefs or declaredScopeRefs; a system level is not the default architecture level. When the source says layer, level, tier, or stack, recover exactly one or more of: declaredHolonLevelRef, controlLayerRef, declaredSystemLevelRef, aggregationScopeRef, rateBandRef, organizationLevelRef, workEvidenceScopeRef, scaleWindowRef, or publicationSectionRef when the wording only names a document layer. A move such as splitDeclaredHolonLevel, splitDeclaredScope, or, in the special system-level case, splitDeclaredSystemLevel is admissible only when the affected declared holon level, declared scope, selected structure, declared system level, aggregation scope, control layer, organization scope, work scope, evidence scope, system scope, environment scope, rate band, scale window, publication section, or source-return condition is named. A layer label is not a structure kind, not a system level, not a rate band, and not evidence of separation by itself.
Interlevel conflict, frustration residual, and complexity-growth recovery. A conflict is architecture-shaping only when the record names the declared holon levels or declared scopes, the selected structure or structure kind that carries them, and the conflict carrier: constraint, objective, admissibility condition, tempo, resource allocation, information path, or assurance requirement. A frustration residual is architecture-shaping only when local repair or local optimization leaves a persistent residual in another declared holon level, declared scope, or level-bearing structure relation. Complexity-growth pressure is only a candidate reason to add, split, mediate, or stabilize structure when that change is expected to reduce the residual enough to justify the new cost and its own residue.
crossScopeResidualDescription is not enough by itself. A residual becomes architecture-shaping only when its residual-bearing locus is declared: hidden coupling, interface exception, control-rate conflict, scale-window loss, evidence-reuse failure, regulatory bespoke residue, work-method exception, data-semantics drift, placement or jurisdiction conflict, security trust-boundary break, or another declared locus.
Multilevel optimization boundary. [C.30.ILC](/generated/patterns/C.30.ILC) can recognize that local optimization in one declared holon level or declared scope degrades another declared holon level or declared scope. It does not optimize the architecture and does not prove that one global function exists. Use [C.29](/generated/patterns/C.29) with MLU.Description@MultilevelLearningFrustration only when the mathematical representation supplies a recoverable mapping between declared levels, scopes, scale windows, or coarse-graining steps and states what structure is preserved and lost. Conflicting structures can enter this lens only when each structure is assigned to a declared holon level, scope, scale window, or coarse-graining step and the mapping shows why the conflict is interlevel. If scale window, RG relation, coarse-graining relation, preserved structure, lost structure, or conflict residual slope becomes an architecture scale-preference claim, use [C.31.ASAP](/generated/patterns/C.31.ASAP) and keep any mathematical-lens claim in [C.29](/generated/patterns/C.29). If the practitioner needs to generate, compare, or publish residual-reducing candidate architecture moves, use [G.5](/generated/patterns/G.5) for the candidate set and [C.11](/generated/patterns/C.11) when a final local choice is being made; [C.30.ILC](/generated/patterns/C.30.ILC) stops at the residual and first admissible move. If the case is only a conflict between two selected structures with no declared multilevel mapping or scale mapping, keep it in [C.30](/generated/patterns/C.30), [C.30.ASV](/generated/patterns/C.30.ASV), [D.3](/generated/patterns/D.3), [D.4](/generated/patterns/D.4), [C.28](/generated/patterns/C.28), evidence, assurance, or decision patterns as applicable.
Anti-collapse rule: no generic frustration score, no risk-matrix residual, no stakeholder-mediation takeover, no physics or biology ontology transfer, no global-optimizer proof, no causal proof, and no assurance proof. A frustration or risk label does not govern the case until declared holon levels or declared scopes, the selected structure or structure kind that carries them, residual-bearing locus, and first architecture move are recoverable; stakeholder mediation applies [D.3](/generated/patterns/D.3) or [D.4](/generated/patterns/D.4) only when values, ethical conflict, or negotiation is being claimed.
Stop condition. Stop after CrossScopeArchitectureResidualTriage@Context when it names the residual and the first admissible architecture move. It does not measure scale preference, generate candidate architectures, mediate stakeholder conflict, or select a decision. Apply a governing pattern only when a claim kind being made exists:
D.3 and D.4 boundary. [D.3](/generated/patterns/D.3) and [D.4](/generated/patterns/D.4) handle conflict topology, values, stakeholder mediation, and ethical negotiation. [C.30.ILC](/generated/patterns/C.30.ILC) handles architecture-specific recognition: whether the conflict is borne by declared holon levels or declared scopes inside a selected structure: structural views, allocation, interfaces, control rates, work reuse, evidence reuse, scale windows, or coarse-graining loss. It is a triage and architecture-move pattern, not a negotiation pattern.
Architecture-move examples.
Worked slice A - clean module layout, bad flow. A product team redraws modules so each component has an explicit responsibility relation or enactor relation, but order-to-cash flow now crosses more work transfers and exceptions rise. [C.30.ILC](/generated/patterns/C.30.ILC) names the module structure, flow structure or transduction structure, affected work scope, cross-scope residual, and first move: expose hidden coupling or apply C.30.TGA-FLOW-REL. It does not turn the exception count into a modularity measure until [C.16](/generated/patterns/C.16) or the characteristic pattern governing the characteristic under evaluation is applied.
Worked slice B - AI agent control conflict. A local agent optimizes its local objective and violates a supervisor's allowed-mode constraint. [C.30.ILC](/generated/patterns/C.30.ILC) names the agent scope, supervisor scope or control scope, control relation, local optimization claim, residual-bearing locus, and local repair attempted. The first move may be add control layer, change allocation, or apply [C.30.LCA](/generated/patterns/C.30.LCA). Safety, causality, and gate claims use their governing patterns.
Worked slice C - evidence scope residue. A reusable certification evidence set removes repeated evidence work for several product variants, but one variant has a hidden environment difference. [C.30.ILC](/generated/patterns/C.30.ILC) names the work scope or evidence scope and source-return condition. It applies [A.10](/generated/patterns/A.10) or [G.6](/generated/patterns/G.6) when an evidence-validity claim is being made.
Worked slice D - frustration residual before synthesis. Several decompositions reduce local module work but each creates a different integration, control-rate, or evidence-reuse residual in another declared scope. [C.30.ILC](/generated/patterns/C.30.ILC) records the residuals and first architecture moves. If the team needs a residual-reducing candidate palette, [C.30.ILC](/generated/patterns/C.30.ILC) stops and applies [G.5](/generated/patterns/G.5) to the candidate set. If the team claims a multilevel-learning lens or frustration lens, [C.29](/generated/patterns/C.29) carries the lens-use fields and stop condition only after the level mapping, scope mapping, scale-window mapping, or coarse-graining mapping and preserved structure and lost structure are recoverable.
Archetypal Grounding
Bias-Annotation
- Local-success bias. A local improvement is treated as whole-architecture improvement. Repair by naming the wider declared holon level or declared scope and the residual.
- Pseudo-level bias.
Level,layer, orscopesounds precise but no declared holon level or declared scope exists. Repair throughdeclaredHolonLevelRefsordeclaredScopeRefs. - Generic-structure-conflict bias. A conflict between selected structures is treated as interlevel conflict even though no declared holon level, scale window, or coarse-graining relation is recoverable. Repair by keeping the case in
C.30,C.30.ASV, or the governing pattern unless the structures are assigned to different declared holon levels or scale windows. - Frustration-ontology bias. A useful conflict or frustration entry label becomes a new first-order architecture kind, physics ontology, biology ontology, or psychology claim. Repair by recovering declared holon levels or declared scopes, the level-bearing structure, conflict carriers, residual-bearing locus, and the governing pattern for any lens, proof, evidence, mediation, or synthesis claim.
- Global-optimizer bias. Local optimization in one declared holon level or declared scope is used as if the architecture literally optimizes one global function. Repair by keeping the local optimization claim as a triage input unless
C.29supplies an admissible mathematical-lens use with recoverable level mapping or scale mapping and the candidate-set or decision pattern carries any synthesis or selection claim. - Measurement-first bias. A residual is measured before its level-bearing structure and scope grounding are declared. Repair by applying
C.16or the characteristic pattern governing the characteristic under evaluation only after triage names the affected characteristic or measurement relation. - Mediation-default bias. Every conflict is treated as stakeholder conflict. Repair by checking whether the use under repair is architecture structure, allocation, interface grammar, control, work or evidence scope, source-return, or another declared level-bearing architecture relation.
- Synthesis-jump bias. A local residual immediately triggers candidate generation. Repair by identifying the first admissible architecture move before applying
G.5to a residual-reducing candidate set.
This checklist verifies the preceding guidance after the practitioner has chosen the selected move; it is not a required project control form and not a substitute for the card, note, view, relation, or repair move above.
Conformance Checklist
Common Anti-Patterns and How to Avoid Them
Consequences
The gain is an early architecture move that is small and precise. The practitioner can preserve useful problem language such as conflict, frustration, level, layer, or local optimization while recovering the FPF fields that keep the claim reviewable.
The cost is that C.30.ILC refuses to solve the whole problem. It identifies the first architecture move or governing-pattern application. Measurement, scale relation, RG relation, coarse-graining relation, mathematical lens use, stakeholder mediation, candidate generation, evidence, assurance, and final choice remain outside until those claims are being made.
This makes multilevel optimization usable rather than decorative. C.30.ILC identifies the residual that makes optimization relevant; C.29 carries an admissible mathematical-lens use only when level mapping or scale mapping and preserved structure and lost structure are recoverable; G.5 carries residual-reducing candidate sets; and the decision pattern carries any final selected architecture.
Rationale
Interlevel conflict and frustration are useful Plain entry labels because they point to a recurrent architecture failure: local repair in one declared holon level or declared scope leaves a residual in another. They are dangerous as generic labels because they can hide which level, scope, level-bearing structure, relation, conflict carrier, or source-return condition bears the residual.
A local optimum or successful local repair is therefore not treated as whole-architecture adequacy. It becomes architecture-relevant only when the residual-bearing locus is recoverable and the next move can be named.
C.30.ILC keeps the entry label but recovers the architecture relation or structure claim. It treats conflict or frustration as architecture-shaping only when declared holon levels or declared scopes, the level-bearing structure, conflict carriers, and residual-bearing loci are named. This lets FPF preserve the practical intuition without introducing a second ontology of levels, a hidden measurement pattern, a physics or biology transfer, a global optimizer proof, or a prescribed architecture work order.
SoTA-Echoing
Relations
- Builds on
C.30andC.30.ASVfor grounded architecture, selected-structure, and structural-view adequacy. - Uses
A.22for structure and structural-view discipline. - Coordinates with
C.30.TGA-FLOW-REL,C.30.LCA,A.6.F, andA.6.Mwhen the residual concerns flow, control, function, allocation, module, or interface structure. - Applies
C.16or the characteristic pattern that governs the characteristic under evaluation for measurement or characteristic claims. - Applies
C.29withMLU.Description@MultilevelLearningFrustrationonly when multilevel learning or frustration is used as a mathematical lens with recoverable level mapping or scale mapping and preserved structure and lost structure; appliesC.31.ASAPfor architecture scale-preference claims andC.29for mathematical-lens claims when scale, RG, coarse-graining, preserved structure, lost structure, or scale-window adequacy is being claimed. - Applies
G.5for candidate generation and residual-reducing candidate architecture moves. - Applies
C.11for final local choice,C.28for causal outcome claims,A.10,B.3, orG.6for evidence or assurance, andD.3orD.4for ethical or stakeholder mediation.
Neighboring claims stay with their governing patterns: C.30 for grounded architecture and selected-structure adequacy, C.30.ASV for structural-view adequacy, A.22 for structure and structural-view discipline, C.30.TGA-FLOW-REL for architecture-TGA flow relation, C.30.LCA for control-structure view relation, A.6.F for function-use repair, A.6.M for module-interface repair, C.16 or the local characteristic pattern for the characteristic under evaluation, C.29 for mathematical-lens use, C.31.ASAP for architecture scale-preference, G.5 for candidate-set generation, C.11 for final local choice, C.28 for causal use, A.10, B.3, or G.6 for evidence or assurance, and D.3 or D.4 for ethical or stakeholder mediation. C.30.ILC governs only cross-scope architecture residual triage.
C.30.ILC:End
C.30.TGA-FLOW-REL - Architecture-TGA Flow-Structure Relation
Type: Architectural pattern Status: Stable Normativity: Normative unless explicitly marked informative
C.30.TGA-FLOW-REL:1 - Problem frame
Use this pattern when an architecture discussion depends on a Transduction Graph Architecture (TGA) graph, path, path slice, crossing, flow valuation, edition pin, plane pin, context pin, or no-hidden-scalarization claim.
The first useful move is small. ArchitectureFlowStructureRelation@TGA is a C.30-side relation record for a relation being used between ArchitectureOf@Context, selected architecture-relevant structure, architecture structural view, or conditional ArchitectureDescription@Context use and the E.18 graph, path, crossing, or flow-valuation relation being used for flow or transduction structure. It names the architecture locus, selected structure or view reference when used in the relation, conditional description reference when durable description use is being made, the E.18 object, correspondence or source-return condition when used in the relation, and the admissible architecture use.
Ordinary minimum: name at least one architecture-side reference (architectureClaimRef, selectedArchitectureStructureRefs, architectureStructuralViewRef, or architectureDescriptionRef when durable description use is being made), at least one E.18 object reference (transductionGraphRef, selectedPathOrSliceRefs, crossingBundleRefs, or flowValuationRefs), the architecture-flow FlowTransductionStructure, one blocked overread, and stop or governing-pattern application. Use functional-structure, flow-structure, crossing, flow-valuation, correspondence, and source-return fields only when they change the next architecture move. All other fields are conditional and may be not used.
Use this relation only when a grounded architecture claim, selected architecture-relevant structure, architecture structural view, functional-architecture view, flow-structure claim, or conditional architecture-description use depends on an E.18 graph, path, crossing, or valuation relation. Stop when the architecture-flow relation and non-admissible uses are clear. If another claim is being made, that claim is governed by its governing pattern and this relation remains only the architecture-flow relation.
What goes wrong if this pattern is missed: a TGA graph becomes functional architecture, whole architecture ontology, performed-work occurrence, work-result record, proof, or project decision by appearance.
What this buys in practice: the practitioner can use E.18 for flow or transduction structure while C.30 remains the grounded architecture and selected-structure adequacy locus and C.30.ASV remains the architecture-structural-view locus.
Not this pattern when the question under repair is a graph, path, crossing, or flow valuation without a relation being used for grounded architecture adequacy, conditional architecture-description use, or an architecture structural view. Use E.18 directly. If the question under repair is an architecture claim or durable architecture description without an E.TGA graph claim, path claim, or crossing claim kind, use C.30. If it is a functional view without flow relation or TGA claim kind, use C.30.ASV and A.6.F. If another claim being made is present, use the governing pattern and keep C.30.TGA-FLOW-REL only to the architecture-flow relation.
C.30.TGA-FLOW-REL:2 - Problem
Grounded architecture claims, selected architecture-relevant structures, architecture structural views, and conditional architecture descriptions often need E.18 objects when they discuss flow or transduction structure, functional dependencies, data movement, control paths, evidence flows, neural-network dataflow, or code-agent relation graphs.
C.30.TGA-FLOW-REL prevents that collapse by requiring the selected architecture-side reference, such as ArchitectureOf@Context, structure ref, structural view, or conditional description use, before any E.18-governed graph, path, or crossing object gets architecture use.
C.30.TGA-FLOW-REL:3 - Forces
C.30.TGA-FLOW-REL:4 - Solution
C.30.TGA-FLOW-REL is the C.30 entry relation to E.18 when a grounded architecture claim, selected architecture-relevant structure, architecture structural view, or conditional architecture description uses E.TGA graph, path, crossing, or flow-valuation objects as a flow or transduction structure relation.
It supplies only the architecture-flow relation:
At least one architecture-side field and at least one E.18 object field must be named by value. Optional fields stay not used unless they change inspection, correspondence, source return, governing-pattern application, or stop.
C.30.TGA-FLOW-REL:4.1 - Use trigger
Use this pattern only when a ArchitectureOf@Context claim being made, selected architecture-relevant structure, architecture structural view, functional-structure view, flow-structure claim, or conditional ArchitectureDescription@Context use depends on one or more E.18 objects:
TransductionGraphRef;PathIdorPathSliceId;CrossingBundleRef;U.Transferflow valuation;- edition, plane, or context pin;
- no-hidden-scalarization or set-return discipline;
- correspondence between functional structure and flow or transduction structure;
- generated or extracted relation graph used as architecture-flow reliance.
If the sentence only says that work occurred, use A.15 or the governing work pattern. If the sentence only says that a graph exists, use E.18. If the sentence uses the graph as mathematical-lens reliance, use C.29.
C.30.TGA-FLOW-REL:4.2 - Relation to functional structure
FunctionalStructureView@Context under C.30.ASV may cite ArchitectureFlowStructureRelation@TGA when a flow relation is being used. That relation does not make the TGA graph a functional element. It says that a functional structure view corresponds to or is declared relative to one E.18 graph, path, or crossing relation.
Use this note when the practitioner needs to see whether the function-flow relation changes inspection, split, relation-making, downgrade, claim named by value-governance assignment, candidate generation, or stop.
C.30.TGA-FLOW-REL:4.3 - Claim-kind applications named by value
This table is the single boundary for generic non-flow claims. Elsewhere in this pattern, keep only local false positives that the TGA relation itself makes tempting: graph-as-architecture, graph-as-functional-architecture, flow-as-work-log, crossing-as-gate, valuation-as-score, generated relation-graph proof, and prompt-data-tool flow as authority proof.
C.30.TGA-FLOW-REL:4.4 - E.18:5.12 boundary statement
For an E.TGA-governed flow or transduction structure kind used by ArchitectureOf@Context, selected architecture-relevant structure, architecture structural view, or conditional ArchitectureDescription@Context, an architecture-flow relation may cite an E.TGA transduction graph over the described holon plus MVPK faces and correspondences.
Grounded architecture adequacy and conditional architecture-description use are governed by C.30. E.18 supplies the flow or transduction structure objects and relations; it does not define all architecture structure kinds.
This is the E.18:5.12 boundary statement. It is not a TGA rewrite and not a second E.TGA source of truth.
C.30.TGA-FLOW-REL:4.5 - Worked slices
Functional architecture with a flow relation being claimed. A team says, "The functional architecture is this TGA graph." The repair is:
Filled relation record:
Near miss: if the graph has no C.30-side architecture reference named by value, the case stays in [E.18](/generated/patterns/E.18). If the same sentence is a work log, evidence claim, gate decision, or benchmark result, that non-flow claim is governed by its governing pattern and this relation keeps only the architecture-flow relation.
Neural-network dataflow change. Source labels such as attention block, SSM block, convolution block, memory mechanism, cache mechanism, and MoE expert-selection go through [C.30.STRAT](/generated/patterns/C.30.STRAT) unless the changed item is already recovered. C.30.TGA-FLOW-REL applies only when the changed structure kind and flow or transduction relation are named. A benchmark, ablation, or pruning result may bear on an non-architecture claim named by value, but it does not make the flow relation an architecture decision or evidence sufficiency by itself.
Code-agent relation graph. A code-agent relation graph with IMPORTS, CALLS_API, REGISTRY_WIRES, or DATA_FLOWS_TO edges can be used for an architecture-flow relation only with source edition, a source observation class selected from {observed, inferred, unknown}, typed relation semantics, unexplored regions, and source-return condition when subsequent action relies on hidden distinctions.
C.30.TGA-FLOW-REL:4.6 - Lowering and currentness conditions
Lower, narrow, or reopen the relation at the smallest changed locus when:
- E.18 graph, path, crossing, or flow-valuation semantics change;
- edition, plane, context pin, set-return, or no-hidden-scalarization discipline changes;
- source graph edition, path slice, source observation class, source pin, unexplored region, or source-return condition changes;
- the C.30 architecture locus, selected architecture-relevant structure, architecture structural view, conditional architecture description, or C.30.ASV relation changes;
- functional-flow correspondence changes;
- a non-flow claim is being made and is governed by
C.30.TGA-FLOW-REL:4.3rather than by this relation; - C.29, C.16, C.28, A.10, G.6, B.3, A.20, A.21, A.15, C.30, C.30.ASV, A.6.F, C.30.STRAT, or E.18 changes the governing boundary used by the relation.
Admissible repair results are: update the affected reference, add or change correspondence, add or change source-return condition, narrow admissible use, keep the graph claim inside E.18, apply the governing pattern to a non-flow claim, lower to quote-only or reduced-use cue, or block the architecture-flow use.
C.30.TGA-FLOW-REL:5 - Archetypal Grounding
C.30.TGA-FLOW-REL:6 - Bias-Annotation
Lenses tested: Arch, Onto, Epist, Prag, Did, Gov. Scope: architecture-flow relations using E.18 objects.
This checklist verifies the preceding guidance after the practitioner has chosen the selected move; it is not a required project control form and not a substitute for the card, note, relation, or repair move above.
C.30.TGA-FLOW-REL:7 - Conformance Checklist
C.30.TGA-FLOW-REL:8 - Common Anti-Patterns and How to Avoid Them
C.30.TGA-FLOW-REL:9 - Consequences
C.30.TGA-FLOW-REL:10 - Rationale
E.TGA is already the governing FPF pattern for transduction graphs, paths, crossings, flow valuations, and related pins. Architecture needs to use that work without letting it become generic architecture ontology. The smallest stable relation is therefore a C.30-side record that points to E.18 objects and states admissible and non-admissible architecture use.
This pattern also protects functional architecture. A functional structure view may correspond to flow or transduction structure, but function and flow are different structure kinds. The relation is useful precisely because it preserves that difference while allowing correspondence.
C.30.TGA-FLOW-REL:11 - SoTA-Echoing
Currentness front. The governing currentness sources are E.18 object semantics and pins, C.30 and C.30.ASV architecture-side relation law, the source observation class, and the non-flow governing patterns named in C.30.TGA-FLOW-REL:4.3. When one changes, the relation changes only at the affected reference, correspondence, source-return condition, admissible-use boundary, or governing-pattern assignment.
C.30.TGA-FLOW-REL:12 - Relations
Builds on: C.30, C.30.ASV, A.22, A.6.F, E.18, E.17, E.17.0, A.7, E.10, C.2.P, and F.18.
Coordinates with: C.30.STRAT, A.15, A.20, A.21, A.10, G.6, B.3, C.28, C.29, C.16, admitted measurement, selection, or candidate-set governing patterns when those claims are being made, InterfaceSignatureBoundaryNote, and the module-and-interface repair pattern when a module or interface claim is being made.
Neighboring claims stay with their governing patterns: C.30.STRAT for stratification wording and source-label repair, E.18 for graph, path, crossing, and flow-valuation discipline, C.30 for grounded architecture and selected-structure adequacy, C.30.ASV for architecture structural-view adequacy, A.6.F for function-use repair, and the non-flow governing patterns named in C.30.TGA-FLOW-REL:4.3. C.30.TGA-FLOW-REL governs only the architecture-TGA flow-structure relation being claimed.
C.30.TGA-FLOW-REL:End
Modularity and Reusable Structure Characteristics
Type: Characterization pattern Status: Stable Normativity: Normative unless explicitly marked informative
Problem frame
Use this pattern when modularity or reusable-structure language is doing work in an architecture discussion and the practitioner needs to know which few characteristics matter, what repair follows, and whether any measurement or comparison is admissible.
The first useful move is deliberately small:
Start with recognition, at most three characteristics under evaluation, the observed problem, and a repair direction. A report-only proxy is an admissible stop when no beyond-local-repair use is being made.
Claim-use boundary: comparison, publication, evidence, assurance, gate, decision, benchmark, causal-use, cross-case reuse, selection, procurement, and architecture scale-preference are beyond-local-repair uses in C.31. Add their fields only when that use is being made and recoverable by value and the governing pattern can be named.
What goes wrong if C.31 is missed: "modular" becomes a binary label; a single modularity score hides incompatible characteristics; interface publication is confused with substitutability; internal cohesion is improved while evidence reuse gets worse; bespoke residue moves from templates into work or assurance; and complexity language becomes a commensurable score without a declared characteristic, scale, measurement basis, comparison basis, or admissible-use boundary.
What C.31 buys in practice: the practitioner can see which modularity characteristic changes the next move, which false use is blocked, which repair is plausible, and which governing pattern governs measurement, evidence, causal, scale, selection, or accounting claims.
Not this pattern when the question under repair is only source-label recovery, module-interface relation repair, reusable-structure accounting, general measurement legality, quality-family claim, architecture scale-preference claim, mathematical-lens use, candidate architecture synthesis, or selection. Use [C.30.STRAT](/generated/patterns/C.30.STRAT), [A.6.M](/generated/patterns/A.6.M), [C.31.RSA](/generated/patterns/C.31.RSA), [C.16](/generated/patterns/C.16), [C.25](/generated/patterns/C.25), [C.31.ASAP](/generated/patterns/C.31.ASAP), [C.29](/generated/patterns/C.29), [G.5](/generated/patterns/G.5), or [C.11](/generated/patterns/C.11) as appropriate; do not treat C.31 as the synthesis or selector pattern.
Problem
Architecture work often asks for more modularity, better reuse, lower coupling, more explicit interfaces, cleaner allocation, or less bespoke residue. These phrases point to real engineering work, but they do not name one scalar property.
Modularity can improve along one characteristic while worsening another. A design can reduce external coupling and increase interface alphabet size. A platform can standardize interfaces and create unhelpful rigidity. Evidence reuse can improve while functional-to-module allocation remains tangled. A report can show a high reuse share while hiding source-return work or residual uncertainty.
C.31 turns modularity talk into a small characteristic vector plus repair direction. It does not promise that every characteristic is measurable now, comparable across cases, causal, admissible for decision use, or evidence-backed.
Forces
Solution
C.31 governs modularity and reusable-structure characteristics as C.16-compatible characteristic heads, composite descriptions, lens-backed characteristic interpretations, temporal or scale-sensitive characteristic interpretations, causal-use-sensitive characteristic interpretations, or report-only proxies. It starts from action guidance and adds fields for beyond-local-repair use only when a use being made requires them.
Ordinary output: ModularityVectorLite
ModularityVectorLite is the ordinary output. It names at most three characteristics under evaluation because the first task is to find the next repair, not to audit all possible modularity interpretations.
The vector is complete enough when it states what can be done next and what cannot be inferred. If a characteristic is used beyond local repair, use the appropriate card and governing pattern; architecture scale-preference claims are governed by [C.31.ASAP](/generated/patterns/C.31.ASAP).
Filled ModularityVectorLite
Near miss: a high interface-standardization count alone is not a C.31 improvement. If field-service work, source-return events, or variant-specific evidence increase, the vector records that proxy divergence and returns to repair rather than treating the count as architecture quality.
Characteristic classes
Every C.31 head is classified before use:
In C.31, declared basis and comparability basis name C.16-compatible measurement or comparison fields. They are not generic reason words and are not substitutes for evidence, assurance, cause, source, decision, or architecture-description relations.
Measurement-head mapping
When a head becomes decision-facing or publication-facing, create MeasurementHeadMapping before relying on it:
This mapping is not a measurement template by itself. It prepares a C.16-compatible characteristic card or a report-only boundary. When the head is decision-facing or publication-facing, the mapping names required evidence plus at least one evidence path or source relation. If no evidence claim is being made, evidenceClaimAbsentBecause states why the head remains local, report-only, or repair-only.
C.31 characteristic card
Use the full card only when the use goes beyond local repair:
Each card states its own C.16 well-formedness fields: characteristic, scale, unit or unitless interpretation, declared measurement basis, comparability basis, evidence path or evidence-claim-absent reason, non-admissible use, and repair move. When source material is used as evidence, the source relation is named. A source checklist, source-discharge slice, dashboard label, or inherited score is not enough.
Seed characteristic heads and repair moves
These heads are seeds, not an exhaustive taxonomy. Use only the heads that change the next move.
Claim-scoped residual heads
C.31 uses residual heads only as qualitative repair cues. These heads do not create one complexity characteristic.
Proxy-risk discipline
Every decision-facing C.31 card includes ProxyRisk and AuditQuestion. If the proxy diverges from the value it was meant to represent, the card stops at report-only use or returns to repair.
Rejected shortcut
The expression ModularityScore = average(all measures) is not admissible as a C.31 result. A local score is admissible only when the scoring method, codomain, polarity, characteristic basis, comparability basis, and use boundary are disclosed through the governing scoring or comparator pattern. Without that, keep the result as report-only or return to ModularityVectorLite.
Lowering and currentness conditions
Lower or reopen a ModularityVectorLite, ModularityCharacteristicCard, or report-only proxy when any of these conditions changes the characteristic use:
- proxy audit worsens, such as more integration failures, workarounds, source-return events, stale evidence reuse, or bounded exceptions;
- measurement basis, comparability basis, scoring method, codomain, polarity, unit policy, or declared characteristic basis changes;
- evidence path, source relation, evidence-claim-absent reason, or source-return condition changes;
- described holon, bounded context, architecture claim, structure kind, characteristic head, or repair direction changes;
- a report-only proxy is used for comparison, selection, publication, assurance, benchmark, causal-use, cross-case reuse, decision, procurement, or architecture scale-preference;
C.31.RSA,C.31.ASAP,C.16,C.25,C.29,C.30.STRAT,A.6.M,C.30,C.30.ASV,A.10,B.3,A.20,A.21,G.5, orC.11changes the boundary for the neighboring claim being made.
Admissible repair results are: keep the result report-only, split or rename the characteristic head, update basis or evidence fields, revise the repair direction, change relatedClaimGovernanceIfClaimed, lower a score to a local proxy, or stop C.31 use for the beyond-local-repair claim and use the governing pattern.
Archetypal Grounding
Tell. Modularity is a vector of action-guiding characteristics, not a magic scalar. A good C.31 interpretation says what to repair next.
Show. A product architecture can have high interface standardization and still poor substitutability. A software-system architecture can reduce external coupling while increasing hidden data custody. A safety-case architecture can reuse evidence while increasing regulatory bespoke residue. Each case needs a different characteristic and a different repair.
Show. A DSM or dependency graph can substantiate a modularity interpretation, but the graph does not by itself say which dependency kind matters, what scale applies, whether the interpretation is comparable, or what action follows.
Holon and episteme: architecture and modules are selected structures of described holons; the described holon may be a system, episteme, method, organization, publication family, or another structured holon. C.31 heads, cards, vectors, and report-only proxies are characteristic records, declared-measurement-basis records, comparability-basis records, or report-only records about those structures.
Bias-Annotation
Conformance Checklist
Common Anti-Patterns and How to Avoid Them
Consequences
Benefits:
- Modularity becomes action-guiding without becoming one fake score.
- Cheap repair remains possible before measurement.
- Characteristic, declared-measurement-basis, comparability-basis, proxy-risk, and governing-pattern boundaries are visible.
- DSM, MOSA, platform, product-line, and architecture-operation sources can inform practice without importing their ontology wholesale.
Costs:
- Familiar score language often has to be downgraded to report-only use.
- Cross-case comparison requires additional C.16, C.25, G.2, comparator, evidence, or decision claim.
- Some attractive "complexity" statements are assigned to characteristic named by value, lens, or residual cue rather than becoming a general complexity pattern here.
Rationale
C.31 is a characterization pattern because modularity and reusable-structure talk changes engineering action through characteristics: coupling, cohesion, interface variation, substitutability, reuse, evidence reuse, hidden coupling, source-return cost, and residual growth. Those heads are useful only when their subject, scale, declared measurement or comparison basis, false use, and repair move are visible.
The pattern puts ModularityVectorLite first to preserve affordability. Many practitioners need to see one relation to repair, one interface grammar to tighten, or one residue to account for. Requiring the full measurement apparatus too early would turn C.31 into a control form and would violate the architecture source invariant: repair succeeds only when one useful admissible action remains.
The pattern rejects a single complexity or modularity score because selected heads are not automatically commensurable. When a local score is genuinely useful, it belongs under disclosed scoring, comparator, characteristic, declared-measurement-basis, and governing-pattern discipline.
SoTA-Echoing
Source-currentness front. Use the table's Currentness or lineage use cell as the source-use boundary. A lineage row can explain why a characteristic family matters, but it cannot establish current comparison, procurement, assurance, benchmark, decision, publication, or other beyond-local-repair use without a current source relation under G.2 or the governing pattern for that use. Refresh the source use when MOSA or acquisition guidance changes, platform or product-line practice changes, DSM or modularity-index practice changes, queueing or coordination-overhead assumptions change, proxy-pressure law is used for a new claimed value relation, or architecture-operation language is used as current practice rather than as source-side recognition language. When refresh changes the source role, update the affected characteristic head, proxy-risk field, audit question, related claim governance, or report-only boundary rather than treating the older source as current by default.
Rows named current, such as MOSA guidance, current platform practice, current scalable-workload extensions, or current architecture-operation corpus material, require source refresh before beyond-local-repair use when the named practice changes. Rows named lineage stay lineage unless a current source relation is explicitly recovered.
Older or local sources may serve as lineage or worked examples only when the row says so. They do not stand in for current competitive source, and they do not make a modularity value admissible for beyond-local-repair use without the governing pattern for that use.
Relations
C.31:End
Reusable Structure Accounting
Type: Characterization pattern Status: Stable Normativity: Normative unless explicitly marked informative
Problem frame
Use this pattern when a practitioner needs to locate where reusable structure lives, where bespoke residue grows, which accounting basis is being used, what can be refactored, and what remains a bounded exception or source-return condition. A report-only share stays report-only unless the relevant outside-RSA use is governed by its governing pattern.
Claim-use boundary: comparison, publication, evidence validity, assurance or safety-case reliance, gate use, architecture scale preference, causal-use, selected-set publication, candidate-synthesis, and local decision are outside-RSA uses. C.31.RSA may state the reusable locus, bespoke residue, accounting basis, report-only share, repair direction, and source-return condition. Add those other claims only under their governing patterns when those claims are being made.
The first useful move is ReusableStructureTriage:
Use the fuller accounting description only when an accounting basis and structure references are declared. Ordinary use stops when the practitioner knows where reusable structure lives, where bespoke residue grows, what can be refactored, and what remains a bounded exception.
What goes wrong if C.31.RSA is missed: a reusable share is treated as a proof of modularity; one-off work is hidden under a reuse label; evidence reuse is counted without validity context; hidden residual uncertainty is averaged with reusable templates; and "more reusable structure" is treated as always better.
What C.31.RSA buys in practice: the practitioner can state where structure is reusable, where it is bespoke, what source-side distinctions must remain reachable, and when the result is only report-only accounting.
Not this pattern when the question under repair is source-label recovery, module-interface relation repair, modularity-characteristic selection, measurement or comparability legality, architecture scale preference, mathematical-lens use, or any outside-RSA use named above. Use [C.30.STRAT](/generated/patterns/C.30.STRAT), [A.6.M](/generated/patterns/A.6.M), [C.31](/generated/patterns/C.31), [C.16](/generated/patterns/C.16), [A.10](/generated/patterns/A.10), [B.3](/generated/patterns/B.3), [G.6](/generated/patterns/G.6), [C.31.ASAP](/generated/patterns/C.31.ASAP), [C.29](/generated/patterns/C.29), [G.5](/generated/patterns/G.5), or [C.11](/generated/patterns/C.11) as appropriate; do not treat C.31.RSA as the synthesis or selector pattern.
Problem
Architecture teams often say that structure is reusable, repeated, templated, common, standardized, or bespoke. Those phrases are useful, but they do not say what is being counted, described, or compared. Structure can be selected from functions, flows, control relations, module interfaces, work methods, evidence packages, regulatory arguments, data schemas, deployment constraints, or exception networks.
Functional, flow, control, module-interface, work, evidence, and assurance structures may be included only when their declared accountingBasisRef and evidence relation named by value, assurance relation, source relation, or source-return condition are declared when those relations are being claimed.
The practical question is: which reusable loci matter, which bespoke residue remains, what source distinctions are lost by accounting, and what repair or source return follows?
Forces
Solution
C.31.RSA governs reusable-structure accounting as a typed description over declared structures and structural aspects. It starts with ReusableStructureTriage; it uses ReusableStructureAccountingDescription@Context only when the accounting basis is declared.
Typed accounting description
accountingBasisRef states the accounting rule being used: description length, dependency edges, work items, evidence package count, cost share, template instances, interface variants, regulatory case sections, or another declared accounting rule. The accounting rule is not implied by the word "reuse".
Well-formedness: every slot is over declared structureRefs, declared structuralAspectRefs, and one declared accounting basis. Slot labels are explanatory; they are not root kinds and are not automatically commensurable.
Explanatory slot labels
A local accounting description may use explanatory slot labels such as:
These labels are local slots, not FPF ontology. H_residual is residual uncertainty or unmodelled variance under the accounting basis. It is not obviously the same unit as interface grammar, work template, evidence package, or regulatory argument.
Report-only shares
Numeric shares require a declared accountingBasisRef, declared scale or unitless-value rule, unit when relevant, polarity when relevant, admissible comparability relation, and comparator admission named by value such as CG-Spec, ComparatorSetRef, or a comparator-governing reference named by value before they can guide outside-RSA use such as comparison, ranking, selection, gate use, or decision use. Without that, the share remains local report-only guidance.
Pseudo-sum boundary
An explanatory decomposition may be useful:
This is not ReusableStructureEquation, not an architecture amount, and not a hidden StructureAmount kind. It is a readable decomposition of one declared accounting description. If the slots do not share a declared accounting basis and comparability rule, they cannot be summed or ranked.
Structure-relocation moves
RSA is useful because it points to relocation and repair moves:
High reusable structure is not always good. The architecture question is where structure lives and what action follows: reusable templates, interfaces, flows, control relations, work methods, evidence packages, or unique exception networks and hidden coupling.
After a relocation or reuse move, ask what got worse:
The result is not "more reuse is better." A conforming RSA move states the reusable locus, the bespoke or residual locus, the accounting basis, the first repair direction, and the first cost, loss, or source-return condition that can make the move inadmissible.
Triage and accounting use boundary
Use only ReusableStructureTriage when:
- there is one local case;
- no outside-RSA use is being made;
- the practitioner only needs a repair direction;
- no numeric share is being relied on.
Use ReusableStructureAccountingDescription@Context when:
- the accounting basis is declared;
- a report-only share is useful;
- structure refs or structural aspects need to be compared inside one declared
accountingBasisRef; - source-return conditions matter;
- reusable structure or bespoke residue is used for outside-RSA use such as cross-case report, publication, assurance, architecture scale preference, or decision.
Reopen and lowering conditions
An RSA result remains valid only inside its declared accounting basis, structure edition, source-return condition, and comparator admission. Reopen the triage or lower the admissible use when any of the following changes:
- a hidden source distinction becomes action-relevant;
- the accounting basis changes or proves heterogeneous;
- the selected structure, structural aspect, interface grammar, evidence package, work method, or assurance argument changes edition;
- a comparator set, CG-Spec, or outside-RSA use is added after a report-only share was recorded;
- downstream reliance uses the RSA result for outside-RSA evidence, assurance, gate, causal-use, scale-preference, or decision work that the RSA note did not admit;
- evidence validity, assurance window, or source-return condition decays;
- a local bounded exception becomes repeated enough to require refactoring;
- a reuse move improves one locus while worsening interface cost, variation loss, evidence decay, assurance work, source-return cost, or hidden bespoke residue.
Lower the result to report-only when outside-RSA comparison, ranking, selection, gate use, or decision use lacks comparator admission named by value. Lower it to quote-only or source cue when the accounting basis cannot be recovered. Mark it blocked when the reusable locus and bespoke-residue locus cannot be separated.
Archetypal Grounding
Tell. Reusable structure is not a substance. It is structure located in declared places under a declared accounting basis.
Show. In one architecture, reusable structure may be located in a template and interface grammar. In another, it may be located in a test package, regulatory argument, work method, or flow pattern. In a third, the reusable part may be small, but the bounded exception is exactly what preserves safety or local fit.
Show. A share can be useful as a local report. It becomes misleading when it hides which structure was counted, which structure was not counted, and when the reader must return to source records.
Holon and episteme: the structures being accounted over are selected architecture-relevant structures in context. The RSA description, slots, report-only shares, and source-return condition are accounting descriptions, slot-bearing records, report-only records, and source-return records about those structures.
Worked case: reusable evidence package, bespoke delivery work
Situation:
ReusableStructureTriage:
Admissible move: publish the local report-only RSA note and repair the recurring delivery approval work into reusable work structure and reusable evidence structure. Non-admissible move: claim that the reusable evidence package proves every deployment or that a high reusable share makes the architecture better.
Anti-case: high share hides a bad architecture move
Situation:
This is not a successful RSA result. The accounting basis counts template instances but hides interface relation cost, lost variation, hidden bespoke work, and evidence decay. The repair is to mark the share as report-only, add the missing bespoke-residue slots, and apply A.6.M, C.31, or an characteristic pattern governing the claim to the interface relation cost before any comparison or decision use.
Lowering replay: the team tries to use the 85 percent share to rank this template architecture above another product-line variant and approve the template program. The use is lowered to local report-only accounting because the comparator set, accounting-basis alignment, interface-cost measure, source-return condition, and decision record are absent. Before comparison or decision use, A.6.M must repair the interface grammar, C.16 or A.19 must govern comparability and characteristic space, and C.11 must govern the local decision claim.
Stop condition: do not use the 85 percent share for outside-RSA ranking, gate, assurance, or decision. Reopen the RSA note when the interface grammar, exception register, or comparator set changes.
Transfer case: neural-network block replacement
Situation:
RSA can transfer from product-line architecture to neural-network architecture only after [C.30.STRAT](/generated/patterns/C.30.STRAT) has treated block, cache, and related terms as source labels unless the reusable locus is already recovered. Then RSA names the declared structures and accounting basis:
- reusable structure may be located in recovered repeated-block topology, dataflow pattern, cache-placement rule, or evaluation harness;
- bespoke residue may be located in model-specific tuning, data distribution dependence, memory-layout exception, or ablation gap;
- benchmark gain is not reusable-structure accounting by itself;
- evidence claims apply
[A.10](/generated/patterns/A.10)and[G.6](/generated/patterns/G.6); causal claims apply[C.28](/generated/patterns/C.28); mathematical-lens or compression claims apply[C.29](/generated/patterns/C.29).
Admissible move: record which recovered structural locus was reused, what changed, what source distinctions must remain reachable, and which governing pattern governs benchmark, evidence, causal-use, or mathematical-lens claims. Non-admissible move: treat "block replacement improved the architecture" as RSA proof.
Bias-Annotation
Conformance Checklist
Common Anti-Patterns and How to Avoid Them
Consequences
Benefits:
- Reusable structure and bespoke residue become visible without a false architecture amount.
- Practitioners get a cheap triage before accounting.
- Report-only shares can guide repair without becoming proof.
- Evidence reuse, work repeatability, interface grammar, and bounded exceptions can be separated instead of averaged.
Costs:
- Some attractive reuse reports remain report-only.
- Numeric shares require declared
accountingBasisRef, declared scale or unitless-value rule, relevant unit and polarity, admissible comparability relation, and comparator admission named by value before they can guide outside-RSA comparison, ranking, selection, gate, or decision use. - The pattern raises a source-return question whenever accounting hides distinctions needed by downstream action.
Rationale
C.31.RSA is separate from C.31 because accounting over reusable structure has a different reusable-structure accounting question from choosing modularity characteristics. C.31 asks which characteristic changes action. C.31.RSA asks where reusable structure and bespoke residue are located under a declared accounting basis.
The pattern refuses StructureAmount because architecture is selected structure in context, not a substance. A useful accounting description can still report shares, but only under declared structure refs, structural aspects, and an accounting basis.
The pattern also keeps residue ethically and practically neutral until interpreted. Bespoke residue can be a defect, a local necessity, a safety boundary, a regulatory constraint, or a deliberately accepted exception. The repair is to name which one.
SoTA-Echoing
Source-currentness front. Use the table's Currentness or lineage use cell as the source-use boundary. Rows named current, such as ISO/IEC/IEEE 42010:2022, MOSA guidance, current product-line or variability work, GSN Community Standard v3, current safety-case reuse work, and the architecture-operation corpus material used as current practitioner language, require source refresh before outside-RSA use when the named standard, guide, practice family, or corpus role changes. Rows named lineage, such as DSM or product-architecture lineage, Eppinger and Browning lineage, Goodhart and Campbell proxy-pressure lineage, system-evolution and information-hiding lineage, and Pohl, Boeckle, and van der Linden lineage, stay lineage unless a current source relation is explicitly recovered.
Refresh or lower the RSA result when a source-role change alters the reusable locus, bespoke-residue locus, accounting basis, source-return condition, comparator admission, evidence-validity relation, assurance or safety-case reliance, architecture scale-preference relation, or any outside-RSA use. A source row may explain why an accounting distinction matters, but it does not make an RSA share current for comparison, decision, assurance, gate, or publication without the governing pattern for that outside-RSA use.
Older or local sources may serve as lineage or worked examples only when the row says so. They do not stand in for current competitive source, and they do not make an RSA share admissible for outside-RSA use without the governing pattern for that use.
Relations
C.31.RSA:End
Architecture Scale-Amenability Preference
Type: Characterization pattern Status: Stable Normativity: Normative unless explicitly marked informative
Problem frame
Use this pattern when a practitioner compares architecture alternatives under a declared scale variable or scale window and needs to avoid treating a modularity label, platform label, product-line label, reusable-structure share, or coarse-graining metaphor as an automatic scale-preference claim.
The first useful move is ScaleClaimTriage:
Ordinary use starts by naming the alternatives, the scale variable, the scale window, the claimed preference under scale, the available slope or scale-probe evidence or no-probe reason, the expected stable or improving structure, and the exception growth risk. Use ArchitectureScaleAuditRecord@Project only when the scale preference is being used to affect a comparison, selected set, publication, assurance input, or architecture decision.
What goes wrong if C.31.ASAP is missed: "modular", "platform", "product line", "reusable", "general", "open", "coarse-grained", or "RG-like" becomes a shortcut for a scale-preference claim; a locally hand-engineered solution is called debt even when safety, legality, or mission constraints justify it; exception growth is hidden until the architecture is already expensive to change; and coarse descriptions keep losing lower-scope safety or semantic distinctions without a source-return condition.
What C.31.ASAP buys in practice: the practitioner can say what is being scaled, where the scale claim holds, what structure is expected to remain stable or improve, what exceptions are allowed, what evidence or no-probe reason exists, which scale-preference claim stays in C.31.ASAP, and which governing pattern governs any lens-use, evidence, assurance, selection, or decision claim being made.
Not this pattern when the question under repair is only module-interface relation repair, modularity-characteristic selection, reusable-structure accounting, mathematical-lens use, scale-law adequacy, method preference under general BLP, candidate architecture generation, selected-set return, or final local choice. Use [A.6.M](/generated/patterns/A.6.M), [C.31](/generated/patterns/C.31), [C.31.RSA](/generated/patterns/C.31.RSA), [C.29](/generated/patterns/C.29), [C.18.1](/generated/patterns/C.18.1), [C.19.1](/generated/patterns/C.19.1), [G.5](/generated/patterns/G.5), [G.9](/generated/patterns/G.9), or [C.11](/generated/patterns/C.11) as appropriate. C.31.ASAP governs architecture scale-preference claims; it does not select the architecture, prove the scale law, or certify the project.
Problem
Architecture work often asks whether one structure will scale better than another: a product-line architecture rather than bespoke variants, an open interface rather than a closed integration, a stable flow topology rather than repeated project exceptions, or a reusable evidence package rather than repeated assurance work.
These claims are useful only after the scale relation is declared. "Scales better" can mean fewer interface grammar variants, lower exception growth, better learning transfer, more reusable templates, more stable control relations, less source-return cost, fewer regulatory exceptions, or more freedom of action. Those are not the same claim.
C.31.ASAP turns architecture scale-preference talk into a declared scale variable or window, a preference claim, evidence or no-probe reason, expected stable or improving structure, exception-growth risk, and source-return condition. It does not turn scale preference into proof, selection, assurance, causal use, or a universal law.
Forces
Solution
C.31.ASAP specializes scale-amenability preference for architecture alternatives. It applies when an architecture alternative set, scale variable or scale window, and claimed preference under scale are named.
Applicability fields
C.31.ASAP applies only when all of the following are present:
- a declared architecture alternative set;
- a declared scale variable or scale window;
- a claimed preference under scale;
- slope evidence, scale-probe evidence, or a no-probe reason;
- an expected stable or improving structure, exception-growth risk, or source-return condition that changes the next architecture move.
If those fields are absent, keep the claim in C.31 as a temporal or scale-sensitive characteristic cue, in C.31.RSA as report-only accounting, in C.29 as a bounded lens-use output, or in ordinary architecture prose.
ScaleClaimTriage
Use ScaleClaimTriage before any heavier scale audit:
The triage is complete enough when it states the next admissible architecture move and the nearest blocked overread. It may stop at local guidance when no comparison, publication, assurance, selected-set, or decision use is being made.
Architecture scale-preference rule
When architecture alternatives satisfy the same safety boundary, legal boundary, and assurance boundary, prefer the alternative whose reusable functional-structure, flow-structure, control-structure, module-interface, work-template, and evidence-package structure and learning-transfer slopes remain stable or improve over the declared scale window, unless an ArchitectureScaleAuditRecord@Project records a bounded exception.
This is not a selector result. If an alternative set, shortlist, selected set, local choice, gate, or decision is being claimed, use G.5, G.9, C.11, A.21, or the governing pattern. C.31.ASAP governs only the scale-preference claim and its boundary.
Scale variables
Typical architecture scale variables include:
The scale variable is not enough by name. The claim being made also needs a scale window, expected stable or improving structure, exception-growth risk, and source-return condition.
Scale audit outputs
Use the heavier audit only when the scale preference changes comparison, publication, selected-set, assurance-input, or decision use:
ArchitectureScaleAuditRecord@Project is a project-side triage record governed by this pattern. It is not an assurance proof, gate record, selected-set publication, local decision, or work plan.
Waiver discipline
Not every non-scale-amenable choice is debt. A deontic constraint, safety boundary, legal boundary, mission constraint, assurance infeasibility, or scale-probe overturn can justify a bounded exception without creating ArchitectureHeuristicDebt.
ArchitectureHeuristicDebt remains report-only unless tied to a decision, risk, work, evidence, assurance, or selected-set record through its governing pattern.
Scale-refactoring moves
Before scale-preference guidance becomes action-guiding, name at least one possible repair or stop:
C.29 lens relation
C.31.ASAP does not prove a scale law and does not perform mathematical-lens recovery. Use C.29 when the scale preference depends on an RG, coarse-graining, epiplexity, graph, multilevel-learning, or frustration lens.
For architecture use, the C.29 output should name MLU.Description@RGArchitecture, MLU.Description@MultilevelLearningFrustration, or another local MathLensUse output only when the lens changes the next admissible move. The C.31.ASAP side records the scale variable, scale window, slope or scale-probe evidence, exception-growth risk, and source-return condition. C.29 records candidate mathematical object, mapping mode, preserved structure, lost structure, visible payoff, admissible use, non-admissible use, and stop condition.
Archetypal grounding
Filled triage slice
Admissible move: prefer the platform alternative as a local scale-preference guide and start interface-grammar repair before deployment spread increases. Non-admissible move: treat the platform label, reusable-share number, or six-site probe as architecture selection, evidence sufficiency, assurance, gate passage, or final decision.
Near-miss lowering slice
Near-miss: a team says the platform architecture should win because it has an 82 percent reusable-structure share, an RG-like coarse description, and "less bespoke debt" than the local variant.
Lowering replay:
- The platform label is a source cue, not scale-preference evidence; recover variability slots, extension rules, exception curve, and source-return condition first.
- The 82 percent reusable-structure share stays report-only under C.31.RSA until the scale variable, scale window, accounting basis, comparator admission, and admissible comparison relation are declared.
- The RG-like phrase stays with C.29 unless the mathematical-lens fields, preserved structure, lost structure, payoff, admissible use, and stop condition are recoverable.
- The "bespoke debt" label is lowered to waiver review when safety, legal, mission, assurance, or scale-probe overturn reasons may justify the local variant.
Stop C.31.ASAP use when the scale window, probe evidence or no-probe reason, comparator admission, or source-return condition is absent. Reopen it only after those fields are recoverable and the platform-label, share, lens, and waiver claims have their governing patterns.
Bias annotation
Conformance Checklist
Common anti-patterns
Consequences
Rationale
C.31.ASAP is added because C.31 and C.31.RSA can expose scale-sensitive characteristics and reusable-structure residue, but they should not themselves decide which architecture alternative is preferable under scale. C.31.ASAP governs this architecture scale-preference claim family; it is narrower than general BLP and broader than one measurement card.
The pattern adapts BLP-style scale-amenability to architecture: prefer the alternative that preserves or improves reusable structure over a declared scale window when safety, legality, and assurance boundaries are comparable. It also blocks the common shortcut that treats modularity, reuse, platform practice, or mathematical coarse-graining as scale-preference evidence by itself.
SoTA-Echoing
Relations
- Builds on:
C.31,C.31.RSA,C.16,A.17,A.18,A.19,C.18.1,C.19.1, andC.29. - Coordinates with:
A.6.Mfor module-interface relation repair;C.30,C.30.ASV,C.30.LCA, andC.30.ILCfor architecture and selected-structure questions;A.10,B.3, andG.6for evidence and assurance reliance;G.5,G.9, andC.11for selected-set, parity, and choice claims. - Boundary:
C.31.ASAPgoverns architecture scale-preference claims.C.31,C.31.RSA,C.29,C.18.1,C.19.1,G.5,G.9, andC.11govern modularity-characteristic, reusable-structure accounting, mathematical-lens, scale-law, general method preference, selected-set, parity, and local-choice claims when those claims are being made. - Precision-restoration relation: source wording recovered by
E.10,E.10.ARCH, orC.30.STRATis governed by C.31.ASAP only when the recovered claim being made is architecture scale preference over a declared alternative set, scale variable, and scale window.
C.31.ASAP:End
Bias-Audit & Ethical Assurance
Use this when. Use this pattern when a holon, model, metric, decision system, policy, or authored FPF claim may create unfair, biased, or ethically unsafe effects for people or groups. If the fairness claim is causal — for example "this intervention is fair", "this policy would have prevented harm", "this model is counterfactually fair", or "this practice causally reduces disparity" — keep the ethical audit in D.5 and cite C.28 for causal-use question, causality-ladder rung, estimand, causal evidence support basis, identification, realizability, evidence design, support record, and support verdict.
Not this pattern when. If the question under repair is only measurement construction, use C.16; if it is only causal-use support without fairness or ethical audit, use C.28; if it is only an assurance claim or assurance input/result, use B.3. Metric disparity alone is not yet causal fairness.
Causal-fairness boundary. A local C.28 causal-fairness repair, such as adding a causal-use question, estimand, support basis, support record, or supported-fairness-use and unsupported-fairness-use pair, is not by itself the Bias-Audit Cycle. It remains a local support repair until the claim, model, metric, policy, or decision system is in a D.5 project, release, assurance, or human/group-impact audit condition.
Problem Frame
FPF is designed to produce reliable, objective, and trustworthy holons. However, formal correctness (FV score) and empirical validation (EV score) are not sufficient on their own. Any record, model, metric, policy, or decision system designed by humans or trained on human-generated data is susceptible to hidden cognitive, cultural, and algorithmic biases. A perfectly verified control system can still be unsafe if its requirements were based on a biased assumption about operator behavior. A highly accurate machine learning model can be deeply unfair if its training data was not representative.
A fairness claim can also be unsafe by causal overclaim. "This policy is fair because a metric improved" is not the same claim as causal fairness, counterfactual fairness, or path-specific fairness. D.5 therefore brings causal fairness into the audit entry section: the audit must distinguish metric disparity, associative fairness evidence, interventional fairness proxy, and counterfactual fairness claim before the ethical assurance record is treated as supported.
Problem
Without a formal, repeatable method for surfacing and mitigating these biases, FPF models risk becoming "flawed by design." This leads to three critical failure modes:
- Systemic Harm: The deployed holon, despite meeting all its technical specifications, causes unintended negative consequences for certain groups or in certain contexts.
- Eroded Trust: Stakeholders or the public lose trust in the system (and its creators) when its inherent biases are exposed after deployment.
- Hidden Risk: The assurance case looks well-supported on paper, but it is built on a foundation of unexamined and potentially dangerous assumptions, creating a significant hidden risk.
Forces
Solution
FPF introduces the Bias-Audit Cycle (BA-Cycle), a lightweight, iterative review loop designed to integrate ethical reflection directly into the engineering development cycle. It is not a one-time gate but a continuous loop of inquiry.
The Bias-Audit Cycle: Four Phases
The cycle consists of four distinct phases, aligned with the project's natural rhythm.
The Bias Taxonomy: A Shared Language for Critique
To structure the audit, FPF provides a minimal, extensible taxonomy of common bias categories.
Didactic Note for Managers: This is Risk Management, Not a Philosophy Seminar
The Bias-Audit Cycle is FPF's "immune system." It's designed to find and neutralize hidden assumptions before they become costly product failures or public relations disasters. Think of it like a security audit, but for the ethical and social integrity of your system.
- It's not about being "perfect"; it's about being "aware." The goal is not to eliminate all bias (an impossible task) but to make your team's biases explicit, documented, and consciously managed.
- It's cost-effective. The lightweight "Rapid Scan" catches most issues early, during a sprint. The more intensive "Panel Review" is reserved for key moments, ensuring that expert time is used efficiently.
- It creates a defensible record. The Bias-Audit Reports provide a clear, auditable trail showing that your team has taken a systematic and responsible approach to identifying and mitigating potential harms. In an era of increasing scrutiny on AI and autonomous systems, this record is not just good practice—it's a critical business asset.
Normative Artifacts
The Bias-Audit Cycle produces two key records that serve as the auditable record of ethical deliberation.
-
The Bias Register:
- Nature: A living, evolving episteme that serves as a repository of questions, concerns, and potential biases identified throughout a holon's evolution.
- Content: It is a structured collection of inquiries, organized by the Bias Taxonomy (REP, ALG, etc.). It is continuously updated during the Rapid Scans (BA-1) and represents the "running log" of ethical and bias-related considerations for the project.
-
The Bias-Audit Report:
- Nature: A formal, versioned episteme that documents the findings of the Panel Review (BA-2).
- Content: It contains a structured record of findings. Each finding is a
U.Epistemewith attributes for:biasCode: The category from the Bias Taxonomy.severity: An ordinal level (high,medium,low).description: A narrative explaining the issue.mitigation: A proposedU.MethodorU.ConstraintRuleto address the issue.status: A state (blocking,resolved,risk-accepted).
- Conceptual Example:
finding-01: An episteme withbiasCode: REP,severity: high, and adescriptionstating that the training data for a recognition holon lacks representation from certain demographics. Themitigationwould be aU.Methodfor acquiring a balanced dataset, and thestatuswould beblockinguntil this method is executed and its outcome validated.
Causal fairness use audit
When a fairness claim is causal rather than metric-only, D.5 records the ethical-audit question and cites C.28 for causal-use support:
Metric-only fallback: if only a metric disparity is claimed and no causal fairness use is made, record it as metric/evaluation use, not [C.28](/generated/patterns/C.28)-heavy causal fairness.
Local causal-fairness repair does not by itself trigger the full Bias-Audit Cycle, a panel review, or release-cycle duties. It may only downgrade causal wording, add the missing [C.28](/generated/patterns/C.28) support reference, or mark unsupported causal fairness use.
The full [D.5](/generated/patterns/D.5) duties activate under [D.5](/generated/patterns/D.5) project or release conditions: the holon, model, metric, decision system, policy, or authored claim may materially affect people or groups; the fairness/ethical claim is release-bearing; or the local causal-fairness repair becomes an input to audit, assurance, deployment, publication, or risk acceptance.
Fairness escalation rule: interventional-action proxy may support bounded interventional fairness use but cannot be published as counterfactual fairness.
What changes in practice: a fairness audit must say whether the claim is associative, interventional, or counterfactual, and a counterfactual fairness claim must carry the causal-use question, comparator/counterfactual, permitted paths, prohibited paths, causal evidence support basis, causal identification or counterfactual sampling realizability, causal-use support verdict, and supported fairness use and unsupported fairness use.
What this does not authorize: [D.5](/generated/patterns/D.5) does not replace [C.28](/generated/patterns/C.28) for causal-use question, causality-ladder rung, estimand, identification, realizability, or CausalUseSupportVerdict; it keeps ethical audit and fairness assurance, while [B.3](/generated/patterns/B.3) keeps assurance claim support and non-admissible-use consequences.
Conformance Checklist
- CC-D5.1 (Cycle Mandate): Any project developing a holon that interacts with or makes decisions about humans MUST conduct the Bias-Audit Cycle.
- CC-D5.2 (Artifact Mandate): The project MUST maintain a Bias Register and produce a Bias-Audit Report before any major release.
- CC-D5.3 (Blocking Issue Mandate): A release SHALL NOT be considered conformant if its latest Bias-Audit Report contains any unresolved findings with
status: blocking. The issue must either be moved toresolved(mitigated) orrisk-accepted(formally signed off by a designated authority). - CC-D5.4 (Role Mandate): The Panel Review (BA-2) MUST involve at least three individuals representing distinct perspectives, ideally aligning with the roles of Ethicist, Domain Sociologist, and UX Design Critic from the Intellect Stack.
- CC-D5-CF-1: A fairness claim MUST declare whether it is associative, interventional, or counterfactual.
- CC-D5-CF-2: An interventional-action-rung fairness proxy MUST NOT be published as a counterfactual-rung fairness result.
- CC-D5-CF-3: If a counterfactual fairness estimand is claimed actionable, it MUST cite
CausalIdentificationProfileorCounterfactualSamplingRealizabilityProfile. - CC-D5-CF-4: A causal fairness audit MUST cite
C.28for causal-use question, causality-ladder rung, causal estimand, causal evidence support basis, identification, realizability, evidence design,causalUseSupportRecordRefwhen one is consumed, andCausalUseSupportVerdict;D.5keeps ethical audit and fairness assurance. - CC-D5-CF-5: A local causal-fairness wording repair or support-reference repair does not trigger the full Bias-Audit Cycle unless
D.5project, release, assurance, or human/group-impact audit conditions are live.
Common Anti-Patterns and How to Avoid Them
Consequences
Rationale
Formal correctness is not a substitute for moral responsibility. This pattern recognizes that bias is not an occasional flaw but a systemic feature of any human-led design process. The Bias-Audit Cycle is FPF's formal mechanism for managing this reality. It is a direct implementation of the Cross-Disciplinary Bias Audit Guard-Rail (E.5.4).
By integrating this cycle into the core engineering work cycle, FPF moves ethical assurance from a peripheral, often-ignored "nice-to-have" into a central, non-negotiable component of engineering excellence. It ensures that the powerful tools of formal reasoning and validation provided by FPF are always directed towards creating holons that are not only correct, but also conscionable.
Relations
- Implements: The
Cross-Disciplinary Bias AuditGuard-Rail (E.5.4). - Complements:
D.4 Trust-Aware Mediation Calculusby providing inputs on fairness and value alignment;B.3.4 Evidence Decay & Epistemic Debtby questioning the longevity of assumptions about social context. - Coordinates with:
C.28for causal fairness use, causality-ladder rung, causal estimand, causal evidence support basis, identification, realizability, evidence design, causal-use support record, and causal-use support verdict;B.3for assurance claim support and unsupported-use consequences. - Operationalizes: The conceptual roles of
Ethicist,Domain Sociologist, andUX Design Criticfrom the Intellect Stack.
D.5:End
Vision & Mission: “Operating System for Thought”
Problem frame
Modern engineering, science, and strategy all suffer from conceptual overload: dozens of domain tools, drifting vocabularies, and disconnected “best practices” splinter ideas as they travel from napkin sketch to certified deliverable. Stakeholders—Engineers, Researchers, Learners—lack a single, evolvable scaffold that can carry an insight across that span.
Problem
Absent such a scaffold, every discipline re‑invents epistemology and systems thinking, spawning silos, steep learning curves, and brittle life‑cycle models. Previous attempts either froze agility in rigid hierarchies or dissolved rigour in tool‑centric jargon.
Forces
Mission Statement
Enable any motivated system/actor/agent/transformer — human or AI — to transform a raw idea into a reproducible, auditable change in the physical world through incremental, falsifiable cycles.
Vision Statement
Reliable reasoning should be as accessible as version control: clone the conceptual kernel, extend it with domain patterns, and commit decisions that remain traceable across time, scale, and discipline.
Solution — FPF as an Operating System for Thought
FPF delivers a generative scaffold realised as:
-
a Kernel of non‑derivable, cross‑domain first principles;
-
pluggable patterns—Systemic Calculus, Knowledge Dynamics, etc.—that instantiate those principles;
-
a pattern language (Architectural ► why/ how; Definitional ► what) with embedded Conformance Checklist (CC);
-
Design Rationale Records (DRRs) that govern safe, auditable evolution;
-
three core invariants that every artefact must honour
- Evolvability — change is expected and governed;
- Cross‑Scale Coherence — the same algebra binds parts to wholes at any level;
- Didactic Transparency — each element exposes its own reasoning path.
Conformance Checklist
Consequences
Positive — Unified language accelerates cross‑disciplinary discovery; regulators can audit claim lineages; learners acquire concepts through the spec itself. Trade‑offs — Authors face an initial learning curve and must trace every rule to an invariant; disciplined traceability is required to prevent variant sprawl.
Relations & Precedence
Pattern E.1 governs E.2 Eleven Pillars and the Guard‑Rail set A.5–A.8; any later pattern that conflicts with E.1 MUST be revised via a DRR before entering the Canon.
“Purpose without a scaffold is wishful thinking; a scaffold without purpose is cargo‑cult—FPF welds the two into disciplined imagination.”
E.1:End
The Eleven Pillars
Problem frame
Pattern E.1 set the FPF mission as an operating system for thought. To turn that mission into a durable architecture, FPF needs a small, explicit constitution - principles that remain stable while everything built on top of them can evolve. Without such invariants, domain silos, vocabulary drift, and tool-centric shortcuts quickly erode coherence and reproducibility across disciplines.
The pillars are also the first-principles basis of FPF. They are the minimal commitments from which pattern-level work derives: decisive structure, teachability, maturing formality, open kernel, layering, register discipline, practical payoff, cross-scale consistency, explicit state, open-ended evolution, and SoTA renewal. Later patterns can support this basis by making a concrete argument about pillar support more inspectable; they do not replace pillar authority.
Problem
Frameworks without binding first principles wobble between two extremes: rigid dogmas that kill adaptation and amorphous guidelines that invite cognitive chaos. In either case, reasoning fragments, auditability collapses, and physical impact suffers.
Forces
Solution
FPF rests on eleven non‑negotiable pillars. Each pillar is a binding constraint that every artefact, pattern, and design‑rationale record (DRR) must honour. Together they form the load‑bearing structure that guarantees evolvability, cross‑scale coherence, and didactic clarity.
When a pillar-impact argument relies on mathematical structure, scale behavior, optimization, uncertainty, invariance, obstruction, or other first-principles modeling support, the applicable mathematical-lens use support path is C.29. The pillar claim remains governed by E.2; C.29 only states the mathematical lens, preserved and lost structure, admissible use, neighboring-pattern exits, and stop condition that make the pillar support inspectable.
Any DRR that contradicts a pillar must first amend this constitutional pattern.
Conformance Checklist
Policy — Bitter‑Lesson Preference (BLP)
Intent. Favor general, computation‑leveraged, and freedom‑of‑action methods over hand‑tuned, brittle heuristics when safety and legality are held constant. This codifies the empirical trend that methods which scale with data, compute, and search breadth outpace bespoke rule‑engineering. Applicability: beyond ML, this policy covers search/optimization, control, simulation‑based inference, and other computational sciences where capability improves with scale and exploration. When NQD/E/E‑LOG promotes novelty/coverage (illumination) telemetry into dominance (via an explicit CAL policy; policy‑id recorded in SCR), these telemetry metrics are included in BLP comparisons for the audited window.
BLP‑1 — Scale‑Audit Requirement. Any DRR that selects a more specialized/hand‑engineered method over a general/scalable alternative MUST include a Scale‑Audit:
- (a) Parity harness: same ComparatorSet, freshness window, and evaluation seeds/replicates; set-returning evaluation (see G.5/G.9). Dominance criterion: Pareto‑only by default across the declared objective vector; any alternative requires a documented waiver by Gov‑CAL under E.3 precedence.
- (b) Budgets: sweep compute (steps/tokens/params/time/energy, as applicable), data (size/quality), and freedom‑of‑action (from script‑like instructions → minimal prohibitions) under a fixed risk/safety envelope. If any parameter cannot be swept, pin it and record the invariant.
- (c) Slopes & uncertainty: report ∂quality/∂compute, ∂quality/∂data, and (where applicable) ∂coverage/∂freedom‑of‑action and ∂novelty/∂budget; include error bars/CI from multi‑seed trials; publish edition pins and policy‑IDs in SCR/telemetry (G.11).
- (d) Resources: publish Resrc‑CAL accounts (time/energy/FLOPs) and assurance deltas (B.3).
- (e) Objective declaration: list the objective vector (quality, risk, cost, and any illumination telemetry explicitly promoted into dominance via CAL with policy‑id recorded in SCR) used for Pareto comparison.
BLP‑2 — Preference Rule. Given admissibility and comparable assurance (within δ) and budget (within α), prefer the method whose slope vector is Pareto‑dominant over the audited range (per BLP‑1c/1e). If no dominance holds within error bounds, prefer the more general method (fewer domain‑specific heuristics, greater transfer via Bridges Φ/Ψ); otherwise resolve via E/E‑LOG tie‑breakers declared in policy.
BLP‑3 — Minimal‑Prescription Default. Author rules‑as‑prohibitions (negative constraints) over step‑by‑step scripts. Encode limits in Φ policy tables (and Φ_plane where applicable) instead of procedural checklists; allow the agent/system to sequence functions autonomously under those constraints (SoS‑LOG). Pre/post‑conditions and test harnesses remain permitted; scripts are permissible only when mandated by safety/regulation, or with compelling evidence recorded in the DRR and reviewed under E.3 precedence / E.5 Guard‑Rails.
BLP‑4 — Heuristic‑Debt Register. Any hand‑tuned rule admitted for pragmatic reasons MUST be registered as Heuristic Debt with: scope, responsible role, expiry/review window, measurable replacement target under BLP‑2, and a de-hardening/sunset plan. Track in CalibrationLedger/BCT (Baseline Change Tracker) and cite in SCR.
BLP‑5 — Continuous‑Learning Posture. Where product policy allows, enable feedback‑driven adaptation (e.g., preference learning, critique loops) within Guard‑Rails (E.5) and privacy/regulatory controls, with appropriate opt‑outs where required. Disabling adaptation requires DRR justification and a review date.
BLP‑6 — Precedence & Safeguards. BLP is a Gov/Arch policy instantiated by Pillars P‑10 (Open‑Ended Evolution), P‑11 (SoTA Alignment), P‑7 (Pragmatic Utility), and P‑1 (Cognitive Elegance). It does not override safety/ethics (E.5) nor E.3 precedence rulings; where BLP conflicts with Guard‑Rails, Guard‑Rails prevail. When NQD/E/E‑LOG elevates illumination to dominance for exploration mandates, BLP adopts that lens rather than overriding it.
Informative SoTA contexts (post‑2015): set-returning selection across LLM prompt‑programming vs fine‑tuned task models; preference‑learning families (RLHF ↔ DPO); QD archives (MAP‑Elites/CMA‑ME/DQD/QDax); open‑ended environment–method co‑evolution (POET‑class); offline RL vs Decision Transformer parity; and beyond ML, optimization/control (model‑based planning vs hand‑tuned controllers) and simulation‑based inference in the sciences. These are illustrative only; use the parity harness instead of single‑winner leaderboards.
Conformance Checklist — BLP
Relations
- Instantiates pillars: P‑10, P‑11, P‑7, P‑1.
- Depends on: G.5/G.9 (admission/comparator/selector & parity harness), G.11 (refresh telemetry), C.5 (Resrc‑CAL), C.18 (NQD‑CAL), C.19 (E/E‑LOG), F.7/F.9 (Bridges, CL/Φ/Ψ).
- Constrained by: E.5 Guard‑Rails (DevOps Lexical Firewall; Notational Independence; Cross‑Disciplinary Bias Audit) and E.3 precedence.
Definitions
α (budget tolerance) may be relative or absolute; declare units (e.g., % cost, wall‑time, energy). δ (assurance tolerance) is the permissible delta in assurance under B.3; declare measure and floor(s).
Consequences
Positive
- Provides an explicit “north star” for every contributor.
- Delivers a falsifiable checklist for evaluating proposals.
- Builds trust in high‑assurance domains through transparency.
Trade‑offs
- Constitutional review adds friction to rapid, informal changes.
- Amending the pillar set itself demands high‑bar governance.
Rationale
The pillars are distilled from systems engineering, philosophy of science, software architecture, and ontology design. They interlock: Cognitive Elegance (P‑1) enables Didactic Primacy (P‑2); Open‑Ended Kernel (P‑4) and FPF Layering (P‑5) make Open‑Ended Evolution (P‑10) and SoTA alignment (P‑11) feasible; Cross‑Scale Consistency (P‑8) provides the algebraic backbone for Scalable Formality (P‑3). This minimal yet sufficient set balances stability with change, rigor with accessibility, and abstraction with measurable impact.
C.29 is a downstream support pattern for this constitution when mathematical first-principles structure is part of an argument about pillar support. It makes the structure, loss, and stop condition explicit while E.2 remains authority over what counts as a pillar.
Relations
- Depends on:
pat:constitutional/vision– pillars operationalise the mission. - Refined by: All subsequent patterns in the Core Specification.
- Mathematical support path:
C.29supports pillar-impact arguments only for adequacy of mathematical lenses used to express first-principles structure. It does not amend pillar content, priority, or conformance. - Governs: Every DRR, tool, and pedagogical artefact linked to FPF.
These pillars are not a cage but the load‑bearing columns of a workshop where ideas can be safely built, dismantled, and evolved.
E.2:End
FPF Pillar-Adequacy Evaluation CharacteristicSpace
Status: Core.
Problem frame
Use E.2.DA when the object under improvement is an FPF-level object and the question is whether it realizes the E.2 Pillars adequately for a declared use. The object can be a monolith edition, selected pattern host set, pattern family, projection set, release candidate, or whole-FPF edition.
Use it after a broad cleanup, new pattern family, projection repair, source-use repair, or corpus-level improvement when local pattern quality is not enough. A set of good local patterns can still harm FPF entry, naming, layering, source use, projection integrity, or open-ended evolution.
Not this pattern when the evaluated object is one authored pattern version, one DRR, one local wording repair, or one pattern-use entry problem. Use E.21, E.9.DA, E.10 and its precision-restoration neighbours, or E.11 for those objects.
First useful move: name the FPF object under improvement named by value, declared use, reader family, and qualification window; then evaluate all eleven Pillar coordinates. If a Pillar seems unaffected, give it a value and a short rationale saying what is preserved.
What goes wrong if missed: FPF can become locally polished but globally worse. Readers may find fewer useful entry points, precision repairs may erase the working move, source rows may become decorative, or several patterns may grow local variants of the same doctrine.
Primary EntityOfConcern in plain terms: the scoped FPF object under improvement as an E.2 Pillar-realizing language object.
Problem
E.2 gives the Pillars and their constitutional meaning. It does not by itself evaluate whether a concrete FPF object realizes those Pillars well enough for a concrete use. Without E.2.DA, corpus-level reviews tend to collapse into local pattern scores, process state, review praise, or broad claims that "FPF improved."
The specific failures are:
- Local pattern quality is averaged into FPF adequacy.
- Entry projections and companion files start carrying semantics beside governing patterns.
- Precision repair improves terminology but damages first-use comprehension or changes the FPF kind carried by the repaired text.
- Source and SoTA rows are counted rather than checked for changes in FPF moves.
- Front-like words such as
all 5s,exceptional,Pareto,SoTA,NQD, orshortlistbecome loose synonyms. - Corpus-level stop claims hide what became worse.
Forces
Solution
E.2.DA is the Pillar-adequacy specialization of A.19.ECS. It evaluates one FPF object under improvement against all eleven E.2 Pillars for a declared use.
There is no smaller E.2.DA evaluation. If the caller only needs local pattern quality, DRR adequacy, or wording repair, that is a different object-under-improvement evaluation. Once E.2.DA is invoked, every Pillar coordinate receives a value, short rationale, evidence locus, and shared evidence basis for the FPF object being evaluated.
Local names and kind settlement
These names are local to the evaluation unless F.18 promotes a durable name. They name FPF content objects and evaluation fields, not release state, review state, or project evidence.
Evaluation record
[E.22](/generated/patterns/E.22) may frame the evaluation purpose when the caller needs floor evaluation, exceptional improvement, trade-off inspection, open-question discovery, absorption, or proposal portfolios. [E.23](/generated/patterns/E.23) governs repeated improvement after the evaluation returns findings or candidate proposals.
Ordinal coordinate scale
The values are ordinal content evaluations. They are not a scalar score, maturity ladder, release gate, or proof that development ends.
Required Pillar coordinates
Evidence and coordinate separation
One evidence locus may support several coordinates, but the rationale must say what property it supports in each coordinate. The following distinctions carry most repairs:
If a distinction cannot be recovered from the FPF object, lower the affected coordinate and state the first repair. Do not add a new local doctrine table to explain around the missing content.
E.21 and E.9.DA results are evidence loci for E.2.DA, not inputs to be averaged. A pattern-quality value can support a Pillar only by pointing to the FPF-level effect it creates or damages.
Result-row discipline and calibration
An E.2.DA result uses this table shape:
A Pillar essay, local-quality average, two-column table, or result whose value depends on unchecked corpus/projection/source evidence is not an E.2.DA result. It is only draft evaluation material. Missing or unchecked evidence lowers the Pillar coordinate that needs it; it does not make the coordinate optional.
Common calibration points:
Status and stop condition
The stop condition states the declared floor, values, bounded non-use, smallest reopen locus, and first repair if the declared use is not yet admissible.
Compact result form
For a small release decision, the coordinate table may be compact. It is still complete. Status is not assigned from prose, a checklist count, a local-pattern average, a two-column table, or a result missing evidence loci needed by its values.
Worked slices
Broad precision cleanup. A wording pass makes many patterns more admissible but several Problem frames now explain less about why the distinction matters, or a cleaned phrase changes the governed kind while the trigger word disappears. P2, P6, and P7 receive lower values until the affected patterns restore recognition reason, useful action, and pre/post kind evidence in admissible wording.
Repeated-content/route/reference/neighbour-reference/negative-fanout cleanup that weakens content. A corpus pass removes repeated "not proof/not gate/not work" prose, route metaphors, repeated guards, repeated mini-rules, repeated conditional neighbour-reference mappings, reference boilerplate, or architecture-placement prose, but leaves several patterns with less positive ontology, method, norm, or worked action than before. P2, P5, P6, P7, and P10 receive lower values until the affected patterns restore their own subject content and state only live declarative governing relations.
Projection repair. README scenarios, ToC rows, E.11 entry-distribution loci, and I.2 expanded entry-disambiguation cases improve search but can start carrying pattern semantics. P5 and P9 fall because projections become shadow authority. The repair moves durable semantics back to governing patterns and leaves thin echoes in projections.
Source absorption. A new source family adds current methods, but pattern bodies only cite it. P11 stays low until source rows change selected moves, examples, checks, or stop conditions. P7 changes only when the source changes action.
Bias annotation
This pattern biases FPF toward whole-language adequacy. The bias is useful because local repairs often hide corpus-level loss.
The bias is bounded by the object-under-improvement declaration. E.2.DA does not replace E.21, E.9.DA, E.10, E.11, or E.23; it evaluates their FPF-level Pillar effect when the scoped FPF object includes their results.
Conformance checklist
Common anti-patterns and repairs
Relations
Rationale
FPF needs a corpus-level quality instrument because the language can degrade while individual pattern edits look successful. The complete eleven-coordinate evaluation prevents the common escape hatch: "this is only a local repair" repeated across many files until Pillar realization changes.
The instrument is still affordable because it asks for short rationales and evidence named by value loci. It does not require a new review process, full audit bundle, or exhaustive source dossier.
SoTA-Echoing
Consequences
E.2.DA:End
Principle Taxonomy & Precedence Model
Problem frame
Pattern E.2 supplies eleven immutable pillars, yet experience shows that a flat list of principles invites ambiguity: reviewers cannot decide which pillar overrules another and “dead‑letter” rules accumulate.
Problem
When two pillars or derived principles pull in opposite directions, architectural decisions stall—or worse, drift toward the loudest voice. Without an explicit taxonomy and precedence cascade, FPF risks devolving into subjective debate, breaking its claim to be a rigorously auditable “operating system for thought.”
Forces
Solution
Principle Taxonomy
Every principle is an instance of U.Principle assigned exactly one class ∈ { Gov, Arch, Epist, Prag, Did }.
Epistemological sub‑concerns (reasoning, falsifiability) reside inside Onto, avoiding category sprawl yet keeping semantics and trust in one bucket.
E.3:4.2 - Precedence Stack
Within the precedence stack the default order is:
Gov ≫ Arch ≫ Epist ≫ Prag ≫ Did
Graph Rule — The precedence graph MUST be acyclic; any new edge that would form a cycle is rejected.
Governance principle vs Architectural principle clash: e.g. Core release schedule (Gov) outranks performance‑tuning (Prag)
Conformance Checklist
Illustrative Conflict Resolution
-
The Conflict
- P‑1 Cognitive Elegance (
Arch) demands an unambiguous term for “part–whole” entities, pushing us toward Holon. - P‑2 Didactic Primacy (
Did) values immediate practitioner familiarity, pushing us to retain System.
- P‑1 Cognitive Elegance (
-
Risk of Stalemate Without a precedence cascade, the discussion would collapse into subjective argument: “purity beats clarity!” vs “clarity beats purity!”.
-
Applying the Precedence Model
- Default order: Gov ≫ Arch ≫ Epist ≫ Prag ≫ Did.
ArchoutranksDid; therefore P‑1 takes formal precedence over P‑2.
-
Principled Decision We adopted Holon to satisfy the higher‑priority principle and mitigated the didactic cost by:
- declaring
System ≡ U.System ⊑ U.Holon, - providing aliases and an “On‑Ramp” tutorial.
- declaring
The precedence rule did not merely name a winner; it compelled a solution that honoured both principles in proportion to their rank.
Precedence (high → low). Law & Regulation → E.5 Guard‑Rails → B.3 Trust & Assurance → E.3 governance decisions → E/E‑LOG policies (editioned) → BLP (E.2) → Product Policies → Implementation Tactics.
Notes.
- BLP is a constitutional policy (see E.2 / “BLP”), but does not supersede E.5 Guard‑Rails nor B.3 assurance floors; it does govern ties among lawful, comparable‑assurance options.
- Wherever NQD/E/E‑LOG promotes illumination telemetry to dominance (via an explicit CAL policy; policy‑id recorded in SCR), BLP adopts that lens rather than overriding it (see E.2 BLP‑6).
- Any exception to policy MUST include a DRR with rationale and expiry.
- BLP Override (Waiver). When a narrower hand‑engineered method is selected over a general/scalable alternative within declared tolerances (α = budget, δ = assurance), the DRR MUST include:
- a BLP Scale‑Audit (see E.2 BLP‑1) covering compute/data/freedom‑of‑action sweeps and slope/uncertainty reporting,
- the tolerances α/δ and objective vector used (E.2 BLP‑1e),
- a Heuristic‑Debt entry (responsible role, scope, expiry/review, de-hardening plan) per E.2 BLP‑4,
- an AutonomyProfileId (see E.3‑ABL) and the GateDecision authority (see Gate‑decision authority map below). Set-returning parity. All precedence decisions that compare methods MUST use the G.5/G.9 parity harness and Pareto dominance; scalarisation across mixed scales/units is prohibited (B.3).
BLP — Bitter‑Lesson Hooks into Precedence
- Tie‑breaking. If two lawful options are within δ assurance and within α budget, prefer the option whose slope vector Pareto‑dominates over the audited window; if no dominance, prefer the more general method. (E.2 BLP‑2.)
- Script‑vs‑Search conflicts. For conflicts between procedural scripts and general search/learning, scripts prevail only when mandated by E.5 or regulation, or when a DRR records a BLP‑waiver with expiry and hazard rationale (E.2 BLP‑3/6).
- Publication. Precedence rulings that reference BLP MUST publish editioned policy‑IDs, edition pins, and Resrc‑CAL accounts to the SCR (E.2 BLP‑1d; G.11).
ABL — Autonomy‑Budget & Oversight Profiles (GateProfile) This section defines an extensible family of autonomy oversight profiles for agentic tool use: each profile specifies (i) a budget envelope, (ii) a Freedom‑of‑Action (FoA) descriptor, and (iii) the required gate‑decision publication to authorize execution under that envelope. The familiar labels L0…L4 are treated here as profile identifiers (not a fixed managerial ladder): projects MAY introduce additional profiles or sub‑profiles by minting new profile ids, provided they publish the same fields (budgets, FoA, decision roles, telemetry requirements) and keep profile changes explicit and auditable.
Normative requirements by profile.
- Budgets. Each profile MUST declare ceilings for time / compute / cost / risk and a FoA descriptor; units must be explicit (Resrc‑CAL). Budgets are hard gates at run‑time (C.Agent‑Tools‑CAL ATC‑3).
- Profile binding & change visibility. Every CallPlan MUST declare the active profile id. Any profile change is a GateCrossing (E.18) and MUST be published (DecisionLog entry + pinned policy‑ids), so an auditor can reconstruct which profile governed which Window.
- Assurance floors. B.3 WLNK minima on F and R apply at all profiles. Any profile‑specific tightening (e.g., higher required R_eff or stricter CL/Φ policies for broader FoA) MUST be declared on the profile and pinned by policy‑id. Pre‑deployment assurance deltas MUST be recorded for L2+.
- Exploration discipline.
explore_shareMUST be explicit in the CallPlan (C.Agent‑Tools‑CAL ATC‑4). Deviations from defaults require DRR justification. - Provenance. L1+ MUST emit a CallGraph with Service/Method editions, EmitterPolicyRef, budget deltas, and observation hooks (C.Agent‑Tools‑CAL ATC‑5/6).
- BLP conformance. For L2+, selection MUST apply BLP (E.2 BLP‑2) with α/δ tolerances declared in the plan policy. Any admitted heuristic requires a Heuristic‑Debt entry (E.2 BLP‑4).
- Learning/Adaptation. L3–L4 MAY enable feedback‑driven adaptation within E.5 Guard‑Rails and privacy controls; L0–L2 default off unless a DRR documents mitigation (E.2 BLP‑5).
- Human‑in‑the‑Loop (HITL). HITL obligations are expressed as gate decisions and pause/resume hooks, not an implicit “approval ladder”:
- L0–L1: execution MAY start only after an explicit GateDecision authorizing the CallPlan is present in the declared window.
- L2: sentinels MUST be able to pause execution; resumption requires a new GateDecision recorded in the DecisionLog.
- L3: the profile MUST declare periodic review windows; continued execution across a review boundary requires an explicit GateDecision.
- L4: continuous telemetry review; the default execution context is sandboxed; leaving the sandbox requires an explicit GateCrossing with a published CrossingBundle (
E.18+F.9/F.17/E.17, withA.21when a gate decision is live).
Gate‑decision authority map (default signers; who may author GateDecisions).
- L0: EoR or appointed maintainer.
- L1: EoR and peer reviewer (two‑person rule).
- L2: Team Lead and Safety representative.
- L3: Product Owner and Safety and Legal/Privacy.
- L4: Gov‑CAL Board (multi‑disciplinary) with documented scope, time‑boxed trial budget, and rollback criteria.
Profile promotion / demotion triggers.
- Promote a profile when repeated BLP‑consistent results show stable assurance within δ and budget adherence within α for ≥ N_policy runs (declare N_policy in the active profile). Promotion is not implicit: a GateDecision MUST authorize the profile change and cite the slope evidence (E.2 BLP‑1c).
- Demote a profile when: (i) a sentinel breaches risk or budget, (ii) assurance drops below floors, (iii) policy changes, or (iv) a significant heuristic‑debt item expires without replacement. Demotion MUST be published as a GateCrossing with updated budgets/policies pinned.
Conformance Checklist — E.3 ↔ BLP Interop
Consequences
Positive — Turns subjective debate into objective, traceable decisions; high‑impact conflicts surface early.
Rationale
The chosen taxonomy mirrors FPF’s layered dependency: Governance rules how change occurs; Architecture shapes what can exist; Epistemology secures meaning and trust; Pragmatics and Didactics ensure usefulness and learnability. Explicit override edges supply the flexibility experts need, while the default hierarchy keeps day‑to‑day design deterministic—a “living constitution” that remains both human‑intelligible and machine‑enforceable.
Relations
- Depends on:
pat:constitutional/vision,pat:constitutional/pillars - Governs: All subsequent patterns and DRRs; Guard‑Rail patterns reference CC‑PT.\
“A taxonomy sorts principles; precedence gives them order—together they convert debate into design.”
E.3:End
FPF Ecosystem Family Architecture
Problem frame
The FPF ecosystem contains three maintained families: the normative Conceptual Core, executable or machine-checking Tooling Reference material, and learning-oriented Pedagogical Companion material. If these families are mingled without a clear architectural separation, the ecosystem becomes difficult to navigate, govern, and maintain. Users cannot easily distinguish binding rules from helpful advice, and the entire framework's release cycle becomes coupled to its most volatile component.
Problem
How can we structure the FPF ecosystem to ensure a clean separation of concerns between normative concepts, didactic materials, and executable tooling? A formal architecture is required to maintain conceptual purity, enable independent evolution of components, and provide a clear map for all stakeholders.
Forces
Solution
The FPF ecosystem is formally stratified into three canonical FPF ecosystem families. Each family has a distinct purpose and is governed by different rules, ensuring a clear separation of concerns. The interaction between these families is governed by the Unidirectional Dependency Principle (see Guard-Rail E.5.3).
-
The Conceptual Core (The Canon): This family contains the normative FPF patterns, kernel definitions, rules, and invariants. It is the canonical FPF pattern set for universal FPF content. It is defined to be tool-agnostic and notation-independent.
-
The Tooling Reference: This family contains executable tools and machine-checkable support publications that implement or verify the normative rules of the Core. This includes reference linters, simulators, and data schemas. This family makes Core rules operational without becoming the Core pattern set.
-
The Pedagogical Companion: This family contains non-normative, didactic publications designed to help humans learn and apply FPF. This includes tutorials, worked examples, and playbooks. This family explains the Core and the Tooling Reference without changing Core meaning.
Archetypal Grounding (System / Episteme)
-
For a
U.System:- Conceptual Core: Defines the universal pattern
U.System. - Tooling Reference: Provides a modeling language profile or a serialization schema for modeling systems.
- Pedagogical Companion: Provides a tutorial on how to model a water pump using that profile.
- Conceptual Core: Defines the universal pattern
-
For an
U.Episteme:- Conceptual Core: Defines
U.Epistemeand the F-G-R assurance tuple components (F/Rcharacteristics plusGas ClaimScope). - Tooling Reference: Provides the reference linting tool to automatically score epistemes.
- Pedagogical Companion: Provides a case study on how a scientific theory's R-score evolves over time.
- Conceptual Core: Defines
Conformance Checklist
Consequences
Rationale
This pattern establishes the macro-architecture of the entire FPF ecosystem. By separating the normative Core from executable Tooling Reference material and learning-oriented Pedagogical Companion material, it creates a system that is simultaneously stable, agile, and accessible. This layered architecture is a proven pattern in large-scale systems, from the OSI model in networking to the structure of modern operating systems, and it is essential for FPF's long-term health and scalability.
Relations
- Instantiates: P-5 (FPF Layering) at a macro-level.
- Is Constrained by: E.5.3 (Unidirectional Dependency).
- Is Foundation For: The entire authoring and governance model, as it defines the "territories" where different rules apply.
“A canon without a rationale is scripture; a rationale without a canon is gossip. FPF keeps both, fused in patterns.”
E.4:End
Four Guard‑Rails of FPF
Problem frame
FPF positions itself as a timeless, universal “operating system for thought.” Collaborative projects of this scope face four predictable entropic pulls:
- Implementation gravity – concept prose accretes tool jargon.
- Notation lock‑in – one diagram style becomes “the language.”
- Convenience cycles – quick fixes create reverse dependencies.
- Disciplinary monoculture – implicit bias colours “universal” rules.
Left unchecked, these forces erode Pillars P‑1 Cognitive Elegance, P‑4 Open‑Ended Kernel and P‑5 FPF Layering.
Problem
Without explicit, non‑negotiable protectors the Conceptual Core would slowly:
- entangle with transient technology terms,
- hard‑freeze into a single dialect,
- devolve into a tightly coupled “big ball of mud”,
- betray its trans‑disciplinary promise.
Forces
Solution — the Four Guard‑Rails
FPF establishes four architecturally enforced guard‑rails that every Core, Tooling, and Pedagogy artefact must obey. They function as an “immune system” resisting each entropic pull. Scope note (conceptual, not lint). These guard‑rails regulate the architecture of thought—concepts, claims, and their relations. They do not mandate tools, file formats, notations, or workflows; any linting or automation lives outside the Core and is optional, provided it preserves these conceptual constraints.
Concrete rules for each rail live in patterns E.5.1 – E.5.4.
Archetypal Grounding (System / Episteme)
Conformance Checklist
Consequences
Rationale
A constitution without enforcement degrades into dead‑letter rules. The four guard‑rails translate abstract Pillars into concrete, testable constraints. Grouping them under one umbrella pattern:
- gives newcomers a single “safety index” to consult,
- makes compliance binary (pass / amend),
- provides a stable anchor for future automated conformance tools—without mentioning any specific engine, thus honouring GR‑1 itself.
They collectively instantiate Pillars P‑1, P‑2, P‑4, P‑5 and reinforce the precedence order defined in E.3.
Relations
- Comprises:
- Depends on:
- Constrains: every Core, Tooling, and Pedagogy artefact; all DRRs.
E.5:End
DevOps Lexical Firewall
Problem frame
The FPF Core is meant to remain valid across decades and technology generations. Implementation details—file formats, build pipelines, runtime flags—evolve rapidly and differ between domains. When such terms invade normative prose, the Core ages as quickly as the tools it mentions.
Problem
Conceptual erosion: a rule that cites a transient technology becomes obsolete when that technology fades, forcing unnecessary Core revisions and fragmenting historical audits.
Forces
Solution
Establish a Lexical Firewall around the Conceptual Core (conceptual constraint; not a build‑time linter):
-
Forbidden lexicon Normative patterns SHALL NOT contain tool‑or file‑specific words (e.g. protocol keywords, file extensions, IDE commands). Permissible wording: “a reference parser”, “a serialisation schema”.
-
Indirection rule When a Core concept needs an executable illustration, the pattern cites the Tooling Reference family artefact by conceptual name, never by concrete path or syntax.
-
Glossary pointer If an unavoidable technical term appears, it is defined in a Tooling Glossary outside the Core and referenced by conceptual alias—not embedded. Non‑normative automation. Machine checks MAY exist in Tooling; they are advisory and MUST NOT be imported into the Core.
Archetypal Grounding (System / Episteme)
Conformance Checklist
Consequences
Rationale
Language shapes thought. By firewalling transient jargon, we uphold P‑1 Cognitive Elegance (clarity), P‑2 Didactic Primacy (domain‑neutral exposition) and P‑5 FPF Layering (clean separation between Core and Tooling). The rule is content‑agnostic and thus itself immune to the very decay it prevents.
Relations
- Parent umbrella:
pat:constitution/guard‑rails(E.5) - Constrains: every pattern in Conceptual Core
- Instantiates pillars: P‑1, P‑2, P‑5
E.5.1:End
Notational Independence
Problem frame
FPF concepts must travel across academic disciplines, modelling tools, and future notations we cannot yet foresee. If a normative pattern binds its meaning to one diagram style, file syntax, or markup dialect, the concept ages as soon as the notation does.
Problem
Semantic lock‑in: when a definition relies on a particular glyph set or diagram grammar, alternative communities either translate it—risking drift—or ignore FPF altogether.
Forces
Solution — Notational Independence Guard‑Rail (conceptual; semantics over syntax; not a notation mandate)
-
Semantics primacy Normative content SHALL define concepts in linguistic form first (plain English + mathematics if needed). Visual or syntax examples are secondary illustrations.
-
Equivalence clause When an official alternate notation exists, the pattern must state: “Representation A and Representation B are semantically equivalent under mapping M.”
-
Reference indirection If the Core cites a diagram, it does so by conceptual role (“reference boundary schematic”) rather than by file or syntax name.
-
Conceptual prefix neutrality FPF conceptual prefixes (e.g.,
U.,Γ_,ut:,tv:,ev:,mero:) are cognitive namespaces, not syntax tokens. Core patterns MUST NOT tie their meaning to any concrete serialisation or URI scheme for these prefixes; any expansions are illustrative only and live in Tooling or Pedagogy. -
Cards and other "forms" Cards, tables and other "forms" exist in FPF core only as conceptual model, not as data model, thus no need to data-related notation or notation for lint. Comformance checklist and quards is also conceptual, argumentation like "this will ease machine check" is forbidden, no machine checking is intended in core; machine checks and linters live only in Tooling.
Archetypal Grounding (System / Episteme)
Conformance Checklist
Consequences
Rationale
Language and diagrams are tools, not truths. By elevating semantics over syntax, FPF maintains P‑1 Cognitive Elegance and P‑2 Didactic Primacy while safeguarding P‑5 FPF Layering: tooling layers can add new renderers without Core edits.
Relations
- Parent umbrella:
pat:constitution/guard‑rails(E.5) - Constrains: every normative Core pattern and official alternate rendering
- Instantiates pillars: P‑1, P‑2, P‑5
E.5.2:End
Unidirectional Dependency
Problem frame
FPF separates artefacts into stable Conceptual Core, executable Tooling Reference, and fast‑evolving Pedagogical Companion (see E.4 FPF Ecosystem Family Architecture). If dependencies can point both ways, volatile layers will eventually drag the Core into rapid revision cycles or introduce domain‑specific bias.
Problem
Architectural gravity: a tutorial or helper script adds a new feature, Core patterns import it “temporarily,” and within months the supposedly timeless layer depends on transient assets—breaking Pillar P‑5 FPF Layering.
Forces
Solution — One‑Way, Acyclic Imports
Define a strict partial order over FPF ecosystem families and guard meaning flow (see E.10 V-1): imports point only upward in stability, and no Core semantics may derive from Tooling/Pedagogy. No linters or machine checking in Conceptual Core.
imports is a dependency DAG, not a specialisation relation (normative). Whenever an artefact exposes an explicit imports : [...] list (e.g., SignatureManifest.imports in A.6.0), treat imports as dependency edges governed by this section: the induced imports graph MUST be acyclic (a DAG) and MUST respect the declared direction. imports MUST NOT be used to encode specialisation (e.g., ⊑ / ⊑⁺ between mechanisms); specialisation relations are declared separately via the relevant morphism and specialisation-chain rules (e.g., A.6.1 U.MechMorph).
Pedagogical Companion ⟶ Tooling Reference ⟶ Conceptual Core
-
Allowed edges Dependencies MAY point only upward (toward greater semantic stability). No cycle is ever permitted.
-
No downward import Conceptual Core patterns SHALL NOT import Tooling Reference or Pedagogical Companion family members. Tooling Reference family members SHALL NOT import Pedagogical Companion family members.
-
Future layers Any new family is inserted below an existing one or becomes part of the Tooling or Pedagogy strata; the ordering extends accordingly.
Archetypal Grounding (System / Episteme)
Conformance Checklist
Consequences
Rationale
One‑way import graphs are a proven safeguard in operating systems (kernel vs user land) and layered protocols. Here the rule operationalises Pillars P‑4 Open‑Ended Kernel and P‑5 FPF Layering, ensuring that innovation happens “below” without contaminating the timeless Core.
Relations
- Parent umbrella:
pat:constitution/guard‑rails(E.5) - References family definition:
pat:constitution/fpf-ecosystem-family-architecture(E.4) - Instantiates pillars: P‑4, P‑5
- Constrains: All artefact imports recorded in DRRs or SCRs
E.5.3:End
Cross‑Disciplinary Bias Audit
Problem frame
FPF calls itself trans‑disciplinary, but every author carries implicit metaphors from a source domain. If those metaphors leak into “universal” patterns, practitioners from other fields disengage or mis‑interpret the rules.
Problem
Unrecognised bias hides in wording, examples, unit choices or principle weighting. Once embedded in normative language, such bias is hard to remove and contradicts Pillars P‑2 Didactic Primacy and P‑8 Cross‑Scale Consistency.
Forces
Solution — Principle‑Taxonomy‑Guided Bias Audit
-
Bias‑Lens set Every normative pattern is assessed through five lenses that match the Principle classes from E.3:
Gov,Arch,Onto/Epist,Prag,Did. -
Equilibrium question For each lens ask: “Does the pattern over‑privilege this class or silence it?” Examples:
- Over‑reliance on
Onto/Epistprecision may ignorePragcost. - Dominant
Archmetaphors may alienateDidaudiences.
- Over‑reliance on
-
Scope‑or‑Balance rule
- If imbalance is found and universality is intended, re‑phrase to restore balance.
- If imbalance is intentional (domain‑specific pattern), mark the scope explicitly: “Applies primarily to thermodynamic systems.”
-
Audit trace The pattern carries a short Bias‑Annotation paragraph recording which lenses were tested and any scoping statement. No workflow checklists or reviewer metadata or other data and data format and data governance tips is stored in the Core.
Archetypal Grounding (System / Episteme)
Conformance Checklist
Consequences
Rationale
Coupling the audit directly to the Principle Taxonomy keeps the guard‑rail concept‑driven, not workflow‑driven. No mention of review boards, CI‑jobs, or checklists appears in the Core; such mechanics belong in the Tooling Guide. This guard‑rail therefore satisfies GR‑1 (Firewall) while securing Pillars P‑2, P‑7 Pragmatic Utility, P‑8.
Relations
- Parent umbrella:
pat:constitution/guard‑rails(E.5) - Depends on:
pat:constitution/principle‑taxonomy(E.3) - Constrains: All normative patterns claiming universality
E.5.4:End
Didactic Architecture of the Specification
Problem frame
FPF addresses readers from at least two characteristics of diversity:
- Disciplinary – systems engineers, knowledge scientists, ethicists.
- Experience – newcomers need intuition; experts need rigour.
Past drafts mixed governance mandates with domain examples, producing a steep learning curve and repeated “forward‑reference” detours.
Problem
If core ideas are buried under formalism or scattered across parts, readers either give up or misuse the framework. We need a didactic macro-order that guides cognitive load from low to high while keeping normative sections discoverable, without letting readers confuse document order with one universal first-practical workflow.
Forces
Solution — “On‑Ramp to Archetypes first, Authoring last” sequence
Document order is distinct from first-practical entry
The macro-order of the document is a didactic scaffold, not a universal practical workflow. Entry navigation publication units such as README, Preface, ToC query cues, E.11 entry-distribution loci, and I.2 expanded entry-disambiguation cases are informative navigation only: they may cross Parts when that is the first honest entry for the question under repair, and they do not create a second normative process history.
The "On-Ramp First" Macro-Structure: The specification is ordered to create a smooth cognitive ramp:
- It begins with an informal, non-normative Preface (The On-Ramp), which uses storytelling and concrete examples (System and Episteme) to build intuition.
- It then proceeds through the normative Parts (A-D), moving from the foundational kernel to the rich patterns of trans-disciplinary reasoning.
- It concludes with the authoring rules (Part E) and appendices, ensuring that this "meta" content does not obstruct the primary learning path.
-
Preface (On‑Ramp) Informal tour; introduces
U.SystemandU.Epistemevia concrete stories before any normative language appears. -
Part A Kernel Minimal holonic ontology and the Transformer principle give readers the essential vocabulary.
-
Part B Trans‑disciplinary Reasoning Tell‑Show‑Show pedagogy: universal rule → Sys‑CAL example → KD‑CAL example.
-
Part C Extension Patterns Domain‑specific calculi expand on the examples already seen.
-
Part D Ethics & Conflict Optimisation Shows reflective patterns only after readers grasp holonic reasoning.
-
Part E Authoring Constitution, guard‑rails, and contributor rules come last; novices can postpone reading.
-
Appendices (Annexes) Tutorials, tooling guides, and migration scripts live here.
Archetypal Grounding (System / Episteme)
Conformance Checklist
Consequences
Rationale
Educational research shows retention improves when abstract rules are immediately paired with contrasting illustrations. By fixing the reading order and mandating Tell‑Show‑Show inside every architectural pattern, FPF embeds pedagogy into its architecture, realising Pillars P‑2 Didactic Primacy and P‑1 Cognitive Elegance without weakening rigour.
Relations
- Depends on:
pat:constitution/guard‑rails(GR‑1 ensures example jargon stays outside Core). - Constrains: Placement of all Parts, patterns, and appendices.
- Instantiates pillars: P‑1, P‑2
E.6:End
Archetypal Grounding Principle
Problem frame
Universal rules are powerful only when readers can grasp them. In FPF the
Conceptual Core speaks in substrate‑agnostic language: U.Holon,
Γ‑aggregation, MHT emergence. Practitioners need to “see” those rules in
familiar matter—physical hardware or bodies of knowledge—before they can
reuse them.
Problem
A purely abstract statement risks two failures:
- Didactic failure – readers dismiss the pattern as “too meta,” violating Pillar P‑2 Didactic Primacy.
- Unproven universality – without cross‑domain instantiation the rule remains an untested claim.
Forces
Solution — mandatory Archetypal Grounding subsection
Every architectural pattern SHALL include a dedicated section, titled exactly “Archetypal Grounding,” that shows how the abstract law SCRs in FPF’s two canonical holon flavours:
U.System– the archetype of a physical, operational holon.U.Episteme– the archetype of an abstract, epistemic holon.
This enforces a repeatable Tell‑Show‑Show rhythm:
Archetypal Grounding (of this pattern itself)
Conformance Checklist
Consequences
Rationale
Tell‑Show‑Show is a proven pedagogical sequence. By making it normative, FPF hard‑codes P‑2 Didactic Primacy into the fabric of every architectural pattern while still honouring P‑1 Cognitive Elegance—the grounding section replaces brittle ad‑hoc anecdotes with a disciplined dual example. Linking scope‑justification to the five Principle lenses ties the pattern to the Taxonomy‑Guided Bias Audit and keeps governance language out of the Core.
Relations
- Implements macro flow:
pat:authoring/didactic‑architecture(E.6) - References base types:
pat:kernel/holon(A.1) (U.System,U.Episteme) - Interacts with bias guard‑rail:
pat:guard/bias‑audit(E.5.4) via CC‑AG.3 - Constrains: Authoring template in
pat:authoring/pattern‑template(E.8)
E.7:End
FPF Authoring Conventions & Style Guide
Type: Architectural (A) Status: Stable Normativity: Normative (unless explicitly marked informative)
Use this when
Use E.8 when you are writing, revising, or reviewing one FPF pattern and need to know what shape, voice, reader-recognition role, and assurance material the pattern must carry before it can be treated as mature FPF text.
Use it especially when a draft is technically correct but hard to use: the cold reader cannot tell when to apply it, what action to take, what mistake that action prevents, which related pattern governs a specific outside claim, or which assurance material is informative rather than the first user-facing guidance.
Not this pattern when. Use E.9 when the main work is deciding why FPF should change and how that decision is distributed across patterns. Use E.19 when the main work is an admission or refresh review. Use the local domain pattern when the question is what FPF says inside that domain rather than how a pattern should be authored.
What goes wrong if missed
A pattern can satisfy a checklist and still be practically unreadable. It may open with package architecture instead of a recognisable working moment, bury its payoff, hide the pattern that governs a specific outside claim, or let assurance prose silently replace the reader-facing claim. The result is a formally neat text that authors can defend but practitioners cannot reliably use.
What this buys
E.8 gives FPF authors one shared pattern shape and one shared authoring discipline: recognition text first, assurance text second, canonical sections present, terminology kept stable, SoTA used as current practice grounding rather than decoration, and practical consequences visible before a reader has to reconstruct the architecture.
First useful move. Put the working situation, first action-guiding move, practical payoff, ordinary boundary, and nearest heavier assurance condition into the recognition text before tightening template details or conformance material.
Cheap stop. If the draft already gives a cold reader the working situation, first useful move, practical payoff, ordinary boundary, and nearest heavier assurance condition, do not add more authoring apparatus just to look mature. Use conformance material to verify that guidance; do not let it replace the guidance.
FPF-governed wording extension. Add heavier assurance, conformance, SoTA grounding, relation material, or related-pattern material only when the light recognition text would leave a false claim, unstable primary EntityOfConcern, hidden governing pattern for a specific claim/relation/boundary, unbacked practical payoff, or misleading admissible use.
When an authoring pass claims quality improvement rather than ordinary drafting, keep these roles distinct: E.22 frames the improvement-oriented quality-evaluation question, the object-under-improvement evaluation such as E.21 or E.9.DA supplies value meanings and stop meanings, C.16.Q repairs overloaded quality and evaluative-characterization wording, C.25 carries engineering quality-family endpoints when those endpoints are claimed, and E.23 governs any repeated quality-improvement method. Closing checklist rows or satisfying a review profile is not by itself quality improvement.
Quality/projection evidence placement. Pattern-quality status, corpus projection, README/ToC/E.11/I.2 alignment, card/retrieval evidence, cold-reader evidence, monolith parity, landing evidence, developer/reviewer/executor correspondence, and other quality-carrier facts belong in the evaluation result, review run record, projection carrier, or release/landing evidence carrier. They do not belong anywhere in the pattern itself, including notes, appendices, Relations, Rationale, SoTA-Echoing, examples, tables, and checklist rows, unless the pattern's own EntityOfConcern and intended-reader move are that evaluation/projection work. This is a role test, not a lexical test: the same word may be user-facing content in an evaluation pattern and carrier leakage when it reports quality, landing, projection, or role-turn state for this pattern.
Pattern roles across coupled flows. In authoring guidance, speak at the pattern level. One pattern may be the pattern of concern for different roles in different flows: an author repairs it, E.21 evaluates it, E.19 admits or refreshes it, a practitioner selects and uses it, and a later evaluator may reopen it. Those flows may be joined in one TransductionGraph through transfer, feedback, return, projection, landing, edition-change, or repair relations, but their roles and EntityOfConcern assignments stay distinct. The pattern itself also carries its own primary EntityOfConcern: the subject its Problem/Solution/guidance is about. Development-flow evidence may cause rewrites, but reviewer/executor exchange, status, projection proof, landing proof, and use-found evidence remain in their carriers rather than entering the pattern as if they were guidance for the intended reader. This is the pattern-authoring instance of the broader TGA/P2W coupled-flow rule: a publication, principle scheme, work plan, or self-evolving specification flow may help create or govern later work without becoming the performed work, project evidence, gate passage, assurance, edition bump, or applied-edition content.
Maturity rule. Section completeness is not pattern maturity. A pattern matures when its Problem frame, Solution, worked cases, boundaries, and conformance checks all point to the same usable action guidance.
Primary EntityOfConcern in plain terms. The primary EntityOfConcern of E.8 is the authored FPF pattern: its canonical sections, reader-recognition role, wording discipline, examples, rationale, anti-patterns, SoTA-Echoing, and relations.
Primary working reader. The first reader is an FPF author or reviewer shaping pattern prose for later practitioners and managers. The downstream practitioner is the reader the pattern must ultimately serve, so the authoring guide must model the same recognition discipline it requires.
Pattern Kind In Plain Terms
An FPF pattern is an action-guiding method description for a recurring working situation. It is applied by an intended FPF user who recognizes the situation, understands the problem and forces, and then uses the Solution to decide what to do, what to stabilize, what to avoid, and what practical change should follow.
Pattern application is the user-side act: the user recognizes the working situation, applies the pattern, and uses the Solution to shape the next admissible move. Its Problem frame, Problem, Forces, Solution, Consequences, worked slices, and anti-patterns carry the guidance. Its Conformance Checklist checks whether that guidance has been applied and authored correctly; it must not replace the Solution or turn the pattern into a control form.
The primary content-bearing job is constructive method guidance: the pattern must say what the user should do so the recurring error does not arise. Error prevention, auditability, and conformance checks are evidence that the guidance is usable; they are not the pattern's center. The first substantive content in the opening Problem frame and Solution must be a positive subject spine: the primary EntityOfConcern kind, the first admissible action-guiding move, the practical delta, and the few boundaries needed for that first move. The text must not replace subject content with repeated guards, distinctions, related-pattern mappings, references, mini-rules, definitions, caveats, architecture rationale, or quality/projection evidence unless the repetition adds a new local action, case, evidence value for the user, or first-reading recognition need. Copying distinctions owned by other patterns into this pattern as repeated "do not confuse our EoC with their EoC" prose is the same repetition problem. Boundary doctrine is pattern content like any other doctrine: if strict distinction, non-use, ToC navigation, or the governing pattern for a claim/relation/boundary already carries the distinction, do not repeat it locally. Use one short pattern id or governing-pattern statement when needed. Add local boundary prose only when it states a documented local confusion and exact stop condition that the owning pattern does not already carry. The repair is to say clearly what this pattern's own EntityOfConcern is, not to enumerate the unbounded set of other things it is not.
The same rule blocks pattern-application drift for any FPF object, not only for patterns. Name the object by its FPF kind when the kind is known: a pattern is a pattern, a claim is a claim, a relation is a relation, a row is a row, a source is a source, a publication is a publication, a WorkPlan is a WorkPlan, and so on. FPF patterns are applied to situations, claims, texts, or work objects. Use governing pattern only in the typed form governing pattern for <claim/relation/boundary> when one pattern actually governs that specific item; use related pattern for a looser pattern relation; use relation only for the relation itself. A compact pattern-reference sentence should be declarative: this pattern applies to <situation/claim/object>, this claim is governed by <pattern id>, this relation is recorded in Relations, this entry cue belongs in README, ToC, E.11, I.2, or a retrieval/projection carrier, or this pattern application stops under <condition>. Relations are positive claims, not catalogs of absent relations. Detailed discoverability belongs in README, ToC query cues, E.11, I.2, or retrieval/projection carriers; compact related-pattern statements belong late in Relations after the positive subject/action spine. Ordinary references use ordinary reference apparatus: a pattern id in prose, a citation, Builds on, Coordinates with, Relations, ToC, README, E.11, or I.2. They are also not repeated as many conditional sentences or small variants when one compact definition, boundary, table, Relations, ToC, README, E.11, I.2, or retrieval/projection locus already carries the same content family.
Treat precision-restoration problems in pattern prose as one profile with five layers: word/head/use precision, phrase apparatus, repetition/distribution, role/carrier separation, and pattern application. Do not add a local row for each new symptom. E.8 requires the author to keep the positive subject/action spine first; F.19 repairs phrase-level apparatus; E.10, E.10.ARCH, F.18, or the governing pattern repairs remaining word/head/use precision; E.21 measures the collapsed effect on pattern quality.
A wording cleanup is kind-preserving by default. Before an author accepts a changed FPF-governed phrase as a repair, the pre-repair and post-repair EntityOfConcern, kind, relation or claim kind, slot or use-position, admissible use, and scope must be recoverable when those items are live. This is a bounded complete preservation check, not an order to formalize ordinary prose or unchanged text and not permission to choose "no edit" as the easy minimum. Leaving text unchanged closes only when the phrase is not triggered, ordinary prose, or already satisfied by value with loci; otherwise the finding remains open. Removing a trigger word or replacing a generic head is not a repair when it changes the ontology: for example, a graph-shaped method cue must not be narrowed into a work sequence unless an accepted decision explicitly changes the kind and consequences. If a relation, signature, mathematical-lens, role, method, work, or evidence position is live, the author cites the governing pattern for that position instead of restating its ontology in E.8. If the phrase hides several kinds, split them or send the decision to the governing pattern or DRR; do not flatten them into one cleaner-looking word.
For apparatus-overwrap, follow F.19. E.8 adds only the pattern-authoring placement rule: after boilerplate apparatus is removed or moved and remaining content is precision-restored under E.10, E.10.ARCH, F.18, or the governing pattern when needed, pattern prose keeps only the intended user's admissible move and boundary. Process, architecture, review, quality, projection, and release evidence stay in their own carriers unless they are rewritten as that user-facing move.
When an action-adjacent pattern classifies wording, a name, a publication face, an explanation class, a comparison unit, or another semio-facing object, that classification is only useful if it returns to action guidance. The pattern must say what use or action is admissible now, what related use or action is not admissible under the current pattern, and which FPF pattern governs the case when the claim is a work, evidence, gate, decision, assurance, engineering-justification, release, or reliance claim.
Semio-Echoing is admissible only as a trigger-controlled auxiliary placement. Use it when E.10, C.2.P, or E.10.ARCH has exposed a wording-use overread whose EntityOfConcern, episteme/publication stack, alignment path, and remaining admissible reader move are recoverable by value. Do not add it as a generic warning block. In non-semio patterns the primary content remains the pattern's own EntityOfConcern and admissible move; semio material stays as a thin cue, related-pattern relation named by value, local recovery line, or named description and publication-use boundary section unless it changes that move or blocks a documented overread. If the material mainly says that a description, view, publication, record, card, diagram, source, or file is not a permission, promise, prescription, evidence item, assurance verdict, decision, gate passage, release, work occurrence, or authority source, keep it out of the subject Solution and put it in that boundary section or in the exact description-publication pattern.
Problem frame
FPF grows through the addition of patterns written by authors from many disciplines. Without a shared structure and voice, the framework would fracture, violating Pillars P‑1 Cognitive Elegance and P‑2 Didactic Primacy.
Problem
Structural drift and stylistic fragmentation threaten three qualities:
- Comparability – readers cannot align patterns lacking common headings.
- Narrative cohesion – prose swings from dry jargon to informal blog style.
- Reviewability after guidance – missing sections hide boundary and assurance checks (Archetypal Grounding, Bias‑Annotation) that let reviewers verify the action guidance without replacing it.
Forces
Solution — One template, enriched by style principles
Canonical Pattern Template
Within each pattern, the canonical section headings SHALL appear in the order below.
For each canonical content section heading (1–12), the <Title> component (after the heading separator, e.g. -) MUST start with the canonical section title (case-insensitive match; canonical capitalisation preferred); an optional clarifier after an em dash is allowed (e.g., Solution — …).
The Footer marker (section 13, if present) is a sentinel and is governed by H-9 rather than the standard <FullId> - <Title> shape.
Extensibility.
Authors MAY add additional sections. Prefer expressing them as subsections under the nearest canonical section (e.g., 4.1, 4.1.1 under Solution). If an additional pattern-level section is necessary, it MUST NOT delete or reorder the canonical sections and its title MUST NOT shadow a canonical title.
Mandatory vs optional.
- Canonical sections 1–13 are mandatory in every pattern.
- Canonical sections carry content. Authors must not use omission placeholders as section substitutes; when a section is intrinsically small, write the smallest content-bearing grounding, misuse, boundary, or reduced-case statement that preserves the section's role.
- First substantive authoring seed. The first non-empty authored body of a pattern SHALL already instantiate the canonical section frame by value: title line, header block, canonical sections 1–13, and the footer marker.
- Recognition-role openings and first-minute working guidance belong inside that canonical frame. Any retained pre-template entry material must also stay inside that same canonical frame rather than appearing as one pre-template opening memo. Authors MUST NOT seed one pre-template opening memo and postpone canonical sectioning,
Conformance Checklist, or footer-marker installation to one separateE.19, assembly, or review-repair pass.
Template:
- Title line: Hashes + FullId +
-+ Pattern Title; optional(informative)note. - Header block: Type, Status; optional Normativity override.
- Problem frame
- Problem
- Forces
- Solution
- Archetypal Grounding (Tell-Show-Show; at least one content-bearing grounding slice, reduced grounding case, or ordinary/non-use boundary)
- Bias‑Annotation
- Conformance Checklist
- Common Anti‑Patterns and How to Avoid Them (at least one local misuse, overread, or exact boundary case; no placeholder)
- Consequences
- Rationale
- SoTA-Echoing (post-2015 practice alignment; terminology drift and deltas; full comparison or reduced SoTA required whenever external or internal practice changes the Solution)
- Relations
- Footer marker
Footer marker. End each pattern with a single visible sentinel heading line by itself: ### <PatternId>:End. This makes truncation detectable even when HTML comments are stripped or surfaced by editors. The footer marker is intentionally content‑free: do not place prose under it.
Note. Pattern boundaries are still parseable by scanning for the next pattern heading (## …), but an explicit :End marker helps retrieval pipelines (and LLM prompts) distinguish “this chunk is the whole pattern” from “this chunk was cut mid‑pattern”.
Heading & ID discipline (human tooling + retrieval)
FPF is often consumed through full‑text search and retrieval (RAG). A reader or an LLM may see a subsection without its parent headings, so headings must be self‑identifying.
H-1 (Heading shape). Every pattern heading and every subsection heading inside a pattern SHALL follow:
<hashes> <FullId> - <Title> (optional note of non‑normativity)
Exception. The Footer marker is a sentinel heading and is governed by H-9, not by the standard <FullId> - <Title> shape.
H-2 (Heading separator). The canonical separator between <FullId> and <Title> is - (ASCII, space-hyphen-space).
Previously authored text may use Unicode dash variants such as – or — as separators; tooling SHOULD treat those variants as migration candidates, and authors SHOULD migrate touched headings to -.
H-3 (FullId). FullId is the full hierarchical address.
For a pattern heading it is the pattern ID (e.g., A.2, E.10.D1).
For headings inside a pattern, append dot‑separated ordinal section numbers after the colon (:) (e.g., A.2:4.4, E.10.D2:3).
Exception: the Footer marker uses the reserved sentinel token :End as defined in H-9.
The colon (:) is reserved for section paths and MUST NOT appear in pattern IDs.
H-4 (Ordinals). Ordinals in section paths SHOULD track the canonical template numbering (1 = Problem frame, …, 13 = Footer marker) to maximise cross‑pattern comparability. During refactors or in previously authored patterns, ordinals MAY be local. In that case, the canonical section title at the start of <Title> is the semantic key; readers and tools MUST NOT infer section semantics from the ordinal alone.
Note: the Footer marker itself is exempt from ordinal encoding; it uses the reserved token :End (see H-9).
H-5 (Where kind and normativity are declared). Pattern kind (e.g., Architectural / Definitional) MUST be declared in the Header block, not encoded into the heading text. Normativity (normative / informative) MUST also be declared in the Header block when it deviates from the default. If a reminder is needed for readers, authors MAY add a short parenthetical note at the end of the heading (e.g., (informative) / (non‑normative)), but headings MUST NOT use square‑bracket tags.
H-6 (Heading levels). Heading levels MUST preserve a fixed offset between structural layers (Part or Cluster (flat) → Pattern → Pattern sections):
- Part and Cluster headings MUST use
#(level 1) across the file. - A Pattern heading MUST use
##(level 2). - Inside a pattern, each nested section MUST add exactly one
#per level (e.g.,## A.2 - …,### A.2:2 - …,#### A.2:2.1 - …).
H-7 (Ellipsis discipline). Authors MUST NOT use three consecutive full stops/dots (...) as punctuation in headings or narrative prose. Authors MUST use the Unicode ellipsis … (U+2026) instead. For editorial elisions in quotations, authors SHOULD prefer […] to make the omission explicit and distinguish it from retrieval truncation.
Exception: literal three‑dot sequences that are part of an external language’s syntax MAY appear only inside code spans or fenced code blocks.
H-8 (Normative keywords). The key words MUST, MUST NOT, REQUIRED, SHALL, SHALL NOT, SHOULD, SHOULD NOT, RECOMMENDED, MAY, and OPTIONAL are to be interpreted as described in RFC 2119, as clarified by RFC 8174 (only when capitalised). Authors SHOULD avoid informal deontic phrasing (“need to”, “is required to”) in normative clauses.
Deontics vs admissibility. Use RFC keywords only for deontic obligations (requirements on authors, reviewers, implementers/tooling, or published pattern or companion texts) — i.e., things an agent can choose to do or omit. Do not use RFC keywords to state definitions, structural invariants, typing rules, or other admissibility conditions of the modeled world.
When you need an enforceable constraint that is mathematical rather than deontic, express it as a non‑deontic predicate using one of: Definition:, Invariant:, or Well‑formedness constraint: (optionally with formal quantifiers). Prefer mathematical terms like cardinality 1..1 (total) / 0..1 (partial) / 0..n over deontic adjectives like “mandatory or optional” when the intent is cardinality, not duty.
Admissibility predicate discipline (recommended shape).
When expressing admissibility/validity constraints as predicates (Definition: / Invariant: / Well‑formedness constraint:):
- Authors MUST NOT use RFC keywords inside the predicate block.
- Authors SHOULD give each predicate a stable identifier and short name (e.g.,
RA‑1 (Locality),RE‑3 (Method gate)), so that Conformance Checklist items can reference it without re‑authoring the rule. - Authors SHOULD write the constraint as a declarative predicate (optionally quantified), e.g.,
role ∈ Roles(context), rather than as “X MUST …”. - If the constraint needs to be checked as part of pattern conformance, authors SHOULD reference the predicate identifier from the Conformance Checklist (and/or call out validator behaviour), rather than duplicating the predicate with RFC keywords.
H-9 (Footer marker sentinel). Footer marker SHALL be a single heading line whose FullId is the pattern ID followed by the reserved sentinel token :End (no ordinals, no title, no square‑bracket tags):
### <PatternId>:End
It is the only allowed heading inside a pattern whose section token is non‑numeric. It MUST be the final line of the pattern and MUST NOT carry any prose. Tooling and readers MUST treat it as a boundary sentinel, not as a semantic section.
Unification note: historic A‑ and D‑templates differed only by the presence/absence of Bias‑Annotation and Relations; the unified template keeps the headings everywhere and requires every heading to carry content-bearing grounding, boundary, consequence, rationale, source-use, relation, or reduced-case material rather than an omission placeholder.
The Alexandrian pattern canon historically calls Problem frame “Context”. FPF avoids that label because Context is already overloaded in FPF (e.g., U.BoundedContext and its Plain‑register label).
Stylistic Principles (S-0 ... S-19)
Authors use the principles as a scaffold, not a straitjacket: the goal is coherent, engaging insight. Engagement remains subordinate to semantic discipline: hooks, quotable lines, Plain restatements, and didactic images may improve recognition, but any ontological, evidence, causal, assurance, bridge, gate, work, decision, or admissibility claim kind or admissible-use boundary they carry must be recoverable through the governed Tech reading or named neighboring pattern. Ordinary Plain prose without that claim kind or admissible-use boundary stays ordinary prose.
S-0 (Narrative Flow Seven-Step Heuristic) — explanation Narrative flow is recommended to follow these steps: Hook -> Frame -> Weave -> Ground -> Bridge -> Flow -> Close.
Brief explanations:
Narrative Flow Heuristic also operationalises S-1 (Density w/o Jargon), S-2 (Internal Cohesion), S-4 (Contextualisation), and S-6 (Quotable Closers).
Recognition text and assurance text
Every canonical pattern SHALL stabilise one primary EntityOfConcern, relation record, or claim record early enough that a cold reader can tell what kind of thing the pattern is actually governing. If ordinary forms vary (note, sheet, guided UI, rendering, review aid), the text must make explicit which of those are merely presentation forms of one primary selected EntityOfConcern, relation, or claim and which would instead name a different act, process, work-result record, or governing companion. Recognition and assurance texts may refine that selected item differently, but they must not silently swap the central kind.
If a pattern uses a broad umbrella or head together with a narrower operative branch, the text must also make the stack explicit early enough for first reading: what the broad head names, what the current narrowed branch is, what primary EntityOfConcern, relation record, or claim record is actually in play, what move is being carried by that object, and what wider work or process remains outside the pattern. A qualifier alone does not restore that stack.
Under F.18 local-first naming, the canonical pair here is recognition text and assurance text.
The earlier provisional recognition shell / assurance shell wording is retired.
These names refer to two reading-order roles carried by existing sections or projections inside one pattern; they do not mint new authoritySourceRef targets, governing-pattern relations, publication-form/face kinds, publication-face kinds, or a second face family.
A third didactic-content role remains optional and is justified only when the family is especially easy to misuse, easy to over-read, or hard to teach without extra scaffolding.
The recognition text is the first-reading text.
It is the part of the pattern that lets a cold working reader recognise the situation quickly enough to decide whether to keep reading.
It should start from a subject-domain or practice moment before internal taxonomy whenever the pattern is meant to help real work rather than only internal canon maintenance.
In practice it usually appears in an early Use this when line or equivalent opening, plus the upper parts of Problem frame, Problem, Solution, Consequences, and nearby worked slices.
Its job is to make visible:
- what ordinary working situation this pattern is for;
- what goes wrong if the pattern is missed;
- what the pattern buys the reader in practice;
- when this is not the right pattern;
- what primary
EntityOfConcern, relation record, or claim record is actually being kept stable; - and, when technical terms must appear early, a pairwise plain gloss for each early FPF-governed technical term.
The assurance text is the second-reading text. It carries the heavier FPF-governed material that makes the pattern reviewable and auditable:
- declaration blocks and typed fields when those are part of the pattern's declared conformance or boundary claim;
- representation ontology, EntityOfConcern discipline, or primary-EntityOfConcern discipline;
- any minimal modeling or mathematical lens that keeps the primary
EntityOfConcern, relation record, or claim record stable; - guidance/check, invariants, admissibility, and stop or neighbouring-pattern conditions;
SoTA-Echoingwhen it carries explanatory work;- and the review hooks that let a broader or more consequential interpretation or use be checked explicitly.
The assurance text may sharpen, justify, and discipline the recognition text. It must not silently replace, strengthen, or universalize the claim that the recognition text made visible. If the recognition text says “this pattern helps with a bounded working situation”, the assurance text must not quietly turn that into an unbacked carrier claim, unbacked guarantee, or broader universality claim.
If a pattern claims universal or transdisciplinary status, that claim must already be visible in the recognition text.
It is not enough for universality to appear only later in a guidance/check sheet, declaration block, or SoTA-Echoing rationale.
A broad claim should therefore be demonstrated in the recognition text through at least three heterogeneous reader or domain situations.
When a compact matrix helps, F.16 is the preferred template for showing that breadth.
If SoTA-Echoing carries an FPF-governed claim, the practical implication of those rows should be recoverable from the recognition text and case bank rather than remaining a late-only justification layer.
A third didactic-content role means enough didactic and operational content that the pattern survives without nearby project documents. Typical indicators include:
- at least one concrete source and resulting-publication slice in Archetypal Grounding when the pattern governs transforms or publication change;
- at least one boundary-heavy example or anti-example when nearby patterns or other governing companion roles are easy to confuse;
- reviewer guidance that tells what to inspect first and which neighboring FPF pattern governs the failure mode and which project-side FPF kind and reference named by value carries the claim or effect;
- local mini-definitions or glossary material for recurring terms that would otherwise be recovered only from project context.
Pattern density is therefore not “more metadata” and not “longer tag lists”. It is the presence of enough recognition, assurance, and, when needed, extra didactic material that a reader can understand the pattern, apply it lightly in ordinary cases, and recognise when a heavier review path is required.
Package-form and governing-pattern relation role-word discipline
FPF pattern prose is not free-form descriptive English. When authors name a package-form or a governing-pattern relation, they must use role words with stable semantic intent.
Use the following distinctions explicitly:
This is a cross-cutting review discipline, not a replacement for local pattern lexica. For example, A.6.7 / A.19.CHR already carry the suite/kit/pack distinction, and E.17.1 already carries the viewpoint bundle/family/library distinction.
- governing pattern = the pattern that carries the primary guidance/check authority of the family;
- specialization = a named refinement under an existing governing pattern;
- overlay = a cross-cutting governance role or reading-order projection over existing governing patterns;
- profile = a declarative review/use role derived from a governing pattern rather than a replacement pattern;
- family = a recurring class of cases governed by one pattern or governing companion;
- bundle = a packaged set of defaults, allowances, or coordinated members;
- cluster = a navigation or reading-order grouping; not by itself a governing-pattern claim;
- suite = a coordinated set of members with explicit suite semantics under the governing FPF pattern or named authority reference;
- pack = an editorial or review grouping, not automatically a semantic-authority claim;
- kit = a reusable coordinated publication or boundary-description package with kit-level semantics under the governing FPF pattern or named authority reference;
- record = a case, report, or review record;
- umbrella = a provisional or review-stage head spanning possible subfamilies before a final governing FPF pattern, accepted
DRR, or pattern-body decision.
These words are not interchangeable. In particular, authors must not let cluster, bundle, suite, family, profile, overlay, or umbrella do the work of an unnamed governing-pattern relation. When that relation matters, it must be stated directly: specialization under ..., profile governed by ..., overlay over ..., bundle under ..., or another equally explicit formulation.
A pattern may reuse a pattern-native role word when that role is already defined by the governing pattern. Outside that case, authors must not improvise near-synonyms or shift between role words for stylistic variety.
Precision-restoration placement discipline
When a pattern or companion text is drafted from E.10 or E.10.ARCH, distinguish two authoring objects:
semanticAreais the Part-F semantic unit for a wording-use restoration row: one Concept-Set row, one UTS row, or an explicitly bounded row-set. It is declared withsemanticAreaBaseConceptandsemanticAreaSenseFamily.ontologicalNeighborhoodis the applicability neighborhood around that namedsemanticArea: nearby primaryEntityOfConcernkinds, relation kinds, claim records, governing FPF patterns, non-use boundaries, and remaining reader move that can carry the recovered meaning after the wording is repaired.pattern nestis the publication and specialization placement of a pattern under its governing pattern family.
These are not synonyms. A precision-restoration pattern is placed in the pattern nest whose primary EntityOfConcern, relation record, or claim record it repairs. Its semanticArea states the Part-F semantic unit it repairs, while its ontologicalNeighborhood may name several relation governing the asserted uses. For example, quality-term repair lives in the C.16 characterization nest, even though its neighbouring relations can include relation construction, action invitation, evidence, assurance, source-use assignment, engineering quality bundles, pattern-quality evaluation, or mathematical-lens use.
Affected patterns should use a thin pointer when the first-stage wording repair belongs elsewhere. The pointer names the selected restoration pattern and the condition that triggers it; it does not copy the trigger registry, the full E.10.ARCH recovery algorithm, or a second local architecture for the same repair. The affected pattern then keeps its own subject matter: the characteristic, structure, view, episteme, relation, evidence, assurance, gate, work, decision, or adequacy question it already governs.
If a draft proposes a new precision-restoration pattern, the authoring claim must show the repeated wording failure, semanticAreaBaseConcept, semanticArea, semanticAreaSenseFamily, the recovered primary EntityOfConcern kind or relation/claim record, the intended pattern nest, the neighboring governing relations, and the admissible action left after repair. A new pattern is not justified merely because a word appears often, because a local checklist wants a bucket, or because a campaign needs a tidy grouping.
Reader-role discipline for pattern prose
A pattern is written for its intended FPF user: the person who will use the pattern to organise thought, inspect a case, publish a note, or review a result under that pattern.
Its FPF-governed sections therefore explain what the pattern lets that user do, what it forbids, what it costs, and how it relates to neighbouring patterns in user terms. When neighbouring patterns or other governing companion roles are named, the prose should answer one user question such as which neighboring FPF pattern applies, which project-side FPF kind and reference named by value carries the claim, which nearby pattern is easy to confuse, or what must stay coordinated here; it should not read as one explanatory aside about why the package architecture was split that way.
E.8 reader and reviewer wording is FPF pattern-authoring wording. Project-side publication readers, explanation readers, comparative review units, and participants in named project-side review relations are governed by the publication or project-side patterns that name those publication units, explanation-use relations, comparative review units, evidence paths, work records, or gate records, such as E.17, E.17.ID.CR, E.17.EFP, A.10, A.15.4, A.20, or A.21.
Authors must keep FPF-development or package-architecture material separate from that user-facing body.
In particular, Problem, Solution, Consequences, Rationale, worked slices, and ordinary-vs-FPF-governed wording guidance must not do the work of:
- arguing that the material is worth isolating;
- justifying overlay/profile/governing-pattern or authority-reference choice as a package decision;
- discussing authority-reference freeze, naming freeze, merge state, blast radius, or safest landing form;
- or narrating future package promotion or defer decisions.
If architecture-placement commentary is still helpful, the default place is a separate companion note or ADR-like architecture note.
A pattern may include a short optional informative subsection such as Architectural placement note (informative) only when that placement materially helps users avoid misuse; even then, it must stay clearly separated from the user-facing solution and rationale rather than replacing them.
Human-facing fit beyond role correctness
Human-facing fit is also subject-domain fit. A recognition text that starts from internal taxonomy, pattern-placement convenience, or package-architecture wording before the problem-domain moment is still under-authored even if its later guidance/check text is correct. When a broader umbrella name and a narrower operative branch are both used, the recognition text should also tell the reader which stack is actually active rather than leaving that reconstruction to a later declaration block or companion note.
A pattern can already be role-clean, boundary-clean, and reader-role-clean, yet still fail the first minute of use for a cold working reader.
That failure usually appears when the text is admissible but does not yet make the working situation, practical payoff, primary EntityOfConcern, non-use boundary, or first action-guiding move visible enough.
P-2 epistemic precision check. When E.10 selects epistemic precision restoration for pattern prose, the first admissible action-guiding move must survive as a remaining admissible reader move or be replaced by an neighboring FPF pattern governing that claim application that now carries that claim. This is a direct E.2 P-2 and E.12 requirement, not an optional style preference. Intentional didactic metaphors and vivid Plain recognition lines are admissible when they are ordinary recognition aids or when their claim kind or admissible-use boundary maps back to Tech under E.10:6.2. A precision-corrected rewrite that leaves the recognition text inert is still under-authored.
For canonical patterns, the first-reading text should behave as a recognition text and the heavier review/check scope should remain in an assurance text.
When a pattern claims practice guidance or is meant to be used by engineers, managers, researchers, or other working readers, authors should make the following visible before the heavier harness takes over:
- a recognisable
Use this whenor equivalent first-minute recognition cue; - a concrete working situation in
Problem frame, not only taxonomic or pattern-placement language; - a short statement of what goes wrong if the pattern is missed or misread;
- a short statement of what this pattern buys the reader in practice;
- the first admissible action-guiding move the user should take in that situation;
- a short
Not this pattern whenboundary for ordinary nearby non-use cases; - one minimally viable worked case or use slice that shows what changes in practice;
- when a typed declaration block, formal lens, or other compact modeling material is FPF-governed, a short user-facing statement of what kind of object the pattern is governing and what minimal lens keeps that object reviewable;
- pairwise plain glosses for any FPF-governed technical terms that must appear before the heavier declaration role arrives;
- when
SoTA-Echoingcarries explanatory work, a short working-reader implication for each row or cluster of rows and a visible link back to the case bank or worked slices that those rows discipline; - a visible split between the recognition text and the heavier assurance text or companion material;
- and, if the draft implicitly serves several working-reader situations, an explicit primary working reader, primary concern, or primary viewpoint.
Problem-frame recognition signature (informative). A canonical pattern should
expose the working situation through its Problem frame, not through one
separate navigation block. When an E.11 pattern-entry discoverability problem
is present, the same Problem frame may also carry candidate-pattern and
tempting-wrong-pattern cues; otherwise it should stay with action guidance
rather than becoming a local catalogue row.
The local recognition signature should make recoverable:
- the concrete working situation;
- the primary
EntityOfConcern, relation named by value, claim record, or stabilized concern; - what goes wrong if the pattern is missed or misread;
- the first admissible action-guiding move and what that move buys;
- the ordinary not-this-pattern boundary;
- the first admissible action-guiding result; when an
E.11discoverability problem is present, the first admissible entry stop or entry-stabilizing result.
Use this pattern when, This pattern applies when, or equivalent Problem frame prose may be used as the first sentence or compact cue of this
signature.
It is not one separate required section.
Compact candidate-pattern comparison belongs in E.11-distributed entry material; expanded entry-disambiguation cases belong in I.2.
If the prose points to neighbouring patterns or other governing companion roles, it should present them as neighboring FPF patterns, project-side FPF kinds and references named by value, or E.11 entry-recognition reclassifications rather than as hidden co-authorities of the current pattern.
If the pattern claims broad, universal, or transdisciplinary usefulness, that breadth should already be visible in the recognition text.
At minimum the recognition text should show at least three heterogeneous reader or domain situations rather than one narrow case family with a later broad claim attached.
When a compact matrix helps, F.16 is the preferred template for making that breadth legible.
This is not a request to flatten the pattern into plain language only. It is a rule about ordering, assurance depth, and text consistency: the recognition text must help a working reader recognise the pattern early, while the assurance text continues to carry the full claim kind or admissible-use boundary. If the pattern uses technical lexicon, ontological distinctions, or a mathematical lens, those structures must remain recoverable, but the first-reading text should not require the reader to decode that full stack before recognising the working situation. The assurance text may tighten or discipline the recognition text; it must not silently shift what the recognition text claimed.
Illustrative migration example (informative).
Old pre-template top:
Repaired Problem-frame recognition signature:
Design-time and run-time referents stay separated in pattern prose
Pattern prose must keep its referent index explicit. In ordinary body sections, the default truth-makers are run-time or governed-domain objects, states, moves, boundaries, consequences, and user-facing practical effects. Normative-standard wording is still admissible when the sentence is explicitly about the standard as a normative publication, for example in marked migration navigation examples, marked informative notes, or conformance/checklist clauses.
Design-time and development-state referents are different objects. The current draft, current body, current pass, author, reviewer, handoff, packet, governing companion, landing choice, or other writing-process objects must not be smuggled in as the hidden truth-condition of pattern prose. A quick test is: what makes this sentence true? If the sentence is true because the current text is arranged a certain way, because the author or reviewer must do something next, or because the current development state says so, then it is design-time residue, not pattern content.
Move that material to the authored-slice carrier, handoff, DRR, or companion architecture note. If a sentence is kept in the pattern, rewrite it so that its truth depends on the governed run-time/domain object or on the standard's declared normative claim set rather than on the current writing pass.
If a pattern or example claims autonomy for any Role/Method/Service:
- Add a subsection “Autonomy (RoC‑E.16)” that lists:
AutonomyBudgetDeclRef(id, version, Scope (G), Γ_time),Aut-Guard policy-id (PolicyIdRef),OverrideProtocolRef(SpeechAct names, SoD),- pointer to where Green‑Gate applies in the Method steps,
- where AutonomyLedgerEntry is recorded on
U.Work.
- Include one Tell‑Show‑Show vignette that demonstrates depletion and override handling.
- Use LEX‑BUNDLE terms (Scope (G), Γ_time, Role, Method, and Work). Avoid “validity”, “process”, “actor”, “system”, “mechanism” unless mapped to kernel types.
Archetypal Grounding (System / Episteme)
Note: Prefer examples that reuse FPF characteristics vocabulary (e.g., F (Formality) rather than “F‑score”) unless you explicitly mean an external metric and name it as such.
Bias‑Annotation
Lenses tested: Gov, Arch, Onto/Epist, Prag, Did. Scope: Universal for the authoring conventions in this pattern. This guidance biases toward Did (readability, narrative flow) and Arch (template regularity) by design; the mitigation is content-bearing reduced sections and justification through the smallest grounding, misuse, boundary, or reduced-case statement, not omission placeholders.
Conformance Checklist
CC style (canonical).
Conformance Checklist items are authoring checks: they test whether the pattern guidance has been applied and written correctly in a pattern or companion text that claims conformance. They do not replace Solution, do not make the pattern a control form, and do not state deontic obligations about the modeled world. A CC clause of the form “X SHALL ...” is to be read as “In a conforming pattern or companion text, X SHALL ...”.
Preferred wording for new or edited CC items: start with an explicit conformance subject (e.g., “Authors ...”, “Reviewers ...”, “A conforming implementation ...”, “A validator ...”). If a CC item is enforcing an admissibility predicate, it SHOULD cite the predicate’s identifier (from a Definition: / Invariant: / Well-formedness constraint: block) rather than restating the predicate as “X MUST ...”. For boundary/interface/protocol/declaration patterns, prefer A.6.B-scoped claim IDs (L/A/D/E) or cite an existing Claim Register (A.6.B:7) instead of restating mixed prose.
Common Anti-Patterns and How to Avoid Them
These failure modes recur in drafts and in downstream application. They are predictable ways the Forces in this pattern get violated.
Consequences
Rationale
Structure and style function as FPF’s grammar. By unifying what were once separate “template” and “style guide” patterns, authors face a single reference point that satisfies:
- P‑1 Cognitive Elegance – uniform, minimal surprises.
- P‑2 Didactic Primacy – narrative flow, dual archetype examples.
- Guard‑Rails 1 & 2 – no tool jargon, no notation lock‑in inside prose.
A unified template also improves retrieval: a chunk containing A.2:<n> - Bias‑Annotation remains self‑identifying even when parent headings are missing, and the recommended footer marker makes truncation detectable.
International and industry standards often speak in terms of conformance criteria. FPF uses the label Conformance Checklist to make adoption easier for engineers and managers.
SoTA-Echoing (normative; lineage and deltas to contemporary State-of-the-Art)
Purpose. Make each pattern's relationship to contemporary best-known problem-solving practice explicit and comparable without importing tooling or data governance. This section is prose-first and notation-independent. It does not mint an independent second rule source, but it is an FPF-governed alignment section: the Solution, Conformance Checklist, Relations, worked cases, and other FPF-governed sections must reflect the stance stated here or explicitly justify divergence.
SoTA definition. In FPF, SoTA names the best-known currently defensible problem-solving practice for the named practice question in the relevant domain or practice tradition. It is not official status, a recent edition, broad popularity, citation volume, institutional adoption, reputation, or familiar terminology. A standard, book, paper, benchmark, or practice report carries SoTA only when it states or justifies the current best-known answer for the named practice question; otherwise it is lineage, current-standard reference, rationale-only material, or rejected-popular-practice material.
Two-part SoTA test. A row must pass both tests. First, the source family must be SoTA-bearing: it must represent the current best-known answer for the named practice question or a clearly named current branch of that answer. Second, the pattern must incorporate that answer by value: the adopted, adapted, or rejected stance must change Solution, boundary, anti-pattern, rationale, checklist, relation, worked case, evidence requirement, stop/reopen condition, or another FPF-governed pattern locus. A current best-known source that changes no FPF locus is uncaptured SoTA; a citation that changes wording without being current best-known practice is not SoTA.
Incorporation test. A SoTA row is accepted as pattern grounding only when it changes what the pattern lets a working user do, what the pattern forbids them to over-read, which neighbouring FPF pattern must apply, which evidence or validation requirement remains applicable, or how the Solution and neighbouring FPF-governed sections are written. A citation that only decorates the pattern or proves that the author has read a tradition does not carry E.8.
Minimum contents (authoring requirements).
- Evidence binding (no duplicate SoTA). If a SoTA Synthesis Pack exists (G.2), this section SHALL cite its ClaimSheet IDs, CorpusLedger entries, and BridgeMatrix rows as the governing evidence source for claims and report
adopt,adapt, orrejectconsistent with those IDs. Avoid forking an untracked SoTA narrative. 1a) Accepted decision and source material set, not DRR-only narrowing. When a pattern is drafted under an acceptedDRRand other accepted decision or source materials also exist by value, theDRRremains the decision and placement record, butSoTA-Echoing, neighboring-pattern relations, and any minimal modeling or mathematical lens MAY and SHOULD inherit non-conflicting material from that accepted material set. - Sources (current problem-solving source refs, not prestige refs). For Architectural patterns, cite at least 3 primary SoTA source refs that carry current best-known answers for the named practice question, with at least two independent Traditions when more than one serious tradition currently answers that question. For Definitional patterns, cite at least 1 current source or practice ref for the reduced issue being governed: terminology work, ambiguity or sense recovery, separation between constraint and ontology, controlled-vocabulary caution, or a comparable definitional problem. If the best source is older but still current, mark why it still answers the named practice question rather than treating source age, standard status, or popularity as SoTA by itself.
- Best-known, not merely popular. Authors SHALL distinguish best-known currently defensible practice from merely widespread or fashionable defaults. If the pattern adopts, adapts, or rejects a popular but less defensible practice, that divergence MUST be stated explicitly. 3a) Currentness and lineage status. Older standards, early papers, and historically important examples may be cited as lineage only when later practice has materially changed the answer. They may carry a SoTA row only when the pattern states why the source ref is still current for the named practice question or pairs it with a current source that supplies the current practice. 3b) Problem-domain and practice answerability. The selected SoTA source family MUST answer the governed working problem and the relevant domain or practice tradition. It MUST NOT be selected only because it makes package placement, naming neatness, or pattern clustering easier to justify.
- Practice alignment. For each cited item, state what is adopted, adapted, or rejected and why in 2 to 4 sentences.
- Scale admissibility. If numeric operations are implied, bind to ComparatorSet or CG-Spec and declare partial-order stance with no hidden scalarization.
- Cross-Context reuse. Any reuse across
U.BoundedContextmust expose Bridge id plus CL and, if ReferencePlanes differ, Phi policy ids; penalties affect onlyR_eff. - Lexical hygiene. Avoid “mapping” unless you mean an explicit Bridge, translation relation, or other named relation with loss notes.
Writing guidance (readability). Write short paragraphs, not tag lists. For each Tradition, provide one sentence naming the practice, one sentence comparing it to the pattern's Solution, and one sentence giving adoption status with reason. Where helpful, add one System and one Episteme micro-example (Tell-Show-Show).
Format: human-first. A small table is allowed, but each row MUST be accompanied by 1 to 2 sentences as above. Vendor tokens, tool tokens, file formats, or data schemas are out of scope unless the named practice question under discussion makes them have FPF-governed use.
SoTA alignment for this pattern (E.8 self-echo)
Relations
-
Coordinates with:
E.9.DAwhen an authored pattern body is drafted from a concreteDRRand the blocker is whether theDRRselected, distributed, carried source use, carried accepted decisions, or supplied a first drafting move sufficiently for that authoring use.E.8still governs the pattern body;E.9.DAis not a mandatory authoring section, review card, or substitute for writing the Solution. -
Constrained by: Guard‑Rails E.5.1–E.5.4 (lexical firewall, notation independence, etc.)
-
Coordinates with:
E.21when one authored FPF pattern version is evaluated as a scoped pattern-quality claim.E.8governs authoring shape, recognition text, action guidance, worked cases, SoTA grounding, and conformance material;E.21governs the pattern-quality evaluation, required coordinate values,PatternQualityStatus, and stop condition. Do not importE.21as a mandatory authoring section or full review card. -
Coordinates with:
E.23when an authored FPF pattern body is being improved through repeated passes.E.8still governs the authored pattern body;E.23governs the repeated quality-improvement method; the object-under-improvement evaluation such asE.21orE.9.DAsupplies value meanings and stop meanings. -
Constrains: All patterns; the DRR template references the same section order.
E.8:End
Evaluation CharacteristicSpace FPF Pattern Publication Form
Type: Authoring method pattern Status: Stable Normativity: Normative
Problem frame
Use E.8.ECSPF when an evaluation CharacteristicSpace constructed or repaired under A.19.ECS must be published as an FPF pattern. The question is not "what values should this evaluated object be judged by?" but "how do we write the FPF pattern publication form so those values remain usable, reviewable, and bounded?"
A.19.ECS governs the evaluation characteristic-space specification: evaluated object kind, use scope, contrast cases, coordinate set, value meanings, evidence basis, result-row shape, calibration points, coordinate-specific payloads, missingness, protected trade-offs, status meanings, and stop or reopen conditions. E.8 governs ordinary FPF authoring form. E.8.ECSPF governs their intersection: an FPF pattern whose main payload is a reusable evaluation.
Not this pattern when. Use A.19.ECS when the characteristic-space specification itself is missing or inadequate. Use E.8 when the pattern is not an evaluation-characteristic-space pattern. Use E.21, E.9.DA, E.2.DA, F.18, C.25, or a project-local evaluation when one already supplies the value meanings for the evaluated object and use. Use E.22 to frame one quality evaluation and E.23 to run repeated improvement. Use a local rubric, table, or project rule instead of an FPF pattern when the evaluation is not intended for durable FPF reuse.
First useful move. Start from the accepted A.19.ECS specification. Name the evaluated object kind, declared use, and first action-guiding evaluation use in the pattern's recognition text before presenting coordinate tables or conformance rows.
FPF-publication boundary. If the evaluation is local, temporary, or project-specific, do not publish an FPF pattern. Keep the A.19.ECS specification in the local publication form and cite the FPF neighbouring patterns named by value it uses.
What goes wrong if missed. An evaluation-characteristic-space pattern becomes a score sheet, review form, checklist, or taxonomy. The coordinate table appears before the working situation. Readers can see values but cannot tell when to use them, what to do after an evaluation result, which objects are outside the declared evaluated-object kind, or which neighbouring pattern governs evidence, assurance, gate, work, decision, naming, measurement, or improvement-loop claims.
What this buys. E.8.ECSPF lets FPF publish evaluations as real patterns: practitioner-readable first, exact enough for review, and bounded enough that E.22 and E.23 can consume them without stealing their values.
Primary EntityOfConcern in plain terms. The primary EntityOfConcern is the authored FPF pattern publication form for one evaluation CharacteristicSpace.
Primary working reader. The first reader is an FPF author or reviewer turning an accepted evaluation characteristic-space specification into a reusable FPF pattern for later practitioners, managers, and stewards.
Problem
A.19.ECS can produce a good evaluation characteristic-space specification without saying how to publish that specification as an FPF pattern. E.8 can produce a good generic FPF pattern without saying how a coordinate set, object-kind-fit rule, evidence basis, result-row shape, calibration points, status set, and stop condition should be placed when they are the pattern's main payload.
Recurring failures:
- Publication-form/content collapse. The FPF pattern is treated as the evaluation itself, instead of a publication form for an evaluation characteristic-space specification.
- Table-first pattern. Coordinate rows arrive before evaluated object kind, use, first move, FPF-publication boundary, and object-kind boundary.
- Checklist substitution. Conformance rows replace the
Solutioninstead of checking a readable evaluation method. - Underpublished values. Coordinate names are present, but value meanings, missingness, polarity, protected trade-offs, status meanings, or stop conditions are missing.
- Wrong-kind examples. Worked cases show only passing examples, so the pattern cannot teach below-floor and outside-declared-object-kind boundary outcomes.
- Neighbour theft. Evidence, assurance, gate, work, decision, naming, measurement, OEE/NQD, or mathematical-lens claims are carried as if the evaluation-characteristic-space pattern governed them.
- Pattern-quality confusion. The author uses
E.21to judge whether the FPF pattern version is good, but forgets that the new pattern must still publish the evaluation for one evaluated object kind by value. - Quality-carrier leakage.
E.21values, corpus projection, README/ToC/E.11/I.2 alignment, retrieval, cold-reader evidence, monolith parity, landing evidence, or developer/reviewer/executor correspondence for the publication form is written into the evaluation pattern as if it were the evaluated object's method.
Forces
Solution
When an A.19.ECS specification is selected for durable FPF publication, author the evaluation as an E.8 pattern with these additional placement rules:
- Keep the evaluation characteristic-space specification separate from the publication form. The pattern publishes an evaluation
CharacteristicSpace; it is not itself the evaluated object, the evaluation result, the improvement loop, or the evidence record. - Put recognition before coordinates. The opening text names evaluated object kind, declared use, first evaluation use, FPF-publication boundary, what goes wrong, and what the pattern buys before any dense table.
- Place the
A.19.ECSspecification by value. TheSolutioncarries the record shape, local names, object-kind-fit rule, coordinate set, value meanings, evidence-basis rule, result-row shape, adjacent-value rationale rule, calibration points, coordinate-specific evidence payloads, missingness rule, protected trade-offs, status meanings, and stop or reopen condition. - Use worked slices as the discriminating-case test. Archetypal Grounding and worked cases include a passing evaluated object, a below-floor evaluated object, and an outside-declared-object-kind boundary case.
- Keep checklist rows secondary. Conformance checks verify that the evaluation is recoverable and usable. They do not become the user's method.
- Keep outside claims with governing patterns.
Relationsand compact non-use boundaries name the governing pattern for evidence, assurance, gate, work, decision, naming, measurement, OEE/NQD, mathematical lens,E.22quality-evaluation, and improvement-loop claims. They do so declaratively and do not replace the evaluation publication form with reference boilerplate, phrase apparatus, or architecture-placement rationale. If phrase-level apparatus appears, applyF.19; if remaining words still hide precision, applyE.10,E.10.ARCH,F.18, or the governing pattern. If a wording repair changes an FPF-governed phrase in the evaluation specification or publication form, the pre-repair and post-repair evaluated object kind, relation or claim kind, slot or use-position when live, admissible use, and scope must remain recoverable; lexical substitution without that check and governing-pattern reference when another pattern governs the kind under repair, relation, claim, or position is not a repair. - Evaluate the publication form with
E.21. When the FPF pattern publication form is under quality improvement,E.21evaluates the FPF pattern version's quality. The evaluation coordinates inside the pattern continue to judge the evaluated object declared by that evaluation. TheE.21result, corpus-projection evidence, README/ToC/E.11/I.2 alignment, retrieval or cold-reader evidence, monolith parity, landing evidence, and developer/reviewer/executor correspondence stay in the quality, review, projection, or release carriers unless the publication form's ownEntityOfConcernand user move are that evaluation/projection work.
The authoring flow and the quality-improvement flow are different flows. This pattern publishes an evaluation for its declared evaluated object kind. A later E.21 evaluation of this pattern is evidence about the publication form as an FPF pattern, not part of the evaluation that the pattern publishes. That evidence may cause edits to recognition text, coordinates, cases, or boundaries, but it remains outside the pattern unless rewritten as user-facing evaluation guidance.
Canonical placement table
Local names and kind settlement
Archetypal Grounding
Tell. An evaluation CharacteristicSpace becomes reusable in FPF only when a practitioner can recognize the evaluated object and use before reading the coordinate table. The publication form must teach the evaluation use, not merely list the values.
Show, pattern-quality evaluation. E.21 is an evaluation for one FPF pattern version. Its publication form must still open with the working question "is this pattern good enough for the declared use?" before showing coordinates such as first-move recoverability, boundary fit, and SoTA binding.
Show, local rubric that should not become an FPF pattern. A project team defines a temporary rubric for choosing a meeting room. The A.19.ECS specification may be adequate locally, but no durable FPF pattern is needed because the evaluated object kind and use do not recur across FPF practice.
Show, object-kind boundary. A nuclear-plant evaluation can judge nuclear plants and declared comparable power-generation alternatives. A chair or FPF pattern is outside that evaluated-object kind: before the evaluation is opened, select a suitable evaluation; after a forced invocation, record an object-kind-fit defect/value rather than treating it as a weak nuclear plant or skipping declared coordinates. The pattern publication form must show that boundary before readers try to use the coordinate table.
Bias-Annotation
Evaluation-characteristic-space patterns are vulnerable to domain-example bias: the first examples can silently choose the evaluated object kind, use, and value family for later readers. A conforming publication form names known skew in examples, sources, reader family, domain tradition, measurement preference, benchmark preference, or FPF-internal reuse. When the evaluation claims broad use, the case bank must include heterogeneous evaluated object situations or explicitly narrow the claim.
Conformance Checklist
Common Anti-Patterns and How to Avoid Them
Consequences
A conforming E.8.ECSPF publication form makes an evaluation findable, teachable, and reusable inside FPF. It lets E.22 frame quality evaluations and E.23 run improvement loops without re-inventing values. It also makes the cost visible: a reusable evaluation-characteristic-space pattern must publish more than a local rubric, because it must prevent wrong-kind use, hidden value drift, neighbour theft, and proxy-for-value substitution.
The pattern publication form does not certify the evaluated object, approve a release, prove evidence, or finish improvement. It only publishes a bounded evaluation.
Rationale
The split between A.19.ECS and E.8.ECSPF preserves the FPF distinction between an evaluation characteristic-space specification and its publication form. A.19.ECS says what must exist for an evaluation to be adequate. E.8.ECSPF says how that adequate evaluation is authored as an FPF pattern when FPF publication is selected. This prevents two symmetric mistakes: stuffing FPF pattern-format requirements into a general characteristic-space construction method, and publishing an evaluation-characteristic-space pattern whose coordinate set is not recoverable by value.
SoTA-Echoing
Source-use convention. This section uses source rows only where they change the publication form: evaluated object and use before checklist, coordinate meanings and missingness, worked cases, non-scalar comparison, protected trade-offs, or action-guiding recognition text. Reporting frameworks and standards are reference-only use unless they solve the publication-form problem named by value.
Relations
E.8.ECSPF:End
Design‑Rationale Record (DRR) Method
Type: Governance and authoring pattern Status: Stable Normativity: Normative
Use this when
- one proposed normative change needs an explicit by-value account of what FPF should say, why this decision is preferred, and which neighboring patterns or selected non-pattern FPF kind-reference pairs it affects
- several patterns or selected non-pattern FPF kind-reference pairs must move together and one external decision record is needed to keep one bounded coordinated change set (one mutually dependent change set) semantically complete while enduring Core text is redistributed
- one bounded content decision question would otherwise force authors to decide the same load-bearing answer separately across several patterns or selected non-pattern FPF kind-reference pairs
- one deprecation, narrowing, or cross-pattern amendment must stay reviewable without reconstructing intent from patch history, chat memory, or scattered notes
Not this pattern when. Do not use E.9 as the permanent location of normative Core law, as a campaign or process brief, or as the main vehicle for purely editorial Delta-0 or Delta-1 cleanup that fits the lightweight variant in CC-DRR.5. Use E.9.DA when one concrete DRR already exists and the question is whether its selected answer, selected-locus obligations, source use, lexical closure, and drafting actionability are adequate for a declared downstream authoring use.
What goes wrong if missed
- Core text changes without one explicit rationale account, so later readers cannot recover which alternatives were rejected or which exclusions were intentional
- coordinated multi-pattern amendments drift apart because the temporary selected-answer account survives only in patches, handoffs, or reviewer memory
- future repairs overfit to local wording and silently lose Pillar, taxonomy-lens, impact-graph, practical-use, or pattern-placement discipline
What this buys
- one external decision record that states the bounded FPF change by value before Core text is rewritten
- one minimum kernel that keeps Problem frame, Decision, Rationale, and Consequences recoverable for later review and replay
- one temporary convergence record for coordinated changes, while keeping enduring Core text in the selected patterns and selected non-pattern FPF kind-reference pairs rather than in the DRR
- one temporary convergence record that fixes the selected answer (the chosen content answer for the bounded content decision question) before later drafting fans out across several selected patterns or selected non-pattern FPF kind-reference pairs
First useful move. State the bounded FPF content decision question, the selected answer, the rationale for that answer, and the selected distribution across patterns or selected non-pattern FPF kind-reference pairs before drafting or landing the Core text.
Cheap stop. If the change is ordinary local wording repair, application of an already accepted pattern, or editorial cleanup that does not change FPF semantics, obligations, boundaries, names, admissible uses, or normative force, do not open a full DRR. Use the lighter governing pattern for the local repair: E.17.AUD.LHR for one overloaded local lexical head inside one publication unit, C.2.P for one episteme, publication, or source-use phrase requiring local epistemic precision restoration, E.10 for general lexical repair, F.18 only when a durable reusable name is being minted, and E.8 for authoring-form correction. Leave E.9 for bounded content decisions that need rationale by value.
Kind-or-boilerplate diagnostic. When a DRR proposes wording for selected patterns, apply F.19 to separate boilerplate apparatus from remaining content before any wording is treated as pasteable pattern prose. If the remaining content still hides wording-use, naming, relation, claim, admissible-use, selected-locus, user-move, or flow-role precision, the DRR names the applied E.10, E.10.ARCH, F.18, or governing pattern. Process, architecture, review, or reference apparatus belongs in its own carrier, not in pasteable pattern prose.
A DRR-proposed wording repair is not pasteable pattern prose until it carries a kind-restoration check. The DRR must show the pre-repair and post-repair object kind, relation or claim kind, slot or use-position, admissible use, and scope, or explicitly decide that the change is a semantic change rather than an editorial repair. A nicer head word, shorter phrase, or removed trigger word is not decision evidence when it narrows a graph into a sequence, turns a method into work, widens an evidence record into assurance, treats a use-position as a new kind, or otherwise changes the kind or use-position without an accepted decision. When the decision depends on slot, lens, role, method, work, evidence, assurance, gate, or decision ontology, the DRR cites the governing pattern rather than redefining that ontology locally.
Primary EntityOfConcern in plain terms. The primary EntityOfConcern here is one external decision-rationale record for one bounded FPF content decision or one bounded coordinated change set. The minimal lens is simple: the record must keep the problem frame, decision, rationale, consequences, and impact and boundary account recoverable enough that accepted content can be distributed into the selected Core patterns and selected non-pattern FPF kind-reference pairs without semantic invention.
Primary working reader. The first working reader is an FPF author, reviewer, or steward who must evaluate, challenge, or land one bounded content decision. Downstream pattern readers benefit from the landed Core text; they are not the primary reader of the DRR itself.
Problem frame
FPF is engineered for Pillar P‑10 Open‑Ended Evolution: its normative rules must adapt as new calculi and insights arrive. But change without a record of why leads to conceptual erosion and undermines auditability. Hence FPF requires an explicit Design‑Rationale Record (DRR)—a durable conceptual record that precedes every normative change.
Problem
Direct edits to the Core, absent a structured rationale, trigger three systemic hazards:
- Lost provenance – future authors cannot infer the reasoning behind a rule; intent decays.
- Implicit assumptions – discarded alternatives vanish from memory, so debates resurface and churn repeats.
- Conceptual drift – incremental tweaks slip past the Eleven Pillars and Principle Taxonomy lenses, blurring the framework’s foundations.
Forces
Solution — the DRR as a structured argument and temporary convergence record
Any proposal to add, modify or deprecate a NORM, A, D, or GOV
rule MUST be accompanied by a Design‑Rationale Record. By default,
a conforming DRR contains at least four conceptual components (below);
these form the minimum decision kernel recoverable by any conforming DRR.
A lightweight editorial variant is permitted by CC‑DRR.5.
In this pattern, a bounded coordinated change set means one bounded
group of mutually dependent content decisions whose enduring FPF
expression will be distributed across several patterns or selected non-pattern FPF kind-reference pairs.
In this pattern, the selected answer means the current set of chosen
content decisions for that bounded content decision question: what FPF should say, which
selected patterns or selected non-pattern FPF kind-reference pairs carry it, what stays outside, and which source-use row, evidence path, validation evidence obligation, or loss/recoverability regime applies.
In this pattern, selected non-pattern FPF kind-reference pair is a tuple-like instruction, not one new kind: when a DRR selects a non-pattern publication, view, record, or relation to carry durable content, it must name the FPF kind named by value and reference by value, for example pattern profile, U.View, source map, source-use note, authoritySourceRef target, evidence-path record, review-finding record, or architecture-decision record.
In this pattern, a temporary convergence record means one external
decision record that temporarily holds the selected answer while
the selected Core patterns and selected non-pattern FPF kind-reference pairs are still being updated.
A nontrivial DRR may therefore govern one bounded coordinated change set. In that case the DRR is the temporary convergence record for the selected answer until selected Core patterns and selected non-pattern FPF kind-reference pairs are updated; it is not a second permanent Core-law section.
Minimum decision-inspection content blocks
A conforming DRR must also make the following decision-inspection content blocks
recoverable. They may appear inside the four kernel components or inside one
dedicated Decision grounds used or decision-inspection block, but they are part of
substantive DRR adequacy rather than later review-only hardening.
These decision-inspection content blocks are not separate process paperwork. A DRR that keeps only the four labels while leaving decision grounds, first-minute use question, naming, selected content distribution, pattern or selected non-pattern FPF kind-reference pair sufficiency or necessity, overlap handling, impact, or unresolved uncertainty implicit is structurally labeled but still substantively immature.
Together these decision-inspection content blocks let the DRR act as one decision record for one bounded coordinated change set: enough semantic closure that later drafting distributes the selected answer into selected patterns and selected non-pattern FPF kind-reference pairs rather than inventing it for the first time pattern by pattern.
When one bounded decision coordinates several patterns or selected non-pattern FPF kind-reference pairs, or one cluster of mutually dependent pattern edits and selected non-pattern FPF kind-reference pair edits, the DRR MAY carry additional substantive sections beyond that minimum kernel. Typical substantive additions include obligations on selected patterns and selected non-pattern FPF kind-reference pairs, one explicit new-pattern vs existing-pattern decision, one impact or non-goal map across selected patterns and selected non-pattern FPF kind-reference pairs, coverage or agreement maps across selected patterns and selected non-pattern FPF kind-reference pairs, convergence classification, and one provisional decision-law account by value that keeps the bounded change account semantically complete until enduring Core text is distributed.
Such additions do not change the DRR’s kind. A DRR carrying them remains conforming only when it stays about the FPF content decision: what FPF should say, why, what is excluded, how selected patterns and selected non-pattern FPF kind-reference pairs are affected, and what practical use or authoring action improves. A DRR carrying richer convergence content MUST NOT become a campaign plan, process script, baton carrier, packet checklist, staging log, or other development-process brief.
When one selected answer could plausibly fit one already-existing pattern or selected non-pattern FPF kind-reference pair or require one newly proposed pattern or selected non-pattern FPF kind-reference pair, the DRR must decide that sufficiency/necessity question by value. It is not enough to list a tentative carrier list or leave downstream drafting to discover the selected pattern or selected non-pattern FPF kind-reference pair later.
When the accepted decision grounds or the DRR itself already names one pattern or
selected non-pattern FPF kind-reference pair as part of the distribution question, that
pattern or selected non-pattern FPF kind-reference pair is not a neutral future watch item. The DRR
must classify it now either as one selected pattern or selected non-pattern FPF kind-reference pair
with explicit obligation, one explicit boundary neighbor kept unchanged,
one inherited-unchanged neighbor, or one outside-current-decision item
with named pattern, selected non-pattern FPF kind-reference pair, or decision record. Conditional or
time-relative pattern prose or prose for one selected non-pattern FPF kind-reference pair such as most likely, may need local hardening, if later touched, watch later, or one equivalent
placeholder is non-conforming there because it marks one unmade current
decision rather than one explicit current disposition.
When accepted decision grounds expose one potentially reusable selected non-pattern FPF kind-reference pair or neighboring source-use, evidence, assurance, validation, or architecture-decision mechanism, the DRR must not merely note that such content already exists. It must decide whether that content is generalized now, kept local with a substantive reason, rejected, or marked outside the current decision with a named pattern, selected non-pattern FPF kind-reference pair, or decision record.
When one selected answer involves source-loss mode, simplification, redaction, summarization, or other declared loss, the DRR must make the admissible-use template explicit by value. Explanation alone is not enough; the decision must say what remains preserved, what is dropped, which branch reading is admissible and which selected non-pattern FPF kind-reference pair carries it, which uses lack an admissible carrier or evidence path, what recoverability class applies, and what reopen or stop rule governs cases that exceed the declared source-loss or scope-narrowing state.
A nontrivial DRR is mature enough for downstream authoring only when material selected-answer branch choices about the EntityOfConcern, selected patterns and selected non-pattern FPF kind-reference pairs, outside-current-decision boundary, reusable-content disposition, and loss/recoverability regime have already been selected, rejected, inherited unchanged, or placed outside the current decision with a named pattern, selected non-pattern FPF kind-reference pair, or decision record. If those choices are still missing, the DRR is still decision-grounding work rather than one accepted design-rationale record.
The DRR lives outside the normative Core. An accepted DRR SHALL be landed by applying its Decision account and any stabilized enduring content to the relevant pattern or selected non-pattern Core kind-reference pair as explicit normative or informative text (the change is "in the Core"; the DRR is not). A richer DRR MAY remain the temporary convergence record while redistribution into selected Core patterns and selected non-pattern FPF kind-reference pairs is still incomplete, but it SHALL NOT remain the permanent sole semantic carrier once landed Core text exists.
Authors drafting from an accepted DRR MAY elaborate examples, SoTA‑Echoing, recognition sections, local wording inside the selected patterns and selected non-pattern FPF kind-reference pairs, and neighboring fit. They SHALL NOT silently revise the selected answer, selected patterns and selected non-pattern FPF kind-reference pairs, outside-current-decision boundary, reusable-content disposition, or declared loss/recoverability regime. Any such revision SHALL be handled through one successor DRR or other named successor decision record.
A DRR may itself be improved through E.23, but the DRR remains the selected decision record, not a full pattern draft. When SoTA is load-bearing in that improvement, it must mutate the selected answer, selected-locus obligation, boundary, example, validation obligation, or reopen condition; otherwise it is rationale-only or lineage-only for the DRR.
To preserve P‑2 Didactic Primacy without duplicating meta‑text, authors landing an accepted DRR SHOULD distill stable and reusable parts of its Rationale, Consequences, and other valid convergence sections into the appropriate informative sections of the affected pattern(s) (Rationale, Consequences, SoTA‑Echoing, Archetypal Grounding; per the Pattern Template, E.8). The full DRR remains external as provenance.
A substantive DRR is one current content decision object. It may carry selected content obligations only when they are part of the Decision or Consequences. It MUST NOT carry next-gate state, handoff/packet state, process-order state, monolith status, future campaign planning, or one hidden promise that the same current content decision question will be decided later inside the same decision object. Any undecided remainder must be marked outside the current decision with a named pattern, selected non-pattern FPF kind-reference pair, or decision record.
Process-source method admission into FPF
When a DRR imports stable method from process-source document-carried method description into FPF, it must decide the admission by value rather than treating process prose as a second canon.
The DRR names:
- the process-source passage or accepted source named by value process-source decision-ground item being considered;
- the reusable FPF method recovered from that passage;
- the current FPF pattern, section, or accepted
DRRthat already carries the method, if any; - the remaining delta that current FPF does not yet carry;
- the selected FPF pattern chosen to carry that delta;
- process-control material excluded from FPF pattern prose, such as role dispatch, seam state, helper behavior, Git recovery, packet transport, review transport, chat cadence, and mutable release state;
- the source-use result for that passage or decision-ground item: quote named by value, narrowed scope, instantiated case, decision-bearing use, draft-guidance source, example-only use, or retired source use;
- any meaning loss or addition created by that source-use result: changed scope, relation, evidence path, admissible use, non-admissible use, reader move, or recoverability condition;
- the first improved FPF use that the admitted method gives to an author, reviewer, or downstream FPF user;
- the current disposition: selected now, inherited sufficient, rejected now, or outside the current decision with the named evaluation pattern, accepted
DRR, or accepted decision-ground item named by value.
Reusable process-source method is not limited to semio wording or pattern-authoring language. It may enter FPF only when it is separable from local process mechanics, improves FPF use, and has one exact evaluation pattern. After the method lands in FPF, process documents should cite the selected FPF pattern instead of keeping a parallel long-form rule.
Archetypal Grounding (System / Episteme)
Bias-Annotation
Scope: this bias annotation is universal for FPF semantic changes governed by E.9. It does not turn project-management state, helper state, or review logistics into DRR content.
Conformance Checklist
Common Anti-Patterns and How to Avoid Them
Consequences
Rationale
FPF evolves by explicit, reviewable deltas rather than silent edits. The DRR is the minimum structured argument—and, when several patterns or selected non-pattern FPF kind-reference pairs must move together, an allowed temporary convergence record that keeps P‑10 Open‑Ended Evolution compatible with P‑1 Cognitive Elegance and P‑2 Didactic Primacy.
E.9 sets a floor, not a ceiling: every conforming DRR must make Problem‑frame / Decision / Rationale / Consequences recoverable, but it may carry richer substantive coordination content when that prevents shadow documents or semantic invention during distribution into Core patterns and selected non-pattern FPF kind-reference pairs. The same floor also requires the decision-inspection content that later authoring and review otherwise reconstruct manually: exact decision grounds, use-value, first-minute working situation, scenario grounding, alternatives, current disposition map, naming/ontology obligation, selected content distribution, existing-pattern sufficiency/new-pattern necessity, overlap classification, selected-answer stability, impact/boundary graph, practical payoff, and any remaining uncertainty that materially shapes the decision.
Pointer-based DRRs (CC‑DRR.1a) prevent duplicated prose, and distribution into Core patterns and selected non-pattern FPF kind-reference pairs (CC‑DRR.4) keeps the specification itself learnable without turning the DRR into a permanent shadow canon. Process-law ordering, gate, and handoff records stay outside because they are not part of the content answer that FPF is selecting.
SoTA-Echoing
E.9 aligns with contemporary architecture-decision and rationale-capture practice, but its contribution is not the existence of a decision record. ADR practice already carries compact context, decision, and consequence records. FPF uses the DRR as a decision-rationale record for one bounded FPF content decision, with enough by-value rationale to distribute durable content into selected patterns and selected non-pattern FPF kind-reference pairs.
The practical gain is content-selection quality under semantic load: the DRR decides the selected answer, alternatives, losses, boundary, and selected loci before pattern drafting begins. Any durable rule, example, or content obligation that remains useful after acceptance belongs in the selected FPF pattern or selected non-pattern FPF kind-reference pair, not in the DRR as a permanent shadow canon.
When a DRR relies on a source document, workstream plan, campaign queue, external review packet, standard, article, ADR-like note, or prior accepted decision, it states how the source is used and the source adoption/adaptation/rejection decision, then carries the selected payload by value: adopt, adapt, reject, lineage-only, rationale-only, selected payload, rejected or non-carried payload, source loss, selected locus, non-use boundary, and reopen condition. A cited source is not FPF doctrine, child DRR, review result, gate, evidence sufficiency, or monolith landing source by citation alone.
Relations
-
Instantiates: P‑10 Open‑Ended Evolution, P‑2 Didactic Primacy
-
Template governed by:
pat:authoring/pattern‑template(E.8) -
Interacts with:
pat:guard/bias‑audit(E.5.4) via lens check -
Complemented by:
E.9.DAwhen one concreteDRRfollows E.9 form but its adequacy for downstream drafting, host amendment, accepted-decision carry-through, source-use carry-through, or selected-locus distribution is disputed or materially relevant.E.9.DAreads theDRRdecision-adequacy claim; it is not a second DRR form, review gate, or mandatory ordinary editorial step. Also complemented bypat:authoring/code-of-conduct(E.12) for etiquette in DRR debate. -
Coordinates with:
E.23when oneDRRis being improved through repeated quality-improvement passes.E.9keeps theDRRkind and decision-record form;E.9.DAsupplies the decision-adequacy object-under-improvement evaluation when adequacy is being improved;E.23governs the repeated method rather than turning the DRR into final pattern prose.
E.9:End
DRR Decision-Adequacy Evaluation CharacteristicSpace
Status: Core.
Problem frame
Use E.9.DA when one DRR must be reliable enough for a declared FPF authoring use: pattern drafting, host amendment, selected-locus distribution, accepted-decision carry-through, source-use carry-through, scope-boundary decision, split decision, or architecture-hold decision.
Not this pattern when the evaluated object is one authored pattern version, one admission or refresh review, one local wording repair, or a measurement-law problem. Use E.21, E.19, E.10 and its precision-restoration neighbours, or C.16/A.17/A.18/A.19 for those objects.
First useful move: name the exact DRRVersionRef, declared authoring use, selected-locus disposition map, and qualification window; then evaluate every decision-adequacy coordinate in this pattern. Missing decisions lower coordinates and produce repair, split, or hold status inside the same evaluation.
What goes wrong if missed: a formally valid DRR may still be too weak for drafting. It may summarize sources instead of deciding, mention neighbours without obligations, hide rejected alternatives, leave trigger words unresolved, or omit the first drafting action.
Primary EntityOfConcern in plain terms: the decision-adequacy claim of one exact DRR version for a declared FPF authoring use.
Problem
E.9 defines the DRR kind and minimum decision-rationale form. It does not by itself say whether one concrete DRR is decision-bearing enough for downstream FPF authoring. Without E.9.DA, reviewers tend to approve headings, source volume, or clean prose while the pattern author still has to invent missing decisions.
Recurring failures:
- The decision question is broad or implicit.
- The selected answer is a summary rather than a decision.
- Alternatives, rejected options, and outside-decision items are not closed.
- Receiving loci are named but not assigned content obligations or non-obligations.
- The selected FPF content architecture is explicit but wrong.
- Source use is copied without saying what changed in the accepted decision.
- Architecture descriptions, views, graphs, packets, or notes are treated as the FPF decision.
- Administrative state becomes adequacy evidence.
Forces
Solution
E.9.DA is the DRR decision-adequacy specialization of A.19.ECS. It evaluates whether one DRR version carries enough decision content for the declared authoring use.
There is no partial E.9.DA result. Once invoked, the evaluator assigns a value, short rationale, and evidence locus to every coordinate in E.9.DA:4.4, and states the evidence basis used for the result. If the DRR lacks a field, source row, selected-locus map, architecture decision, comparator, or currentness basis needed by a coordinate, the relevant coordinate receives a low value and the status states the repair, split, or hold.
Local names and kind settlement
These names are local evaluation fields. They are not release state, review status, project evidence, gate result, assurance, or pattern-quality values.
Evaluation record
[E.22](/generated/patterns/E.22) may frame whether the evaluation is floor-only, exceptional-improvement, trade-off, open-question, absorption, or proposal-producing. [E.23](/generated/patterns/E.23) governs repeated improvement of the DRR after evaluation findings exist.
Ordinal coordinate scale
The value is a content evaluation of the DRR text and accepted source-use payload, not a reward for review, landing, popularity, citation volume, or absence of visible defects.
Required decision-adequacy coordinates
Coordinate separation is by repair question. One DRR section may support several coordinates, but the rationale must state the distinct property supported for each. When two heads always fail and repair together, the DRR or the evaluation pattern needs characteristic-space repair through A.19.ECS.
Result-row discipline and calibration
An E.9.DA result uses this table shape:
A prose summary, heading checklist, two-column coordinate/value table, or table without exact EvidenceLocus is not an E.9.DA result. It is draft evaluation material. Missing or unchecked evidence lowers the coordinate that needs it; it does not make the coordinate inactive.
Common calibration points:
Status and stop condition
admissibleForDeclaredAuthoringUse states the first drafting move and the most expansive non-admissible overread. newFrameRequired is not a pass for the current declared use. Non-ready statuses state the first repair, split boundary, or architecture question.
Compact result form
The coordinate table may be short. It is still complete. Status is not assigned from a prose summary, two-column table, applied-finding count, review acceptance, or result missing evidence loci needed by its values.
Finding row
Vague labels such as weak DRR, needs more evidence, or architecture unclear are not findings until rewritten into this row.
Worked slices
Weak precision-restoration DRR. A DRR says E.10, A.6.P, and C.2.P are relevant, but does not decide whether a new branch exists, what name it has, which repeated prose moves, or which regression cases test the split. SelectedAnswerDecisiveness, SelectedLocusObligationClosure, FPFContentArchitectureSelectionAdequacy, and DraftingActionability fall.
Adequate multi-locus DRR. The DRR selects a new precision-restoration pattern, assigns exact content obligations to selected loci, states rejected alternatives, gives first drafting moves, and carries source-use payload into examples and conformance. It can be admissible for host drafting without containing final pattern prose.
Architecture-impact DRR. A DRR uses diagrams, graphs, dashboards, or architecture notes. The evaluation asks whether the DRR decided the architecture or structure claim, structural view relation, preserved and lost structure, source-return condition, selected loci, and publication boundary. The description locates material; it is not the FPF decision.
Bias annotation
This pattern biases FPF toward decisions before drafting. The bias is useful because missing decisions become expensive once they fan out into pattern hosts.
The bias is bounded. Small editorial decisions can use E.9 directly. Pattern quality remains under E.21; repeated improvement remains under E.23; wording repair remains under E.10 and precision-restoration neighboring patterns named by value.
Conformance checklist
Common anti-patterns and repairs
Consequences
Rationale
The cheapest place to repair missing FPF decisions is the DRR, before pattern prose spreads uncertainty across several hosts. A compact complete evaluation is better than a heavy preliminary audit: it gives every coordinate a value, identifies the first repair, and stops.
SoTA-Echoing
Relations
E.9.DA:End
Unified Lexical Rules for FPF (LEX‑BUNDLE)
Definitional pattern; normative for all FPF pattern text and for any Context that claims FPF conformance.
Status & placement. Part E.10 (“Lexical Discipline & Stratification”); complements E.10.D1 (D.CTX), E.10.D2 (EntityOfConcern and Description-episteme boundary and specification-use gates), the DesignRunTag and CtxState boundary discipline (A.15; E.18), E.10.ARCH wording-use restoration architecture, A.6.P relation precision restoration, C.2.P epistemic precision restoration, A.19.SPR state-family precision restoration, and F.18 local-first naming. E.10:0.2 is the shared lexical trigger scan. The detailed LEX sections below supply register, naming, morphology, and local rewrite checks only for the selected live problem; they are not a second trigger registry and do not replace E.10.ARCH, the selected precision-restoration realization patterns, governing patterns, or F.18.
Builds on: A.7 Strict Distinction (Clarity Lattice); E.5 Guard‑Rails (DevOps Lexical Firewall; Notational Independence; Unidirectional Dependency); F.5 Naming Discipline for U.Types & Roles. Coordinates with. A.2 and A.15 (Role–Method–Work alignment), A.10 (Evidence Graph Referring), B.1 and B.3 (Γ‑algebras & assurance), F‑cluster (context of meaning; Bridges).
Use this when
What goes wrong if missed. Precision repair turns into taste or synonym replacement. A broad head such as support, surface, route, mapping, kind, basis, force, load, bearing, object, or record is replaced by another broad head, while the live relation, source-use relation, admissible use, or neighbouring FPF pattern application remains unrecovered.
What this buys. E.10 gives one cheap trigger scan before heavier repair: ordinary wording stays ordinary, local lexical mistakes are repaired locally, relation-like wording applies A.6.P; episteme, publication, or source-use wording applies C.2.P; architecture or structure wording applies C.30.P; stratification or source-label wording such as layer, level, tier, stack, ladder, rung, block, expert, cache, router, or gate applies C.30.STRAT; characteristic or scale wording applies C.16.P; quality or evaluative wording applies C.16.Q; state-family wording applies A.19.SPR; and already recoverable cases apply the governing pattern directly. The result is precise enough to compose with FPF without making every phrase into a new pattern or review artifact.
Use E.10 when a word, head, or local phrase in conformant FPF text is starting to hide what kind it names, which register it belongs to, which context of meaning governs it, or which relation or action claim it carries.
First useful move. Restore the head kind and register of the local wording. If no FPF-governed use remains, make the small local rewrite under E.10 and stop. If an E.10:0.2 row selects a precision-restoration realization pattern or a governing pattern, apply that pattern instead of inventing a synonym. If the repaired wording becomes a durable reusable head, apply F.18 after the live precision-restoration branch has recovered the kind and use. Governing FPF patterns are named only after that repair has made the EntityOfConcern, relation, claim, admissible use, project-side reference, or non-use disposition recoverable by value.
Cheap stop. If one local lexical repair restores kind, relation, and admissible use without changing the normative meaning of FPF, stop with the repaired wording; do not open a Name Card, DRR, review profile, or larger epistemic precision restoration note by habit. Ordinary application starts at E.10:0.2, applies only the row selected by the live sentence, and then stops at local repair, the selected restoration pattern or governing pattern, controlled precision reduction, or F.18 when a durable reusable head is actually being minted. Later LEX sections are detailed checks for the selected case, not a universal interpretation sequence.
Not this pattern when. Do not use E.10 as the ontology that governs the recovered claim. If the use under repair is evidence, assurance, work, gate, decision, causal use, publication, relation precision, or epistemic precision, the accepted text must make the governing FPF pattern application explicit; E.10 contributes only the wording-problem classification. For non-FPF source prose, use C.2.P source-expression unpacking mode and borrow E.10 only as a repair test, not as a conformance verdict.
One-screen ordinary-use path
Ordinary E.10 use is one bounded FPF-governed wording repair, not a full lexical audit. The bounded complete accepted result is:
BoundedTextSpan: the exact sentence, row, section, pattern version,DRRslice, or project text deliberately using FPF-governed terms, pattern references, relation names, or conformance claims under repair.TriggerSpan: the word or phrase that carries possible FPF-governed use.SelectedInterpretation: ordinary no FPF-governed use, local head repair, register repair, morphology repair, relation-like precision restoration, episteme precision restoration, publication precision restoration, source-use restoration, durable naming, or not-triggered false positive.FinalWordingOrBlocker: the accepted local wording, the governing-pattern result, or the blocker that remains.StopBackToSubstance: after final wording or blocker is present, stop lexical work and return to the primaryEntityOfConcern, relation or claim record named by value, source-use, mathematical-lens, architecture, project-action, evidence, assurance, gate, decision, or work problem that made the wording matter.
The detailed tables below are reference material for triggered cases. They are not a mandatory interpretation sequence. For a modest repair, one sentence, one trigger span, one selected interpretation, and one final wording or blocker is enough only when it discharges every live FPF-governed use in that span.
When E.10 is applied beyond one sentence, add a bounded-text line: exact accepted DRR named by value, FPF pattern, monolith section, extracted host, review packet, pattern section, source span, or other named text span; trigger spans or grouped loci; selected interpretation; repair boundary; and expected non-use boundary. This prevents accidental whole-corpus sweeps and makes change impact inspectable.
Formal fields from the older LEX substrate are live only when the selected wording problem needs them: triggerSpan, boundedTextSpan, structuralRole, selectedInterpretation, LEX.TokenClass?, register, USM.Scope?, EntityOfConcern and Description-episteme boundary and specification use?, governingPattern, and finalWordingOrBlocker.
Local patterns may cite the relevant E.10 trigger row, but they should not reproduce large trigger lists or create local lexical registries unless a named local application profile has its own primary EntityOfConcern, first useful move, and governing-pattern boundary. New trigger families enter E.10 only when they recur across FPF-governed texts and cannot be handled by one local pattern; specialized patterns receive the detailed ontology when the problem is no longer lexical. Stale or overly broad trigger rows are narrowed or retired.
Self-application is bounded. When E.10 is under improvement, use E.10 only for its own wording-trigger repairs; use E.21 for pattern-quality evaluation, E.22 for improvement-oriented quality-evaluation framing, E.23 for the improvement loop, E.2.DA for FPF-level Pillar effect, and neighboring pattern governing the claims for relation, episteme, publication, source-use, naming, or quality-word issues.
Scope split
E.10 governs lexical conformance for FPF pattern text, extracted pattern hosts, FPF-Spec monolith text, FPF governing documents, accepted DRR text, and any project, product, research, engineering, or review text that deliberately uses FPF terms, pattern references, FPF relation names, FPF kind claims, FPF admissibility claims, or claims FPF conformance.
For ordinary source text, intake notes, seminar transcripts, external reviews, project documents, source publications, tool outputs, or other text that does not itself claim FPF-governed use, use C.2.P source-expression unpacking mode. That use may borrow E.10 tests, A.6.P relation repair, A.6.6 basedness repair, F.18 naming tests, or another governing pattern as methods, but it does not judge the source text as failed FPF wording.
Problem and applicability table
E.10 is a lexical trigger scan and conformance pattern. Its primary EntityOfConcern for one pattern use is one wording use in conformant FPF text as a lexical or register sign: the head, register, morphology, local label, name candidate, kind-reference, relation-bearing cue, or replacement candidate used by the sentence.
E.10 recognizes which wording-use problem is live and selects the first applicable closure path. It does not itself become the ontology for the recovered relation, episteme, evidence, work, gate, decision, publication, architecture, characteristic, quality, or project-side FPF kind and reference named by value.
The full shared recovery order and applicability-row architecture belong to E.10.ARCH. E.10 keeps only the cheap scan, local rewrite option, direct known governing-pattern rule, compact applicability table, bounded complete result rule, and fail-closed non-use boundary.
exact is not a precision marker by itself. It is admissible only for literal identity or bounded source identity: exact sentence, source passage, trigger span, formula edition, same referent, or same declared CharacteristicSpace. When exact modifies an FPF pattern, kind, relation, record, object, field, use, claim, gate, source, or neighboring pattern, treat the phrase as trigger wording. Recover the governing pattern, FPF kind, relation record, source-use relation, admissible use, slot or use-position, value set, and scope by value, then write the recovered object. If recovery fails, use quote-only, reduced-use, blocked-use, or incomplete-rewrite disposition.
Classification is not closure. A conforming result must end in one of these by-value outcomes:
- local wording accepted or locally rewritten;
- selected precision-restoration pattern applied;
- neighboring FPF pattern governing that claim applied directly because the primary
EntityOfConcern, relation record, or claim record is already recoverable; - controlled precision-reduction result with declared loss and reopen condition;
F.18durable-name path after the kind under repair or relation is known;- quote-only, reduced-use cue, blocked use, incomplete rewrite, ordinary prose, or not-triggered disposition.
reading, read, and quality-read are trigger wording only when the sentence uses the word to carry interpretation, publication use, source-use assignment, evaluation, comparison, evidence, gate, work, decision, release, assurance, or admissibility claim. Do not create ReadingPrecisionRestoration. Recover the actual EntityOfConcern, publication lane, evaluation claim or bundle, relation, or work-side kind and apply C.2.P, E.17.ID.CR, E.22 plus object-under-improvement evaluation named by value, A.6.P, or the neighboring FPF pattern governing that claim.
function, functional, functionality, and effect are trigger wording when the FPF kind named by value, relation, claim, view, or governing-pattern application is hidden. Do not assign the wording by architecture default. A.6.F remains the function-like wording unpacker; mathematical function, mapping, relation, loss, objective, value functional, or operator goes to C.29 when mathematical-lens use is live, and functional-architecture use goes to C.30, C.30.ASV, or C.30.TGA-FLOW-REL only when that architecture or flow relation is recovered.
layer, level, tier, stack, ladder, rung, block, expert, cache, router, and gate are source labels when they first arrive from engineering, mathematical, publication, or project prose without a recovered FPF kind. Do not mint U.Layer, U.Level, U.Tier, U.Stack, or a universal stratification kind. Use C.30.STRAT to recover the governing pattern, or go directly to the governing pattern when the FPF kind under repair, relation, claim-use, or source-use disposition is already recovered by value: C.30.LCA for control-layer relations, A.6.M for module-interface relations, C.30.TGA-FLOW-REL for flow relations or transduction relations, C.16.P or C.29 for scale relation, coarse-graining relation, or mathematical use, C.2.P for publication relation set or source-use relation, and gate patterns, work patterns, or decision patterns when those claims are being made.
Local patterns may cite the relevant E.10 trigger row, but they must not reproduce the trigger registry or create local lexical registries unless a named local application profile has its own primary EntityOfConcern, first useful move, and governing-pattern boundary. Specialized restoration patterns receive the detailed ontology when the problem is no longer lexical.
Bounded complete result and direct known governing-pattern rule
The direct known governing-pattern rule is:
If the governing pattern and primary
EntityOfConcern, relation record, or claim record are already recoverable by value, use that governing pattern directly.
Apply a precision-restoration realization pattern such as A.6.P, A.6.F, C.2.P, C.30.P, C.30.STRAT, C.16.P, C.16.Q, or A.19.SPR only when wording hides the EntityOfConcern under repair, relation, characteristic, scale, score, quality characterization, source-use disposition, state-family field, admissible use, or remaining reader move.
The bounded complete result is the shortest result that fully recovers the kind under repair and remaining reader move. Shortest is not lowest effort: every live FPF-governed use receives a by-value disposition, and not triggered or ordinary prose must be stated as such with the checked span.
- local rewrite for a one-sentence local ambiguity;
- compact repair note or row when one precision-restoration pattern is needed;
- governing-pattern application when the FPF kind under repair, relation, claim-use, source-use disposition, or admissible-use boundary is already recoverable;
- full restoration check only when several claim being made or admissible-use cases, source-currentness relation, cross-pattern authority, or downstream reliance remain live;
- fail-closed non-use when recovery is not possible.
After kind and governing pattern recovery, state the remaining admissible reader move: what the reader may now do, why the distinction matters, or which FPF pattern now carries the claim being made. If the repaired wording is type-correct but inert, the repair is incomplete.
Value-substitution check. A wording repair also fails when it optimizes lexical purity while making the working text worse: less readable for its declared reader, less affordable to apply, less semantically composable with neighbors, less clear about the primary EntityOfConcern, relation record, or claim record, or less action-guiding. In that case, narrow the repair, keep ordinary wording with an recovery note with recovered kind and use, use the direct governing pattern, or leave the issue blocking by value. Do not trade real kind, relation, source-use, or admissible-use recovery for smooth prose; this check prevents precision-restoration theatre, not ontology repair.
Tool-assisted trigger inventories may help find candidate spans, but they cannot close ontological precision repair. Closure remains recovered kind, recovered relation or substrate, admissible use, non-admissible overread, and remaining reader move by value.
Replacement-candidate closure. A repair that replaces one trigger word with another word or phrase is not closed until the replacement candidate itself passes the same E.10 trigger scan. If the candidate is another umbrella word, quasi-scale, process metaphor, role-free deontic word, or untyped head, recover the kind named by value, relation, admissible use, and governing pattern, send a durable naming case to F.18, or fail closed. A bounded repair may therefore require repeated E.10 passes until the candidate wording reaches a stable closure point: ordinary wording with no FPF-governed use, local repair with recovered kind and use, governing-pattern application, F.18 durable-name result, controlled precision-reduction result, or explicit blocker. Do not accept a smoother synonym as repair evidence.
Wording-Use Trigger Check Registry
E.10:0.2 is the shared trigger scan. This section is the check registry for high-pressure wording in FPF-governed text and source prose being unpacked for possible FPF use. It does not create a second all-purpose ontology and does not create domain-pattern outcomes. It selects a closure path: local rewrite, selected precision-restoration realization pattern, governing pattern, controlled precision reduction, F.18 durable-name path, or fail-closed non-use.
The words below are frequent in conformant FPF text and in project texts that deliberately use FPF-governed terms, pattern references, relation names, or conformance claims. Files carrying FPF pattern text are useful search examples, not the boundary of language cleanup: the same rule applies wherever the text under repair is claim-bearing FPF, project guidance that deliberately uses FPF-governed terms, pattern references, relation names, or conformance claims, or source prose being unpacked for possible FPF use. They are not banned words. They are words that must trigger kind recovery when they carry ontology, authority, evidence, or admissibility claim. The table gives alternatives to recover from; it must not be copied as a group kind. The chosen result may be a local wording repair, a selected restoration pattern or governing-pattern application, controlled precision reduction, or an explicit not-triggered disposition.
Lexical Trigger Rewrite Rules
EntityOfConcern, primary entity of concern, and local topic wording
Do not replace every topic-like or object-like phrase with EntityOfConcern.
Classify the sentence first.
Required check:
publication-unit wording that implies authoring or interpretation work
When a phrase makes the bounded unit sound like authoring work or interpretation work, split the sentence by kind under repair.
Do not make a permanent technical modifier by joining authoring, interpretation, and unit-boundary concerns. That mix hides whether the sentence is about a publication unit, authoring work, reader inspection, or a carried claim.
content
Do not use content as a governing head.
Split it into:
- claim-bearing episteme content;
- publication-unit text;
- publication form;
- generic publication face;
- declared MVPK face;
- carrier data;
- record payload;
- pattern section;
- source-basis excerpt;
- review target.
Plain explanatory prose may use content only when the sentence does not carry ontology, authority, or admissibility.
publication
Every FPF-governed publication sentence must say which publication construction is live:
- act or occurrence of publishing, or publishing work;
U.EpistemePublication;- publication form;
- generic publication face;
- declared MVPK face;
PublicationUnit;- carrier or rendering;
- document with named source-basis, evidence-basis, architecture-basis, or review-basis role;
- external-standard publication;
- project record publication.
If the sentence says a publication "supports", "authorizes", "proves", "permits", or "makes admissible" something, split the basis: fill relationClaimSlice when a relation claim is live, fill admissibleUse when a boundary-use claim is live, and fill projectSideFPFRef when project-side records, evidence paths, gate decisions, constraint or adjudication decisions, assurance records, work, action invitations, speech acts, commitments, methods, or carriers are live. If either side is not triggered, say so explicitly rather than filling it with generic support.
surface, view, face
Do not treat these as synonyms.
If the sentence can survive only because these are blurred, the sentence is not ready.
source, target
These are relation words, not final kinds.
Split source into source U.Episteme, source U.EpistemePublication, U.View over a source U.Episteme, document with named source-basis, evidence-basis, architecture-basis, or review-basis role, A.10 evidence path, authority-reference relation, named FPF pattern cited as source, file carrier, source frame, source context, relation slot on the source side of a named relation, or project-side FPF kind and reference named by value.
Split target into EntityOfConcern, target U.Episteme, review target, governing FPF pattern, project target, work target, target publication form, project-side FPF kind and reference named by value, target frame, target context, or relation slot on the target side of a named relation.
Generic object and target are not final recovered kinds. Keep them only when the sentence is explicitly declaring a variable slot, such as ObjectKindUnderImprovement, ObjectVersionUnderImprovement, ObjectVersionUnderQualityEvaluation, review target, or one named relation endpoint whose endpoint kind is supplied by value nearby. When the kind named by value is known, write the kind named by value: FPF pattern version, DRR, FPF corpus slice, publication form, PublicationUnit, file carrier, system carrier, declared transduction result, candidate proposal, evidence path, gate decision, work plan, method description, object-under-improvement evaluation, or another named FPF kind.
Do not recover an FPF pattern, publication form, PublicationUnit, pattern body, or view as a carrier. Use carrier only for the system, medium, file, rendering, or transport object that bears or renders a publication or symbol. If the text means the FPF pattern publication form, write FPF pattern publication form; if it means the file or rendered medium, write file carrier, system carrier, rendering, or another carrier kind named by value.
Common repair examples:
Do not publish "source and target" if the selected relation needs the actual FPF kind.
artifact, material, output, deliverable
These are high-risk umbrella words. Before accepting them, test publication-related and record-related interpretations first:
U.Episteme;U.View,U.EpistemeView;- publication form;
- generic publication face;
- declared MVPK face;
PublicationUnit;- carrier, front-end, or rendering;
- project-side FPF kind and reference named by value;
- work result, work-occurrence output, or project record named by the governing FPF pattern;
- evidence carrier;
- document with named source-basis, evidence-basis, architecture-basis, or review-basis role;
- review target.
If none fits, record the candidate missing kind in architecture first; do not invent it inside pattern prose.
record
Use record only when the governing FPF pattern or project practice names the record kind and relation. The nearby wording must say which FPF kind the record instantiates or records, for example:
A.10evidence path or evidence record for a named claim;A.21GateDecisionorDecisionLogRef;A.20constraint or adjudication decision record;C.11ChoiceResultor decision record;A.15U.WorkPlan,A.15.1datedU.Workoccurrence, or other named work record;A.2.8U.CommitmentorA.2.9SpeechActpublication;U.RoleAssignmentor status-register entry under the named governing pattern;E.19review run record or another named review record whose review target and review relation are explicit;- process run record in process documents.
Do not let record mean "any file that remembers something", "the missing source", or "the thing to create when support is absent". If required support is absent, create a prospective repair request, future decision request, prospective work-plan entry, or explicit source-gap note; it does not backdate support.
model, diagram, screen, dashboard, table, note, memo, summary, explanation
These are recognition examples, not governing kinds. Classify each occurrence as one of:
- episteme or episteme publication;
U.View,U.EpistemeView;- publication form;
- generic publication face;
- declared MVPK face;
PublicationUnit;- carrier, front-end, or rendering;
- project-side FPF kind and reference named by value;
- explanation and source-finding relation under
E.17.EFP; - evidence, currentness, and provenance relation under
A.10; - gate-bearing claim or effect under
A.20orA.21; - assurance and engineering-justification record under
B.3; - work and reliance source-restoration relation under
A.15.4.
Keep the ordinary example word only after the governing kind is visible nearby.
reader, reviewer, author, operator
Do not use people-position words as hidden kind names.
Use:
working readerorintended practitionerfor ordinary usability;engineer-managerwhen the FPF use case is the engineer-manager applying the pattern in work;revieweronly for a participant in a named review relation; use review process, review gate, or review target for the process, gate, or object;authoronly for authoring or editing work;operatoronly for an actualU.Role, operator position or process operator in the selected context.
If a text says "reader-facing" or "review-facing", it must also name what is facing that person: generic publication face, declared MVPK face, packet, document with named source-basis, evidence-basis, architecture-basis, or review-basis role, PublicationUnit, carrier, or UI or front-end.
owner, home, host, locus
These are not interchangeable.
owner may be kept as architecture-discussion shorthand only when the kind under repair is an explicit responsibility assignment or stewardship assignment. It is not an admissible substitute for pattern, DRR, U.Episteme, U.EpistemePublication, publication unit, file carrier, or project record.
Split into:
- governing FPF pattern relation or authority-reference relation;
- named governing source set;
- explicit source-maintenance role assignment;
- file carrying FPF pattern text;
- file carrier;
- publication unit;
- process-control role assignment;
- role assignment;
- evidence record or evidence source;
- governing FPF pattern or project target;
- support root.
Never use owner to avoid deciding whether the sentence is about a governing FPF pattern, authority-reference relation, file carrier, responsibility assignment, or process control.
route, branch, handoff, path, trajectory, move, flow
Recover the movement, control, and temporal relation set before using these words:
A.16local move;A.16.0trajectory account;A.19,C.2.2aposition in characteristic space or state space;B.2.5control relation, control-layer relation;- process handoff;
- selector relation or selection mechanism;
- work transfer;
E.18path publication;A.6.3,A.6.4episteme morphism or retargeting.
If no movement, control, and temporal relation is live, keep the word ordinary and non-authorizing.
use, supported use, action, effect
Split the word before accepting it:
- applying an FPF pattern to a problem situation;
- interpreting or using a publication, view, record, cue, or carrier;
- relying on a named project episteme, a named source-basis document, or a project-side FPF kind and reference named by value for a named claim or effect;
- admissible act, work, or claim under a named FPF pattern,
A.6.Prelation claim, relation phrase, or project-side FPF kind and reference named by value; - non-admissible act, work, or claim requiring one other named value: FPF pattern,
A.6.Prelation claim, relation phrase, project-side FPF kind and reference named by value,C.11ChoiceResult,C.11decision record,A.6.Aaction invitation,A.15U.WorkPlan,A.15.1datedU.Workoccurrence,U.Method,U.MethodDescription,A.20constraint or adjudication decision record,A.21GateDecision,A.21DecisionLogRef,A.10evidence path, typed evidence record,B.3assurance or engineering-justification record, typed status record whose FPF status pattern is named, carrier relation, or front-end relation; - planned work;
- actual
U.Work; - evidence of interpretation or effect;
- gate or admission decision.
Do not let supported use become a generic capability of a document.
The FPF-governed wording names the admissibleUse target named by value and non-admissible stronger or adjacent use, relationClaimSlice when a relation claim is live, and projectSideFPFRef when a project-side FPF kind and reference named by value is live.
If the sentence says "supported", it must name the admissibleUse target named by value and non-admissible stronger or adjacent use, relationClaimSlice when a relation claim is live, and projectSideFPFRef when a project-side FPF kind and reference named by value is live. Do not satisfy the rule by naming only a project record, evidence record, gate record, assurance record, engineering-justification record, only an FPF pattern, or one mixed project-side entry when several A.7 or A.15 role, method, work-plan, and actual-work kinds are live.
sign, concept, denotat, and school-semiotic labels
Do not import the school-semiotic triad as architecture ontology.
When a source or review text says sign, signifier, signified, concept, denotat, representamen, interpretant, or sign vehicle, apply the composite recovery order before the term appears in FPF-facing prose.
Possible recoveries include:
U.Epistemeor episteme species named by value;- selected
EntityOfConcern, grounding, reference-plane relation; U.View,U.EpistemeView;- publication form, generic publication face, declared MVPK face, or
PublicationUnit; - carrier, front-end, or rendering;
- cue, displayed wording, mark, status display, credential display, provenance mark, signature evidence;
- evidence record, gate record, work-state record, commitment record, role-assignment record, or another project-side FPF kind and reference named by value;
- FPF pattern, pattern section, accepted
DRR, FPF publication, or FPF view when the object is on the FPF side.
Use concept only where current FPF already has the relevant concept-set, UTS, local-meaning, or Part F machinery live.
Otherwise recover the episteme slot, relation, or typed record named by value.
pattern, generic FPF-side object wording, locus, row, target
Pattern is not a free synonym for regularity.
If the intended object is an FPF pattern, write FPF pattern or name the governing pattern.
If it is not an FPF pattern, do not write recovered FPF construction as the final value. Choose one recovered value by sentence function: episteme, view, publication, publication form, generic publication face, declared MVPK face, PublicationUnit, carrier relation, front-end relation, project-side FPF kind and reference named by value, document with named source-basis, evidence-basis, architecture-basis, or review-basis role, review target, relation record, relation phrase, C.11 ChoiceResult, C.11 decision record, A.6.A action invitation, A.15 U.WorkPlan, A.15.1 dated U.Work occurrence, U.Method, U.MethodDescription, A.20 constraint or adjudication decision record, A.21 GateDecision, A.21 DecisionLogRef, A.10 evidence path, typed evidence record, B.3 assurance or engineering-justification record, or typed status record whose FPF status pattern is named.
Avoid generic FPF-side object wording, generic named-target wording, locus, row, and host when they hide kind.
Use them only when the kind is literally a table row, document with named source-basis role, file carrying FPF pattern text, or review target and the sentence does not need a narrower FPF kind.
For FPF-facing wording that carries a claim being made, relation, admissible use, or reader move, these are candidate recoveries, not a group kind: governing FPF pattern, pattern section, accepted DRR, FPF publication, FPF view, typed record, relation record, or relation phrase. Choose one by sentence function.
Union-field unpacking under A.6.P
Do not write authority-bearing FPF pattern, authority-bearing FPF row, FPF row named by value, selected FPF pattern, record, or relation, governing FPF relation, or required project record or action as final fields.
When one of these union-fields appears, make the A.6.P choice explicit:
- if the sentence is making a relation claim, recover the
RelationKind, endpoints, slots, qualifiers, scope, time, viewpoint, and admissibility target, then express the result as a relation record or relation specification; - if the sentence is not making one relation claim, unpack the current context into FPF-side kind, reference, or relation named by value and one project-side FPF kind with its reference, or state that no project-side FPF kind is triggered;
- if the same unpacking recurs across cases with one stable recovery apparatus, open a light A.6.P specialization candidate rather than minting a vocabulary-wide replacement field.
This unpacking is mandatory when a publication, display, cue, explanation, dashboard tile, schema, signature, badge, or generated output is being read as evidence, gate passage, work, permission, approval, commitment, release, safety proof, assurance, or engineering justification.
Do not fill one project-side slot with whichever nearby FPF kind is easiest to name. A project publication or record is a description-side item or record-side item; A.15.1 dated U.Work occurrence, A.6.A action invitation, A.2.9 SpeechActRef, A.2.8 U.Commitment, and U.Method and U.MethodDescription belong to different FPF kinds.
Heterogeneous kind lists
Do not repair a heterogeneous list by giving it one broader umbrella name.
When a sentence lists unlike candidates such as pattern, DRR, publication, U.View, carrier relation, front-end relation, project-side FPF kind and reference named by value, C.11 ChoiceResult, C.11 decision record, A.6.A action invitation, A.15 U.WorkPlan, A.15.1 dated U.Work occurrence, U.Method, U.MethodDescription, A.20 constraint or adjudication decision record, A.21 GateDecision, A.21 DecisionLogRef, A.10 evidence path, typed evidence record, B.3 assurance or engineering-justification record, or typed status record whose FPF status pattern is named, do not promote the row to a new kind. Classify the list as one of:
- one kind under repair selected at bounded complete generality;
- a relation set with typed slots;
- a tuple-like record;
- several alternative cases;
- an indicator of failed ontology.
If the list is a relation set, name the slots.
If it is a tuple-like record, name the tuple object and its slot semantics.
If it is an alternative-case set, split the cases.
If it is failed ontology, return to architecture before pattern or DRR prose depends on the list.
strong, stronger, weak, weaker, support
Do not use strength metaphors unless a named FPF scale, evidence class, threshold, or characteristic space is live.
Preferred rewrites:
stronger claim-> wider claim scope, higher evidence requirement, gate or admission threshold, claim requiring world-contact evidence or authority relation, authority claim, or named evidence-support class;weaker claim-> narrower claim scope, lower evidence-support class, bounded admissible act, work, or claim,source-loss modeunderA.6.3.CSCwhen a source-to-rendering loss is live, coarsened rendering, or explicit abstain or reopen condition;support-> one selected support-like interpretation underA.6.P, not a more polished synonym. If the selected interpretation is base, anchor, or basedness, applyA.6.6and statedependent,base,baseRelation,scope, liveΓ_time, live witnesses,admissibleUse, andnonAdmissibleUse. For FPF-governedsupport, first choose the support-like interpretation:- source-description relation: a source episteme, publication, view, model, graph, trace, generated representation, or document describes, exposes, renders, cites, or makes inspectable one claim-bearing item;
- EntityOfConcern or grounding-holon grounding: the claim-bearing episteme, view, representation, or pattern application is grounded in its EntityOfConcern, local world contact, observation setting,
EntityOfConcernSlot, orGroundingHolonSlot; - base, anchor, or basedness relation: the phrase means relative-to, based-on, anchored-in, base change, or scoped grounding as a base relation; use
A.6.6support wording selection and rewrite asbaseRelation(dependent, base)or SWBD, not as a genericSupportBasis,SupportRelation, orSupportRecord; - evidence or witness support: an evidence role, evidence path, witness relation, witness carrier, observation, test, or observation record or test record bears on a claim;
- assurance or engineering-justification support: an assurance argument, trust calculus, safety case, or engineering-justification claim is live;
- causal-use relation or evidence relation: a causal-use question, rung, estimand,
CausalEvidenceSupportBasis,CausalUseSupportVerdict, supported use, and unsupported use are live; - mathematical-lens use or lens-use admissibility: a mathematical lens, mapping, similarity, or formal object makes a bounded claim admissible or exposes preserved structure and lost structure;
- characteristic, measurement, threshold, or comparison basis: a characteristic, metric, scale, benchmark, threshold, or comparison basis is being used;
- admissible-use or boundary-use basis: the sentence says what use, act, claim, publication use, or reliance is admissible;
- work, enablement, prerequisite, resource, or operational help: one thing helps, prepares, routes, resources, enables, or makes work easier without evidence, authority, truth, or admissibility claim;
- publication companion, entry, navigation, or reader help: a file, section, index, map, review packet, support document, or companion helps readers find, inspect, compare, or review another item.
Support-headed names such as SupportRecord, SupportSource, SupportLine, SupportForm, a support phrase that hides a state-family claim, SupportSection, SupportMaterial, support basis, support relation, support view, and supported use are diagnostic triggers; they are conformant only when rewritten to a governing FPF record named by value, field, publication function, state-family value under A.19.SPR only when the selected claim is actually a state-family claim, relation, admissible-use boundary, or, for the A.19 case, DeclaredSubstrateInterpretiveView under A.19.DECLARED-SUBSTRATE-INTERPRETIVE-VIEW. If the phrase is base-dependence, A.6.6 is the governing pattern and the text must expose dependent, base, baseRelation, scope, live Γ_time, live witnesses, admissibleUse, and nonAdmissibleUse. Otherwise rewrite the head to the selected interpretation: source-description relation, EntityOfConcern grounding, grounding-holon relation, evidence path, source-use relation, source-currentness claim, source adoption/adaptation/rejection decision, source-description relation, relation record, admissible-use boundary, assurance claim, C.28 causal-use relation or causal-use verdict, C.29 lens-use output, C.16 characteristic construction, measure relation, or comparability relation, bridge/comparison card, work enablement relation, publication companion, or ordinary reader help.
A support-headed phrase selected by an accepted DRR, pattern draft, table heading, schema field, coordinate name, or future drafting vocabulary is already durable enough to trigger F.18 unless the text explicitly marks it as source-only, quote-only, or rejected. Do not accept subject to F.18 later as E.10 closure when the phrase is already being used to guide authoring, review, landing, or reusable FPF wording. Either complete the naming decision now, replace the head with the selected interpretation named by value, or leave the naming issue blocking by value.
If the sentence cannot name the scale, evidence class, threshold, relation, source-loss mode, EntityOfConcern, grounding holon, base relation, admissible-use target, or support-like interpretation named by value, it is not ready for architecture or pattern prose. A.6.3.CSC governs FPF-governed source-loss-mode governance; A.6.P governs support-like interpretation discrimination and relation precision restoration; C.2.P requires the wording to recover the governing pattern and mode.
Applying patterns versus procedural calls
FPF patterns are applied in problem situations. They are not called, invoked, routed through, executed as procedure steps, or chained as an imperative program. When another FPF pattern is live, the text names the FPF pattern application and the ontology, conformance claim, or conformance section named by value being applied; it does not describe a route, exit, or handoff as if the pattern controlled a sequence.
Use apply pattern, use the pattern guidance, the pattern governs this problem situation, or the case falls under this pattern when the FPF side is live.
Do not use project action as a final class. For project-side activity, choose exactly one kind under repair for the sentence: U.Method; U.MethodDescription; U.Mechanism; A.15 U.WorkPlan; A.15.1 dated U.Work occurrence; work-result record or result-measurement record; C.11 ChoiceResult; C.11 decision record; A.6.A action invitation; A.20 constraint or adjudication decision record; A.21 GateDecision; A.21 DecisionLogRef; A.10 evidence path; typed evidence record; B.3 assurance or engineering-justification record; typed status record whose FPF status pattern is named; carrier relation; front-end relation; or another accepted project-side FPF kind.
Use route, path, branch, handoff, trajectory, move, or flow only after the movement, control, and temporal relation set has named the FPF kind under repair.
FPF-side and project-side episteme and publication contexts
Semioarchitecture often talks about two different described contexts:
- FPF-side episteme and publication context:
FPFas episteme, FPF patterns, pattern sections,DRRs, FPF publications, FPF views, support documents and documents with named source-basis, evidence-basis, architecture-basis, or review-basis roles, and review targets; - project-side episteme and publication context: the engineer-manager's project epistemes, publications, views, records, carriers, cues, evidence records,
A.20constraint or adjudication decision records,A.21gate decisions,A.21decision-log refs,B.3assurance or engineering-justification records, commitments,A.15.1datedU.Workoccurrences,C.11ChoiceResultvalues,C.11decision records, andA.6.Aaction invitations.
Do not blur them with source, artifact, object, material, target, pattern, or broad semiosis.
If both contexts are live, split the sentence into relationClaimSlice when a relation claim is live, admissibleUse when a boundary-use claim is live, and projectSideFPFRef when a project-side FPF kind and reference named by value are live.
If one context is not live, state not triggered rather than leaving a placeholder.
decision, action, work, method, plan
Do not let action cover every project-side event.
Split:
- decision-making and decision records under
C.11when a decision is live; - role, method, and work-plan and actual-work alignment under
A.15; - work occurrence, work plan, work record, launch value or finalization value, or gate record under the relevant work patterns or gate patterns;
- action invitation under
A.6.Awhen the representation invites an action without itself becoming authority; A.15.1datedU.Workoccurrence when the liveA.15object is work;A.2.9SpeechActRefwhen the live act is a communicative act;A.2.8U.Commitmentwhen the act institutes a commitment.
P2W language from TGA is not a generic source-to-work slogan.
Use it only when the chain from principles, theories, and signatures through method choice, work planning, work execution, result measurement, and cycle return is actually being made.
Whole-corpus trigger use
When a whole-corpus cleanup is selected, use this pattern's trigger guide over claim-bearing FPF text and project text that deliberately uses FPF-governed terms, pattern references, relation names, or conformance claims.
Do not do a global string replacement. Classify each unclear term occurrence by the bounded complete rewrite mode and preserve accepted FPF names unless a separate accepted naming decision changes them.
case, scenario, example, pilot, anti-case
These words are useful for recognition and testing, but they often hide whether the text is talking about a project situation, evidence, a worked slice, a negative control, or a decision basis.
Split before use:
- working problem situation;
- worked case or example;
- pilot case;
- anti-case, negative control;
- evidence case;
- comparison case;
- source example;
- benchmark case;
- candidate corpus example.
A case can illustrate or test a pattern.
It does not by itself become evidence, a pattern, a DRR, a source basis, or an authority-reference relation.
If the case is being used to justify a claim-bearing text change, choose and name each EntityOfConcern under repair or relation separately: evidence record or evidence path, decision basis or decision record, authority relation, relation to a governing FPF pattern, or relation to an accepted DRR.
basis, context, scope, frame
These are boundary, context, relation, and scope words. They must not stand as final kinds.
Split:
- source basis;
- decision basis;
- evidence basis;
- comparison basis;
- threshold basis;
- grounding basis;
- admissibility basis;
- review context packet;
- bounded context;
- claim scope;
- viewpoint frame or reference frame.
If a basis changes what may be done, fill admissibleUse; fill relationClaimSlice only when a relation claim is live, and fill projectSideFPFRef when a project-side FPF kind and reference named by value are live.
If context changes the EntityOfConcern, apply the EntityOfConcern, grounding, and reference-plane checks before any bridge, parity, or identity claim.
translation and multilingual heads
A translated term is not automatically the same FPF head. A translation may preserve reader access while losing kind precision, admissible use, source-use boundary, or source-description relation. A bilingual alias is not a Bridge by itself and does not create equivalence, substitution, UTS admission, or cross-context naming relation.
When translated wording has FPF-governed use, recover the FPF kind named by value, local head, publication construction, source relation, and admissible use before accepting the translation. A translated explanation is a derivative rendering; operative claims need source links and E.17.EFP or A.10 when reliance use is being made. A translated PublicationUnit may preserve form while shifting publicationUnitPrimaryEntityOfConcern or carried publication move; apply E.17.AUD or E.17.AUD.OOTD when that shift is live. Local translated heads may use E.17.AUD.LHR or C.2.P without full F.18 unless durable cross-context naming, UTS row, Core-facing term, or reusable FPF head is intended.
state, status, posture, readiness
Do not let state-family wording become a maturity adjective, evidence claim, assurance result, gate passage, release permission, source authority, work completion, or process state by appearance.
When a state-family word has FPF-governed use, apply A.19.SPR unless the governing pattern and local state-like field are already recoverable by value.
Minimum closure:
Typical governing patterns:
A retained ...Posture, ...Status, ...Readiness, or ...State field must declare field name, bearer kind, governing pattern, value set or classification source, admissible use, non-admissible overread, and reopen/change condition when applicable. If those are missing, rewrite to the governing-pattern phrase or record, mark quote-only/reduced-use, or leave the rewrite blocked.
Do not replace support with a support phrase that hides a state-family claim, a source-use bucket, a basis-headed bucket, or another state-family substitute. Apply the support-like interpretation, base-relation, source-use, evidence, assurance, lens-use, characteristic, or admissible-use pattern that actually carries the claim.
live, current, active, and status/article overwrap
live, current, active, open, pending, and similar status-like modifiers are trigger wording when they attach to pattern, record, object, field, operation, route, locus, move, text, claim, question, use, or relation without saying what state, time window, use-position, or claim role the modifier adds.
First recover whether the modifier expresses a real FPF value:
- If it means source currentness, state, status, readiness, publication-use disposition, quality result, admission state, or campaign/process state, apply
A.19.SPR,C.2.P,E.9.DA,E.21,E.19, the release or process carrier named by value, or the governing pattern for that value. - If it means a claim, question, use, or relation is currently asserted, relied on, or action-bearing in the described situation, keep the modifier only when the sentence also names the claim named by value, relation, admissible use, and governing pattern or says why ordinary prose is enough.
- If it only points to "the thing under discussion", treat it as phrase-level apparatus and apply
F.19: writethe pattern,pattern of concern, record named by value kind, affected field, operation claim, relation claim, or other object named by value instead oflive X. - If it is development, review, projection, landing, or current-campaign state about an FPF pattern version, keep it in the process, quality, projection, release, or campaign carrier rather than in the pattern unless that state is the pattern's own primary
EntityOfConcern.
Do not close this row by deleting live or replacing it with current, active, at issue, or another status word. Closure is a KindRestorationCheck: the modifier is ordinary prose, an state, currentness, or use-position value named by value, a retained claim/use/relation marker with named admissible use, an F.19 apparatus removal, or a blocker.
claim, evidence, witness, ground, proof
Claim is not a synonym for sentence or prose.
Evidence is not a synonym for source, proof, approval, or confidence.
For claim, recover:
- claim-bearing episteme;
- claim node, claim content;
- EntityOfConcern or claim referent;
- viewpoint and representation scheme when live;
- admissibility target when the claim is used.
For evidence-like words, recover:
- evidence record or evidence path;
- witness or source pin;
- grounding relation;
- validation result;
- assurance argument component;
- provenance mark only as provenance, not as evidence by itself.
If evidence is being read as engineering justification, gate passage, permission, safety proof, or release confidence, apply the governing FPF pattern or use the project-side FPF kind and reference named by value instead of strengthening the evidence word.
authority, permission, approval, commitment, obligation
These are deontic claims or claims carrying an authority-reference relation, not visual or rhetorical properties.
Recover:
- role assignment;
- speech act or issuing act;
- commitment record;
- policy claim;
- authority relation;
- gate record or decision record;
- authority-changing decision;
- delegated permission;
- contestability, revocation, expiry condition.
Labels, badges, signatures, dashboards, certificates, comments, reviewer praise, and generated explanations may cue authority-looking cases. They do not carry authority unless the authority act, authority record, authority-reference relation, and evidence path are named.
profile, harness, catalog, registry, index, map
These usually point to a review profile, review harness, registry record, catalog publication, navigation index, map, publication form, companion publication, publication-companion relation, or relation between one companion publication and the publication unit or project record it helps readers inspect or use. Choose that kind named by value before writing; do not leave support record as the recovered head unless the named FPF pattern really defines that record kind.
Treat one as a governing FPF pattern body, accepted campaign DRR, named current architecture document, or relation to one of them only when the named FPF pattern, accepted DRR, architecture document, relation record, or relation phrase is given by value.
Split:
- review profile;
- review harness;
- source map;
- navigation index;
- registry record;
- catalog publication;
- benchmark harness;
- entry aid or discoverability aid;
- governing pattern body.
If the named companion publication, review profile, review harness, registry record, index, or map mainly helps readers find, compare, test, or review something, keep it as a companion, navigation, or testing aid until a named FPF pattern or accepted DRR records the recurring action-guidance gain by value.
entry, front door, corridor, route
These terms often mix navigation, recognition, movement, and authority.
Split:
- entry publication or navigation aid;
- first-use recognition text;
- navigation-bearing publication;
- movement, control, and temporal relation;
- process sequence;
- corridor overview;
- governing FPF pattern named by the live problem; if a cluster or relation between patterns is genuinely live, name the cluster phrase or relation phrase named by value and the governing FPF patterns by value.
An entry can make the right pattern easier to find. It does not prove the pattern is sufficient, complete, or ready for gate use.
same, parity, identity, equivalence, mirror
Similarity is not identity. Before accepting same, parity, or equivalence wording, name which relation is being claimed:
- mirror file in parity with a governing source;
- same EntityOfConcern;
- same claim content;
- semantic equivalence;
- bridge relation;
- version identity;
- file or carrier equality;
- source-publication identity;
- no-loss transform.
If the relation is about mirror parity, verify against the governing source or state that the check is not performed.
If the relation is semantic, use A.6.3, A.6.4, F.9, or the selected bridge pattern or equivalence pattern rather than relying on matching labels.
file, path, host, packet, bundle, package
These are carrier, transport, or package-form words.
Split:
- file or carrier;
- mirror file;
- file carrying FPF pattern text;
- document with named source-basis, evidence-basis, architecture-basis, or review-basis role;
- review-facing target packet;
- review-facing context packet;
- release package;
- pattern package, pattern family, or pattern group under an accepted decision;
- governing source section.
A packet or bundle can carry a review target by value.
It is not automatically the authority-reference status, the target pattern, the accepted review result, or the FPF authoritySourceRef target.
quality, characteristic, metric, indicator, score
Do not let evaluation words float.
Split:
U.Characteristic;- characteristic space;
- Q-bundle;
E.21 PatternQualityQBundle;- scale;
- indicator;
- observed value;
- benchmark result;
- review finding;
- decision threshold;
- qualitative judgment with no scale.
metric is especially risky because FPF often treats it as imprecise shorthand for scale, value, or indicator machinery.
If the text says a quality improved, name what changed: characteristic, scale, observed value, threshold, decision consequence, or admissible act, work, or claim.
If "quality improved" refers to an FPF pattern version, name whether the change affects an E.21 required coordinate value, status payload, stop condition, bounded non-use, or governing-pattern application.
slot, field, row, label, badge, mark, cue
These words are not kinds by themselves.
Split:
- episteme slot;
- relation slot;
- schema field;
- table row;
- row in a pattern body;
- publication label;
- provenance mark;
- status badge;
- pre-articulation cue;
- displayed cue;
- evidence marker.
A label, badge, mark, or cue may trigger review. It does not prove currentness, identity, authority, evidence, gate passage, or release permission unless the source relation named by value and evidence path are named.
Current Scan Reading
For conformant text cleanup and source-expression unpacking, high-risk phrases are not automatically wrong. The shared scan is E.10:0.2; the rows below are episteme-publication-heavy candidate recovery prompts, not a second registry and not group kinds. Choose the recovered value by sentence function before reuse:
- topic-like or object-like wording: recover episteme slots or non-claim-bearing project kind;
- publication-unit wording that implies authoring or interpretation work: distinguish
U.Episteme,U.EpistemePublication,PublicationUnit, file, source note, review target; content: usually one of claim graph, text span, publication unit, carrier bytes, or document with named source-basis, evidence-basis, architecture-basis, or review-basis role;- primary-entity field names: use
publicationUnitPrimaryEntityOfConcernwhen a boundedPublicationUnitcarries or exposes a claim-bearing episteme or episteme-laneU.View; otherwise non-claim-bearing kind or reference named by value when no episteme slot is live; surface: keeppublication face or publication formorinterop publication formonly whenpublication-face kinddiscipline is named by value; otherwise rewrite to generic publication face, declared MVPK face, publication carrier, interop carrier, UI or front-end face, companion publication, source named by value, evidence, assurance, or relation record, or carrier relation;artifact,material,output, andcontent: do not let them stay as heads in architecture or pattern prose when they carry ontology or authority;source,target: acceptable only when the recovered source kind, target kind, and any live relation slot are also named;reader,reviewer: safe only when the word really names a usability reader, review participant, or review process; otherwise name the generic publication face, declared MVPK face, packet, orPublicationUnit;- pre-FPF sign vocabulary: recover FPF episteme kinds, publication kinds, view kinds, carrier kinds, and record kinds before reuse; do not rebuild FPF episteme and publication ontology on a concept-sign-denotation triad;
- generic FPF-side object wording,
locus,row,host, ortarget: choose the recovered value named by value: FPF pattern, pattern section, acceptedDRR, FPF publication, FPF view, document with named source-basis, evidence-basis, architecture-basis, or review-basis role, file carrier, review target, typed record, relation record, or relation phrase; supported use: replace with theadmissibleUsetarget named by value and non-admissible stronger or adjacent use,relationClaimSlicewhen a relation claim is live, andprojectSideFPFRefwhen a project-side FPF kind and reference named by value is live;strong,stronger,weak,weaker: replace with scope, evidence class, threshold, gate or admission threshold,source-loss modeunderA.6.3.CSCwhen a source-to-rendering loss is live, coarsened rendering, or explicit abstain or reopen condition;authority-bearing FPF pattern or row: split into governing FPF pattern or pattern section,relationClaimSlicewhen a relation claim is live,admissibleUsenamed by value when a boundary-use claim is live, andprojectSideFPFRefwhen a project-side FPF kind and reference named by value are live;route,call,invoke, or procedure-like pattern wording: replace with pattern application or with project-sideU.Workoccurrence,U.Method,C.11decision value, orA.6.Aaction invitation.
High-risk residue classes:
- pre-FPF sign vocabulary must be restored to FPF kinds by context;
- FPF-side umbrellas: generic FPF-side object wording, generic named-target wording,
locus,row,host, andsourcemust be unpacked into the recovered value named by value, such asFPF pattern,pattern section,DRR,FPF publication,U.View, document with named source-basis, evidence-basis, architecture-basis, or review-basis role, file carrier, relation record, relation phrase, or file-carrier phrase; - project-side umbrellas:
artifact,material,output,screen,dashboard,credential,badge, andexplanationmust be unpacked into one recovered value named by value, such as publication, generic publication face, declared MVPK face, publication form, carrier relation, front-end relation, project-side FPF kind and reference named by value,A.10evidence path, typed evidence record,A.20constraint or adjudication decision record,A.21GateDecision,A.21DecisionLogRef,B.3assurance or engineering-justification record, typed status record whose FPF status pattern is named,C.11ChoiceResult,C.11decision record,A.6.Aaction invitation,A.15U.WorkPlan,A.15.1datedU.Workoccurrence,U.Method,U.MethodDescription, work-result record, or result-measurement record; - admissibility phrases:
supported use, stronger or adjacent use not carried by the current pattern, insufficient evidence relation, and similar formulas must name theadmissibleUsetarget named by value and non-admissible stronger or adjacent use,relationClaimSlicewhen a relation claim is live, andprojectSideFPFRefwhen a project-side FPF kind and reference named by value is live; - pattern-control metaphors:
route,call,invoke,exit,path,branch,chooser, andworkflowmust be checked for declarative pattern application versus real movement, control, and temporal claims.
Trigger Concordance And Closure Mechanism
E.10 is applied to a bounded FPF-facing text object, not only to one remembered example sentence. Before claiming E.10 closure over an accepted DRR, FPF pattern, extracted pattern host, monolith section, review-facing packet, or FPF-facing guidance, run trigger concordance when a high-pressure trigger is FPF-governed across the bounded object.
Do not build a heavy concordance for every ordinary word. Trigger concordance applies when one trigger word or trigger-headed phrase:
- appears in a selected name, durable reusable name, heading, table column, schema field, coordinate name, status value, or future drafting vocabulary;
- recurs across the problem frame, decision, selected names, validation, and handoff-like action claims or conformance subjects often enough to carry the local architecture;
- acts as a replacement head for another broad head;
- appears in a returned finding or accepted basis as a term whose meaning must survive into FPF wording;
- or remains the only word that lets the sentence appear precise.
The mechanism is:
- Inventory the trigger spans inside the bounded object, with loci or grouped loci and count. Mark structural role: ordinary prose, selected name, heading, table column, field, example, quote/source-only wording, relation phrase, publication phrase, or source-use phrase.
- Group occurrences by local interpretation, not by trigger word alone: ordinary no FPF-governed use, local lexical repair, relation-like use, episteme use, publication use, source-use, durable naming need, quote-only or source-only wording, false positive, or blocker.
- For each local interpretation, choose and complete the repair consequence. Local repair may close under
E.10. Relation-like wording appliesA.6.Por its retained specialization. Episteme wording, publication wording, or source-use wording appliesC.2.P. Durable reusable naming appliesF.18after the kind under repair/use recovery. Quote-only or source-only wording needs a non-use disposition. Classification labels are not closure endpoints. - Rewrite the bounded object, or leave a blocker. A note saying
apply A.6.P where live,apply C.2.P where live,apply the governing pattern where live,subject to F.18 later,classified under A.6.P,classified under C.2.P, orboundaries are stated nearbyis not closure unless the recovered result is already present in the final wording or the missing required repair is explicitly blocking. TheFinal wording or blockercell must not be empty for any FPF-governed trigger. - Reread saturation. If one trigger word still carries several different local interpretations after repair, or dominates the selected names of the bounded object, the text has likely preserved an umbrella rather than repaired it. Split the local interpretations into names or governing-pattern applications named by value before accepting the wording.
Use this compact closure table when trigger concordance is live:
Allowed closure dispositions are only:
- ordinary wording with no FPF-governed use accepted;
- local lexical repair closed under
E.10; A.6.Precovery completed and integrated into the text;C.2.Precovery completed and integrated into the text;F.18naming decision completed after kind/use recovery and integrated into the text;- quote-only, source-only, or non-use disposition stated by value;
- false positive stated by value;
- still blocking.
Do not close trigger concordance with a summary statement that E.10 was run, with a citation to A.6.P or C.2.P alone, with a correct classification but no governing-pattern repair product, with a later-work promise, or with a table that covers only representative examples while the remaining FPF-governed occurrences keep the same unresolved head.
Recovery and disposition table
E.10 gives only a small local recovery/disposition form. It does not unpack relation-like or episteme-publication-heavy source meaning by itself.
Closure rules
Problem context
Current name set. E.10 is the current FPF pattern. E.10:0.2 is the shared wording-use trigger scan. The older LEX-BUNDLE or ULR material below is retained as detailed reference apparatus for selected lexical, register, naming, morphology, and local rewrite problems. It is not a second current ontology, not a second trigger registry, not a second pattern head, and not a replacement for E.10.ARCH, the selected precision-restoration realization pattern, a governing pattern, or F.18.
Intent. Provide one normative rule-set that makes FPF language unambiguous, composable across contexts, and teachable by design. Authors, reviewers, and tooling can point to LEX-BUNDLE as the governing lexical pattern for:
- Vertical stratification (Kernel ↔ Extensions ↔ Context ↔ Instance);
- Twin registers (Tech/Plain) with safe synonyms;
- Naming morphology (allowed suffixes & style) for the kernel’s core objects;
- Minimal Generality tests (names are neither parochial nor vacuous);
- Ontology recovery rows for overloaded words (e.g., process, function, service);
- Conformance checks and minimal examples.
Scope. Applies to: (a) Core (Parts A–G), (b) Extensions patterns specs (CAL, LOG, and CHR), (c) Context glossaries that claim FPF conformity, and (d) Diagrams/prose in normative text. It does not constrain Tooling or Pedagogy wording other than where they quote Core semantics.
Problem
- Polysemy drift. Process, function, service, agent, activity slide between structure, recipe, execution, and promise.
- Cross‑context collision. A label (e.g., Owner) is assumed “global” though meanings differ per
U.BoundedContext. - Name bloat vs. parochialism. Either hyper‑specific domain names leak into core types, or vague umbrella names obscure invariants.
- EntityOfConcern and Description-episteme boundary and specification-use collapse. Authors mix EntityOfConcern (the thing under concern), Description episteme (how we describe it), and specification use (testable criteria, formality, acceptance, and harness-gated use of a Description episteme).
- Register soup. Tech terms bleed into Plain pedagogy and vice‑versa, inviting category errors.
Forces
Solution — the LEX‑BUNDLE rule‑set (overview)
LEX-BUNDLE aka ULR (Unified Lexical Rules) names the retained reference apparatus for register, naming, morphology, and rewrite checks inside the current E.10 pattern. Use it only after the E.10:0.2 scan has selected a lexical or register or naming problem that actually needs those details.
- Vertical Stratification (E.10 -> four strata);
- Twin‑Register Discipline (Tech/Plain pairs);
- Minimal Generality (MG) principle + tests;
- Morphology & Style (suffixes, casing, reserved prefixes);
- Canonical Rewrites for overloaded words (L‑rules);
- Conformance Checklist (CC‑LEX) and Regression Stubs (RSCR‑LEX).
Below are the normative clauses
Vertical Stratification (four strata; no cross-bleed)
Rule V‑0 (Strata). Every lexical item in a conformant text belongs to exactly one stratum:
- Kernel —
U.*types, kernel relations, invariants (e.g.,U.Holon,U.Role,U.Method,U.Work,U.PromiseContent). - Extension patterns — CAL, LOG, and CHR exports (e.g., Sys‑CAL, KD‑CAL, Agency‑CHR) that extend but do not override Kernel.
- Context — a
U.BoundedContextwith its Glossary, Invariants, Roles, and Bridges (local Context of meaning). - Instance — concrete identifiers (holders, role assignments, works, carriers).
V‑1 (Unidirectional meaning). Meaning flows downward only: Kernel → Extention patterns → Context → Instance. No stratum may redefine a higher stratum’s term; it may only specialise or bridge it.
V‑2 (Strata vs authoring stances). The four lexical strata above constrain tokens. They are independent of a claim-bearing unit's stance (its CtxState pins such as DesignRunTag, ReferencePlane, and Locus). Strata answer “what words mean here”; stance answers “where this claim lives in the flow” and which evidence‑lane expectations apply.
V‑3 (Citation style). When a Context term is used, its Context must be visible at first mention (e.g., OwnerRole:ITIL_2020). If an author needs Cross‑context reuse, they MUST cite a Bridge with a stated Congruence Level (CL) (see F.9).
V‑4 (Firewall). Tooling/Pedagogy idioms shall not leak into Kernel prose (DevOps Lexical Firewall). CI/CD jargon, file formats, or API names MUST NOT appear in Core definitions. (Pedagogy may use them as examples only, in the Plain register, with Tech anchors present.)
Ontology Guards
Tech register ontology guards
Purpose. This section stabilises the Tech register of the kernel lexicon by enforcing head‑anchored naming, explicit kind naming, EntityOfConcern and Description-episteme boundary and specification-use morphology, disciplined treatment of Role and Holder, and Domain usage consistent with D.CTX and UTS. It aligns with F.4 Role Description (RCS/RSG), F.11 Method Quartet Harmonisation, and F.17 UTS. Scope: Guidance is register‑agnostic and applies to the whole FPF; examples are illustrative and MUST pass Minimal Generality & Domain Anchoring (MG-DA) and other rules of lexical governance pattern E*. This guidance applies to kernel and non‑kernel components (including Part G and patterns in Part C) and SHOULD be reused across extensions.
Onto1 — Head‑anchoring (use Kernel heads + pass LEX.TokenClass, EntityOfConcern and Description-episteme boundary, and specification-use gates)
- Rule: The head noun of a term MUST explicitly signal the kind (
System,Holon,Role,Work,Episteme,Tradition,Lineage,Characteristic,Method,Profile,Description,Spec,Flow,Card,Pack,Dashboard, …). - Figurative heads with obvious overload (“Tradition”, “family”, “process”, “function”) are forbidden in the kernel. Use plain twins only with a 1:1 Tech mapping and declare
LEX.TokenClassfor the Tech token. They MAY appear only in the Plain register as 1:1 twin‑mappings to a Tech token, but MUST NOT appear in the Tech register. Plain language should minimise lexical error from overloaded terms; use plain‑twin lexical guards.- Do:
IncidentDashboard,MethodSpec,TraditionProfile,FlowDescription. - Don’t:
IncidentBoard,TDD Tradition,Production Process(kernel),Service Function(kernel).
- Do:
Onto2 — EntityOfConcern and Description-episteme boundary and specification-use morphology (ref. E.10.D2)
- Rule: A term for the EntityOfConcern uses the bare head for the FPF kind under concern:
Method,Tradition,Characteristic. A Description episteme appends…Description:MethodDescription,TraditionDescription. A Description episteme admitted for specification use appends...Specand presupposes acceptance criteria, harnesses, measurable anchors, formal checkability, verification use, or another specification-granting gate named by value (normative in E.10.D2 and neighbouring patterns). E.g., Algorithm is a species ofMethodDescriptionfor a computer (a system in the role of information transformer); if expressed in a formal language and bundled with acceptance tests, it isMethodSpec(per F.11). If expressed as pseudo-code, it isMethodDescription. - Formal-description guard: A formal mathematical or physical theorem, including a formal postulate theorem in physics, remains a Description episteme until a bounded use assigns specification use. Its formal language belongs to formality and publication-expression discipline; it becomes a specification only under acceptance criteria, harness checks, normative invariants, measurable anchors, verification use, or another specification-granting condition named by value.
- Extension: Apply the same morphology to non-method EntitiesOfConcern where appropriate:
FlowDescription/FlowSpec,SystemDescription/SystemSpec. - Do:
SamplingMethod-SamplingMethodDescription-SamplingMethodSpec. - Don’t:
SamplingAlgorithm(when it is just prose),SamplingProcessSpec(head not signalling kind). Onto3 — Roles, Holders, and Carriers (holonic) (ref. F.4 / F.5) - Rule: The playable intention is named
…Roleand described through F.4 Role Description (RCS/RSG), e.g.,SafetyOfficerRole,ReviewerRole. The party assuming a role is the Holder. Use theHolder#Role:Contextpattern to type the assumption (whereContextis aU.BoundedContext), e.g.,Team‑Alpha (U.Holon) is Holder#SafetyOfficerRole:Plant‑Ops. Carrier is reserved for a system that bears a symbol of episteme (U.Episteme,Tradition,Lineage,Profile, repertoire) independent of any concrete role assumption, e.g.,LeanTraditionCarrier,CalibrationLineageCarrier. AvoidArtefactas a head in the kernel: it is ambiguous between a Carrier (e.g., document), a system “made by” some transformer, or an episteme abstracted from its carrier. - Register note: Job titles (
Reviewer,Owner,Lead) belong in the Plain register and MUST twin‑map to explicit Tech…Roletokens. - Why: This resolves the inconsistent “role carrier vs role holder” usage: use “Holder” for holonic role assumption, keep “Carrier” for the system that bears a symbol of episteme.
- Rewrite note.
…CarrierRoleused for a role holder MUST be rewritten toHolder#…Role:Context. Use SCR-LEX to enforce the rewrite. - Do:
ReviewerRole(orAssessorRole),Holder#ReviewerRole:Journal‑Issue‑42(orHolder#AssessorRole:Procurement‑Lot‑42);LeanTraditionCarrier (U.Holon), independent of any particular role. Don’t:Reviewer(as a kernel type),ReviewerCarrier(to mean a role holder),SystemReviewer(role collapsed into a type).
Onto4 — Domain only as a catalog mark (ref. E.10.D1 D.CTX; publish stitching on UTS)
- Rule:
Domainis not a kernel kind and carries no semantics, inheritance, or reasoning rights. It is a catalog mark that groups severalU.BoundedContextentries. - Required stitching (see D.CTX & UTS). Any use of
DomainMUST present: 1. the enumerated list ofContextIdin D.CTX, and 2. the corresponding UTS strings (F.17) with twin labels. - “Discipline ≠ Domain.” Domain labels are catalog‑only (D.CTX + UTS); Discipline is a CG‑Spec‑governed holon (
U.Discipline). Cross‑use requires Bridge (F.9) + CL; LexicalCheck MUST fail texts that equate Domain with Discipline. - Governance. No “Domain … governance”. Rules of comparability/aggregation belong to Discipline/CG‑Spec (ComparatorSet, ScaleComplianceProfile (SCP), MinimalEvidence, Γ‑fold, CL‑routing), not to
Domain. PreferDomainFamily+ stitching over inventing new “Domain” types. - Do:
DomainBundle: ClinicalSafety → {ContextId: AdverseEvents, DeviceLabelling, …} + UTS twins. - Don’t:
ClinicalSafetyDomainas a type with inheritance;Domain Governancesections in Tech.
Onto5 — Always state what the term names
- Rule. The definition or first line of a gloss MUST state the FPF kind named by the term: a
U.Holon,U.System,U.Episteme,Tradition,Lineage,Profile,Role,U.Workexecution,Characteristic, orCarrier. - Do: “Kind named:
ReviewerRole— a role intention playable by a holon within an editorial context.” - Don’t: “Reviewer — a person who …” (blurs the kind named).
Onto6 — Bans and ontology recovery hints (mirror E.10 § 9 L-rules; do not duplicate tables; not a substitution table)
process / function / activity→Work/MethodDescription/Flow(context‑dependent).Tradition→Tradition(Tech); leave “Tradition” only as a Plain twin with an adjacent Tech label.domain→DomainFamily+ {ContextId list} + UTS twins.…CarrierRoleused for a role holder ->Holder#…Role:Context.- ambiguous
Ownerin role names → preferStewardRole/CustodianRole/ explicit responsibility head. - job titles (
owner,lead,champion) in the kernel → use explicit…Rolenames; keep titles in Plain with twin‑labels. - Do:
FlowDescription: ReturnsHandling,Tradition: Test‑Driven,Holder#CustodianRole:Asset‑Ledger. - Don’t:
Returns Process,TDD Tradition(kernel),Ledger Owner(underspecified).
Worked mini‑examples across arenas
- Software engineering:
BuildFlowDescription,CIHarnessSpec;Holder#MaintainerRole:Repo‑X. AvoidBuild Process,Repo Owner. - Applied research / experimentation:
SamplingMethodSpec,CalibrationLineageCarrier;Holder#ReviewerRole:Grant‑Call‑Y. AvoidSampling Algorithm(if prose),Lab Owner. - Production / service management:
ShiftWork,SafetyOfficerRole;Holder#SafetyOfficerRole:Plant‑Ops. AvoidSafety Officeras a type,SafetyDomain Governance. - Operations research / optimisation:
RoutingMethodDescription,CostCharacteristic;Holder#ModelStewardRole:OR‑Program. AvoidRouting Function,Model Owner. - Healthcare / clinical ops:
CarePathwayFlowDescription,MedicationAdministrationWork;Holder#AttendingPhysicianRole:Ward‑12. AvoidCare Process,Ward Owner. - Finance & accounting:
ReconciliationMethodSpec,JournalPostingWork;Holder#TreasuryStewardRole:Liquidity‑Book. AvoidReconciliation Process,Account Owner(underspecified). - Legal / compliance:
RetentionPolicySpec,InvestigationWork;Holder#DataProtectionOfficerRole:Org‑X. AvoidCompliance Function,Data Owner(underspecified). - Cloud / IT operations:
IncidentFlowDescription,RunbookMethodSpec;Holder#OnCallEngineerRole:Service‑Y. AvoidIncident Process,Service Owner(underspecified). - Logistics / supply chain:
PickingWork,RoutingMethodSpec;Holder#DispatcherRole:Hub‑Z. AvoidPicking Process,Fleet Owner. - Construction / civil engineering:
PermitAcquisitionFlowDescription,InspectionMethodSpec;Holder#SiteStewardRole:Project‑Lot‑17. AvoidInspection Process,Site Owner. - Emergency response:
TriageMethodDescription,EvacuationFlowDescription;Holder#IncidentCommanderRole:Event‑R. AvoidTriage Function,Incident Owner. - Agriculture:
IrrigationFlowDescription,SoilSamplingMethodSpec;Holder#FieldStewardRole:Plot‑17. AvoidIrrigation Process,Field Owner.
Checklist before minting a KernelToken
- Head noun signals kind (Onto1).
- EntityOfConcern and Description-episteme boundary and specification-use morphology correct (Onto2).
- If role‑related: Role vs Holder vs Carrier separation observed; holonic scope explicit (Onto3).
- Any Domain mention stitched to D.CTX and UTS; no norms on Domain (Onto4, Onto6).
- Object‑of‑talk declared (Onto5).
- SCR-LEX rewrites checked for current role-holder and carrier separation (Onto6).
Note on registers. Keep figurative or business‑casual terms in the Plain register only, with strict twin‑label links to the Tech token (LEX‑BUNDLE). In the Tech register, speak in KL‑CAL: episteme‑about‑epistemes (Tradition, Lineage, Profile), not in catalogue‑admin idioms.
- Onto‑Deon — Deontic lexicon guard (Core register) Rule. In the Conceptual Core, avoid using “Standard” as the head noun of an EntityOfConcern name unless the object is an explicit deontic speech-act under the Gov lens (cf. E.3).
For interface/boundary invariants and public commitments of things (holons, interfaces, ports), prefer EntityOfConcern-side names named by value like InterfaceContract, ComplianceProfile, AcceptanceSpec, InteropProfile, etc.
Use the word standard for a publication of a Description episteme, possibly admitted for specification use, that is intended to be complied with and has explicit compliance checks.
If an EntityOfConcern-side item is currently named … Standard, rename it to a proper EntityOfConcern-side name, and (optionally) add a separate publication of the relevant Description episteme under the needed compliance or specification use that contains the standard text and the intended compliance checks.
Rewrite hints (Tech → Tech).
publication Standard → publication standard;
frame Standard → frame standard;
measurement Standard → measurement standard;
Method Interface Standard (MIC) → Method Interface Standard (MIS) (alias acceptable during transition);
Boundary‑Inheritance Standard (BIC) → Boundary‑Inheritance Standard (BIS) (alias acceptable during transition).
Rationale. Keeps Core prose centred on EntitiesOfConcern and their boundary invariants; reserves deontic obligations for governance contexts and U.PromiseContent‑like promises. Do not misuse “plane”: deontic speech‑acts are analysed via the Gov lens, while ReferencePlane remains {world | concept | episteme}.
Twin‑Register Discipline (Tech / Plain)
Plain twin (LEX). A registry entry pairing the authoritative Tech label with a display‑only Plain label for one U.Type in one U.BoundedContext; governed by PTG (Plain Twin Governance; in the LEX registry) and referenced by Twin‑Map ID (LEX). “Plain twin” ≠ the Plain register (the register is where twins may be used; the twin is the 1:1 mapping).
Convention. In this spec, Plain (capitalized) names the register; plain twin (lowercase) names the 1:1 mapping entry.
Rule R‑0 (Registers). Every Kernel and Extenstion patterns concept has a Tech label (the testable semantic token) and an optional Plain label (didactic synonym). The Tech label is authoritative; the Plain label is permitted only in expository text and must map 1:1 to the Tech meaning inside the current Context.
Allowed pairs (normative table; examples)
R‑1 (Plain first‑use). At first use in a section, show Tech label and (optionally) the Plain twin: “…a U.Method (the how‑to), described by a U.MethodDescription (the recipe) …”
R‑2 (No unpaired Plain in CC). Conformance Checklists must use Tech labels only.
Domains can mint aliases inside their U.BoundedContext glossary; all aliases must map 1:1 to a Tech label (SenseCell row in the Context’s Concept-Set Table), and if exported across Contexts, via an Alignment Bridge (with CL/Loss).
Make “plain twins” (reader‑friendly labels) safe by construction, not just style. The plain twin must not change kind, scope, or reader expectations versus the canonical Tech name; it is display‑only and context‑local.
- Tech name (tech) — the canonical, kernel‑conformant label used in normative clauses (e.g.,
U.RoleAssignment,TransformerRole). - Plain twin (plain) — a didactic display alias permitted in expository prose and UI display contexts inside one
U.BoundedContext.
Principle: Meaning lives in the Tech name; the plain twin may never move meaning. (Locality is enforced by
U.BoundedContextand Bridges.)
Plain Twin Safety constraints (normative)
CC‑TWIN‑1 - One‑to‑one & local.
Each Tech name has at most one plain twin per U.BoundedContext; the same plain twin MUST NOT point at more than one Tech name in the same Context.
CC‑TWIN‑2 - Sense‑equivalence proof. A plain twin MUST bind to the same SenseCell as its Tech name in that Context (F.3/F.7). Authors MUST record at least one counter‑example test showing how the twin could be misread and why it still passes in this Context (SenseCell notes).
CC‑TWIN‑3 - Head‑term discipline (HND). The plain twin MUST preserve the head term of the Tech name, or append an explicit bracketed head on first use:
- Roles keep “(role)”, Services keep “(service)”, Methods keep “(method)”, Work keeps “(work record)”, Capability keeps “(capability)”.
Examples:
TransformerRole→ “Transformer (role)”,U.PromiseContent→ “Service (service)”,U.Work→ “work (work record)”.
CC‑TWIN‑4 - Kind‑consistent. A plain twin MUST NOT map across Kinds (C.3). If the twin’s everyday interpretation could denote a different Kind (e.g., Tradition = organization, corpus, domain), it is forbidden unless qualified by a bracketed head and Context gloss on first use (see CC‑TWIN‑7).
CC‑TWIN‑5 - Ambiguity stop‑list. The following base nouns are reserved and MUST NOT be used as unqualified plain twins: Tradition, service, process, function, model, system, method, standard, library, dataset, evidence, activity, task, action. They are allowed only with an explicit head per CC‑TWIN‑3 and a Context gloss (CC‑TWIN‑7). (This list MAY be extended in the registry.)
CC‑TWIN‑6 - No cross‑context by label.
Plain twins are not portable. Reuse in another U.BoundedContext requires a Bridge with CL and loss notes; names alone carry no authority.
CC‑TWIN‑7 - First‑use gloss. At first occurrence in a document or screen, a plain twin MUST be shown as “Plain twin [Tech name] — Context gloss”, e.g.: “Transformer (role) [TransformerRole] — mask borne by a system to enact a method step in OR_2025”.
CC-TWIN-8 - Normative publication-form overread ban. Plain twins MUST NOT appear in Conformance Checklists, predicates, type signatures, or acceptance clauses. Only Tech names are normative. (Plain twins are strictly didactic.)
CC‑TWIN‑9 - Twin budget. At most one plain twin per Tech name per Context. Synonym piles are prohibited (control vocabulary sprawl; see F.14).
CC‑TWIN‑10 - Registry entry & DRR.
Every plain twin MUST have a registry entry (in the LEX registry) recording: tech, plain, context, head, SenseFidelity = {3,2,1,0}, ambiguity notes, counter‑examples, DRR id. Any change requires a DRR.
CC‑TWIN‑11 - Tests. Twin entries MUST pass the Twin Harness (see F.15): Head term, Kind consistency, SenseCell match, Stop‑list compliance, and First‑use gloss.
Minimal Generality & Domain Anchoring (MG-DA) — names neither parochial nor vacuous
Principle (MG-DA). A minted name is as general as necessary and no more, and its head noun is anchored to the FPF kind being named. First classify the NameToken (name of a concept: term, lexical unit) itself using
LEX.TokenClass, then apply the guardrails corresponding to that class: kernel tokens must unify across domains; discriminator/context tokens must make the domain legible from the name itself. Names too general to have obvious domain are banned.
LEX.TokenClass (meta‑lexical; not a USM Scope)
Definition. LEX.TokenClass : NameToken → {KernelToken | ContextToken | DiscriminatorToken}.
This is a Characteristic on NameTokens (symbols), used by the LEX registry and MG-DA checks.
It is not a USM scope and carries no truth/validity semantics.
KernelToken — Minimal Generality (MG‑K)
MG‑K1 (Tri‑domain witness, MUST). Maintain a DRR/Glossary note with ≥ 3 heterogeneous arenas where the invariants hold (e.g., manufacturing, healthcare, cloud ops). If you cannot, narrow to a Context name or move qualifiers into RCS (Role Characterisation Space).
MG‑K2 (No parochial nouns, MUST). Kernel names MUST NOT contain domain nouns (Ticket, Microservice, Patient, Developer). Such nouns belong in Context or as RCS Characteristics.
MG‑K3 (No vacuity, MUST). Avoid vacuous heads (Thing, Event, Process, Resource). Use existing kernel heads (U.Holon, U.Work, U.Method, U.Resrc, …).
MG‑K4 (Intent over mechanism, MUST). Kernel type/role names encode intent, not mechanism. Mechanisms (algorithms, hardware form, recipe flavors) live in RCS or Capability.
MG‑K5 (Notation independence, SHOULD). The EntityOfConcern-side kind criterion is separable from any one notation/toolchain.
MG‑K6 (Refactoring safety, MUST). If a name fails MG, do not mutate it silently. Record a DRR and apply F.13 Lexical Continuity & Deprecation (aliases; Bridges for Cross‑context mappings).
DiscriminatorToken / ContextToken — Domain Anchoring (DA‑D)
DA‑D1 (kind anchoring, MUST). The head noun names the FPF kind being classified (e.g., Sense, Context, Role, Bridge, Characteristic). Readers can answer “X of what?” without external context.
DA‑D2 (Characteristic, not axis, MUST). Enumerated properties are named as Characteristic within a CharacteristicSpace (MM‑CAL). Avoid spatial metaphors (axis, dimension, plane, lane, tier, layer) unless the metaphor is a pattern‑defined primitive in this spec.
DA‑D3 (Enum clarity, MUST). If the term denotes an enumeration, (a) the value set is small and closed, (b) membership criteria are obvious from the definition, (c) the kind being classified is explicit in the name (e.g., SenseFamily, not bare Family, RowPlane or overly general Facet).
DA‑D4 (Anti‑recipe, MUST). Do not bake how-to or local methods into discriminator names; those belong in U.Method or U.MethodDescription, or in U.Capability when the kind under repair is an ability envelope.
DA‑D5 (Mapping discipline, MUST). Cross‑context interpretations go through a Bridge (F.9). Discriminator names must not suggest global identity.
DA‑D6 (Register discipline, SHOULD). Keep normative tokens stable; synonyms live in Plain register only and must not appear in constraints/tests.
DA‑D7 (Ban generic combinators, MUST). Reject vague composites like NameUseMode, NamingScope, RowFacet/RowPlane/RowLane. Each candidate must pass DA‑D1 and DA‑D3 (kind-anchored head and explicit CharacteristicSpace).
Global tests (apply after 7.2/7.3)
MG-DA‑T1 (Three‑arena witness). If LEX.TokenClass(t)=KernelToken, you MUST provide the tri‑domain witnesses (7.2‑MG‑K1). Otherwise this is SHOULD (document at least one contrasting arena).
MG-DA‑T2 (Object‑of‑talk). The head noun uniquely signals the subject area; avoid free‑floating metaphors. MG-DA‑T3 (Anti‑recipe). Remove mechanism/implementation words; relocate to Method/Capability/RCS.
MG-DA‑T4 (Enum clarity). For enumerations, list the closed value set and its CharacteristicSpace.
MG-DA‑T5 (Collision & Uniqueness, MUST). Before merge, run a full‑text search over the corpus and the Reserved‑Names registry. The candidate MUST NOT collide with any existing token used in another sense anywhere in FPF. If a collision exists, either rename or raise a DRR to deprecate the prior token.
MG-DA‑T6 (Teaching swap). In didactic prose (E.10.D2), the term can be swapped in without caveats.
MG-DA-T7 (EntityOfConcern ground, MUST). The definition card states the EntityOfConcern-side kind criterion for membership explicitly; reviewers can check membership without consulting external narrative.
Compatibility with USM (how tokens and scopes meet)
USM applies to acts, not tokens. Mint/rename/use are LexicalActs that carry a USM scope. LEX.TokenClass constrains where a token may be used via an AllowedScopes policy:
Conformance rule. For any usage u of a token t: LEX.TokenClass(t)=c ⇒ USM.Scope(u) ∈ AllowedScopes(c).
The LEX registry defines AllowedScopes(c) (e.g., KernelToken usage in normative kernel constraints is allowed; in Plain register outside a glossary is restricted; Context emissions of KernelToken require a Bridge/alias, etc.).
Audit. Violations are flagged as SCR‑LEX‑Sxx (see acceptance tests below).
Metaphor guidance (non‑binding heuristics)
Prefer object‑anchored heads to metaphors. If a metaphor is unavoidable, ensure it is (a) explicitly defined by a pattern here, and (b) unambiguous within the NameClass. Example families (use sparingly):
- Progression metaphors (level, tier, ladder): only where a gate or upgrade is defined by the pattern.
- Separation metaphors (lane, track): only where parallel, non‑interfering flows are enforced by rules.
- Grouping metaphors (family, class): only for small, closed enumerations attached to a clearly named classified kind (e.g.,
SenseFamilyrather than bare Family).
Short‑form and acronym discipline
SF‑1 (First expansion, MUST). On first use, expand the term; place the short‑form in parentheses (e.g., “Minimal Generality & Domain Anchoring (MG-DA)”). SF‑2 (Uniqueness, MUST). Register short‑forms in the Reserved‑Names list; run the collision check (7.4‑MG-DA‑T5). SF‑3 (Form, SHOULD). Prefer typographic separators (MG-DA) to fused acronyms (MGDA). Use the fused form only in code or identifiers where punctuation is disallowed, and only after registration.
Examples (illustrative, canonical)
Prefer U.PromiseContent (promise) over BusinessService; U.Capability over Function; U.Dynamics over NaturalProcess; U.WorkPlan over ScheduleProcess.
Do not mint ETLService at kernel level—model ETL as MethodDescription; the Service is “data delivered under acceptance.”
Acceptance & regression checks (LEX/USM)
SCR‑LEX‑S01 (TokenClass declaration). Every normative token has a declared LEX.TokenClass.
SCR‑LEX‑S02 (Collision & uniqueness). Full‑text + Reserved‑Names check passes (no other meaning in FPF).
SCR‑LEX‑S03 (kind anchoring). Heads name the FPF kind classified (DA‑D1).
SCR‑LEX‑S04 (CharacteristicSpace). Enumerations declare their value set and space (DA‑D2/3).
SCR‑LEX‑S05 (USM compatibility). For each LexicalAct, USM.Scope ∈ AllowedScopes(LEX.TokenClass).
SCR‑LEX‑S06 (Slot/Ref suffix discipline). Any token with suffix …Slot or …Ref is either (a) a SlotKind/RefKind declared under A.6.5, or (b) an episteme field whose type is a RefKind; no ValueKind or other type class may end with these suffixes.
SCR‑LEX‑S07 (Manifest provides covers SlotKinds and RefKinds). If a SignatureManifest is present (A.6.0), its provides list MUST include any public SlotKinds (…Slot) and RefKinds (…Ref) introduced by that signature or mechanism, in addition to types, relations, and operators, so SD and lexical linters can treat them as exported API.
RSCR‑LEX‑E01 (Banned generics). Reject tokens matching the banned combinators list (DA‑D7).
RSCR‑LEX‑E02 (Metaphor hygiene). If a metaphor is used, show the pattern that defines it; otherwise rename.
RSCR‑LEX‑E03 (Strategy token minting). Reject new Kernel tokens named Strategy/Policy as kinds; model them as lenses/flows/compositions inside G.5 or as …Description/…Spec in Contexts. (Prevents kernel overloading; aligns with C.22 “no minted Strategy head”.)
Morphology & Lexical Form (LEX.Morph)
Principle. Form follows the FPF kind being named. A token’s morphology (suffix/prefix/casing) must (a) express what kind of thing it names, (b) respect MG-DA (Minimal Generality & Domain Anchoring), and (c) pass LEX.TokenClass gates:
LEX.TokenClass(token) ∈ {KernelToken | ContextToken | DiscriminatorToken}. Morphological choices never override EntityOfConcern, Description episteme, specification use, and publication lanes or CHR:ReferencePlane semantics.
Casing & basic forms
M‑0 (Casing and categories).
Types & role kinds: UpperCamelCase (IncisionOperatorRole, MethodDescription).
Relations/verbs: lowerCamelCase (performedBy, isExecutionOf, bindsMethod).
IDs/instances: flat with delimiters (context‑defined) but never collide with type forms (e.g., W#Seam134, ctx:Hospital.OR_2025).
Register discipline: normative tokens use the Technical register; Plain synonyms are allowed in prose only, never in constraints.
Reserved suffixes (gated by LEX.TokenClass, EntityOfConcern and Description-episteme boundary, and specification use)
Use tables as a whitelist. Rows indicate when a suffix is permitted and what it means. The EntityOfConcern and Description-episteme boundary and specification-use gate prevents EntityOfConcern, Description episteme, specification use, and publication-lane confusion; “Examples” are illustrative.
Legacy suffix conventions
Notes. • Kernel‑only ban list remains in § 8.3. • CHR guard: the only token that may use the word plane is CHR:ReferencePlane. • Axis and dimension metaphors are deprecated; use Characteristic for a measured aspect and CharacteristicSpace for a declared characteristic space where an enumeration is intended (see § 7).
Not only suffix guard
- Suffixes are closely related to kinds and should be clearly guarded by MG-DA.
- Other morphemes (not only suffixes) also must respect kinds. For example, Space is a geometric concept — never use it as a suffix (
…Space…) or other morpheme in beginning or in the middle of a term to name non‑geometric entities (e.g. prefer Set/Kid/Kit instead of Space where membership is intended).
L-EPI-PUB — episteme, publication, view, carrier, and authority-reference lane discipline
- Use
U.Epistemefor the claim-bearing unit. UseU.EpistemePublicationor governedU.Epistemepublication only when that episteme is available as a published episteme under C.2.1 and E.17 discipline. - Name the publication form separately from the episteme: for example
U.PreArticulationCuePack,RoutedCueSet,U.AbductivePrompt, typed route-bounded projection, partial normal form, endpoint-pattern-governed publication, or another declared form. A publication form is not itself the governing FPF source. - Name
U.Viewand MVPK face separately from the publication form. APlainView,TechCard,InteropCard, orAssuranceLaneis an episteme-level view or publication face, not the source claim, not the publication form itself, and not the SCR or RSCR carrier. - Name the carrier or rendering lane separately. Documents, dashboards, generated screens, trace files, cards, and transport formats hold or render a publication; they are not the
U.Episteme, not the claim or effect being relied on, and not the governing pattern. - Name source-finding cues separately from source epistemes. A cue, badge, credential view, dashboard tile, heading, signature-looking mark, or generated explanation may help find a source; it does not by itself create an
authoritySourceReftarget, evidence relation, gate decision, assurance claim, role assignment, status assertion, work occurrence, or permission. - Use
governingPatternReffor a named FPF pattern that governs admissible interpretation or use. UseauthoritySourceRefwhen a non-patternauthoritySourceReftarget such as an external standard, editioned register, DRR, gate decision, policy source, or role-assignment or status register carries the relevant authority. Do not use generic sign/episteme-publication wording, generic source wording, generic project-work wording, or container-placement wording as solution terms. - When a published episteme is used for work, name the live P2W chain element: intended method family, selected method/method of work,
U.WorkPlanningbaseline, planned work, actualU.WorkorU.WorkEnactment, work result, result measurement, or non-work reliance on a claim or effect. Do not let genericaction,use, ormaterialhide that distinction. - Use
C.2.Pwhen episteme-publication-heavy wording carries episteme, publication, view, carrier, relation, admissibility, evidence, work, gate, decision, method, or FPF-pattern-application claim. This parent pattern keeps the lexical and naming discipline;C.2.Psupplies the epistemic precision-restoration profile that recovers the FPF kind named by value, relation record, relation phrase, tuple-like record, project-side FPF kind and reference named by value, or not-triggered disposition before final wording is accepted.
Publication face, form, unit, and carrier discipline - surface as trigger wording
- Definition.
surfaceis trigger wording, not a durable FPF Tech head by itself. When it has FPF-governed use, recover whether the sentence means publication face, publication form, publication unit, carrier, rendering, UI/front-end face, physical/geometric surface, companion publication, projection material, carrier relation, or another FPF kind or relation named by value. - Allowed final heads: publication or carrier terms named by value, or deliberately ordinary physical/geometric
surfacewhen no FPF-governed use is carried. - Forbidden final heads:
StructureSurface,MechanismSurface,PortfolioSurface, and any...Surfacethat hides a structural, mechanistic, measurement, review, assurance, explanation, comparison, or publication-unit object. - Preferred alternatives: name publication face, form, unit, carrier, and rendering; use
...Boundaryfor structural borders,...Viewfor episteme/view relations, and...Cardonly for a UTS or record unit when that is exact.
**L‑SPACE — disciplined use of Space **
- Use Space only for CHR‑grounded measurement and state constructs such as
CharacteristicSpaceper A.19. Do not coin generic…Spacefor sets, portfolios, or publication forms. Publish portfolios and archives as sets via admissible selectors; publish them on UTS as views or cards, not as spaces. - Field‑name guard (Kernel blocks). In Kernel conceptual blocks (e.g., A.6.0/A.6.1 lists), do not name a field
…Space; reserve Space to the types (CHR/ReferencePlane families). Use BaseType as the field name and let the referencedU.Typecarry…Spacewhere appropriate; otherwise, for set‑valued universes, use…Set. - Space is geomertic concept, neve use it even not as a suffix for naming non-geometric spaces (e.g. instead of Sets with membership)
L‑ROLE — disciplined use of Role
- Role is always Role Enactment for the
U.Holon/U.Systemkind (agentive use). - Param‑slot / relation‑endpoint guard. Do not use the morpheme
Rolefor formal parameter positions in operator algebra declarations (OperationAlgebra) or Signature arguments. ReserveRolefor agentive kinds only (A.2/F.4/F.6). Prefer SlotKinds + SlotSpecs (A.6.5) to type formal slots; if a didactic list is useful, use aValueKindView(name→ValueKind) projection derived from SlotSpecs/SlotIndex. Same for similar situations (table columns, tuple placements): use MG-DA with domain‑specific terminology, never “Role”.
Forbidden suffixes & the DevOps, Data Governance and Repository-Workflow Lexical Firewall
M‑F (Forbidden in Kernel tokens). In KernelToken names, do not use: …Function, …Process, …Task, …Activity. These are ambiguous or vacuous—map using § 6 typing rules (often to Method, MethodDescription, or Work).
M‑FW (Tool/file markers). Tooling/file suffixes (…API, …JSON, …YAML, …CI, …Kafka, …Postgres) are not part of conceptual names. Place them in Context glossaries or operational configs (DevOps Lexical Firewall). Kernel names never carry tool/format/notation marks. It is pure conceptual, no data management and data governance intended.
Prefix discipline
M‑P1 (Reserved prefixes). U. reserved for Kernel types; Γ_ for algebraic operators; CAL, LOG, and CHR for pattern packages. Never mint U.* inside a Context.
M‑P2 (Edition markers). Apply explicit edition/version markers to Contexts and to MethodDescription / Service—not to Method (e.g., BPMN_2.0_BoundedContext, JS_Schedule_v4_MethodDescription, PassportIssuanceService_v2025). Authors MAY annotate Context or Service names for didactics.
Norms (edition vs release vs version).
- edition — the content phase of an episteme (Concept/Object/Symbol where Symbol‑only notation swaps do not force a phase). Lives in
U.EditionSeries. Never embedded in labels (see R‑RD‑7); bind via data:…Ref.edition. - release — a Work of making a Carrier public; may carry tags/dates; does not change episteme identity or phase.
- version — a tooling/carrier identifier (file/package/code). Use only in Tooling/Pedagogy families; not in Core names.
Property discipline. When a field pins a referenced record’s phase, write it as <Thing>Ref.edition (dot notation), never as a standalone …Edition key. E.g., replace DHCMethodEdition with DHCMethodRef.edition.
Morphology tests (apply with § 7 MG-DA)
M‑1 (Slot test). The candidate fits one slot or side in the Strict Distinction lattice (EntityOfConcern ≠ Description episteme ≠ publication carrier; Role ≠ Method ≠ Work). If not, rename or split.
M‑2 (Classified-kind anchoring). The head noun names the classified FPF kind or reference (Role/Method/Service/Work/Context/Characteristic). No free‑floating metaphors.
M‑3 (Family congruence). Where eligibility clarity is needed, add a Context‑specific characteristic (RCS) as a qualifier (e.g., NormativeStandardRole). Do not fake families with bare metaphors (no RowPlane, senseFamily, …Lane).
M‑4 (Run vs design). Use Work only for executions; use MethodDescription for recipes; never cross.
M‑5 (Kernel parochiality). KernelToken names carry no domain nouns; push domain markers to Context or RCS.
M‑6 (Vacuity ban). Avoid vacuous heads (Thing, Event, Process, Resource). Use established kernel heads (U.Holon, U.Work, U.Method, U.Resrc, …).
M-7 (Notation independence). The EntityOfConcern-side meaning survives notation/tool swaps.
M‑8 (Collision & uniqueness). Before merge, run full‑text + Reserved‑Names checks; the token must not collide with any other meaning anywhere in FPF (cf. § 7 MG-DA‑T5).
Alias hygiene
Aliases live only inside a Context Glossary and map to one technical label with an equivalence note (≡). No global aliases.
Entry lexeme support and lexical-query discipline
Public first-entry scenario text, ToC query rows, local Problem-frame recognition text, or expanded I.2 entry-disambiguation cases may use one compact entry lexeme cue block when the lexical issue changes the first useful FPF entry.
That cue block should not live in every pattern body by default.
Keep it instead in:
- FPF
readmesection, E.11entry-distribution loci,I.2expanded entry-disambiguation cases,Table of Contentquery rows,- or one bounded lexical-query record governed by
F.17,UTS, orF.18.
This block remains one editorial lexical-query set.
It does not mint names, aliases, U.Types, bridges, or semantic equivalences
by itself.
When visible, it should distinguish at least:
- canonical label,
- plain-language twin,
- domain alias,
- lexical-query cue,
- deprecated cue,
- false friend or forbidden synonym.
Minimal visible lexical-query shape may therefore use one compact field set such as:
Ordinary lexical-query support should stay compact:
- ordinary
Table of Contentrows: prefer2-5query phrases; - ordinary
READMEscenario or[E.11](/generated/patterns/E.11)entry-distribution cues: keep only the most discriminating domain phrases and false friends; - fuller lexical sets belong under
[F.17](/generated/patterns/F.17), [F.18](/generated/patterns/F.18), and [E.10](/generated/patterns/E.10)only when one real naming, alias, bridge, or collision claim exists.
Lexical support should increase entry precision, not maximize keyword recall. The same boundary should be kept explicit in lexical support:
lexical_hookis not one alias;- one alias is not one canonical name;
- one search cue is not one semantic equivalence;
- one
entry_orientation_labelis not oneRelationKind.
Language-specific query cues may be added as entry-lexeme support.
They do not become canonical names, aliases, or semantic equivalents unless
admitted through [F.18](/generated/patterns/F.18) / [E.10](/generated/patterns/E.10).
One Russian practitioner phrase may therefore help recover one English
canonical pattern while remaining lexical-query support only.
Compatibility with USM (acts vs tokens)
LEX applies to tokens; USM applies to acts. Mint/rename/use are LexicalActs that carry a USM scope (e.g., ClaimScope, WorkScope). LEX constrains where a token form may appear via AllowedScopes policies:
LEX.TokenClass(t)=c ⇒ USM.Scope(usage) ∈ AllowedScopes(c).
Example: using a KernelToken in a Context constraint may require a Bridge/alias; logging Work inside a MethodDescription violates M‑4 and the policy.
Acceptance & regression checks (LEX/USM)
- SCR‑MOR‑S01 (Suffix whitelist). Every normative token with a reserved suffix matches § 8.1 row semantics and passes EntityOfConcern and Description-episteme boundary and specification-use gates.
- SCR‑MOR‑S02 (Kernel bans). KernelToken names contain none of the forbidden suffixes (§ 8.2).
- SCR‑MOR‑S03 (Prefixes). Reserved prefixes obey § 8.3; no
U.*minted in Context. - SCR‑MOR‑S04 (Run/design gate).
Workappears only for executions;MethodDescriptionhas no runtime actuals. - SCR‑MOR‑S05 (Collision). Full‑text + Reserved‑Names checks pass (no other sense of the token elsewhere).
- SCR‑MOR‑S06 (Object‑of‑talk). Heads pass M‑2; no bare metaphors as heads.
- RSCR‑MOR‑E01 (DevOps firewall). Tool/file suffixes quarantined to Context; none leak into KernelToken names.
- RSCR‑MOR‑E02 (USM compliance). For each LexicalAct, verify
USM.Scope ∈ AllowedScopes(LEX.TokenClass)(see § 7.5).
Autonomy lexicon (L‑AUTO )
Forbidden (Core): bare “validity”, “actor/agent” (as free‑standing nouns), “kill switch”, “process” for behavior, “envelope” when used as scope. Use instead: Scope (G) for epistemic scope; WorkScope for capability bounds; RoleAssignment for who acts; SpeechAct for overrides; SafeStop instead of “kill switch”. Named prefixes (policy & registry):
aut:for AutonomyBudgetDecl fields (e.g.,aut:action_tokens,aut:risk_bands);guard:for guard checks bound toAdmissibilityConditionsId;ovr:for override SpeechActs (ovr:PauseAutonomy,ovr:ResumeAutonomy, …).
Notes.
- Scope‑sensitive guards must declare the Γ_time window selector used for admission checks.
- Proper names of patterns/components that already include “Agent/Agency” (e.g., Agency‑CHR, Agent‑Tools‑CAL) are permitted as titled terms; avoid re‑introducing “agent” as a free‑standing noun in new prose.
LEX-CHR-STRICT — Reserve Characteristic for CSLC-measurable aspects
Intent. Prevent calling non-measurable objects (sets, statuses, scopes, policies, bridges, contexts, guards) “characteristics”.
Rule L-CHR-S1 (Reservation). Use Characteristic only for variables that declare a CSLC scale (nominal/ordinal/interval/ratio) with admissible values/units/polarity (Part C.16/A.17–A.18).
Rule L-CHR-S2 (USM). U.Scope / U.ClaimScope (G) / U.WorkScope are USM scope objects, not Characteristics; they must not appear in any CharacteristicSpace.
Rule L-CHR-S3 (Status). ESG/RSG statuses and deontic/epistemic statuses — not Characteristics; its statuses/states.
Rule L-CHR-S4 (Lexical classifiers). Lexical classifiers/tags — Facets/attributes; do not name them as Characteristics, if not declared CSLC.
Checks.
— CC-L-CHR-1. scope characteristic(s) is banned in Core/Context.
— CC-L-CHR-2. CharacteristicSpace near Scope — error.
— CC-L-CHR-3. Kind-preserving repair: F–G–R characteristics → F–G–R components only when the recovered kind is component rather than characteristic.
LEX‑QA‑1 — Using “‑ility/‑ilities” terms (availability, reliability, …)
Rule. Tokens ending with ‑ility/‑ilities or widely used quality names (Availability, Reliability, Security, Safety, Scalability, Maintainability, Usability, …) are Quality‑Family labels, not automatically CHR Characteristics.
Authoring choice:
— To use such a term as a CHR characteristic, bind it to a named U.Characteristic with one CSLC Scale (A.18) and refer to that Characteristic in guards/UTS;
— Otherwise publish a Q‑Bundle (see C.25) that includes Measures (CHR) (the measurable slots) and, where relevant, Scope (USM set over U.ContextSlice) and windows/mechanism/status fields.
Rationale. Scope is set‑valued (USM) and not a CHR measurement; mechanisms/statuses are governance records. Keeping them outside the CHR CSLC avoids illegal scalarisation and preserves set‑algebra semantics for scope. (A.2.6 § 6.2; A.6.1; C.16/A.18).
Ontology recovery rows for overloaded words (LEX L-rules; normative)
What this section does. LEX L-rules standardise how we recover kind and use in Core/Context when overloaded everyday words hide FPF concepts. What this section does not do. It does not restate naming (see § 7 MG-DA) or morphology/casing/suffix rules (see § 8 LEX.Morph); it depends on them. Guards. Tokens are classified by
LEX.TokenClass ∈ {KernelToken, ContextToken, DiscriminatorToken}(§ 7.1). Only CHR:ReferencePlane may use the bare word plane. E.10.D2 names the boundary between EntityOfConcern and Description epistemes withDescriptionContext; specification use needs a granting gate named by value; publication faces/forms/units/carriers/renderings stay in publication lanes. Enumerations are Characteristics in a CharacteristicSpace only when a CSLC scale is declared; otherwise treat such slots as non-measurable attributes (not Characteristics).
Hard bans and ontology recovery rows (single table; normative)
Use this table mechanically. “Ban” means the listed phrase is not allowed in Core prose, identifiers, or diagrams unless the canonical appears alongside it (or as a registered Context alias). EntityOfConcern and Description-episteme boundary, specification-use gates, and token gates prevent EntityOfConcern, Description episteme, specification use, publication-lane, and TokenClass leaks (cf. § 8.1).
Red/Green pattern (example). ✗ “The process ensures quality.” → ✓ “The MethodDescription defines steps; Work is evaluated against RequirementRole.”
Diagnostic examples, not substitutions
Use these rows as compact diagnostics for common ontology recoveries, not as a replacement table. A proposed repaired sentence is accepted only after the live EntityOfConcern, head kind, relation or claim kind, admissible use, and scope are recovered and the transformed sentence passes § 7 MG-DA, § 8 LEX.Morph, and the KindRestorationCheck from E.10:10.2. If the example row would change the kind in the local sentence, split the sentence or leave a blocker; do not copy the example as a ready-made rewrite.
Acceptance tests (LEX‑AC)
A text passes LEX if all answers are Green:
- Context named. Polysemous terms appear inside a named
U.BoundedContext(or the page declares a local context card). - Right EntityOfConcern and Description-episteme boundary and specification use. EntityOfConcern, Description-episteme, specification-use, publication-lane, and run-record uses are not conflated (cf. § 8.1 gates).
- Promise vs ability vs performance.
PromiseContent(promise clause),Capability(ability),Work(performance) are not conflated. - No anthropomorphism. Documents/datasets/models do not “do”; Systems do.
- Scheduling hygiene. No actuals on
WorkPlan; all actuals live onWork. - Cross‑context reuse. Any reuse across Contexts cites a Bridge id with kind, direction, congruence level, loss, and scope. Apply A.6.9 (RPR‑XCTX) when the published prose uses “same”, “equivalent”, “align”, “map”, or similar bridge wording.
- MG-DA ok. New or refactored tokens pass § 7 MG-DA (anchored head noun; collision check; CharacteristicSpace for enums).
- Morphology ok. Suffix/prefix/casing respect § 8 LEX.Morph (e.g.,
…Role,MethodDescription,Work, reserved prefixes). - Banned tokens absent. No process/function/task/activity in Kernel senses; no tooling/file suffixes in Kernel tokens.
- State gating present (when needed). Readiness is expressed via RSG state + StateAssertion, not vague “approved/ready”.
Coordination map (how LEX plugs into the rest of FPF)
-
With E.10.D1 D.CTX (Context discipline). ULR–CTX‑1: Every Core meaning that can vary names its
U.BoundedContext. ULR–CTX‑2: Same‑spelled labels are distinct senses across Contexts; reuse requires a Bridge (F.9) with CL & loss notes. -
With E.10.D2 (EntityOfConcern and Description-episteme boundary and specification use/refinement discipline). Speak in the right EntityOfConcern and Description-episteme boundary and specification use. ULR-EOC-DESC-SPEC-1..3 apply (the EntityOfConcern is named directly; Description suffixes name Description-episteme use; Spec suffixes name specification use on a Description episteme; work/state assertions are evaluations or occurrences). Upgrades Description to specification use only when checkable acceptance or another specification-granting gate named by value exists.
-
With A.2 / A.15 (Role–Method–Work alignment). Role = assignment; Method = way‑of‑doing; MethodDescription = documented recipe; Work = dated occurrence. Sentences must keep this split.
-
With F‑cluster (Unification) & UTS (F.17). Harvest in one Context → SenseCell → Concept‑Set row with relation (
≡/⋈/⊂/⟂) and losses. UTS is the human‑readable roll‑up.
Acts vs tokens. LEX applies to tokens; USM applies to acts (mint/rename/use). Conformance:
LEX.TokenClass(t)=c ⇒ USM.Scope(usage) ∈ AllowedScopes(c)(see § 7.5).
Conformance checklist (LEX‑CC)
- LEX‑CC‑1 (Bans). Any banned token in Core/Arch fails unless the canonical appears (or the token is a registered Context alias).
- LEX‑CC‑2 (Context). Each polysemous term names its
U.BoundedContext. - LEX‑CC‑3 (EntityOfConcern and Description-episteme boundary and specification-use morphology). Usage passes § 8 gates (suffix/prefix/casing), EntityOfConcern and Description-episteme boundary checks, and specification-use checks.
- LEX‑CC‑4 (Bridge). Cross‑context reuse cites Bridge id and CL; same‑spelled labels without a Bridge are non‑conformant.
- LEX‑CC‑5 (MG-DA). New tokens pass MG-DA tests, including full‑text collision and Reserved‑Names checks.
- LEX‑CC‑6 (Service & evidence). Service acceptance computed from Work; evidence is an EvidenceRole on an Episteme with provenance.
- LEX‑CC‑7 (USM compatibility). For each LexicalAct,
USM.Scope ∈ AllowedScopes(LEX.TokenClass). - LEX‑CC‑8 (Minting discipline). If overload cleanup requires one local replacement phrase, the text records the repaired phrase and the governing local repair pattern. If cleanup requires one durable reusable name, the text runs the full F.18
MintNeworDocumentLegacyprocedure; intuition-first partial Name Cards are non-conformant.
Worked micro‑examples (short, cross‑domain)
Factory.
✗ “The process failed; the service restarted itself.”
✓ PLC_17#ObserverRole:PipelineOps logged Observations;
CAB_Chair#ApproverRole:ChangeControl performed a SpeechAct “approve restart”;
OpsBot#DeployerRole:CD_Pipeline_v7 executed Work RestartRun‑4711 which claimsPromiseContent(CoolingUtility);
post‑run Evaluation shows the Service acceptance passed.
Cloud.
✗ “The process owner approved; the API service deployed.”
✓ ProductLead#AuthorizerRole:Rollout_2025 performed a SpeechAct;
sCG‑Spec_ci_bot#DeployerRole:CD_Pipeline_v7 performed Work Deploy‑F123;
API = accessSpec : MethodDescription#REST_v12; promise content “Feature Access” declares acceptance; telemetry Work shows fulfilPromiseContent.
Research.
✗ “Dataset X proves the theory; the process is reproducible.”
✓ DatasetX#ModelFitEvidenceRole:Theory_Context supports claim C within scope S;
reproducibility via StateAssertions on ReplicationEvidenceRole;
procedures are U.MethodDescription; re‑runs are Work.
Semioarchitecture.
✗ “projection has one meaning in routing and bridge prose.”
✓ A.16 keeps projection as a move name for route-bounded partialization; F.9.1 keeps projection as a bridge stance label. If one durable reusable replacement name is really needed, handle the naming question with F.18 MintNew or an explicit source-retention naming decision rather than flattening both local interpretations into one umbrella rewrite.
Editorial note.
This section inherits § 7 MG-DA (anchored head nouns; Characteristic/CharacteristicSpace for enums; collision checks) and § 8 LEX.Morph (suffix/prefix/casing). It deliberately omits their details to avoid duplication. The only legitimate uses of plane in the Core are CHR:ReferencePlane and the derived operators CL^plane and Φ_plane; policy flags MUST NOT introduce new “planes”. To distinguish pre‑operational vs operational states within ReferencePlane=world, use WorldRegime ∈ {prep|live} (formerly PlaneRegime).
Guarded-head cross-reference (normative lexical caution)
When one wording head already carries several FPF-governed local interpretations, lexical cleanup should prefer a guarded-head note over silent flattening. The note may record that the head remains risky, name the cited texts or patterns that govern the local interpretations, and point readers to the local canonical interpretation in each cited text.
If cleanup reveals that no admissible existing token can carry the needed meaning, use the local repair pattern for one-off wording. If the change needs one durable reusable name, handle the naming question with F.18 MintNew or DocumentLegacy rather than inventing an ad hoc synonym by feel.
This cross-reference is lexical only. It does not create a new repair-side definition site, does not establish Cross-context equivalence, and does not overrule cited local definitions. It simply keeps overloaded heads from being normalized into one false global interpretation.
projection is the main current example: A.16 keeps it as a move name for route-bounded partialization, while F.9.1 keeps it as a bridge stance label. E.10 therefore requires deconfliction notes and explicit naming of the cited text that governs each local interpretation, not one umbrella rewrite that erases the distinction.
Migration playbook — turning messy language into ULR‑clean prose (informative)
A pragmatic three‑pass routine. Works with plain text, diagrams, or models; no tools required.
Pass 0 — Pre‑flight (2 minutes per page)
0.1 Name the Context card you’re writing in (title, edition, scope note).
0.2 For every new or renamed token, declare LEX.TokenClass ∈ {KernelToken, ContextToken, DiscriminatorToken}.
0.3 Run MG-DA pre‑check (anchored head noun; no metaphor heads; if enum → declare its CharacteristicSpace).
0.4 Run collision/uniqueness: full‑text grep + Reserved‑Names registry (see § 7). If collides → rename or DRR deprecate.
Pass 1 — Harvest in the Context
1.1 Underline overloaded words (process, service, function, workflow, ticket, approval, spec, plan, …). 1.2 For each, write a one‑line intent in Plain register (what FPF kind or relation is meant). 1.3 Mark any cross‑Context reuse candidates.
Pass 2 — Recover Core anchors (not substitution)
Pass 2 is not a lexical replacement table. For each underlined word or phrase, first record the pre-repair object kind, relation or claim kind, slot or use-position, admissible use, and scope. Then choose one disposition: keep with a guarded-head note, split into several kinds named by value, rewrite locally, send to F.18 for durable naming, send to the governing pattern, or leave blocking. A replacement phrase is admissible only after the post-repair kind, relation or claim kind, slot or use-position, admissible use, and scope are recoverable and no umbrella flattening, semantic narrowing, accidental widening, or slot-as-kind substitution has occurred.
2.1 Recover underlined words through § 9 L‑rules table:
• recipe → U.Method / U.MethodDescription
• scheduled run → U.Work / U.WorkPlan
• promise → U.PromiseContent
• ability → U.Capability
• actor‑mask → …Role / RoleAssignment
• document or evidence-bearing publication cue → Episteme with EvidenceRole or RequirementRole
2.2 Apply LEX.Morph (§ 8): suffix gates (…Role/…Work/MethodDescription/Service), casing, reserved prefixes.
2.3 Pass EntityOfConcern and Description-episteme boundary and specification-use check: the EntityOfConcern named directly; recipes/docs as Description epistemes; Spec only where the specification-granting gate is present; actuals as run records.
2.4 Attach Context tags on first use; set twin labels (Tech/Plain) in the local Glossary.
2.5 Record a local KindRestorationCheck for every changed FPF-governed phrase: pre-repair kind/relation/slot-or-use-position/use/scope, post-repair kind/relation/slot-or-use-position/use/scope, and preserved/split/intentionally changed/blocker disposition. A changed word without this check remains an unresolved lexical finding. If a relation, signature, field, mathematical-lens, role, method, work, evidence, assurance, gate, or decision use-position is live, cite the governing pattern for that position; E.10 detects the wording-use problem and does not replace the selected ontology.
Pass 3 — Stitch & publish
3.1 Add safe rewrites for any anti‑patterns you found (use § 9.2 quick table).
3.2 If sameness is needed across Contexts, create a Bridge (F.9) with explicit kind/dir/CL/Loss/scope (apply A.6.9 (RPR‑XCTX) when quoted or imported source wording uses umbrella “same/equivalent/align/map/…” language).
3.3 Publish a one‑page UTS (F.17) for the Context (columns: Context, Tech label, Plain label, Kernel anchor, Warnings).
3.4 Log a short DRR when renames/aliases occur (F.13), linking to grep results that motivated the change.
ULR conformance prompts (normative, concept-only questions)
Use these prompts during review. They reference § 7 (MG-DA) and § 8 (LEX.Morph) instead of repeating them.
- Context prompt. Does each potentially polysemous noun live inside a named
U.BoundedContext? - EntityOfConcern and Description-episteme boundary and specification-use prompt. Does each sentence use the correct boundary (the EntityOfConcern named directly; Description-episteme use for descriptions; specification use only where a neighbouring gate grants it; run: actuals)?
- Token prompt. For new/renamed tokens, is
LEX.TokenClassdeclared and consistent with where the token appears? - Head-kind prompt. Does the head noun name what kind of thing the phrase is actually about (Role/Method/Service/Work/Context/Characteristic/publication form/interpretation/process/authority use)? A narrowing qualifier alone does not answer this question.
- Qualifier-claim prompt. If an adjective, participle, genitive, or comparative modifier carries a claim being made, comparison criterion, relation, or admissible-use boundary, has that use been restored explicitly rather than left inside the modifier alone?
- Slot/use-position prompt. If the sentence names an object through a relation slot, signature slot, schema field, mathematical-lens use-position, or another FPF-governed position, are the object kind, position name, reference mode when live, admissible use, and governing pattern recoverable? If not, apply
E.10.ARCHor the governing pattern before rewriting. - Support-like interpretation prompt. If
support,supported,supporting, or a support-headed compound has FPF-governed use, applyE.10:0.2first and then useA.6.Psupport-like interpretation discrimination instead of a synonym swap. If the selected interpretation is base, anchor, or basedness, applyA.6.6and statedependent,base,baseRelation,scope, liveΓ_time, live witnesses,admissibleUse, andnonAdmissibleUse. If no interpretation can be selected, do not use support wording for reliance, publication, gate, decision, assurance, work, architecture, pattern-quality, or cross-context reuse. - Comparison-basis prompt. If the sentence compares, ranks, escalates, or downgrades something, is the comparison basis ontologically homogeneous after head-kind and qualifier restoration?
- Morphology prompt. Do suffix/prefix/casing pass LEX.Morph gates (e.g.,
…Role,MethodDescription,Work)? - Promise vs ability vs performance. Are Service (promise), Capability (ability), and Work (performance) distinct?
- Plan vs execution. Are WorkPlan windows separated from Work actuals?
- Evidence prompt. Do documents hold roles and justify, while systems act?
- Bridge prompt. If sameness spans Contexts, is there an explicit Bridge with CL and loss notes?
- Collision prompt. Did we run full-text + Reserved-Names checks (no other meaning of this token anywhere in FPF)?
- Naming-procedure prompt. If one durable reusable name is needed because no admissible existing token carries the needed meaning beyond one local repair, did we run the full F.18
MintNeworDocumentLegacyprocedure rather than picking a label by intuition and filling a partial Name Card afterward? - Value-substitution prompt. After the repair, can the declared reader still see the remaining admissible move, and did the repair preserve usability, affordability, semantic composability, neighbor-pattern fit, and local action guidance? If not, narrow the repair, keep ordinary wording with an recovery note with recovered kind and use, or leave the issue blocking instead of optimizing for lexical purity.
Working order for precision repair on FPF-governed prose. Restore the head kind first; a narrowing qualifier such as comparative, safe, interactive, or reliable does not by itself restore that kind. Then unpack the qualifier claim, then check whether the comparison or escalation basis is homogeneous. Only after that may a later Plain, didactic, or coarsened rendering admissibly relax the sentence, and even then the more precise upstream interpretation must remain recoverable.
SoTA-Echoing for lexical governance
E.10 lexical governance is not a private FPF style preference. It is a compact authoring discipline for communication, comprehension, term formation, discoverability, and error prevention. These external practice rows are admitted only where they change what an author or reviewer does in a live wording repair.
The practical result is simple: lexical governance must improve action guidance and semantic composability, not become language-police work. A SoTA row that does not change a rewrite, a forbidden shortcut, a governing-pattern application, a conformance prompt, or a reopen cue remains decorative and does not carry E.10.
ULR regression cues (concept-only “diff” triggers)
Re-review your prose when any of these happen:
- Context edition changes → re-affirm twin labels, Bridges, and acceptance wording.
- A role/type name grows (“and/plus/--”) → apply MG-DA: split or bundle (A.2).
- A slash,
and,plus,&, or similar grouping mark appears in FPF-governed wording → classify the span before editing the mark. The trigger is the FPF-governed grouping use, not the character itself: LLM output, review text, intake notes, or draft prose often uses a slash as lazyand/or, as an untyped bundle, or as an attempt to point at a hidden kind. If the grouped words are claim-bearing heads, relation heads, kind candidates, a lazyand/orjoin, or an attempt to point at a hidden kind, apply MG-DA,A.6.P, or the selected restoration pattern: split, bundle, or recover the relation named by value and admissible use. If the mark is part of accepted notation or a conventional designation such as a standard name, source name, discipline abbreviation, established compound name, formula, ratio, fraction, unit, path-like quoted source token, title, product name, or URL, keep the notation and classify its use; do not rewriteISO/IEC,ISO/IEC/IEEE,1/2, or similar conventional forms merely to remove the mark. - A “service” statement broadens scope → check that acceptance terms cover the new promised content, endpoint, or work boundary; else split the Service.
- Recipes gain/lose steps → update
MethodDescription, notServiceorRolenames. - Evidence verbs creep into actor sentences → re-apply L-rules (documents do not act).
- A generic head or support-headed compound acquires FPF-governed claim or admissible use (
comparative,safe,interactive,reliable,support,supported,supporting,support-looking, and similar modifiers or heads) → restore the head kind first, then unpack the qualifier claim or support-like interpretation before broader publication. - New token minted → ensure
LEX.TokenClassdeclared; run collision checks; add CharacteristicSpace if enum. - Suffix drift (e.g.,
…Workon a plan) → fix via LEX.Morph. - Cross-Context reuse by label appears → require a Bridge (F.9) or split senses.
- A guarded head needs a new label → prefer a guarded-head note first; if no admissible existing token remains for one durable reusable name, handle the naming question with full F.18
MintNeworDocumentLegacy.
Teaching deck — the ULR quick card (reusable in any Context)
Say it cleanly, once (memorise): Role = assignment (mask) - Method = way‑of‑doing - MethodDescription = recipe (document) - Work = run (dated) Capability = can‑do within bounds (envelope + measures) - Service = promise (access + acceptance) EntityOfConcern and Description-episteme boundary separates the EntityOfConcern from Description epistemes; specification use is a gated use of a Description episteme; publication faces/forms/units/carriers do not act; meaning use is interpreted within named Contexts; Bridge records state cross-context correspondence, direction, loss, and scope.
Name forms (allowed morphology):
• Types/roles: <Noun><Role/Type> (IncidentCommanderRole, NormativeStandardRole, WorkItemType).
• Statuses: <Noun>Status inside the Context’s role space (ApprovedStatus) — status‑only; not enactable.
• No suitcase nouns: avoid “and/plus/&” in names; use bundles (A.2) or separate roles.
• Acronyms: first expansion + register; short‑form registered per § 7.7.
Three worked micro‑examples — ULR across domains (informative)
Healthcare (OR context)
Messy: “The surgical process is scheduled at 08:00; the SOP approves the incision and the service documents recovery.”
ULR rewrite:
“WorkPlan OR‑Case‑221 starts 08:00 and will execute MethodDescription Incision_v4.
SOP_OR_v4 holds RequirementRole; a SpeechAct Work by QA_Officer#ApproverRole authorises the run.
The hospital offers Service ‘Post‑op monitoring’ (access = ward protocol; acceptance = vitals envelope).”
Manufacturing (assembly line)
Messy: “The welding function provides air‑tight seams; the process costs 3 min.”
ULR rewrite:
“Robot_SN789 has Capability ‘execute Weld_MIG_v3 within envelope E at measures M’.
Work instances that fulfil Service ‘Provide seam S’ average 3 min; acceptance bounds are in Seal_Acceptance.md.
The MethodDescription is Weld_MIG_v3; the Role is WelderRole.”
Cloud/SRE (production Context)
Messy: “The storage service wrote logs and the deployment process failed after 2 min.”
ULR rewrite:
“sCG‑Spec_ci_bot#DeployerRole:CD_v7 performed Work ‘Deploy r4711’ (failed at T+120 s).
The platform offers Service ‘Object Storage’ (access = S3_API_Spec_vX; acceptance = durability/availability targets).
LogWriter is a System bearing TransformerRole that wrote the records; the service did not act.”
Closing notes (governance & purity)
- Notation‑agnostic. ULR is a language constitution, not a scanner or template. Apply it in prose, sketches, or formal models.
- Where checks live. Convenience checks belong to Tooling; ULR itself stays notation‑agnostic. Conformance code lives in SCR‑LEX / RSCR‑LEX as referenced above.
- Acts vs tokens. LEX applies to tokens; USM applies to acts (mint/rename/use). Conformance:
LEX.TokenClass(t)=c ⇒ USM.Scope(usage) ∈ AllowedScopes(c)(§ 7.5). - Guards honoured. DevOps Lexical Firewall and Unidirectional Dependency remain intact.
- Reserved “plane”. Only
CHR:ReferencePlaneuses the bare word plane. E.10.D2 is the EntityOfConcern and Description-episteme boundary plus specification-use gates, with publication lanes kept separate; all other category talk is expressed as Characteristics in a CharacteristicSpace when scale semantics are declared.
One‑line memory: “ULR keeps words honest so ideas stay composable.”
E.10:End
Wording-Use Ontological Precision Restoration Architecture
Type: Architectural (E) Status: Stable Normativity: Normative unless explicitly marked informative
Plain-name. Wording ontology repair architecture.
Intent.
Keep FPF wording-use precision restoration distributed without letting every pattern of concern or subject pattern grow its own first-stage trigger registry. E.10 catches one overloaded wording use; E.10.ARCH says which applicability rows exist, how one row selects the first applicable restoration or governing pattern, and when repeated repair-only prose should be extracted from a subject pattern.
E.10.ARCH is not a generic language-cleanup pattern. Its mechanism is ontological reconstruction: recover what kind of thing is being talked about, which adjacent EntityOfConcern values, relation records, claim records, slot or use-position values, and FPF kinds named by value or references are admissibly involved, which relation, source-use disposition, or state-family value is live, and, when plain ontology is not enough, which mathematical lens under C.29 or which pattern-defined formal apparatus makes the candidate structure checkable. The output returns to wording only after that kind, slot/use-position, and use structure is recoverable. When the kind is recoverable but phrase-level apparatus still hides it, use F.19 for ontology-first plain technical rewriting.
Builds on. E.10, A.6.P, A.6.F, C.2.P, C.30.STRAT, A.19.SPR, A.6.3.CSC, F.18, E.8, E.19, and E.2.
Coordinates with. A.22, C.30, C.30.P, C.30.STRAT, C.30.ASV, named C.30.* structure or view patterns, C.16, A.17, A.18, A.19, C.25, C.27, C.29, F.19, E.21, E.11, I.2, and evidence, assurance, gate, work, decision, causal-use, release, and publication patterns governing those claims when those claims are being made.
Use this when
Use this pattern when a recurring FPF-governed wording-use problem cannot be closed by one local E.10 rewrite because the wording hides a stable primary-EntityOfConcern use field set, a stable recovery apparatus, and a useful remaining reader move.
Use it especially when a subject or adequacy pattern contains repeated first-stage repair prose such as:
- architecture-vs-diagram, model, graph, ADR, dashboard, view, layer, level, tier, stack, block, expert, cache, router, or gate triage before the architecture, structure, control, module-interface, flow, scale, publication, or gate pattern can start;
- axis, dimension, feature, property, metric, indicator, score, strong, weak, robust, level, coordinate, threshold, or scalar-quality triage before a characteristic or scale pattern can start;
- quality-term repair that decides between relation construction, quality characterization, evaluative characterization, Q-bundle use, pattern-quality coordinate use, action invitation, bridge, or governing pattern;
- state-family wording such as state, status, posture, readiness, stance, or currentness before the bearer, state frame, value set, admissible use, or governing pattern is recovered;
- source, publication, carrier, face,
PublicationUnit, dashboard, documentation, or source-return wording whose project-side use is not yet recovered; - relation-like, function-like, evidence-like, assurance-like, gate-like, work-like, decision-like, causal-use, release, or naming wording whose governing pattern is already known or must be recovered before the sentence is admitted.
What goes wrong if missed. FPF accumulates many small local trigger lists. One pattern says "architecture is not a diagram", another says "metric is not proof", another says "quality is not one scalar", and a reviewer cannot tell which pattern carries the repair. The text looks more precise, but the reader does not get a stable first move.
What this buys. E.10.ARCH gives one architecture for distributing wording-use repair: E.10 catches; E.10.ARCH selects the row and extraction criterion; a realization pattern or governing neighboring pattern recovers the ontology; the subject pattern returns to its own primary EntityOfConcern and first useful move.
First useful move. Decide whether the wording can close locally under E.10, already has a governing pattern, or needs one applicability row with stable semanticAreaBaseConcept, semanticArea, semanticAreaSenseFamily, ontologicalNeighborhood, recovery apparatus, and remaining reader move.
Not this pattern when.
- If a sentence is repaired locally under
E.10, stop there. - If the governing pattern and primary
EntityOfConcern, relation record, or claim record are already recoverable by value, use that governing pattern directly. - If the kind under repair is evidence, assurance, gate, work, decision, causal-use, release, mathematical-lens use, grounded architecture adequacy, structural-view adequacy, characteristic-space construction, Q-bundle construction, pattern-quality evaluation, or another FPF kind named by value, the governing pattern governs its own invariant.
E.10.ARCHonly governs the wording-use restoration distribution. - If the wording problem is phrase-level apparatus around an already recoverable kind, use
F.19rather than opening a new wording-use restoration row.
Primary EntityOfConcern and applicability-row scope
The primary EntityOfConcern for this pattern use is the local FPF architecture of WordingUseRestorationApplicabilityRow rows.
A WordingUseRestorationApplicabilityRow is a pattern-local row over one semanticAreaBaseConcept, one semanticArea, one semanticAreaSenseFamily, one recurring entityOfConcernUseFields field set, and one ontologicalNeighborhood. It states:
- the trigger source recognized by
E.10; semanticAreaBaseConcept,semanticArea, andsemanticAreaSenseFamily;- the primary
EntityOfConcernkind and encountered FPF kind or reference; - the relation between the encountered FPF kind or reference and the primary
EntityOfConcern; - the FPF kind or relation named by value recovered when live;
- live-claim or admissible-use classification when live;
- source-use disposition when live;
- state-family value or governing-pattern result when live;
- sentence role;
- admissible use;
- non-use boundary;
- remaining reader move;
- first applicable restoration or governing pattern;
- recovery product;
- first return to the subject pattern.
WordingUseRestorationApplicabilityRow is not a U.* kind, not a conformance record, not a process task, not a deontic obligation, and not a durable project record by itself.
WordingUseRestorationApplicabilityTable is the pattern-local publication table of such rows. It is not a pattern cluster, workstream, campaign, module, semantic parent, or authority-bearing record.
semanticAreaBaseConcept is the Base concept, source-side phrase, or already settled row cue by which the reader first recognizes the candidate semantic unit.
semanticArea is the Part-F semantic unit used by one wording-use restoration row: one Concept-Set row, one UTS row, or an explicitly bounded row-set whose rows remain sense-uniform enough for one recovery apparatus.
semanticAreaSenseFamily is the Part-F senseFamily or FPF kind named by value-family discriminator that prevents the row from becoming a theme, domain, workstream, or pattern-nest label.
ontologicalNeighborhood means the FPF applicability neighborhood around that named semanticArea: primary EntityOfConcern kind, admissible adjacent FPF kinds or references, relations, descriptions, publication forms or carriers, source-use dispositions, state-family values, use boundaries, applicable FPF patterns, remaining reader move, and the stable apparatus that makes the recovery checkable. It is not the semantic unit by itself and is not textual proximity, filename proximity, ToC proximity, alphabetic proximity, workstream grouping, topic grouping, discipline column, domain label, or pattern-nest placement.
pattern nest means a numbering or placement grouping such as A.6.*, C.16.*, or C.30.*. One applicability row may point to a realization pattern in one pattern nest, but the row and the nest are not the same concept.
Distribution architecture
The standing construction is:
E.10catches an FPF-governed wording use and either closes it locally or selects a governing pattern, controlled precision-reduction pattern, durable-name path, or fail-closed non-use disposition.E.10.ARCHmaintains the shared recovery algorithm and theWordingUseRestorationApplicabilityTable.- A realization pattern or retained governing pattern such as
A.6.P,A.6.F,C.2.P,C.30.P,C.30.STRAT,C.16.P,C.16.Q, orA.19.SPRunpacks the wording according to the shared algorithm for one namedsemanticAreaand itsontologicalNeighborhood. - Additional applicability rows, and only when needed additional realization patterns, appear when repeated FPF-governed wording hides a stable primary-EntityOfConcern use field set, a stable recovery apparatus, and a useful remaining reader move that no existing governing pattern already carries.
E.8governs publication-form and placement wording such aspattern nest, and requires authoring prose that usesontologicalNeighborhoodto expose the governingsemanticAreaBaseConcept,semanticArea, andsemanticAreaSenseFamilyrather than treating neighborhood as the semantic unit.E.19checks that authored pattern hosts preserve this distribution and do not keep rival first-stage repair doctrine.
This architecture keeps E.10 compact. It also keeps subject patterns centered on their own primary EntityOfConcern values, decisions, characteristics, structures, mathematical lenses, consequences, and worked uses.
EntityOfConcern and recurring hidden-field distribution
For wording such as EntityOfInterest, EoI, EoIClass, describedEntity, DescribedEntityRef, and primary described entity, or for selected EntityOfConcern-family heads such as EntityOfConcern, entityOfConcernRef, EntityOfConcernRef, EntityOfConcernClass, and publicationUnitPrimaryEntityOfConcern, the repair is distributed by the live FPF-governed use:
EntityOfInterest, EoI, EoIClass, describedEntity, DescribedEntityRef, and primary described entity are active repair triggers. FPF-governed wording must recover the EntityOfConcern-family use named by value, publication-unit primary-EoC use, or local FPF kind, then rewrite to EntityOfConcern, entityOfConcernRef, EntityOfConcernRef, EntityOfConcernClass, publicationUnitPrimaryEntityOfConcern, or the local FPF kind named by value. If no use is recoverable by value, the wording remains quoted source or trigger wording and cannot be used for reliance.
C.2.1carries the selected episteme slot and reference ontology:EntityOfConcernSlot,entityOfConcernRef,EntityOfConcernRef,EntityOfConcernChangeMode, andEntityOfConcernClass.C.2.Pcarries episteme, publication, and source-use precision restoration when the sentence still hides source wording, claim-bearing episteme, publication or carrier construction, project-side reliance, pattern-application wording, or use or non-use disposition.F.18carries durable naming, selected head settlement, and source-string and durable-name discipline after the kind under repair and use are recovered.E.17.AUD.OOTDcarriespublicationUnitPrimaryEntityOfConcernfor one bounded publication unit with one carried move and one outside-work boundary; it must not create a second C.2.1 slot.A.6.3, its retainedentityOfConcernRef-preserving specializations, andA.6.4carry preservation or retargeting of the EntityOfConcern across episteme morphisms.- Exact evidence, assurance, gate, work, decision, architecture, characteristic, mathematical-lens, or project-side patterns receive their own claim being made or admissible-use boundary directly when it is already recoverable.
This selected-family case is the standing example for recurring hidden-field architecture. When a new hidden-field family recurs, it is not solved by adding local warning prose to every subject pattern. It either uses an existing governing pattern, gets one applicability row in this table, or justifies a new realization pattern only when the hidden field set, recovery apparatus, and remaining reader move recur across FPF-governed texts.
Rationale and source-use lines
This distribution is selected because the recurring failure is not "too few word rules". The failure is that repair-only trigger prose migrates into subject patterns and begins to compete with their primary EntityOfConcern and first useful moves. A common symptom is a non-semio pattern whose Solution mainly teaches that a description, view, publication, record, card, diagram, source, or file is not a permission, promise, prescription, evidence record, assurance verdict, decision, gate passage, release, work occurrence, or authority source. Those guards are often correct, but their ontology is publication pragmatics, description pragmatics, and neighboring-pattern assignment, not the subject matter of the architecture, method, role, evidence, or characterization pattern. A workable FPF answer therefore needs three separations at once: a cheap shared trigger scan in E.10, a shared recovery architecture in E.10.ARCH, and local realization only where a named semanticArea has stable row identity, a stable field set, an ontologicalNeighborhood, and a remaining reader move.
The selected architecture is lowered or reopened when one of those source lines changes: if E.10 can close the issue locally, if a new governing pattern removes the need for a restoration row, if a realization pattern needs a different stable field set, or if subject patterns again start carrying duplicated first-stage trigger registries.
Shared recovery algorithm
Use this recovery order for FPF-relevant wording-use restoration cases. Each realization pattern may publish a compact local form, but the order stays shared.
- Trigger and bounded text. Name the bounded text span or publication unit, trigger span, local sentence role, register classification, and whether the text is conformant FPF, project text deliberately using FPF-governed terms, pattern references, relation names, or conformance claims, or source text being unpacked for possible FPF use.
- Cheap local closure. Check whether the wording has no FPF-governed use or only a small local head, register, or morphology repair. If yes, repair locally under
E.10, state the remaining reader move, and stop. - Head kind and candidate ontology. Recover the head kind, register classification, EntityOfConcern and Description-episteme boundary, specification-use gate when live, candidate referents, candidate EntityOfConcern values, relation records named by value, claim records, candidate relations, candidate slots or use-positions, candidate carriers or publications, and scope, time, viewpoint, or context facets. Include literal and intended candidates when metonymy or compression is plausible.
- Semantic area, ontological neighborhood, and governing-pattern selection. State
semanticAreaBaseConcept,semanticArea, andsemanticAreaSenseFamily; then select theontologicalNeighborhoodand first applicable governing pattern by primaryEntityOfConcernkind and admissible adjacent FPF kinds, references, or relations: relation construction, function-like kind and relation recovery, episteme, publication, source-use, selected structure or architecture description, characteristic or scale construction, quality characterization, evidence, assurance, gate, work, decision, causal-use, naming, controlled coarsening, or another governing FPF pattern. - Formal apparatus or stable substrate. State the stable apparatus that makes the repair checkable: relation or signature slots under
A.6.0/A.6.5/A.6.P, publication relation set, source-use disposition, selected structure, architecture question, characteristic or scale construction, quality bundle, mathematical lens underC.29, evidence path, gate record, work occurrence, decision record, assurance argument, causal-use record, or governing-pattern field set. When the same object is used in several relation/signature/lens positions, record the object kind and slot/use-position separately and cite the governing pattern;E.10.ARCHselects the restoration architecture rather than duplicating that pattern's ontology. - Normalized ontology and lexical projection. Produce the repaired wording, compact repair note, record-shaped value, governing-pattern application, or non-use disposition. Do not replace one umbrella word with another. The replacement candidate is itself a bounded wording use until it passes the
E.10trigger scan or is demoted to ordinary wording, quote-only wording, reduced-use cue, blocked use, or incomplete rewrite. - Admissible use and remaining reader move. State the admissible use, non-admissible claim escalation or adjacent use, and one useful reader move. If the wording is type-correct but inert, the repair is incomplete.
The sequence is shared; each wording-use restoration case differs by semanticAreaBaseConcept, semanticArea, semanticAreaSenseFamily, primary EntityOfConcern use fields, slot/use-position field set, ontologicalNeighborhood, governing pattern, substrate, and result.
Applicability table
Direct known governing-pattern rule
If the governing pattern and its primary EntityOfConcern, relation record, or claim record are already recoverable by value, use that governing pattern directly. Do not send direct C.30, C.16, C.29, E.21, evidence, assurance, gate, work, decision, causal-use, release, naming, controlled-coarsening, action-invitation, A.6.M module-interface, or mathematical-lens cases through a restoration pattern only because a familiar trigger word appears.
Apply A.6.P, A.6.F, C.2.P, C.30.P, C.30.STRAT, C.16.P, C.16.Q, or A.19.SPR only when wording hides the EntityOfConcern under repair, relation, characteristic, scale, score, quality characterization, comparison reference set, source-use disposition, state-family value, admissible use, or remaining reader move.
Admission and extraction criterion
Add or retain a WordingUseRestorationApplicabilityRow when all of the following are true:
- the wording recurs across FPF-governed texts or project text deliberately using FPF-governed terms, pattern references, relation names, or conformance claims;
- the hidden primary-EntityOfConcern use field set is stable;
- the recovery apparatus or field set is stable enough to teach;
- repeated in-place repair distracts from the subject pattern's primary EntityOfConcern and first useful move;
- a useful remaining reader move survives after overread removal;
- no existing governing pattern already carries the row without duplicating repair-only doctrine inside subject patterns.
Do not add a new realization pattern when an existing governing pattern such as A.6.F, A.6.A, A.6.M, A.15.4, A.6.6, A.6.3.CSC, A.10, B.3, A.20, A.21, A.15, C.11, C.28, or another governing pattern already carries the EntityOfConcern under repair, relation, claim, or field. Record that pattern as the governingPattern.
Extract repair-only material from a subject pattern when the material is only trigger lists, false-friend rows, anti-umbrella prose, or repair fields that must run before the subject pattern can start. Leave a narrow first-use cue or governing-pattern relation in the subject pattern.
Keep material in the subject pattern when it states the subject pattern's own invariant, worked case, conformance condition, characteristic construction, structural construction, mathematical lens, source-return condition, or user action.
Subject-pattern thin-pointer rule
Subject patterns keep at most one local first-use cue when the EntityOfConcern under repair, relation, claim, or field is hidden, then name the selected precision-restoration pattern as a pattern through ordinary reference apparatus or Relations. They do not turn that reference into local reference boilerplate, and they do not copy:
- the full
E.10trigger registry; - this shared algorithm;
- the
WordingUseRestorationApplicabilityTable; - broad false-friend lists whose only job is first-stage repair;
- old migration history written in place of current architecture prose.
A thin pointer is acceptable when it helps the working reader choose the right first move, for example:
- use
C.30.Pwhen architecture or structure wording hides whether the use under repair is selected structure, architecture-description use, structural-view use, source, model, diagram, graph, dashboard, or ordinary prose; - use
C.30.STRATwhenlayer,level,tier,stack,ladder,rung,block,expert,cache,router,gate, or a close source label hides whether the use under repair is a control-layer relation, module-interface relation, functional-flow relation, scale or coarse-graining relation, publication relation set, gate relation, neighboring use named by value, ordinary source label, quote-only cue, or blocked use; - use
C.16.Pwhen metric, score, axis, dimension, feature, property, indicator, strong, weak, robust, level, coordinate, threshold, or comparison wording hides characteristic or scale construction; - use
C.16.Qwhen quality or evaluative characterization wording hides Q-bundle, pattern-quality coordinate, relation construction, action-invitation, bridge, or characterization use named by value; - use
A.19.SPRwhen state, status, posture, readiness, stance, currentness, or a local state-like field hides bearer, state frame, value set, admissible use, or governing pattern; - use
C.2.Pwhen source, publication, carrier, face,PublicationUnit, dashboard, documentation, or text-work wording hides source-currentness relation or project-side reliance.
Name and placement discipline
semanticArea is the selected Part-F Tech term for the semantic unit used by a wording-use restoration row. Plain speech may say "semantic area" or "meaning area" only as a gloss for that declared Part-F row or bounded row-set.
meaning area, theme, pattern area, pattern cluster, workstream, campaign, module, and branch are not selected as Tech architecture terms for this distribution. Tech prose must resolve those cues into semanticAreaBaseConcept, semanticArea, semanticAreaSenseFamily, entityOfConcernUseFields, ontologicalNeighborhood, governingPattern named by value, and realization pattern.
pattern nest is allowed for ID and placement grouping such as A.6.*, C.16.*, or C.30.*. It is not a semantic parent relation and not an authority relation.
SelectedLocusObligationClosure is the current E.9.DA coordinate name for selected-locus obligation closure. Do not reintroduce ReceivingLocusObligationClosure as a general obligation kind, locus kind, pattern role, or restoration vocabulary.
Examples and near misses
Conformance checklist
Common anti-patterns
Related patterns
E.10catches and closes local wording issues or selects the applicable row.A.6.Prealizes the shared algorithm for relation construction and retained relation specializations.A.6.Frealizes function-like kind and relation recovery.C.2.Prealizes source-expression, episteme, publication, and FPF-governed-use recovery.C.30.Prealizes architecture and structure wording recovery.C.30.STRATrealizes stratification and source-label wording recovery forlayer,level,tier,stack,ladder,rung,block,expert,cache,router,gate, and close source labels before return to the governing pattern.C.16.Prealizes characteristic and scale wording recovery.C.16.Qrealizes quality characterization and evaluative characterization wording recovery.A.19.SPRrealizes state-family wording recovery when bearer, state frame, value set, admissible use, or governing pattern is hidden.F.18governs durable reusable naming after the kind under repair or relation is known.F.19governs phrase-level ontology-first plain technical rewriting after the kind under repair is recovered or while proving it is still hidden.E.8governs pattern-form and placement wording.E.19checks distribution preservation during review and refresh.E.11governs entry-distribution and sends broad or old-term entry cases to README scenarios, ToC query cues, local Problem frames, orI.2expanded entry-disambiguation cases.
E.10.ARCH:End
Conceptual Prefixes policy & registry
Intent. Provide a compact, notation‑neutral registry and minting policy for conceptual prefixes — short shorthands that signal cognitive namespaces used throughout the Core.
Policy (normative).
- Purpose. A conceptual prefix exists to aid reasoning, not to name files, serialisations, or APIs. It labels a role in thought (e.g., meta‑type, calculus operator, relation family).
- Anchoring. Every prefix MUST be anchored to a Core extension patterns (CAL/LOG/CHR) or Kernel construct and documented in its Relations.
- No tool lock‑in. A prefix MUST NOT imply a particular notation or machine binding (see E.5.1–E.5.2).
- Minting rule. New prefixes are introduced by a DRR (E.9) that demonstrates (a) cross‑pattern need, (b) non‑overlap with existing prefixes, (c) alignment with Pillars P‑1/P‑5.
- Scope. Prefixes are globally reserved within the Core; domain patterns MAY mint local shorthands only inside their Contexts and MUST NOT collide with this registry.
Registered conceptual prefixes (Core).
U.— U.Types meta‑namespace (holons & primitives). Anchor: Kernel Part A.Γ_— Calculus operator family (by flavour:Γ_sys,Γ_epist, …). Anchor: Part B umbrella on Γ.ut:— Universal relation family (e.g.,PartOfsub‑relations). Anchor: A.14 (Mereology) — informative alias vocabulary.tv:— Trace & Validation vocabulary (CT2R‑LOG):tv:AliasOf,tv:groundedBy. Anchor: B.3 (Trust & Assurance, LOG‑use).ev:— Evidence hooks (bindings/roles). Anchor: A.10 / B.3 (Evidence Graph Referring).mero:— Mereology trace types (internal labels:SumTrace/SetTrace/SliceTrace) used informatively in examples. Anchor: B.1 (Γ‑aggregation).
Conformance Checklist (E.10.P).
- CC‑LEX‑P.1 New Core text SHALL NOT introduce an unregistered conceptual prefix.
- CC‑LEX‑P.2 Each occurrence of a registered prefix SHALL cite its anchor pattern on first use in a section.
- CC‑LEX‑P.3 Examples that expand a prefix into a concrete URI or syntax MUST mark the expansion informative and locate it in Tooling/Pedagogy.
Relations. Constrains E.5.1 (Lexical Firewall) & E.5.2 (Notational Independence); Depends on E.9 (DRR).
E.10.P:End
Lexical Discipline for “Context” (D.CTX)
One‑sentence summary. Make the word Context unambiguous: in FPF it only denotes the formal primitive
U.BoundedContext; remove the term anchor; reserve Problem Frame for situational narrative; treat Domain as an informative family label, not a type.
Status. Discipline definitional pattern.
Depends on. C‑6 Strict Distinction; C‑7 Temporal Duality; G‑1 Minimal Generality; G‑2 Contextual Specification.
Coordinates with. E.10.U1 Domain‑Family Landscape Survey; E.10.U2 Term Harvesting & Normalisation; E.10.U7 Concept‑Set Table; E.10.U9 Alignment/Bridge; RoleAssigning patterns (e.g., E.10.U4).
Aliases (informative). Context Discipline; No‑Anchor Rule.
Intent & Applicability
Intent. Eliminate ambiguity around “context” by (a) fixing one formal meaning—U.BoundedContext; (b) removing “anchor” from the vocabulary; (c) reserving Problem Frame for prose about situations; and (d) clarifying Domain as an informative family (workflow, provenance, services, …) that groups several U.BoundedContexts.
Applicability. Mandatory across all FPF patterns (Role Assignment & Enactment, Sys-CAL, KD-CAL, Kind-CAL, planned LCA-CAL). Apply at the start of any unification effort and whenever documentation introduces or refactors “context”, “domain”, “anchor”.
Non‑goals. No governance, workflow, or tool mandates; no storage formats; no team roles.
Problem Frame
- Polysemy. “Context” is used for formal scopes, narrative situations, and even runtime modes.
- Extra token (“anchor”). “Anchor” pretends to be “where meaning is attached”, duplicating context semantics.
- Domain overreach. “Domain context” conflates families (disciplinary areas) with formal contexts.
- Plane mixing. Runtime/design stances and deontic/behavioural notions are smuggled into “context”.
Forces
Solution — Name one thing “Context” can mean
D‑CTX‑1 (Canonical meaning). In all FPF materials, Context denotes the formal primitive U.BoundedContext only. The short form Context is permitted in the Tech register strictly as an alias of U.BoundedContext.
D‑CTX‑2 (Remove “anchor”). The term anchor is prohibited. When you need “the place where a meaning lives”, use:
SenseCell := (U.BoundedContext, Local‑Sense)— the cell of meaning inside a specific Context; or- a
ConceptSet.Row+ column reference (see E.10.U7).
D‑CTX‑3 (Domain is informative). Domain (workflow, provenance, services, access, sensing, …) is not a U.Type. It is an informative family label grouping several U.BoundedContexts. There is no “domain context”.
D‑CTX‑4 (Narrative is Problem Frame). Use Problem Frame (or Frame) for situational narrative in patterns. Do not use “context” for narrative sections.
D‑CTX‑5 (Time is a tag, not a context). design / run are TimeScope tags (C‑7) on artefacts or sources; they do not create separate contexts.
D‑CTX‑6 (No context inheritance). U.BoundedContexts have no is‑a or containment relations. Any cross‑context relationship appears only via E.10.U9 Alignment/Bridge with explicit loss policies.
D‑CTX‑7 (Language/edition discipline). Different languages or editions may be distinct U.BoundedContexts when meaning or usage can diverge. Where an official source binds multilingual labels to the same semantics, record them as labels of the same Context.
D‑CTX‑8 (Reference forms). Use one of the following when pointing to meaning:
ContextId:LocalLabel(e.g.,BPMN_2_0:process), orSenseCell(ContextId, Local‑SenseId), or- ConceptSet(RowId).Column(ContextId) (E.10.U7).
Structure — Minimal reference shapes (informative)
Shapes shown do not prescribe formats; they are naming conventions.
- Context Id. Stable short handle (e.g.,
BPMN_2_0,PROV_O_2013,ITIL4_2020,NIST_RBAC_2004,SOSA_SSN_2017). - SenseCell.
(ContextId, Local‑Sense)whereLocal‑Senseis the Context‑local preferred label (from E.10.U2). - ConceptSet Row. A table row keyed by a row id; columns are
SenseCells per Context (E.10.U7).
Core Invariants (normative)
- LCTX‑INV‑1 (Uni‑meaning). The word Context in formal text equals
U.BoundedContext. - LCTX‑INV‑2 (No anchor). The token anchor does not appear in normative prose; use SenseCell or ConceptSet reference.
- LCTX‑INV‑3 (No domain contexts). “Domain context” is invalid; use Domain family + list of
U.BoundedContexts. - LCTX‑INV‑4 (Frames, not contexts). Pattern headers use Problem Frame for narrative.
- LCTX‑INV‑5 (No hierarchy). Contexts are flat; relationships are declared only via E.10.U9 Bridges.
- LCTX‑INV‑6 (Plane hygiene). Contexts describe context of meaning for sources; they are not roles, statuses, executions, or types (C‑6).
- LCTX‑INV‑7 (Time tags). DesignRunTag is a tag on carriers, source publications, or source epistemes as applicable; it does not multiply contexts.
- LCTX‑INV‑8 (Language/edition). Multilingual or multi‑edition handling follows D‑CTX‑7.
Conformance Checklist (normative)
- CC‑LCTX‑1. Grep‑style check: every “Context” in formal sections expands to
U.BoundedContext. - CC‑LCTX‑2. The token anchor is absent from normative text; where needed, occurrences are replaced by SenseCell or ConceptSet reference.
- CC‑LCTX‑3. Pattern headers use Problem Frame; none use “Context” for narrative.
- CC‑LCTX‑4. References to meaning are in one of the reference forms (Sec. 5).
- CC‑LCTX‑5. No file defines “domain context”; Domain appears only as an informative family.
- CC‑LCTX‑6. No is‑a edges between contexts; any cross‑context relation is located in E.10.U9.
- CC‑LCTX‑7. Language/edition handling matches D‑CTX‑7 (separate Contexts when semantics can diverge).
Anti‑patterns & Remedies
Worked Examples
E.10.D1:9.1 Enactment — process vs activity (two context of meaning).
- Use
BPMN_2_0:processandPROV_O_2013:activityas SenseCells. - In a Concept‑Set row, code the provisional relation
⋈(overlap), not an equality. - Role Descriptions later reference the specific SenseCell, not “an anchor”.
E.10.D1:9.2 Roles — behavioural mask vs access status.
BPMN_2_0:participantvsNIST_RBAC_2004:role.- Mark
⟂(incompatible) in the Concept‑Set row to prevent conflation. - Any cross‑use requires E.10.U9 with explicit loss policy.
E.10.D1:9.3 Services & evidence.
ITIL4_2020:service/ITIL4_2020:service‑level‑objectivewith KD‑CAL cellsSOSA_SSN_2017:observation.- References in acceptance patterns point to SenseCells; provenance stays within the PROV Context.
Reasoning Primitives (conceptual judgements; notation‑agnostic)
Pure thinking moves; no APIs, no storage, no governance.
-
(J1) Context expansion.
⊢ Context ≡ U.BoundedContextReading: wherever “Context” appears in formal prose, it denotesU.BoundedContext. -
(J2) Anchor ban.
uses("anchor") ⊢ violation(D‑CTX‑2)Reading: usage of “anchor” flags a discipline violation. -
(J3) Sense reference.
ref(ContextId, LocalLabel) ⊢ SenseCell(ContextId, Local‑Sense)Reading: a well‑formed reference identifies a SenseCell. -
(J4) Narrative frame.
header("Context") ⊢ replaceWith("Problem Frame")Reading: headings “Context” in patterns must become “Problem Frame”. -
(J5) Domain family.
label ∈ {workflow,…} ⊢ DomainFamily(label)Reading: Domain labels are families, not contexts. -
(J6) Time tag.
stance ∈ {design, run} ⊢ TimeScopeTag(stance)Reading: time is a tag, not a new context.
Relations (with other patterns)
Builds on: C‑6, C‑7, G‑1, G‑2. Constrains:
- E.10.U1 — lists only
U.BoundedContexts; no “domain contexts”; context records never encode pattern semantics. - E.10.U2 — Seeds and Occurrences are always Context‑anchored; references use forms from Sec. 5.
- E.10.U7 — Columns are SenseCells; row notes never call them “anchors”.
- E.10.U9 — All cross‑context relations live here; no implicit equivalences elsewhere.
RoleAssigningpatterns (E.10.U4, …) — Context points to SenseCell or Concept‑Set columns, never to “anchors”.
Migration Notes (conceptual playbook)
- Rename headings. Replace any “Context” section title with Problem Frame.
- Delete “anchor”. Replace with SenseCell or Concept‑Set references.
- Split domain vs context. Where “domain context” appears, rewrite as Domain family + explicit list of
U.BoundedContexts. - Audit references. Ensure every semantic reference is
ContextId:LocalLabelorSenseCell(ContextId, …)or Concept‑Set column. - Flatten contexts. Remove any inheritance among contexts; move relations to E.10.U9.
- Tag time. Replace “design or runtime context” with TimeScope tags.
- Language/edition pass. Split or merge Contexts per D‑CTX‑7; document rationale.
Acceptance Tests (SCR/RSCR stubs)
SCR — Static discipline checks
- SCR‑DCTX‑S01. No occurrence of the token anchor in normative sections.
- SCR‑DCTX‑S02. All formal uses of “Context” resolve to
U.BoundedContext. - SCR‑DCTX‑S03. Pattern headers contain Problem Frame instead of “Context”.
- SCR‑DCTX‑S04. All semantic references use the forms in Sec. 5.
- SCR‑DCTX‑S05. No “domain context” strings; Domain appears only as family metadata.
- SCR‑DCTX‑S06. No is‑a or containment relations between contexts outside E.10.U9.
RSCR — Regression discipline checks
- RSCR‑DCTX‑E01. Adding a new family or edition does not introduce “domain context” or context hierarchies.
- RSCR‑DCTX‑E02. Refactors of E.10.U1/U.2/U.7/U.9 do not re‑introduce “anchor”.
- RSCR‑DCTX‑E03. Multilingual updates follow D‑CTX‑7 (split/merge rationale recorded informatively).
E.10.D1:End
EntityOfConcern, Description Episteme, and Specification-Use Discipline
Definitional pattern - normative, notation-agnostic
One-sentence summary. For any
EntityOfConcernin FPF, keep the entity under concern distinct from theDescriptionepisteme that describes it in a bounded context and viewpoint, and admit...Specwording only for a Description episteme whose specification use is made checkable by explicit conditions. Specification is not a third peer ontology class beside the entity and its Description episteme.
Status. Definitional pattern. Builds on: A.7 Strict Distinction (Clarity Lattice); E.10.D1 D.CTX (Context is U.BoundedContext); C.2.1 U.EpistemeSlotGraph; C.2.3 Unified Formality Characteristic (F); F.15 SCR/RSCR Harness. Coordinates with. F.4 Role Description; F.5 Naming Discipline; F.12 Service Acceptance Binding; F.9 Alignment & Bridge across Contexts; F.9.1 Bridge Stance Overlay; F.10 Status Families Mapping. Non-goals. This pattern does not define editors, workflows, registries, storage formats, or publication carriers. It gives the boundary discipline that other FPF patterns use when they name an entity, its Description episteme, and any specification-use admission.
Problem frame
Use this pattern when FPF-governed wording names something under concern and also names a description, view, specification, publication, file, card, diagram, dashboard, work record, evidence item, assurance result, gate result, or decision around it.
The first useful move is to ask five questions:
- What is the
EntityOfConcern? - Which Description episteme describes it, if describing is live?
- Which
DescriptionContext = <EntityOfConcernRef, BoundedContextRef, ViewpointRef>bounds that description? - Is specification use admitted by explicit checkability, acceptance, validation, formality, or harness conditions, or is this only a Description episteme?
- Which neighboring FPF pattern carries any publication, carrier, evidence, assurance, gate, decision, commitment, promise, work, view, bridge, retargeting, or state-family claim?
Not this pattern when the question under repair is already an evidence path named by value, assurance claim, gate decision, commitment, work occurrence, bridge, representation transition, source relation, or state-family field. Use the neighboring pattern governing that claim for that claim and use E.10.D2 only to keep the EntityOfConcern, Description episteme, and specification-use boundary readable.
FPF frequently has to say that some item is being described: a role, method, system, work occurrence, promise content, characteristic, architecture, episteme, view, or another FPF entity. The old short memory of "thing / words / rules" remains useful, but it becomes harmful when it is taught as three peer kinds.
The working distinction is sharper:
- the EntityOfConcern is the item under concern;
- the Description episteme is the claim-bearing episteme that describes that item under one bounded context and viewpoint;
- specification use is an admitted use or refinement of a Description episteme, not a separate peer class;
- publication faces, publication forms, carriers, renderings, work occurrences, gate decisions, evidence relations, and assurance claims remain outside this boundary unless a neighboring pattern makes one of them the EntityOfConcern.
This matters whenever wording such as RoleDescription, ArchitectureDescription, MethodSpec, ServiceSpec, "the diagram is the architecture", "the card authorizes work", or "the file is the method" could make readers confuse the item under concern with a description, a publication, a carrier, a work occurrence, or a granted use.
What goes wrong if E.10.D2 is missed: specification-looking words become authority, a publication becomes the thing described, a file becomes the method, an approval state over an episteme becomes a runtime state, or two descriptions with the same label are treated as the same EntityOfConcern across contexts.
What E.10.D2 buys in practice: the practitioner can name the item under concern, keep the Description episteme inspectable, admit specification use only when checkability exists, and send every other claim being made to the governing FPF pattern that carries it.
Problem
- Entity-description collapse. A text treats the
EntityOfConcernas if it were identical to the Description episteme, the diagram, the card, the file, or the work record. - Specification inflation. A text calls any detailed write-up a
...Specalthough no checkability, acceptance condition, or harness relation is present. - Publication or carrier substitution. A publication face, document, dashboard, schema file, or generated view is treated as the described entity or as the authority for work.
- Context and viewpoint loss. A Description episteme is read as global even though FPF descriptions are bounded by
DescriptionContext = <EntityOfConcernRef, BoundedContextRef, ViewpointRef>. - Status and state leakage. Epistemic or deontic statuses over epistemes are used as if they were role states, system states, or runtime facts about the EntityOfConcern.
Solution
For any sentence that names an entity and also names description, specification, view, publication, carrier, evidence, evaluation, or work:
- Name the EntityOfConcern. State what item is under concern: for example
U.Role,U.Method,U.System,U.Work,U.PromiseContent,U.Characteristic,U.ArchitectureOf@Context, orU.Episteme. - Name the Description episteme when describing is live. A
...Descriptionis aU.Epistemethat describes the EntityOfConcern underDescriptionContext = <EntityOfConcernRef, BoundedContextRef, ViewpointRef>. - Admit specification use only by conditions. A
...Specis a Description episteme admitted for specification use when checkability conditions are present. The conditions must name formal checkability or declared formality, checkable invariants or acceptance criteria, a validation or acceptance harness, and the same DescriptionContext. - Keep publication and carrier relations separate. A card, document, dashboard, diagram, file, rendering, or API surface may publish, encode, render, or expose a Description episteme; it is not thereby the EntityOfConcern and it does not by itself create permission, evidence, gate, assurance, decision, commitment, or work.
- Exit to the neighboring pattern when another claim becomes live. Evidence goes to evidence patterns; assurance to assurance patterns; gate decisions to gate patterns; commitments and promises to F.18 and related patterns; work to work and P2W patterns; publication and view mechanics to E.17/A.6.3/C.2.P; retargeting to A.6.4.
Ordinary minimum: write one line that names the EntityOfConcern, the Description episteme or not live, the DescriptionContext or missing-context blocker, the specification-use admission value, and the neighboring FPF pattern governing that claim for any live non-description claim.
Stop at the boundary line when it makes the next admissible move clear. Open heavier episteme, publication, source, bridge, evidence, assurance, gate, decision, work, or state-family records only when those claims are being made.
Core field discipline
EntityOfConcern
EntityOfConcern means the item under concern in the current claim. It is not a universal "object" bucket and not an authoring target. It may be a system-side entity, an episteme, a relation, a characteristic, a work occurrence, a pattern, or another FPF kind named by value.
When the EntityOfConcern is itself an episteme, the same distinction still holds. The episteme under concern is not automatically identical to a Description episteme about that episteme, and a publication of that episteme is still a publication relation.
Description episteme
A Description episteme is a U.Episteme whose subjectRef is interpreted through:
It may carry labels, glosses, characterizations, state graphs, structural views, criteria, diagrams, examples, or other claim-bearing content about the EntityOfConcern. Those parts remain episteme content. They do not become parts of the EntityOfConcern unless a separate FPF pattern establishes that relation.
Specification-use admission
Use a ...Spec name only when the Description episteme is admitted for specification use under all applicable conditions:
- Checkability. The claimed invariants or acceptance conditions are checkable.
- Declared formality or equivalent discipline. The text states the formal mode, notation discipline, measurement criterion, comparator, or other exact basis that makes checking possible.
- Harness or validation relation. The text names the acceptance harness, SCR/RSCR check, validation method, measurement procedure, or neighboring FPF relation that will check the specification use.
- Same DescriptionContext. The specification-use episteme preserves or explicitly updates
EntityOfConcernRef,BoundedContextRef, andViewpointRef.
If any condition is absent, use ...Description and state the live criteria informatively or as candidates without claiming specification use.
Publication, carrier, and work boundary
U.Carrier encodes an episteme. A publication face/form/unit makes an episteme available. A rendering or UI surface displays it. A work occurrence uses it or acts under it. None of those relations changes the EntityOfConcern or upgrades a Description episteme to specification use by itself.
Naming discipline
Default suffix. Use ...Description for a Description episteme unless specification-use admission is explicit.
Reserved suffix. Use ...Spec only for a Description episteme admitted for specification use. Do not use Spec as a synonym for "detailed", "important", "official-looking", "formal-looking", or "stored in a schema".
Entity names. Use the bare FPF kind named by value for the EntityOfConcern: Role, Method, System, Architecture, Characteristic, PromiseContent, Work, Episteme, or another kind named by value. Do not append Description, Spec, Card, View, or Carrier unless the episteme, view, publication, or carrier is the actual EntityOfConcern.
DescriptionContext names. Use EntityOfConcernRef, BoundedContextRef, and ViewpointRef for Description episteme addressing. Do not revive DescribedEntityRef, EntityOfInterest, or peer-layer I-D-S wording.
Invariants
D2-1 (Entity-description distinction). The EntityOfConcern and the Description episteme about it are distinct even when the EntityOfConcern is itself an episteme.
D2-2 (Specification is admitted use). Specification is not a peer class beside EntityOfConcern and Description episteme. A ...Spec is a Description episteme admitted for specification use.
D2-3 (DescriptionContext). A Description episteme names or recovers DescriptionContext = <EntityOfConcernRef, BoundedContextRef, ViewpointRef>.
D2-4 (Publication and carrier separation). Publication faces, publication forms, publication units, carriers, renderings, files, dashboards, and UI surfaces do not become the EntityOfConcern and do not grant specification use by appearance.
D2-5 (Work separation). A plan, checklist, or specification-use Description episteme does not execute work. Work occurrences and work results remain under work and P2W patterns.
D2-6 (Status-state separation). Epistemic and deontic statuses over epistemes are not role states, system states, or runtime facts unless the exact state pattern grants that interpretation.
D2-7 (No label-only cross-context sameness). Identical labels in two bounded contexts or viewpoints do not establish sameness. Use F.9 bridges, A.6.3 views, or A.6.4 retargeting as appropriate.
D2-8 (ReferencePlane reservation). Do not call this distinction a plane. Use ReferencePlane only where CHR or another governing pattern defines that field.
Reasoning primitives
Description link.
TDesc is the Description episteme about EntityOfConcern T in bounded context C under viewpoint Vp.
Specification-use admission.
Only under those conditions may the episteme be named TSpec.
Characterization relation.
The role is characterized through the Description episteme. The structures are not silently parts of the role.
Evaluation relation.
Evaluation produces an attestation in a window. It does not mutate the EntityOfConcern.
Anti-patterns and repairs
Worked examples
Role
U.Role :: ChangeAuthority is the EntityOfConcern. ChangeAuthorityRoleDescription@ITIL4 is a Description episteme with DescriptionContext = <EntityOfConcernRef(ChangeAuthority), BoundedContextRef(ITIL4), ViewpointRef(RoleViewpoint)>.
The Description episteme may characterize the role by credential level, mandate window, separation-of-duty criteria, and a role-state graph. The role does not contain the graph or the checklist. If testable invariants and an acceptance harness are declared, a ChangeAuthorityRoleSpec@ITIL4 may be admitted for specification use.
Method
U.Method :: BacklogRefinement is the EntityOfConcern. A team note, practice card, or pseudo-code sketch is a BacklogRefinementMethodDescription@EssenceContext when it describes the method. It becomes BacklogRefinementMethodSpec@EssenceContext only when checkable method constraints and an acceptance or validation harness are present.
Calendar sessions, chat threads, and tickets are work occurrences or work records. They may use the method description, but they are not the method and not the Description episteme.
Architecture
ArchitectureOf@Context(Holon) is the EntityOfConcern. An architecture description, structural view, graph, ADR, or dashboard is a Description episteme, view, publication, or carrier about that architecture. The diagram does not become the architecture, and an ADR does not by itself create permission or assurance.
If a structural view uses a mathematical lens, C.29 carries the declared mathematical-lens use question. If an architecture description is used to guide work, A.15.4 and P2W-related patterns carry the work-relevance relation.
Episteme as EntityOfConcern
A safety case, DRR, pattern, or source bundle can itself be the EntityOfConcern. A review note describing that DRR is then a Description episteme about an episteme. A published PDF of the DRR is a carrier or publication relation. This prevents the common slide from "talking about a description" into "talking only about descriptions of descriptions".
Source-use and SoTA-echoing
Relations
Builds on:
- A.7 - Strict Distinction (Clarity Lattice). Supplies the general distinction between an EntityOfConcern and the epistemes, publications, carriers, work, decisions, evidence, and assurance claims around it.
- C.2.1 - U.EpistemeSlotGraph. Supplies
DescriptionContext,subjectRef, and episteme slot discipline. - C.2.3 - Unified Formality Characteristic. Supplies formality levels used by specification-use admission.
- F.15 - SCR/RSCR Harness. Supplies check and regression-check harness discipline.
Coordinates with:
- A.6.2/A.6.3/A.6.4. Description epistemes can be transformed, viewed, or retargeted only under their episteme-morphism laws.
- E.17 and E.17.0. Publication, view, face, form, unit, and carrier relations remain separate from the EntityOfConcern and Description episteme.
- F.9. Cross-context relation or near-sameness requires a bridge, not label reuse.
- F.4/F.5/F.8/F.10. Role, service, naming, acceptance, and evaluation patterns consume this boundary when they name descriptions and specifications.
Current repair moves
Use these repairs when live FPF prose violates this pattern:
-
Replace old
DescribedEntity*,EntityOfInterest,EoI, andEoIClasswording withEntityOfConcern,EntityOfConcernRef,EntityOfConcernClass, or the local FPF kind named by value. Retain old spellings only as source-side trigger wording. -
Replace peer-layer I-D-S wording with EntityOfConcern / Description episteme / specification-use admission wording.
-
Replace "contains RCS/RSG/checklist" with "is characterized through the Description episteme by RCS/RSG/checklist".
-
Replace carrier identity with "carrier encodes" or "publication exposes" wording.
-
Replace generic "object under description" talk with the EntityOfConcern named by value and its
DescriptionContext. -
Replace
...Specnames that lack specification-use admission with...Description. -
Send permission, evidence, assurance, gate, decision, promise, commitment, work, publication, view, bridge, or retargeting claims to the neighboring pattern governing that claim instead of keeping them as local semio guard prose.
Conformance checklist
Phrasebook
Didactic memory
Use the short memory entity / description / admitted specification use:
- Entity. What item is under concern?
- Description. Which episteme describes it, in which bounded context and viewpoint?
- Admitted specification use. What makes a
...Speccheckable here? - Publication and carrier. What only exposes, renders, stores, or transports the episteme?
- Neighboring claims. Which evidence, assurance, gate, decision, commitment, work, bridge, view, or retargeting pattern carries any additional claim being made?
E.10.D2:End
First-Practical Entry and Pattern-Use Discoverability Discipline
Type: Pattern-language governance pattern (E) Status: Stable Normativity: Normative for FPF entry, projection, and discoverability publication units.
At a glance. E.11 governs how FPF helps a working practitioner find the first useful pattern family without turning entry material into a shadow table of contents, universal method sequence, conformance authority, or second pattern body. The public first-entry publication unit is the FPF readme section: it starts from ordinary project needs and first useful results. The Preface explains the cross-cutting ideas behind those entries in plain engineering language before it relies on FPF terms. Local pattern Problem frame sections carry the high-precision recognition role. Separate duplicate first-entry indexes are not maintained when they repeat the readme scenario set.
Use this when. Use this pattern when a first-entry publication unit, table-of-content cue, readme section, Preface text, retrieval card, lexical query row, or pattern-local recognition text could change which FPF pattern family a user should inspect and apply first.
First output. A discoverability arrangement that names the public first-entry scenario, the first admissible governing pattern or small candidate pattern set, the local wrong-pattern boundary, and the publication unit that carries each piece.
Primary EntityOfConcern. One entry or discoverability publication unit in FPF: readme first-entry scenario text, Preface principle explanation, ToC query row, expanded entry-disambiguation case, retrieval cue, or pattern-local Problem-frame recognition text.
What this buys. A practitioner can start from a real project question instead of from FPF's internal topology, while FPF keeps pattern authority in the governing pattern body and avoids a duplicate navigation canon.
Problem Frame
FPF has many patterns. New users do not usually arrive saying "I need A.15" or "I need C.30.AD." They arrive with project questions:
- "I need to design or review architecture."
- "I need to write a regulation, method, boundary, contract, API, or work-process document."
- "I need to compare options without jumping to one favorite."
- "I need to turn a vague situation into a problem."
- "I need to say what better means before improving."
- "I need to know what evidence or assurance is missing."
- "I need to keep a temporal, freshness, rate, or action-window claim honest."
- "I need to use causal claims, model outputs, interventions, or responsibility claims safely."
- "I need to publish, compare, or rely on descriptions, views, dashboards, or explanations of the same entity."
- "I need better names for project entities."
- "I need to repair a technical text."
- "I need to know whether mathematics would help."
- "I need the field of current options or state of the art."
Those project questions need public first-entry scenarios. They should not be forced through a compact internal index before the user has recognized what FPF can do.
At the same time, first-entry text is dangerous when it becomes too powerful. A readme blurb, table row, search cue, or example can start acting as if it defines the pattern, prescribes a universal method sequence, or grants authority that belongs only in the governing pattern.
Problem
Entry material fails in three recurring ways.
First, it becomes too internal. It starts with FPF diagnoses such as "roles and methods are mixed" even though a working practitioner only knows that they need an architecture review, a regulation, a decision, or a better name.
Second, it becomes a duplicate corpus. A separate first-entry index repeats readme scenarios, then each pattern repeats the same related-pattern fanout list, and soon FPF carries several slightly different entry arrangements.
Third, it becomes too authoritative. A projection row, heading, card, or readme paragraph starts answering as if it were the pattern body. That is projection drift: a finding aid becomes a shadow source.
Forces
Practice Grounding
Solution - Assign Each Entry Publication Unit One Job
Use this distribution.
A separate first-entry index is not maintained when it repeats the readme scenario set. If one first-entry row has value not carried by the FPF readme section, ToC, a pattern Problem frame, or an expanded case, place that value in the appropriate publication unit instead of maintaining a duplicate index body.
readme First-Entry Scenario Rule
The public first-entry scenario set starts from working project questions and stabilizing results.
A conforming first-entry scenario has this shape:
The public scenario text may be prose rather than a visible form. It should still make those fields recoverable.
Good scenario heads name recognizable project work:
- develop or review architecture;
- write rules, methods, and work-process documents;
- compare alternatives and make a local choice;
- turn a vague situation into a usable problem statement;
- define what "better" means and run improvement;
- prepare evidence, assurance, or gate decisions before commitment;
- check timing, freshness, rhythm, and action windows;
- use causal explanations, interventions, responsibility, and model outputs safely;
- compare descriptions, dashboards, explanations, and views of the same thing;
- give things better names;
- repair wording in technical documents before it changes action;
- decide whether mathematics or formal modeling would help;
- build a state-of-the-art or option portfolio.
Wording repair may be one scenario. It must not dominate the public first-entry set. FPF should not look like a commission for checking admissible technical speech when it is also a framework for architecture, problem shaping, work-method publication, comparison, evidence, mathematics, quality, and improvement.
First-Time Engineer Readability Rule
Public first-entry text is tested against a first-time engineer, engineer-manager, or assisting agent who has not studied FPF.
The title and first sentence must name a recognizable working problem before FPF taxonomy, pattern ids, internal kind names, quality or projection vocabulary, or conformance vocabulary appears. The first practical result must be something the reader could imagine producing or asking for in the project: an architecture question note, regulation outline, comparison note, problem card, quality-and-improvement note, evidence-readiness note, timing note, causal-use note, description-use note, naming card, repaired paragraph, modeling note, or option portfolio.
FPF precision remains required. It is introduced after the plain recognition hook and stays recoverable through the pattern ids and later wording. If the same sentence cannot be translated into ordinary engineering Russian or ordinary engineering English without FPF slang, it is probably not public first-entry text yet.
Public Value Claim And Grounding Rule
A first-entry scenario may state substantial project value, but that value claim must be grounded. The scenario is not bare marketing copy. It should let an unfamiliar practitioner or assisting agent recognize a project situation, imagine a first useful result, and see the substantive FPF mechanism behind that value claim.
A conforming public first-entry scenario therefore:
- starts from a concrete project need in ordinary engineering language;
- names the first useful written result or decision aid before it names internal FPF apparatus;
- names the first pattern family as the means, not as the headline;
- shows at least one substantive distinction, object, comparison, or decision that FPF will make usable;
- avoids cards, forms, pattern ids, quality vocabulary, projection vocabulary, and conformance vocabulary until the working use is already recognizable;
- keeps wording repair and description repair visible but below half of the public scenario set, so FPF does not present itself mainly as speech policing.
The public first-entry set should read like "here are typical ways FPF can help a working project first", not like "here is the internal topology of FPF" and not like "here are slogans about better thinking."
Preface Principle Rule
The Preface explains why the readme scenarios are possible. It names cross-cutting ideas once, in narrative order, without copying the readme scenario table.
The Preface is read by people and agents who may still be deciding whether FPF is worth the cost of opening the heavier pattern bodies. It therefore has a didactic job: show that the public first-entry value claims are not empty marketing and not a loose collection of tips. The Preface should make the reader see the underlying engineering ideas that allow FPF to help with architecture, problem shaping, evidence, comparison, naming, mathematical modeling, quality, and improvement.
The Preface should cover at least:
- transdisciplinary use without collapse of local meanings;
- local closure inside an open world;
- holons, systems, epistemes, and the fact that architecture applies wherever holons have structure;
- EntityOfConcern and description, including description episteme, publication form, carrier, and multi-view publication separation;
- thinking-through-writing through patterns, cards, records, views, and publication forms;
- architecture as structure and epiplexity as an architecture characteristic;
- first-principles-to-work through TGA and P2W;
- mathematical lenses, formal-substrate declarations, mechanism import, and first-principles carry-through as distinct claims;
- ontology-first wording repair through
E.10,E.10.ARCH,F.18, andF.19; - evidence, assurance, gate, decision, and work separation;
- characteristic spaces, quality, NQD/OEE, and improvement loops;
- novelty, diversity, and state of the art;
- didactic primacy and plain explanation paired with technical fields.
The Preface may narrate across many pattern families, and it may discuss FPF as a whole project, including companion explanations, worked cases, tools, and project-local adaptations when those help explain the Core Specification. This is not leakage from one pattern into another. A Preface is allowed to explain the project-level idea that several patterns implement together.
The Preface may point to pattern families, but it should not become a second first-entry index.
Preface Plain-Engineering Narrative Rule
Preface prose is written in plain engineering language first and FPF vocabulary second.
A conforming Preface:
- states the working idea before the FPF term;
- gives a plain gloss before a strict FPF term carries the main explanatory point;
- uses pattern ids as addresses for stricter treatment, not as the main explanatory language;
- keeps vivid explanation and didactic force when precision repair removes overread;
- shows how the first-entry scenarios are grounded in real concepts, not only how they are distributed across patterns;
- can be understood before the reader has studied the pattern bodies, even though the pattern bodies remain the source of exact governance.
FPF-specific terms such as EntityOfConcern, episteme, publication form, carrier, viewpoint, DRR, math lens, FormalSubstrate, NQD, OEE, Plain, or Tech may appear in the Preface only when the ordinary engineering distinction is already visible or immediately glossed. A Preface paragraph that cannot be understood without prior FPF vocabulary is not yet in Preface style, even if every term is technically lawful.
Pattern Problem-Frame Rule
A pattern's own Problem frame is the local high-precision first-recognition section.
It should let a working practitioner recover:
- the pattern's primary EntityOfConcern;
- the working problem;
- what goes wrong if the pattern is missed or misread;
- the first admissible action;
- the practical result that action buys;
- the ordinary not-this-pattern boundary.
Add candidate-pattern comparison only when a real entry-discoverability problem exists. Otherwise, keep cross-pattern comparison out of the pattern body and use ordinary Relations, ToC query phrases, or expanded cases.
First-Entry Terminology
Preserve the first-entry terminology.
Avoid route, workflow, lifecycle, entry neighborhood, semantic area, ontological neighborhood, map, owner, load, posture, support, and other broad heads as entry terms unless the relevant governing pattern has recovered their specific FPF kind and admissible use.
Public readme Section Single-Source Rule
The FPF readme section carries the public first-entry scenario set.
If the same public first-entry content is exported into another publication form, export it from the FPF readme section instead of maintaining a second public first-entry version.
Projection and Authority Boundary
Entry and projection publication units help a user find the governing pattern. They do not govern the claim by themselves.
When a projection is used, it must be clear whether it is:
- public orientation;
- table-of-content query material;
- pattern-local recognition text;
- expanded entry-disambiguation case;
- retrieval card;
- quality or projection evidence for an FPF artifact;
- ordinary citation or relation.
If a projection needs to answer a substantive claim, use the governing pattern body or the pattern that governs that claim. Do not strengthen the projection.
Worked Slices
Public Entry From A Project Question
A project team says: "We need to review the architecture of our AI-agent platform before choosing a vendor."
The public readme first-entry scenario points to architecture, comparison, and evidence:
- architecture: what holon is being architected, which structures matter, and which architecture characteristic is under concern;
- comparison: which vendor, build, fine-tune, or hybrid alternatives remain in the candidate set;
- evidence: what tests or assurance arguments are needed before commitment.
The first governing pattern family is not a wording-repair pattern. It is C.30 for architecture, with A.19, C.11, A.10, or B.3 applied when the project question narrows to comparison, local choice, evidence, or assurance. E.10 is used only if the text hides the kind of architecture, evidence, decision, or publication claim being made.
Duplicate First-Entry Row Discharge
A compact first-entry index row says:
Do not keep this as a second entry canon. Discharge its useful content by kind:
After discharge, the remaining row is deleted because it only duplicates the readme scenario set and creates a second canon. The deletion preserves value because every claim being made has a publication unit or governing pattern that matches its kind.
Conformance Checklist
Common Anti-Patterns
Relations
- The FPF
readmesection carries public first practical entries. Prefacecarries cross-cutting ideas and principles behind the public first practical entries.E.8governs pattern form and pattern-local Problem-frame discipline.E.19checks entry, projection, and pattern-use discoverability during review and refresh.E.21evaluates whether corpus entry and projection material preserve quality without becoming pattern content.F.17,F.18,F.19,E.10, andE.10.ARCHgovern lexical, naming, and wording precision when entry cues hide FPF kinds or relations.I.2carries expanded entry-disambiguation cases only when compact public first-entry scenarios and local Problem frames are insufficient.- ToC rows provide query and dependency cues; they do not replace public first-entry scenarios or governing pattern bodies.
E.11:End
Didactic Primacy & Cognitive Ergonomics
Problem Frame
The FPF is designed as an "Operating System for Thought," a tool intended to augment and clarify human (and artificial) reasoning. This mission places a unique demand on its architecture: the framework's internal elegance and formal power are secondary to its primary function of being understandable and usable. A perfectly consistent but incomprehensible system fails in its didactic purpose. As formal mechanisms like Assurance Levels and epistemic scores are introduced, there is a significant risk that the pursuit of these metrics becomes an end in itself, overshadowing the ultimate goal of fostering clearer thought.
Problem
If the framework's design prioritizes theoretical purity or formal completeness over cognitive ergonomics, it becomes vulnerable to two critical failure modes:
- Goodhart's Law: When a measure (like
AssuranceLevel:L2) becomes the primary target, it ceases to be a good measure of genuine understanding. Teams may start "gaming the metrics," producing assurance-bearing epistemes or publications that are formally perfect but conceptually shallow or pragmatically useless. - Cognitive Overload & Rejection: The framework becomes so dense, jargon-laden, and procedurally complex that its users—the very agents it is meant to serve—either burn out or abandon it in favor of simpler, albeit less rigorous, methods. The "Operating System for Thought" devolves into a bureaucratic machine for certification.
Forces
Solution
FPF elevates Didactic Primacy (Pillar P-2) to a normative architectural principle, operationalized through two conceptual mechanisms designed to act as a permanent counterbalance to excessive formalism.
The Principle of Didactic Primacy (Expanded Definition)
The primary purpose of the FPF is to enhance the cognitive capabilities (U.Capability/Mastery) of an Agent (U.Agent) in service of its Objectives (U.Objective). The creation of assurance-bearing epistemes or publications with high assurance levels and epistemic scores is a means to that end, not the end itself. Any architectural decision that increases formal rigor at the cost of clarity or usability must be explicitly justified by a demonstrable gain in the agent's ability to reason effectively.
Mechanism 1: The Rationale Mandate
Every key assurance episteme or publication (such as a U.AssuranceCase or Proof) MUST contain a mandatory, human-readable rationale component.
- Nature: The
rationaleis not a technical description but a narrative explanation. - Content: It MUST answer the question: "How does achieving this level of formal assurance tangibly help the agent better understand the problem or make a more reliable decision?"
- Purpose: This mandate forces a moment of reflection, formally linking the act of formalization back to its pragmatic, cognitive purpose. An empty or perfunctory rationale indicates that the assurance work may be an exercise in formalism for its own sake.
Didactic Note for Managers: The "So What?" Test
The Rationale Mandate is FPF's built-in "So What?" test. When your team presents a complex, formally checked episteme or publication (
AssuranceLevel:L2), therationaleis where they answer your fundamental question: "This is impressive, but so what? How does this help us ship a better product, make a smarter investment, or avoid a critical risk?" If the answer isn't clear and compelling in therationale, the formal work may have been a waste of resources. It keeps your most brilliant minds focused on creating value, not just elegant proofs.
Mechanism 2: The Human-Factor Loop (HF-Loop)**
To provide a continuous, self-correcting mechanism against cognitive overload, FPF introduces a conceptual feedback loop.
- Core Concept: The HF-Loop is a formal method of inquiry designed to distinguish between the essential complexity of the problem being solved and the incidental complexity introduced by the FPF itself.
- Trigger Concept: A review is triggered when the subjective cognitive workload associated with using the framework exceeds a conceptual threshold. This is not about performance metrics, but about the perceived mental effort required to use FPF's concepts and structures.
- Review Concept: When triggered, a formal review is conducted by individuals in roles that specialize in human-centric perspectives, such as the
EthicistandUX Design Critic. - Output Concept: The review produces a set of proposed conceptual simplifications or didactic improvements to the framework's patterns. These are then submitted as formal change proposals (DRRs).
Conformance Checklist
- CC-E12.1 (Rationale Mandate): Every
U.AssuranceCaseor proof publication atAssuranceLevel:L2MUST contain a non-emptyrationalecomponent that satisfies the "So What?" test. - CC-E12.2 (HF-Loop Trigger Condition): Each pattern that defines a significant workflow SHOULD specify a conceptual condition for triggering an HF-Loop review, based on the principle of managing cognitive load.
- CC-E12.3 (HF-Loop Review Mandate): If a trigger condition is met, a review involving the designated human-centric roles MUST be initiated. Its outcome MUST be a documented set of conceptual refinement proposals.
- CC-E12.4 (Didactic Primacy in DRRs): Any DRR proposing a change to a normative pattern MUST include a section analyzing its impact on cognitive ergonomics and didactic clarity.
Common Anti-Patterns and How to Avoid Them
Consequences
Rationale
This pattern operationalizes Didactic Primacy (P-2), transforming it from a philosophical statement into an enforceable architectural Standard. The Rationale Mandate ensures that every act of formalization is tied to a clear purpose. The Human-Factor Loop ensures that the cost of using the framework is measured not just in resources, but in the most critical resource of all: the cognitive capacity of its users.
This pattern does not weaken the formal rigor established by other ADRs; it complements it. It guarantees that the powerful machinery of FPF is always directed towards a meaningful, human-relevant goal. It is the constitutional guarantee that FPF will remain, first and foremost, an "Operating System for Thought."
Relations
- Implements: Pillar
P-2 Didactic Primacy. - Complements:
E.13 Pragmatic Utility & Value Alignment(which focuses on the relevance of the problem, while this pattern focuses on the usability of the framework). - Is constrained by: The overall governance process (DRRs), which is the vehicle for implementing the conceptual simplifications proposed by the HF-Loop.
E.12:End
Pragmatic Utility & Value Alignment
Problem Frame
The FPF provides a powerful engine for constructing formally correct and highly reliable holons. This power, however, introduces a subtle but profound risk: a team can create a perfectly verified and validated holon or episteme (AssuranceLevel:L2) that solves an irrelevant, misunderstood, or non-existent problem. The framework guarantees that the solution is correct, but it does not, by itself, guarantee that the solution is useful.
Furthermore, many of the most important system objectives—such as "safety," "usability," or "security"—are not directly measurable. They are assessed via proxy characteristics (e.g., "number of reported vulnerabilities" as a proxy for security). This practice is vulnerable to Goodhart's Law: when a proxy becomes the primary target, it often ceases to be a good measure of the original goal, as teams begin to optimize the proxy at the expense of the real objective.
Problem
Without a formal mechanism to keep the entire assurance apparatus tethered to real-world value, FPF risks enabling two critical failure modes:
- Formalism for Formality's Sake: Teams become preoccupied with achieving high epistemic scores, producing elegant but useless holons or epistemes. The framework is used to build beautiful solutions to the wrong problems.
- Proxy-Metric Distortion (Goodhart's Law): Teams successfully optimize for a chosen proxy characteristic, but in doing so, they diverge from—or even actively undermine—the true, often qualitative,
U.Objectivethat the proxy was intended to represent. The system becomes technically successful but pragmatically a failure.
Forces
Solution
FPF elevates Pragmatic Utility (Pillar P-7) to a normative architectural principle, operationalized through two mandatory conceptual mechanisms.
The Principle of Pragmatic Utility (Expanded Definition)
Any holon or episteme created within FPF is an instrument for achieving a specific, pragmatic U.Objective. The value of that holon or episteme is determined solely by its utility in achieving that objective, not by its epistemic scores in isolation.
Mechanism 1: The Proxy-Audit Loop
To formally manage the risk of Goodhart's Law, FPF introduces a conceptual feedback loop to periodically review the alignment between proxy characteristics and their intended goals.
- New Normative Relation: A new relation,
isProxyFor: U.Characteristic → U.Objective, is introduced. This relation MUST be used to explicitly declare when a measurable characteristic is serving as a proxy for an often qualitativeU.Objective. - Conceptual Audit Process: Any characteristic marked with the
isProxyForrelation is subject to a periodic conceptual audit. - Review Roles: This audit is conceptually performed by the individual(s) in the
Strategistrole. They are tasked with answering the question: "Is optimizing for this proxy still reliably driving progress toward the actualU.Objectiveit represents, or have we observed a divergence?" - Output Concept: If a divergence is identified, a high-priority
U.Methodfor revising or replacing the proxy MUST be proposed.
Didactic Note for Managers: Are You Climbing the Right Mountain?
The Proxy-Audit Loop is your compass. Your team's dashboards might show all green—metrics are improving, targets are being hit. But the audit loop forces a crucial question: "Are these the right metrics?"
Imagine you are trying to improve "customer satisfaction" (
U.Objective). You choose "average call handle time" as a proxy metric. Your team successfully drives this number down. But the Proxy-Audit reveals that customer satisfaction is actually decreasing because agents are rushing and providing poor service to meet the time target. The loop forces you to recognize this divergence and find a better proxy (e.g., "first-call resolution rate"). It ensures your team is not just climbing fast, but climbing the right mountain.
Mechanism 2: The Minimally Viable Example (MVE) Mandate
To enforce a pragmatic, value-first approach from the very beginning of a project, any new U.System or major system component MUST begin its development cycle with the creation of a Minimally Viable Example (MVE).
- Definition: An MVE is a simple, end-to-end, working instance of the holon that demonstrates the achievement of at least one core, user-facing objective, however trivial. It is the FPF equivalent of a "Hello, World" for a complex system.
- Assurance Requirement: The MVE MUST achieve a minimum of
AssuranceLevel:L1 (Substantiated). This means the MVE cannot be a mere mock-up or a purely conceptual sketch; it must be supported by at least one piece of tangible evidence (e.g., a passing test case, a formal assertion), as defined in Pattern B.3.3. - Stege transition Precedence: The development of the full-scale holon cannot proceed to
AssuranceLevel:L2until the MVE has been created and has met its L1 requirement.
Conformance Checklist
- CC-E13.1 (Proxy Declaration Mandate): Any
U.Characteristicused as a primary driver for an objective MUST be explicitly linked to thatU.Objectivevia theisProxyForrelation. - CC-E13.2 (Proxy-Audit Mandate): A formal Proxy-Audit review MUST be conducted at regular conceptual intervals (e.g., before each major release). The outcome of this review MUST be a documented episteme.
- CC-E13.3 (MVE Mandate): The development of any new
U.SystemMUST be preceded by the creation of an MVE that satisfies theAssuranceLevel:L1requirement. - CC-E13.4 (MVE Traceability): The full-scale
U.SystemMUST maintain a formal traceability link (isEvolutionOf) to its originating MVE.
Common Anti-Patterns and How to Avoid Them
Consequences
Rationale
This pattern operationalizes Pragmatic Utility (P-7). While Pattern E.12 protects the agent from the cognitive overload of the framework, this pattern protects the problem from being lost in a sea of formal abstraction. It provides the necessary constitutional guardrails to keep the powerful formal methods of FPF focused on delivering tangible, real-world value.
The MVE Mandate ensures that every journey starts with a destination in sight. The Proxy-Audit Loop ensures that the compass used on that journey remains pointed in the right direction. Together, these mechanisms guarantee that knowledge generated within FPF is not only formally correct and epistemically reliable, but also meaningful, useful, and aligned with its intended purpose.
Relations
- Implements: Pillar
P-7 Pragmatic Utility. - Complements:
E.12 Didactic Primacy & Cognitive Ergonomics. - Provides context for: The definition of
U.ObjectiveandU.Characteristicby establishing a formal link between them.
E.13:End
Human‑Centric Working‑Model
Intent
Establish a single, human‑centric Working‑Model that practitioners can read, discuss, and evolve without exposure to formal machinery.
Each statement declares a justification stance (validationMode) and, when assurance is sought, attaches appropriate grounding via one or more assurance shoulders — Mapping, Logical, Constructive — and may additionally attach Empirical Validation (evidence) as defined by the Trust & Assurance calculus. Empirical Validation can accompany any stance; it is required when the stance is postulate. Assurance shoulders sit beneath the Working‑Model and never define its vocabulary.
Put bluntly: one model people work in; three assurance shoulders — plus empirical checks when the world is the judge.
Problem & Context
Teams need one shared Working‑Model to make decisions at speed. Historically this shared model either:
- drifts into jargon—different terms for one shared working-model value, slash‑labels, partial overlaps; or
- calcifies into machinery—too formal for day‑to‑day design and review.
Both failure modes create friction between two audiences: (1) working users (engineers, programme managers, policy owners) who need a small, stable Working-Model text, and (2) assurance authors (ontologists, methodologists, auditors) who need proofs that the Working-Model text is sound.
E.14 resolves the impasse by separating concerns:
- A Working‑Model layer: curated kinds and relations expressed in plain terms, governed by simple human rules.
- An Assurance stack beneath it - Mapping, Logical, Constructive - that carries the heavy arguments (concept alignment, relational semantics, generative traces) and never leaks back into the Working-Model narrative.
This pattern dovetails with the framework’s unification stance (small Working‑Model text, rigorous foundations) and with our constructional mereology commitments (sum/set/slice provide extensional identity), while keeping the Kernel minimal and meta‑only.
Forces
-
Cognitive economy vs. semantic precision. Managers and engineers must navigate with a handful of names and relations; assurance authors must still certify that those names and relations are unambiguous and extensional.
-
Speed of change vs. guarantees. The Working‑Model must accommodate rapid iteration; the Assurance stack must lag just enough to check, without blocking practical progress.
-
Parsimony vs. expressivity. The Working‑Model should not proliferate relation types or ad‑hoc categories; fine‑grained distinctions live in the Assurance layers and are shown only when they materially change a decision.
-
Downward grounding vs. upward contamination. Grounding must always flow down (Working‑Model → Mapping → Logical → Constructive). No dependence up is allowed: proofs and traces never dictate wording or layout in the Working‑Model.
-
Trans‑disciplinary unification vs. local dialects. The Working‑Model must reconcile different disciplines’ habits without erasing them; Mapping captures dialects, while the Working‑Model exposes a single usable choice.
-
Auditability vs. readability. Every Working‑Model statement must be auditable on request, yet day‑to‑day views hide the scaffolding unless summoned.
Solution
Human-Centric principles
Recognition text and assurance text
Human-facing patterns also need EntityOfConcern stability across the two reading-order text blocks. The working reader should not meet one object in the recognition text and a different ontological kind in the assurance text. If the pattern distinguishes an EntityOfConcern, the interpretive or operational move applied to that object, and the wider review or work process around it, those distinctions should be made explicit rather than hidden behind stylistic noun-swapping.
Working-Model-first drafting therefore also means subject-domain-first drafting. If a pattern is meant to help with a real review, design, cultural, research, or operational problem, the recognition text should open from that problem-owning moment before internal taxonomy or package architecture. If a broader umbrella head and a narrower operative branch are both live, the pattern should state that stack plainly enough that a cold reader can tell what the umbrella names, what branch is current, what object is governed, what move is being carried, and what wider work remains outside.
Under F.18 local-first naming, the canonical pair here is recognition text and assurance text.
The earlier provisional ...shell wording is retired.
These names refer to two reading-order text blocks inside one pattern, not to new publication-face kinds or authority kinds.
For human-facing canonical patterns, Working-Model-first discipline should appear in a two-part reading order. The recognition text is the working text that a cold practitioner, manager, or researcher should be able to understand first: what situation this pattern is for, what it buys, what it is not for, and what ordinary mistake it helps prevent. The assurance text is the heavier text that carries declaration, object discipline, modeling lens, law, reroute conditions, and other review work.
The assurance text may justify, tighten, or audit the working text, but it must not silently replace or strengthen the recognition-text claim. Where episteme-publication-heavy or transform-heavy patterns need a compact ontological account, the assurance text should expose three things explicitly:
- the ontic target or EntityOfConcern;
- the modeling substrate or mathematical lens when one is load-bearing;
- the publication face or working text by which the claim is presented.
This is a reading-order rule rather than a demand that every reader consume the assurance text first. The point is to keep the human-facing Working-Model text primary while preserving a recoverable, auditable assurance text beneath it.
E.14‑P.1 – Working‑Model first, stance explicit. ** Operate one Working‑Model for all human‑facing discussion. For each assertion, the author SHALL declare a justification stance (
validationMode) and choose the appropriate assurance shoulder(s): Mapping (term↔kind alignment via Lang‑CHR / D‑Projection), Logical (CT2R alias semantics, scope/constraints), Constructive (Γₘ generative trace), and Empirical Validation (evidence viaU.EvidenceRolein a declaredU.BoundedContext).
E.14‑P.2 – Downward‑only dependency. Information may flow from the Working‑Model down into any Assurance layer; no Assurance layer may impose vocabulary or shape back upward into the Working‑Model.
E.14‑P.3 – Small working text, big proof. The Working‑Model exposes a minimal set of names (L‑1/L‑2 registers) and a compact family of relations used in everyday reasoning; precision and completeness are proved below.
E.14‑P.4 – Human registers first. Terms in the Working‑Model are deliberately curated for human legibility (register‑badged, synonym‑aware). Synonym capture and language variance belong to Mapping; only the chosen canonical label appears in the Working-Model text.
E.14‑P.5 – Justification modes are explicit. Each Working‑Model relation declares
validationMode ∈ {axiomatic, inferential, postulate}. axiomatic → Constructive grounding (Γₘ trace viatv:groundedBy); inferential → Logical grounding (reasoned chain, often KD‑CAL‑backed for epistemic ties); postulate → Empirical Validation (evidence bundle with scope and timespan). Empirical Validation (LA) may also accompany inferential or axiomatic claims as real‑world confirmation. Mapping contributes TA, Logical/Constructive contribute VA, and Empirical contributes LA (per the Trust & Assurance calculus; no calculus variables appear in the Working‑Model text).
E.14‑P.6 – Parsimony in the working text. No new Working‑Model relation types are introduced if the existing Logical aliases plus Constructive grounding suffice to capture the intended meaning.
E.14‑P.7 – Evidence is a first‑class support. When postulate is chosen, authors SHALL attach an evidence pointer (Empirical Validation) appropriate to the claim and context, governed by
U.EvidenceRolewithin a declaredU.BoundedContext.
E.14‑P.8 – Working-model-first is not explanation-thin. Human-facing parsimony does not license under-explained pattern prose. When a pattern claims a Working‑Model benefit, it SHALL still provide enough problem framing, rationale, and worked slices that readers can tell what the model clarifies, what remains on the assurance shoulders, and when a heavier review path is required.
Layer Standard & Downward Flow (Working‑Model → Assurance)
This section defines what each layer is for, what it guarantees, and how a single Working‑Model statement is carried down.
Working‑Model (what humans see)
Purpose. A small, curated graph of kinds and relations that a mixed team can read at a glance.
Elements.
- Kinds — one chosen concept per node (no slash‑labels).
- Relations — a short list intelligible to non‑specialists (e.g., Component‑of, Member‑of, Aspect‑of, plus a small number of cross‑disciplinary ties such as Interface‑of or Constituent‑of).
- Language register badges — labels shown in the Working-Model are L‑1 or L‑2; L‑3/L‑4 remain in Mapping as synonyms or symbols.
Obligations.
- Every Working‑Model edge and node is grounded downward (see below).
- The Working‑Model does not display constructor jargon, proof terminology, or evidence identifiers; those live in Assurance and are available on demand.
Assurance‑1: Mapping (from words to kinds)
Role. Consolidate human labels from varied sources and bind them to the chosen kinds used on the Working‑Model.
Guarantee. For any Working‑Model label, there exists a stable alignment to exactly one kind; synonyms, abbreviations, locales and registers are recorded here, not in the displayed Working-Model. Mapping primarily raises Typing Assurance (TA) by consolidating synonyms/registers and binding tokens/labels to one chosen kind; calculus‑level metrics live outside Part E.
Deliverable. A compact alignment table per scope that makes it obvious which one label the Working‑Model will show and which alternatives are tolerated in background sources.
(Rationale: Working teams speak many dialects; the Working‑Model speaks one. Mapping is the interpreter.)
Assurance‑2: Logical (from Working‑Model relations to alias semantics)
Role. Give each Working‑Model relation a precise alias meaning and its admissible use‑cases, keeping the Working-Model vocabulary small.
Guarantee. A Working‑Model edge such as Component‑of or Aspect‑of carries one intended reading (transitivity/antisymmetry expectations, scope notes), sufficient for auditors to assess whether the use is legitimate in a given context.
Deliverable. A short set of alias rules: “When an edge is labeled Component‑of in the Working-Model text, it intends the structural reading that is later verified by construction.” The Logical layer is the Standard that ties human labels to accepted meanings (CT2R alias rules); it primarily contributes Verification Assurance (VA). Calculus‑level symbols are not used in E‑patterns.
(Rationale: logical aliasing protects the small Working-Model text from relation proliferation while keeping meanings crisp.)
Assurance‑3: Constructive (from meanings to generative traces)
Role. Provide extensional guarantees by constructing the wholes, collections, and slices that Working‑Model relations speak about.
Guarantee. For structural edges, there exists a constructional narrative (e.g., sum, set, slice) that, if told, would recreate the whole from its parts or the aspect from its bearer; this makes identity and containment trackable and testable across scales.
Deliverable. A single generative story per structural link (axiomatic justification). For non-structural ties in the Working-Model text (e.g., epistemic links), Constructive may be absent; Logical/Empirical take the lead. Constructive contributes VA (extensional identity via Γₘ); for structural edges, tv:groundedBy MUST reference exactly one Γₘ trace.
(Rationale: constructional grounding turns everyday part‑whole talk into statements whose identity conditions are not left to taste.)
Assurance‑4: Empirical Validation (from claims to observed world)
Role. Record when and where a Working‑Model claim meets reality.
Guarantee. Every empirical binding names a U.BoundedContext, a target claim/scope, and a timespan; staleness/refresh are managed per context policy.
Deliverable. A U.EvidenceRole binding (status‑only) anchored into the Evidence–Provenance chain. Empirical Validation contributes LA (raises empirical R and constrains G to its validated envelope).
The downward grounding for a single Working-Model statement
Consider a Working‑Model arrow A –Component‑of→ B:
- Mapping shows that the words A and B are the chosen labels for their kinds; it retains tolerated synonyms and symbols in the background.
- Logical confirms that Component‑of in the Working-Model text means the structural reading with its ordinary mereological expectations; if the Working-Model text used Member‑of instead, Logical would similarly certify the intended reading and its boundaries.
- Constructive exhibits the constructional narrative (e.g., a sum of parts resulting in B with A among them), which yields axiomatic justification for the structural edge, sets
validationMode=axiomatic, and binds the edge viatv:groundedBy → Γₘ.sum|set|slice. - Empirical Validation records the evidence pointer and scope that make the claim auditable within its
U.BoundedContext(required for postulate; optional reinforcement for other stances).
Together, these three ground the human arrow without leaking their machinery upward. The Working‑Model remains simple; the Assurance stack carries the proof.
Archetypal Grounding (System / Episteme)
Tell–Show–Show. The principle is stated once, then shown on a
U.Systemcase (structural) and on aU.Epistemecase (knowledge‑bearing), in line with the authoring template.
U.System — Working‑Model first, Constructive grounding available
- Publication (Working‑Model). Authors state structure using familiar relations (e.g., Impeller ut:ComponentOf Pump; Pump ut:ComponentOf Skid). Nothing else is required for readers to follow the design.
- Assurance (downward grounding). When a higher-assurance claim is sought, the same author narrates the constructive story of the whole as a composition of parts and, where appropriate, attaches a downward grounding to that narrative (sum / set / slice). The narrative remains concept‑level and notation‑neutral; order and time stay out of structure and are expressed in their own planes.
- Canonization move. Readers continue to see Working‑Model relations as the primary Working-Model text; the constructive story is supporting, not defining.
U.Episteme — Working‑Model first; Logical/Mapping preferred; Empirical evidence as appropriate
- Publication (Working‑Model). Authors connect meaning-bearing epistemes or publications using knowledge relations (e.g., RepresentationOf, UsageOf) in the same human‑oriented style.
- Assurance (downward grounding). Here assurance typically flows to the Logical or Mapping shoulders (reasoned argument; type/lexical alignment). Empirical Validation is used where observation is the right currency (status‑only roles on epistemes); Constructive grounding is optional and used only where a structural interpretation is genuinely intended.
- Canonization move. Again, Working‑Model text is the public form; assurance is attached deliberately and separately, without leaking method or time semantics into structure.
6.3 - Pattern lesson (both cases) The Working‑Model layer remains the canonical publication face for authors and reviewers; assurance layers (Mapping / Logical / Constructive) are opt‑in and used purposefully, with grounding flowing downwards from the Working‑Model to the appropriate shoulder. This presentation respects the authoring template’s Archetypal Grounding requirement and keeps notational choices illustrative rather than defining.
Bias‑Annotation (what to watch for, and the counter‑moves)
Reading reminder. Bias checks are conceptual reading aids; they never introduce notational or tooling mandates.
Conformance Checklist (normative; author‑facing duties for thought and prose)
All obligations above are conceptual and apply to thought and prose; they introduce no notational or data‑processing requirements.
E — Conceptual Examples (no notation, no data handling)
-
Assembly from parts → “Component Of” A pump skid is agreed to be nothing over and above its pump, frame, reservoir, and valve set considered together. Because the whole is conceptually constructed from those parts, the team may safely speak of each part as Component Of the skid. The justification is the construction itself: if any listed part were removed, the very same skid would no longer exist as that whole. This keeps identity extensional and makes the engineer‑facing alias (“Component Of”) truthful rather than conventional.
-
Parallel elements gathered → “Member Of” A test rig has four identical cartridges used in parallel. The rig treats them as a conceptual gathering; membership is fixed by inclusion in that gathering, not by sequence or timing. Speaking of each cartridge as Member Of the rig’s cartridge bank is then licensed by the same gathering act. Engineers can keep saying “member,” while architects know the warrant is the underlying construction of the bank as a collection, not an accidental tagging.
-
Focused facet carved → “Aspect Of” When the team talks about the thermal envelope of a reactor, they are not multiplying entities; they are taking the already‑agreed reactor and conceptually carving out its thermal facet for focused reasoning. Calling that carve‑out an Aspect Of the reactor is justified because the aspect owes its identity to the parent and the chosen facet, and nothing else. This licenses disciplined talk about “boundary,” “interface,” or “envelope” without mistaking them for independent systems.
Notes across the examples • Everyday aliases (Component Of, Member Of, Aspect Of) remain the only labels engineers need to see; their truth is anchored by prior constructional choices. • Structural links draw on Constructive grounding; epistemic links—like “Representation Of” or “Usage Of”—may instead rely on Empirical Validation (evidence bundles) or Logical grounding appropriate to the claim.
F — Resulting Context (after you apply the pattern)
What improves
- Single dial for containment. Teams can ask one plain question, “what is inside what?”, and trust that all structural talk reduces to shared constructional choices rather than ad-hoc relation lists. Ontologists keep rigorous warrants without overloading day-to-day readers.
- Extensional identity by default. Wholes are the wholes they are because of the parts gathered; collections are the collections they are because of their members; aspects inherit identity from their parent and facet. This prevents silent drift when labels change.
- Layer harmony. Engineer‑facing aliases live at the same level as other relation names, while their warrants live one step below, keeping human language clean and the generative basis auditable.
What to watch
- Discipline for structural relation kinds. A structural link that lacks a constructional warrant is conceptually unsafe. Conversely, forcing epistemic links to pretend they are structural over-physicalises knowledge claims; for those, evidence or argument is the right currency.
- Author workload moves, not grows. Day-to-day model authors stay with aliases; specification authors carry the responsibility for ensuring every structural statement really follows from a sum, a gathering, or a carve-out. This is a conscious shift of complexity away from operations and into the pattern's foundation.
Invariants you must preserve
- Parsimony of constructors. Build wholes by summing parts; build banks by gathering elements; focus facets by carving aspects. Do not invent extra generative acts for parallelism or time‑slicing; those concerns belong to other conceptual services.
- Two-relation-kind justification. Structural talk rides on construction; epistemic talk rides on evidence or proof. Keep the boundary sharp so that later reasoning (about reliability, compliance, or policy) remains clear.
Known consequences
- Stable queries, fewer surprises. Because aliases are backed by shared constructions, teams from different disciplines can interoperate without renegotiating meanings at hand‑off.
- Audit trail without jargon. Reviewers can trace every structural claim to a prior constructional choice, while everyday collaborators keep using familiar relation names.
Consequences
Quotable closer. “One layer to speak, three layers to justify—only when needed.”
Rationale
Why Working‑Model is canonical. FPF privileges human‑oriented relations as the primary interface for thinking and communication. This satisfies didactic primacy while preserving conceptual integrity: formal work serves the human layer, not the other way around. The canonical template and style principles institutionalise this choice without inviting notation lock‑in.
Why grounding flows downward. Mapping, Logical, Constructive, and Empirical supports are assurance shoulders that sit beneath the Working‑Model claim. Authors select the shoulder(s) that fit purpose and risk: type/lexical alignment (TA), reasoned consequence (VA), constructive reconstruction (VA), and real‑world confirmation (LA). This keeps the Kernel small, avoids plane‑mixing, and provides a clear path to higher-assurance guarantees when warranted.
Why patterns teach before they tighten. The Tell‑Show‑Show requirement couples each universal rule with System/Episteme illustrations, reducing cognitive load and preventing premature formalism. It is the didactic mechanism that makes Human‑Centric Canonization practical across disciplines.
Why no notation talk in Core. Guard‑rails and the style guide prohibit tool jargon and notation dependence inside normative prose; meanings are given in words and mathematics, with any renderings treated as illustrative only. This preserves longevity and cross‑disciplinary portability.
Relations
Builds on:
- E.8 Authoring Conventions & Style Guide — section order, style principles, and mandatory safety subsections used here.
- E.7 Archetypal Grounding — the Tell‑Show‑Show rule applied in this pattern’s own Grounding section.
- C.2.3 Unified Formality Characteristic (F) — declares the F scale and ΔF moves for progressive rigor; Working-Model publications SHALL declare F and remain notation-agnostic.
Coordinates with.
- CT2R‑LOG — Working‑Model Relations & Grounding — alias rules and
tv:groundedByStandard for edges grounded in Γₘ. - Compose‑CAL (Constructional Mereology) — provides the constructive shoulder (Γₘ: sum | set | slice) used to ground structural edges.
- E.10 Lexical Discipline & Stratification — ensures naming discipline and register hygiene when the human layer is published.
Constrains:
- All architectural patterns that publish relations SHALL present them in the Working‑Model layer and MAY attach assurance only as needed, preserving plane separation and notational independence. (Template conformance as per E.8.)
Informs.
- Part F unification practices (context of meaning, bridges, fit levels) by reinforcing the preference for human‑readable labels with explicit alignment notes rather than silent formal substitutions.
E.14:End
Lexical Authoring & Evolution Protocol (LEX‑AUTH)
Author patterns as evidence‑bearing epistemes, evolve them via governed open‑ended search, and publish an auditable trace that improves quality—not just compliance.
Context
FPF patterns are the canon: they define the generative rules that other artifacts depend on. Teams need to change patterns as the SoTA moves, but ad‑hoc edits lead to drift, low comparability, and brittle downstream updates. We need a method that (a) generates better alternatives, (b) selects them against explicit quality/assurance targets, and (c) publishes a machine‑ and human‑checkable trace that can be replayed, audited, and re‑run. (Built to cohere with DRR (E.9), LEX‑BUNDLE (E.10), Canonical Evolution Loop (B.4), NQD/E‑E (C.18 and C.19), Evidence Graph Referring (A.10), Trust (B.3), F‑Suite validation (F.15).)
Problem
Without a disciplined authoring protocol:
- One‑shot generation dominates; there is no evolutionary path from vN → vN+1.
- “Trace” degenerates into a proof‑of‑work: a method ran, not quality improved.
- Pattern edits blur lexicon vs. norms vs. examples, breaking didactics and tool‑independence.
- SoTA content is cited but not integrated via Bridges & CL; claims get over‑ported.
Forces
Solution — A governed evolutionary authoring method with a publishable LEX‑AUTH Trace (LAT)
LEX‑AUTH defines how a pattern is proposed, varied, selected, validated, and merged, with artifacts and evidence fit to the FPF kernel.
Method (design‑time choreography)
Stage A — Frame & Scope (Context, Objectives, Invariants)
- Anchor the work in a
U.BoundedContextfor the spec (e.g.,FPF/Core), cite governing guard‑rails (E.5.*), and state objectives for the change (e.g., clarity ↑, universality ↑, assurance cost ↓). - Declare the Delta‑Class (see §4.3) and impact radius (dependent patterns, bridges, tests).
- Fix acceptance targets (see §4.4 Quality & SoTA metrics).
Stage B — Generate candidates (SoTA + NQD)
4. Harvest SoTA inputs (standards, rival patterns, lived domain idioms) and bind them as evidence via U.EvidenceRole with claim/claim‑scope/timespan (empirical vs deductive lines).
5. Generate candidate variants using NQD‑CAL engines (Novelty/Quality/Diversity) with an E/E policy (explore↔exploit governor) to populate a Pareto front of pattern phrasings/structures. (No single shot; multiple candidate clauses compete.)
Stage C — Shape & Align (Structure, Bridges, USM) 6. Shape top candidates into the standard architectural template (Context → Problem → Forces → Solution → CC → Consequences → Rationale), obeying LEX‑BUNDLE (no tooling jargon; twin registers allowed). 7. Bridge across Contexts explicitly (F.9): any imported definitions/claims declare CL and loss notes; propose scoped narrowing where needed. 8. Type scopes with USM (A.2.6): keep ClaimScope (G) distinct from WorkScope; no “applicability/envelope” smuggling.
Stage D — Validate & Decide (Assurance, Tests, DRR) 9. Run the harness: update SCR/RSCR (F.15), lint lexical rules (E.10), run Γ‑consistency and RSG/SoD checks where relevant. 10. Score candidates on Quality & SoTA metrics (§4.4) and assurance deltas (Δ⟨F,G,R⟩). 11. Record a DRR (E.9) with options considered, trade‑offs, chosen candidate, blast‑radius. 12. Merge the winner; version pattern SemVer by Delta‑Class.
Stage E — Publish & Monitor 13. Publish the LEX‑AUTH Trace (LAT) (§4.2) as the separate authoring/evidence record for the change.
- Schedule evidence refresh windows and an evolution watchpoint (B.4 loop): when metrics or SoTA inputs decay, reopen Stage B.
The LEX‑AUTH Trace (LAT) — what it is and why it matters
A LAT is not “we ran a script.” It is a structured episteme that lets others reproduce quality gains and re‑run the search when SoTA shifts.
LAT minimal contents (publish with the pattern):
- Context & version (pattern id, context, SemVer, Delta‑Class).
- Objective vector (what we tried to improve: clarity, universality, assurance cost, etc.).
- SoTA pack (sources bound as
U.EvidenceRolewith claim/scope/time and polarity). - NQD settings (emitters/lenses, diversity characteristics) + E/E policy used.
- Candidate set (top K variants with NQD scores + short deltas from baseline).
- Bridge ledger (all cross‑context imports with CL and loss notes).
- Assurance delta (Δ⟨F,G,R⟩ from baseline; penalties from CL applied).
- Harness results (checks passed/failed, test diffs).
- DRR link (decision rationale id).
- Refresh policy (evidence decay windows and triggers).
Uses of the LAT: Reproducibility (re‑run B‑stages as SoTA changes), assurance (explicit impact on F/G/R), portfolio health (diversity/coverage), teaching (didactic before/after), and cross‑context safety (no silent imports). Publish the pattern with its DRR, and publish the LAT as the separate authoring/evidence record for the change. The LAT carries the reproducible authoring trace and cites the DRR as the governing decision record. The DRR remains complete without LAT citations; it may summarize already-available decisive evidence by value when that evidence materially shaped the content choice. If later LAT or refresh evidence motivates a reopened or revised choice, carry that evidence into the successor DRR or other admissible decision record rather than retrofitting the accepted DRR.
Example of a LAT‑stub
What counts as “changed the pattern as a whole” — Delta‑Classes & versioning
Classify the intended change before work starts (declare it in the DRR framing; echo it in the LAT or evidence record when one is used):
- Δ‑0 Lexical polish — wording/ordering only; no change to CC or semantics. → Patch (x.y.z+1).
- Δ‑1 Didactic restructure — narrative/layout; unchanged Conformance Checklist (CC). → Minor (x.y+1.0).
- Δ‑2 Normative refinement — CC tightened/clarified; semantics preserved by test equivalence. → Minor (x.y+1.0) + RSCR required.
- Δ‑3 Semantic change — CC adds/removes requirements; downstream requirements shift. → Major (x+1.0.0) + impact review + bridges refresh.
Definition of “pattern changed as a whole”: any Δ‑2/Δ‑3 change (i.e., the normative surface or semantics changed) counts as a pattern change in the canonical corpus and triggers harness & bridge reviews.
Quality & SoTA metrics (selection lenses)
Mandatory lenses (declare in LAT; higher is better unless noted):
- Clarity (readability; plain‑register score from didactic rubric).
- Universality (C‑1): ≥3 heterogeneous domains anchored in the Archetypal section.
- Lexical discipline (E.10): 0 violations (DevOps lexicon, process/function conflations).
- Assurance delta: ΔF (formality), ΔG (scope clarity), ΔR (reliability after CL penalties).
- Bridge integrity: Bridge integrity (policy lens): declare minimum CL thresholds per Context policy; penalties route to R only (B.3/F.9); record policy‑id in LAT.
- Test conformance: F‑suite pass; RSCR clean.
- Exploration health (NQD): diversity coverage > threshold; no premature convergence.
- Didactic economy: length vs density ratio within band; “Tell‑Show‑Show” present.
Optional lenses (context‑specific): Ethical/SoD guard strength; cross‑scale roll‑up integrity; aggregation proofs present; etc.
Conformance Checklist (normative)
CC‑LA‑1 (Context anchoring).
Every authoring run MUST declare a U.BoundedContext, Delta‑Class, objectives, and acceptance lenses before generating candidates.
CC‑LA‑2 (SoTA as evidence).
External inputs MUST be bound as U.EvidenceRole epistemes with claim, claim‑scope, polarity, timespan (formal/empirical lines). No raw links.
CC‑LA‑3 (Open‑ended generation). At least K≥3 candidate variants MUST be generated via NQD‑CAL with a declared E/E policy; single‑shot edits violate LEX‑AUTH.
CC‑LA‑4 (Bridges & CL). Any cross‑context reuse MUST appear in a Bridge with CL and loss notes. CL penalties apply to R‑lane when scoring.
CC‑LA‑5 (Harness). The candidate winner MUST pass LEX‑BUNDLE lint, SCR/RSCR tests, Γ‑consistency, and SoD/RSG gates where applicable.
CC‑LA‑6 (Assurance deltas). The LAT MUST publish Δ⟨F,G,R⟩ relative to baseline, explicitly accounting for CL penalties and any narrowed scopes.
CC‑LA‑7 (DRR). A DRR entry is mandatory for Δ‑2/Δ‑3 changes; it records options considered, rationale, and impact radius.
CC‑LA‑8 (Refresh plan). Empirical evidence in the LAT MUST carry a decay/refresh window; a watchpoint MUST be scheduled in the Canonical Evolution Loop.
CC‑LA‑9 (Publication). Publish the pattern + LAT together; past LATs are immutable. New runs produce new LATs.
Consequences
Benefits. Evolutive quality: patterns improve through search + selection, not edits by fiat. Auditability: a re‑runnable LAT shows why the chosen variant won. Safety: cross‑context reuse is explicit and penalized appropriately. Comparability: Δ‑classes & SemVer let downstream readers predict blast‑radius.
Trade‑offs. Some ceremony (LAT/DRR, NQD lenses) and maintenance (evidence refresh, bridge upkeep). These costs buy reproducibility and SoTA tracking.
Rationale & Links (informative)
LEX‑AUTH extends the FPF constitution by operationalising pattern evolution: it plugs B.4 Canonical Evolution Loop into E.9 DRR, binds SoTA via U.EvidenceRole and KD‑CAL, drives candidate generation with C.18 NQD‑CAL under C.19 E/E‑LOG, enforces lexical discipline via E.10 LEX‑BUNDLE, and validates with F.15 regression harnesses. Cross‑context safety is carried by F.9 Bridges with CL penalties in B.3 Trust. The whole remains notation‑independent (E.5.2) and stays within the Core → Tooling → Pedagogy dependency rule (E.5.3).
Operators (authoring deltas you are allowed to apply)
- Refine (tighten CC without changing acceptance meaning).
- Split/Merge (factor patterns; preserve links; update Bridges).
- Generalise/Constrain (expand/restrict ClaimScope (G) with proofs or loss notes).
- Rephrase (clarify language; leave CC untouched).
Each operator carries a default Delta‑Class and test obligations.
Self‑application Work Log (how this very pattern was authored)
This is not chain‑of‑thought; it is the required
U.Workevidence for LEX‑AUTH.
Context. FPF/Core (Canon); Delta‑Class: Δ‑2 (normative refinement by addition of method & CCs).
Objectives. Add an evolutionary authoring method; make trace useful (quality‑bearing); align with SoTA machinery already in spec.
SoTA pack (evidence bound). Prior FPF kernel commitments to DRR (E.9), E.10 LEX‑BUNDLE, B.4 Evolution, C.18 and C.19 NQD/E‑E, F.15 harness, F.9 Bridges, B.3 Trust; these are treated as the authoritative internal SoTA for the Canon here.
NQD/E‑E. Generated ≥3 alternative Solution sections; finalist chosen for clearer Δ‑classes and actionable LAT contents.
Bridges. No cross‑external mapping; intra‑canon references only (CL=3).
Harness. LEX‑BUNDLE lint (no tooling jargon), CCs unique/atomic, didactic “Tell‑Show‑Show” via Self‑application log, Universality criterion met by cross‑kernel applicability.
Assurance Δ. F: + (explicit method & CCs); G: + (scope separation & Δ‑classes); R: + (LAT obligations + bridge penalties).
DRR. Recorded: alternatives considered (lighter trace vs full LAT), chosen design (full LAT).
Refresh. Reopen when SoTA (e.g., G‑suite authoring kit or CHR templates) evolves or when LAT misuse is seen in reviews.
E.15:End
RoC‑Autonomy Budget & Enforcement
Intent. Make any claim of autonomous behavior testable and enforceable via a published AutonomyBudgetDecl, Guarded enactment, Override SpeechActs with SoD, and a Work‑anchored AutonomyLedger.
Rule (summary). If a Role/Method/Service claims autonomy, authors MUST: (i) publish an AutonomyBudgetDecl with AdmissibilityConditionsId and OverrideProtocolRef; (ii) gate Method steps with requiresAutonomyBudget; (iii) write a AutonomyLedgerEntry on every admitted Work; (iv) block on depletion until a ResumeAutonomy SpeechAct passes SoD; (v) surface autonomy fields in UTS rows.
Builds on: A.2 / A.2.1 / A.2.5 / A.15 / A.21; B.3; C.16; E.8; E.10; E.18; F.4; F.6; F.8; F.15; F.17. Coordinates with: A.13 (Agential Role), C.9 (Agency‑CHR), C.24 (Agent‑Tools‑CAL) where applicable; G.4–G.5–G.8–G.9–G.10 (method authoring/selection/shipping).
Problem Frame
Autonomy‑claiming performers (RoleAssignments over services/robots/teams operating without continuous human direction) must stay within declared limits (safety, risk, resource, remit) and yield to governance when required. Without a uniform rule, “autonomy” drifts into tacit norms, cannot be benchmarked or audited, and undermines selection (Part G) and publication (Part F).
Problem
- Opaque autonomy. Patterns assert “autonomous” behavior with no budget or enforcement.
- Un‑gated execution. Methods can execute beyond authority or risk limits.
- Ad‑hoc overrides. No standard SpeechAct for pausing/de‑scoping; SoD is unclear.
- Non‑portable publication. UTS (Unified Term Sheet) rows cannot surface autonomy‑critical data for parity or selection.
Forces
Bias-Annotation
Lenses tested: Gov, Arch, Onto/Epist, Prag, Did. Scope: Universal for any Role/Method/Service that claims autonomous operation (unsupervised decision or actuation) and is admitted via AutonomyBudgetDecl + Green‑Gate. It is not aimed at purely assistive “suggestion‑only” tools where each action is confirmed by a human at the point of execution.
- Gov. Bias toward enforceable oversight (hard gates, SoD, canonical override SpeechActs). Mitigation: exploration autonomy is still allowed, but only inside an explicit budget and time window.
- Arch. Bias toward gate‑and‑ledger structure (Green‑Gate + Work‑anchored
AutonomyLedger). Mitigation:telemetrySpecRefcan scope what is emitted when full deltas are unnecessary. - Onto/Epist. Bias toward typed, testable constraints (MM‑CHR tokens, explicit admissibility checks). Mitigation: budgets are optional‑field (
?) so low‑risk contexts can start minimal and tighten over time. - Prag. Bias toward measurable quotas may under‑express “soft” autonomy goals. Mitigation: pair
decision_tokenswithrisk_bandsto capture non‑counting limits. - Did. Bias toward explicit mechanics increases authoring surface area. Mitigation: provide a default
AutonomyBudgetDecltemplate and minimal harness cases in F.15.
Solution — Rule‑of‑Constraints (RoC) for Autonomy
This RoC applies whenever a Role/Method/Service claims autonomous operation (any phrasing that implies unsupervised decision or actuation).
E.16‑S1 (Autonomy Budget — mandatory).
Any autonomy claim MUST publish an AutonomyBudgetDecl as a named, versioned object in the same U.BoundedContext:
E.16‑S1.A (Scout / probe / commit partition for bounded specialization).
When an autonomy-bearing method uses bounded specialization scouting, the budget declaration MUST keep scout budget, probe budget, and commit checkpoint as distinct control surfaces rather than collapsing them into one undifferentiated burn envelope. A successful probe does not by itself authorize a committed route, wider burn, or scope widening. Leaving probe state requires one explicit checkpoint decision through the declared guard or override path, with budget burn and residual budget recorded in the AutonomyLedger. [E.16](/generated/patterns/E.16) governs this budget partition plus guard and ledger enforcement; it does not replace the dyadic move of [A.15](/generated/patterns/A.15) or the CheckpointReturn plan semantics of [C.24](/generated/patterns/C.24).
E.16‑S2 (Guarded enactment — Green‑Gate).
A Method step that requires autonomy MUST list requires: [RoleX] and requiresAutonomyBudget: AutonomyBudgetDecl.id. A Work instance is admissible iff at enactment time:
- the performer’s RoleAssignment is valid and in an enactable RSG state (A.2.5);
- the budget accounting for the AutonomyBudgetDecl indicates tokens/limits remaining for this budget in the declared Γ_time window (derived from the AutonomyLedger);
- all guard checks defined by
AdmissibilityConditionsIdevaluate to pass (e.g., risk ≤ band, resource ≤ cap).
Failing any gate blocks enactment (no “soft warnings” on Core surface).
E.16‑S3 (Autonomy Ledger). All admissible Work MUST record AutonomyLedger entries:
The ledger is evidence: attach to U.Work (A.15.1) and fold under Γ_work and Γ_time for reporting.
E.16‑S4 (Overrides — SpeechActs & SoD). Every budget MUST reference an OverrideProtocolRef that defines canonical SpeechActs:
- PauseAutonomy(budgetId) — immediate stop of autonomy‑gated steps;
- ResumeAutonomy(budgetId) — resume after conditions;
- NarrowAutonomy(budgetId, Δscope) — apply stricter limits;
- Escalate(budgetId) — handover to a declared SupervisorRole.
SoD: The override caller MUST NOT be the same RoleAssignment that is consuming the budget (enforce ⊥ in the Context). All overrides are Work (SpeechActs) with ledger entries (zero or negative deltas as per policy).
E.16‑S5 (Depletion behavior). When a budget depletes (no tokens / envelope exceeded / cap breached):
- Block further autonomy‑gated steps in the same Γ_time window;
- Emit DepletionNotice (SpeechAct), and either Escalate or Park per policy;
- Only a ResumeAutonomy SpeechAct from an admissible Role (per SoD) may reopen the gate.
E.16‑S6 (Publication in UTS). UTS rows that describe a Role, Method, Service, or Selector with autonomy MUST include:
AutonomyBudgetDeclRef(id & version);Aut-Guard policy-id (PolicyIdRef);OverrideProtocolRef;- declared Scope (G) and Γ_time window;
- edition pins for the referenced Role/Method/CHR.
- (optional, if a scale preference is declared)
ScaleLensPolicyRefandScaleLensOptIn ∈ {OptedIn, Neutral, OptedOut}.
E.16‑S7 (Scale & selection — optional lens). When autonomy interacts with open‑ended search (C.18 and C.19), budget consumption and guard violations are selection lenses in Part G (G.5/G.9). Applying a Scale‑Lens / Bitter‑Lesson preference is OPTIONAL. Authors MAY declare a ScaleLensPolicy for the autonomy claim; when declared, it MUST state:
- Trigger criteria — evidence that expected utility‑of‑scale is monotonic/non‑saturating on held‑out tasks, and a threshold at which scaling beats structured heuristics.
- Budget fit — compute/latency/cost targets within the declared
AutonomyBudgetDecl(Γ_time, resource_caps). - Safety invariants — guards and SoD remain non‑weakened under scaling; no policy may bypass E.16 gates.
- Fallback — a degrade‑gracefully plan if scaling fails to clear the trigger criteria within budget. If no ScaleLensPolicy is declared, selection remains neutral with respect to Bitter‑Lesson; RoC does not authorize ignoring scale‑safety guards under any policy.
Archetypal grounding (Tell‑Show‑Show; human‑centric)
Show‑A (U.System — mobile robot).
Robot_R7#NavigatorRole:Warehouse_2026 executes Navigate_v3.
AutonomyBudgetDecl: action_tokens=10 k steps/day, risk_bands={maxSpeed ≤ 1.2 m/s, minDist ≥ 0.5 m}, resource_caps={battery ≥ 20%}; AdmissibilityConditionsId=Aut‑Guard‑R7‑v1; override via PAUSE, RESUME, ESCALATE SpeechActs by FloorSupervisorRole ⊥ NavigatorRole. Ledger entries decrement action_tokens, track minDist. Depletion at 0 tokens halts autonomous moves and pages supervisor.
Show‑B (U.PromiseContent — autonomous deploy).
DeployerRole performs step “Promote to prod” under AutonomyBudgetDecl with decision_tokens=3/day, risk_envelope={error‑budget burn ≤ 2% / day}, guard “all pre‑deploy checks pass”. Overrides only by CABChair#AuthorizerRole ⊥ DeployerRole.
Conformance Checklist (SCR — E.16‑CC)
Consequences
- Testability. Autonomy is measurable (tokens/envelopes), audit‑ready (ledger), and stoppable (SpeechActs).
- Comparability. UTS surfaces autonomy metadata for fair selection & parity.
- Safety. Guards are hard gates; depletion halts further autonomy‑gated Work.
SoTA‑Echoing (post‑2015 practice alignment)
Each item states Adopt / Adapt / Reject, and why. Vendor/tool tokens are kept as informative, not normative.
-
Corrigibility & safe interruptibility (2016→). Adopt/Adapt. Work on safe interruption and “off‑switch” incentives argues that capable systems should remain stoppable and should not be rewarded for resisting oversight (Orseau & Armstrong, 2016; Hadfield‑Menell et al., 2017). E.16 adapts this into canonical PauseAutonomy / ResumeAutonomy SpeechActs plus SoD and hard gating on depletion.
-
AI safety as concrete operational hazards (2016→). Adopt. “Concrete Problems in AI Safety” pushes instrumentation and testable safety constraints over informal assurances (Amodei et al., 2016). E.16 mirrors this by turning “autonomy” into a budget + ledger + guards specification that can be benchmarked and audited.
-
SRE error budgets & “stop the line” operations (2016→). Adopt/Adapt. Error‑budget practice treats reliability as a measurable envelope that gates risky change when depleted (Beyer et al., Site Reliability Engineering, 2016; Höller et al., The Site Reliability Workbook, 2018). E.16 adapts the idea into
risk_bandsand depletion behavior that blocks autonomy‑gated steps until governed resume. -
Risk management frameworks for AI systems (2023→). Adopt/Adapt. Contemporary risk frameworks emphasize governance, continuous measurement, and traceable controls (NIST AI RMF 1.0, 2023; ISO/IEC 23894, 2023). E.16 adapts these into UTS publication + Work‑anchored ledger evidence for parity and audit.
-
Policy‑as‑code and provenance gating (2019→). Adopt. Modern supply‑chain integrity systems emphasize policy‑checked actions with verifiable provenance (in‑toto, 2019→; SLSA, 2021→). E.16 echoes the same principle for autonomy: no autonomy‑gated enactment without passing declared guards and emitting ledger evidence (without importing any specific tooling).
-
Scaling laws & the Bitter Lesson (2019→). Adapt/Reject. Empirical scaling work and the Bitter Lesson motivate considering compute‑heavy search when returns are monotonic (Sutton, 2019; Kaplan et al., 2020). E.16 adapts this into an optional ScaleLensPolicy (E.16‑S7) constrained by the same budgets and guards, and rejects any interpretation that lets “scale” bypass safety gates.
-
Budgeted specialist acquisition and checkpointed exploitation (2024→). Adopt/Adapt. Recent agentic tool-use, self-play, and open-ended search lines reinforce that the competition variable is time or budget to threshold plus fast exploitation after a viable route is found. E.16 adapts this into distinct scout/probe/commit control surfaces and rejects any reading where early probe success authorizes rollout without an explicit checkpoint.
Common Anti-Patterns and How to Avoid Them
Rationale & E‑/F‑/G‑links
- E.8 — follows the pattern template (Context → Problem → Forces → Solution → Grounding → CC → Consequences).
- E.10 — uses LEX‑BUNDLE: Scope via ClaimScope (G), time via Γ_time, no “validity/process/actor/agent‑as‑noun” language; new lexical rule L‑AUTO added in edits below.
- Mint/reuse authority (policy-ids). Mint/reuse authority is expressed via F.8:8.1 (
PolicyIdRef:PolicySpecRef+MintDecisionRef?) and explicit GateCrossing checks (E.18) evaluated by the active GateProfile/GateFit (A.21); no tier ladder is required. - Part F — integrates with F.4 Role Description (RCS includes AgencyLevel; RSG gates), F.6 Role Assignment & Enactment (Green‑Gate), F.15 SCR/RSCR (harness includes depletion/override tests), F.17 UTS (columns, incl. optional ScaleLens fields).
- Part G — G.4/G.5: method authors must declare budgets & guards; G.9 parity includes autonomy consumption & violations; G.10 shipping requires UTS autonomy fields.
Mini conformance checklist (cross‑E–F; author’s quick use)
- Declare
AutonomyBudgetDecl(scope, budgets, AdmissibilityConditionsId, overrides). - Gate steps with
requiresAutonomyBudget. - Emit an
AutonomyLedgerEntryfor each admitted Work. - Enforce SoD on override SpeechActs; block on depletion.
- Publish UTS autonomy fields for any autonomy‑bearing Role/Method/Service.
(These five are sufficient for a working test harness in Part F.)
E.16:End
U.MultiViewDescribing — Viewpoints, Views & Correspondences
Tech‑name:
U.MultiViewDescribingPlain‑name: multi‑view describing (viewpoints, views, correspondence for families of Description epistemes and specification-use Description epistemes)
Status & placement. Stable; Part E (Describing & Publication). Normative architectural pattern.
Builds on: C.2.1 U.EpistemeSlotGraph (EntityOfConcern, Viewpoint, and View slots), A.6.2 U.EffectFreeEpistemicMorphing, A.6.3 U.EpistemicViewing, A.6.4 U.EpistemicRetargeting, A.7 (Strict Distinction; EntityOfConcern and Description-episteme boundary and specification-use gate versus publication-form and carrier lanes), E.10.D1 (Context), E.10.D2 (EntityOfConcern and Description-episteme boundary and specification use/refinement discipline).
Used by: E.17 (MVPK — publication as a specialisation of multi‑view describing for morphisms), E.17.1 U.ViewpointBundleLibrary, E.17.2 TEVB, E.18:5.12 (E.TGA engineering viewpoint families), domain‑specific description schemes (architecture, safety cases, governance, research).
Guard (lexical).
Family indexing rule. U.MultiViewDescribing indexes families by EntityOfConcernClass, EntityOfConcernRef, bounded context, and viewpoint. EoIClass* and DescribedEntity* wording does not create a second view-family ontology; use the EntityOfConcern family.
C.2.1 lane binding. U.MultiViewDescribing does not mint a generic semio kind. When the family describes or views knowledge claims, the claim-bearing value is U.Episteme; when that episteme is made available as a published episteme, use U.EpistemePublication or governed U.Episteme publication. Publication forms, episteme-lane U.View values, MVPK faces, source-finding cues, and SCR and RSCR carriers remain separate lanes. If a family crosses into a later FPF pattern or a non-pattern authoritySourceRef destination, name governingPatternRef or authoritySourceRef rather than a container label.
U.Viewpointis the ValueKind ofViewpointSlotand denotes viewpoint specifications, notpublication-face kindvalues or carriers.U.Viewis an alias ofU.EpistemeView, i.e. an episteme-lane view, not a document or file. Views are epistemes;publication face/formandinterop publication formare publication-face/form disciplinepublication-face kindvalues; concrete renderings and carriers remain A.7, SCR, and RSCR concerns.ViewFamilyIdis a lexical tag for families of viewpoints (e.g. TEVB), never for view kinds, MVPKU.Viewvalues,U.ViewFamily(-)bundles, orpublication-face kindvalues. MVPK face kinds remain{PlainView, TechCard, InteropCard, AssuranceLane}.
Problem frame (informative)
Complex systems (social‑technical, cyber‑physical, organisational) are routinely described from many perspectives:
- functional vs structural vs deployment vs behavioural views,
- safety vs performance vs cost vs governance views,
- formal specs vs operational runbooks vs regulatory dossiers.
Post‑2015 MBSE and architecture practice emphasise viewpoints and views (ISO 42010, SysML v2), and contemporary model‑based toolchains treat views as queries or projections over shared models rather than independent documents.
In FPF terms:
- the things we talk about — systems, methods, services, epistemes — are
U.EntityorU.Holonvalues inEntityOfConcernSlot; - descriptions and specifications of those things are
U.Epistemeinstances (…Descriptionor…Spec) with a DescriptionContext =⟨EntityOfConcernRef, BoundedContextRef, ViewpointRef⟩; - episteme-lane views are
U.View(U.EpistemeView) that slice ClaimGraphs under specific viewpoints and representation schemes.
What we lack without this pattern is a universal way to organise families of Description epistemes and specification-use Description epistemes under multiple viewpoints — for any entity of concern, not only for architecture, and without collapsing “view” into “document” or “diagram”.
Problem (informative, but sharp)
Without U.MultiViewDescribing:
-
Viewpoints, views,
publication face/formandinterop publication formkinds, and carrier renderings collapse. In practice, “architecture view”, “diagram”, “spec”, and “published deck” are used interchangeably. This:- confuses episteme (
U.View) withpublication face/formorinterop publication formkind or with a concrete carrier rendering, - hides which concerns and stakeholders a description is written for,
- makes it impossible to check whether a given description family is “complete enough” for a chosen viewpoint library.
- confuses episteme (
-
Descriptions float without viewpoints. EntityOfConcern and Description-episteme boundary and specification use/refinement discipline distinguishes the EntityOfConcern from Description epistemes, including Description epistemes admitted for specification use, but does not, on its own, forbid “view‑from‑nowhere” descriptions (no declared viewpoint). That contradicts the pragmatic stance encoded in C.2.1: no episteme without concerns.
-
Each domain reinvents multi‑view semantics. Architecture, safety cases, governance frameworks, and research engineering processes all use local notions of “view”, “viewpoint”, and “consistency between views”. Without a shared pattern:
- E.TGA, MVPK, and discipline packs introduce their own “view” rules and invariants, duplicating work;
- cross‑domain reasoning (e.g. mapping a safety view to an architecture view) becomes ad‑hoc;
- we cannot give a single formal story for consistency, correspondence, and EpistemicViewing across families of descriptions.
-
No place to attach correspondence. ISO 42010‑style correspondences and modern BX/consistency relations have nowhere canonical to live. We need a CorrespondenceModel over families of Description epistemes, including Description epistemes admitted for specification use that integrates with
U.EpistemicViewing,U.EpistemicRetargeting, and C.2.1’s slot graph.
Forces (informative)
Solution — U.MultiViewDescribing as the universal multi‑view scaffold (normative core)
Overview
U.MultiViewDescribing organises families of Description epistemes and specification-use Description epistemes for a shared entity of concern into a multi‑view structure with:
- explicit viewpoints (
U.Viewpoint) as specifications of stakeholder families, concerns, allowed Description kinds and specification-use gates, and conformance rules; - episteme-lane views (
U.View = U.EpistemeView) as view-epistemes over those Description epistemes and specification-use cases; - a CorrespondenceModel capturing correspondences between Description epistemes, including Description epistemes admitted for specification use and their views across viewpoints.
The pattern's EntityOfConcern class is explicit:
EntityOfConcern class:
EntityOfConcernClass ⊑ U.Entity— the class of entities of concern (typical species:U.Holonfor engineering holons,U.Morphismfor morphism publication,U.Epistemefor meta-describing epistemes).
All members of a U.MultiViewDescribing family for that EntityOfConcern class share:
EntityOfConcernSlotvalue in thatEntityOfConcernClass, and- a
BoundedContextRef(E.10.D1) forming a DescriptionScope together with the entity.
Informally:
- Fix an entity
T ∈ EntityOfConcernClassand a bounded contextC. - The multi‑view family for
<T,C>consists of a set of…Description/…Specepistemes, each under a declared viewpoint, plus theirU.Viewviews, together with a correspondence model relating them.
Core constructs
EntityOfConcernClass and DescriptionScope
-
EntityOfConcernClass. A
U.MultiViewDescribinginstance declares anEntityOfConcernClass ⊑ U.Entitythat acts as a species constraint on the ValueKind ofEntityOfConcernSlot.- In engineering species (TEVB) this is typically
U.Holonrestricted toU.SystemorU.Episteme. - In MVPK,
EntityOfConcernClass = U.Morphism.
- In engineering species (TEVB) this is typically
-
DescriptionScope (informal). For a fixed
T ∈ EntityOfConcernClassandC : U.BoundedContext, the DescriptionScopeScope(T,C)is the notional scope under which:- all Description epistemes and specification-use Description epistemes have
EntityOfConcernRef = TandBoundedContextRef = Cin their DescriptionContext; - all views (
U.View) attached to this family preserve thatEntityOfConcernRefandBoundedContextRef(for Description-derived or specification-use-derived views).
Formal USM treatment of
U.DescriptionScopeis fixed in E.10/publication-face/form discipline; here we only rely on the intuition “we are describing this thing, in this context”. - all Description epistemes and specification-use Description epistemes have
U.Viewpoint (viewpoint specification)
U.Viewpoint is already introduced in C.2.1 as the ValueKind of ViewpointSlot; E.17.0 fixes its internal structure for describing families.
Definition (normative).
A U.Viewpoint is a viewpoint specification:
-
EntityOfConcernClassSpec ⊑ U.Entity— the class of entities this viewpoint is defined for (must be compatible with the family’sEntityOfConcernClass); -
StakeholderFamilies : FinSet(U.RoleEnactor)— stakeholder / RoleEnactor families the viewpoint speaks for (e.g. “safety engineers”, “operations teams”). -
Concerns : FinSet(U.Concern)— concern set (qualities, risks, requirements) that matter under this viewpoint. -
AllowedEpistemeKinds : FinSet(U.EpistemeKindId)— which Description-episteme kinds and Description-episteme kinds admitted for specification use are admissible as primary descriptions and as derived views under this viewpoint (e.g. system-behaviour description, test harness spec, safety case, CG-Spec slice). -
ConformanceRules— a structured bundle of rules/tests describing when a Description episteme, Description episteme admitted for specification use, or view conforms to the viewpoint, including:- minimal content requirements (e.g. “must cover all safety‑critical functions”),
- admissible
U.EpistemicViewingpipelines to derive views from base descriptions, - allowed degrees of incompleteness and evidence requirements (link to GateProfiles/
OperationalGate(profile)checks and Part F harnesses).
Slot alignment.
ViewpointSlothas ValueKindU.Viewpoint, RefKindU.ViewpointRef; episteme fields are namedviewpointRef : U.ViewpointRef?.- For Description epistemes, including Description epistemes admitted for specification use in a
U.MultiViewDescribingfamily,viewpointRefis mandatory as part ofDescriptionContext.
U.View (episteme-lane views)
U.View is an alias for U.EpistemeView, a species of U.Episteme whose kind includes:
ClaimGraphSlot(often a sliced or projected ClaimGraph),EntityOfConcernSlot,ViewpointSlot,ReferenceSchemeSlot(and usually aRepresentationSchemeSlotin C.2.1+).
Normatively:
- A
U.ViewinU.MultiViewDescribingis obtained via aU.EpistemicViewingmorphism from some base Description episteme or Description episteme admitted for specification use in the family (see 4.3). It shares the sameentityOfConcernRefand usually the sameBoundedContextRef. ViewSlotis reserved for references to such views in meta‑structures (e.g. correspondence models, MVPK view families), never for carriers.
U.CorrespondenceModel (view–view correspondence)
U.CorrespondenceModel is an episteme (typically a U.EpistemeCard) whose ClaimGraph expresses correspondence relations between Description epistemes, including Description epistemes admitted for specification use and/or views within a DescriptionScope:
- cross‑viewpoint correspondences (e.g. “this safety requirement is realised by this design element”),
- structural/behavioural consistency conditions (BX‑style consistency relations),
- change‑impact links (which views must be revisited when some view changes).
CorrespondenceModel is used, but not defined, by A.6.3: species of U.CorrespondenceEpistemicViewing reference it when computing views that depend on multiple epistemes or representation regimes.
Multi‑view families and their rules/invariants (MVD‑0…MVD‑7) (normative)
We now fix the rules and invariants that any U.MultiViewDescribing[EntityOfConcernClass] instance must satisfy.
MVD‑0 - Family objects
For a fixed EntityOfConcernClass and bounded context C, a multi‑view family for an entity T ∈ EntityOfConcernClass consists of:
-
a (finite) set
DescSpec(T,C)of Description epistemes, including Description epistemes admitted for specification use such that for eachE ∈ DescSpec(T,C):E : U.Epistemeof some kind inAllowedEpistemeKindsof its viewpoint,subjectRef(E)decodes toDescriptionContext(E) = ⟨EntityOfConcernRef = T, BoundedContextRef = C, ViewpointRef(E)⟩,viewpointRef(E)lies in the family’s viewpoint setΣ ⊆ FinSet(U.Viewpoint);
-
a set
Views(T,C) ⊆ U.Viewof view‑epistemes over those Description epistemes, including Description epistemes admitted for specification use, obtained by declaredU.EpistemicViewingspecies (see MVD‑3); -
zero or more
U.CorrespondenceModelepistemes over{DescSpec(T,C), Views(T,C)}.
Families are scoped: the same entity in a different U.BoundedContext belongs to a different family.
MVD-1 - Viewpoint locality and totality for Description-episteme and specification-use cases
For any multi‑view family:
-
Viewpoint-totality for Description-episteme and specification-use cases. Each Description episteme or Description episteme admitted for specification use in
DescSpec(T,C)MUST have aviewpointRefeither:- explicitly populated, or
- deterministically derived from a
U.ViewpointBundlethe family declares (see E.17.1).
There are no “viewpoint-free” Description epistemes or Description epistemes admitted for specification use inside a
U.MultiViewDescribingfamily. -
Viewpoint locality.
ViewpointRefvalues forDescSpec(T,C)must belong to a finite viewpoint setΣdeclared for the family (locally or via a bundle). Cross‑family reuse happens via bundles and Bridges, not by silently sharing viewpoints across unrelated scopes. -
DescriptionContext alignment.
DescriptionContext(E)for any Description episteme or Description episteme admitted for specification use in the family must use the sameEntityOfConcernRefandBoundedContextRefas the family; any change of EntityOfConcern or context is outside this family and must be expressed viaU.EpistemicRetargetingand/or Context Bridges.
MVD‑2 - Views are EpistemicViewing results
For any V ∈ Views(T,C):
-
There exists a base episteme
E ∈ DescSpec(T,C)and a morphismv : E → Vsuch that:-
vis a species ofU.EpistemicViewing, i.e. an effect‑free, entityOfConcern‑preserving episteme morphism; -
entityOfConcernRef(V) = entityOfConcernRef(E) = T, -
BoundedContextRef(V) = BoundedContextRef(E) = C, -
viewpointRef(V)is either:- the same as
viewpointRef(E)(internal normalisation), or - a viewpoint in the same family
Σ, with the change recorded in the family’sCorrespondenceModel(see MVD‑4).
- the same as
-
-
No view may be introduced “out of thin air”: every
U.Viewin the family is traceable to at least one Description episteme or Description episteme admitted for specification use (or a finite diagram thereof) via a documented EpistemicViewing pipeline. -
Views do not introduce new EntityOfConcern commitments about
Tbeyond what is licensed by EFEM & EpistemicViewing invariants (no new atomic claims about the same EntityOfConcern). Upgrading the EntityOfConcern-side commitment requires a new Description episteme or Description episteme admitted for specification use under A.7 and E.10.D2, not a view.
MVD‑3 - Applicability profiles for viewings
Any EpistemicViewing species used inside U.MultiViewDescribing MUST:
-
declare an Applicability profile as per EV‑6: permitted
EntityOfConcernClass, grounding, viewpoint ranges, and representation schemes; -
for Description epistemes, including Description epistemes admitted for specification use in a family:
- preserve
EntityOfConcernRefandBoundedContextRefofDescriptionContext, - either preserve
ViewpointRefor change it within the family’s viewpoint bundle, with constraints recorded inCorrespondenceModel, - never widen ClaimScope beyond EFEM/EpistemicViewing allowances.
- preserve
Any change of EntityOfConcern (even “small”, e.g. subsystem→system) must be expressed via U.EpistemicRetargeting and is not a MultiViewDescribing view refinement.
MVD‑4 - CorrespondenceModel for cross‑view correspondences
When views or Description epistemes, including Description epistemes admitted for specification use under different viewpoints are meant to be kept in correspondence (in ISO 42010 or BX sense), the family SHALL:
-
Provide a
U.CorrespondenceModelepisteme whoseClaimGraphcaptures correspondences and consistency relations over{DescSpec(T,C), Views(T,C)}. -
Ensure that any
U.CorrespondenceEpistemicViewingthat depends on multiple epistemes or representation schemes:- references that
CorrespondenceModel, and - publishes witnesses (proof objects, trace links) that make diagrams commute up to declared isomorphism (oplax naturality allowed).
- references that
-
Treat temporary inconsistency explicitly: there may be states where some correspondences are violated; this is represented as facts in the correspondence ClaimGraph, not as hidden weakening of viewing invariants.
MVD‑5 - Separation from publication (MVPK)
U.MultiViewDescribing is purely epistemic:
-
Description epistemes, Description epistemes admitted for specification use, and views live entirely in Ep-space (
U.Episteme); -
it does not define
publication face/form/interop publication formkind, carriers, or rendering; -
MVPK (E.17) sits on top:
- taking morphisms and/or Description epistemes, including Description epistemes admitted for specification use as input,
- using
U.EpistemicViewingplus publication‑specific viewpoints, - emitting
U.Viewinstances declared againstpublication face/form/interop publication formkind via publication-face/form discipline.
MultiViewDescribing therefore does not re‑define EntityOfConcern-to-Description or specification-use refinement (Describe_EoC_DescEp plus specificationUseRef when a neighbouring gate grants specification force) and does not introduce any U.Work on carriers; A.7 carries the describing boundary, A.6.2 and neighboring pattern governing the claiming gates carry specification-use refinement, and E.17 carries publication.
Explanation-facing renderings over the same source U.Episteme claims may later be classified by ExplanationFaithfulnessProfile on top of existing publication faces, but that profile does not create a second viewpoint calculus here. U.MultiViewDescribing continues to govern the epistemic distinction between viewpoints, views, and correspondences.
MVD‑6 - EntityOfConcern and Description-episteme boundary and specification-use alignment
For any U.MultiViewDescribing instance:
-
Every
…Descriptionand…Specepisteme in the family must satisfy E.10.D2:- be an episteme with
DescriptionContext = ⟨EntityOfConcernRef, BoundedContextRef, ViewpointRef⟩, - be linked to a unique EntityOfConcern via
isDescriptionOf; when specification force is live, carry aspecificationUseRefor exact granting-pattern/gate reference rather than a peerisSpecOfrelation.
- be an episteme with
-
Viewings and correspondence operations must not:
- collapse the EntityOfConcern for this describing use into the produced Description episteme or Description episteme admitted for specification use,
- confuse Description epistemes or Description epistemes admitted for specification use with
publication face/form/interop publication formkind or carrier rendering, - reinterpret EntityOfConcern without going through A.6.4 retargeting.
MVD‑7 - Slot discipline
All constructs in this pattern SHALL respect U.RelationSlotDiscipline:
- SlotKinds (
EntityOfConcernSlot,ViewpointSlot,ViewSlot,GroundingHolonSlot,ClaimGraphSlot,ReferenceSchemeSlot) and their ValueKinds/RefKinds follow A.6.5 and C.2.1. *Slotsuffix is reserved for SlotKinds;*Reffor RefKinds/fields, never for Kinds or objects.- MultiViewDescribing patterns must not invent parallel slot disciplines for relation positions; they reuse SlotKind as the notion of position.
Archetypal grounding (informative)
-
Engineering holon (TEVB).
EntityOfConcernClass = U.Holon(restricted toU.System/U.Episteme).- TEVB (E.17.2) supplies a viewpoint bundle with canonical engineering viewpoints: Functional, Structural, Role‑Enactor, Module‑Interface, etc.
- For a particular system
Sin contextC, Description epistemes, including Description epistemes admitted for specification use include functional descriptions, structural designs, role‑enactment models, and interface specs. - Views derived via EpistemicViewing include sliced safety views, performance‑focused views, and minimal runbooks.
CorrespondenceModelrecords how functional elements are realised structurally, where hazards map to components, etc.
-
Morphism publication (MVPK).
EntityOfConcernClass = U.Morphism.- Description epistemes, including Description epistemes admitted for specification use capture the semantic characterisation of morphisms (pre‑/post‑conditions, CG‑Specs, CHR pins).
- Viewpoints are publication‑oriented (
PlainView,TechCard,InteropCard,AssuranceLane); views are MVPK faces over those morphisms. - CorrespondenceModel states how the same morphism appears as a simple narrative, a typed card with units, an interoperability card, and an assurance lane with evidence bindings — all without new claims.
-
Safety case vs architecture vs operations.
EntityOfConcernClass = U.Holon.- Viewpoints: SafetyCase, Architecture, Operations.
- Families tie together safety requirements, architectural structures, and operational procedures for the same plant
Pin contextC. - Views: a safety‑focused slice of the architecture description, an operational runbook annotated with safety invariants, etc.
- CorrespondenceModel expresses coverage and consistency between these views, enabling BX‑style repair when one side changes.
Conformance checklist (author’s quick use) (normative)
When defining a new U.MultiViewDescribing species or using it in a discipline pack:
-
Declare the EntityOfConcernClass. Explicitly state
EntityOfConcernClass ⊑ U.Entityand ensure all families restrictEntityOfConcernSlotaccordingly. -
Define the viewpoint set Σ. List
U.Viewpointinstances (possibly via aU.ViewpointBundle) with stakeholders, concerns, allowed EpistemeKinds, and conformance rules. -
Require DescriptionContext for Description-episteme and specification-use cases. Ensure every
…Description/…Specepisteme in the family hasDescriptionContext = ⟨EntityOfConcernRef, BoundedContextRef, ViewpointRef⟩and thatViewpointRef ∈ Σ. -
Specify admissible EpistemicViewing species. List the
U.EpistemicViewingprofiles used to derive views; declare their Applicability profiles and assert they are entityOfConcern‑preserving (EV‑6). -
Attach CorrespondenceModel where needed. Whenever cross‑view consistency matters, introduce a
U.CorrespondenceModelepisteme and reference it from anyU.CorrespondenceEpistemicViewing. -
Separate describing from publication. Check that pattern text does not treat EntityOfConcern-to-Description or specification-use refinement as “publication”, and that any talk of
publication face/form/interop publication formkind or carriers is clearly delegated to MVPK/publication-face/form discipline. -
Respect SlotKind/ValueKind/RefKind discipline. Use
*Slotonly for SlotKinds,*Refonly for RefKinds/fields; avoidSubject/Objectroots in episteme types; useEntityOfConcernSlotandviewpointRefinstead.
Consequences (informative)
-
Unified multi‑view story across domains. Engineering descriptions, safety cases, governance dossiers, research epistemes/publications — all become instances of the same multi‑view pattern, enabling coherent tooling and education.
-
Explicit, testable viewpoints. Viewpoints move from vague labels (“architecture view”) to first‑class
U.Viewpointvalues with stakeholder families, concerns, allowed Description kinds and specification-use gates, and conformance rules. This allowsOperationalGate(profile)checks and better review practices. -
Views as disciplined projections, not new documents.
U.Viewis an episteme generated by viewings, not a free‑floating PowerPoint. This constrains what tools are allowed to do when “generating views”, and prevents silent strengthening of commitments. -
Correspondence as a first‑class episteme. Consistency and traceability between views are expressed via ClaimGraphs in
U.CorrespondenceModel, not as scattered hyperlinks or spreadsheet columns. -
Clean separation of describing vs publishing.
U.MultiViewDescribingends the long‑standing conflation between describing (EntityOfConcern-to-Description plus specification-use) and publication (Description episteme or Description episteme admitted for specification use ->publication face/form/interop publication formkind plus carrier rendering). MVPK becomes a clean specialisation on top, not a second EntityOfConcern and Description-episteme boundary and specification use/refinement discipline. -
Slot-specific interoperability. C.2.1/A.6.5 slot discipline applies uniformly; new domains can introduce viewpoint bundles and multi‑view families without inventing new ontologies for view positions or relation positions.
Rationale & SoTA‑echoing (informative)
-
ISO 42010 and viewpoint libraries. ISO 42010 distinguished viewpoints (stakeholders + concerns + conventions) from views (descriptions under those viewpoints) and introduced viewpoint libraries.
U.MultiViewDescribinggeneralises this beyond “architecture descriptions” to any Description episteme or specification-use Description episteme, withEntityOfConcernClassparameter and explicit viewpoint bundles used by TEVB and MVPK. -
MBSE & SysML v2 views‑as‑queries. Modern MBSE treats views as queries over shared models with controlled rendering. That aligns with
U.EpistemicViewingas a pure, entityOfConcern‑preserving morphism, and withU.Viewas an episteme view derived from Description epistemes or Description epistemes admitted for specification use under a viewpoint. -
BX / model synchronisation. Bidirectional transformations literature treats consistency relations and repair as first‑class.
U.CorrespondenceModelandU.CorrespondenceEpistemicViewingprovide FPF-native correspondence objects for such relations, ensuring that consistency rules live in ClaimGraphs and respect episteme morphism invariants, rather than being buried in tool code. -
Optics and displayed categories. With C.2.1 and A.6.3, epistemes form a category fibred over EntityOfConcern values; viewings act like optics over the episteme slot graph.
U.MultiViewDescribingis the displayed‑category‑like organisation of families indexed byEntityOfConcernSlotandViewpointSlot, making later categorical reasoning (e.g. structured cospans for view composition) straightforward. -
Hybrid symbolic/latent representations. By treating
U.RepresentationSchemeandU.RepresentationOperationas episteme components, families can mix symbolic specs, diagrams, code, and latent representations (e.g. LLM‑based summaries) while staying within the same multi‑view discipline and EpistemicViewing invariants.
Relations (informative summary)
-
Builds on C.2.1
U.EpistemeSlotGraph. UsesEntityOfConcernSlot,ViewpointSlot,ViewSlot,ClaimGraphSlot,ReferenceSchemeSlotas the structural backbone for descriptions, views, and correspondence. -
Builds on A.6.2–A.6.4. Families rely on
U.EffectFreeEpistemicMorphingfor view‑producing morphisms,U.EpistemicViewingfor entityOfConcern‑preserving views, andU.EpistemicRetargetingfor moves that change the EntityOfConcern (outside a given family). -
Constrains E.17 (MVPK). MVPK is a publication‑specialised MultiViewDescribing for morphisms: its viewpoints are publication viewpoints; its ViewFamily is a special case of
Views(T,C)withTa morphism; its rules/invariants must respect MVD‑0…MVD‑7. -
Constrains E.17.1 / E.17.2.
U.ViewpointBundleLibraryand TEVB provide concrete viewpoint bundles populatingΣfor particularEntityOfConcernClass(e.g. engineering holons), but they must treat viewpoints asU.Viewpointvalues inViewpointSlot, not as ad‑hoc tags. -
Coordinates with E.10.D2 (EntityOfConcern and Description-episteme boundary and specification use) and E.10 LEX‑BUNDLE. Ensures every Description episteme or Description episteme admitted for specification use in a family has a DescriptionContext, keeps “Describe and specification-use” distinct from “Publish”, and respects lexical guards around
View,Viewpoint,publication-face kind,ViewFamilyId,*Slot,*Ref. -
Coordinates with B.5. / F‑cluster.* Viewpoints’ stakeholder families and concerns link naturally with RoleEnactment (B.5.*) and Part F role descriptions, assignments, harnesses — without overloading
U.Roleas a slot value in EntityOfConcern and Description-episteme boundary and specification use or episteme slot graphs.
E.17.0:End
U.ViewpointBundleLibrary - Reusable Viewpoint Bundles
Type: Architectural (A) Status: Stable Normativity: Normative unless marked informative
Plain-name. Viewpoint bundle library.
Builds on.
A.6.2-A.6.4 (episteme morphism classes), A.6.5 U.RelationSlotDiscipline, A.7, E.7, E.10, E.10.D1, E.10.D2, E.17.0 U.MultiViewDescribing.
Used by.
E.17.2 (TEVB engineering viewpoint bundles), E.18:5.12, and domain-specific viewpoint families for architecture, governance, safety, research, or assurance.
Problem frame
Selected-family discipline. Viewpoint bundles declare EntityOfConcernClassSpec constraints for the selected entities their viewpoints can describe. Bundle labels, aliases, annexes, files, and publication faces never select the entity by themselves.
U.MultiViewDescribing lets a description family state that one entity of concern is rendered through several viewpoints with declared correspondences. In practice many such viewpoint families recur across projects and schools: engineering teams reuse functional / procedural / structural / interface viewpoints; governance teams reuse risk / control / compliance / operations viewpoints; research teams reuse theory / experiment / inference / limitation viewpoints.
FPF therefore needs one explicit governing pattern for reusable viewpoint families so that authors can import them, name them stably, review them once, and keep viewpoint-family identity separate from document labels and publication faces/forms.
Problem
Without a viewpoint-bundle library pattern:
- Each domain invents local viewpoint families.
Similar families reappear under slightly different labels, but no stable catalogue
U.Epistemerecords whether the underlying viewpoints are actually the same. - Viewpoint identity drifts.
A family called
functional,capability, oroperationalmay differ only lexically, or may differ semantically, but there is no disciplined place to tell which is which. U.MultiViewDescribingcannot reuse a family cleanly. Every instance must restate its finite viewpoint family locally instead of importing an existing bundle.- ISO 42010-style viewpoint libraries remain external. FPF lacks a native place where reusable viewpoint libraries can be expressed as first-class, reviewable objects.
- Reader-facing labels leak into semantics. Authors reuse the same name for viewpoints, views, publication faces, or folders, and the boundary between EntityOfConcern and Description episteme becomes unclear.
Forces
Solution - U.ViewpointBundleLibrary
E.17.1 introduces U.ViewpointBundleLibrary as the reusable catalogue U.Episteme for reusable viewpoint families. The library is an episteme-record species: it packages named bundles of U.Viewpoint values and related metadata, but it does not define new kernel episteme kinds, new publication forms, or new publication carriers. A published library is a U.EpistemePublication, publication unit, publication form, face, or carrier only through the usual E.17 publication lane.
Core role
A conforming viewpoint-bundle library makes three things explicit:
- which family is being named, via
ViewFamilyId; - which
U.Viewpointvalues belong to that family; - under what entity of concern class and edition discipline the family is valid.
This lets U.MultiViewDescribing import a finite viewpoint family from a stable catalogue U.Episteme instead of restating it ad hoc in every local description family.
U.ViewpointBundleLibrary (catalogue episteme)
A U.ViewpointBundleLibrary is a catalogue U.Episteme of viewpoint bundles with at least:
libraryId : LibraryIdeditionId : EditionIdbundles : FinSet(U.ViewpointBundle)- optional governance metadata such as responsibility role assignment, change-control note, or scope tags
Normative constraints:
- Within one library edition, each
ViewFamilyIdSHALL be unique. - Libraries SHALL NOT define new kernel episteme kinds or publication-face/form kinds.
- Libraries MAY be specialized as core FPF libraries or organization-local extensions that preserve the same bundle discipline.
U.ViewpointBundle and ViewFamilyId
A U.ViewpointBundle is a finite, non-empty family of compatible U.Viewpoint values packaged for reuse.
Minimal structure:
viewFamilyId : ViewFamilyIdEntityOfConcernClassSpec <: U.Entityviewpoints : FinSet(U.Viewpoint)- optional
ArchetypalCards : FinSet(U.ArchetypalGroundingRef) - optional
AlignmentNotesfor ISO 42010 or domain-standard correspondences - optional typed annex references for lexical, bridge, routing, example, or SoTA companion material
ViewFamilyId names the bundle. It does not name a U.View, a publication face, or a file-system carrier.
Import discipline into U.MultiViewDescribing
When a U.MultiViewDescribing[EntityOfConcernClass] family declares a ViewFamilyId:
- its finite viewpoint family
SigmaSHALL be a subset of the referenced bundle'sviewpoints; - every Description episteme or specification-use case in the family SHALL use
viewpointRefvalues drawn from that imported family; - every associated
U.ViewSHALL preserve viewpoint attribution rather than silently retyping or relabeling the imported viewpoints.
If more than one bundle is used, the family shall make the partition explicit rather than relying on unnamed mixture.
Guard and naming discipline
- A viewpoint bundle is a family of viewpoints, not a bundle of views or documents.
ViewFamilyIdis a lexical family id, not a publication-face/form kind.- Engineering viewpoint ids and publication viewpoint ids may coexist, but they SHALL remain disambiguated.
- Bundle semantics come from the owned
U.Viewpointdefinitions, not from the spelling pattern of the family id.
Archetypal Grounding
Tell. A viewpoint bundle library lets FPF say "use this already-defined viewpoint family" without confusing that family with the concrete views or publication faces that later realize it.
Show (System). A TEVB engineering bundle can define a reusable family such as VP.Functional, VP.Procedural, VP.RoleEnactor, and VP.ModuleInterface for holon descriptions. Later U.MultiViewDescribing families import that bundle rather than redefining the same engineering viewpoints each time.
Show (Episteme). A governance-oriented bundle can package VP.Risk, VP.Control, VP.Compliance, and VP.Operations as one reusable family for service or program descriptions. Publication faces/forms may later expose that family, but the bundle itself remains a value inside a viewpoint-family catalogue U.Episteme, not the report publication face.
Bias-Annotation
The pattern biases FPF toward bundle-first reuse and against ad hoc local re-invention of recurring viewpoint families. That bias is intentional. The small cost of maintaining libraries and editions is lower than the long-term cost of unstable viewpoint identity.
Conformance Checklist
CC-VBL-0Within one library edition, eachViewFamilyIdSHALL identify exactly oneU.ViewpointBundle.CC-VBL-1Every viewpoint in a bundle SHALL haveEntityOfConcernClassSpeccompatible with the bundle's declaredEntityOfConcernClassSpec.CC-VBL-2AU.MultiViewDescribingfamily that declares aViewFamilyIdSHALL import only viewpoints from the referenced bundle.CC-VBL-3ViewFamilyIdMUST NOT be used as apublication-face kind, publication-face kind, or carrier kind.CC-VBL-4Bundles intended for non-expert reuse SHOULD provide archetypal grounding coverage for their viewpoints.CC-VBL-5Changes to bundle membership or meaning SHALL be editioned rather than silently mutating an existing family id.CC-VBL-6If a family combines several bundles, the contributingViewFamilyIdvalues SHALL remain explicit.
Common Anti-Patterns and How to Avoid Them
Consequences
Rationale
U.MultiViewDescribing already assumes that viewpoint plurality exists. E.17.1 supplies the governing pattern for that plurality, including cases where viewpoints are used to re-express positions in U.LanguageStateSpace or trajectories in U.LanguageStateTransductionTrajectory. Without it, every domain can only improvise locally, and long-term correspondence between viewpoint families remains fragile.
SoTA-Echoing
The pattern aligns with post-2015 multi-view practice: ISO 42010 viewpoint libraries, model-based systems engineering viewpoint catalogues, assurance-oriented viewpoint families, and reusable concern bundles in architecture and governance work. FPF adopts the reusable-library idea, but keeps the ontology stricter by separating bundle ids, viewpoint ids, views, and publication faces/forms.
Relations
- Builds on:
C.2.1slot discipline throughViewpointSlot/ViewSlot,A.6.2-A.6.4,A.7,E.7, andE.10. - Constrains:
E.17.0 U.MultiViewDescribingwhenever it imports viewpoint families from reusable bundles. - Coordinates with:
C.2.2a,A.16.0,E.17,E.17.2,E.18:5.12,F.9,F.9.1, and any domain-specific viewpoint family that needs stable reuse. - Protects: lexical and ontological separation between viewpoint families, concrete views, and publication faces/forms.
Typed annex manifests for thin bundles
VF.* and other reusable viewpoint bundles may reference typed AnnexManifestRef assets with roles such as lexical, bridge, routing, examples, optional sota, and optional pilotTrace. This keeps the bundle itself thin while allowing routing notes, lexical baggage, and bridge annexes to remain explicit and typed rather than folded into the bundle core.
Bundle Anatomy and Member Discipline
A viewpoint-bundle library becomes thin and reusable only when the bundle itself stays stable while the member viewpoints remain explicit enough to review independently. The bundle therefore has two simultaneous obligations: coherence at the family level and clarity at the member level.
What a viewpoint member should make explicit
Each member U.Viewpoint inside a reusable bundle should make explicit at least:
- the concern family it brings into focus,
- the stakeholder families for whom that concern matters,
- the entity of concern class for which it is admissible,
- the allowed description and specification-useification kinds that usually realize it,
- and any bundle-specific conformance or correspondence notes that later view families should preserve.
E.17.1 does not redefine the internals of U.Viewpoint. It states what must remain visible if a viewpoint is to be reused as part of a bundle rather than as an undocumented local label.
Bundle-level coherence
A bundle is not just a bag of viewpoints with one shared prefix. A coherent bundle should answer a recognizable family-level question, such as:
- which engineering concerns are standard for holon description?
- which governance perspectives are required for a service review?
- which research-method viewpoints recur across inquiry reports?
If the member viewpoints do not share that family-level purpose, the result is not one bundle but an uncurated catalogue fragment.
Thin bundles, rich annexes
E.17.1 intentionally allows bundles to stay thin. Rich companion material such as:
- lexical discipline notes,
- bridge overlays,
- routing notes,
- worked examples,
- or SoTA references
may live in typed annex manifests. This preserves a stable bundle core while still letting reuse packages carry enough didactic material and review help.
Import, Subset, and Multi-Bundle Coordination
The value of viewpoint bundles appears most clearly when they are imported, subsetted, and coordinated across several reused families. Those cases need explicit discipline so that a local project does not quietly mutate what it claims to be reusing.
Subset selection
A U.MultiViewDescribing family may legitimately import only a subset of a bundle's viewpoints. When it does so, it should declare:
- which
ViewFamilyIdis the source, - which viewpoint members are actually in local use,
- and whether the omitted members are simply unused or are intentionally excluded because the local scope does not require them.
The local family must not speak as if it had imported the whole bundle while silently dropping inconvenient viewpoints.
Local overlays vs new bundles
A local project often wants a small adaptation: one extra concern note, one narrower stakeholder emphasis, one local naming convention. E.17.1 prefers explicit overlays or new editions over silent mutation.
A practical rule is:
- if the local project is merely selecting a subset or adding local didactic publications, keep the original bundle id and declare the overlay clearly;
- if the local project changes viewpoint membership or meaning, publish a new local bundle or a new edition.
This is how bundle reuse remains trustworthy across organizations.
Multi-bundle coordination
Many real description families need more than one bundle, for example:
- one engineering viewpoint family,
- one safety or assurance family,
- and one governance or publication-oriented family.
In such cases, E.17.1 expects the family to preserve the provenance of each member viewpoint rather than flattening everything into one unnamed Sigma. Cross-family correspondence should then cite both the participating viewpoint ids and their ViewFamilyId origins.
Engineering vs publication families
Some contexts need both engineering viewpoints and publication viewpoints. E.17.1 permits both, but it does not allow one family id to erase the distinction. A family that imports both kinds must keep the namespaces and bundle origins explicit so that authors do not confuse how the holon is being understood with how a publication face/form chooses to expose that understanding.
Worked Bundle Families
TEVB engineering family
A TEVB engineering bundle for holons may include viewpoints such as:
VP.Functional,VP.Procedural,VP.RoleEnactor,VP.ModuleInterface.
The important point is not the vocabulary alone. The bundle states that these viewpoints are intended to recur together for one engineering family of concerns. A later description family then imports that engineering bundle rather than re-inventing a local list of "roughly similar" viewpoints.
Governance and risk family
A governance bundle may group viewpoints such as:
VP.Risk,VP.Control,VP.Compliance,VP.Operations.
This bundle is valuable precisely because the four viewpoints recur together but are not interchangeable. Keeping them as one family id makes the reuse visible while still preserving the distinct member meanings.
Research-method family
A research-method bundle may include viewpoints such as:
VP.Theory,VP.Experiment,VP.Inference,VP.Limitations,- and, where appropriate,
VP.Reproducibility.
A local inquiry note might import only three of these viewpoints, but the import remains legible because the omitted ones still belong to a reviewed family rather than disappearing into ad hoc prose.
Cross-family description stack
A serious project may use TEVB engineering viewpoints for the design family, a governance bundle for program oversight, and a publication-oriented family for public publication faces/forms. E.17.1 keeps this stack admissible for review by preserving which bundle each viewpoint came from and by preventing the final publication face/form from masquerading as the viewpoint library itself.
Authoring and Review Guidance
For bundle authors
Bundle authors should ask:
- what recurring family is being named,
- which viewpoints truly belong together in that family,
- what local didactic publications or examples belong in annexes instead of the bundle core,
- and whether the bundle is stable enough to deserve a reusable
ViewFamilyId.
A good bundle is not maximal. It is coherent, reviewable, and reusable.
For reviewers
Reviewers should inspect both levels:
- member level - are the included viewpoints individually explicit enough to be reused?
- bundle level - do they actually form one coherent family rather than one convenient list?
They should also check whether a local project has silently forked the bundle while still using the inherited family id.
For integrators and librarians
Integrators should keep libraries small, curated, and editioned. It is usually better to publish:
- one stable core bundle,
- one explicit local extension,
- and one clear subset declaration
than to let one giant family absorb every recurring viewpoint a domain has ever used. Library sprawl destroys the cognitive advantage that reusable bundles are supposed to provide.
Edition and Migration Notes
Rename vs semantic change
A lexical rename that leaves viewpoint meaning and membership unchanged may be treated as a naming-layer migration. A change in membership, concern, admissibility, or member semantics is not just a rename; it requires a new edition or a new local bundle.
Migration from local Sigma lists
Legacy U.MultiViewDescribing families often publish only one local list of viewpoints. Migration should proceed by:
- identifying recurring families across several such local lists,
- publishing those families as explicit bundles,
- then rewriting the local families to import the new
ViewFamilyIdand declare any subset selection explicitly.
This sequence preserves provenance and avoids pretending that the reusable family had always existed.
Migration from publication-face/form-bound naming
If a legacy practice uses one label interchangeably for a viewpoint family, a report section, and a publication face, migration should separate those roles explicitly. ViewFamilyId remains at the bundle layer; U.Viewpoint ids remain at the viewpoint layer; publication-face names remain publication-layer vocabulary.
Boundary to annex growth
Annex manifests are useful, but a bundle should not become a thin shell hiding all of its meaning elsewhere. The core bundle still needs enough explicit member and family structure to stand on its own. Annexes deepen reuse; they do not replace the bundle's primary declaration.
Import Collision and Alias Discipline
Family id is not a synonym bag
A ViewFamilyId does not mean that all member viewpoints are interchangeable labels for one concern. It means that a reviewed family of viewpoints is intended to recur together. Authors should therefore resist the common drift where one convenient bundle name begins to substitute for all of its members.
Import collision rule
When two imported bundles contribute viewpoints with overlapping lexical names, the publication should preserve the originating viewpoint ids and bundle provenance rather than silently merging the members. Bundle reuse is admissible only if collisions remain inspectable.
Alias boundary
Local teaching aliases may be added for readability, but the alias must dock to explicit member viewpoints and must not erase bundle provenance. If the alias starts doing bundle-selection work by itself, it is making an unsupported bundle-selection claim and should be replaced by explicit member references.
Bundle Projection and Comparative Use
Projection to local subsets
A description family may project only a subset of a reusable bundle. This is admissible if the omitted members remain visible as omitted rather than disappearing into an ad hoc local list. Projection keeps bundle provenance intact while acknowledging that local publication rarely uses every member.
Comparative bundle use
Bundles may be compared across contexts only if the comparison preserves member ids, member meanings, and subset/projection decisions. Comparing two bundle labels alone is not enough, because similarly named families may contain materially different viewpoint sets.
Boundary to publication-face design
A publication face may render one composite presentation of several viewpoints, but the face is not the bundle. E.17.1 therefore requires the underlying member structure to remain recoverable even when a public-facing document flattens it for readability.
Review Matrix and Library Governance
A reviewer can test a viewpoint bundle library with five questions:
- Do the member viewpoints still have explicit standalone meaning?
- Does the bundle name describe one coherent recurring family rather than one convenience list?
- If a subset is imported, is the omitted remainder still visible as omission rather than silent deletion?
- If several bundles interact, is provenance preserved across collisions and local aliases?
- Has a publication face started impersonating the library itself?
Library governance should therefore prefer small, editioned, provenance-preserving bundles over lexical mega-families that are easy to name but hard to reuse truthfully.
E.17.1:End
TEVB — Typical Engineering Viewpoints Bundle
Tech‑name:
TEVB(Typical Engineering Viewpoints Bundle, bundle idVF.TEVB.ENG) Plain‑name: typical engineering viewpoints bundle for holons Tag: Archetypal species ofU.ViewpointBundlefor engineering holons
Status. Stable; archetypal, notation‑agnostic species of U.ViewpointBundle / U.ViewpointBundleLibrary.
It is an engineering‑level bundle over holons; it does not itself constitute an architecture framework or architecture‑specific viewpoint library. Architecture‑focused viewpoint bundles are introduced as separate U.ViewpointBundle species that may import TEVB.
Builds on.
- E.17.0 —
U.MultiViewDescribing. Supplies the generic notion ofU.Viewpoint,U.View, andViewFamilyover anEntityOfConcernClass ⊑ U.Entity(here:EntityOfConcernClass = U.Holon). - E.17.1 —
U.ViewpointBundleLibrary. Provides the genericU.ViewpointBundle/ViewFamilyIdstructure; TEVB is a concrete bundle (VF.TEVB.ENG) in the core library. - A.1 — Holon. Holon kinds
U.SystemandU.Epistemeas the typical engineering entities of concern. - A.6.2–A.6.4 — Episteme morphisms.
U.EffectFreeEpistemicMorphing,U.EpistemicViewing,U.EpistemicRetargetingas the generic morphism classes behind engineering views. - A.7 and E.10.D2 - Strict Distinction: EntityOfConcern, Description episteme, and Description episteme admitted for specification use. TEVB uses DescriptionContext; engineering descriptions and specifications under TEVB are Description epistemes and specification-use cases with explicit
ViewpointRef. - C.2.1 —
U.EpistemeSlotGraph. ProvidesEntityOfConcernSlot,ViewpointSlot,ViewSlotand the slot discipline (A.6.5) used by TEVB-aligned Description epistemes and specification-use Description epistemes.
Used by.
- E.18:5.12 — E.TGA viewpoint map. As a canonical consumer, E.TGA binds its engineering transduction families (Functional, Procedural, Role-Enactor or Device-Structure, Module-Interface) to TEVB viewpoints
VP.Functional,VP.Procedural,VP.RoleEnactor,VP.ModuleInterface. - E.17 (MVPK). Publication of engineering morphisms uses TEVB engineering viewpoints on the Description-episteme and specification-use side and separate publication-side viewpoints over publication faces and forms.
- Engineering description and specification-use patterns. System, method, module-interface and role-related Description-episteme and specification-use patterns for holons (
U.System,U.Episteme) refer to TEVB when declaring theirViewpointRef. - ISO‑aligned architecture‑description bundles. Future species patterns for architecture‑specific viewpoint bundles reuse TEVB as the canonical engineering view family (Functional vs Structural etc.) over systems and their epistemes.
Guard (lexical & ontological).
Selected-family scope. TEVB's engineering viewpoints are scoped by EntityOfConcernClass = U.Holon with usual U.System and U.Episteme cases. ISO 42010 concern/viewpoint/view language is used as architecture-description practice alignment, not as imported FPF ontology.
- Engineering scope only. TEVB applies to
EntityOfConcernClass = U.Holonwith typical casesU.SystemandU.Episteme. Using TEVB viewpoints for non‑holonic entities (e.g., pure data structures, abstract theories) requires an explicit species‑level justification; by default it is a conformance violation. - Viewpoint vs publication face/form/carrier.
VP.Functional,VP.Procedural,VP.RoleEnactor,VP.ModuleInterfaceare viewpoints (U.Viewpointspecifications), not publication face, publication form, rendering, or carrier names. A conforming TEVB use keeps{PlainView, TechCard, NormsCard, InteropCard, AssuranceLane, ...}as publication faces/forms under MVPK and does not useVP.*ids as carrier or publication-form ids. - EngineeringVPId vs publication-side viewpoint id.
VP.*in this pattern are EngineeringVPId values (E.18:5.12). MVPK publication uses separate publication-side viewpoint ids, linked to TEVB viewpoints only through correspondences. - No new role coordinates in EntityOfConcern and Description-episteme boundary and specification-use discipline. TEVB references stakeholder groups via
U.RoleEnactorfamilies but does not introduceU.Roleas a coordinate in Description episteme or specification-use case signatures (E.10.D2). Role semantics remain confined to RoleEnactment patterns (A.15, F-R family). - EntityOfConcern retention. In ordinary TEVB use,
DescriptionContext.EntityOfConcernRefremains the holon selected byEntityOfConcernClassSpec. Capability, Method, procedure/control, role-enactor structure, structural architecture, module, interface, and allocation terms are viewpoint concern/content inside the Description episteme unless the text explicitly opens A.6.4 retargeting with a KindBridge and species-extension rule. - No extra viewpoints inside TEVB. TEVB defines a fixed core set of four engineering viewpoints. Other labels such as “Assurance‑Oriented”, “Interop‑Oriented”, “Information/Data‑Oriented”, “Operational/Deployment”, “Mission/Context” may appear only as lexical aliases in E.18:5.12 (e.g. as
ViewFamilyId/AliasInViewFamiliesvalues for transduction species). They do not extendTEVB.EngBundle.viewpointsand are not additionalU.Viewpointkinds in this bundle; when SoTA or local practice demands explicit assurance, information, or mission viewpoints, provide them as separateU.ViewpointBundlespecies imported alongside TEVB rather than by mutatingVF.TEVB.ENG. - Not an architecture framework. TEVB is an engineering‑level viewpoint bundle; architecture‑specific viewpoint bundles and architecture frameworks MUST be introduced as separate
U.ViewpointBundlespecies that may import TEVB. They keepVF.TEVB.ENGas the engineering viewpoint bundle and put architecture-only viewpoints in separate architecture-specificU.ViewpointBundlespecies.
Problem frame (informative)
Engineering teams almost always talk about systems and their models through a small set of recurring “views”:
- What capabilities and behaviours does the system enact? — function‑oriented, transduction‑oriented talk.
- What sequences, workflows, and control logics does it realise? — procedure/process/state‑oriented talk.
- Who or what enacts which roles? — role‑enactment, organisational and socio‑technical talk.
- How is the system decomposed into modules and interfaces? — physical/logical architecture talk.
In industry, these lenses show up under many names: functional view, logical view, behavioural view, process view, structural/physical view, deployment view, responsibility view, and so on. Modern standards and tools (ISO/IEC/IEEE 42010:2022, INCOSE SE Handbook, SysML v2 “views as queries”) all recognise that viewpoints should be reusable structures, not ad‑hoc labels.
In FPF, E.17.0 and E.17.1 give the generic machinery:
U.Viewpointas a viewpoint specification (stakes/concerns/allowed Description kinds and specification-use gates),U.Viewas an episteme‑level view (epistema under a viewpoint),U.ViewpointBundle/ViewFamilyIdas reusable collections of viewpoints.
E.TGA (E.18:5.12) already assumes a canonical engineering family with names like “Functional”, “Procedural”, “Role-Enactor (Device-Structure)”, “Module-Interface”. Without a formal bundle tying these together, those names drift and the mapping between E.TGA, MVPK, EntityOfConcern, Description-episteme boundary, and specification use becomes fragile.
TEVB addresses this by defining a single, explicit engineering bundle with a fixed ViewFamilyId and a small set of canonical engineering viewpoints over U.Holon.
Problem (informative)
Without TEVB, several failure modes recur:
- Inconsistent “functional”, “structural”, and “behavioural” vocabularies. Different teams define “functional view” or “process view” differently, even within one organisation; E.TGA E.18:5.12 then has to guess how to map transduction graphs onto whichever interpretation is currently in play.
- Architecture frameworks leak into the kernel. 4+1‑style and similar architectural frameworks get hard‑coded as if they were universal; FPF loses its holonic neutrality and becomes biased to a particular school.
- Viewpoints conflated with publication faces/forms and files. “Functional view” is used both for the underlying viewpoint and for a concrete document or dashboard; MVPK faces/forms, E.TGA transduction families, and EntityOfConcern and Description-episteme and specification-use distinctions become entangled.
- Role leakage into EntityOfConcern and Description-episteme boundary and specification-use discipline. Engineering views that are about role-enactors are written directly in terms of
U.Role, blurring the boundary between RoleEnactment (A.15) and description and specification-use lanes, and breaking A.7 and E.10.D2. - Poor reuse across systems. Even when organisations want to reuse the same engineering views across products, plants, or models, there is no canonical bundle to import; each programme recreates “its own” functional/structural views.
TEVB makes engineering viewpoint families first‑class reusable bundles and pins them to an explicit EntityOfConcernClass (engineering holons) so that E.TGA, MVPK and discipline‑packs can align on the same vocabulary.
Forces (informative)
TEVB resolves these by fixing a minimal engineering bundle and leaving customisation to species patterns and ViewpointBundleLibrary entries that refine concerns and allowed episteme kinds without changing the core families.
Solution — TEVB as a core U.ViewpointBundle for holons (normative)
TEVB bundle identity
TEVB is the core engineering viewpoint bundle over holons.
-
Bundle object. There exists a canonical
U.ViewpointBundleinstance: -
ViewFamilyId.
VF.TEVB.ENGis reserved for “Typical Engineering Viewpoints (Engineering)” in the FPF core ViewpointBundleLibrary. -
EntityOfConcernClassSpec (holon scope).
TEVB is parameterised by
That is, TEVB applies to holons that are either
U.SystemorU.Episteme. Other holon kinds MAY be added by species patterns but MUST be justified and documented; the default conformance profile assumes systems and epistemes. -
Library placement.
TEVB lives in the core viewpoint library:
Additional organisational libraries MAY import and specialise TEVB, but SHALL NOT redefine
VF.TEVB.ENGwith incompatible semantics. -
Viewpoint set.
TEVB defines a finite set of canonical engineering viewpoints:
The selection {VP.Functional, VP.Procedural, VP.RoleEnactor, VP.ModuleInterface} is the current NQD-frontier for engineering holon viewpoints in Part G: it realises a Function-Behaviour-Structure-plus-Role (F-B-S+R) cut that is non-dominated against candidate families including explicit information or data, assurance or safety, and mission or context viewpoints under the N, U, C, and D characteristics (C.18, G.0). Part G records the SoTA candidate set and rejected alternatives; TEVB only fixes the core four where each VP.* : U.Viewpoint is defined below. These four are the only viewpoints in the core TEVB bundle.
Note. Other ViewFamilyId values used in E.TGA (e.g., Assurance‑Oriented, Interoperability‑Oriented, Information/Data‑Oriented, Operational/Deployment, Mission/Context) remain lexical families only for transduction species (E.18:5.12). They do not add viewpoints to TEVB; they are orthogonal to TEVB’s
viewpointsset.
TEVB engineering viewpoints
Each TEVB viewpoint is a U.Viewpoint with:
viewpointId : ViewpointId(concrete identifier, e.g.,VP.Functional);EntityOfConcernClassSpecinherited from the bundle (U.HolonwithSystem/Epistemekinds);StakeholderFamilies : FinSet(RoleEnactorFamilyId)— families ofU.RoleEnactorthat are the primary audience;Concerns : FinSet(ConcernId)— engineering concerns this viewpoint foregrounds;AllowedEpistemeKinds : FinSet(U.EpistemeKindRef)— Description-episteme and specification-use kinds admissible under this viewpoint (all obeying EntityOfConcern and Description-episteme boundary, specification use, and C.2.1 slot disciplines);ConformanceRules : FinSet(RuleId)— references to checklist items in conformance packs (CV/GF/engineering checklists).
The subsections below fix the normative intent and minimal field profiles for each TEVB viewpoint. Species patterns and discipline‑packs may refine Concerns, AllowedEpistemeKinds and ConformanceRules, but MUST preserve the intent.
VP.Functional — capability & transduction viewpoint
Intent. Look at a holon in terms of what it can do under roles: capabilities, transductions, and functional responsibilities, rather than in terms of modules or procedures.
-
viewpointId.
-
EntityOfConcernClassSpec. Same as the bundle:
U.HolonwithSystem/Epistemekinds. -
StakeholderFamilies (typical examples). Actual
StakeholderFamilies : FinSet(U.RoleEnactor)values are defined in RoleEnactment discipline packs; labels below are informal.- System engineering leads and architects (e.g. SysEng‑lead enactors).
- Product owners / capability owners.
- Reliability / performance engineers when reading capability envelopes.
-
Concerns (typical).
- Capabilities and functions provided by the holon (
CapabilityConcerns). - Behaviour under roles (
RoleBehaviourConcerns). - Non‑functional envelopes: throughput, latency, availability, energy, safety (
NFPEnvelopeConcerns). - Compositional semantics of functions/transductions (
TransductionCompositionConcerns).
- Capabilities and functions provided by the holon (
-
AllowedEpistemeKinds (shape).
VP.Functionaladmits Description epistemes and specification-use Description epistemes whose EntityOfConcernSlot remains the holon and whose viewpoint content foregrounds the holon's Capability, Method, Mechanism, or transduction claims under a role, e.g.:SystemFunctionalDescription,SystemFunctionalSpec(species ofU.EpistemeKinddescribing system‑level capabilities and their interconnection).TransductionDescription,TransductionSpec(E.TGA functional lanes).ServiceCapabilityDescription,ServiceCapabilitySpec(when a holon is in Service role).
All such epistemes satisfy these admissibility checks:
- obey EntityOfConcern and Description-episteme boundary plus specification-use discipline:
…Descriptionnames a Description episteme about the holon and…Specnames specification-use case of that Description episteme for declared Capability, Method, Mechanism, or PromiseContent content; - make their
DescriptionContext = ⟨EntityOfConcernRef, BoundedContextRef, ViewpointRef⟩explicit, withViewpointRef = VP.Functional.
-
ConformanceRules (examples).
- Functional flows are total over their declared domain (no implicit dangling capabilities).
- Transductions are typed at interfaces (A.6.0, A.6.1) and respect A.6.2/A.6.3 purity/conservativity.
- When functional views participate in retargeting patterns (e.g. structural reinterpretation species based on
U.EpistemicRetargeting), they MUST satisfy the relevant retargeting constraints from A.6.4; concrete consumer patterns (such as E.TGA structural reinterpretation, E.18) MAY impose additional rules.
-
SoTA echo (informative).
VP.Functionalcorresponds to the “functional view” in ISO-aligned architecture descriptions and domain reference architectures (functional viewpoints in IoT and space reference architectures, functional and logical layers in sector frameworks), and to the Function concern in FBS-style design ontologies. It is also the natural viewpoint-family placement for SysML and SysML-v2 capability and logical architecture models and for “logical view” slices in 4+1-style frameworks, once recast into holon/capability terms.
VP.Procedural — process & control viewpoint
Intent. Look at a holon in terms of how behaviours are sequenced and controlled: workflows, state machines, operational procedures, and control logic.
-
viewpointId.
-
EntityOfConcernClassSpec.
Same as the bundle.
-
StakeholderFamilies (typical).
- Operations and run‑time owners (
OperationsEnactorFamily). - Control engineers and automation specialists (
ControlEngineerEnactorFamily). - Safety engineers concerned with procedural correctness (
SafetyEngineerEnactorFamily).
- Operations and run‑time owners (
-
Concerns (typical).
- Control flow and ordering of actions (
OrderConcerns). - State‑machine behaviour and lifecycle (
StateLifecycleConcerns). - Concurrency, synchronisation, and error handling (
ConcurrencyConcerns). - Operational modes and transitions (startup, shutdown, degraded modes) (
OperationalModeConcerns).
- Control flow and ordering of actions (
-
AllowedEpistemeKinds (shape).
VP.Proceduraladmits Description epistemes and specification-use Description epistemes where the EntityOfConcernSlot remains the holon and the viewpoint content foregrounds the holon's Method, procedure, control behaviour, or work-plan content, e.g.:MethodDescription,MethodSpecfor operational procedures (A.3.1–A.3.2).ControlLogicDescription,ControlLogicSpec(IEC 61131‑3 style step diagrams/statecharts).WorkflowDescription,WorkflowSpec(business processes, orchestration logic).
These epistemes:
- respect the order discipline (Γ_method, Γ_ctx) and A.15 (Role–Method–Work alignment);
- carry E.10.D2-conformant DescriptionContext with
ViewpointRef = VP.Procedural.
-
ConformanceRules (examples).
- Pre/post‑conditions at step boundaries are explicit and type‑checked (A.3.1/A.3.2, Γ_method).
- No embedding of Work or calendars inside procedural descriptions (A.7 and E.10.D2).
- Failure modes and recovery actions are declared and traceable to safety analyses (F.15 harnesses where relevant).
-
SoTA echo (informative).
VP.Proceduralcaptures the dynamic/process dimension found in SoTA architecture and MBSE practice: process views in 4+1, operational/behavioural views in defence and enterprise frameworks, behaviour diagrams in SysML (activity, sequence, state, interaction), and procedure/control‑oriented models in industrial standards. TEVB abstracts this into a notation‑agnostic “behaviour over time” viewpoint for holons.
VP.RoleEnactor — role & device‑structure viewpoint
Intent. Look at a holon in terms of who/what plays which roles and how physical/organisational structure enables those role enactments. This viewpoint covers both socio‑technical role assignments and “device view” readings of transduction graphs (E.TGA).
-
viewpointId.
-
EntityOfConcernClassSpec.
Same as the bundle.
-
StakeholderFamilies (typical).
- Organisational designers and operations managers (
OrgDesignEnactorFamily). - Safety and compliance officers concerned with separation of duties (
SegregationOfDutyEnactorFamily). - Hardware/system engineers concerned with which devices carry which functions (
DeviceEngineerEnactorFamily).
- Organisational designers and operations managers (
-
Concerns (typical).
- Which holons enact which roles under which contexts (
RoleEnactmentConcerns). - Allocation of capabilities to devices/subsystems (
CapabilityAllocationConcerns). - Organisational constraints: segregation of duties, responsibilities, escalation paths (
GovernanceConcerns). - Device‑view readings of functional graphs (E.TGA Device‑View).
- Which holons enact which roles under which contexts (
-
AllowedEpistemeKinds (shape).
VP.RoleEnactoradmits Description epistemes and specification-use Description epistemes where the EntityOfConcernSlot remains the holon and the viewpoint content foregrounds role structure, role enactment, or capability allocation associated with that holon, e.g.:RoleDescription,RoleSpec(F.4, F.18) for human or system roles.RoleEnactmentDescriptionfor mappingsHolder#Role:Context(A.15).DeviceAllocationDescriptionmapping functions/transductions to physical modules or devices.
As with other TEVB viewpoints, these are Description epistemes and specification-use cases with
DescriptionContext.ViewpointRef = VP.RoleEnactor. -
ConformanceRules (examples).
- Role vs Method vs Work vs Capability separation is upheld (A.7, A.15).
- Device‑view reinterpretation from functional flows MUST be expressed as
U.EpistemicRetargetingwith an explicitKindBridgewitness (A.6.4). Specific retargeting schemes (for example, E.TGA’s structural reinterpretation in E.18) may add further constraints but are not fixed by TEVB itself. - No “role as behaviour” conflation: Roles are masks, behaviours remain Methods/Work.
-
SoTA echo (informative).
VP.RoleEnactoraligns with the allocation/responsibility and resource/organisational view clusters seen across MBSE frameworks: allocation views in UAF/NAF, role-responsibility matrices and RACI-style artefacts, and “who/what plays which role” slices in usage and operational viewpoints. Many post-2015 reference architectures treat this concern implicitly; TEVB makes it explicit and holon-centred while remaining compatible with socio-technical and device-allocation practices.
VP.ModuleInterface — module & interface viewpoint
Intent. Look at a holon in terms of its modules, interfaces, and structural composition: what parts exist, how they connect, and how their interface specifications are stated.
-
viewpointId.
-
EntityOfConcernClassSpec. Same as the bundle.
-
StakeholderFamilies (typical).
- Hardware and software architects responsible for structure (
StructureArchitectEnactorFamily). - Integration and test engineers (
IntegrationEngineerEnactorFamily). - Lifecycle and maintenance planners looking at replaceable units (
MaintenancePlannerEnactorFamily).
- Hardware and software architects responsible for structure (
-
Concerns (typical).
- Module decomposition and containment (mereology) (
ModuleMereologyConcerns). - Interfaces and specifications — ports, APIs, physical connectors (
InterfaceConcerns). - Dependency structures and allowed couplings (
DependencyConcerns). - Replaceability and variation points (
VariabilityConcerns).
- Module decomposition and containment (mereology) (
-
AllowedEpistemeKinds (shape).
VP.ModuleInterfaceadmits Description epistemes and specification-use Description epistemes where the EntityOfConcernSlot remains the holon and the viewpoint content foregrounds the holon's structural architecture, modules, interfaces, and connector arrangements, e.g.:SystemStructureDescription,SystemStructureSpec(module/connector descriptions).ModuleInterfaceDescription,ModuleInterfaceSpec(signature, interface specifications, physical interface definitions).- E.TGA‑style interface/port descriptions over
Signature/Mechanismgraphs.
These epistemes describe holon structure, module-interface arrangement, ports/connectors, or structural architecture as viewpoint content about the holon rather than replacing the holon as the
EntityOfConcern. Functional↔physical reinterpretations betweenVP.FunctionalandVP.ModuleInterfaceare expressed viaU.EpistemicRetargeting+KindBridge(A.6.4, E.18) when theEntityOfConcernRefchanges. -
ConformanceRules (examples).
- Interfaces are typed and explicitly bound to standards where applicable (A.6.0, F‑specs).
- No inlining of Methods/Work into structure (strict separation of structure vs behaviour).
- Reinterpretations from functional views into structure MUST respect the applicable
U.EpistemicRetargeting/Bridge constraints (A.6.4). When combined with a concrete retargeting scheme (e.g. E.TGA structural retargeting, CC‑TGA‑06‑EX), that scheme’s additional rules also apply.
-
SoTA echo (informative).
VP.ModuleInterfacematches the structural, implementation, and deployment families that dominate SoTA architecture descriptions: development and physical views in 4+1, construction and deployment viewpoints in IoT reference architectures, logical and physical architecture layers in UAF, NAF, and RASDS-style frameworks, and structural and interface-focused models in SysML-based MBSE. TEVB treats all of these as specialisations of a single holonic “modules and interfaces” viewpoint.
Archetypal grounding (informative)
A minimal TEVB instantiation looks as follows:
Each VP.* viewpoint is a U.Viewpoint as in E.17.0, with:
viewpointId ∈ {VP.Functional, VP.Procedural, VP.RoleEnactor, VP.ModuleInterface},EntityOfConcernClassSpecinherited fromTEVB.EngBundle,StakeholderFamilies,Concerns,AllowedEpistemeKinds,ConformanceRulesaligned with the subsections above.
Engineering holon (example).
Let Plant_X : U.System be a production plant, and ControlStack_X : U.Episteme be its control and optimisation stack as a holon.
- Under
VP.Functional,Plant_Xis viewed as a bundle of capabilities and transductions: material/energy/product flows, optimisation functions, safety envelopes. - Under
VP.Procedural,Plant_Xis viewed as sets of procedures and control sequences: startup/shutdown, normal operation, emergency handling. - Under
VP.RoleEnactor,Plant_Xis viewed as networks of role‑enactors: human operators, controllers, subsystems enacting roles in SOPs and safety cases. - Under
VP.ModuleInterface,Plant_Xis viewed as modules and interfaces: equipment units, pipelines, control modules, buses, and their interfaces and specifications.
Each of these is a family of Description epistemes and specification-use cases with DescriptionContext = ⟨EntityOfConcernRef(Plant_X or ControlStack_X), BoundedContextRef, ViewpointRef=VP.*⟩ and TEVB ensures that E.TGA and MVPK can rely on this common structure.
Conformance checklist (normative)
CC‑TEVB‑1 (Bundle identity). Any artefact claiming to be “TEVB engineering viewpoints” MUST:
- refer to
viewFamilyId = VF.TEVB.ENG, - have
EntityOfConcernClassSpec = {h : U.Holon | HolonKind(h) ∈ {System, Episteme}}, - enumerate
viewpoints = {VP.Functional, VP.Procedural, VP.RoleEnactor, VP.ModuleInterface}and no others.
CC‑TEVB‑2 (Viewpoint definition).
Each VP.* viewpoint MUST be a well‑formed U.Viewpoint per E.17.0:
viewpointIdequal to one of the four engineering IDs,EntityOfConcernClassSpecequal to the bundle’s,StakeholderFamilies,Concerns,AllowedEpistemeKinds,ConformanceRulesexplicitly declared.
CC‑TEVB‑3 (DescriptionContext completeness).
Every Description episteme or specification-use case participating in a TEVB‑managed multi‑view family for a holon MUST have a DescriptionContext = ⟨EntityOfConcernRef, BoundedContextRef, ViewpointRef⟩ with:
EntityOfConcernRefreferencing aU.SystemorU.Episteme,ViewpointRef ∈ {VP.Functional, VP.Procedural, VP.RoleEnactor, VP.ModuleInterface},BoundedContextRefpointing to the engineering context (E.10.D1).
Capability, Method, procedure/control, role-structure, structural-architecture, module, interface, and allocation terms in those descriptions are viewpoint concern/content unless the text explicitly declares an A.6.4 retargeting, KindBridge, and species-extension rule that changes EntityOfConcernRef.
CC‑TEVB‑4 (Separation from PublicationVPs).
VP.* identifiers from TEVB are engineering-viewpoint ids. They do not serve as MVPK publication-side viewpoint ids. Publication-side viewpoints live in MVPK and may correspond to TEVB engineering viewpoints through CorrespondenceModel, but they are separate symbols.
CC‑TEVB‑5 (No Role coordinate in EntityOfConcern and Description-episteme boundary or specification use).
TEVB-aligned descriptions and specification-use cases MAY reference U.RoleEnactor families in StakeholderFamilies but SHALL NOT add Role or RoleEnactor as characteristics in Description episteme or specification-use case signatures beyond what A.7 and E.10.D2 already provides. Role semantics stay in RoleEnactment patterns; TEVB just selects concerns.
CC‑TEVB‑6 (Alignment with consumer viewpoint maps).
When a pattern defines engineering viewpoint families named “Functional”, “Procedural”, “Role‑Enactor (Device‑Structure)”, or “Module‑Interface” over the same EntityOfConcernClass and claims TEVB alignment (for example, E.TGA E.18:5.12 viewpoint map), it MUST bind them to TEVB viewpoints as follows:
- “Functional” →
VP.Functional, - “Procedural” →
VP.Procedural, - “Role‑Enactor (Device‑Structure)” →
VP.RoleEnactor, - “Module‑Interface” →
VP.ModuleInterface.
Any deviation MUST be explicitly documented as a species‑level extension and MUST NOT reuse VF.TEVB.ENG.
Rationale & SoTA echoing (informative)
NQD‑grounded choice of the core four
Part G’s NQD discipline treats candidate viewpoint families as points in an N/U/C/D quality space (Use‑Value, Constraint‑Fit, Novelty, Diversity_P). Applied to a SoTA‑harvested candidate set of engineering viewpoints (Functional, Behavioural/Procedural, Structural/Module, Allocation/Role, Information/Data, Assurance/Safety, Mission/Context, Deployment/Operational, Business/Usage), this yields a small Pareto frontier for engineering holon viewpoints. On that frontier, the F–B–S+R cut implemented by {VP.Functional, VP.Procedural, VP.RoleEnactor, VP.ModuleInterface} is the minimal set that:
- spans the Function-Behaviour-Structure ontology used in contemporary design theory while adding an explicit allocation/responsibility concern;
- aligns with the “functional”, “process”, “structural”, and “deployment” clusters recurrent in standards and architecture frameworks;
- stays neutral with respect to domain‑specific qualities (
‑ilities) and business/mission framing, which are captured in separate Q‑Bundles and governance-oriented viewpoint bundles rather than in TEVB itself.
Other candidates (e.g. dedicated information, assurance, or mission viewpoints) remain important but either duplicate concerns already captured by TEVB (when specialised to engineering holons) or are better modelled as orthogonal quality bundles (C.25) or non-engineering viewpoint bundles (business and governance viewpoint bundles). TEVB therefore pins only the core four and leaves the rest to specialised families.
Alignment with post‑2015 engineering practice
- Modern architecture standards built on ISO/IEC/IEEE 42010 describe viewpoint libraries in which functional, behavioural/process, structural/deployment, and business/usage concerns are the dominant clusters; sector RAs such as IoT RA 30141 and space‑domain RAs provide explicit functional and construction/implementation viewpoints alongside business/usage and trustworthiness viewpoints. TEVB reuses the functional and construction/structural clusters as
VP.FunctionalandVP.ModuleInterface, while treating business and trustworthiness as separate bundles. - Model-based systems engineering practice (INCOSE MBSE guidance, SysML v2 “views-as-queries”, UAF/NAF view grids) converges on a small set of core diagram families: structure vs behaviour vs allocation/responsibility vs requirements/mission. TEVB’s
VP.ProceduralandVP.RoleEnactorcorrespond to the behaviour and allocation/responsibility concerns, respectively, and are designed to be notation-neutral over SysML/UAF/UML/Capella-style models. - The FBS family of design ontologies (Function–Behaviour–Structure and extensions) provides a widely used conceptual source for separating what a system is for, what it does over time, and what it consists of. TEVB’s four viewpoints intentionally implement an FBS+R split at the holon level:
VP.Functional≈ Function,VP.Procedural≈ Behaviour,VP.ModuleInterface≈ Structure, withVP.RoleEnactorcapturing the explicit mapping from functions/behaviours to role‑enacting carriers. - Within FPF itself, E.TGA’s “viewpoint families” (Functional, Procedural, Role-Enactor or Device-Structure, Module-Interface, plus assurance, interoperability, data, operational, and mission aliases) are harmonised by letting the core four be TEVB viewpoints and treating the rest as lexical or bundle-level overlays, not as new kernel viewpoints.
Why TEVB stays small
TEVB is deliberately not a complete architecture framework. It gives FPF a stable, holon‑centred engineering bundle that:
- is small enough to keep in working memory and to govern via EpistemeSlotGraph discipline;
- is expressive enough to represent mappings from SoTA architecture frameworks (4+1, domain‑specific RAs, UAF/NAF grids, SysML‑based MBSE method kits);
- can be safely combined with additional
U.ViewpointBundlespecies (safety/assurance packs, business/mission packs, information/data packs) without mutating the core four; - sits conceptually below architecture‑specific viewpoint libraries, which are introduced as separate
U.ViewpointBundlespecies layering TEVB with mission/quality/business viewpoints instead of redefining TEVB.
As SoTA evolves, new bundles can be added or TEVB can gain a new edition with a revised NQD‑frontier, but the TEVB‑A edition fixed here remains the archetypal engineering bundle for holons.
Relations (informative)
- Builds on. E.17.0 (
U.MultiViewDescribing), E.17.1 (U.ViewpointBundleLibrary), A.7 and E.10.D2 (EntityOfConcern and Description-episteme boundary plus specification use), C.2.1 (EpistemeSlotGraph), A.6.2-A.6.4 (episteme morphisms). - Constrains. E.18:5.12 (E.TGA viewpoint map), engineering description and specification-use patterns, MVPK engineering publication profiles.
- Coordinates with. MVPK publication face, publication form, publication unit, and publication carrier discipline; F-R family (Role, RoleDescription, RoleSpec); F.18 (naming discipline for ViewFamilyId, ViewpointId, EngineeringVPId, and publication-side viewpoint ids).
- Non‑goals. TEVB does not prescribe modelling notations (SysML, BPMN, IEC 61131‑3, etc.), storage formats, or tool APIs. It only fixes the conceptual viewpoint bundle that such tools must respect when claiming FPF alignment.
E.17.2:End
Multi‑View Publication Kit
At a glance. Use E.17 when one source-backed episteme, episteme-lane view, morphism, or functional relation must be published in several readable faces for different readers without changing the underlying claim.
Use this when. The engineering team needs a plain view, technical card, interoperability card, or assurance lane that helps people read, inspect, exchange, or cite the same source-backed relation without turning the face into work occurrence, evidence, gate passage, engineering justification, control architecture, or release permission by presentation alone.
First output. One source-pinned publication face with the underlying U.Episteme, Description episteme, or Description episteme admitted for specification use, publication scope, face kind, admissible publication use, and any live downstream typed value named only as far as the current use needs, such as a GateDecision, evidence path, work occurrence, status source, or authority-reference relation.
Working action spine. Publish one source-pinned face -> separate source episteme or episteme-lane view, face, carrier, admissible publication use, and any live downstream typed value plus its governing FPF pattern/reference -> use the face for inspection, source-finding, review, exchange, or planning preparation -> output one source-pinned publication face -> apply the neighboring FPF pattern governing that claim if work, evidence, gate, engineering-justification, control, or release use becomes live.
Ordinary formality rule. If the face is used only for orientation, source-finding, review, comparison, or planning preparation, keep the publication light: one pinned face or compact card plus a clear admissible-use line is enough.
Load-bearing formality rule. Add the fuller MVPK record only when the face will be used for external-impact reliance, cross-context exchange, evidence citation, gate or release pressure, engineering-justification use, disputed interpretation, or another use where a concrete overclaim would change the next engineering move.
Stop condition. Do not create a new publication record merely because a face exists. Stop when the current face changes no next engineering move and blocks no concrete overclaim.
Admissible publication-use examples.
Boundary aid pointer. If one encountered publication-facing item is easy to read as work, evidence, gate, approval, status, explanation, comparison, or narrower-use rendering, handle one claim being made or effect at a time using E.17:5.1d.
Here in the first-screen read, keep only the MVPK publication move: one source-pinned face, one admissible publication use, and neighboring FPF pattern governing that claims or typed downstream values only as far as the current use needs.
Not this pattern when. Not this pattern when the issue under repair is performed U.Work, a work plan, evidence path, provenance path, engineering justification, gate decision, control architecture, carrier work, OCR work, or a narrower-use rendering that needs its own source-bearing return. Use the FPF pattern that governs that issue.
Tech‑name:
U.MultiViewPublicationKit(MVPK) Plain‑name: Multi‑view publication kit. The morphism-publication profile is the canonical formal profile. General publication-face form: one MVPK face is aU.Viewemitted over one sourceU.Epistemeor episteme-laneU.View, under one publicationU.Viewpoint, oneU.PublicationScope, declared pins where needed, one face kind, and one admissible publication use. The face adds no claim by readable form. Evidence use, authority use, gate use, work use, release use, and engineering-justification use require the neighboring FPF pattern governing that claim and typed project-side value/reference that carry that downstream use, such as aGateDecision, evidence path, work occurrence, status source, or authority-reference relation. Canonical morphism profile (conceptual form):MVPK : (U.Morphism, Σ_viewpoints) ↦ U.ViewFamilywith per‑viewpoint componentsViewObj_s : U.Object → U.ViewObj_sandEmit_s(-) : U.Morphism → U.ViewMorph_s, such that(ViewObj_s, Emit_s)forms a functorU → View_s(U). For eachs ⪯ t, a reindexing coercionPromoteView[s→t]_X : ViewObj_s(X) → ViewObj_t(X)exists and is natural inX: for everyf : X → Y,PromoteView[s→t]_Y ∘ Emit_s(f) = Emit_t(f) ∘ PromoteView[s→t]_X(see Rules §6.2). Notation:Σ_viewpointsis abbreviated asΣwhere convenient. Twin‑register aliases (naming discipline): • Tech:Emit_PlainView,Emit_TechCard,Emit_InteropCard,Emit_AssuranceLane;PromoteView[s→t]_-. • Plain:PlainView(x),TechCard(x),InteropCard(x),AssuranceLane(x); “Promote to t”.
USM binding (overview):
PublicationScopeis a USM‑class object that parameterizes MVPK; see §5.0. Episteme lane. MVPK treats each face as aU.Viewin the sense of C.2.1 and E.17.0 (speciesU.EpistemeView). For any MVPK face, the source is a namedU.Epistemeor episteme-laneU.View; the face declares a publicationU.Viewpoint(PublicationVPId) drawn from aU.ViewpointBundle(E.17.1 and E.17.2). In the morphism profile, everyEmit_s(f)hasEntityOfConcernSlotandDescriptionContexttargetf : U.Morphism. In a non-morphism publication, the face names the source episteme named by value, episteme-lane view, EntityOfConcern, or claim relation that the face publishes, and no functorial composition claim is live unless the corresponding FPF pattern supplies it. Slot discipline (ViewSlotandViewRef) is inherited from C.2.1 and A.6.5 and is not redefined in MVPK.
Intent
Provide a disciplined way to publish one source episteme or episteme-lane view across multiple didactic faces without adding semantics, while keeping publication viewpoints explicit and auditable. The canonical formal profile is morphism publication: a small view-pack applied to any U.Morphism, including compositions, yields a family of views that commute with arrow composition and respect edition and measurement pinning.
Problem frame
- Teams routinely need several faces of the same arrow: a
TechCardfor the catalog, anInteropCardfor machine exchange, aPlainViewfor narrative, and anAssuranceLanefor evidence. - Informal “renderings” quietly drift semantics; composite arrows are often published piecemeal, breaking traceability; evidence forgets unit, scale, and edition pins.
- “View” and “viewpoint” are blurred in practice; authors conflate publication with mechanism.
- publication-face/form discipline requires
publication-face kindtoken discipline; Core allows only publication face/form or interop publication form; faces are named ...View, ...Card, or ...Lane (no ad‑hoc...Surfacekinds).
MVPK fixes this by making publication a typed projection from existing source epistemes or episteme-lane views via species of U.EpistemicViewing subject to explicit viewpoint specs and pinning guards. In the morphism profile, this projection is the functorial publication discipline for Description epistemes, including Description epistemes admitted for specification use, described below. Part E is conceptual: no machine-exchange formats are specified here.
Problem
- Semantic drift in publication. Unchecked “presentations” introduce claims not present in the Description epistemes about the arrow, including Description epistemes admitted for specification use (epistemes with
DescriptionContext = ⟨EntityOfConcernRef, BoundedContextRef, ViewpointRef⟩in the sense of E.10.D2 and E.17.0). - Non‑compositionality. Publishing
g∘fyields faces that do not match composing the faces offandg. - View vs viewpoint confusion. A single template is treated as “the view”, with no declared concerns or conformance rules.
- Unpinned numbers. Numeric claims lack unit, scale, reference‑plane, and edition pins from Part F or Part G, undermining auditability.
Forces
Solution — the MVPK Kit
USM scope binding (normative)
- PublicationScope (USM).
U.PublicationScopeis defined in USM (A.2.6 §6.5) analogously toU.WorkScopeandU.ClaimScopeas a set‑valued scope object overU.ContextSlice. In MVPK, every emittedU.ViewSHALL declare aU.PublicationScopethat bounds where that face is admissible.- Non‑overload rule.
U.PublicationScopeMUST NOT encode viewpoint choice, MVPK profile selection, or Publication Characteristics (PC); those are governed byPublicationVPId/U.Viewpointand MVPK profile rules (§5.1/§5.2/§5.5).
- Non‑overload rule.
- Scope lineage.
U.PublicationScopeparticipates in the same USM lineage regime asU.WorkScope/U.ClaimScope(Δ‑moves, editioning and migration rules); MVPK emits faces under a declaredPublicationScopeId. - MVPK profile (kit configuration). The canonical MVPK profiles (MVPK‑Min, MVPK‑Lite, MVPK‑SetReady, and MVPK‑Max) fix:
- (a) the viewpoint index
Σand its partial order⪯, - (b) the admissible Publication characteristics (PC) and required pinning requirements,
- (c) any cross‑Context or cross-plane constraints (Bridge and CL policies) applicable to emitted faces.
- (a) the viewpoint index
- MVPK face-name quartet. The canonical MVPK-Max profile enumerates exactly four face kinds:
PlainView (P),TechCard (T),InteropCard (I),AssuranceLane (A). MVPK face ids,publication-face kindvalues, claim quadrants,governingPatternRef, and local field values must not use an L-, P-, D-, and E-mnemonic; use the P-, T-, I-, and A-face-name initials only when an abbreviation is unavoidable.
Terminology (normative)
- View (
U.View): an episteme-lane view (U.EpistemeViewin the sense of C.2.1 and E.17.0) produced under a publication viewpoint. In MVPK each face (PlainView,TechCard,InteropCard,AssuranceLane) is such aU.View. In the morphism profile itsEntityOfConcernSlotandDescriptionContexttarget is aU.Morphism; in a non-morphism publication, the target is the source episteme named by value, episteme-lane view, EntityOfConcern, or claim relation named by the source. Every MVPKU.ViewSHALL declare:publication-face kind ∈ {publication face/form, interop publication form},PublicationVPId : U.ViewpointRef, references to the underlying Description epistemes, including any Description episteme admitted for specification use selected by neighbouring gates, and aU.PublicationScope(USM §6.5). Any carrier rendering is separateU.Workon SCR and RSCR carriers and is not part ofU.View. - Publication vs presentation vs rendering vs representation (guard):
- Publication = typed projection from existing source epistemes or episteme-lane views into a
U.Viewgoverned by apublication face/formorinterop publication formpublication-face kindvia species ofU.EpistemicViewing(A.6.3). In the morphism profile, the source epistemes are Description epistemes about a morphism, possibly under specification use when A.6.2, C.2.3, A.21, C.16, E.10, or another neighboring pattern governing the claiming gate grants that use. A.7 supplies the EntityOfConcern and Description-episteme boundary; publication expression does not turn that boundary into a three-member strict-distinction ontology. - Presentation = rhetorical arrangement of a published carrier; notation-neutral, adds no claims and is not a
publication-face kind. - Rendering = display layout of a carrier, purely graphical formatting;
U.Workon carriers (A.7), not apublication-face kind. - Representation = episteme↔referent relation (
C.2.1,A.6.2throughA.6.4); not a publication operation and not apublication-face kindoperation. Use publication and view here; treat presentation and rendering asU.Workon carriers (A.7).
- Publication = typed projection from existing source epistemes or episteme-lane views into a
- ISO mapping note. ISO viewpoint →
PublicationVPId(publication lane); engineering viewpoint →EngineeringVPId(E.TGA E.18:5.12). An ISO view may be a single MVPK face; “bundles” are packaging only. - No‑mechanism equivalence: MVPK is not a mechanism; any operational activity, such as build, render, or upload work, is separate
U.Workby a system on carriers (A.7; see Rule 5 — No Γ-leakage in §6). - ViewpointSpec (
U.Viewpoint) — a typed specification that declares stakeholders, concerns, conformance rules, allowed Publication Characteristics, and pinning requirements per profile. The index setΣconsists of identifiers ofU.Viewpointinstances, typically drawn fromU.ViewpointBundlespecies (E.17.1 or E.17.2) (see §5.3). - Explanation-use profile values. Existing faces may state an explanation-use profile value as
SourcePinnedExplanation,SourceLinkedExplanationReconstruction,DidacticRetelling, orSpeculativeRetelling, but those are local profile values over already existing MVPK faces rather than new face kinds, explanation kinds, or carrier-rendering kinds. Per-face pins, provenance references, and no-new-A.6.B-boundary-claims discipline still apply.
Episteme-publication lane binding (normative)
For functional-description publications, MVPK governs the publication lane only.
Publication lane. A principle scheme, functional diagram, comparison table, screen, export, scenario, explanation, or code-like method description may help interpretation, source-finding, comparison, selected-method inspection, or work-planning preparation.
Unsupported neighboring claims. The publication does not by itself assert performed U.Work, gate passage, evidence, engineering justification, supervisory relation or control relation, release permission, or a new TGA kind.
Interface and protocol proximity. When interface, protocol, schema, boundary, or API wording appears beside a functional-flow description, keep the operational boundary, interface, or protocol claim with its own project claim set and typed project-side value named by value and reference, governed by the relevant FPF pattern such as A.6.B, A.6.C, or E.18. Do not absorb it into the functional-flow publication by layout proximity.
Retargeting. If the publication changes the EntityOfConcern or retargeting target from an already described component, process, material U.Entity, or source claim into a functional, control, or flow architecture claim, this is not a same-entity publication-use change. Use A.6.4, OntologicalReframing, or E.18 as applicable.
Source recovery. When a requested use requires an typed project-side value named by value and reference beyond the publication face, the engineer first recovers the corresponding existing project-side FPF value if one already carries the needed claim:
- work-relevant source restoration under
A.15.4; - project
U.Method,U.WorkPlan, or work-result record underA.15; - evidence and provenance path under
A.10; - engineering-justification record under
B.3; - constraint or gate decision under
A.20orA.21; - supervisory or control architecture record under
B.2.5; - carrier, export, OCR, or front-end record under
A.7; - same-entity textual relation under
A.6.3.CR; - representation relation under
A.6.3.RT; - reduced-use-rendering relation under
A.6.3.CSC.
No backdating. If no existing typed project-side value named by value and reference carries a claim that was supposed to already have a source relation, do not create a backdated source. Create only a prospective repair request, decision request, future work-plan entry, or explicit source-gap note, and treat the earlier claim or effect as unsupported until the required source exists.
Ordinary orientation and source-finding can stay as an inline note.
Functional-description guard (CC-MVPK-FD). A functional-description publication face must separate the source U.Episteme or episteme-lane U.View, the MVPK face, any live carrier or rendering work, the admissible engineering use, and non-admissible neighboring use. The guard applies only when a functional-description face is present; it is not the first universal MVPK conformance gate.
MVPK inherits the C.2.1 distinction between U.Episteme, U.EpistemePublication, publication form, U.View, carrier, and authority-reference relation. MVPK does not introduce a generic semio kind and does not let a publication face act as governingPatternRef, authoritySourceRef, or the source claim for a claim.
When a morphism publication is encountered or reused, name the relevant lane before relying on it:
- the underlying
U.Episteme,Depisteme, orSepisteme whose ClaimGraph is being projected; - the
U.EpistemePublicationor sourceU.Epistemepublication when the episteme is available as a published episteme; - the publication form used by the local pattern, if one is live;
- the
U.View-typed MVPK face (PlainView,TechCard,InteropCard,AssuranceLane) that renders the publication for a viewpoint; - the SCR/RSCR carrier or rendering work that holds or displays it;
- the typed project-side value named by value and reference or authority-reference relation when the next work or reliance claim depends on that named authority-reference relation, approval source, gate source, release source, or typed project-side value named by value and reference.
The practical payoff is that a reader can recover exactly what may be relied on: the episteme claim, the published form, the view, the carrier, the typed project-side value named by value and reference, or the authority-reference relation. A dashboard tile, generated explanation, card face, credential view, or carrier can guide source-finding, but it does not by itself become the source claim or effect, gate decision, evidence relation, assurance claim, role or status, work occurrence, or permission.
Source-exposure rule. A publication face, carrier, rendering, dashboard tile, credential view, status view, comparison unit, explanation rendering, signed decision memo, release decision record, approval speech-act publication, or gate dashboard may expose, cite, or carry an typed project-side value named by value and reference only when that value is recoverable under its governing FPF pattern and source relation named by value. It does not become that value by readability, layout, title, color, fluency, proximity, copying, generation, or reuse. When the exposed value is a real SpeechAct, GateDecision, evidence path, credential source, status source, U.Work occurrence record, U.Episteme, or U.EpistemePublication, rely on that typed and recoverable value and its FPF-governed source relation; otherwise treat the face, carrier, display, or rendering as orientation or source-finding only.
No retroactive source creation. When the required source relation is missing, a new entry can be only a prospective repair request, future decision request, prospective work-plan entry, or explicit source-gap note. It must not be read as earlier evidence, approval, gate passage, instituting speech act, U.Work occurrence, release permission, engineering justification, or assurance for the unsupported past claim or effect.
Shared source-relation and admissibility-status vocabulary
Use this vocabulary when a publication face, rendering, generated text, comparison note, narrower-use rendering, source-finding cue, or authority-looking display may be over-read as carrying a wider source relation or admissibility than it actually carries. The vocabulary names the source relation or claim-admissibility status for one claim or use. It does not instantiate evidence, gate, assurance, work, commitment, speech act, decision, release, or authority.
Patterns may use shorter local field names such as sourceRelationStatus, explanationSourceStatus, or representationValidityStatus when the local object is clear. Comparative patterns split source-relation status from comparative-relation status instead of using one overloaded field. The local field must still be interpretable through the vocabulary above, and the admissible use must be named beside it when downstream reliance could change.
For ordinary use, only name the status distinction that changes the next admissible use. The common light states are source-pointer-only, source-relation-unknown, source-relation-not-needed, source-not-recoverable-here, admissible-for-this-use, downstream-use-forbidden, and reopen-trigger-present. The vocabulary is not an ordered scale, maturity ladder, source-record taxonomy, authority-reference source taxonomy, or project-side evidence and assurance/gate/work substitute. If a source relation is missing from the publication-facing item, only the unsupported downstream use is blocked; the missing relation does not by itself prove the underlying world claim false. If independent-verification-present is relied on, name the separate governing pattern and record named by value that performs that independent check: A.10 evidence path, B.3 assurance claim, A.21 GateDecision, A.20 constraint profile, A.15 U.WorkPlan, A.15.1 dated U.Work occurrence, or F.9 Bridge Card.
Shared use-boundary terms
Use these terms when a publication face, rendering, narrower-use rendering, explanation, comparison note, source-finding cue, or authority-looking display may be read beyond its named source relation. Define them once here and link back to this section from local patterns instead of minting local synonyms.
Compact Boundary Aid For The Live Claim or Effect
When a publication-facing item, publication face, rendering, narrower-use rendering, explanation, comparison note, dashboard tile, credential view, status view, carrier, or generated item creates more than one possible reading, separate the claim being made or effect being used now and cite the source relation that evidences the operative claim for that claim or effect. This is a compact boundary aid, not a standing selection guide, project process order, software call path, or item taxonomy. The same encountered item may expose several typed records; handle one claim being made or effect at a time instead of pretending there is one overall governing relation for the encountered item.
Mixed-case precedence. When several publication-use patterns appear possible, repair the smallest unstable reading that changes the current admissible use before applying a neighboring pattern whose claim or effect is live:
- If one local head is the only unstable part, apply
E.17.AUD.LHRorC.2.Pand stop when the repaired sentence names the local kind, relation, and admissible use. - If the bounded
PublicationUnitor its primary EntityOfConcern reading is unstable, applyE.17.AUDorE.17.AUD.OOTDbefore usingE.17.ID.CRorE.17.EFP. - If the unit is stable and the live problem is comparison overread, apply
E.17.ID.CR; useF.9,C.11,A.20, orA.21only when equivalence, recommendation, selection, decision, gate, or release claim is actually being made. - If the unit is stable and the live problem is explanation overread, apply
E.17.EFP; useA.10,B.3,A.20,A.21, orA.15.4only when evidence, engineering-justification, gate, release, work, or reliance claim is actually being made. - If the live problem is a durable reusable name, UTS row, Core-facing term, or cross-context naming relation, apply
F.18; otherwise keep the lighter local repair pattern.
Evidence-path boundary. An A.10 evidence, provenance, attestation, freshness, or currentness path carries only the claim named by value it instantiates. It does not approve or authorize work, pass a gate, perform work, supply release permission, or raise assurance or engineering-justification use unless the typed project-side value named by value and reference that carries that downstream claim is also instantiated, such as A.15.4, A.15, A.20, A.21, or B.3.
Gate-display boundary. A dashboard tile, status view, or release screen may expose a gate decision only when the GateDecisionRef, gate or constraint profile version, target release or work scope, time window, currentness, freshness reference or replay reference, and evidence path are recoverable. Without that exact gate record, the display remains orientation or source-finding only; it is not a gate decision, gate passage, release permission, or performed-work record by color, label, layout, or proximity.
Local review fields are not FPF kinds
Local review fields and values in CR, RT, CSC, EFP, ID.CR, or a neighboring publication-use pattern are local review aids for one case. They are not U.Kind, publication-face kind, RelationKind, KindBridge, EvidenceKind, SlotKind, GateDecision, SpeechAct, Commitment, U.Work, publication face, authoritySourceRef target, or typed project-side value named by value and reference unless another governing FPF pattern explicitly instantiates that object. When a local field starts carrying one of those downstream claims, cite or apply the governing FPF pattern and typed project-side value named by value and reference that carry it.
Shared anti-overread invariants for publication-facing items
Use the FPF pattern that governs the claim being made or effect. Keep any local review field local, preserve reduced admissible use, and assign only the non-admissible wider claim or effect to its governing source relation.
Source-relation minimality. Name the smallest FPF source relation named by value sufficient for the use under repair. A source pointer, source-exposure relation, evidence path, engineering-justification record, gate decision, and release decision are different FPF relations; choosing one does not license another. Do not apply A.10, B.3, A.20, or A.21 when the use under repair only needs source finding, orientation, or inspection of an existing source U.Episteme, source U.EpistemePublication, or status-register entry.
Local repair vs publication redesign. A local epistemic precision repair is enough only when it can preserve the current publication face or PublicationUnit while fixing one head, boundary, source relation, admissible use, explanation class, or unsupported downstream claim. If layout, grouping, visual emphasis, comparison arrangement, generated explanation, hidden source limitation, or mixed EntityOfConcern packaging still induces overread after the local relation is repaired, create a redesigned publication face or PublicationUnit instead of adding warning text around the misleading form.
Most-likely careful reading constraint. Design and word a publication-facing item so its most likely careful reading does not exceed its named source relation, admissible use, and governing FPF pattern. A visible head such as Approved needs a visible GateDecision or a different head; a sorted comparison needs its comparator or sorting basis visible if no recommendation claim is intended; a generated explanation separates inferred links from pinned source claims by wording, label, or source reference.
Visual cue claim pressure. Layout, order, color, prominence, icon, grouping, and proximity are carrier or front-end cues that can carry publication-move pressure even when the words do not. Green color may imply readiness, top position may imply preference, grouping may imply equivalence, proximity to evidence may imply an evidence relation, a badge form may imply approval, and a lock or checkmark may imply verification. If the visual cue would make the reader treat the item as evidence, gate passage, decision, recommendation, reliance relation, bridge relation, or approval, recover the governing FPF pattern and project-side kind and reference named by value, or redesign the publication face so the overread is no longer invited.
Extraction survival. When a PublicationUnit is excerpted, quoted, screenshotted, summarized, copied into a tutorial, retold by a generator, or moved to a slide, it keeps only the claims, source pins, boundary line, references named by value, and admissible use carried in that extracted item. Any use that depended on hidden neighboring context is lost unless that context is carried by source pins, a boundary line, or an reference named by value. A dashboard screenshot does not carry the underlying gate record, a quoted comparison row does not carry the full comparison basis unless the basis is included or referenced, a copied explanation paragraph does not carry source pins unless pins remain recoverable, and a pattern excerpt does not carry the whole pattern boundary unless the excerpt states or cites it.
No-extra-pattern case. If a publication-facing item is admissible only for ordinary orientation, learning, source-finding, review, comparison, or planning preparation, and no operative work or reliance, evidence, gate, assurance, bridge, source-dispute, or release claim is live, keep the existing publication source relation and proceed with ordinary use. The visible closure may be: no operative work or reliance, evidence, gate, assurance, bridge, source-dispute, release, durable naming, or project-side source-relation claim recovered; ordinary publication wording remains admissible for the current use.
Pattern-inflation anti-pattern. Do not apply a neighboring pattern merely because the publication-facing item resembles a worked example. Apply the neighboring pattern only when a claim being made or effect changes the next admissible project move.
Strategic overread invariant. Apply the same anti-overread rules whether the misleading reading is accidental, conventional, incentive-driven, or intentionally induced by publication design. Green status color without GateDecisionRef, reviewed-looking wording without approval, selective source links without operative-claim source relation, comparison ordering without selection decision, hidden caveats behind a source link, or pins for trivial claims beside unpinned causal linkage do not create evidence, gate, decision, assurance, work, release, or bridge relation by design pressure.
Carrier-travel invariant. A copied, exported, screenshotted, summarized, generated, translated, or re-rendered publication-facing item may carry orientation or source-finding cues. It does not carry evidence relation, authority-reference relation, gate passage, approval, engineering-justification relation, work occurrence, currentness, or release source relation unless the governing FPF pattern and typed project-side value named by value and reference remain recoverable for that use named by value.
Derivative-chain decay. A second-order rendering inherits at most the admissible use that is explicitly carried from the prior source relation. It does not inherit source faithfulness, evidence relation, currentness relation, authority-reference relation, gate decision, work relation, or reliance relation by default.
Publication-face snapshot and refresh identity. A publication face may keep the same visible layout, face name, or carrier while its source pins, source data window, source-relation status, freshness or currentness relation, EditionId, or admissible use changes. Visual sameness across time is not source, evidence, or use-boundary sameness. When a refreshed, revised, translated, regenerated, screenshotted, or re-rendered face is used beyond orientation or source-finding, name the face edition or snapshot, the source pins or data window that still carry the claim, and any changed admissible use. If those cannot be recovered, treat the face as orientation or source-finding only, or reissue the face under the governing pattern before work, evidence, gate, assurance, release, or reliance use continues.
Claim-level source relation only. Do not assign one whole-item source-relation status unless every operative claim in that publication-facing item has the same source relation named by value for the same use and non-admissible downstream uses are explicit.
Modality and deontic-force preservation. Publication-facing transformations must preserve possibility, obligation, permission, recommendation status, decision status, confidence, scope, and temporal window when those are load-bearing. If one of these changes, narrow the admissible use or apply the governing pattern that carries the changed claim or effect. Comparison does not become recommendation or decision; explanation does not become evidence; a publication face does not become authority; a publication unit does not smuggle a downstream effect; source-linked does not mean source-admissible for reliance; ready-looking does not mean gate-passed.
This preservation rule also applies across extraction, translation, screenshotting, summary, and generated retelling. A translated permission is not wider permission, a screenshot of approval-looking display is not an approval record, a summary of evidence is not an evidence path, and a generated retelling of a decision is not the decision record unless the source relation that evidences the operative claim and source pins survive in the new publication-facing item.
Reader position is not project role. Reader position, audience, target user model, verifier position, reviewer position, and learner position do not become project roles, role assignments, decision authority, gate authority, issuer roles, or work roles unless a typed project-side value and reference instantiates that role relation.
Source-gap states. When the source relation is missing, say which source gap is present: source not named; source named but unavailable; source available but not used; source used but insufficient; source stale or outside its window; source contradicted; source accountable role or register mismatch. Block only the unsupported effect and keep any reduced admissible use available.
Measure and display overread. A number, score, percentage, color, rank, confidence value, similarity value, dashboard state, or measurement display is orientation only until the measurement source, aggregation rule, validity window, population or scope, calibration or evidence path, and intended use are governed by the typed project-side value named by value and reference. Evidence-like use applies A.10; assurance-like use applies B.3; gate-like use applies A.20 or A.21; work or reliance use applies A.15.4 and then the recovered typed project-side value named by value and reference; bridge or substitution use applies F.9 or F.9.1.
World-contact stop. Publication-facing items do not self-refresh after source update, revocation, policy change, system-state change, incident, model update, environmental change, or new external observation. A live outside change requires source refresh, reissued publication, or a new governed typed project-side value named by value and reference before work, evidence, gate, control, carrier, or other downstream use continues.
Functional-description boundary. A functional, architectural, descriptive, representational, or explanatory fit claim does not create permission, obligation, approval, gate passage, release source relation, performed-work evidence, or engineering justification. Those uses require the neighboring FPF pattern governing that claim and typed project-side value named by value and reference.
Mixed bundle no-shared-evidence-relation rule. A bundle with source-pinned, reduced-use, speculative, didactic, comparison, and evidence-facing parts cannot be read under one shared evidence relation or admissible-use status borrowed from another member. Each operative claim keeps its own source relation and non-admissible downstream use.
Educational usefulness. Didactic, onboarding, tutorial, and workshop usefulness is real orientation aid. It is not evidence, gate passage, approval, work occurrence, engineering justification, release permission, or bridge relation.
Comparison exposes conflict; it does not adjudicate it. A comparison note may expose contradiction, asymmetry, different foregrounding, or unresolved residue. It does not settle the conflict, select an option, approve release, pass a gate, or create bridge relation or substitution relation unless the neighboring FPF pattern governing that claim and typed project-side value named by value and reference carry that result.
Same publication-facing item, multiple readings. A green release dashboard can be one MVPK face for source-finding, an A.10 currentness path or evidence path when the evidence query is recoverable, an A.21 gate-decision view when the GateDecisionRef is recoverable, or an unsupported release cue when those sources are missing. A generated comparative explanation can be an E.17.EFP explanation-use case, an E.17.ID.CR comparison case, a A.6.3.CR generated-summary case, or source-finding only; it is never all of those under one shared evidence-relation class or admissible-use value by fluency alone.
Archetypal publication-use cases. Use these as quick recognition slices, not as a closed taxonomy:
-
Green dashboard tile. A tile says
Model ready. Treat the tile as thePublicationUnitwhen that tile carries the live release overread. The useful action is source-finding and status orientation unless an exactGateDecisionRef, gate profile, source relation, and evidence or currentness relation are recoverable. Without those, the tile is not release permission or gate passage by green color or placement. -
Generated explanation with source links. A generated text explains a method and cites sources. The explanation rendering is not source replacement. Source links carry only the pinned operative claims they actually carry. If work or reliance is live, use
A.10for the evidence path named by value or keep the rendering as reader help; if the rendering is deliberately reduced-use, useA.6.3.CSC. -
Comparison table. A table compares two methods and places one first. Ordering is not selection. The comparison basis, source references, shared review frame, and unsupported downstream claim remain visible. Choice or decision needs
C.11; equivalence or bridge relation needsF.9orF.9.1. -
Unrecovered source wording. A draft uses source-object wording, undeclared interpretive-view shorthand, or generic unit wording without naming the FPF kind. Recover the FPF kind stack instead of minting source-relation pseudo-kinds or undeclared interpretive-view pseudo-kinds. Use
PublicationUnitonly when a bounded reader-inspected unit inside a publication is live; otherwise use the exact episteme, view, publication, carrier relation, section of a named non-pattern FPF publication form whose reader-help function and reference are recoverable,A.6.Prelation claim, or typed project-side value named by value and reference. -
Translated tutorial. A translated tutorial may improve reader access to an FPF pattern. It is a derivative rendering, not the original source. Operative claims need source mapping for reliance, translated heads may need
E.17.AUD.LHRorC.2.P, andF.18is live only when durable naming, UTS, Core-facing, or cross-context naming work is intended.
Practical harm prevented by neighboring pattern. Use this map when the reader asks what the discipline buys in practice:
Blocked overread with useful action remaining.
-
A comparison table appears to select option B. Block the selection reading when no
C.11ChoiceResult, decision record, or visible selection basis exists. Useful action remains: use the table as a bounded comparison underE.17.ID.CR, or applyC.11when selection is intended. -
A green dashboard tile appears to permit release. Block the release or gate-passage reading when no
GateDecisionRef, gate profile, evidence or currentness relation, and source relation are recoverable. Useful action remains: use the tile for source-finding and status orientation, then inspect the exact gate or evidence source if release work is intended. -
A generated explanation appears to prove a causal relation. Block the evidence or assurance reading when source pins and evidence path are absent or insufficient. Useful action remains: use the explanation as reader help or source-finding, then apply
A.10orB.3only for the evidence named by value or engineering-justification claim they govern. -
C.2.Pprevents the wrong object from being treated as source, the wrong relation from being treated as source relation, and a loose phrase from being treated as an FPF kind. -
E.17.AUDandE.17.AUD.OOTDprevent action on a publication unit whose primary entity of concern, carried publication move, or outside boundary shifted silently. -
E.17.ID.CRprevents a comparison unit from being used as decision, equivalence, bridge, evidence, or release basis. -
E.17.EFPprevents fluent explanation from laundering unsupported claims into reliance, assurance, gate, or evidence use. -
E.17MVPK prevents a readable publication face from being treated as evidence, gate, work, authority, or release source relation by display quality. -
F.18prevents a local name from becoming global identity without context, kind, lineage, and bridge or cross-context naming relation.
Anti-escalation examples. Do not apply a neighboring pattern when its claim being made is absent:
- Do not apply
F.18when a one-off local phrase repair restores the local kind, relation, and admissible use without minting a durable reusable name. - Do not apply
A.10when the publication-facing item is not being used for reliance, evidence, provenance, currentness, or claim-bound evidence relation. - Do not apply
A.21when a dashboard tile is merely status orientation and noGateDecisionRefor gate profile is live. - Do not apply
F.9when a comparison does not claim sameness, substitution, bridge relation, or cross-context equivalence. - Do not apply
E.17.EFPwhen the text is only a same-entity rewrite or representation change governed byA.6.3.CRorA.6.3.RT.
Concrete reopen trigger. A reopen trigger must name the condition and the nearest source-bearing side or governing pattern. A vague "reopen if needed" does not preserve the source relation.
Allowed publication-face kind values at Part E (publication-face/form discipline discipline)
Part E restricts publication-face kind values to publication face/form and interop publication form. Concrete publication faces SHALL be named ...View, ...Card, or ...Lane.
USM linkage (normative). Every U.View SHALL declare a U.PublicationScope (USM §6.5).
For a view about an episteme E: PublicationScope(view_E) ⊆ ClaimScope(E).
For a view about a capability C: PublicationScope(view_C) ⊆ WorkScope(C). This is the publication scope of a capability description, not permission to perform work and not evidence that work occurred. Work admissibility still requires A.15.4 source restoration when the view is used for work or reliance, and the A.15 role, method, plan, and work source relation for the actor, target, context, scope, and time window in use.
Cross‑context views SHALL cite Bridge + CL; CL penalties apply to R only (scope membership unchanged).
L‑PUBSURF naming discipline
- Allowed
publication-face kindvalues: publication face/form, interop publication form. - Concrete faces MUST be named ...View, ...Card, or ...Lane.
- The tokens carrier, bearer, and holder MUST NOT name a
U.Viewor any publication entity. UseU.View(PlainView, TechCard, InteropCard, or AssuranceLane) for conceptual publication faces. Reserve carrier exclusively for SCR/RSCR (symbol, document, or data carriers) andU.Workon carriers. - Avoid geometric metaphors such as axis or dimension for publication forms; use Characteristic or CharacteristicSpace only when referring to CHR‑MM entities.
- Non‑collision guard.
ViewFamilyId(lexical tag for viewpoint families) MUST NOT be used to name anyU.Vieworpublication-face kind; MVPK face kinds remain {PlainView, TechCard, InteropCard, AssuranceLane} only.
MVPK‑Max viewpoints (normative; exactly four; governed by the MVPK profile):
PlainView(explanatory prose view)TechCard(typed catalog card)AssuranceLane(evidence bindings and lanes)InteropCard(conceptual interoperability view; mapping to concrete exchange formats lives in the interop annex; Part E does not specify schemas)
AssuranceLane may expose evidence bindings, evidence-carrier references, pins, and presence bits. It is not a B.3 assurance claim, readiness or confidence verdict, engineering-justification record, or evidence-sufficiency result. When a published face is used to raise or lower assurance, readiness, confidence, limitation, or engineering-justification result, the governing source relation is B.3; the lane only helps recover the cited evidence bindings.
Lean profiles (small‑team friendly, optional; as MVPK kit profiles):
- MVPK‑Min (F0–F1): Σ = {
PlainView,TechCard‑Lite}.AssuranceLaneomitted. No interop face. - MVPK‑Lite (F1–F3): Σ = {
PlainView,TechCard‑Lite,AssuranceLane‑Litegated by crossing trigger}.InteropCardonly if external consumers exist. - MVPK‑SetReady (F3–F5): add
InteropCardwhen replayability or external interchange is required (details outside Part E). - Profile‑upgrade triggers: (i) cross‑Context reuse or ReferencePlane crossing; (ii) QD replay needs or OEE replay needs; (iii) external consumption.
- “‑Lite” variants (definition): A ‑Lite face removes optional fields only (never claims), keeps the same typing as its full counterpart, and MUST retain pins for any numeric content. Upgrading from ‑Lite to full is a monotone add‑fields operation (no retractions).
The kit (constructs)
- Object component
ViewObj_sfor each viewpoint (see §5.1), to make types explicit. - Viewpoint set
Σ : FinSet(U.Viewpoint)with declared partial order⪯for formality or refinement (default chain:PlainView ⪯ TechCard ⪯ InteropCard;AssuranceLaneis an independent evidence-binding face and not ordered with respect to others). - Emitters
Emit_s(-) : U.Morphism → U.ViewMorph_s(one pers ∈ Σ). - Coherence (rules and invariants §6) + Pin Characteristics policy (UnitType, ScaleKind, ReferencePlane, and EditionId) for any numeric or comparable content, grounded in CHR and UNM.
- Interop concern references (conceptual) for
InteropCard(concerns and semantics only); any concrete schema or exchange mapping is outside Part E (Annex or Interop).
Result: MVPK(f, Σ) returns U.ViewFamily(f) whose components are Emit_s(f). Reindexing across s ⪯ t is mediated by total view-object coercions PromoteView[s→t]_X (see §6.2).
EntityOfConcern-side input and output vs publication (normative convention)
- Input and Output are signature-side declarations. The Input and Output sections of a morphism describe declared input and output data or episteme types under the morphism signature; they do not depend on any publication face.
- No duplication on faces. MVPK faces do not duplicate Input and Output lists; they publish a minimal profile: presence‑pins, CG‑Spec and CHR references, and EditionId only.
- Signature reserved to signature-governed entities. Use “Signature” only for entities already governed by signature patterns, such as
U.Signature. On faces, avoid “signature” and use TechName or PlainName. - Admissible orders, return sets. Whenever a face shows selection or comparison, it returns sets or admissible partial orders and never hides scalarization; cite a ComparatorSetRef for any total order.
- Bridge crossing penalties. Crossings cite Bridge and CL; publish Φ(CL) and Φ_plane ids; penalties apply to R only (never F or G).
- Carrier references and lanes. On first mention, name carrier references (SCR/RSCR); keep Work occurrences distinct from epistemic claims via lanes.
- Publication ≠ execution. No time or resource semantics on faces; any build, render, or upload work is separate
U.Work.
Pin & Publication characteristics (normative; never “axes”)
Intent. Make pinning and publication-time measurement claims explicit, typed, and auditable without importing geometric metaphors. This section introduces Publication characteristics (PC) as CHR-grounded, publication-facing facets that can admissibly appear on MVPK faces.
Terminology (aligned with CHR‑MM & UNM).
- Characteristic (
U.Characteristic): a measured aspect as defined in CHR‑MM (entity characteristic or relation characteristic with a chosen Scale). - CharacteristicSpace (
U.CharacteristicSpace): a CHR‑typed product of slots used by dynamics and measurement theories (A.19). - Publication characteristic (
U.PubCharacteristic, PC): a declarative facet that a view, card, or lane may expose about a morphism under a stated Viewpoint. Each PC is backed by CHR and CG‑Spec publications and pinned by unit, scale, reference‑plane, and edition. PCs are not geometry and do not define “axes”.
PC catalog (initial set). MVPK defines a minimal open set of PCs that are frequently shown on publication faces:
- PC.Number — numeric or comparable entries (thresholds, budgets, counts). Pins required: unit, scale, reference‑plane, edition.
- PC.EvidenceBinding — bindings to evidence carriers and policies (e.g., PathSliceId, BridgeId, CL notes).
- PC.ComparatorSetRef — an explicit comparator family for admissible partial orders on faces.
- PC.CharacteristicSpaceRef? — optional pointer when a face needs to cite the space in which a claim is interpreted (e.g., dominance on a declared space). The catalog MAY be extended (see “Extensibility” below); PCs must remain declarative (no embedded mechanisms).
Norms (E17‑PC).
- E17-PC-1 (CHR grounding). Every PC that yields numeric or comparable content SHALL cite CHR and CG-Spec references and carry pins {unit, scale, reference-plane, edition}.
- E17‑PC‑2 (Lexical discipline — no geometry). Faces and PCs MUST NOT use “axis”, “dimension”, or geometric metaphors; use Characteristic, slot, CharacteristicSpace where applicable (E.10; see also A.19).
- E17‑PC‑3 (No hidden arithmetic). Faces MUST NOT smuggle aggregation or normalization; any such logic lives in CG‑Spec (UNM or NormalizationMethod) and is cited by …Ref.edition.
- E17‑PC‑4 (Plane & crossing). When a PC depends on ReferencePlane or crosses ReferencePlane crossings or Context crossings, the face SHALL cite
BridgeIdand CL policy‑ids; penalties apply to the R‑channel only. - E17‑PC‑5 (Edition pinning). PCs that rely on maps or distances SHALL pin
DescriptorMapRef.edition,DistanceDefRef.edition, and, if used, bothCharacteristicSpaceRef.editionandTransferRulesRef.edition. - E17‑PC‑6 (Viewpoint scope). Each PC instance declares the Viewpoint under which it is valid; promotion
PromoteView[s→t]MUST NOT add or widen claims; at most, it reindexes or annotates. - E17‑PC‑7 (Comparator or SetSemantics edition).
PC.ComparatorSetRefand anySetSemanticsRefSHALL carry edition identifiers; cards MUST be re‑emitted upon edition change with migration notes.
Publication faces and responsibilities.
- PlainView MAY include PC.Number iff fully pinned; otherwise it uses compare‑only language.
- TechCard SHOULD carry PC.Number, PC.ComparatorSetRef, and PC.CharacteristicSpaceRef? when faces enable admissible ordering.
- AssuranceLane SHALL carry PC.EvidenceBinding and the pins for any numeric claims it relays.
- InteropCard MAY reference PCs conceptually but SHALL remain notation‑neutral in Part E (schemas map in the interop annex).
Rationale. MVPK is a publication discipline, not a measurement calculus. By naming Publication characteristics and pinning them to CHR and UNM, we:
- prevent geometric leakage (no “axes”);
- keep publication neutral yet auditable;
- enable admissible set and ordering behavior on faces via explicit ComparatorSet;
- make plane-crossing requirements first-class and checkable by declared publication checks or OperationalGate(profile) GateChecks.
Extensibility.
- E17‑PC‑Ext‑1 (Open catalog). New PCs MAY be added under
U.PubCharacteristicprovided they are declarative and CHR- and UNM-grounded. - E17‑PC‑Ext‑2 (Kinding). New PCs MUST declare
kind ∈ {Number, EvidenceBinding, SelectorHint, ...}and a pinning requirement. - E17‑PC‑Ext‑3 (Twin‑register names). Supply Tech and Plain twins; avoid tokens that collide with E.10 bans; do not coin “…Space” names for publication forms.
- E17‑PC‑Ext‑4 (Edition discipline). If a PC depends on a definition or specification publication, edition‑pin the reference (
…Ref.edition) and document migration rules.
Adding invariants.
- Place new invariants for PCs in CG-Spec (specification lane), not on faces; supply acceptance tests.
- Version any affected CharacteristicSpace; publish embeddings if semantics change; never mutate slots in place.
- Update the relevant GateChecks or GateProfiles (
A.21, including GateCrossing checks and crossing-visibility checks fromE.18,F.9, and relevant Part G bridge or crossing wiring) to warn or block on invariant violations; never weaken functorial invariants. - Document edition and migration rules; extend §9 with a conformance item and provide Lean‑profile downgrade (advisory vs block) where applicable.
Author ergonomics (non‑normative)
Quick author steps (three steps and a micro-template):
- Declare Σ and profile. Choose
{PlainView, TechCard, …}and whether faces are full or ‑Lite. - Pin once, reuse everywhere. Attach
{UnitType, ScaleKind, ReferencePlane, EditionId}to the arrow; cards reference these pins by ID (no duplication). - Emit & verify. Generate all faces from the arrow.
Guidance: treat ‑Lite as field‑drop only; never add claims in ‑Lite.
Rules and Invariants (normative)
Publication-composition local test bundle. A face that claims compositional publication passes only when five local tests are visible:
identity:Emit_s(id_X)is the identity view forViewObj_s(X).composition witness: the published face forg∘fmatches the composition of the published faces forfandg, or the face is marked non-compositional or explanatory-only.no-new-claim diff: red-line against the governing Description episteme, including any Description episteme admitted for specification use, shows formatting, indexing, pinning, or view-refinement work only.monotone promotion: promotion from a plainer face to a richer face adds fields, pins, or typing without retracting or strengthening the source claim.scope non-widening:PublicationScopestays within the relevantClaimScopeorWorkScope, and promotion does not widen it.
For any composable arrows X —f→ Y —g→ Z in U, and any s, t ∈ Σ_viewpoints:
- Functoriality & typing (per‑viewpoint).
-
(a) Identity:
Emit_s(id_X) = id_{ViewObj_s(X)}. -
(b) Composition:
Emit_s(g∘f) = Emit_s(g) ∘ Emit_s(f). A face that claims compositional status carries a local witness: compare the published face forg∘fwith the composition of the published faces forfandg. If the witness is absent or fails, mark that face non-compositional or explanatory-only and do not use it to satisfy the composition rule. -
(c) Typing (totality): if
f : X → YthenEmit_s(f) : ViewObj_s(X) → ViewObj_s(Y)is total; ill-typed composites must be fixed viaViewObj_s, not by weakening invariants. -
Intuition: every viewpoint acts functorially on arrows; publication does not break arrow algebra.
-
- Reindexing coherence (monotone refinement + naturality).
- (a) If
s ⪯ tthen thet‑view refines thes‑view for the same morphism (no content extension; increased formality and typing only). - (b) For each
s ⪯ tthere are object‑componentsPromoteView[s→t]_X : ViewObj_s(X) → ViewObj_t(X)natural inX, i.e., for everyf : X → YPromoteView[s→t]_Y ∘ Emit_s(f) = Emit_t(f) ∘ PromoteView[s→t]_X. - (c) Coherence:
PromoteView[s→s]_X = id_{ViewObj_s(X)}, and ifs ⪯ t ⪯ uthenPromoteView[s→u]_X = PromoteView[t→u]_X ∘ PromoteView[s→t]_Xfor allX. - Defaults:
PlainView ⪯ TechCard ⪯ InteropCard. - Note:
AssuranceLaneis independent of the formality chain; it binds evidence‑about‑claims and MUST NOT introduce new claims of the morphism.
- (a) If
- Description-source and specification-use sourcing and EpistemicViewing compatibility (A.7 and E.10.D2, A.6.2–A.6.3, E.17.0).
- (a) Inputs to
Emit_s(-)are existing Description epistemes about the same arrow (for example,MethodDescription,MethodSpecwhen specification use has been granted by neighboring pattern governing the claiming gates). MVPK does not redefine, collapse, or create EntityOfConcern-to-Description or specification-use mechanisms. - (b) Each
Emit_s(-)SHALL be realised as a species ofU.EpistemicViewing(A.6.3) over those Description epistemes: entityOfConcern‑preserving, effect‑free and conservative in the sense of A.6.2 and A.6.3. Publication adds no new commitments beyond what is present in the referenced Description episteme. - (c) Edition governance respects
U.EditionSeriesand UTS; rows remain the row identity handles for names; MVPK faces MUST be (re‑)emitted when the underlying Description-episteme or specification-use editions change.
- (a) Inputs to
- Pin discipline (Part F and Part G).
- Any numeric or comparable content in a view SHALL pin {UnitType, ScaleKind, ReferencePlane}. EditionId MAY be coarse at Lean profiles; if units and scale are unknown, declare ordinal compare-only and forbid arithmetic until CHR pins are available. Pins upgrade monotonically with profile and risk.
- No Γ‑leakage (publication independence).
Publication morphisms carry no Γ_method, Γ_time, or Γ_work semantics. Any build, render, or upload activity is separate
U.Workby a system on carriers (A.7). Lean assurance lane:AssuranceLane‑LiteMAY expose only presence bits for {PathId or PathSlice?, Γ_time window?, BridgeId?}; unknowns propagate (tri‑state) with an explicit {degrade|abstain|sandbox} policy note. - Carrier provenance. Every emitted view records its SCR/RSCR ids on first occurrence (A.7 §5.6).
- Isomorphism preservation.
- If
fis an isomorphism inU, thenEmit_s(f)is an isomorphism inView_s(U); inverses map accordingly.
- If
- Cross‑Context and ReferencePlane bridging.
- If a view crosses contexts or reference planes, it SHALL cite the Bridge + CL policy ids (A.7 §5.8, bridge crossing). Such crossings MUST be explicit on
TechCardandAssuranceLane.
- If a view crosses contexts or reference planes, it SHALL cite the Bridge + CL policy ids (A.7 §5.8, bridge crossing). Such crossings MUST be explicit on
- Totality of publication morphisms.
- Publication maps are total on their domains; when a composition in a view would be ill‑typed, the author must fix the view-object mapping (via
ViewObj_s) rather than weakening functoriality or reindexing rules.
- Publication maps are total on their domains; when a composition in a view would be ill‑typed, the author must fix the view-object mapping (via
- PublicationScope discipline (subset & composition).
- (a) Subset rule: If a view
vis about epistemeEthenPublicationScope(v) ⊆ ClaimScope(E); if about capabilityCthenPublicationScope(v) ⊆ WorkScope(C)only as the publication scope of a capability description, not as work admissibility, gate passage, release permission, or evidence thatU.Workoccurred. - (b) No widening by refinement: If
s ⪯ t, then promotionPromoteView[s→t]MUST NOT widenPublicationScope. - (c) Compositional bound: For composable arrows
X —f→ Y —g→ Z,PublicationScope(Emit_s(g∘f)) ⊆ PublicationScope(Emit_s(g)) ∩ PublicationScope(Emit_s(f)).
- (a) Subset rule: If a view
Structure & participants
- Author chooses
Σ_viewpoints(declared concerns + conformance rules). - MVPK emits
U.ViewFamily(f)for each arrowf. - Declared publication checks verify that pins, source references, and IDs are present and that MVPK invariants are respected. Use
OperationalGate(profile)GateChecks only when a live project gate profile actually governs the next project move.
Examples (SoTA-aligned Local Tests)
Read these examples as local tests for MVPK invariants, not as source citations by reputation.
-
Composite service pipeline (
InteropCard+AssuranceLane).f: Parse → Normalize,g: Normalize → Score.InteropCard(g∘f)is an interoperability view whose path set equals the relational composition of the two cards;AssuranceLane(g∘f)cites test records as evidence carriers with edition pins. (Carriers, not semantics; concrete envelope formats are outside Part E.) -
Control loop morphism (
TechCard+PlainView).- For
h: Setpoint → Actuation,TechCard(h)is a typed card with units;PlainView(h)narrates the same mapping with no new claims. (Monotone formalization echoes refinement‑typed stacks.)
- For
-
Optics-informed composition witness.
- Profunctor and optic accounts are useful only as a source idea for why compositional publication matters. The local FPF test is still the MVPK witness: emit the face for
g∘f, compose the emitted faces forfandg, and compare them. If the comparison is not supplied or fails, the face stays non-compositional or explanatory-only; optics vocabulary does not carry the rule by analogy.
- Profunctor and optic accounts are useful only as a source idea for why compositional publication matters. The local FPF test is still the MVPK witness: emit the face for
-
Functional-description publication (
PlainView+TechCard). A principle scheme or functional diagram can publish a readable relation from signature or principle episteme content to method-family selection, selected method,U.WorkPlan, performedU.Work, work-result record, and result measurement. The MVPK faces may help a team inspect that relation and prepare a work plan, but they do not turn the diagram, table, screen, or export into work occurrence, gate passage, evidence, engineering justification, or supervisory or control architecture. For those uses, the team first recovers the existing typed project-side value named by value and reference that carries the claim when available: work-relevant source restoration underA.15.4, projectU.Method,U.WorkPlan, and datedU.Workoccurrence underA.15andA.15.1, evidence or provenance path underA.10, engineering-justification record underB.3, gate or constraint decision underA.20orA.21, or supervisory or control architecture record underB.2.5. If no existing source carries the needed claim, create only a prospective repair request, future decision request, prospective work-plan entry, or explicit source-gap note; do not backdate evidence, gate passage, work occurrence, release permission, engineering justification, or assurance for the earlier claim.
Conformance checklist (normative)
CC-MVPK-FD is the functional-description guard in §5.1a. It is conditional on a functional-description publication face and must not read as the first universal MVPK gate.
A conformance check is retained only if it changes the next admissible use of the publication face, blocks a concrete overclaim, or preserves a source reference or reopen condition needed for the declared admissible use.
Core ordinary checks
Conditional checks
Anti‑patterns (with fixes)
- “Presentation logic” as semantics.
Fix: Move any logic to
Describe_EoC_DescEp, an exact specification-use or episteme-refinement gate, CG‑Spec, or KD‑CAL; keep views declarative; publication adds zero claims. - Publishing only view objects.
Fix: MVPK acts on arrows. Always emit views for
g∘f, not just forViewObj_s(X),ViewObj_s(Y), andViewObj_s(Z). - Unpinned numbers. Fix: Reject card; supply pins plus CG and CHR references.
- Viewpointless views. Fix: Define Viewpoint; attach concerns + conformance; re‑emit.
InteropCardequivalent toTechCardduplication. Fix:InteropCardmay refine typing or shape but cannot contradictTechCard(reindexing monotone).
Consequences
SoTA Alignment: Adopted And Adapted Invariants And Rejected Shortcuts
SoTA alignment rule. Read each row here as source idea -> local FPF invariant -> practical local test -> popular shortcut rejected. A source citation governs nothing by reputation; it counts only when the cited idea is translated into the Solution, conformance checks, boundary rules, worked slices, and Relations of this pattern.
(References are selected because they supply source material for local MVPK invariants and tests; MVPK remains notation-agnostic.)
Relations
- Builds on:
A.7andE.10.D2for carrier and front-end discipline plus the EntityOfConcern and Description-episteme boundary and specification-use gates;A.6.2-A.6.3for episteme morphisms,U.EffectFreeEpistemicMorphing, andU.EpistemicViewing;E.17.0forU.MultiViewDescribing;E.8andE.10for authoring and publication-language discipline; Part F and Part G for bridge, terminology, characteristic, and pin discipline. - Constrains: publication-face-emitting automation and hand-written publication faces. They remain species of
U.EpistemicViewingover existing Description epistemes, including Description epistemes admitted for specification use, and may not become a second EntityOfConcern-to-Description mechanism, specification-use gate, evidence path, gate decision, work occurrence, assurance record, release source, or bridge declaration by readable form. - Current neighboring-pattern boundaries from
E.17:5.1d: work or reliance relation appliesA.15.4, withA.15for role, method, plan, and work alignment andA.15.1for one datedU.Workoccurrence; evidence, provenance, attestation, currentness, and freshness applyA.10; engineering justification, assurance, confidence, readiness, and limitations applyB.3; gate passage, constraint validity, adjudication, and release decision relation appliesA.20orA.21; same-EntityOfConcern textual restatement appliesA.6.3.CR; same-EntityOfConcern representation-scheme or reasoning-medium change appliesA.6.3.RT; deliberately narrower-use rendering appliesA.6.3.CSC; explanation-facing rendering appliesE.17.EFP; bounded comparative review appliesE.17.ID.CR; changed EntityOfConcern, ontology frame, or claim or relation record named by value appliesA.6.4,OntologicalReframing, or the retargeting or reframing pattern named by value; carrier, export, OCR, screen, front-end behavior, or work on carriers appliesA.7. - Part F bridge wording boundary: when the publication face uses or invites "same", "equivalent", "align", "map", substitutable, interchangeable, attribute, entity, or profile matching, or other bridge-wording claim pressure across contexts, the wording repair belongs to Part F and
A.6.9; the bridge relation belongs toF.9orF.9.1.E.17does not create a local bridge taxonomy. - Coordinates with: B-operators for no Gamma-leakage, C-cluster selection or archive patterns where views remain publication faces rather than selections, CHR and UNM for measurement and normalization semantics,
F.9orF.9.1for bridge relation,A.6.9for sameness wording, and the neighboring source patterns named above. This section is a relation and neighboring-pattern boundary statement for publication use, not a standing decision tree or process order.
Minimal authoring template (Part E)
Header: MVPK v⟨edition⟩ — Σ = {PlainView ⪯ TechCard ⪯ InteropCard, AssuranceLane ⟂}
For each arrow f: emit {Emit_s(f) | s ∈ Σ} (or use the plain aliases {PlainView(f), TechCard(f), …}) with: PublicationScope, ViewpointId, pins, CHR and CG references, SCR ids, Bridge+CL ids (if crossing), and—if composite—machine‑checkable witnesses that Emit_s(g∘f) = Emit_s(g)∘Emit_s(f) and for each s ⪯ t the naturality square PromoteView[s→t]_Y ∘ Emit_s(f) = Emit_t(f) ∘ PromoteView[s→t]_X.
Manager’s one‑page review (copy‑paste)
“We publish every morphism under a declared set of viewpoints using MVPK. Each view that claims functorial composition carries the local composition witness; without that witness it stays non-compositional or explanatory-only. Each face adds no new claims and pins unit, scale, reference-plane, and edition with CHR and CG references.
InteropCardviews clarify concerns and semantics only (concrete exchange lives outside Part E);AssuranceLanecites evidence carriers (SCR). Any cross-Context or cross-plane view cites Bridge+CL (Φ→R only). Publication build, render, or upload activity isU.Workon carriers, not a mechanism change.”
E.17:End
ExplanationFaithfulnessProfile — explanation-use discipline over existing MVPK faces
Type: Architectural (A) Status: Stable Normativity: Normative unless marked informative
One-line summary. ExplanationFaithfulnessProfile states how explanation-facing renderings over already available claims, traces, and pins on existing MVPK faces may be used. It helps a publication-side reviewer or explanation reader distinguish source-pinned rendering, source-linked reconstruction, didactic retelling, and speculative retelling without creating a second face family or a second semantic rule track.
Explanation-facing rendering in plain terms. One explanation-facing rendering on an existing MVPK face; not the whole face family, not the whole source U.Episteme or source U.EpistemePublication, and not a second semantic track.
Explanation-use relation in plain terms. State how that rendering relates to already available source U.Episteme or source U.EpistemePublication, source pins, traces, and provenance references, which explanation-use class it belongs to, and what downstream claim or effect still stays outside the profile.
Use this when. Use this profile when one note, memo, sheet, screen, table, or short section is trying to help a reader understand an already available source U.Episteme or source U.EpistemePublication on an existing face and you need to say what kind of explanation it is without turning that help into a second semantic rule track.
Start here when. The first decision is about one explanation-facing rendering on an existing MVPK face, and the real question is whether it stays source-pinned, becomes bounded reconstruction, is openly didactic, or has already shifted into speculation or non-admissible downstream claim or effect.
What goes wrong if missed. Helpful explanation quietly turns into a second semantic rule track, hidden bridge-comparison load, or unsupported downstream guidance because the rendering is read as if it were canonical content.
What this buys. One honest explanation class on an existing face with visible source references, admissible-use boundary, and explicit neighboring-pattern boundaries when the rendering has stopped being merely explanatory help.
Not this pattern when. Not this profile when the real job is same-entity rewrite (A.6.3.CR), representation change (A.6.3.RT), bounded comparative reading (E.17.ID.CR), changed EntityOfConcern (A.6.4), deliberately coarsened rendering that now needs narrower admissible claim or effect, non-admissible downstream claim or effect, and reopen to the source U.Episteme or source U.EpistemePublication (A.6.3.CSC), downstream work or reliance (A.15, A.15.4), assurance or engineering justification (B.3), or gate-bearing content (A.20, A.21).
First output. One compact explanation-use note: explanation class, source reference, admissible explanation-reader use, non-admissible downstream use, and reopen or boundary condition. MVPK face, pins, provenance, and source fields are inherited by reference unless ambiguity or a load-bearing source-relation question makes them relevant to the claim.
Ordinary-output claim inventory. After ExplanationFaithfulnessProfile, the author has claimed only that this explanation-facing rendering has this explanation class, this source relation, this source-reference state, and this admissible use. The author has not claimed model truth, evidence path, assurance, safe reliance, gate passage, work occurrence, release reliance, or source replacement unless the neighboring FPF pattern governing that claim and project-side FPF kind and reference named by value are named.
Working action spine. One explanation-facing rendering is helping a reader -> separate source-pinned rendering, bounded reconstruction, didactic retelling, and speculative retelling -> use the explanation for understanding, source navigation, bounded restatement, teaching, or exploration according to class -> output one class plus safe next action -> apply the neighboring FPF pattern if reliance, evidence, work, gate, engineering justification, comparison, narrower-use rendering, or new-claim load appears. Use E.17:5.1c for orientation use, reliance use, operative claim, non-admissible downstream use, and reopen trigger; use E.17:5.1d when the primary question under repair may be same-entity rewrite, representation change, coarsening, comparison, bridge or substitution, work or reliance, gate, evidence, assurance, retargeting, or carrier work or front-end work instead of explanation-facing rendering.
Ordinary use. If the explanation only helps reading, source-finding, review, comparison, or planning preparation, one compact review note naming the explanation class, source reference, and non-admissible downstream claim or effect is enough. Plain wording remains ordinary unless it changes admissible use, source relation, evidence, gate, assurance, work, decision, or neighboring-pattern exit.
Load-bearing use. Open the fuller explanation review only when the rendering will guide work or reliance, be externally relied on, be disputed, cross context, affect person or team status, or be cited as evidence, approval, engineering justification, gate, or release reliance.
Stop condition. Stop once the explanation class changes no next reading, review, source-finding, comparison, or planning-preparation move and blocks no concrete overclaim about source relation, work or reliance, evidence, approval, gate, or release.
Admissible explanation-use examples.
Neighboring project records and governing patterns. E.17.ID.CR governs bounded comparative reading; A.6.3.CR or A.6.3.RT govern same-entity rewrite or representation change; A.6.3.CSC governs a rendering that stays honest only through narrower admissible claim or effect, non-admissible downstream claim or effect, and reopen to the source U.Episteme or source U.EpistemePublication; A.6.4 or OntologicalReframing govern changed EntityOfConcern; A.15 and A.15.4 govern downstream work or reliance, B.3 governs assurance and engineering justification, and A.20 or A.21 govern gate-bearing claim or effect.
Common wrong escalations and boundary transfers. Do not use this profile to hide new claims, bridge-comparison load, action-selection pressure, or gate-bearing guidance inside helpful prose. If the rendering is really a bounded comparison, apply E.17.ID.CR; if it is only same-entity rewriting or representation shift, apply A.6.3.CR or A.6.3.RT; if it is a deliberately coarsened rendering whose narrower admissible claim or effect, non-admissible downstream claim or effect, and source-bearing reopen now govern the case, apply A.6.3.CSC; if it is already making world, work or reliance, assurance, or gate-bearing claims, leave E.17.EFP for the more exact downstream FPF pattern or project-side record.
Generated-explanation repaired case. Use this case when a generated explanation is being relied on beyond reading help. The first E.17.EFP move is to classify the rendering as source-pinned rendering, source-linked reconstruction, didactic retelling, or speculative retelling. The profile only states the explanation relation, source-finding state, source references, admissible explanation-reader use, non-admissible downstream use, and reopen condition for the current rendering. The explanation becomes usable for an operative claim only when an A.10-governed evidence path maps that claim to the exact source passage, carrier path, or project-side FPF kind and reference named by value that evidences it in the relying context. If the operative claim would raise assurance, release confidence, safety, trust, gate passage, work occurrence, work authorization, or approval, the governing pattern must be applied for that operative claim: B.3 for assurance, A.21 for gate decision, A.15/A.15.1 for work, A.2.8/A.2.9 for commitments or speech acts, or another source relation that evidences the operative claim when asserted for that operative claim. If the map or project-side FPF kind and reference named by value is missing, keep only a prospective repair request, source-gap note, or narrower explanation-use note; if operative reliance is still attempted, the applicable A.10, B.3, A.21, or other relation governing the asserted use may return evidence-needed, abstain, or no-admissible-current-use for that attempted reliance. Do not open an A.10 path for ordinary reader help; otherwise the generated explanation remains reader help, not approval, authorization, evidence, assurance, gate passage, release reliance, or work-occurrence evidence.
Common wrong first reading. A fluent, confident, source-linked, or reliable-looking explanation is evidence. First honest entry: classify the explanation rendering and use it for reading or source-finding; only an operative claim with an A.10 evidence path or another source relation that evidences the operative claim can carry downstream reliance.
Negative result: if a generated explanation says "reliable" but no operative claim maps to a source relation, the E.17.EFP result is source-finding only or reader help only. If an attempted downstream reliance is still raised, the receiving A.10, B.3, A.21, or other relation named by value may return evidence-needed or no-admissible-current-use for that attempted reliance. It is not weak evidence by style, confidence, fluency, or citation-like wording.
Generated-retelling survival. A generated retelling preserves only the reader help, source-finding cue, quoted source pins, explicitly repeated source relation, and explicitly repeated admissible-use boundary that remain inspectable in that retelling. It does not become or preserve the source U.Episteme, source U.EpistemePublication, evidence path, assurance, gate passage, decision status, permission, or source replacement merely by fluency, completeness-looking wording, or citation-like links. If the generated retelling compresses, omits, strengthens, or changes source claims, treat the result as a new explanation-use case, a narrower-use rendering under A.6.3.CSC, or reader help only.
Derivative rendering and adaptation source-link rule. A fork, adaptation, abridged guide, translated rendering, generated explanation, tutorial, access-format conversion, or other derivative rendering of a source U.Episteme or source U.EpistemePublication may improve access or teaching, but it is not equivalent to the source by usefulness, fluency, or local adoption. It may expose or cite a project-side FPF kind and reference named by value, but the admissible source relation belongs to the exposed value and source relation, not to the explanation rendering as a face. If the derivative rendering will guide work or reliance, A.10 must map every operative claim being relied on to the exact source passage, carrier path, or project-side FPF kind and reference named by value that evidences it; if the map or exact value is absent, only a prospective repair request, explicit source-gap note, or prospective evidence-work plan may be created. If simplification or format change narrows allowed use, forbids downstream use, or requires return to the source-bearing side, use A.6.3.CSC rather than treating the derivative as ordinary explanation.
Explanation-rendering identity over revision and regeneration. A generated, translated, revised, or regenerated explanation-facing rendering is not the same explanation rendering merely because it uses the same source face, prompt, template, carrier, or title. For use beyond ordinary reader help, the rendering must name the preserved source references, changed claims, generation or production basis when live, and admissible use for this rendering. A translation or adaptation preserves admissible use only when the operative claims and source links survive the change; otherwise it becomes a new explanation-use case, a narrower-use rendering under A.6.3.CSC, or reader help only.
Placement. Profile governed by E.17.0 and E.17 review.
Builds on. E.17.0 U.MultiViewDescribing; E.17 MVPK; A.7; E.10.D2; A.6.B; F.9; F.18.
Coordinates with. ConservativeRetextualization; RepresentationTransduction; E.17.ID.CR ComparativeReading; A.6.4; A.10; A.15; A.15.4; B.3; A.20; A.21.
Problem frame
The same underlying claim set often needs explanation-facing renderings on more than one existing face:
- an engineer-manager-readable rendering of a technical claim set;
- a technical explanation that makes source linkage more visible than the original source prose;
- a didactic retelling for onboarding or review preparation;
- a clearly marked speculative retelling that helps discussion but does not pretend to be canonical content.
FPF already has E.17.0 for viewpoints, views, and correspondences, and E.17 for typed publication faces. A compact review profile is still needed to say what kind of explanation-facing rendering is being published, how its source tether to the source U.Episteme or source U.EpistemePublication is stated, and where it is admissible.
Problem
Without a dedicated profile:
- source-pinned rendering, reconstruction, didactic simplification, and speculation blur together;
- explanation prose starts behaving like a second semantic rule track;
- publication-side reviewers cannot tell which faces remain admissible for a given explanation class;
- pins, provenance, and evidence binding become optional rhetorical extras instead of explicit publication conditions;
- explanation work quietly shifts into new claims, hidden bridge work, or gate-facing misuse.
Forces
- Clarity vs semantic restraint. Explanation may help readers, but it must not mint new semantic commitments on publication faces.
- Face discipline vs reader fit. The same source may need different renderings, but all of them still live on existing MVPK faces.
- Traceability vs accessibility. Simpler renderings are useful only if readers can still recover how they relate to the source.
- Didactic usefulness vs policy misuse. A didactic or speculative retelling may help humans, but it must not masquerade as assurance or gate-bearing content.
- Explanation vs interpretation. Some moves still belong to explanation rendering; others should use interpretation, retargeting, or world or gate governing patterns or project-side FPF kinds and references named by value.
Solution — review profile for explanation renderings on existing MVPK faces
Informal definition
ExplanationFaithfulnessProfileis a review profile governed byE.17.0andE.17for explanation-facing renderings over already available claims, traces, and pins on existing MVPK faces.It does not create a new face family. It states how an explanation relates to its source
U.Epistemeor sourceU.EpistemePublication, what kind of augmentation is allowed, which evidence binding remains source-bounded, and on which existing faces the rendering may admissibly appear.
Profile, case, and published rendering distinction
ExplanationFaithfulnessProfile is a review profile governed by E.17.0 and E.17. Concrete explanation-facing renderings are passive published renderings or reviewed cases classified under this profile; the profile itself does not act, decide, or publish.
This distinction matters because the profile governs how a rendering is related to its source and reviewed. It does not turn every explanatory paragraph into a giant standalone record, and it does not replace MVPK face governance with a second semantic track.
How to read this profile
This profile does not decide whether a claim is true. It says how an explanation rendering relates to already available source U.Episteme or source U.EpistemePublication, source pins, traces, and provenance references, and where that rendering may admissibly appear.
Faithfulnessnames the review question for the rendering, not a pass verdict for every class.- Class names are source-relation and admissible-use labels, not merit labels or proof that all classes are faithful in the same sense.
- Faces stay governed by
E.17; the profile only constrains what sort of explanation is admissible on them. - If a rendering begins to add new semantic commitments, it has left this profile even if the prose still looks explanatory.
- It helps a publication-side reviewer state one published rendering's relation to the already pinned source
U.Epistemeor sourceU.EpistemePublication.
Local working vocabulary
This profile uses a small local vocabulary for review.
- Source
U.Epistemeor sourceU.EpistemePublication= the already pinned sourceU.Epistemeor sourceU.EpistemePublication, source claims, traces, notes, pins, or provenance references that the explanation rendering depends on. This is not the MVPK face, not the SCR/RSCR carrier, and not an arbitrary carrier or physical item. - Rendering = one published explanation-facing text on one existing face.
- Class assignment = the explanation-class assigned to that rendering on that face.
- Bundle-local class difference = a case where two renderings in one bundle admissibly carry different explanation classes.
These are review aids, not new governance kinds. Faces remain governed by E.17; this profile only qualifies explanation behaviour on those faces.
Core profile fields
Most renderings reviewed under this profile need only the compact review note:
The fuller field vocabulary below opens only when ambiguity or load-bearing use is live: different classes across faces, source linkage dispute, connective reconstruction, reader-fit dispute, interaction or statefulness, derivative rendering, cross-context reuse, cited reliance, work or reliance, evidence, gate, engineering justification, bridge, or coarsening boundary.
profilePlacementRef = profile governed by E.17 and E.17.0;governingPatternRef = E.17 and E.17.0;sourcePublicationOrRecordForm;targetPublicationOrRecordForm;changeTargetRef;entityOfConcernPolicy = preservefor explanation renderings over the same underlying sourceU.Epistemeor sourceU.EpistemePublication;boundedContextPolicy;viewpointPolicy;referenceSchemePolicy;representationSchemePolicy;groundingPolicy;referencePlanePolicy;claimPolicy;claimScopePolicy;publicationScopePolicy;reliabilityTransportPolicy;pinningPolicy;provenancePolicy;lossProfile;claimContinuityClass;microtheoryContinuityClass;onticContinuityClass;bridgeRequirement;worldContactPolicy;evidencePolicy;gatePolicy;workCrossing;upstreamGoverningPatternRef?,upstreamAuthoritySourceRef?,downstreamGoverningPatternRef?, anddownstreamAuthoritySourceRef?;admissibleFaces;publication-face kind valuewhenpublication face/formorinterop publication formdiscipline is live;publicNamePolicy;explanationSourceRelationClassusing the sharedE.17:5.1bvocabulary when source pointer, source availability or retrieval, source use, source faithfulness, claim-source relation, contradiction, omission, claim widening, added linkage, independent verification, admissible use, forbidden downstream use, or reopen trigger could diverge;- no generic source-relation field; source relation is recorded through
explanationSourceRelationClass; augmentationRelation;addedLinkPolicywhenSourceLinkedExplanationReconstructionadds bounded connective prose;targetUserModel?when reader-fit materially shapes the rendering;interactionMode?when the explanation is more than one static explanatory paragraph;contrastiveQuestion?when the rendering is answering a specific user-facing contrast or why-question;allowedUse?when downstream use must be bounded by intended reader and task;misuseRisk?when over-reading pressure is part of the review load;evidenceRelation;noNewBoundaryClaims = trueon explanation faces;compositionRule;reopenCondition.
These fields inherit the E.17:5.1e local-field rule. They classify one explanation-facing rendering for review; they do not create U.Kind, publication-face kind, RelationKind, KindBridge, EvidenceKind, GateDecision, SpeechAct, Commitment, U.Work, authority reference, publication face, or project-side FPF kind and reference named by value unless another governing FPF pattern explicitly instantiates that object. The explanationClass value is a local source-relation and admissible-use profile value, not ExplanationKind, not U.Kind, not EvidenceKind, not FaceKind, and not a truth certificate.
Where explanation crosses from source rendering into new claim production, hidden bridge work, gate-bearing semantics, world-changing claim or effect, or a source relation with declared source-loss mode, the profile no longer suffices and the case must leave this profile.
Working-model first
Ordinary reviewed renderings do not need to restate every field from scratch. When the governing MVPK face, pinned source U.Episteme or source U.EpistemePublication, and already published provenance references already fix a field honestly, the rendering may inherit that condition by explicit reference.
A source-bearing review record becomes necessary when:
- explanation class differs across faces in the same publication bundle;
- the rendering relies on bounded connective prose that is not obvious from the source wording alone;
- didactic or speculative wording creates a real risk of policy, assurance, or gate misuse;
- source linkage, provenance, or reliability transport would otherwise become unclear;
- the rendering is a fork, adaptation, translation, generated explanation, tutorial, access-format conversion, or another derivative publication that may be mistaken for the source itself.
When one rendering needs its own narrower admissible claim or effect line, non-admissible downstream claim or effect line, or source-bearing reopen rule because distinctions were deliberately coarsened for reader fit, the issue is no longer only explanation class. Do not keep that case here as if it were merely one more helpful rendering style; apply A.6.3.CSC Controlled Semantic Coarsening.
What a publication-side reviewer checks first
A publication-side reviewer usually starts with four questions:
- What exactly is the source
U.Epistemeor sourceU.EpistemePublicationfor this rendering? - Which explanation class is being claimed for this rendering on this face?
- Are the pins, provenance references, and evidence relation visible enough for that class?
- Has the rendering quietly begun to add new semantic commitments, new face-like behaviour, derivative-source replacement, or a deliberately coarsened source rendering that needs
A.6.3.CSC?
If these questions are answered clearly, the rendering often remains lightweight. If they are not, a fuller face-by-face review record is usually warranted.
Interpretant-side block
This profile still governs explanation renderings on existing faces, not full interactive explanation systems.
However, when reader-help, onboarding, or contrastive explanation is doing real work, the rendering should also make visible:
- who the rendering is fit for (
targetUserModel); - whether the interaction is static, guided, contrastive, or another bounded mode (
interactionMode); - what question the rendering is helping answer (
contrastiveQuestion); - what interpretation or use remains admissible (
allowedUse); - and what downstream claim or effect would be wrongful (
misuseRisk).
These fields do not create a new governing source relation. Their current role is narrower: stop explanation prose from pretending that every rendering is audience-neutral, and make misuse boundaries explicit when reader-fit is part of the explanation case. allowedUse is a local reader-fit field under admissibleUse; it is not permission, evidence relation, or authority.
Explanation class set
The explanation-class set used in this profile is:
SourcePinnedExplanationSourceLinkedExplanationReconstructionDidacticRetellingSpeculativeRetelling
In field form, the local assignment is explanationClass = SourcePinnedExplanation | SourceLinkedExplanationReconstruction | DidacticRetelling | SpeculativeRetelling.
Class assignment is a source-relation and admissible-use classification. SourcePinnedExplanation is source-bound rendering, SourceLinkedExplanationReconstruction is bounded reconstruction with explicit added-link policy, DidacticRetelling is teaching and onboarding help, and SpeculativeRetelling is exploratory help. The last two classes do not assert the same kind of source faithfulness as SourcePinnedExplanation; they state the limits under which reader help remains admissible.
Safe next action by class:
These classes are publication-behaviour labels for one rendering on one existing face. They are not U.Kind values, not MVPK faces, and not semantic merit grades. They state how the explanation relates to the source, how much augmentation is tolerated, what reliability transport is still honest, and which faces remain admissible.
Class assignment is per published rendering on a face, not one blanket label for a whole multi-face bundle. If a PlainView rendering stays source-pinned while a TechCard rendering adds bounded connective prose, the bundle must state that class difference explicitly.
Ordinary class-selection guidance
A practical reading order is:
- start with
SourcePinnedExplanationif the rendering stays close to the source wording and keeps direct pins visible; - choose
SourceLinkedExplanationReconstructionwhen bounded connective prose is added but source linkage remains explicit; - choose
DidacticRetellingwhen reader-help dominates and some phrasing is intentionally more pedagogical than canonical; - choose
SpeculativeRetellingonly when the rendering openly goes beyond source-backed explanation and remains confined to exploratory or didactic use.
The profile should not be used to make a rendering sound more respectable than its actual source relation warrants.
It should also not be used to keep one narrower-use rendering with declared source-loss mode inside explanation just because the prose is reader-friendly. If the rendering needs its own forbidden-use line and reopen rule to stay honest, explanation is no longer the primary question; use A.6.3.CSC Controlled Semantic Coarsening.
SourceLinkedExplanationReconstruction added-link policy
When a rendering claims SourceLinkedExplanationReconstruction, it should publish a compact addedLinkPolicy whenever the connective move is not already explicit in the source wording.
Minimum reading load:
addedLinkKind— what bounded connective move is being added;sourceReferenceSet— which pinned claims, traces, or notes carry that move;boundednessReason— why the added link does not become an unsupported relation theory, modality lift, causal claim, bridge-comparison load, or policy-bearing reading;forbiddenLinkClass— which unsupported connective move is explicitly excluded;reopenTrigger— what would force downgrade, source-bearing return, or source-bearing review.
Working rule:
- if
addedLinkPolicycannot be stated plainly, the rendering should drop to a more restricted explanation class, use a more restricted MVPK face or namedpublication-face kindvalue, or leaveE.17.EFP; SourceLinkedExplanationReconstructionmay not hide new relation theory, bridge equivalence, design-scope generalization, or policy-bearing guidance inside "bounded" connective prose.
Working admissibility matrix
ExplanationFaithfulnessProfile ordinarily stays on publication face/form. Any appearance on interop publication form must remain source-pinned and structure-preserving, and must never smuggle explanation-specific semantics into interop publication. Didactic or speculative restrictions are use-profile restrictions over existing faces, not new face kinds.
Source-pinned explanation on AssuranceLane-facing publication is exceptional rather than ordinary. Unless the governing face source explicitly permits that use with visible evidence carriers, source pins, and no added semantics, reviewers should treat AssuranceLane-facing explanation rendering as non-admissible.
DidacticRetelling and trace-free reader help are illustrative or analogical scaffolding only. Trace-free didactic material may carry analogy, scaffolding, or reader orientation, but any domain fact inside didactic prose must either be source-pinned or explicitly downgraded to non-canonical reader aid. It may not carry causal claims, policy claims, reliability claims, or canonical TechCard semantics. If didactic content appears near technical content, mark it as a boxed or otherwise clearly separated non-canonical reader aid rather than letting it merge into the technical source.
Every concrete explanation rendering must also publish the source claim IDs, pins, trace refs, or equivalent provenance references that justify its class on that face. If those anchors cannot be made visible on the chosen MVPK face or named publication-face kind value, the rendering must drop to a more restricted explanation class, use a more restricted use profile, or leave the face.
When reader-help, onboarding, or contrastive explanation is part of the case, the rendering should also publish or inherit its targetUserModel, interactionMode, contrastiveQuestion, allowedUse, and misuseRisk so that user-fit does not quietly become policy guidance, assurance guidance, or gate-bearing guidance.
Shared explanation rule set
E.17.EFP:4.5.a. Preservation rule
Explanation-facing renderings under this profile preserve the same underlying EntityOfConcern line, bounded context, and source-pinned U.Episteme or source U.EpistemePublication. Viewpoint, reference scheme, representation scheme, grounding, and reference-plane handling must stay explicit rather than being left to prose. SourcePinnedExplanation and SourceLinkedExplanationReconstruction are expected to remain claim-conservative; DidacticRetelling may omit or simplify source claims but must stay source-linked; SpeculativeRetelling may widen explanatory language only when kept clearly off canonical faces and off gate-bearing claim or effect.
E.17.EFP:4.5.b. Loss and reliability rule
A rendering assigned to one of these explanation classes declares what is omitted, reordered, simplified, or newly connected. Reliability transport may stay source-bounded or be explicitly downgraded, but it must never be silently widened by more persuasive prose. Didactic and speculative renderings also state forbidden downstream uses whenever omissions, declared source-loss modes, or trace-free additions occur.
When reader-fit is part of the explanation case, allowedUse and misuseRisk should be explicit enough that a didactic or contrastive rendering cannot be mistaken for assurance, policy, or gate-bearing guidance.
E.17.EFP:4.5.c. Downstream-use and boundary rule
This profile stays explanation-facing and episteme-facing. It does not govern bridge stance, retargeting, action selection, executable docking, gate-bearing claim or effect, assurance, engineering justification, or work enactment. If a case starts carrying one bounded comparative review case, rival interpretations, bridge-mediated comparison load, world consequences, work or reliance consequences, gate consequences, assurance, or engineering justification, apply the neighboring FPF pattern and name the project-side FPF kind and reference named by value that governs that claim or effect (E.17.ID.CR, F.9.1, B.5.2, A.6.4, A.15, A.15.4, B.3, A.20, A.21).
Interpretant-side fields do not weaken that boundary rule. They only bound reader use; they do not authorize unsupported downstream guidance.
If a coarsened explanation-like rendering needs narrower admissible claim or effect, non-admissible downstream claim or effect, and source-bearing reopen to remain honest, the case is governed by A.6.3.CSC Controlled Semantic Coarsening rather than staying in ordinary explanation-use discipline.
E.17.EFP:4.5.d. Composition and reopen rule
Repeated SourcePinnedExplanation over the same pinned source may be idempotent. SourceLinkedExplanationReconstruction and DidacticRetelling are order-sensitive and must reopen when the source claim set, pins, provenance, or admissible-face assumptions change. SpeculativeRetelling must reopen whenever source binding becomes available or whenever the rendering starts to look like a canonical explanation rather than a clearly bounded exploratory retelling.
Hard boundary rules
A rendering reviewed under this profile keeps the following explicit:
- it does not create a second face family;
- it does not turn faces into a second semantic rule track;
- it does not license new A.6.B boundary claims on explanation faces: law claims, admissibility claims, deontic or commitment claims, and effect or evidence claims;
- it does not replace bridge discipline, retargeting discipline, or world or gate boundary discipline;
- it does not let
publication face/formandinterop publication formcollapse into one undifferentiated explanation channel.
If explanation text starts carrying new semantic commitments instead of rendering or licensed explanation over existing ones, the case must leave this profile.
Archetypal grounding
Source-pinned explanation across multiple faces
Source claim slice. Claim D-14: Cooling loop CL-2 maintains the required temperature margin during standard load. Evidence pins: T-44, E-17.
PlainView rendering. Cooling loop CL-2 keeps the required temperature margin in standard operation. Source pins: T-44, E-17.
TechCard rendering. D-14 remains source-pinned to T-44 and E-17; this rendering only shortens and reorders the claim.
This stays within SourcePinnedExplanation because the rendering changes readability, not the semantic load.
Source-linked reconstruction
Source slice. Claims D-14 and D-18 jointly constrain the safe operating window, but the relation is left implicit in the original note.
Published reconstruction. Claims D-14 and D-18 jointly bound the safe operating window; see the pinned source notes for the original wording and evidence anchors.
This stays within SourceLinkedExplanationReconstruction if the connective prose remains bounded and does not add new claims.
A minimal addedLinkPolicy for this slice would say:
addedLinkKind = relation-explication only;sourceReferenceSet = {D-14, D-18};boundednessReason = makes an already implied joint constraint explicit without adding a new mechanism, policy conclusion, or unsupported modality lift;forbiddenLinkClass = design-scope robustness or gate-sufficiency claim.
Selected-method explanation
Source slice. The method-selection note chooses method M-2 because the material stays below threshold T and resource window W is available. The same source says that work plan WP-17 and result measurement RM-4 are still required before and after execution.
Published explanation. Method M-2 is selected here because the material condition and resource window match the declared method family. Use WP-17 for planning and RM-4 for result measurement.
This may stay within SourceLinkedExplanationReconstruction when the explanation keeps its source references visible and only makes the already source-recoverable selection relation easier to inspect. It is admissible for interpretation, source-finding, and selected-method inspection. It is not evidence that work occurred, not a gate decision, and not engineering justification. Evidence or provenance use requires a project evidence path governed by A.10; engineering-justification use requires an engineering-justification record governed by B.3; method-selection use requires project U.Method, work-plan use requires U.WorkPlan under A.15, and work-occurrence use requires a dated U.Work occurrence under A.15.1; gate use requires the project gate or constraint decision governed by A.20 or A.21.
Mixed-face bundle with different explanation classes
Source slice. Claim D-31 and trace set T-8 jointly show that the reserve path remains available during the short overload interval.
PlainView rendering. The reserve path stays available during the short overload interval. Source pins: D-31, T-8.
TechCard rendering. D-31 and T-8 jointly evidence availability of the reserve path during the short overload interval; this rendering adds bounded connective prose to make the source relation explicit.
The PlainView rendering may stay SourcePinnedExplanation while the TechCard rendering is SourceLinkedExplanationReconstruction. The bundle is admissible only if that class difference is stated rather than hidden under one blanket label.
Didactic retelling
Source slice. The pressure-control condition is satisfied whenever the reserve valve opens within 80 ms.
Didactic rendering. For onboarding: the system stays safe here because the reserve valve opens quickly enough; the threshold and source claim named by value remain in the pinned technical note.
This stays in DidacticRetelling only if it is kept off TechCard or AssuranceLane faces where it could be mistaken for canonical semantics.
Speculative retelling
Source slice. The pinned source notes record the observed recovery, but they do not explain why the recovery was so rapid.
Speculative rendering. One possible reading is that a temporary coupling effect accelerated recovery, but this is a reflective aid for discussion, not a source-backed claim.
This is admissible only as a clearly marked exploratory or didactic use on an existing face; it must not appear as policy-bearing, gate-bearing, or assurance-bearing claim material.
Anti-example: explanation that quietly becomes a new claim
Source slice. The pinned source claims show the reserve path remained available during the short overload interval.
Overreaching rendering. The reserve-path design is therefore robust against short overloads.
This no longer stays inside explanation-use discipline. The rendering introduces a design-scope commitment that the pinned source does not state, so the case must reopen the appropriate source U.Episteme, source U.EpistemePublication, project record whose governing FPF kind is named, or apply the neighboring pattern that governs that commitment instead of hiding inside a face-local explanation label.
Anti-example: reader help that quietly becomes policy-bearing use
Source slice. The onboarding note explains, in simplified prose, that the reserve valve usually opens quickly enough to keep the local pressure condition inside the tolerated window.
Overreaching rendering on an AssuranceLane-facing use. Operators may rely on this explanation as sufficient assurance that short overloads stay inside the tolerated window.
This also leaves the profile. The rendering is no longer only reader help over existing claims; it starts acting like policy-bearing or assurance-bearing guidance. The case must reopen, drop the explanation class, or use the neighboring pattern and project-side FPF kind and reference named by value that govern that guidance rather than staying on an explanation face.
Boundary to lighter explanatory note with source-bearing return
Source slice. The technical incident note says the reserve path remained available during the measured load band, but it also keeps one unresolved ambiguity about recovery latency.
Lighter explanatory rendering. In plain terms: the reserve path stayed available during overload recovery.
This does not remain ordinary explanation profiling. The lighter note suppresses the load-band condition and the unresolved ambiguity, so it can stay honest only through narrower admissible claim or effect, non-admissible downstream claim or effect, and return to the source U.Episteme or source U.EpistemePublication. Once those narrowed-claim conditions become primary, the case must leave ordinary explanation-use discipline and be governed as a coarsened rendering rather than as ordinary reader help.
Class-specific reopen cues in the worked slices
SourcePinnedExplanationreopens when the pinned source claim set, source pins, or admissible-face assumptions change so that the rendering can no longer remain omission-only and visibly source-bound.SourceLinkedExplanationReconstructionreopens when the connective prose begins carrying an unsupported relation, or when the source claim set changes enough that the bounded reconstruction is no longer plainly source-linked.DidacticRetellingreopens when the rendering moves ontoTechCardorAssuranceLane-facing use, or when reader-help prose starts functioning as policy-bearing, design-bearing, or gate-bearing guidance.SpeculativeRetellingreopens when source binding becomes available, or when the rendering starts to behave like canonical explanation rather than clearly bounded exploratory help.
Boundary to interpretation and world or gate use
If the rendering starts generating one bounded comparative review case, rival interpretations, bridge-mediated comparative claims, new hypotheses, world consequences, gate consequences, assurance claims, or engineering-justification claims, it must leave this profile and apply the neighboring FPF pattern and project-side FPF kind and reference named by value that govern the claim or effect (E.17.ID.CR, F.9.1, B.5.2, A.6.4, A.15, B.3, A.20, A.21).
Bias-Annotation
Lenses tested: Gov, Arch, Onto and Epist, Prag, Did. Scope: Universal for explanation-facing renderings that claim ExplanationFaithfulnessProfile on existing MVPK faces inside FPF.
This profile intentionally biases toward explanation restraint on existing faces and against face inflation, second semantic tracks, and reader-help authority overread. The main mitigation is explicit admissibility by face, explicit no-new-A.6.B-boundary-claims discipline, A.6.3.CSC use when narrowed-claim source relation becomes primary, and clear boundaries to interpretation, retargeting, work, and world or gate governing patterns or project-side FPF kinds and references named by value when explanation stops being only explanation.
Conformance Checklist
A conformance check is retained only if it changes the next admissible use of the explanation rendering, blocks a concrete overclaim, or preserves a source reference or reopen condition needed for the declared safe next action.
Use core ordinary checks first. Conditional rows open only when reader-fit, bundle-local class difference, bounded explanation class, connective reconstruction, derivative rendering, or downstream reliance use is live.
EFP-Core ordinary checks
- CC-EF-1 — Explanation class is explicit. The explanation class is explicitly named.
- CC-EF-3 — Source reference and non-admissible downstream use are explicit. The compact note states source reference, admissible explanation-reader use, non-admissible downstream use, and reopen or boundary condition.
- CC-EF-5 — No new A.6.B boundary claims on explanation faces. The no-new-boundary-claims rule is explicit on explanation faces; the blocked claims are A.6.B-governed law claims, admissibility claims, deontic or commitment claims, and effect or evidence claims.
- CC-EF-7 — No second face family. A publication-side reviewer can tell why the case remains explanation-facing rather than becoming a second semantic rule track.
EFP-Conditional checks
- CC-EF-4 — Interpretant-side block is explicit when reader-fit does real work.
When onboarding, contrastive explanation, or other reader-fit shaping matters,
targetUserModel,interactionMode,contrastiveQuestion,allowedUse, andmisuseRiskare visible enough to review. - CC-EF-2 — Face and
publication-face kindboundary is explicit when live. When face placement,publication face/form,interop publication form, pinning, provenance, or reliability transport is not already inherited by visible source reference, the rendering states the admissible MVPK face,publication-face kindvalue, and required pinning or provenance boundary explicitly. - CC-EF-6 — Boundary to interpretation, retargeting, coarsening, and world or gate use is explicit.
The boundary is explicit, including
A.6.3.CSC Controlled Semantic Coarseningwhen a narrower admissible claim or effect, non-admissible downstream claim or effect, or source-bearing reopen condition becomes primary. - CC-EF-8 — Bundle-local class differences are explicit. When one publication bundle carries different explanation classes across faces, that difference is stated explicitly rather than hidden under one bundle-wide label.
- CC-EF-9 — Source-loss or downgraded-reliability classes publish forbidden downstream uses. Didactic or speculative renderings, and any rendering with downgraded reliability transport or declared source-loss mode, state their forbidden downstream uses explicitly.
- CC-EF-10 — Reopen triggers match the class. The published review note makes class-relevant reopen triggers visible when source claim set, pins, provenance, or admissible-face assumptions change.
- CC-EF-11 —
SourceLinkedExplanationReconstructionpublishesaddedLinkPolicywhen needed. When bounded connective prose is doing real review work, the rendering states what link is added, why it remains bounded, and which unsupported link class is explicitly forbidden. - CC-EF-12 — Derivative renderings keep source links operative.
A fork, adaptation, translation, generated explanation, tutorial, access-format conversion, or other derivative rendering that will guide work or reliance maps each operative claim to the exact source passage, carrier path, or project-side FPF kind and reference named by value that evidences it, or else downgrades to reader help or applies
A.6.3.CSCas appropriate. - CC-EF-13 — Generated explanation reliance boundary is explicit. A generated explanation used beyond ordinary reader help states its explanation class, source-finding state, operative claims, governing pattern for each relied-on claim, and non-admissible downstream use. The explanation itself is not evidence, assurance, approval, gate passage, release reliance, or work authority.
Common Anti-Patterns and How to Avoid Them
Consequences
- Explanation classes become explicit and reviewable.
- Existing MVPK face discipline stays intact.
- Pins, provenance, and evidence-binding become structural, not rhetorical extras.
- The boundary to interpretation, retargeting, and world or gate work becomes easier to review.
Rationale
Explanation help already appears on existing faces, and the nearest failure mode is to let helpful prose shift into hidden source claims, bridge-comparison load, or gate-bearing guidance. E.17.EFP gives the reader one practical benefit: they can tell whether a rendering is source-pinned, reconstructive, didactic, or speculative, and therefore whether it may stay as explanation help, must downgrade use, or must leave this profile because the rendering has stopped being only explanation-facing help.
SoTA Alignment: Adopted And Adapted Invariants And Rejected Shortcuts
SoTA alignment rule. Read each row here as source idea -> local FPF invariant -> practical local test -> popular shortcut rejected. A source citation governs nothing by reputation; it counts only when the cited idea is translated into the Solution, conformance checks, boundary rules, worked slices, and Relations of this pattern.
Traditions covered. This profile binds itself to architecture-description governance, explainability and reliability guidance, and faithfulness evaluation for natural-language explanations.
Architecture-description governance tradition. E.17.EFP adopts the rule that reader-helpful renderings stay subordinate to the already governed source U.Episteme or source U.EpistemePublication rather than replacing it. Explanation therefore remains on existing faces and is judged against source claims, pins, and provenance references.
Explainability and reliability traditions. E.17.EFP adopts the distinction between source-bound explanation and merely plausible explanation prose. It rejects the still-popular shortcut in which fluent or pedagogically useful language is treated as sufficient evidence of explanation faithfulness.
Local stance. Best-known current practice points to a narrow rule: explanation renderings are admissible only when their class, source relation, evidence relation, admissible faces, and forbidden downstream uses remain visible enough that reader help does not become a second semantic rule track.
Action result from the explanation-faithfulness and retrieval-evaluation practice basis: fluent, source-linked, generated, retrieved, didactic, or pedagogically useful explanations do not become evidence, assurance, approval, gate passage, release reliance, work authority, or operative-claim-source relation by fluency, plausibility, citation-like wording, or retrieved context. The local E.17.EFP result is explanation class, source reference, admissible explanation use or source-finding state, non-admissible downstream use, and operative-claim mapping to A.10 or another pattern governing the recovered claim only when reliance use is being made. Reopen the explanation-use result when the source claim set, pins, provenance, retrieved context, generated rendering, admissible face, use escalation, or source relation for an operative claim changes.
Relations
- Builds on:
E.17.0,E.17,A.7,E.10.D2,A.6.B,F.9,F.18 - Coordinates with:
ConservativeRetextualization,RepresentationTransduction,A.6.3.CSC Controlled Semantic Coarsening,E.17.ID.CR ComparativeReading,A.6.4,A.15,A.15.4,B.3,A.20,A.21 - Primary governing-pattern relation and main neighboring-pattern boundaries: this profile stays governed by
E.17.0andE.17; any shift toward new semantics, coarsened narrowed-claim rendering, or gate-bearing claim or effect leaves the profile. - Boundary notes: comparative-interpretation cases apply
E.17.ID.CR ComparativeReading; explanation-like renderings with declared source-loss mode whose narrower admissible claim or effect, non-admissible downstream claim or effect, and source-bearing reopen are primary applyA.6.3.CSC Controlled Semantic Coarsening; retargeting appliesA.6.4; work and reliance consequences applyA.15andA.15.4; assurance and engineering-justification consequences applyB.3; gate-bearing consequences applyA.20orA.21.
C.29 mathematical-lens use relation
When an explanation-facing rendering uses a mathematical lens as part of an explanation,
E.17.EFPstill governs rendering class, source relation, evidence relation, admissible faces, and forbidden downstream uses. The applicableC.29output for the stated use (MathLensUse.LensCandidateNote,MathLensUse.OneLine,MathLensUse.MiniCard, orMathLensUse.FullCardwhen required) may be cited only for the mathematical-lens use part: candidate mathematical object, lens mapping mode, preserved and lost structure, exposed invariant or distinction, lens-use admissibility value, admissible use, non-admissible use, and stop condition. It does not make the explanation faithful, evidence-bearing, or admissible for downstream use by itself.
E.17.EFP:End
ComparativeReading — bounded comparative reading over comparative review units
Status: Stable
Placement. Pattern for bounded comparative reading over comparative review units, coordinated with the neighboring A.6.3.*, F.9.1, and E.17.EFP patterns.
Builds on. C.2.2a; A.16.0; F.9; E.14.
Coordinates with. A.6.P; A.6.3; A.6.3.CR; A.6.3.RT; A.6.9; F.9; F.9.1; E.17.EFP; E.17.AUD.LHR; B.5.2.0; B.5.2; OntologicalReframing; A.6.4; C.11; A.15; A.20; A.21.
Active governing pattern. ComparativeReading is the governing pattern here under the wider InterpretationDiscipline family. The public pattern name is ComparativeReading, not interpretation-in-general.
Citation names. Cite this pattern as E.17.ID.CR, ID.CR, or ComparativeReading. Do not cite it as unqualified ID or CR; use A.6.3.CR when the intended pattern is ConservativeRetextualization.
Family-specialization guard. InterpretationDiscipline is a naming-level family label only. It is not a U.* kind, not a publication-face kind, not a publication face, not a new episteme kind, not an authority reference, not a bridge taxonomy, not a second semantic track, and not a governing pattern by itself. The active governing pattern here is ComparativeReading; no publication or project record cites InterpretationDiscipline, ID, or CR alone as governingPatternRef or authoritySourceRef.
Plain-name. Bounded comparative reading over comparative review units.
One-line summary. ComparativeReading works over one bounded comparative review unit over already available source epistemes or source publications while the shared review frame stays preserved, one bounded contrast or a small set of bounded contrast rows is being made visible, and downstream claim or effect remains outside. The compared alternatives may be distinct entities when they stay under that shared review frame.
Bounded comparative review unit in plain terms. The pattern works over the comparative review unit itself - the comparison note, small comparison sheet, or guided review aid that carries one bounded contrast or a small set of bounded contrast rows - not the whole source episteme or source publication set and not the wider decision or work process.
Early comparative lens. Read the comparative-reading case through one early formula: one comparative review unit over already available source epistemes or source publications keeps the shared review frame visible while making one bounded contrast or a small set of bounded contrast rows inspectable, with downstream claim or effect still left outside. The shared frame may be the same EntityOfConcernRef, review target, described situation, decision situation, release candidate, method family, control scope, problem frame, or source-set reference. Compared alternatives under that frame may be distinct objects. That is the whole early read. It does not govern interpretation in general, the whole source episteme or source publication set, or the wider decision or work process.
Use this when. Use this pattern when you need a small comparative review unit, such as a comparison note, comparison sheet, or guided review aid, over already available source epistemes or source publications so that a team can inspect one bounded contrast or a small set of bounded contrast rows while still keeping the shared review frame and compared alternatives explicit and without yet claiming equivalence, root cause, redesign, release approval, or another unsupported downstream claim or effect.
First-minute working moment. A team already has two or more source-pinned notes, sheets, views, or review aids on the table and needs one honest comparison unit that keeps the shared review frame visible while making one bounded contrast or a small comparison sheet inspectable. The compared items may be two design options for one release, two methods for one task family, two vendor bulletins for one control scope, or two programme strategies for one initiative. The real job is not yet action selection, approval, ontology repair, or wider work-process control. It is to help reviewers compare without pretending that the comparison note or sheet already became a decision.
First-screen questions.
- What source epistemes or source publications are being compared?
- What one contrast or small set of contrast rows is being made visible?
- What shared review frame remains preserved, and what compared alternatives stay distinct under it?
- What does this note not decide?
- What boundary condition would make it a decision, prompt, bridge, ontology, work or reliance, gate, assurance, or adjudication case?
Working action spine. When a comparison note or guided review aid is needed, separate compared sources, one bounded contrast or small row set, shared review frame, distinct alternatives when present, and undecided downstream claim or effect. Use the unit for bounded review, source-finding, contrast inspection, or planning preparation. The ordinary output is the seven-row ordinary working card or one compact note or sheet. If a decision claim, bridge claim, prompt claim, ontology claim, work claim, reliance claim, gate claim, assurance claim, or adjudication claim becomes live, apply the neighboring FPF pattern that governs that claim. Decision-making claims and decision records apply C.11; relation-precision claims apply A.6.P; bridge wording applies Part F with A.6.9, F.9, or F.9.1; gate and release claims apply A.20 or A.21. Use E.17:5.1c for orientation use, reliance use, operative claim, non-admissible downstream use, and reopen trigger; use E.17:5.1d when the primary question under repair may be same-entity rewrite, representation change, coarsening, explanation, bridge or substitution, work or reliance, gate, evidence, assurance, retargeting, or carrier or front-end work instead of bounded comparative reading.
Ordinary-output claim inventory. After ComparativeReading, the author has claimed only that these source epistemes, source publications, or project-side FPF kinds and references named by value have been compared under this bounded comparison basis, shared review frame, and declared source references. The author has not claimed equivalence, substitutability, bridge relation, selection, recommendation, decision, evidence path, assurance, gate passage, release readiness, work occurrence, or reliance relation unless the neighboring FPF pattern governing that claim and project-side FPF kind and reference named by value are named.
Primary working reader. The primary first-minute reader is an engineer-manager or programme lead using a bounded comparative review unit in ordinary project review. Architecture reviewers, release or compliance reviewers, research reviewers, and cultural or programme reviewers remain important secondary readers, but the first recognition block should still read engineer-manager-first rather than architecture-first.
Problem-owning practice reading. In ordinary practice, this pattern helps teams write design-review notes, release or compliance comparisons, incident triage comparisons, research review notes, and programme review aids when the real job is to compare already available source epistemes or source publications under one shared review frame without yet claiming equivalence, action selection, or decision authority. The job is not to settle the full review or downstream decision process. It is to make one bounded comparative review unit honest enough that reviewers can inspect one contrast or a small set of contrast rows, know what downstream claim or effect stays outside, and stop arguing as if the note had already become a decision.
What goes wrong if you miss this. If this pattern stays unnamed, teams often flip between two bad readings. Either the comparative review unit is dismissed as if it were only harmless prose, or it is over-read as if it already licensed equivalence, action selection, gate pressure, or work or reliance. The practical result is distrust and friction in review work because readers can no longer tell whether they are looking at one bounded comparison aid or at a disguised decision.
What this buys you in practice. Naming the pattern buys one smaller and more usable review unit. A team can compare already available source epistemes or source publications, inspect one bounded contrast or a small comparison sheet, and still keep downstream claim or effect outside. In practice that means review conversations move faster with less argument about whether the note already settled equivalence, approval, or the next work or reliance move.
Ordinary use. If the comparison only helps review, source-finding, contrast inspection, or planning preparation, keep one small comparison note or the seven-row ordinary working card; do not thicken it into a decision, bridge, release, or authority record.
Cheap stop after ordinary card. If the comparison note answers the seven-row card and no neighboring-boundary claim is live, stop. Do not open E.17.AUD.LHR, E.17.AUD.OOTD, E.17.EFP, A.6.3.CSC, bridge, prompt, work or reliance, gate, assurance, or authority patterns.
Assurance-section boundary. Read E.17.AUD.LHR, E.17.AUD.OOTD, interpretant-side fields, bridge boundaries, prompt boundaries, authority boundaries, and the heavier boundary tables as assurance or source-relation material after the seven-row ordinary card, not as the ordinary first screen for one comparison note.
Load-bearing use. Open the fuller comparative-relation and source-relation apparatus only when the comparison will be externally relied on, disputed, cited, used across context, used to affect person status or team status, or read as release, gate, bridge or substitution, action-selection, work or reliance, or engineering-justification input.
Stop condition. Stop once the comparison changes no next review, source-finding, contrast-inspection, or planning-preparation move and blocks no concrete overclaim about equivalence, decision, bridge or substitution, work or reliance, gate, or engineering justification.
Admissible-use examples.
Admissible comparative-unit forms.
- Single-contrast note — one bounded contrast with one comparison basis, one shared review frame, unsupported downstream claim or effect, world-contact limit, and boundary trigger.
- Small comparison sheet — a small set of bounded contrast rows under one shared review frame. Each row states its comparison basis; the sheet has one shared unsupported downstream claim or effect, one world-contact limit, and one boundary trigger. It must not add an aggregate recommendation, ranking, or action-selection conclusion unless another governing FPF pattern or project record named by value supplies that source relation or project record.
When one comparative note is itself lighter or simplified, it remains admissible here only while source-bearing return stays available and heavier bridge, action-selection, or work or reliance claim remains outside.
Not this pattern when. This is not the right pattern when the primary question is:
- restating the same EntityOfConcern or shifting its representation rather than adding one bounded contrast under
A.6.3.*; - carrying a controlled narrower-use rendering whose governing relation is source-bearing tether, narrower admissible claim or effect, non-admissible downstream claim or effect, and reopen duty rather than bounded comparative reading;
- explicating an already-declared bridge stance rather than governing a comparative review unit under
F.9.1; - deciding explanation-face use rather than carrying bounded comparative reading under
E.17.EFP; PublicationUnitEntityOfConcern stabilization after local repair;- abductive-prompt or action-selection pressure under
B.5.2(.0); - ontology or target change under
OntologicalReframingorA.6.4; - or downstream decision, work or reliance, gate, assurance, or adjudication authority under
C.11,A.15,A.20, orA.21.
Neighboring-work boundary. If the live work is actually same-EntityOfConcern rewrite, relation-precision work, bridge wording, bridge-stance note over an existing Bridge Card, explanation-face use, abductive prompt, ontology change, decision work, gate or authority work, or local PublicationUnit repair, keep the current comparative review unit narrow and use the FPF pattern that governs that outside work (A.6.P, A.6.3.*, A.6.9, F.9, F.9.1, E.17.EFP, B.5.2(.0), OntologicalReframing or A.6.4, C.11, A.15, A.20, A.21, E.17.AUD.LHR, or E.17.AUD.OOTD). The engineer-manager action is to keep the comparison note from carrying that outside work; if the outside work is live, recover the existing project-side FPF kind and reference named by value for that work when available. If no existing source carries the needed load-bearing claim, create only a prospective repair request, future decision request, prospective work-plan entry, or explicit source-gap note and otherwise keep the comparison note to inline orientation or source-finding; the new request or note must not be treated as retroactive evidence, approval, gate passage, performed U.Work, release permission, or assurance.
Ordinary recovery reference. If the recognition block fits, keep three entries recoverable: the bounded comparative review unit, the seven-row ordinary working card in E.17.ID.CR:4.3.b.a, and the nearest ordinary worked slices in E.17.ID.CR:5.4.5 through E.17.ID.CR:5.4.6.c. Use E.17.ID.CR:4.1.d only if one pressure term still blocks the working read.
Quick kind-plus-lens reading. InterpretationDiscipline names the wider interpretation family and ComparativeReading names the active governing pattern here. Recover the case through the early comparative lens above: one comparative review unit over already available source epistemes or source publications, the shared review frame preserved, one bounded contrast or small row set made visible, and downstream claim or effect still outside. If that read no longer holds, handle the neighboring work under the pattern or governing FPF pattern and project-side FPF kind and reference named by value rather than widening this pattern into interpretation-in-general.
First-minute term reading. Read the early pressure terms this way. Shared review frame = the review target, described situation, decision situation, release candidate, method family, control scope, problem frame, or source-set reference preserved across the comparison. Compared alternatives = the distinct options, methods, bulletins, strategies, notes, source epistemes, source publications, or project-side FPF kinds and references named by value kept separate under that frame. Source epistemes or source publications, plus source references, = already available source epistemes or source publications plus the notes, views, or links that keep the comparison checkable. allowedUse and misuseRisk are local reader-fit fields under admissibleUse: they name what comparative use remains admissible for this unit and what unsupported downstream reading it may wrongly attract.
Quick working-fit check. Before you read the heavier harness, ask:
- Am I working over the comparative review unit itself?
- Does the shared review frame stay preserved, with compared alternatives still distinct if they are distinct, while one bounded contrast or small row set is being made visible?
- Is the main question still this bounded comparison rather than same-EntityOfConcern rewrite,
PublicationUnitstabilization, decision, gate, action, approval, rollout, release, policy, assurance, adjudication, bridge, prompt, or ontology-shift claim?
If yes, stay here and use the ordinary working card. If no, use the neighboring-work boundary above and the fuller boundary table in E.17.ID.CR:4.5.
Worked-slice pointer. If you need one ordinary sentence fast, borrow the nearest admissible example from E.17.ID.CR:5.4.5 through E.17.ID.CR:5.4.6.c and then check it against the seven-row ordinary working card rather than treating the example itself as a second mini-harness.
Problem frame
Anti-fixed-process note. The quick checks, ordinary working card, worked-slice pointer, working order, and worked slices in this pattern are local aids and examples for one comparative review unit. They are not a canonical transduction process for the bounded comparative review unit here, not a mandatory fixed sequence for the wider review process, and not a promise that admissible cases move through one fixed graph in one direction. FPF fixes the local comparison unit, the local comparative move, the neighboring-pattern boundaries, and the inherited dynamic frame; actual work may reopen, back off, loop, or depend on outside observations and downstream constraints. Read the worked-slice bank sideways rather than as one required sequence: one admissible case may finish after a single bounded comparison, another may reopen after a new outside observation, and another may need the neighboring pattern once environmental change or downstream constraints make that neighboring pattern the exact locus for the live downstream question.
Engineer-managers, programme leads, and research or cultural reviewers repeatedly need to prepare or share a small comparative review unit that helps a team read two already available source epistemes or source publications together without overstating what downstream claim or effect that unit now carries. Typical moments include:
- a design-review note that says one already available option write-up foregrounds coupling risk more than another;
- a release or compliance comparison that says an internal control sheet and a vendor bulletin are not yet equivalent even though they speak to the same review task;
- an operations comparison that says a dashboard view and a maintenance note foreground different operational pressures in the same service episode;
- a research-review note that says one available synthesis foregrounds measurement uncertainty more than another without yet declaring a better method;
- a program or cultural review note that says one available brief foregrounds participation continuity more than another without yet deciding funding, curation, or program direction.
These review units are useful precisely because they make the next review discussion more precise. They become dangerous when a reader starts treating them as if they already established equivalence, root cause, redesign priority, action selection, program choice, or approval.
Problem
Without a named comparative-reading discipline:
- a useful comparative review unit is dismissed as if it were only harmless prose;
- a cautious review aid is over-read as if it already licensed substitution, interoperability, or equivalence;
- a comparative review unit quietly becomes action-selection pressure or hidden hypothesis work while still sounding calm;
- same-entity viewing, explanation rendering, and bounded comparative reading collapse into one fuzzy review bucket;
- ontology-facing target shift or changed EntityOfConcern hides inside comparative wording;
- a review unit written to serve review is mistaken for work or reliance guidance, assurance shorthand, or release authority.
Forces
Solution - comparative review units with bounded comparative reading, escalation, and boundary rules
Engineer-manager-first working use, comparison-unit distinction, and compact specialization definition
The solution opening here follows E.17.ID.CR:4.3's working-model-first discipline.
A solution-side reader first meets the engineer-manager working use and the comparison-unit distinction, then the compact ComparativeReading definition that names the formal comparative read.
That order keeps the governing pattern explicit without making the compact definition a substitute for the working review moment.
Engineer-manager-first use
In plain working terms, this pattern is for a review unit that says something like:
this option write-up foregrounds integration pressure more than that one;these two available source epistemes or source publications are useful together, but they are not yet equivalent;this dashboard view helps triage one contrastive question, but it is not yet a release decision or a root-cause claim;this research synthesis foregrounds uncertainty more than that one, but it is not yet a method choice;this program brief foregrounds continuity risk more than that one, but it is not yet a funding decision.
If that sounds like the review unit you need, keep the comparison unit bounded this way. If instead you are mainly restating source epistemes or source publications, explaining them, opening a new abductive prompt or action-selection question, changing the EntityOfConcern, or making a decision, handle that live work under the FPF pattern or governing FPF pattern and project-side FPF kind and reference named by value before the comparison unit carries the claim.
Pattern, case, and comparison-unit distinction
This pattern presents the ComparativeReading as the active governing pattern inside the broader InterpretationDiscipline family.
The family name marks the wider interpretation zone.
The governing pattern here is narrower and more concrete than interpretation-in-general.
It works over one comparative review unit and only the bounded comparative reading carried by that unit.
The wider review or decision work remains outside the pattern except where neighboring-work boundary or authority limits are needed.
The kind stack should therefore be read explicitly:
- family name =
InterpretationDisciplineas the wider naming-level family; - family-level move class = bounded interpretation work at that wider level;
- governing pattern =
ComparativeReading; - comparison unit = the bounded comparative review unit;
- comparative move = bounded comparative reading over already available source epistemes or source publications;
- wider work = the broader review or decision process that still sits outside this pattern.
The family name is only a naming aid for this specialization. It is not a U.Kind, publication-face kind, publication face, authority reference, or governing-pattern reference; when a record needs a governing pattern, cite E.17.ID.CR ComparativeReading or the more neighboring pattern governing that claim.
In ordinary use the bounded comparative review unit may appear as a short comparison note, comparison sheet, guided review aid, or guided comparative UI. Those are admissible unit forms, not rival comparison units.
This distinction matters because the pattern is not governing reading as such in the abstract and it is not governing the whole review or decision work. It is governing a small, reviewable unit that carries one bounded comparative lift over already available source epistemes or source publications. The pattern does not create a new practical publication-unit family of its own; it tells when such a comparative review unit can stay modest and when a downstream claim or effect or decision-bearing record already belongs to another neighboring pattern governing that claim.
Compact specialization definition
ComparativeReadingis the active governing pattern inside theInterpretationDisciplinefamily.It governs one comparative review unit over already available, source-pinned epistemes or source-pinned publications and carries one bounded comparative reading, or a small set of bounded contrast rows, over that unit.
It stays admissible only while the case preserves the shared review frame, keeps distinct alternatives distinct unless bridge or substitution relation exists elsewhere, keeps the source references visible, keeps the added comparative lift bounded, and does not turn into same-entity viewing, bridge claims, explanation-face governance, prompt-bearing abductive work, ontology-facing reframing, retargeting, or downstream work or reliance authority.
Read this blockquote as the compact governing-pattern reminder. It should stay nearby and early, but not stand in front of the engineer-manager-first use block or the comparison-unit distinction that working readers need first.
Why the comparative-reading specialization needs its own discipline
Teams already produce small comparative review units, often as comparison notes, comparison sheets, or guided review aids, that are more committed than a plain bridge-stance overlay over an existing Bridge Card but still below action selection, ontology reframing, retargeting, or approval guidance. Leaving that middle band unnamed creates two opposite failures: one reader dismisses the review unit as harmless prose, while another over-reads it as if it already carried substitution, action-selection pressure, or action authority.
This pattern gives teams a narrow way to prepare, share, and inspect that comparative review unit without smuggling a downstream claim or effect beyond what the source, bridge stance, and bounded use can honestly carry.
Local working vocabulary
This pattern uses a small local vocabulary for review.
- Comparative review unit = a lightweight review unit such as a short comparison note, small comparison sheet, guided review aid, or guided comparative UI whose explicit job is one bounded comparative reading or a small set of bounded contrast rows under one shared review frame.
- Base governing case = the primary source relation, pattern-governing case, or project work question that is already live before bounded comparative reading is added.
- Reviewed source episteme or source publication = the already pinned or otherwise reviewable source episteme or source publication being comparatively read; in plain terms, the already available source episteme or source publication under review.
- Source references =
sourceAnchorSetorsourceRefsthat make the interpreted source episteme or source publication inspectable. - Shared review frame = the review target, described situation, decision situation, release candidate, method family, control scope, problem frame, or source-set reference that remains preserved while the comparison is made.
- Compared alternative = one distinct option, method, bulletin, strategy, note, view, source episteme, source publication, or project-side FPF kind and reference named by value kept separate under the shared review frame.
- Same
EntityOfConcernRefcase = the special case where the compared sources describe the same entity. This is common, but it is not required when distinct alternatives remain under one shared review frame. - Interpretive lift = the bounded comparative or asymmetry-bearing reading added on top of already available source epistemes or source publications; in a small comparison sheet, each row has its own declared comparison basis while the unit keeps one shared unsupported downstream claim or effect and boundary trigger.
- Bridge Card reference = required
bridgeCardRefwhen the case depends on bridge-mediated correspondence rather than ordinary source reading alone; optionalbridgeStanceRefmay qualify that bridge only after the bridge card exists. - Allowed use = what this review unit may be used for while it remains only a bounded comparative review unit.
- Misuse risk = how the review unit is most likely to be over-read into a bridge, action-selection, ontology, or authority claim that it does not carry.
- Prompt boundary = the explicit
U.AbductivePromptpublication that becomes the governing publication when abductive-prompt or action-selection claim becomes live. - Ordinary minimum block = the smallest ordinary record that keeps the review unit honest for working use.
- Load-bearing extension = the fuller declaration record used when the case sits close to bridge, explanation, abductive, ontology, or authority boundaries.
These terms are local review aids. They inherit the E.17:5.1e local-field rule: they do not create U.Kind, publication-face kind, RelationKind, KindBridge, EvidenceKind, GateDecision, SpeechAct, Commitment, U.Work, authoritySourceRef target, publication face, or project-side FPF kind and reference named by value unless another governing FPF pattern explicitly instantiates that object.
They do not replace source notes, bridge cards, explanation renderings, prompt publications, or gate-bearing source forms.
Their role is to keep a bounded comparative review unit readable without silently upgrading its authority.
Scope and exclusions
In scope
- bounded comparative asymmetry over already declared reviewed source epistemes or source publications;
- reader-facing interpretive caution that stays source-tethered and preserves the shared review frame;
- comparison of distinct alternatives under one shared review target, described situation, release candidate, method family, control scope, problem frame, or source-set reference;
- comparative review units that answer one explicit contrastive question without opening a rival action-selection search;
- bounded user-fit when that fit only limits use rather than widening authority.
Out of scope
- same-entity restatement, conservative rewrite, or representation shift whose main question stays with
A.6.3,A.6.3.CR, orA.6.3.RT; - bridge-stance overlay that only clarifies an already-declared bridge stance over an existing Bridge Card (
F.9.1); - explanation-face use discipline, admissibility, or added-link review on existing faces (
E.17.EFP); - abductive-prompt or action-selection cases (
B.5.2.0orB.5.2); - ontology-facing reframing or changed EntityOfConcern (
OntologicalReframingorA.6.4); - policy, gate, adjudication, assurance, or work-facing use (
A.15,A.20, orA.21).
Working-fit test
Use this discipline only when all of the following hold:
- the reviewed source episteme or source publication is already pinned or otherwise reviewable;
- the review unit adds one bounded comparative or interpretive lift, or a small set of bounded contrast rows with row-level comparison bases;
- the case is still answering a bounded contrastive question rather than selecting an action;
- the shared review frame stays preserved, and compared alternatives remain distinct unless an explicit bridge or substitution source supplies equivalence, substitution, or another named relation between them;
- the main question is not already better described as same-entity viewing, bridge-stance overlay over an existing Bridge Card, or explanation-face use discipline.
If any of those fail, handle the live work under the neighboring FPF pattern and project-side FPF kind and reference named by value that actually govern it.
Nearest neighboring work
Name the base source relation or work question before adding bounded comparative reading. The nearest neighboring work questions should be separated in this order:
- Same-entity rewrite or representation shift. If the project move is still mainly restatement, representation shift, or another same-entity viewing transform, keep it with
A.6.3,A.6.3.CR, orA.6.3.RT. - Bridge-stance clarification. If the review unit only makes an already-declared bridge stance more legible, it stays subordinate to
F.9.1. - Explanation-face use. If the main question is explanation class, face admissibility, or bounded connective prose on an existing face, it stays with
E.17.EFP. - Abductive prompt or action-selection pressure. If open-question pressure or action-selection pursuit becomes live, bounded comparative reading ends and
B.5.2.0orB.5.2governs that work. - Changed EntityOfConcern or decision-bearing use. If continuity witnesses, changed target, decision-bearing consequence, gate, approval, rollout, release, policy, assurance, or adjudication use is needed, the case has already left this discipline for
OntologicalReframing,A.6.4,A.15,A.20,A.21, or another governing FPF pattern and project-side FPF kind and reference named by value.
Working-model first; plain questions first, ordinary minimum second, full declaration third
Most working users should not have to start with a long declaration block.
This pattern therefore follows E.14's working-model-first discipline: the first usable block is a small set of plain questions that helps an engineer-manager keep the review unit bounded to the work it can honestly carry.
The opening of E.17.ID.CR:4.1 follows that same order by value: engineer-manager working use and comparison-unit distinction come first, and the compact ComparativeReading definition stays nearby as a recovery reference rather than a gate before use.
The ordinary minimum block comes next for ordinary use.
The full declaration block remains available as a load-bearing assurance record.
Five plain working questions
The near-top quick working-fit check is the canonical first working block for this pattern. A working user should be able to answer these same five questions before touching the fuller blocks:
- What already available source epistemes or source publications am I comparing?
- What single contrast or small set of contrast rows am I trying to make visible?
- Am I still inside the same shared review frame, with compared alternatives kept distinct when they are distinct, or has the review target already shifted?
- What unsupported downstream reading must the team not take from this review unit?
- What would force this review unit to leave
ComparativeReadingfor explanation, bridge work, prompt work, ontology work, or decision authority?
If these five answers are not visible, the case is not ready to stay here as a bounded comparative review unit.
Ordinary minimum block
For ordinary bounded comparative review units, it is usually enough that the unit or its surrounding review context keeps explicit:
- what reviewed source episteme or source publication is being interpreted;
- where the source references live;
- that the shared review frame remains preserved and that distinct alternatives remain distinct unless another source supplies bridge or substitution relation;
- what exact bounded comparative lift is being added, or which bounded contrast rows are included and what comparison basis each row uses;
- what downstream claim or effect remains unsupported;
- that the default
worldContactPolicyhere is review-only and non-executive; - and what neighboring FPF pattern becomes mandatory if the case crosses that neighboring boundary.
If those minimum answers cannot stay stable across the same note, sheet, or review aid without sliding between reviewed source episteme or source publication, bounded comparative review unit, bounded lift, and outside work, stop here. Repair local lexical-head kind pressure through E.17.AUD.LHR (Local Head Restoration); if the whole review unit still has unstable EntityOfConcern or carried-move reading after that repair, apply E.17.AUD.OOTD (PublicationUnit Primary EntityOfConcern Discipline) before adding more declaration weight.
Ordinary working card
An admissible ordinary comparative review unit should normally let a reader recover these seven rows without opening the heavier fuller declaration:
This working card may live inline in the comparative review unit or in its immediate review context. Read it as the ordinary recovery reference for the near-top working-fit check:
- if rows 1-4 are still unstable because one pressured local lexical head or qualifier is doing too much work, stop and repair that local lexical-head pressure through
E.17.AUD.LHR(Local Head Restoration) before you keep building the comparative review unit here; - if rows 3-7 cannot stay stable because the same review unit still has unstable reviewed-source, comparative-move, or outside-work reading after one honest local repair, apply
E.17.AUD.OOTD(PublicationUnit Primary EntityOfConcern Discipline); - if rows 1-7 stay recoverable over one pinned source slice or source pair, one preserved shared review frame, distinct alternatives where present, and one bounded contrast or small row set,
ComparativeReadingremains the honest primary governing pattern.
The nearest stay-here worked slices for this reading are E.17.ID.CR:5.4.5 through E.17.ID.CR:5.4.6.b.
The nearest stop-and-reopen worked slice is E.17.ID.CR:5.4.6.c.
Move to the load-bearing extension only when one of the boundary, reader-fit, or misuse conditions in E.17.ID.CR:4.3.c becomes true.
ComparativeReading remains primary only while those seven rows stay recoverable and the same review unit is still mainly about one bounded comparative reading, or a small set of bounded contrast rows, over already pinned source epistemes or source publications. If the review unit first needs to restabilize what it is about, what move it carries, and what wider work remains outside, use E.17.AUD.OOTD (PublicationUnit Primary EntityOfConcern Discipline) to stabilize that PublicationUnit question before adding more declaration weight here.
Load-bearing extension guidance
A fuller declaration record becomes warranted when:
- reader-fit is doing real work;
- misuse risk is high;
- the review unit sits close to viewing, bridge, explanation, abductive-prompt, ontology-shift, policy, assurance, gate, release, action-selection, or adjudication boundaries;
- mixed composition with
A.6.3.*orE.17.EFPis load-bearing; - the publication unit still has unstable EntityOfConcern, carried-move, or outside-work reading after local repair;
- or the case would otherwise be too easy to over-read as more committed than a bounded comparative review unit.
The load-bearing extension may inherit already-declared case ids, source pins, and provenance references instead of restating them inline.
When recorded as a load-bearing review unit, that extension normally captures the ordinary minimum block plus any neighboring-pattern fields that remain load-bearing for the mixed case.
Do not answer PublicationUnit instability by stacking more local fields onto the load-bearing extension. If E.17.AUD.LHR (Local Head Restoration) has already repaired the local lexical-head pressure and the same review unit still has unstable reviewed-source, publication-unit, comparative-move, or outside-work reading, stabilize that PublicationUnit question with E.17.AUD.OOTD (PublicationUnit Primary EntityOfConcern Discipline) before deciding how much declaration weight should stay here.
Load-bearing declaration block
When the heavier declaration weight really stays here, the unit should still make at least these fields recoverable:
sourceRelationClassusing the sharedE.17:5.1bvocabulary when the comparison depends on source pointer, source availability or retrieval, source use, source faithfulness, claim recoverability, contradiction, omission, claim widening, added linkage, independent verification, admissible use, forbidden downstream use, or reopen trigger;sourceAnchorSetorsourceRefs;comparativeRelationClass = sameEntityComparisonClass | sharedFrameDistinctAlternativeClass | readerFitComparativeClass;comparisonBasis;addedClaimPolicy;bridgeStanceVisibility;- required
bridgeCardRefplus optionalbridgeStanceRefwhen the case depends on bridge-mediated comparative relation; targetUserModelwhen reader-fit is materially shaping the reading;interactionModewhen the review unit is not just one static comparative sentence;contrastiveQuestionwhen the case is answering a specific contrast;allowedUse;misuseRisk;promptWorthinessThreshold;ontologyBoundaryTrigger;worldContactPolicy;downstreamAuthorityLimit;baseCasePatternwhen the review unit is a mixed case layered overA.6.3.*orE.17.EFP.
sourceRelationClass is only source-relation or claim-admissibility class for the local claim or use. comparativeRelationClass is only the comparative-relation class of this review unit. Neither field is a RelationKind, KindBridge, Bridge Card, bridge relation, bridge stance, semantic identity, equivalence, substitution, evidence relation, gate decision, assurance claim, work relation, commitment, speech act, authority-reference relation, or decision record. The sameEntityComparisonClass value is a special case for comparisons where the compared sources really describe the same entity; it does not assert semantic identity. When the unit compares distinct alternatives, use sharedFrameDistinctAlternativeClass plus distinct alternative refs, and do not treat the alternatives as equivalent or substitutable without bridge relation.
readerFitComparativeClass by itself does not open interpretation. Bounded correspondence wording that starts implying bridge relation is bridge-mediated comparative relation: it requires an explicit bridgeCardRef, or the case applies F.9 or F.9.1 before the comparison unit can carry that bridge-mediated source relation. When cross-context bridge semantics are live, the actual bridge kind and Bridge Card remain governed by F.9. If bridge-mediated reading is live, bridgeCardRef is required and any bridgeStanceRef remains optional and subordinate.
The main comparison question plus the neighboring pattern boundaries still decide the selected FPF pattern or project-side FPF kind and reference named by value.
Interpretant-side block
The interpretant-side fields above do not turn this zone into a full interactive explanation system or a dialog-management system. Their current role is narrower:
- keep bounded comparative reading from pretending it is audience-neutral when it is not;
- make the contrastive question, guided review mode, and allowed use visible;
- and stop interpretation prose from quietly becoming prompt-bearing guidance, assurance shorthand, or policy pressure.
Static note versus interactive aid
Use two comparison-relation forms.
- Static comparative review note. A static note, sheet, or short review unit normally needs only the reviewed source episteme or source publication set, source references,
E.17:5.1bsource-relation class when source relation is disputed, comparison basis, bounded lift, unsupported downstream claim or effect, world-contact limit, and boundary trigger. Do not import interactive-explanation vocabulary into this ordinary case. - Interactive comparative aid. Add
targetUserModel,interactionMode, state or history needed for the live comparison,misuseRisk, and admissible-use boundary only when the aid is actually interactive, stateful, adaptive, or user-model-bearing. These fields still do not authorize prompt selection, action selection, gate use, work or reliance, or approval; they only keep the interactive comparative aid from being mistaken for audience-neutral static prose.
A comparative review unit may expose or cite source epistemes, source publications, or project-side FPF kinds and references named by value being compared. It does not become those source epistemes, source publications, project-side FPF kinds and references named by value, a bridge card, a gate decision, or a work or reliance source by table layout, fluent contrast, side-by-side placement, or guided-review reuse. If the required source relation is missing, the repair request or source-gap note is prospective only; it does not backdate a source relation into the earlier comparison.
Comparative-reading identity over revision. A revised comparison table, regenerated comparison note, or updated guided review aid is not the same comparative reading merely because the layout, title, or compared-source family stayed familiar. If new source input, revised source references, changed comparison basis, changed shared review frame, or changed unsupported downstream claim or effect is live, publish the preserved comparative frame and the changed claims, or treat the result as a new comparative review unit before it is used for recommendation, selection, decision, gate, bridge, work, or reliance claims.
Representation ontology and modeling lens (informative)
The early canonical lens for this pattern is already stated near the top: one comparative review unit over already available, source-pinned epistemes or source-pinned publications, with the shared review frame preserved, one bounded contrast or small row set made visible, and unsupported downstream claim or effect kept outside.
This informative note only unpacks that same lens. It does not introduce a second one.
This pattern does not model interpretation in general.
It models the ComparativeReading as the active governing pattern inside the broader InterpretationDiscipline family.
In plain terms, the pattern works over the review unit itself.
That unit may appear as a comparison note, comparison sheet, or guided review aid, but it is not the whole review process, it is not the source system, and it is not the hidden act of reading in the abstract.
The bounded comparative reading is the interpretive lift carried by that review unit.
The minimum typed lens is a compact record of:
- source references and source relation;
- one declared source-relation class;
- one declared comparison basis and added-claim policy;
- one allowed-use boundary, one misuse-risk line, and one
worldContactPolicythat remains subordinate toA.20orA.21when gate or adjudication claim appears; - the relevant prompt, ontology, and authority boundary triggers;
- and which neighboring pattern still governs the base case when this remains a mixed overlay.
That lens is intentionally modest. It keeps the main read tied to the review unit and the problem-owning review domain, while leaving source, continuity, and boundary discipline under whichever neighboring pattern still governs the base case. This pattern therefore does not create a rival bridge taxonomy, a rival base-case discipline, or a publication with named authority-reference relation of its own.
Working read-out
A working reader should be able to say, in one short paragraph:
- what reviewed source episteme or source publication is being comparatively read;
- what bounded interpretive lift is being added;
- what shared review frame remains preserved, and, in the special same-EntityOfConcern case, why the same
EntityOfConcernRefremains preserved; - which neighboring pattern carrying bridge, prompt, ontology, action, gate, adjudication, authority, or downstream claim is still not yet active;
- and what neighboring-pattern boundary would become mandatory if the case were read as carrying a bridge, prompt, ontology, action, gate, adjudication, authority, or downstream claim.
If that read-out becomes fuzzy, the review unit is no longer bounded enough to stay here and should be narrowed, clarified, or moved under the governing neighboring pattern.
Branch-discipline summary
This section is the compact governing-rule summary for ComparativeReading inside the Core.
It keeps the ComparativeReading governing rule recoverable for ordinary users and engineer-manager-first review.
In mixed cases, the neighboring pattern discipline still remains primary where the base case really belongs to A.6.3.*, F.9.1, or E.17.EFP.
Use the fuller solution, boundary table, worked slices, and relations section here when exact clause wording, full field set, or full reopen conditions matter. Keep this pattern to these summary rules.
- Preserve the shared review frame.
Keep the review target, described situation, decision situation, release candidate, method family, control scope, problem frame, or source-set reference visible; keep distinct alternatives distinct unless bridge or substitution relation exists elsewhere; keep source references and one declared comparison basis per contrast row visible; keep
contrastiveQuestionexplicit when it is doing real review work. - Keep the lift bounded and comparative. The review unit may add a bounded comparative or asymmetry-bearing reading, but it may not quietly intensify into theory claim, bridge licence, prompt-opening pressure, explanation governance, ontology shift, or a decision, gate, action, approval, rollout, release, policy, assurance, adjudication, bridge, prompt, or ontology-shift claim.
- Name the base source relation or work question. If the main question is really same-entity rewrite, bridge-stance overlay over an existing Bridge Card, explanation-face work, prompt opening, ontology reframing, retargeting, or a decision, gate, action, approval, rollout, release, policy, assurance, adjudication, bridge, prompt, or ontology-shift claim, this pattern should not stay primary.
- Keep neighboring patterns for downstream claims explicit.
Bridge-mediated comparative relation still requires explicit
bridgeCardRef; optionalbridgeStanceRefmay qualify only an existing bridge card. Prompt-worthy cases publishU.AbductivePrompt; ontology-shift claims applyOntologicalReframingorA.6.4; action, gate, or adjudication use appliesA.15,A.20,A.21, or another governing FPF pattern and project-side FPF kind and reference named by value. If the primary question is reduced-use source rendering rather than bounded comparison, applyA.6.3.CSC Controlled Semantic Coarsening. - Keep reader-fit bounded.
targetUserModel,interactionMode,contrastiveQuestion,allowedUse, andmisuseRiskmay be stated when they are doing real work, but they do not authorize coaching, prompt selection, action selection, policy guidance, or an authority claim that the unit does not carry.
Neighboring-work boundary glance
This table is a compact boundary aid for separating the comparative review unit from neighboring project work and source requirements. For a fuller mixed-case read, read this table together with the neighboring pattern discipline.
For first-minute use, read the four boundary rows around the comparative-reading case itself as a compact mirror of the near-top working-fit check and the ordinary working card:
- pressured local lexical head ->
E.17.AUD.LHR(Local Head Restoration); - stable same-object comparative review unit -> stay with
ComparativeReading; - same unit still unstable after local repair ->
E.17.AUD.OOTD(PublicationUnit Primary EntityOfConcern Discipline); - neighboring pattern for bridge, prompt, ontology, action, gate, adjudication, authority, or downstream claim already primary -> move out of this pattern.
If the comparison unit is already carrying neighboring work, use the boundary rows first and then read
E.17.ID.CR:5.4.7throughE.17.ID.CR:5.4.10as the nearest worked boundary examples.
Ordinary working order for the card
The shortest ordinary working order is:
- name the base source relation or work question if the case is mixed;
- pin the reviewed source episteme or source publication and make the shared review frame plus any distinct alternatives visible;
- state the bounded comparative lift, or the small set of contrast rows and their row-level comparison bases, in compact form;
- declare the unsupported downstream claim or effect and the review-only and non-executive world-contact limit;
- name the boundary trigger that would end interpretation.
That five-step order is not a second ordinary working card, and it is not a canonical review process. It is only one local working aid for this pattern.
It is the shortest way to recover the seven-row ordinary working card in E.17.ID.CR:4.3.b.a.
In ordinary use, publish the resulting seven-row card in compact form rather than a heavier load-bearing declaration block whenever boundary pressure still stays low.
If the seven-row working card still cannot be completed plainly through that order, the review unit is not yet ready to stay here.
If the note, sheet, or review aid first has to answer what it is about, what move it is carrying, and what wider work remains outside, stabilize that PublicationUnit question with E.17.AUD.OOTD (PublicationUnit Primary EntityOfConcern Discipline) before continuing comparative-reading work.
Archetypal grounding
Worked-slice status. Read the system case, episteme case, and boundary-bank cases as a heterogeneous example bank, not as one recommended progression. They show different admissible outcomes for the same governing pattern: some cases stay small and stop, some stay mixed with a neighboring pattern, and some reopen or apply another governing pattern when outside observations, environmental change, or downstream constraints change what the comparative review unit can honestly carry.
Tell
ComparativeReading names the bounded middle band where a team needs to prepare one explicit comparative reading over source epistemes or source publications with already declared references without yet opening prompt-selection work, action-selection work, ontology-facing reframing, gate, approval, rollout, release, policy, assurance, adjudication, or source-reliance use.
The comparison unit is the bounded comparative review unit.
That review unit must stay modest enough that a reviewer can still see the same EntityOfConcernRef, the declared comparison basis, the unsupported downstream claim or effect, and the boundary trigger that would end interpretation.
Show (System)
Source slice. Two pinned operating notes describe the same service episode from different operational responsibilities.
One note has its source reference in the maintenance log, the other in the continuity dashboard for the same declared episode and the same EntityOfConcernRef.
Comparative review unit. Under the declared comparison basis, the maintenance note foregrounds operator-induced variance, while the continuity note foregrounds buffer-sensitive drift; each view exposes a blind spot in the other without granting direct substitution.
Why this stays here.
- source relation and source references are explicit;
- the same
EntityOfConcernRefremains preserved; - one bounded comparative lift is added;
- no substitution licence is added;
- no rival action-selection question is yet being asked.
Show (Episteme)
Source slice. Two pinned analytic renderings over the same evidence set are already available for review.
One rendering is a SourceLinkedExplanationReconstruction on a TechCard face; the other is a compact comparison sheet that preserves the same evidence set and the same described operational episode.
Comparative review unit. For maintenance reviewers, the reconstruction foregrounds operator load more than the comparison sheet, while the comparison sheet foregrounds recovery sequencing more than the reconstruction; this difference is useful for review, but it is not yet a design recommendation or an action-selection claim.
Why this stays here.
- the base-case governing patterns remain identifiable;
- the comparative lift is explicit and bounded to one reviewer task;
- explanation-face governance and same-entity transform discipline remain with their neighboring patterns;
- approval, rollout, release, gate, policy, assurance, or adjudication use, and prompt-bearing action-selection pressure remain negative.
Boundary bank
Lower-boundary bridge-stance overlay case
Bridge-stance overlay unit. The existing Bridge Card relates the local maintenance-pressure term to the partner continuity term; this overlay says the relation should be read as asymmetry-explicating rather than substitution-friendly.
Why it stays under F.9.1:
- the bridge stance is already declared;
- the review unit only makes that stance more legible;
- no bounded interpretive lift beyond the bridge-stance overlay is added.
Mixed primary-pattern composition with A.6.3.RT
Base-case rendering. A same-entity comparison sheet retabulates one pinned incident note into columns for trigger, pressure, and recovery.
Comparative review unit. In the retabulated view, the recovery column makes the operator-induced asymmetry easier to inspect than the trigger column, but the table should not be read as establishing a new causal hierarchy.
Why this remains mixed rather than collapsing:
A.6.3.RTstill governs the base representation shift;- bounded comparative reading is secondary and only adds a bounded comparative lift;
- most restrictive forbidden-use constraint wins, so no new ontology or gate reading is licensed.
Mixed primary-pattern composition with E.17.EFP
Base-case rendering. A TechCard-face explanation rendering is already classified as SourceLinkedExplanationReconstruction and publishes a bounded connective policy.
Comparative review unit. For maintenance reviewers, this rendering foregrounds the difference between operator load and throughput pressure more than the original prose, but it should not be read as a design-level recommendation.
Why this stays mixed rather than collapsing:
E.17.EFPstill governs explanation class and face admissibility;- bounded comparative reading only adds bounded comparative use for one reviewer task;
- the review unit still does not own explanation-face governance, approval, rollout, release, gate, policy, assurance, or adjudication use.
Guided review aid with bounded interaction mode
Source slice. A reviewer UI presents two already pinned source notes side by side for the same described operational episode.
Guided comparative review unit. Question: which note foregrounds variance introduced by operator timing rather than environmental drift? Allowed use: bounded comparative triage only. Misuse risk: do not treat this aid as action selection or release guidance.
Why it stays here:
- the interaction mode is explicit but still bounded;
- the review unit answers one contrastive question rather than opening prompt pursuit or action-selection pursuit;
- allowed use and misuse risk are visible instead of being smuggled into interface tone.
Product and design-review comparison case
Source slice. Two already available design-review notes describe the same integration boundary for the same planned release. One note foregrounds coupling and rollback pressure; the other foregrounds delivery simplicity and lower immediate implementation cost.
Comparative review unit. For architecture review, the first note foregrounds coupling risk more than the second, while the second foregrounds delivery speed more than the first; that asymmetry is useful for discussion, but it is not yet a recommendation to choose either option.
Working-boundary reading. This is the ordinary stay-here case: one honest local repair and one publication-unit stability check would already leave the review unit stable enough that the bounded comparative review move itself stays primary.
Why it stays here:
- the same planned release remains the
EntityOfConcernRef; - one bounded comparative lift is made explicit for a declared review task;
- the unit helps design discussion without quietly becoming action selection or approval.
Compliance and release-review comparison case
Source slice. An internal control checklist and a vendor compliance bulletin are already available for the same release candidate and the same declared control scope.
Comparative review unit. For release review, the vendor bulletin foregrounds protocol conformance more than rollback evidence, while the internal checklist foregrounds rollback evidence more than protocol conformance; this comparison helps frame the review, but it is not yet a release gate or equivalence claim.
Working-boundary reading. This is the same stay-here case under a release or compliance load: the comparison unit is already stable enough, so the primary question is the bounded contrast rather than local repair or PublicationUnit stabilization.
Why it stays here:
- the comparison basis is explicit and bounded to one review task;
- the source references remain visible and the same release candidate stays in view;
- the review unit helps an engineer-manager see a review asymmetry without laundering gate authority.
Research-review comparison case
Source slice. Two already available research syntheses discuss the same measured phenomenon and the same declared evidence slice. One synthesis foregrounds variance decomposition limits more; the other foregrounds protocol repeatability more.
Comparative review unit. For method review, the first synthesis foregrounds uncertainty-handling limits more than the second, while the second foregrounds repeatability evidence more than the first; this asymmetry helps frame the discussion, but it is not yet a method choice or a claim that one synthesis is globally better.
Why it stays here:
- the same measured phenomenon remains the
EntityOfConcernRef; - the comparative lift is bounded to one review task;
- the unit helps research discussion without quietly becoming action selection or ontological reframing.
Program and cultural-review comparison case
Source slice. Two already available programme briefs discuss the same continuing initiative and the same declared participation scope. One foregrounds continuity of community engagement more; the other foregrounds short-term event visibility more.
Comparative review unit. For programme review, the first brief foregrounds participation continuity more than the second, while the second foregrounds short-term visibility more than the first; this comparison helps frame the discussion, but it is not yet a funding, curation, or programme-direction decision.
Why it stays here:
- the same initiative remains the
EntityOfConcernRef; - the comparison basis is explicit for one declared review task;
- the unit helps programme discussion without laundering decision authority.
Exogenous-change stop-and-reopen case
Source slice. An internal release-review comparison sheet already compares one control checklist and one vendor bulletin for the same declared release candidate and the same control scope. Mid-review, an external incident bulletin arrives and changes the live rollback assumptions for that same candidate.
Initial comparative review unit. Before the new bulletin, the vendor bulletin foregrounds protocol conformance more than rollback evidence, while the internal checklist foregrounds rollback evidence more than protocol conformance; this comparison frames the review, but it is not yet a release gate or equivalence claim.
Working-boundary follow-through. This case begins on the same admissible stay-here case as E.17.ID.CR:5.4.6, but outside observation then changes the declared comparison basis, so the unit must stop and reopen instead of being carried forward by inertia.
Why this must stop and reopen.
- the new outside observation changes the declared comparison basis;
- the previous bounded comparison may remain traceable, but it cannot continue by inertia as if the same live review conditions still held;
- the admissible next move is either to restate a fresh comparative review unit over the new declared basis or to apply a neighboring governing pattern if downstream gate or authority question has now become primary.
Lighter comparison note with source-return discipline
Source episteme and source publication set. A release team already has the full internal rollback worksheet, vendor bulletin, and incident-note bundle for one release candidate. A short comparison note is then prepared for the daily review stand-up.
Comparative review unit. For today's review, the vendor bulletin foregrounds protocol conformance more than rollback evidence, while the internal rollback worksheet foregrounds rollback evidence more than protocol conformance; this short note is only a review aid over the same release candidate, and the full source episteme or source publication set remains primary for any bridge, release, coarsening, or work or reliance reading.
Why it still stays here:
- the comparison unit is still one bounded comparative review unit, not a replacement for the source episteme or source publication set;
- the note remains source-pinned through the already available source episteme or source publication set and openly forbids bridge, gate, or work or reliance use that it does not carry;
- any attempt to treat the short note as enough for equivalence, release approval, execution claim or effect, or a reduced-use source substitute requires source-bearing return,
A.6.3.CSC Controlled Semantic Coarsening, or another neighboring pattern.
Functional versus constructive-description comparison
Source slice. A functional-description publication and a constructive publication or product-description publication describe the same pumping skid. The functional description foregrounds flow relation and method-selection relation; the constructive description foregrounds module composition and installed equipment.
Comparative review unit. For design review, the functional description foregrounds what the skid is supposed to do in the declared flow relation, while the constructive description foregrounds what parts are present. This contrast helps the engineer keep function and construction separate, but it is not a module-equivalence claim, a performed-work record, or a gate decision.
Why it stays here:
- both source publications keep source references and remain inspectable;
- the same pumping skid remains the
EntityOfConcernRef; - the bounded comparative lift is the function-versus-construction contrast for one review task;
- module equivalence, work occurrence, evidence, and gate claims remain non-admissible downstream uses.
Method-option comparison without method choice
Source slice. Two method descriptions are already pinned for the same fabrication task. One foregrounds lower setup cost; the other foregrounds tighter result-measurement discipline.
Comparative review unit. For method review, method M-1 foregrounds lower setup cost more, while method M-2 foregrounds result-measurement discipline more. This comparison helps prepare method discussion, but it is not yet the selected method, not a work plan, and not evidence that either method has been performed.
Why it stays here:
- the reviewed source epistemes are pinned;
- the comparison basis is explicit;
- no selected-method, work-plan, performed-work, evidence, or engineering-justification claim is added;
- if the team chooses a method or prepares a work plan, record the selected method as project
U.Method, record the work plan asU.WorkPlanunderA.15, and useA.15.1only when a datedU.Workoccurrence is live.
Nearest neighboring-work examples. The next four cases are the nearest worked boundaries for prompt pressure, same-entity viewing, ontology shift, and gate or authority misuse. Use them when the near-top negative-boundary rows fit and you need one worked cue for keeping the comparison unit from carrying outside work.
Upper-boundary prompt-bearing case
Prompt-bearing review unit. This contrast raises the question whether both systems are being constrained by the same hidden gating variable, so we should open a prompt around that shared control possibility.
Why ComparativeReading no longer governs:
- abductive-prompt or action-selection claim has become live;
- the review unit is now prompt-bearing rather than only interpretive;
- the selected governing target is
B.5.2.0orB.5.2through explicitU.AbductivePromptpublication.
Same-entity viewing boundary case
Viewing rendering. The source note is retabulated into a compact comparison sheet that preserves the same claims and entity but makes pressure, trigger, and recovery fields easier to inspect.
Why it does not enter interpretation:
- the main question is representational reshaping rather than comparative reading;
- no bounded asymmetry or interpretive claim is added;
- the more precise governing pattern is
A.6.3.RT.
Ontology-boundary anti-case
Ontology-pressuring review unit. The older maintenance note and the new field-observation note are best read as two observational cuts over the same latent failure mode, so we should recast both under a new operational kind and treat the source labels as legacy labels.
Why ComparativeReading no longer governs:
- the case is now asking for a same-referent interpretation with continuity-witness demand or retargeted-EntityOfConcernRef interpretation;
- continuity witnesses would now be needed;
- bounded comparative interpretation is no longer enough, so the case applies
OntologicalReframing.
Authority and gate misuse anti-case
Authority-pressuring review unit. Because this comparison consistently foregrounds the safer operating condition, reviewers may use the review unit directly as a release gate and do not need the underlying source episteme or source publication during triage.
Why ComparativeReading no longer governs:
- the review unit is being over-read as gate-facing authority;
- the bounded comparative reading has become a substitute for the source episteme or source publication;
- the selected governing target moves toward
A.15,A.20,A.21, policy, assurance, release, adjudication, or another governing FPF pattern rather than staying in interpretation.
Invalid publication and repair example
Invalid review unit. These two views describe the same entity for current operations, so the team can use whichever wording is easier.
Why it is invalid here:
- no source references are visible;
- bridge-mediated comparison is being implied without explicit bridge declaration;
- unsupported substitution and authority claims are being smuggled in through soft phrasing.
Minimal repair. Under bridge card BC-12 and the stated comparison basis, both notes foreground the same operator-timing concern for this review task, but they are not substitution-equivalent and the source episteme or source publication set remains primary.
What the repair does:
- restores the source references and bridgeCardRef;
- narrows the claim back to bounded comparative reading;
- reasserts the unsupported downstream claim or effect.
Bias-Annotation
Lenses tested: Gov, Arch, Onto and Epist, Prag, Did.
Scope: bounded comparative review units governed under the ComparativeReading governing pattern inside InterpretationDiscipline, not a universal claim about all review or publication forms.
This pattern intentionally biases toward bounded comparative reading and away from hidden bridge inflation, explanation laundering, ontology shift, action-selection pressure, and hidden policy, assurance, gate, release, or adjudication claims. The main mitigations are explicit primary-governing-pattern naming, visible source references, explicit interpretant-side boundedness, explicit unsupported downstream claim or effect, explicit comparison-unit surfacing, and hard boundaries to bridge, abductive-prompt, ontology-reframing, retargeting, policy, assurance, gate, release, action-selection, and adjudication patterns. Under the governance lens, the pattern is deliberately conservative: it helps a user prepare or review a bounded comparative review unit without letting that unit quietly become policy, assurance, gate, or action authority.
Conformance Checklist
A conformance check is retained only if it changes the next admissible use of the comparative review unit, blocks a concrete overclaim, or preserves a source reference or reopen condition needed for the declared admissible use.
Use ID.CR-Core for ordinary comparison notes. Conditional rows open only when the note touches neighboring-pattern relation, bridge declaration, or reader-fit fields. For fuller mixed-case read, read this checklist together with the neighboring pattern discipline and the boundary conditions gathered in this section.
Assurance recovery note. Read this checklist as a heavier read-back of the already-declared ComparativeReading governing rule, not as a second rule list. If a row cannot be recovered through the ordinary seven-row card, the nearest worked slices, or the practical safeguards already named in the pattern, the case is not yet stable enough to rely on checklist prose alone.
ID.CR-Core ordinary checks
- CC-ID-1 - Bounded comparative review unit is explicit. The pattern makes clear that the comparison unit is a bounded comparative review unit rather than the whole review or decision work or a hidden mental act.
- CC-ID-2 - Source references and comparison basis are explicit. A reviewer can see what already-fixed source episteme or source publication is being read and what declared comparison basis or contrast is carrying the lift.
- CC-ID-3 - The lift stays bounded. The pattern keeps the comparative claim visibly narrower than bridge licence, explanation governance, prompt opening, ontology shift, or guidance carrying approval, gate, release, policy, assurance, adjudication, or authority-reference claim.
- CC-ID-6 - Neighboring-pattern boundaries stay visible. Prompt-worthiness, ontology-shift claim, or action, gate, approval, rollout, release, policy, assurance, or adjudication use leads to an explicit neighboring FPF pattern rather than staying hidden inside comparative prose.
- CC-ID-8 - The review unit does not over-claim authority. The unit is still review-only and non-executive and does not present itself as substitution licence, gate guidance, or action authority.
ID.CR-Conditional checks
- CC-ID-4 - Base-case governing-pattern relation is explicit.
A reviewer can tell why the case does not really belong to
A.6.3.*,F.9.1,E.17.EFP,B.5.2(.0),OntologicalReframing, orA.6.4. - CC-ID-5 - Bridge declaration does not hide.
If bridge-mediated comparative relation is live,
bridgeCardRefis required; optionalbridgeStanceRefremains visible and subordinate to that existing bridge card. - CC-ID-7 - Reader-fit stays bounded.
targetUserModel,interactionMode,contrastiveQuestion,allowedUse, andmisuseRiskare visible when needed, but they do not open an authority claim that the unit does not carry.
Checklist recovery map. If an assurance-side reader needs to cash one checklist row out by value, use the nearest ordinary card row and worked recovery below before treating the checklist as self-sufficient:
Common Anti-Patterns and How to Avoid Them
Consequences
- The middle band between bridge-stance overlay over an existing Bridge Card and prompt-bearing abduction becomes reviewable rather than rhetorical.
- Reviewers get a cleaner way to distinguish comparative interpretation from same-entity viewing, explanation rendering, ontology shift, approval, rollout, release, gate, policy, assurance, and adjudication use.
- Authors pay a small extra declaration weight, but the gain is fewer hidden neighboring-pattern boundary mistakes and less comparison-unit instability.
- Guided comparative review units become easier to prepare honestly because allowed use, misuse risk, and world-contact limits can be declared without pretending that the unit already carries a broader guidance claim than it really does.
- Users get an admissible way to keep bounded comparative review units modest: the unit can stay useful while its comparative reading remains below the boundary threshold for prompt publication, ontology-facing reframing, or gate-facing guidance.
Rationale
Teams already write small comparative review units, often as comparison notes or sheets, to move a review forward. What they usually lack is a disciplined way to keep that unit useful without letting it silently become an equivalence claim, a hidden hypothesis, a redesign push, or a release decision.
This pattern exists to protect that everyday bounded-comparison use. It keeps a comparative review unit usable by making five entries visible enough to inspect: the bounded comparative review unit, the source references, the bounded comparative lift, the unsupported downstream claim or effect, and the boundary trigger that would end interpretation. The gain is practical: a team can compare available source epistemes or source publications honestly without pretending that a helpful review unit already carries more authority than it really does.
SoTA Alignment: Adopted And Adapted Invariants And Rejected Shortcuts
SoTA alignment rule. Read each row here as source idea -> local FPF invariant -> practical local test -> popular shortcut rejected. A source citation governs nothing by reputation; it counts only when the cited idea is translated into the Solution, conformance checks, boundary rules, worked slices, and Relations of this pattern. Assurance recovery note. Read each row here as a heavier confirmation of one already-declared ComparativeReading governing rule. If a row cannot be recovered through the ordinary card, the interpretant-side block, the quick boundary corridor, or the nearest worked slices, do not let the citation carry the pattern by itself.
Traditions covered. This pattern binds itself to architecture-description governance, explainable-AI review discipline, interactive explanation-system practice, and design-space anti-scalarization practice. These rows are selected because they discipline recurrent review work in the problem-owning domains named in the case bank; they are not a decorative literature collage added after the governing pattern was chosen.
Row 1. The ISO row matters because this pattern is governing reviewable comparative units, not free comparative commentary. The pattern adopts the explicit-structure lesson directly: comparison basis, source references, and boundary rules must stay visible enough that a reviewer is not forced to infer the real comparison question from tone alone. Ordinary recovery: read the Reviewed source, Source references, and Bounded lift rows together before leaning on the citation. Engineer-manager payoff: a comparison note can help a review meeting move faster without being mistaken for a free-form equivalence judgement. Case linkage: see E.17.ID.CR:5.4.5, E.17.ID.CR:5.4.6, and E.17.ID.CR:5.4.6.a.
Row 2. The NIST row matters because this pattern is not really audience-neutral even when the review unit looks small. The pattern therefore adapts user-meaningfulness and knowledge-limit practice into explicit interpretant-side fields, while rejecting any move that would let those fields replace source or pattern discipline. Assurance recovery: keep those fields subordinate to the ordinary card and unsupported downstream claim or effect rather than letting them stand alone. Engineer-manager payoff: the note can be written for a real audience and task without pretending it is safe for every audience and every downstream use. Case linkage: see E.17.ID.CR:5.4.4, E.17.ID.CR:5.4.6, and E.17.ID.CR:5.4.6.b.
Row 3. The interactive-system row matters because bounded comparative aids can become more directive than static prose without crossing into a full new governing pattern of their own. The pattern adapts only the minimal architectural lesson it needs: if interaction mode is load-bearing, that fact must be explicit and must still stop before prompt, ontology, or authority escalation. Assurance recovery: read that pressure through the interaction fields plus the prompt and authority boundary rows rather than treating the source citation as a licence for action selection, coaching, prompt selection, approval, or other downstream guidance. Engineer-manager payoff: a guided comparative UI can stay useful for review without silently becoming coaching, prompt selection, action selection, or approval machinery. Case linkage: see E.17.ID.CR:5.4.4 and E.17.ID.CR:5.4.7.
Row 4. The faithfulness row matters because a comparative review unit can sound careful while still smuggling bridge, prompt, or authority claims. The pattern adopts the demand for explicit grounding, but rejects any shortcut where plausible comparative prose is treated as if it were already a semantic or operational licence. Ordinary recovery: use the Unsupported downstream claim or effect and World-contact limit rows before letting polished prose win the argument by tone. Engineer-manager payoff: polished prose is no longer enough to overrule the underlying source episteme or source publication set or to sneak in a decision claim. Case linkage: see E.17.ID.CR:5.4.6, E.17.ID.CR:5.4.9, E.17.ID.CR:5.4.10, and E.17.ID.CR:5.4.11.
Row 5. The anti-scalarization row matters because a comparison sheet often becomes a ranking by layout, sort order, or score aggregation before anyone states a decision. The pattern adapts only the design-space lesson it can honestly use: keep non-scalar trade-offs, row-level comparison bases, and visible ordering bases inspectable. It rejects any move where a benchmark table, Pareto label, or sorted order becomes equivalence, recommendation, method choice, gate passage, or decision authority. Ordinary recovery: read Bounded lift, Unsupported downstream claim or effect, and Boundary trigger before accepting any ordering as more than a review aid. Engineer-manager payoff: the team can compare alternatives without a quiet scalar score deciding the work. Case linkage: see E.17.ID.CR:5.4.5, E.17.ID.CR:5.4.6.e, and E.17.ID.CR:5.4.6.f.
Relations
- Naming-level family:
InterpretationDisciplinenames the wider interpretation family for this governing pattern. - Governing pattern:
ComparativeReadingover comparative review units. - Inherited dynamic frame:
C.2.2aandA.16.0, where what moves is a lineage of successiveU.Epistemepublications overU.CharacteristicSpace. - Comparative-review-unit and carrier use: the comparative review unit is one working review unit that may be carried by an admissible E.17 publication-face kind value
publication face/formover that inherited frame; it is not the moving lineage itself, not a carrier, and not the whole review or decision work. - Builds on:
C.2.2a,A.16.0,F.9,F.9.1, Part F,A.6.9, andE.14. - Mixed-case dependency rule: in mixed cases, this pattern stays subordinate to whichever neighboring pattern still governs the base case (
A.6.3.*,F.9orF.9.1, Part F withA.6.9, orE.17.EFP), including that pattern's source, continuity, bridge, wording-repair, and boundary constraints. - Primary rule here: this section carries the summary, checklist, worked slices, and boundary block for
ComparativeReading; mixed-case neighboring pattern rule remains primary where the base case still belongs elsewhere. - Repair-only neighbors when local instability is real: use
E.17.AUD.LHR(Local Head Restoration) when lexical-head kind or qualifier pressure is still local; useE.17.AUD.OOTD(PublicationUnit Primary EntityOfConcern Discipline) when the same review unit still has unstable reviewed-source, publication-unit, comparative-move, or outside-work reading after local repair. These neighboring patterns are not always-on prerequisites for ordinaryComparativeReadinguse. - Coordinates with:
A.6.P,A.6.3,A.6.3.CR,A.6.3.RT,A.6.3.CSC,F.9,F.9.1, Part F,A.6.9,E.17.EFP,B.5.2.0,B.5.2,OntologicalReframing,A.6.4,C.11,A.15,A.15.4,A.20,A.21. - Nearest neighboring FPF patterns for outside work:
A.6.P,A.6.3.*,F.9orF.9.1, Part F withA.6.9,E.17.EFP,C.11, andB.5.2.0orB.5.2. - Main neighboring-pattern boundaries: relation-precision claims apply
A.6.P; sameness, equivalence, alignment, mapping, substitutability, interchangeability, or attribute, entity, or profile matching across contexts applies Part F andA.6.9and, when bridge relation is live,F.9orF.9.1; abductive-prompt claim appliesB.5.2.0orB.5.2; ontology or changed-target claim appliesOntologicalReframingorA.6.4; decision-making claims and decision records applyC.11; downstream work or reliance, gate, assurance, and adjudication claims applyA.15.4,A.15,A.20, orA.21. - Boundary notes: same-entity transform rule stays with
A.6.3.*; bridge-stance overlay stays withF.9.1over an existingF.9Bridge Card; "same", "equivalent", "align", or "map" wording repair and attribute, entity, or profile mismatch repair stay with Part F orA.6.9; explanation-face governance stays withE.17.EFP; reduced-use source-pinned renderings with narrower admissible use, non-admissible downstream use, and reopen discipline applyA.6.3.CSC Controlled Semantic Coarsening; bounded comparative reading does not by itself authorize downstream use it does not carry. - Non-goal: this pattern does not create a rival publication with named authority-reference relation, a rival bridge taxonomy, a rival sameness or equivalence repair pattern, or a rival base-case discipline of its own.
C.29 mathematical-lens use relation
When a bounded comparative review unit uses a mathematical comparison basis, rival lens, invariant, obstruction, or structural similarity,
E.17.ID.CRstill works over comparison unit, viewpoint, basis, review-unit boundary, and comparative-reading admissibility. The applicableC.29output for the stated use (MathLensUse.LensCandidateNote,MathLensUse.OneLine,MathLensUse.MiniCard, orMathLensUse.FullCardwhen required) may be cited only for adequacy of the mathematical lens used in that comparison. It does not create the comparison record, adjudicate rival publications, or authorize bridge, evidence, selector, or benchmark claims outside the comparative-reading record.
E.17.ID.CR:End
PublicationUnit Stability Discipline - keep one publication unit stable enough to read honestly
Placement. First publication-unit stability pattern for publication units whose active problem must be handled by one existing governing FPF pattern or by one project-side record or publication whose governing FPF pattern is named: local lexical-head repair, whole-unit primary-EntityOfConcern stabilization, bounded comparison, or a neighboring non-publication-unit pattern.
Builds on. C.2.2a, A.16.0, A.7, E.10, F.18, E.14, E.19.
Coordinates with. E.17.AUD.LHR, E.17.AUD.OOTD, E.17.ID.CR, E.17.EFP, A.6.3, A.6.3.CR, A.6.3.RT, A.10, A.15, A.15.4, B.3, A.20, A.21.
Plain-name. Keep one publication unit stable enough to read honestly.
One-line summary. PublicationUnit Stability Discipline is the first stability discipline for notes, memos, sheets, tables, screens, and short sections whose primary-EntityOfConcern interpretation, carried publication move, or outside boundary to work, work planning, decision, gate, or reliance claim has become unstable while the unit still looks unchanged. It helps the reader decide whether the honest next repair is local lexical-head repair, whole-unit primary-EntityOfConcern stabilization, bounded comparison over already stable source publications, or leaving the publication-unit stability family for a neighboring non-publication-unit pattern.
Primary EntityOfConcern discipline. Publication-unit stability uses primary EntityOfConcern as the plain head and routes claim-bearing cases to publicationUnitPrimaryEntityOfConcern when the bounded unit exposes a U.Episteme or episteme-lane U.View. When no claim-bearing episteme or episteme-lane view is live, the pattern names the non-claim-bearing kind named by value, topic, or subject without creating a false EntityOfConcernRef.
Publication unit under review in plain terms. The publication unit under review is the publication unit itself: one note, memo, sheet, table, screen, or short section that people are expected to read as one readable unit. When the unit carries or exposes a claim-bearing episteme or episteme-lane U.View, the primary EntityOfConcern is the EntityOfConcern value of that carried item. When no claim-bearing episteme or episteme-lane view is live, do not invent a EntityOfConcernRef; name the non-claim-bearing kind named by value, or use plain topic or subject only in non-normative explanatory prose. Keep those relations separate: this pattern keeps the unit stable as a readable unit, while the whole-unit repair pattern checks whether that unit still keeps one stable primary EntityOfConcern or subject named by value by value.
Minimal lens in plain terms. Use a four-part interpretation: one publication unit under review, one primary EntityOfConcern, one carried publication move over that primary EntityOfConcern, and one outside boundary to work, work planning, decision, gate, or reliance claim. That outside boundary usually needs one light boundary type too: neighboring pattern application, downstream claim or effect, or ongoing engineering-process continuation. If any of those interpretation relations changes quietly, the unit is no longer honest enough to read as one unchanged publication unit.
Local working vocabulary.
publication unit under review= the note, memo, sheet, table, screen, or short section being kept honest as one unit;primary EntityOfConcern= the primary EntityOfConcern named by value of the claim-bearing episteme or episteme-lane view that the unit carries or exposes when such an item is live; otherwise use non-claim-bearing kind named by value, topic, or subject without creating aEntityOfConcernRef;carried publication move= the publication-side claim, interpretation, comparison, or explanation move that the unit performs over that primary EntityOfConcern;outside work boundary= downstreamU.Work,U.WorkPlanning, decision, gate, or reliance claim that still remains outside the unit;downstream claim or effect= an approval, assignment, go or no-go, gate, work, or reliance claim or effect that readers infer from the unit but that belongs outside this pattern unless explicitly handled by its governing pattern or by the project-side FPF kind and reference named by value that governs that claim or effect. A.6.P unpacking of overloaded local words. This pattern does not useroute,branch,head, orunitas hidden ontology. Use these roles instead:local lexical head= the head word or phrase inside one claim-bearing sentence or heading, such asreview,interpretation,note, ortext; it is not an FPF pattern head, not a package-family head, and not a language-state alternative;publication-unit repair disposition= the current repair disposition: local lexical-head repair, whole-unit primary-EntityOfConcern stabilization, bounded comparison, explanation classification, representation change, controlled coarsening, changed primary EntityOfConcern, or downstream decision, gate, work, or reliance claim;governing FPF pattern or project-side FPF kind and reference named by value= the named FPF pattern, or a project-side evidence record, gate record, decision record, work plan, work occurrence, method, action invitation, relation record, orU.EpistemePublicationwhose governing FPF pattern is named;publication-unit stability family= the relation amongE.17.AUD,E.17.AUD.LHR,E.17.AUD.OOTD, and neighboring comparison and explanation patterns; it is not a runtime path and not a transduction sequence;presentation-form label=note,memo,sheet,screen, and similar form words; these are only form clues until the publication unit under review and primary EntityOfConcern are restored.
When any of those roles is claim-bearing, record the active entry in the working card rather than polishing the sentence with another generic word.
Use this when. Use this pattern when one note, memo, sheet, screen, table, or short section is no longer trustworthy as one stable interpretation unit. Use it when people keep arguing about a paragraph, but the real question is simpler: repair one local lexical head, stabilize the whole unit, treat the unit as bounded comparison, or stop using this pattern because another FPF pattern or project publication governs the claim being made.
First-minute working moment. A memo starts by naming one primary EntityOfConcern, then quietly makes a different publication move over it, or quietly becomes about a different primary EntityOfConcern. One reviewer wants to repair one vague local lexical head. Another wants to rewrite the whole memo. A third person thinks the unit is already a bounded comparison or a downstream decision or reliance publication. You need one honest stabilization decision before the unit gets patched in three incompatible ways.
What goes wrong if you miss this. Teams keep fixing sentences without agreeing on the publication unit under review. Local lexical-head repair gets asked to carry whole-unit stabilization. Whole-unit stabilization gets asked to carry bounded comparison. Comparison gets mistaken for approval or rollout. A more polished or official-looking format gets mistaken for downstream claim or effect. The text stays readable enough to circulate, but no longer honest enough to trust.
What this buys you in practice. It gives one quick publication-unit stabilization decision before the draft widens or needs a neighboring governing pattern or downstream publication. Teams can decide earlier whether to stay local, stabilize the whole publication unit, apply bounded comparison, or leave the publication-unit stability family entirely for a more honest neighboring pattern or downstream publication.
Cheap stop. If the four-part interpretation names one publication unit under review, one primary EntityOfConcern, one carried publication move, and one outside boundary clearly enough for the current reader, stop with that stabilization decision. Do not build a dossier or open the wider assurance sections unless the unit still attracts comparison, explanation, evidence, gate, decision, work, or reliance overread.
Not this pattern when. This is not the right pattern when:
- one overloaded local lexical head is still the only real defect and
Local Head Restorationis enough; - the publication unit is already stable and the active problem situation is one bounded comparison over already pinned source publications;
- the main problem situation is explanation classification over an existing face, view, carrier, or publication discipline, or another neighboring semio pattern rather than publication-unit stability;
- the text is already being used to approve, direct, assign, or adjudicate work and should use the more honest downstream decision, gate, work, or reliance publication.
Primary working reader. The first working reader is an author or reviewer who needs to stop one memo, note, sheet, table, screen, or short section from quietly changing its primary EntityOfConcern, carried publication move, or downstream claim or effect. Architects, managers, and program leads are important secondary readers when they need the same governing-pattern and project-side-reference boundary signal, but they are not the first-minute reader for this opening recognition block.
Quick kind stack. PublicationUnit Stability Discipline keeps the current publication-unit problem from being repaired at the wrong level. E.17.AUD.LHR governs the local lexical-head repair case: one word or phrase inside the unit is carrying too much semantic work while the unit otherwise stays stable. E.17.AUD.OOTD governs the whole-unit stabilization case: the same publication unit no longer keeps one primary EntityOfConcern, one carried publication move, and one outside boundary to work, work planning, decision, gate, or reliance claim visible. E.17.ID.CR governs the bounded-comparison case once the publication unit is stable and the primary move is comparison over available source publications. Other explanation, representation, bridge, gate, approval, work, or reliance problem situations belong to their own governing FPF patterns, or to project-side records and publications whose governing FPF pattern is named. This pattern names that working distinction; it does not create a path, call chain, fixed process, or runtime control path.
Quick recognition matrix.
Recognition-block note. The opening card above is the quick recognition block. The sections below carry the heavier assurance section: publication-unit boundary decisions, A.6.P unpacking, governing-pattern and project-side-reference boundary decisions, worked slices, and SoTA and domain grounding.
Problem frame
Anti-single-sequence note. The publication-unit checks, recognition matrix, and worked slices below are working aids for one publication unit under review. They are not a fixed engineering process and not a promise that every admissible case moves through one mandatory sequence.
This pattern is for real publication units used in review, design, architecture, coordination, onboarding, and similar interpretation situations. It is for the moment when one publication unit still sounds like one unchanged note even after its primary EntityOfConcern, carried publication move, or downstream claim or effect has already changed.
The recurring defect family is simple:
- one publication unit begins as if it were about one primary EntityOfConcern or claim focus;
- the unit then quietly changes its primary EntityOfConcern, carried publication move, or outside boundary to work, work planning, decision, gate, or reliance claim;
- the surrounding team starts repairing different defect families at once because nobody first named the active publication-unit problem situation.
Typical moments include:
- an episteme-publication-heavy note where one broad local lexical head starts carrying more semantic work than the sentence restored;
- an architecture or status memo that starts about one bounded primary EntityOfConcern or question and ends by sounding like rollout or approval work;
- a comparison sheet that is already stable enough locally, but is still being overworked as if it needed full publication-unit stabilization;
- an onboarding aid, dashboard card, or review note that quietly shifts into explanation, policy, or decision language while still sounding like one unchanged unit.
Problem
Without a named publication-unit stability discipline:
- teams repair local wording when the real defect is whole-unit interpretation instability;
- teams open whole-unit stabilization when the real defect is still one overloaded local lexical head;
- teams keep thickening a publication-unit repair when the active problem situation is already bounded comparison;
- teams mistake note, sheet, table, or screen language for different publication unit under review kinds when the real publication unit under review is still one publication unit in different presentation forms;
- teams over-attribute engineering-process, approval, or rollout claim or effect to a text that never honestly became that kind of unit.
Forces
Solution
PublicationUnit Stability Disciplineis the first stabilization decision for one publication unit whose interpretation is unstable.It names the current repair disposition: what the unit is mainly about, what move it is carrying, and which governing FPF pattern or project-side FPF kind and reference named by value governs the live case. It does not certify the unit or make a paperwork dossier.
Minimum admissible interpretation
A locally admissible interpretation keeps four entries visible enough to inspect by value:
- one publication unit under review;
- one primary EntityOfConcern;
- one carried publication move over that primary EntityOfConcern;
- one outside boundary to work, work planning, decision, gate, or reliance claim, with one light boundary type when that distinction matters: neighboring pattern application, downstream claim or effect, or ongoing engineering-process continuation.
If the publication unit changes any of those four without saying so, its interpretation has already shifted even when the sentences still look polished.
Publication-unit stability vs whole-unit requirement
Light ordinary output. The ordinary output is one repair disposition, not a dossier:
stable for current use: the four-part interpretation is explicit enough and no neighboring bridge, prompt, ontology, action, gate, adjudication, authority, or downstream claim is live;local lexical-head repair: one overloaded local head should applyE.17.AUD.LHR;whole-unit stabilization: the unit should applyE.17.AUD.OOTD;bounded comparison: the stable unit should applyE.17.ID.CR;leave publication-unit stability: the claim being made is work, work planning, decision, gate, evidence, explanation, reliance, carrier or front-end work, or another object governed by its neighboring FPF pattern governing that claim or project-side FPF kind and reference named by value.
PublicationUnit Stability Discipline is the first stabilization decision for one publication unit whose interpretation is unstable.
Its job is to name the current repair disposition and then handle the case under the governing FPF pattern or project-side FPF kind and reference named by value that already governs that disposition: E.17.AUD.LHR for local lexical-head repair, E.17.AUD.OOTD for whole-unit stabilization, E.17.ID.CR for bounded comparison, or another neighboring pattern when the claim being made has left publication-unit stability.
It does not re-govern the narrower whole-unit admissibility check that already belongs to PublicationUnit Primary EntityOfConcern Discipline once the active question becomes: can this one unit still keep one stable primary EntityOfConcern, one carried publication move, and one outside boundary to work, work planning, decision, gate, or reliance claim by value?
Inherited dynamic frame
This pattern governs the publication-unit stability boundary over the inherited lineage and move frame already carried by C.2.2a or A.16.0. It is about how one publication unit speaks about that inherited moving lineage or carried publication move. It is not a standalone theory of documents, carriers, or publication forms.
Kind and boundary
This pattern governs one publication unit as a readable unit. It does not treat that unit as automatically identical with:
- the
U.Epistemeor episteme species whose claims the unit carries, quotes, or describes; - the
U.EpistemePublicationthat carries episteme-publication identity; - the primary EntityOfConcern inside the unit;
- a generic publication face or MVPK face under E.17 constraints;
- a carrier or evidence carrier;
- proof, evidence record, assurance claim, or release admissibility;
- a view or viewpoint;
- an engineering-process stage;
- a downstream decision, gate, work, or reliance publication.
Those may become relevant neighboring concerns, but they are not the problem situation being governed here just because the same note, sheet, or screen happens to mention them.
Publication-unit boundary choice. A PublicationUnit boundary is valid when a careful reader would naturally inspect that bounded item as carrying one primary publication move over one primary EntityOfConcern, with one visible outside boundary to work, work planning, decision, gate, reliance claim, or neighboring pattern application. Choose the bounded item that carries the claim being made or effect being repaired. Do not choose a smaller boundary merely to hide a downstream overclaim, and do not choose a larger boundary merely to absorb several primary EntityOfConcern values into one unit. A table row may be the unit when that row carries the claim; the whole table may be the unit when the table-level caption or comparison frame carries the claim. A dashboard tile, note, card, sheet, or screen block may be the unit only when that bounded item, not the whole carrier or interface, carries the live publication move.
Publication-unit snapshot identity. A PublicationUnit may remain the same bounded unit while its carrier rendering, export format, screenshot, or layout changes. It does not remain the same stabilized interpretation by visual or file continuity alone. If a revision, refresh, translation, regeneration, or dashboard update changes the primary EntityOfConcern, carried publication move, outside boundary, source pins, or admissible use, rerun the four-part interpretation for the new snapshot before the unit is used for comparison, explanation, evidence, gate, decision, work, or reliance claims.
Ordinary working card
Use this seven-row card before you widen the repair:
Boundary and pattern-application rule
- If row 5 still points to one overloaded local lexical head, apply
Local Head Restoration. - If row 5 shows that the whole publication unit still cannot keep one stable primary EntityOfConcern, one carried publication move, and one outside boundary to work, work planning, decision, gate, or reliance claim visible, apply
PublicationUnit Primary EntityOfConcern Discipline. - If the publication unit is already stable enough and the real move is bounded comparison over already available source publications, apply
E.17.ID.CR ComparativeReading. - If the main problem situation is explanation classification over an existing face, apply the neighboring explanation pattern rather than keeping the case inside publication-unit stability by inertia.
- If the active problem situation is publication form, bridge work, or downstream claim or effect, leave the publication-unit stability family and apply the more honest neighboring pattern or use the downstream publication.
Local naming and lexical-governance rule
Treat ordinary labels such as note, memo, sheet, table, screen, review, and status as presentation-form clues, not as self-authenticating unit kinds.
Working rule:
- if one overloaded local lexical head is doing most of the semantic work, repair that local lexical head first through
Local Head Restoration; - if the local lexical head is not the real issue, keep the publication unit stable in the whole-unit stabilization pattern instead of hiding the interpretation shift under one more qualifier;
- do not let cleaner or more formal wording stand in for non-admissible downstream claim or effect or non-admissible comparison source relation.
Modeling-substrate-or-rationale surfacing rule
If the primary EntityOfConcern or the carried publication move depends on a modeling substrate or rationale, publish that substrate or rationale briefly in the unit or move the case to a heavier publication form or neighboring pattern that can carry it honestly. Do not let a formally loaded case pretend it is only prose hygiene.
Claim-bearing admissibility dock
When the publication unit carries claim-bearing explanation, comparison, or downstream claim or effect pressure, keep five quick admissibility relations visible enough to preserve the repair disposition:
- evidence status and source-pin status when the unit leans on already available source publications;
- current admissible reliance or work interpretation and forbidden non-admissible decision, work, or gate claim;
- whether this unit is the governing publication unit or a derivative helper publication;
- any claim-bearing modeling substrate or rationale;
- and that the assurance section only tightens the opening recognition claim rather than silently broadening it into downstream claim or effect.
Worked slices
Local-head case
A semio note keeps saying this review and this interpretation, but nobody can tell which FPF kind or locally declared head those lexical heads name here. The rest of the publication unit under review is still locally stable once the local lexical head is repaired. The honest move is not broad publication-unit stabilization. It is Local Head Restoration.
Whole-unit interpretation-shift case
A memo starts about one bounded architecture question over an inherited lineage or move, then shifts into wider rollout or approval language without declaring the transition. Repairing one sentence does not stabilize the publication unit under review because the primary EntityOfConcern and the carried publication move have both widened. The honest move is PublicationUnit Primary EntityOfConcern Discipline.
Stable-unit comparison case
A comparison sheet already keeps one stable primary EntityOfConcern and one clear outside boundary to work, work planning, decision, gate, or reliance claim, but the team is using publication-unit instability language because the comparison is contentious. The honest move is not more publication-unit stabilization. It is E.17.ID.CR ComparativeReading.
Explanation-laundering case
An onboarding explainer starts from one stable source-pinned note, but then the simplified prose begins to sound like canonical assurance or policy. The publication unit may still be readable, yet the main problem situation is no longer publication-unit stability. The honest move is to leave publication-unit stability and apply E.17.EFP ExplanationFaithfulnessProfile.
Downstream decision and reliance case
A status card starts as one bounded summary of progress, then quietly becomes the place where people infer approval, assignment, or go or no-go claim or effect. The problem is no longer only publication-unit stability. The honest move is to stop treating the card as if it were still only one neutral note and use the downstream decision, gate, work, or reliance publication.
Compact scenario and anti-case pack
Use this quick contrast set when the first interpretation is still foggy:
Common Anti-Patterns and How to Avoid Them
Consequences
- You slow down long enough to name the active publication-unit problem situation before patching the draft.
- You reduce pointless escalation from one overloaded local lexical head into a whole-unit rewrite.
- You reduce the opposite failure too: trying to solve whole-unit interpretation instability with one more qualifier on the same local lexical head.
- You keep neighboring publication-unit repair patterns and neighboring non-publication-unit patterns explicit instead of letting one broad stability name quietly absorb them.
- You make it harder for clearer prose, official-looking formatting, or wider circulation to masquerade as downstream claim or effect.
Rationale
PublicationUnit Stability Discipline is worth stating explicitly because local lexical-head repair and whole-unit primary-EntityOfConcern stabilization are both already real problem situations, but authors and reviewers still need one stabilization check that says when the case is local, when it is whole-unit, when it is already bounded comparison, and when it has left the publication-unit stability family entirely.
The pattern stays intentionally narrow. It does not turn every publication-unit problem into publication design or downstream decision, gate, work, or reliance work. Its job is simpler and more claim-bearing: keep one publication unit honest enough that readers can still tell what it is mainly about, which carried publication move it makes, and which downstream U.Work, U.WorkPlanning, decision, gate, or reliance claim remains outside.
SoTA-Echoing
Claim 1. Best-known current architecture-description practice keeps the entity of concern and the description expressing it explicit enough that one document does not silently change its concern while still sounding continuous.
Practice, source, alignment, and adoption. Joint ISO, IEC, and IEEE 42010:2022 distinguishes the architecture of an entity from the architecture description that expresses it and requires explicit structure and concern handling. PublicationUnit Stability Discipline adopts that explicit concern discipline, adapts it from architecture descriptions to publication units more broadly, and rejects silent primary-EntityOfConcern shift inside one readable unit. For a reviewer or architect, this is the practical guard behind worked slices 5.2 and 5.3: one publication unit must not quietly shift concern and still be treated as one unchanged note.
Claim 2. Best-known current information-for-use practice treats user-facing units as purpose-bound, structured information rather than as loose bundles that can mix explanation, instruction, warning, and decision or reliance effect by convenience.
Practice, source, alignment, and adoption. Joint IEC and IEEE 82079-1:2019 requires information for use to be purpose-directed, structured, and evaluated for usability. PublicationUnit Stability Discipline adopts purpose-bound publication units and explicit outside boundaries to work, work planning, decision, gate, or reliance claim, adapts that discipline from information-for-use to notes, memos, sheets, tables, and screens, and rejects the shortcut where a clearer or official-looking unit is treated as if it had already become approval, policy, gate, work, or reliance text. For a manager or operator, this is the practical guard behind worked slices 5.4 and 5.5: better explanatory form does not itself mint downstream claim or effect.
Claim 3. Best-known current pattern-writing and pattern-validation practice keeps patterns tied to recognisable situations, explicit problem, solution, and consequence structure, and reviewable rationale rather than elegant internal naming alone.
Practice, source, alignment, and adoption. Iba (2021) and Riehle et al. (2020) both treat pattern writing and validation as requiring recognisable situations, explicit structure, and reviewable reasoning rather than only elegant naming. PublicationUnit Stability Discipline adopts worked slices, recognisable entry cues, and explicit governing-pattern and project-side-reference boundary discipline, adapts those expectations to publication-unit stability work, and rejects a pattern text that is cleanly labeled but domain-thin or reader-thin. For the current working reader, this is the practical guard behind the recognition block and slices 5.1 through 5.5: the pattern should be usable before one has to reconstruct the surrounding rationale from scratch.
Local stance. The current SoTA claim is narrow. This pattern is not claiming one universal theory of documents. It claims a smaller and more practical point: one publication unit stays trustworthy only when its primary EntityOfConcern, carried publication move, and outside boundary to work, work planning, decision, gate, or reliance claim remain explicit enough for cold readers to recover, and when neighboring problem situations are handled by their governing patterns rather than hidden.
Conformance Checklist
- CC-AUD-1 — One publication unit under review is explicit. The case names one note, memo, sheet, table, screen, or short section as the publication unit under review rather than letting presentation-form labels stand in for the publication unit under review.
- CC-AUD-2 - Primary EntityOfConcern and carried publication move are explicit enough to identify the governing pattern. The case keeps visible which primary EntityOfConcern the unit is about and which carried publication move it performs over that primary EntityOfConcern right now.
- CC-AUD-3 — Outside-work boundary is explicit.
The case states what downstream
U.Work,U.WorkPlanning, decision, gate, or reliance claim still remains outside the publication unit under review, including neighboring pattern application, downstream claim or effect, or ongoing engineering-process continuation when that distinction matters. - CC-AUD-4 — The active repair disposition is named honestly. The case makes explicit whether the live problem situation is local lexical-head repair, whole-unit primary-EntityOfConcern stabilization, bounded comparison, or another neighboring pattern rather than patching several problem situations at once under one vague stability claim.
- CC-AUD-5 - Repair-disposition and governing-pattern boundary choice is explicit.
When the problem situation belongs with
Local Head Restoration,PublicationUnit Primary EntityOfConcern Discipline,E.17.ID.CR ComparativeReading, a neighboring explanation-faithfulness pattern, or a downstream decision, gate, work, or reliance publication, that governing FPF pattern or project-side FPF kind and reference named by value is explicit rather than hidden inside broad-family wording. - CC-AUD-6 — Presentation-form labels do not launder publication-unit kind or downstream claim or effect.
note,memo,sheet,table,screen, and similar labels remain presentation-form clues and do not silently change the publication unit under review, create proof, create evidence, create release admissibility, or mint downstream claim or effect. - CC-AUD-7 - Claim-bearing modeling substrate or rationale is published or handled by a governing publication form. If the primary EntityOfConcern or carried publication move depends on a modeling substrate or rationale, publish that substrate or rationale briefly enough for review or handle the case by a heavier publication form or neighboring pattern that can carry it honestly.
- CC-AUD-8 — Clearer prose does not silently widen downstream claim or effect. Readability, formatting, and wider circulation may improve the unit, but they do not by themselves turn the unit into approval, policy, assignment, gate, work, or reliance text.
Relations
- Builds on:
A.7,E.10,F.18,E.14,E.19,E.17, andC.2.1. - Coordinates with:
E.17.AUD.LHR Local Head Restoration,E.17.AUD.OOTD PublicationUnit Primary EntityOfConcern Discipline,E.17.ID.CR ComparativeReading,E.17.EFP ExplanationFaithfulnessProfile, andE.21when a pattern-quality card, table, status line, or generated summary is published as a bounded publication unit.E.17.AUDgoverns publication-unit honesty;E.21governs the underlying pattern-quality claim. Also coordinates with project-side FPF patterns such asC.11,A.10,A.15,A.15.4,B.3,A.20, andA.21when decision, evidence, gate, assurance, engineering-justification, work, or reliance claims become primary. - Boundary consequence: when the publication unit can no longer stay honest inside this publication-unit stability pattern, apply the neighboring FPF pattern or name the project-side FPF kind and reference named by value instead of treating publication-unit stability as a general explanation, comparison, decision, gate, work, or reliance discipline.
E.17.AUD:End
PublicationUnit Stability Discipline and Local Head Restoration - repair the overloaded local lexical head before the publication unit inherits it
Placement. Narrow local lexical-head repair pattern inside the broader PublicationUnit Stability Discipline.
Builds on. A.6.P, A.7, E.10, F.18, E.14.
Coordinates with. E.17.ID.CR, E.17.AUD.OOTD, E.17.EFP, A.6.3, A.6.3.CR, A.6.3.RT, A.10, A.15, A.15.4, B.3, A.20, A.21.
Plain-name. Repair the overloaded local lexical head before the publication unit inherits it.
One-line summary. Local Head Restoration is a narrow local lexical-head repair pattern for cases where one locally familiar word such as text, document, surface, review, or interpretation is being asked to carry more meaning than the sentence has honestly restored.
Local lexical-head repair object in plain terms. The local repair object here is one local lexical head inside one publication unit: the load-bearing word or phrase whose kind is no longer recoverable from the sentence. The local repair move is to restore the lexical-head kind, active local reading, active primary entity or relation named by value/claim when one is active, carried move or question under repair, and nearest outside-work boundary before the rest of the publication unit inherits ambiguity.
Use this when. Use this section when one note, memo, review unit, table, or episteme-publication-heavy paragraph starts leaning on one broad familiar word and you can no longer tell which FPF kind or locally declared head that word names here. Use it when the local lexical head has become the overload point, but the publication unit has not yet proved that it needs full EntityOfConcern stabilization.
First-minute working moment. A draft says this review, this text, this document, this publication, or this interpretation, and everyone in the room keeps reading a different FPF kind or locally declared head into the same local lexical head. You do not yet need a whole new publication-unit rule check. You need the local lexical-head repaired before the rest of the unit can be trusted.
What goes wrong if you miss this. One vague local lexical head quietly governs the next three sentences. Review then turns into an argument about taste while the real defect is simple: the unit never said whether it was naming a description, a carrier, a publication unit, a carried move, a governing pattern, or wider work.
What this buys you in practice. It lets a team stabilize the smallest honest unit first. You repair the overloaded local lexical head, keep local reading and question under repair visible, and avoid escalating into publication-unit stability review too early.
Naming boundary. F.18 is nearby because a repaired head may sometimes become durable reusable naming work. It is not the default output here. If the local sentence becomes honest after one head repair and no durable cross-context name, UTS row, Core-facing name, reusable FPF head, or high-risk label is being minted, do not open a full Name Card. Keep the LHR output as the repaired local head plus its recovered local kind, active local reading, active primary entity or relation named by value/claim when one is active, carried move or question under repair, and outside-work boundary.
Success condition. LHR succeeds when a careful reader can identify the local lexical-head kind, active primary entity or relation named by value/claim when one is active, carried move or question under repair, and outside-work boundary for this sentence or small unit. If that is enough and the publication unit no longer shifts, stop. Apply E.17.AUD.OOTD only when the whole publication unit still cannot keep one primary entity of concern, one carried move, and one outside boundary stable after the local repair.
Ordinary-output claim inventory. After LHR, the author has claimed only that this local head now has one recovered kind or locally declared head, one active local reading, and one admissible local use inside this publication unit. The author has not claimed that the whole publication unit is stable, that the name is reusable globally, that the term is admitted to FPF Core, that a Name Card is open, or that any downstream evidence path, gate decision, work record, decision result, approval effect, or reliance basis exists.
Not this pattern when. This is not the right pattern when:
- the same publication unit still has unstable EntityOfConcern or carried-move reading after local repair and now needs one stable answer to what it is about, what move it carries, and what remains outside;
- the question under repair is already one bounded comparative review move over an otherwise stable source episteme or publication;
- the main issue is view, face, carrier, publication architecture, or downstream approval, gate, adjudication, or execution work rather than an overloaded local lexical head;
- the text is already honest locally, and the unresolved problem is wider strategy, rollout sequencing, or architecture framing.
Primary working reader. The first working reader is an author, reviewer, architect, or manager who needs one quick way to repair an overloaded local lexical head before the whole text overclaims.
Problem-owning practice reading. In ordinary practice, this pattern helps teams editing review notes, status notes, decision memos, architecture notes, and episteme-publication-heavy paragraphs where one familiar local lexical head has become the overload point. The job is not to redesign the whole text. It is to make one local sentence honest enough that reviewers stop arguing past each other about what the local lexical head names here.
Quick recovery entry. If the recognition block fits, recover the local repair through the five-row ordinary card in E.17.AUD.LHR:3.2 and the nearest worked slices in E.17.AUD.LHR:5.1 through E.17.AUD.LHR:5.6. Use the quick worked-slice starter only while one overloaded local lexical head still stays primary; if that recovery already makes bounded comparison or publication-unit stabilization primary, name the governing FPF pattern or project-side FPF kind and reference named by value before you open the heavier extension.
Quick first check. Do not open the whole local repair pattern yet. Ask these five questions first:
- Which trigger word is carrying unresolved semantic load?
- What lexical-head kind is that word honestly naming here?
- Which local reading is actually primary here?
- What active primary entity or relation named by value/claim, carried move or question under repair, and outside work are actually in play here?
- After one honest repair, does the unit stabilize locally, or does its reading still shift into a neighboring reading?
Local-repair threshold. One honest local repair should restore the overloaded local lexical head, its lexical-head kind, the active local reading, the active primary entity or relation named by value/claim when one is active, and the carried move or question under repair the sentence is actually carrying. If the next sentence still borrows a different kind, a different local reading, or a different outside-work boundary from the same local lexical head, local repair is no longer the only primary question.
Neighboring-reading boundary check. If one honest local repair stabilizes the unit and the remaining question is one bounded comparative review move over already pinned source epistemes or publications, apply E.17.ID.CR (ComparativeReading) rather than thickening this local lexical-head repair pattern. If the same publication unit still cannot keep one stable primary entity of concern, one carried move, and one outside-work boundary visible after local repair, apply E.17.AUD.OOTD (PublicationUnit Primary EntityOfConcern Discipline) instead of stacking more qualifiers onto the overloaded local lexical head.
Quick kind stack. PublicationUnit Stability Discipline names the wider publication-unit stability discipline. Local Head Restoration names the local lexical-head repair pattern used when one overloaded local lexical head inside one publication unit still needs its lexical-head kind, active local reading, active primary entity or relation named by value/claim, carried move or question under repair, and any family and governing-pattern stack restored before the rest of the unit inherits ambiguity. When that broader stack is doing real work, write one explicit output line: repair disposition = ... | governing pattern = ... | primary entity/relation = ... | move = ... | outside work = .... This local repair works over the inherited frame; it does not redefine the moving lineage, carrier, face, or publication architecture that sits outside the current publication-unit repair. Publication-unit stability remains outside until local repair fails, in which case the case should apply E.17.AUD.OOTD. The canonical publication-unit rule and check section remains E.17.AUD.OOTD; this section governs only the narrower local lexical-head repair pattern.
If those five questions are the right questions, start here.
Problem frame
Anti-single-sequence note. The quick checks, ordinary card, worked slices, and governing-pattern and project-side-reference boundary rules in this section are local aids for one publication unit under review. They are not a canonical transduction sequence, not a mandatory sequence, and not a promise that admissible cases move through one fixed sequence. One case may stabilize after one lexical-head repair, another may reopen when outside observation changes the honest question, and another may apply E.17.AUD.OOTD when the publication unit still has unstable EntityOfConcern or carried-move reading.
The recurring defect is small but expensive:
- one broad familiar word enters early;
- the word is never restored to one kind or lane;
- later sentences inherit its ambiguity as if nothing happened.
Typical load-bearing local heads include:
documenttextartifactnotesheetpublicationsurfacefaceviewreviewinterpretationreading
These words are not uniformly wrong. They become risky when one of them starts carrying primary-entity/relation load, lane load, move load, or governing-pattern boundary load without being restored first.
Problem
Without a named local restoration move:
- teams keep asking qualifiers to rescue an unstable local lexical head;
- one sentence names one FPF kind or locally declared head while the next sentence names the move over it;
- readers over-infer publication-unit meaning from one under-restored broad-family word;
- later publication-unit discipline is opened too early for a problem that was still local;
- or the opposite happens: a publication-unit reading-stability defect is hidden because nobody repaired the local lexical-head overload first.
Solution
Local Head Restorationrepairs the overloaded local lexical head before the rest of the publication unit is allowed to inherit it.It restores lexical-head kind, active local reading, carried move or question under repair, and any family, governing-pattern, and primary-entity/relation stack that the sentence is quietly relying on.
Pairwise plain glosses
- Pressured local lexical head = the word doing more work than the sentence has honestly restored.
- Lexical-head kind = what FPF kind or locally declared head that word names here: for example description, carrier, publication unit, EntityOfConcern, relation record, face, or view.
- Active lane = where the local work is happening here: for example review, publication, comparison, process, or authority.
- Active primary entity or relation named by value/claim = what the local sentence or publication unit is actually about here, when such an object is active.
- Move or question under repair = what the sentence is doing with the active primary entity, relation named by value/claim, or local lexical-head repair object, if anything.
- Family, governing-pattern, and primary-entity/relation stack = when a broader family or governing pattern is active, name the family, governing pattern, primary entity or relation named by value/claim, carried move or question under repair, and outside work separately rather than letting one familiar local lexical head carry them by implication.
Local reading lens. Treat the overloaded local lexical head as one typed local head inside one publication unit. This local lens restores one overloaded local lexical head; it does not settle publication-unit modeling-lens policy, redefine the inherited moving lineage or its publication-form lane, publication-face lane, and carrier lane, or replace neighboring semioarchitecture characteristics. The smallest honest local lens asks five entries: what lexical-head kind is named here, which lane is primary, what active primary entity or relation named by value/claim is in play, what carried move or question under repair is carried, and what still remains outside. If that local lens no longer stabilizes the same publication unit, local repair has already reached its limit; apply its governing FPF pattern or use the project-side FPF kind and reference named by value.
Ordinary working card
Use this five-row card for ordinary cases:
Treat that card as the recognition block. It is a local repair aid, not a universal sequence rail. Use it while one overloaded local lexical head remains the main defect.
When family or governing-pattern language is load-bearing, add one explicit conditional output line next to the card: repair disposition = ... | governing pattern = ... | primary entity/relation = ... | move = ... | outside work = ....
Read the card as a three-way recovery aid:
- if rows 1-5 stabilize around one repaired local lexical head, one restored lane, one active primary entity or relation named by value/claim, and one honest local question, stay here;
- if rows 1-5 stabilize locally and the remaining question is one bounded comparative review move over already pinned source epistemes or publications, apply
E.17.ID.CRrather than thickening this local lexical-head repair pattern; - if rows 2-5 still cannot stay stable because the same publication unit keeps borrowing a different object, move, or outside-work boundary from the same local lexical head, apply
E.17.AUD.OOTDinstead of pretending one more qualifier will rescue the same unit.
The nearest worked slices for those three repair dispositions are:
- ordinary stay-local:
E.17.AUD.LHR:5.2; - admissible return to bounded comparison:
E.17.AUD.LHR:5.4; - admissible application of whole-unit discipline:
E.17.AUD.LHR:5.5.
Load-bearing extension
If the local case is close to a neighbouring-pattern boundary and the ordinary card already stabilizes the unit, add these checks:
- overloaded local lexical head;
- restored lexical-head kind;
- restored active local reading;
- restored primary entity or relation named by value/claim;
- restored carried move or question under repair;
- restored outside-work boundary;
- any family, governing pattern, and primary-entity/relation distinction now made explicit;
- governing-pattern and project-side-reference decision.
Use that extension as the assurance section only when ordinary repair is already holding and the remaining risk is misuse at a neighboring-pattern boundary.
It is for the stay-local repair disposition, not for re-deciding whether the case really belongs in E.17.ID.CR or E.17.AUD.OOTD.
If the ordinary card now shows one stable local repair plus one bounded comparative review question, apply E.17.ID.CR before opening the extension.
If the ordinary card still shows publication-unit reading instability after local repair, apply E.17.AUD.OOTD before adding declaration weight here.
Do not use it to rescue a unit whose publication-unit reading still shifts, and do not turn it into a second rule sheet.
Ordinary repair order
Use this order when one local lexical head is carrying too much:
- name the overloaded word;
- restore the lexical-head kind;
- restore the active local reading;
- restore the active primary entity or relation named by value/claim when one is active;
- restore the carried move or question under repair, if any;
- restore any family, governing pattern, and primary-entity/relation distinction and nearest outside-work boundary the sentence is relying on;
- decide which of three repair dispositions is honest: stay with local repair, return the case to bounded comparison, or apply publication-unit discipline.
A narrowing qualifier alone does not count as restoration.
Treat this order as one local repair aid, not as a canonical flow.
Steps 1-6 restore the overloaded local lexical head; step 7 classifies what the repaired unit can honestly do next.
If step 6 keeps reopening because the same unit still cannot hold one stable primary entity of concern, one carried move, and one outside-work boundary, stop local repair and apply E.17.AUD.OOTD.
If the local lexical head is now honest and the only remaining question is one bounded contrast over already available source epistemes or publications, apply E.17.ID.CR instead of escalating the local card into a heavier record by habit.
If the local lexical head is honest and no neighboring reading has become primary, stop here rather than manufacturing extra extension weight.
Quick worked-slice starter
If you need one ordinary entry sentence fast, start from one of these:
Use these starters only as local examples. If outside observations or downstream constraints change what the sentence can honestly carry, reopen with the governing FPF pattern or project-side FPF kind and reference named by value instead of treating the starter as step one of a fixed flow.
Worked slices
Worked-slice status. Read the release-boundary, publication-face, episteme-publication-heavy, bounded-comparison, publication-unit stabilization move, and outside-observation cases as a heterogeneous example bank, not as one recommended repair sequence. They show different admissible repair dispositions for this local lexical-head repair pattern: some cases stabilize after one honest lexical-head repair and stop here, some apply E.17.ID.CR, some apply E.17.AUD.OOTD, and some stop and reopen when outside observation changes what the same local sentence can honestly carry. For quickest recovery of the three main repair dispositions, read E.17.AUD.LHR:5.2 as ordinary stay-local repair, E.17.AUD.LHR:5.4 as admissible return to E.17.ID.CR, and E.17.AUD.LHR:5.5 as admissible publication-unit apply E.17.AUD.OOTD. Then read E.17.AUD.LHR:5.6 as the separate stop-and-reopen or neighboring governing-pattern move case after outside observation changes what the same local unit can honestly carry.
Worked-slice mini-schema. When a case turns episteme-publication-heavy or boundary-heavy, recover the same compact output in this order: overloaded local lexical head | lexical-head kind | active local reading | primary entity/relation | carried move or question under repair | outside work | repair disposition.
review is really carrying two jobs
A note says:
This review establishes the release boundary for the service.
Two sentences later it says:
The review should therefore assign rollout responsibility to platform.
Local repair first:
- overloaded local lexical head =
review; - restored lexical-head kind = review publication unit;
- active local reading = boundary review, not responsibility assignment;
- primary entity/relation = the release boundary as made visible in this review unit;
- carried move = make one boundary visible;
- outside work = responsibility assignment.
The repaired unit can now either stay with the boundary review or explicitly become a responsibility-assignment publication. Without that repair, the note quietly overclaims.
text quietly shifts into carrier or document status
A paragraph says:
This text is the policy.
But what it really means is one publication form that describes the policy rather than being the policy object itself.
Local repair:
- overloaded local lexical head =
text; - restored lexical-head kind = publication form;
- active local reading = publication unit, not policy authority object;
- primary entity/relation = the policy description visible in this unit;
- carried move = describe the policy rather than claim authority for it;
- outside work = approval, rollout, release, gate, policy, assurance, or adjudication status.
This is the ordinary stay-local case. One repaired local lexical head keeps later sentences from borrowing authority from the wrong local reading without forcing publication-unit stabilization.
Recovery reading. Stay in E.17.AUD.LHR: the local lexical head is now honest, the same local unit no longer shifts, and no neighboring reading has become primary.
Semio-heavy family name does too much work
A semio note says:
This interpretation clarifies the package.
But the same paragraph is really about one bounded comparative-reading move over one review unit, not about InterpretationDiscipline as a whole and not about the whole package.
Local repair:
- overloaded local lexical head =
interpretation; - restored lexical-head kind = bounded comparative review unit inside one episteme-publication-heavy paragraph;
- active local reading = bounded comparative reading, not wider-family package explanation;
- primary entity/relation = comparative review unit;
- stack restored = family
InterpretationDiscipline, governing patternComparativeReading; - move = bounded comparative reading;
- outside work = wider architecture strategy.
Now the local paragraph stops pulling package-level load it never declared.
Local repair returns to bounded comparison
A comparison note says:
This review shows option A is safer than option B.
But the unit is really one comparative review note over already pinned source epistemes or publications, not a publication-unit reading-instability case and not yet a publication-unit stability case.
Local repair:
- overloaded local lexical head =
review; - restored lexical-head kind = comparative review unit;
- active local reading = bounded comparative-reading unit, not whole release process;
- primary entity/relation = the already pinned option contrast;
- carried move = make one bounded contrast visible over already available source epistemes or publications;
- outside work = rollout choice or approval.
Once that local lexical head is repaired, do not keep thickening this pattern by habit. The admissible next pattern application is E.17.ID.CR for the now-stable unit, because the remaining question is one bounded contrast rather than publication-unit EntityOfConcern instability.
Recovery reading. This is the honest return-to-bounded-comparison case: finish the local repair here, then let E.17.ID.CR carry the remaining bounded contrast over the now-stable unit.
Local repair exposes publication-unit reading instability and must apply whole-unit discipline
A release note says:
This document records the release decision for the candidate.
After one sentence, the same unit starts talking as if it were:
- the review publication unit that compares evidence;
- the decision object itself;
- and the rollout work that follows if approval is recorded.
Local repair can still restore the overloaded local lexical head:
- overloaded local lexical head =
document; - restored lexical-head kind = review publication unit;
- active local reading = publication unit, not decision object or rollout work;
- carried move = record the current release reasoning visible in this unit;
- outside work = actual approval, rollout execution, release, gate, policy, assurance, or adjudication question.
But the repaired local lexical head does not keep the same publication unit stable. The next sentences still slide between the object being decided, the move of comparing evidence, and the wider work that happens after the decision. That means local lexical-head repair has done its job and shown the remaining defect honestly: the publication unit still cannot keep one stable object, one move, and one outside-work boundary visible.
Recovery reading. This is the admissible publication-unit stabilization move case: stop thickening the local repair, keep the restored local lexical head as the last honest local result, and apply E.17.AUD.OOTD because the same unit still has unstable reading after one honest repair.
Outside observation changes what the same head can honestly carry
A status note says:
This note captures the current rollback state for the candidate.
Mid-review, a new vendor bulletin changes the live failure boundary and pushes the surrounding conversation toward approval pressure.
Local repair can still make the current sentence honest:
- overloaded local lexical head =
note; - restored lexical-head kind = review publication unit;
- active local reading = current review publication unit, not downstream approval record;
- carried move = capture the rollback state visible on the current evidence slice;
- outside work = any new approval, adjudication, or widened authority step.
But this is the stop-and-reopen case. Once outside observation changes what the same local unit can honestly stay about, do not keep appending new pressure as if the same local repair simply continued. Stop, reopen with a newly declared question, or apply the governing pattern if approval, rollout, release, gate, policy, assurance, or adjudication use, or publication-unit stabilization has become primary.
Recovery reading. Do not keep thickening the local card here: outside observation has changed what the same local unit can honestly carry, so the admissible repair disposition is stop-and-reopen or application of the neighboring governing pattern, not one more local qualifier.
Boundary dispositions
Assurance-recovery note. Read these governing-pattern boundary dispositions as a heavier audit record over the same ordinary five-row card and the same three honest repair dispositions. They are not a second compact rule list. If a governing-pattern boundary disposition bullet starts carrying the case by itself, recover the local-repair threshold, E.17.AUD.LHR:3.2 Row 5, and the nearest worked slice first.
Use a different governing pattern when:
- the repaired local lexical head is no longer the real problem and the publication unit still has unstable EntityOfConcern or carried-move reading;
- the same unit is already stable enough and the remaining question is one bounded comparative review move over already pinned source epistemes or publications;
- the problem is really view, face, or carrier architecture;
- the unit has already become downstream approval, gate, adjudication, or execution work;
- outside observation or environmental change has changed what the same local unit can honestly carry, so the case now needs stop-and-reopen or application of the neighboring governing pattern rather than one more local qualifier.
Governing-pattern boundary recovery map.
The comparison-side neighbor is E.17.ID.CR ComparativeReading: use that governing pattern when the local lexical head is now honest, the unit already stays about the same EntityOfConcern, and the remaining question is one bounded comparative reading over already available source epistemes or publications.
The main publication-unit neighbor is E.17.AUD.OOTD PublicationUnit Primary EntityOfConcern Discipline: use that governing pattern when local lexical-head repair is no longer enough and the whole publication unit still cannot keep one stable primary entity of concern, one carried move, and one outside-work boundary visible.
Treat those as neighboring recoveries, not as a required sequence. Some cases will stop after one local repair, some will apply bounded comparison under E.17.ID.CR, and some will apply publication-unit stabilization under E.17.AUD.OOTD once the honest question changes.
Consequences
Used well, this pattern:
- prevents one vague local lexical head from governing a whole section by accident;
- keeps local repair cheap instead of escalating too early;
- makes later publication-unit stability review cleaner because the local lexical head question has already been restored;
- gives authors and reviewers one common language for saying
the problem is still local.
Used badly, it can become one more vocabulary exercise. If the publication unit still has unstable EntityOfConcern or carried-move reading after local repair, do not keep polishing the overloaded local lexical head forever. Move the case to the governing pattern.
SoTA-Echoing
Assurance-recovery note. Use these rows only after the ordinary five-row card, the local-repair threshold, and the nearest worked slices already tell you which repair disposition is primary. Each row must recover back into the same local question, repair disposition, or safeguard; if a citation starts carrying the case by itself, recover the ordinary card first.
Read E.17.AUD.LHR:6 - Boundary dispositions through this table only after the repair disposition is already visible by value. The citations do not choose the repair disposition for you; they discipline why the already-recovered repair disposition is reviewable and teachable.
Relations
Builds on
A.6.P Relational Precision Restoration (RPR)E.10 Unified Lexical Rules for FPFF.18 Local-First Unification Naming ProtocolA.7 Strict Distinction
Nearest neighbors
E.17.AUD.OOTD PublicationUnit Primary EntityOfConcern DisciplineE.17.ID.CR ComparativeReading
E.17.AUD.LHR:End
PublicationUnit Stability Discipline and PublicationUnit Primary EntityOfConcern Discipline - publication-unit stability over one primary EntityOfConcern
Placement. Narrow publication-unit stability pattern inside the broader PublicationUnit Stability Discipline.
Builds on. A.6.P, A.7, E.10, F.18, E.14, E.19, C.2.2a, A.16.0.
Coordinates with. E.17.AUD.LHR, E.17.ID.CR, E.17.EFP, A.6.3, A.6.3.CR, A.6.3.RT, A.10, A.15, A.15.4, B.3, A.20, A.21.
Plain-name. Keep one publication unit about one primary EntityOfConcern at a time.
One-line summary. PublicationUnit Primary EntityOfConcern Discipline governs one bounded publication unit at a time and keeps that unit explicit about what it is mainly about, what move it is carrying over that entity, and what wider work, non-admissible downstream decision, or reliance claim remains outside.
Primary EntityOfConcern discipline. The live technical field is publicationUnitPrimaryEntityOfConcern: the primary EntityOfConcern, non-claim-bearing kind named by value, topic, or subject that this bounded publication unit is mainly about for the current use. When no claim-bearing episteme or episteme-lane view is live, the pattern names the non-claim-bearing kind named by value, topic, or subject without creating a false EntityOfConcernRef.
Publication unit under review in plain terms. The publication unit under review is one bounded publication unit that other people are meant to read as one unit: a note, memo, sheet, review aid, screen, table, or short section. The carried publication move is to keep that unit explicit about one publicationUnitPrimaryEntityOfConcern, one carried move over that entity, and one outside-work boundary.
Use this when. Use this pattern when one note, memo, sheet, screen, table, comparison aid, or other publication unit starts being interpreted as if it is still about one primary EntityOfConcern while it is quietly shifting into a different primary EntityOfConcern, a different concern, or a wider process. Use it when local word repair is not enough anymore and the publication unit needs one stable answer to: what is this unit about, what move is it making, and what still remains outside?
What goes wrong if you miss this. One publication unit starts by talking about one primary EntityOfConcern and quietly ends by licensing a different interpretation, a different concern, or wider work. Review then gets trapped in sentence-level wording arguments while the real defect is publication-unit interpretation instability, and readers over-attribute decision weight or scope to a unit that never declared it.
What this buys you in practice. It lets a team stop publication-unit interpretation instability before one memo, note, or review unit quietly starts carrying rollout, approval, wider architecture strategy, or another wider concern by habit. In practice that means reviewers can name the real stabilization job earlier, keep downstream work outside, and decide faster whether the current unit is stable enough to keep using at all.
Not this pattern when. This is not the right pattern when:
- the problem is still local lexical-head kind or qualifier repair and
E.17.AUD.LHR(Local Head Restoration) is enough; - the same publication unit is already stable enough, and the question under repair is one bounded comparative review move over already available source epistemes or publications under
E.17.ID.CR; - the question under repair is still same-entity rewrite, representation shift, explanation-face work, bridge-explication, or another neighboring pattern whose move is already primary;
- the question under repair is view, face, carrier, or publication architecture rather than publication-unit interpretation instability;
- the unit is already being used to approve, assign, adjudicate, or direct work and should use the more honest downstream decision, work, or reliance publication.
Quick recovery entry. If the recognition block fits, recover the working question through the ordinary six-row card in E.17.AUD.OOTD:4.3 and the nearest worked slices in E.17.AUD.OOTD:5.1 through E.17.AUD.OOTD:5.5. If that ordinary card plus one nearest worked slice already settles the case, stop there rather than climbing into the heavier assurance sections by habit.
Quick boundary bank. If the recognition block no longer fits, stop at the right boundary instead of opening the heavier stack by habit. One overloaded local lexical head or qualifier only -> E.17.AUD.LHR (Local Head Restoration). Same stable publication unit, but the question under repair is one bounded comparison over already pinned source epistemes or publications -> E.17.ID.CR. View, face, carrier, same-entity rewrite, or downstream approval, work, or reliance question -> the neighboring pattern or the more honest downstream decision publication.
Quick kind-plus-lens interpretation. PublicationUnit Stability Discipline names the broader publication-unit discipline family. PublicationUnit Primary EntityOfConcern Discipline names the publication-unit stability pattern used when one publication unit needs its primary EntityOfConcern, carried move, and outside-work boundary made explicit together. The inherited moving lineage still remains successive U.Episteme publications over U.CharacteristicSpace; this pattern keeps explicit how one publication unit speaks about that lineage or a move over it, not a rival moving lineage.
Primary working reader. The first-minute reader is an engineer-manager, architect, reviewer, or programme lead who needs to stop one publication unit from quietly changing what it is about. Secondary readers may include people polishing or reviewing the text itself, but the top recognition block should still read as ordinary review and writing discipline first.
Problem frame
Anti-single-sequence note. The quick checks, ordinary six-row card, heavier extension, and worked slices in this section are local aids for one publication unit under review. They are not a canonical sequence for publication-unit repair and not a promise that admissible cases follow one fixed graph in one direction. Use the worked slices sideways rather than as one required sequence: one admissible case may stop after one publication-unit declaration, another may reopen when outside observations change the honest primary EntityOfConcern, and another may apply the governing pattern once downstream approval, work, reliance, or a neighboring-pattern question becomes primary.
Teams repeatedly write one publication unit that begins by talking about one primary EntityOfConcern and ends by talking about another while still sounding like one unchanged text.
Typical moments include:
- an architecture note that starts about a system boundary and ends about rollout work;
- an operations review note that starts about an incident episode and ends about action approval;
- a requirements or policy note that starts about a primary EntityOfConcern and ends about its carrier or document status;
- an episteme-publication-heavy note that starts about one pattern section or publication form and ends about wider architecture strategy;
- a comparison sheet that starts about one primary EntityOfConcern and quietly shifts into engineering-process, approval, work, or reliance pressure.
That interpretation instability is usually not caused by one bad sentence alone. It is caused by one whole publication unit no longer holding a stable answer to what it is about, what move it is carrying, and what wider work still stays outside.
Problem
Without a named publication-unit discipline:
- authors repair one vague phrase at a time but still leave the unit unstable as a whole;
- reviewers argue about wording while missing that the unit has already shifted from primary EntityOfConcern to process or from description to decision pressure;
- teams quietly read one note as if it licensed a downstream move the unit never declared;
- local lexical discipline (
A.6.P,E.10,F.18) gets blamed for publication-unit interpretation instability it was never meant to solve alone; - unit-form confusion is mistaken for view, face, carrier, or publication architecture even when the immediate problem is simpler and closer.
Forces
Solution - stabilize one publication unit, one primary EntityOfConcern, one move, and one outside-work boundary
Manager-first entry
PublicationUnit Primary EntityOfConcern Disciplinekeeps one publication unit explicit about what it is mainly about, what move it is carrying over that entity, and what wider work remains outside.It becomes necessary when local repair is no longer enough and the publication unit still has unstable interpretation across primary EntityOfConcern, description, carrier, publication unit, process, or downstream decision use while sounding unchanged.
In plain working terms, this section is for moments like:
this memo is about the architecture boundary, not yet about the rollout plan;this review note is about the incident episode, not yet about the action decision;this comparison sheet is about the primary EntityOfConcern under review, not yet about approval or the downstream decision;this semio note is about one pattern section or publication form, not the wider architecture policy around it.
If that is the clarification you need, start here.
If the real problem is still only one vague local lexical head word, start with E.17.AUD.LHR (Local Head Restoration).
Pairwise plain glosses
- Publication unit = one written or displayed bounded unit others are meant to read as one unit, such as a note, memo, sheet, table, or guided screen.
- Primary EntityOfConcern = the local stabilization interpretation for what that unit is mainly about when it carries or exposes a claim-bearing episteme or episteme-lane
U.View; it is not a newC.2.1slot. If no claim-bearing episteme or episteme-lane view is live, name the non-claim-bearing kind named by value, topic, or subject instead of inventing aEntityOfConcernRef. - Carried move = what the unit is doing over that entity, or that it is only stabilizing it without adding a new move.
- Outside-work boundary = what wider review, execution work, non-admissible downstream decision, or reliance claim stays outside the current unit.
- Explicit transition = the unit openly says it has moved from one interpretation or primary EntityOfConcern to another instead of pretending nothing changed.
Minimal modeling lens
Treat the publication unit under review here as one publication unit carrying one primary EntityOfConcern interpretation over one current working concern or lineage slice. That interpretation does not make the unit itself a U.EpistemePublication; it stabilizes the unit's interpretation over the already identified item it carries or exposes.
The smallest honest lens asks five entries:
- what publication unit is under review;
- what primary EntityOfConcern is active;
- what move over that entity is being carried;
- which interpretation is active;
- what wider work still stays outside.
If that lens cannot stay stable after local repair, do not patch over the interpretation shift with a heavier declaration; reopen the unit or apply the governing pattern instead.
Scope and exclusions
In scope
- one publication unit with unstable interpretation across multiple primary EntityOfConcern values;
- one unit mixing move and outside work;
- one unit quietly shifting between primary EntityOfConcern, description, carrier, publication unit, process, or downstream decision use;
- episteme-publication-heavy texts where repair disposition, governing pattern, primary EntityOfConcern, carried move, and outside work must stay explicit across one publication unit.
Out of scope
- local lexical-head repair only;
- pure view, face, or carrier architecture work;
- entityOfConcernRef-preserving transform, explanation, bridge, ontology, or comparative-review questions whose neighboring patterns already govern the main move;
- downstream gate, approval, execution, or decision pressure.
Ordinary stop rule. If the ordinary six-row card plus one nearest worked slice already settle the case, stop there. Do not climb into heavier assurance just to prove that one unit now keeps one primary EntityOfConcern, one carried move, and one outside-work boundary honestly in place.
Ordinary working card
For ordinary use, keep at least these six rows visible:
If those six rows can stay stable across the same publication unit, ordinary use is usually enough. Treat that six-row card as the recognition block.
If local repair is still enough, go back to E.17.AUD.LHR (Local Head Restoration) instead of adding more structure here.
If the unit remains one publication unit but neighboring-boundary claim-kind, misuse risk, or cross-interpretation ambiguity becomes claim-bearing, use the heavier extension as the assurance section.
If the same unit is already stable as one primary EntityOfConcern, one carried move, and one outside-work boundary, and the remaining question is one bounded comparative review move over already available source epistemes or publications, apply E.17.ID.CR before thickening this publication-unit card.
If the unit cannot keep one stable primary EntityOfConcern, one carried move, and one outside-work boundary even after local repair, do not solve that by stacking more fields onto the heavier extension; apply or reopen the neighboring-pattern check first.
Claim-bearing extension and quick boundary summary
Use the heavier extension only when the ordinary six-row card already stays stable and the case is close to important seams. It is for heavier declaration, not for rescuing a unit that still cannot keep one primary EntityOfConcern, one carried move, and one outside-work boundary in place.
Then add:
publicationUnitFormCue;primaryInterpretation;transitionPolicy;modelingLensPolicy;downstreamDecisionPolicy.
These fields do not create a rival rule track. publicationUnitFormCue names words such as note, sheet, screen, and table as form clues only; it does not make those clues primary-entity kinds or claim named by value/relation kinds. The fields only make the heavier neighboring-boundary claim-kind visible once the ordinary card already holds.
Quick governing-pattern and project-side-reference boundary summary
- use
E.17.AUD.LHR(Local Head Restoration) when the instability is still local to one local lexical head, qualifier, or interpretation word; - use
E.17.ID.CRwhen the same publication unit already holds one stable primary EntityOfConcern, one carried move, and one outside-work boundary, and the question under repair is one bounded comparative review move over already available source epistemes or publications; - use this pattern when one publication unit still has unstable primary EntityOfConcern, carried-move, or outside-work interpretation after honest local repair;
- use the neighboring pattern or the project-side FPF kind and reference named by value when view, face, carrier, entityOfConcernRef-preserving transform, explanation, bridge, ontology, gate, approval, or execution claim becomes primary.
Boundary-rule summary
This section is the canonical governing-pattern boundary summary for PublicationUnit Primary EntityOfConcern Discipline inside the Core.
Companion notes may elaborate admissibility checks and review scaffolding, but they may not override this section.
The practical summary is:
- keep one primary EntityOfConcern unless a transition is explicit;
- do not collapse primary EntityOfConcern, description, carrier, publication unit, process, and downstream decision use into one unchanged interpretation;
- keep the carried move distinct from the wider work around it;
- use local
E.17.AUD.LHR(Local Head Restoration) first, and open this pattern when publication-unit interpretation instability remains after that; - apply
E.17.ID.CRwhen publication-unit stability already holds and the remaining question is one bounded comparative review move over already available source epistemes or publications; - move out when the unit starts carrying downstream decision pressure or another neighboring pattern question.
Archetypal grounding
Worked-slice status. Read the architecture, operations, episteme-publication-heavy, comparison-return-to, and changed-EntityOfConcern cases as a heterogeneous example bank, not as one recommended progression.
Architecture note shifting into rollout work
A short architecture memo begins with:
This note is about the proposed service boundary between catalog and checkout.
Three paragraphs later it says:
We should therefore assign rollout responsibility to platform and stage migration in two sprints.
The fix is not only lexical. The publication unit changed its primary EntityOfConcern from architecture boundary to rollout process and decision responsibility. This section forces the author to either:
- keep the note about the boundary and push rollout outside;
- or make the transition explicit and use a downstream decision or rollout publication.
Operations note shifting into approval
An incident note begins as a comparative review of timing variance and operator context. It ends as if it already recommends a production action.
This section makes the author keep the review unit about the episode and the contrast it is surfacing, while forcing work approval into an explicit outside-work or downstream decision text.
Semio-heavy text mixing one local section and wider architecture strategy
A semio note starts about one selected pattern section and ends as if it had decided the packaging strategy for the whole overlay.
This section forces the unit to say:
- what the note is about now;
- what move it is making over that primary EntityOfConcern;
- and what wider architecture strategy remains outside the current unit.
Unit stabilizes and bounded comparison becomes primary
A review note first shifts between the selected interface boundary, the move it is making over the current evidence, and the rollout implications around that boundary.
After one honest publication-unit repair it now says:
This review unit is about the interface boundary options and the contrast they make visible under the current incident evidence; rollout responsibility and approval remain outside this note.
At that point the same unit already holds one stable primary EntityOfConcern, one carried move, and one outside-work boundary.
PublicationUnit Primary EntityOfConcern Discipline has done its job.
If the remaining question is now one bounded comparison between the already pinned options over the same evidence, the honest next pattern application is E.17.ID.CR rather than keep thickening publication-unit discipline.
Outside observation changes the honest primary EntityOfConcern
A release-readiness note is already explicit that it is about one candidate publication or view and the risk state visible from the current evidence. Mid-review, an external vendor bulletin and a new field observation change the live failure boundary for that same candidate.
The honest move is not to keep appending the new question while pretending the same unit still carries the same primary EntityOfConcern unchanged. This section forces the author to either:
- stop the current unit at the originally declared primary EntityOfConcern and open a new downstream record for the changed question;
- explicitly reopen the same unit with a newly declared primary EntityOfConcern, move, and outside-work boundary;
- or apply the governing pattern once approval, execution, or another downstream decision publication becomes the more honest primary question.
Bias-Annotation
Lenses tested: Arch, Onto and Epist, Prag, Did.
This section intentionally biases toward explicit publication-unit stability and against quietly letting one unit absorb wider work or decision pressure by habit.
The main mitigation is explicit primary EntityOfConcern, move, and outside-work surfacing, early return to E.17.ID.CR when publication-unit stability is already solved, and explicit governing-pattern boundary dispositions once a downstream claim becomes primary.
Conformance Checklist
- CC-OOTD-1 - One publication unit is explicit. The publication unit under review is explicitly identifiable as one note, memo, sheet, screen, table, or section meant to be read as one unit.
- CC-OOTD-2 - Primary EntityOfConcern is explicit. The unit makes its primary EntityOfConcern recoverable enough that readers are not left to infer it from tone alone.
- CC-OOTD-3 - Carried move is explicit. The unit states what move it is making over that primary EntityOfConcern, or explicitly says that it is only stabilizing the primary EntityOfConcern without a new move.
- CC-OOTD-4 - Outside-work boundary is explicit. Wider work, approval, execution, or non-admissible downstream decision, work, or reliance pressure is either declared outside or handled by its governing pattern rather than smuggled into the same unchanged unit.
- CC-OOTD-5 - Any transition is explicit. If the unit shifts between primary EntityOfConcern, description, carrier, publication unit, process, or downstream decision use, that transition is explicit rather than quietly absorbed.
- CC-OOTD-6 - Local vs publication-unit repair choice is honest.
Apply
E.17.AUD.LHR(Local Head Restoration) first when local repair is enough; apply this pattern only when publication-unit interpretation instability remains after local repair. - CC-OOTD-7 - Neighboring-pattern boundary is explicit. If entityOfConcernRef-preserving transform, explanation, bridge, comparative-review, ontology, gate, approval, or execution claim becomes primary, its governing pattern is applied rather than pretending this pattern still carries the case.
- CC-OOTD-8 - Claim-bearing lens is stated when needed. If a minimal modeling lens or downstream-decision policy is materially claim-bearing, it is stated rather than silently assumed.
Common Anti-Patterns
- Local-repair inflation. Opening publication-unit discipline when one overloaded local lexical head or qualifier is still the real defect.
- Work-process smuggling. Letting a note begin as architecture, incident review, or comparison work and end as rollout, approval, or execution guidance without naming the transition.
- Admissibility-pattern replacement. Treating this pattern as if it replaced view, face, or carrier architecture, entityOfConcernRef-preserving transform rules, explanation governance, bridge rules, or downstream decision texts.
- Overgrowth by declaration. Stacking heavier fields onto a unit that still cannot keep one stable primary EntityOfConcern, one move, and one outside-work boundary in place.
Consequences
Used well, this section buys three main gains:
- authors stop smuggling wider work into one unit by accident;
- reviewers can name publication-unit interpretation instability instead of only arguing about wording;
- neighboring patterns and downstream decision texts stop getting blamed for confusion created one layer earlier.
The cost is that some notes must become shorter, split earlier, or reopen more honestly when the primary EntityOfConcern really changes. That cost is deliberate.
Rationale
The point of this pattern is not to create a second architecture of views, faces, carriers, or downstream decision texts. It is narrower: one publication unit can become misleading even when every single sentence looks locally acceptable.
A.6.P, A.7, E.10, and F.18 already keep kinds, distinctions, and naming precise.
This pattern adds the missing publication-unit discipline that asks whether the same publication unit is still honestly about one primary EntityOfConcern, carrying one move, with one explicit outside-work boundary.
The pattern also stays intentionally close to E.14 and E.19.
Recognition comes first through a manager-usable entry block and the ordinary six-row card.
Heavier declaration comes only after the ordinary card already holds.
SoTA-Echoing
Relations
Builds on
A.6.PA.7E.10F.18E.14E.19C.2.2aA.16.0
Nearest neighbors
E.17.AUD.LHRfor local lexical-head kind or qualifier repair;E.17.ID.CRwhen the same unit is already stable and the remaining question is one bounded comparative review move;E.17.EFPwhen explanation-face governance on existing faces is primary;A.6.3,A.6.3.CR, andA.6.3.RTwhen the question under repair is same-entity rewrite or representation change;A.10when evidence or provenance becomes primary;A.15andA.15.4when work, reliance, or execution claim becomes primary;B.3when assurance or engineering justification becomes primary;A.20andA.21when approval, gate, or adjudication becomes primary.
E.17.AUD.OOTD:End
Transduction Graph Architecture (E.TGA)
Tech‑name: E.TGA (pattern label) Plain‑name: Architecture of the transduction graph Twin labels: Tech / Plain per E.10; faces emitted via E.17 MVPK (no schemas in Part E).
Intent
Provide a notation-independent architecture for transduction graphs. The EntityOfConcern is a TransductionGraph: a typed, editioned directed multigraph whose nodes are morphisms, whose edges are one typed U.Transfer relation, and whose flows are valuations over paths or path slices inside the same graph object. Crossings appear at gates; publication faces appear through MVPK; comparable claims pin editions, reference planes, Bridge/CL notes, and refresh scope.
Use this when. Use E.TGA when the question under repair is whether a project description needs one graph object, path, path slice, crossing, gate, flow valuation, or refresh locus over U.Transfer rather than an ordered work narrative, method narrative, or wording-use cue.
First useful move. Name the graph object, the node kinds, the single U.Transfer edge kind, and the exact crossing, path, or path slice whose pins are required. For the ordinary case, this is enough: TransductionGraph, active PathId or PathSliceId when a path or slice is live, node kinds, one U.Transfer, and only the crossings or pins that are live.
Graph ontology. E.TGA keeps these distinctions primary:
Not this pattern when. Use A.20 for internal step validity, A.21 for gate-decision publication, E.20 for mechanism-governing-definition placement, the A.15 family for work planning or performed work, E.17 for publication faces, and E.10 for wording-use repair when the graph, path, crossing, or flow valuation is not live.
What goes wrong if missed. A practitioner may treat a reference flow, a wording-use cue such as transition, or a tool pipeline as a new graph kind or a hidden prescribed workflow, then lose comparability, crossing evidence, and slice-local refresh boundaries.
What this buys. E.TGA lets the practitioner keep graph structure, publication pins, crossings, CV/GF separation, and refresh locality in one current architecture without turning every domain path into its own flow doctrine.
Problem frame
Teams can produce many valid flow valuations for the same holon under VP.Functional, for example for a declared U.Capability or transduction claim. The P2W reference path is:
U.Signature(profile=FormalSubstrate) → U.PrincipleFrame → U.Mechanism → U.ContextNormalization (UNM) → U.SelectionAndTuning ↔ U.WorkPlanning → U.Work → U.EvaluatingAndRefreshing
is one path among many possible domain paths. Without a common graph architecture:
- flows look ad‑hoc and non‑comparable;
- cross‑Context crossings (plane/Context changes) are undocumented;
- MVPK faces carry hidden arithmetic or restate I/O;
- set‑returning selection is silently replaced by single scores;
- cycles lack budget discipline; refresh is out‑of‑band.
MVPK already fixes publication drift at the single-arrow scope; E.TGA lifts those publication and comparability laws to the graph as a whole.
Problem
- Morphisms ≠ Graph. A catalog of morphism-scoped patterns (e.g., UNM, Selector, Work, Refresh) does not, by itself, explain how the whole graph is built, constrained, and audited.
- Flow proliferation. Multiple “reference flows” can be declared; practitioners need one graph discipline that keeps them admissible and comparable without privileging any single flow.
- Unsafe publication. Faces re‑list I/O, hide scalarization, or omit edition/plane pins; cross‑Context reuse lacks Bridge/CL citation; plane penalties appear in F/G instead of R.
- Cycles without norms. Selection↔Planning loops run without explicit budget (Γ_time), FreshnessRequest, or slice‑scoped refresh;
FinalizeLaunchValues(launch‑value slot filling) is performed too early (outsideU.Work(U.WorkEnactment)).
Forces
Solution - E.TGA graph model and relation disciplines
Dominant Solution moves. In ordinary E.TGA use, keep five moves primary: name one graph object; distinguish the graph from a flow valuation; place gates only on crossings or the U.WorkEnactment boundary; preserve normalize-before-compare and set-return discipline; and keep cycles under budget plus PathSlice refresh. S12 viewpoint mapping remains conditional viewpoint-mapping input when engineering or publication viewpoint mapping is live.
S1 - Graph object (conceptual)
Define a typed, editioned, directed multigraph
TransductionGraph := (V, E, τ_V, τ_E, Γ_time, Bridge, CL, TransportRegistry^Φ)
with:
- Vertices
V: instances ofU.Morphism(open world). Common specialisations include but are not limited to the P2W illustrative set:U.Signature(profile=FormalSubstrate),U.PrincipleFrame,U.Mechanism,U.ContextNormalization (UNM),U.SelectionAndTuning,U.WorkPlanning,U.Work,U.EvaluatingAndRefreshing. This list is illustrative, not exhaustive—the graph does not depend on this particular set. - Edges
E: a single edge kindU.Transfer(typed) carrying carrier refs and token refs; all plane/Context/edition changes occur only at nodes viaOperationalGate(profile)with Bridge + CL annotations; penalties → R only. Transport conversions pin Φ‑policies and editions. - Scopes:
Γ_time(budgets, horizons),PublicationScopefor faces (E.17), and slice ids for refresh (G.11).
CtxState (PS‑projection; closed slots): CtxState = ⟨L, P, E⃗, D⟩ is the projection of E.17 Publication Scope.
Slot definitions (normative):
• L := Locus — an element of a partially ordered ContextSlice poset; addresses where claims apply (disciplinary / organizational / holonic slice).
• P := ReferencePlane — the reference plane/units registry id; no plane/unit declarations or translations occur in CV; crossings remain gated (A.21).
• E⃗ := Edition vector — a partial map edition_key ↦ EditionId over named families {CG‑Spec, ComparatorSet, UNM.TransportRegistryΦ} and optional {DescriptorMapRef, DistanceDefRef, CharacteristicSpaceRef} when cited.
• D := DesignRunTag — design(T^D) or run(T^R), used by LaunchGate and acceptance/telemetry duties.
Invariants. Raw U.Transfer preserves CtxState (⟨L,P,E⃗,D⟩): it does not write/update any CtxState slot; any CtxState write/update (or entry to U.WorkEnactment) occurs at OperationalGate(profile).
Extension discipline. A conforming use registers any extra slot beyond ⟨L,P,E⃗,D⟩ in the E.17/LEX “CtxState Extension Registry” with slot‑id, intent, partial‑order law (neutral/absorbing), and SquareLaw compatibility; unregistered extensions are non‑conformant.
Data-shape location. E.TGA names the graph and valuation obligations for PathId, PathSliceId, Γ-pins, and lineage: flow is a valuation over U.Transfer, raw transfer preserves CtxState, and path or slice evidence is carried through this pattern plus A.20, with G.6 or G.11 where evidence-path visibility or refresh wiring is live. Use these current loci for path and slice currentness.
- Kinds:
U.Transduction(kind∈{Signature, Mechanism, Work, Check, StructuralReinterpretation}). Exact identification (no TGA‑local taxonomy): —Signature≡ A.6.0U.Signature(universal, law‑governed declaration). —Mechanism≡ A.6.1U.Mechanism(law‑governed application over a SubjectKind/BaseType). —Work≡ A.15U.WorkEnactment(world‑contact;FinalizeLaunchValuesonly here). —Check≡OperationalGate(profile)(universal gate;A.21governs gate profile, check aggregation, decision, and publication minima). —StructuralReinterpretation≡ the E.TGA placement of A.6.4U.EpistemicRetargetingas a graph node; it is not a new retargeting kind. All retargeting semantics (slot-scoped discipline,EntityOfConcernSlot/GroundingHolonSlotbehaviour, invariants, Bridges, witnesses) come from C.2.1 and A.6.2–A.6.5; E.TGA does not introduce a TGA-local variant of retargeting.
OperationalGate ≔ U.Transduction(kind=Check) with DecisionLog aggregation.
The only extra discipline E.TGA adds for StructuralReinterpretation is graph-local: CtxState and GateCrossing behaviour are governed by CC-TGA-06-EX and CC-TGA-11 (projection-preserving w.r.t. ⟨L,P,E⃗,D⟩, PathSlice-local, and "no plane/unit change without a gate"). StructuralReinterpretation is not a gate exception; it carries a recorded witness condition for saying no GateCrossing occurred. If any CtxState slot, plane/unit, edition, or design/run boundary changes, the case is a GateCrossing again.
MVPK integration (import). Every vertex with an external publication face is published via MVPK faces (
PlainView,TechCard,AssuranceLane,InteropCard) under a declared PublicationScope (E.17). E.TGA reuses MVPK’s publication laws (pins, declared-order discipline, “no new numeric claims / no I/O re‑listing”) and only adds graph-scope constraints in S3 and CC‑TGA‑09/10; it does not define a second, local publication semantics.
GateCrossing (normative)
Definition. A GateCrossing is the typed transition at a node that writes/updates any of:
(i) U.BoundedContext (Context), (ii) ReferencePlane, (iii) any member of the Edition vector E⃗ (e.g., CG‑Spec, ComparatorSet, UNM.TransportRegistryΦ, DescriptorMapRef, DistanceDefRef, CharacteristicSpaceRef), (iv) DesignRunTag (T^D↔T^R), or (v) Kind/EntityOfConcernRef (only under StructuralReinterpretation subject to CC‑TGA‑06‑EX).
Invariants. Raw U.Transfer preserves CtxState; a GateCrossing occurs at exactly one OperationalGate(profile) (SquareLaw applies).
Required pins (minimum). BridgeCard + UTS row; CL for scope bridges; CL^plane for plane crossings; CL^k with bridgeChannel=Kind for kind transitions; PublicationScopeId; PathSliceId; Γ‑pins on compare/launch faces.
Canonical reference. CrossingRef := ⟨GateId, channel, from, to, UTS.RowId, PathSliceId⟩. Any DecisionLog entry whose rationale depends on a crossing cites CrossingRef.
CrossingBundle (normative)
Definition. A CrossingBundle is the published bundle that makes a GateCrossing auditable and replayable (crossing visibility). It includes:
- the canonical
CrossingRef; - the matching UTS row (
UTS.RowId) for the crossing; - the required pins
PublicationScopeIdandPathSliceId; - where a Bridge is involved: the BridgeCard (F.9) and its disclosed fields (
BridgeId,bridgeChannel, CL and loss notes;CL^kwhenbridgeChannel=Kind;ReferencePlane(src,tgt)); - where planes differ:
CL^planeand the activeΦ_planeas aPolicyIdRef(policy-id + resolvable refs; F.8:8.1); - the active penalty policy identifiers
Φ(CL)(andΨ(CL^k)if used) asPolicyIdRefbundles (policy-id +PolicySpecRef+MintDecisionRef?; F.8:8.1); - any additional pins mandated by the active GateProfile / GateChecks (A.21) for this crossing.
CrossingBundle rule. Every GateCrossing publishes its CrossingBundle. Missing or non-conformant CrossingBundle is a blocking defect for downstream uses that rely on the crossing (selectors, acceptance, audits). A local descriptive graph with no downstream crossing consumption is not over-penalized by this CrossingBundle rule.
Term separation. Transfer denotes the sole edge kind U.Transfer (graph edges). Transport denotes Φ‑governed conversion policies/registries (TransportRegistry^Φ under UNM). Wording “reuse via Transport” refers to registries/policies, not to an additional graph edge.
S2 - Flows as valuations (paths + state + guards)
-
A Flow is a valuation
νoverU.Transferedges and cut-sets, paired with an admissible pathp = v0 -> ... -> vk. The valuation assigns tokens or states underCtxStateand records publication events under a declaredPublicationScopeId. The concrete pins and identifiers (PathId,PathSliceId, Γ_time on compare and launch faces) are governed here as path and slice publication obligations and byA.20when CV witnesses are live; useG.6for evidence-path visibility andG.11for refresh wiring. This reflects the “graph != flow” norm (flow = valuation), with gates placed exactly on GateCrossings. -
Multiple coupled flows. One
TransductionGraphmay contain several coupled flow valuations, such as a development flow that creates or repairs a specification, pattern, process description, mechanism description, method set, tool, or work plan; an application flow that uses that product for anotherEntityOfConcern; and an evaluation or refresh flow that detects a problem and returns to the smallest affected development or application locus. The graph unites those flows throughU.Transfer,PathSlice, edition-change, refresh, return, or feedback relations, but it does not merge their governed objects, records, launch values, evidence, gates, or performed work. The same product may be a run result of one flow and a design-side input, tool, or contextual object for another flow; that flow-local relation-position change is recorded by the current flow relation and any liveDesignRunTagcrossing, not by silently changing the object's kind. -
Admissible path (definition). A path
pis admissible iff: (a) node/edge types match the declaredτ_V, τ_E; (b) any write/update to any member of⟨L,P,E⃗,D⟩(or kind‑retargeting underStructuralReinterpretation) appears at exactly oneOperationalGate(profile); (c) each GateCrossing onphas a SquareLaw witness (CC‑TGA‑23) and, where applicable, a SquareLaw‑retargeting witness (CC‑TGA‑06‑EX); (d) no hidden crossings occur across raw transfers; (e) Γ‑pins are present on compare/launch faces; (f)T^D↔T^Roccurs only atLaunchGate. -
U.TransferpreservesCtxState(⟨L,P,E⃗,D⟩) and carries Assurance‑operations only (see S3b); any crossing of locus/plane/editions orT^D↔T^Ris placed atOperationalGate(profile). -
A PathSlice is a slice‑scoped execution window used for refresh/telemetry; faces pin
PathSliceId; re‑emission happens when any pinned edition changes orSliceRefreshis triggered by sentinel rules.
Consequences. The P2W reference flow is simply one
pinTransductionGraph. Other domains (supply chain, water network, NN functional) instantiate differentpon the same architecture.
Why "flow = valuation" doesn't kill the "something is flowing" intuition There are two complementary perspectives:
- Lagrangian (intuitive): "water particles" run through pipes; you "track" tokens.
- Eulerian (architectural): you define a function on edges ("how much/what passes through each edge under a given regime"), with gate laws. E.TGA deliberately fixes the Eulerian semantics of flow at the architectural scope: "flow (= valuation) + publication log", while the dynamics of "movement" show up as re-valuation over a PathSlice (the execution/republishing window) under gate rules and the SquareLaw. This yields comparability, reproducibility, and slice-local refresh.
S3 - Publication discipline (faces)
E.TGA imports E.17 wholesale and associates MVPK faces with PublicationScope (USM).
MVPK remains the normative source for:
- the set of face kinds (
PlainView,TechCard,InteropCard,AssuranceLane), - pin discipline and Publication Characteristics (PC),
- “no new numeric claims / no I/O re‑listing / no Γ‑semantics on faces”.
E.TGA does not re‑specify these laws; it only adds graph-scope obligations for faces emitted over transduction paths:
- Crossings on faces. When a face participates in a GateCrossing (S1.b/S9), it cites
BridgeId + UTS row + CLand publishes Φ(CL)/Φ_plane RuleId; penalties remain in R‑lane. - Gate requirement on cited editions. Any face that references editions of
CG-Spec,ComparatorSet, orUNM.TransportRegistryPhiincludesBridgeCard + UTS row; faces without this are treated as non-consumable downstream. Bridge and terminology-synchronization checks are governed byF.9,F.17,E.17, andE.18; selection and comparator pressure stays withA.19.SelectorMechanism,C.18,C.19,G.5, orG.11when live. - ComparatorSet & set returns (graph‑scope). Any
ComparatorSetandSetSemanticsRefused along a transduction path carries edition identifiers; flows re‑emit faces on edition change; faces with comparison return sets and declared partial orders (no hidden scalarization), reusing MVPK’s declared-order discipline. - Γ_time on compare and launch faces. All compare and launch faces on E.TGA paths pin
Γ_time; implicit latest is not admissible.A.21carries current GateProfile binding and minimum profile semantics; E.TGA paths include the pin. CHR avoids acceptance thresholds (NoThresholdsInCHR); thresholding and launches are carried byA.21, Part G, andU.Workwhere live. Unknowns remain tri-state (pass|degrade|abstain) and fold per the active GateProfile (A.21).
Reminder. MVPK already bans “signature” on faces, I/O re‑listing, arithmetic on faces, and unpinned numeric content (E.17 §5.4–5.5). E.TGA does not weaken or override those rules; it only constrains how they are used along transduction paths.
Lean publish‑mode (AssuranceLane‑Lite). Lean changes publication faces only (PlainView/AssuranceLane minimal), not checks; publication shows GateProfile, GateCheckRef[], and DecisionLogRef; the underlying GateChecks list remains unchanged.
Decision stability & idempotency (gate-local). Gate decisions are stable under a declared equivalence relation over the pins used by A.21; the witness is recorded as DecisionLog or EquivalenceWitnessRef, with G.6 or G.11 used when evidence-path visibility or refresh implications are live. E.TGA does not prescribe storage formats, key shapes, or hashing schemes.
KindBridge admissibility (publication).
Treat a step as a EntityOfConcernRef/kind transition (including StructuralReinterpretation under CC‑TGA‑06‑EX) iff the UTS row:
— satisfies the minimal bridge and terminology-synchronization obligations of F.9, F.17, E.17, and E.18 where live (identity, ReferencePlane, CL/CL^plane, edition pins for CG-Spec, ComparatorSet, UNM.TransportRegistryPhi, ComparatorSetRef, BridgeId, and Phi-RuleIds), and
— is additionally marked as a KindBridge per C.3 (bridgeChannel=Kind, CL^k, mapping or signature‑translation, order‑preservation claims, loss notes, definedness area, determinism).
Otherwise this KindBridge explanation does not apply (the step falls back to a gated crossing). When the crossing is gate-mediated, CrossingRef is cited and linked from the DecisionLog.
S4 - Assurance‑operations on U.Transfer (counterfactual admissibility)
On U.Transfer edges, an operation is interpreted as a declarative assurance‑operation iff it is one of
ConstrainTo(rule) - CalibrateTo(calibrationReference) - CiteEvidence(evidenceRef) - AttributeTo(provenanceReference); otherwise this explanation does not apply.
Under this interpretation, CtxState⟨L,P,E⃗,D⟩ is preserved.
If a claimed assurance operation would change plane or units, the assurance-operations explanation does not apply and the step is handled as a gated crossing (OperationalGate(profile)+Bridge+UTS).
If Φ assigns penalties, they appear in the R‑lane; otherwise no penalties appear here.
S5 - Comparability & aggregation (normalize‑then‑compare; counterfactual form)
The comparison explanation applies under the following admissibility conditions:
- If a path segment intends to compare/aggregate, it is admissible as a comparison only when UNM precedes it; UNM is method‑independent, publishes TransportRegistry^Phi and CG-Spec references, and faces cite those editions; otherwise this comparison explanation does not apply.
- If the comparator defines a declared partial order, then returns are sets/archives (Pareto/Archive); if a total order is declared, it is the one provided by the comparator; otherwise set semantics apply and covert scalarization is out of scope here.
- If a claim is ordinal‑only, then only comparison results are published; arithmetic transforms (e.g., means/z‑scores) are out of scope of this explanation and belong to declared comparators or downstream policy.
Edition-aware set/archive publication records (e.g., QD archives) pin DescriptorMapRef.edition, DistanceDefRef.edition, and CharacteristicSpaceRef.edition when applicable; refresh is slice-local. Comparator, archive, and refresh checks are governed by A.19.SelectorMechanism, C.18, C.19, G.5, G.9, and G.11 when live.
S6 - Cycle discipline (Selection ↔ Planning)
- The architecture centers the loop between
U.SelectionAndTuningandU.WorkPlanning. - The loop operates under a local budget / max_iter in
Γ_time; at expiry, the selector emits the currentCandidateSetandMethodTuningwith a partial‑optimality flag; further improvement rolls into the nextPathSlice. - UNM occurs before the loop; if measurements are missing/stale, UNM emits a FreshnessRequest which is planned in
U.WorkPlanningand executed inU.Work. Transfers, units, and calibrations are published asCalibrateTo(calibrationReference)and pinned toTransportRegistry^Φ(R‑channel only for penalties). - WorkEnactment is the only site for launch‑value slot filling (
FinalizeLaunchValues / FinalizeLaunchValuesOnlyInWork).
Refresh orchestration. Telemetry from
U.WorkEnactmentand publications are slice‑scoped, editions re‑pinned, faces re‑emitted.
S7 - Selector semantics (G.5) & parity harness (G.9)
E.TGA checks that set-return, archive preservation, and comparator refs remain visible along the path. It does not define selector, archive, dominance, or comparator semantics; those remain with A.19.SelectorMechanism, C.18, C.19, G.5, G.9, and G.11 where live.
- Selectors return sets. Default DominanceRegime is
ParetoOnly; IlluminationSummary (telemetry summary) and any coverage/regret telemetry quantities are report-only telemetry (reported), excluded from dominance unless a CAL policy promotes them as declared dominance inputs (policy-id in SCR).
If PortfolioMode=Archive, a QD archive can be returned; when generation is in scope, pairs {environment, method} are managed under declared EnvironmentValidityRegion and TransferRulesRef; parity records and PathSliceId are pinned on publication. Comparator semantics and archive pinning are governed by A.19.SelectorMechanism, C.18, C.19, G.5, G.9, and G.11 when live.
S8 - Guard aggregation assignment and handling (USM §1.2)
- USM.CompareGuard/USM.LaunchGuard publish
GuardOwnerGateId. Guard failures are events aggregated by the declared gate (not GateChecks). - Aggregation-assignment rules: (i)
USM.LaunchGuard.aggregationGate = LaunchGateId(U.WorkEnactment); (ii) inside a Subflow,USM.CompareGuard.aggregationGate = OperationalGate(InSentinel); Join-nodes cannot be assigned as guard-pin aggregation gates.
GateProfile data shape (cross-reference). A.21 carries the current GateProfile binding and minimum profile semantics. E.TGA names the structure only where graph crossings need it; fuller profile-matrix material is not a separate current authority unless a current governing pattern explicitly admits it.
Bridge-aware guards (cross-reference). USM guards apply bridge-translation semantics (translate(Bridge, Scope)) with CL penalties in R-lane; guard vocabulary is governed by A.2.6, while gate aggregation remains in A.21.
Error/timeout/unknown (profile-bound). GateCheck errors/timeouts fold to degrade under Lean\|Core and to block under SafetyCritical\|RegulatedX; unknown follows the GateCheck's governing rule (safety-default: degrade). The A.21 DecisionLog record and equivalence witness carry decision stability; E.TGA does not define storage or key structures.
S9 - Transport & crossings
- Cross‑Context or cross‑plane edges appear as GateCrossings that include a Bridge with CL policy; Φ(CL)/Φ_plane are published; penalties appear in R only; Scope membership (USM) is unchanged by crossings. SquareLaw is checked within a single
DesignRunTag; aT^D↔T^Rchange is modelled as a pair of coordinated gates withDesignRunTagFrom/Toand the selectedA.15work or publication locus for the live case. - When EntityOfConcernRef/kind changes across a boundary, declare an explicit KindBridge (
CL^k) in addition to plane/context CL; cross-context reuse of UNM usesTransport, with anyCL^planepenalties published in R-lane only.
S10 - Non‑mechanism boundary
- Publication is a typed projection, not execution. Any build/render/upload is Work on carriers; faces do not carry Γ-semantics.
S11 - Coordination wording labels (when live)
Coordination wording may be published as LexicalView labels over U.TransductionFlow__P2W; it is orientation-only unless a bridge, crossing, work, or gate relation is explicitly live. It adds no current graph node kind, checks, or mechanisms. Crossings with production flow use Bridge+UTS and the current bridge or crossing loci.
S12 - Viewpoint families → E.TGA constructs (neutral, holonic)
S12 status. S12 is secondary viewpoint-mapping input for a live viewpoint-family mapping claim. It is not the ordinary E.TGA core for naming a graph object, flow valuation, path slice, or crossing.
E.TGA does not mint new viewpoint or view kinds. It imports the generic multi‑view machinery of E.17.0 U.MultiViewDescribing, bundles from E.17.1, and the TEVB engineering bundle from E.17.2. S12 only describes how these existing U.Viewpoint / U.ViewpointBundle ids are used in transduction graphs and in UTS.ViewpointMap; intent/concern semantics are governed by E.17.0–E.17.2.
Two-part use of TEVB and MVPK (ISO 42010 summary, no local re‑definition).
- Engineering viewpoints. For engineering holons, E.TGA assumes a TEVB bundle with
ViewFamilyId = VF.TEVB.ENG.EngineeringVPIdis one of{VP.Functional, VP.Procedural, VP.RoleEnactor, VP.ModuleInterface}, and TEVB is the normative source for their semantics. E.TGA does not refine these viewpoints. - Publication viewpoints. Publication viewpoints come from MVPK (E.17);
PublicationVPIdis aMVPK.ViewpointIdthat governs faces under aPublicationScope. - Architecture relation. E.TGA can describe a flow/transduction-structure view of an
ArchitectureOf@Contextclaim whenDescriptionContext, described holon, bounded context, and structure kind are explicit. It does not define architecture itself, and a TGA graph is not the functional architecture by default. UseC.30,C.30.ASV, andC.30.TGA-FLOW-RELwhen the graph is used in an architecture-flow relation. Crossings and penalties follow E.TGA gating rules (S9; CC-TGA-11/23) but do not change viewpoint semantics. - Separation of roles.
VP.*from TEVB are EngineeringVPId values only; they are not publication faces.PublicationVPIdvalues live in MVPK. The mapping between them is entirely via ISO‑style correspondences and theUTS.ViewpointMap; E.TGA does not define a second notion of viewpoint.
EntityOfConcern scope (summary).
- Engineering EntityOfConcern. The engineering entity described by TEVB/E.TGA is a holon (
U.SystemorU.Episteme) per TEVB’sEntityOfConcernClassSpec. E.TGA does not broaden or narrow this set. Transformation, method, procedure/control, role-enactor structure, structural architecture, module, interface, and allocation terms are viewpoint concern/content about that holon unless a concrete E.TGA use explicitly opens A.6.4 retargeting withKindBridge (CL^k), retargeting witness, and the applicable species rule. - Publication EntityOfConcern. MVPK can treat the architecture description itself as an EntityOfConcern; publication viewpoints for that AD are defined in MVPK, not here. E.TGA only checks that such faces honour MVPK discipline and E.TGA’s crossing rules.
Naming rules (aligned with E.17.0/E.17.1/E.17.2).
ViewFamilyIdis theU.ViewpointBundle.viewFamilyId(e.g.VF.TEVB.ENGfor TEVB); its lexical and ontological discipline is governed by E.17.1.EngineeringVPId : ViewpointIdis always aU.ViewpointIddrawn from some bundle (for TEVB, one of{VP.Functional, VP.Procedural, VP.RoleEnactor, VP.ModuleInterface}). E.TGA never defines newVP.*ids.PublicationVPId : ViewpointIdis aMVPK.ViewpointIddefined in E.17; TEVB viewpoints are never reused as publication viewpoints (per TEVB guard and MVPK).- The unqualified field name
ViewpointIdis not valid in S12 rows. UseEngineeringVPIdand/orPublicationVPIdexplicitly; any imported row with an unqualifiedViewpointIdis normalized toPublicationVPIdbefore the row is used.
Terminology guards (no local semantics).
- Within S12, “viewpoint”, “view” and “correspondence” have exactly the meanings given in E.17.0; “publication face” means an MVPK face (
PlainView,TechCard,InteropCard,AssuranceLane) under somePublicationVPId. - Faces are carriers for views: a face is part of a view only when linked via an ISO‑style
CorrespondenceRefto an engineeringU.Viewunder someEngineeringVPId; S12 does not add extra conditions beyond E.17.0/E.17.2. - Labels such as “Functional view”, “Procedural view”, “Role‑Enactor view”, “Module‑Interface view” in this section are lexical aliases for TEVB viewpoints; they are not interpreted as extra viewpoint kinds or as publication-face types.
Purpose. Provide a neutral (F.18) mapping from TEVB engineering viewpoint families - bundle VF.TEVB.ENG with VP.Functional / VP.Procedural / VP.RoleEnactor / VP.ModuleInterface - to E.TGA constructs so that the same holon can be described through functional, procedural, role-enactor, or module-interface viewpoints while the E.TGA construct scope remains explicit. S12 does not introduce new U.Viewpoint or U.View kinds, and it does not claim that all such views share one underlying graph unless the graph, EntityOfConcernRef, and correspondence refs are declared.
Holon target. The mapping applies to any holon, with the constraint that only U.System enacts U.Work (A.3/A.15). Supervisory and structural hierarchies remain distinct (B.2.5).
Viewpoint family → primary E.TGA constructs (TEVB‑aligned) All four families referenced below are TEVB engineering viewpoints; the “what …” clauses are interpretive glosses for how they use E.TGA constructs. Formal intent/concerns/allowed episteme kinds remain in TEVB (E.17.2).
- Function‑Oriented View (
EngineeringVPId = VP.Functional, capability and transduction viewpoint) — “what transformation is achieved under roles”- Flow valuation example:
U.TransductionFlow__P2Wthrough nodesU.Signature(profile=FormalSubstrate) → U.PrincipleFrame → U.Mechanism → U.ContextNormalization (UNM) → U.SelectionAndTuning ↔ U.WorkPlanning → U.Work → U.EvaluatingAndRefreshing. - Publication: MVPK publication faces per E.17; comparable claims pin to
CG‑Spec/ComparatorSeteditions; crossings are published throughBridge+UTSandCL/CL^plane(penalties → R‑lane only). - Checks: A.20 (CV) inside transformations; A.21 (GateFit) at gates; comparator, set-return, and No-Hidden-Scalarization discipline is carried through
A.19.SelectorMechanism,C.18,C.19,G.5,G.9, andG.11when live. - Holonic note:
U.Epistemedoes not act; it is used by systems acting on carriers;U.Workappears only forU.System.
- Flow valuation example:
- Procedure‑Oriented View (
EngineeringVPId = VP.Procedural, step/time storyboard) — “what steps occur and when”- FPF constructs:
U.WorkPlan(A.15.2) for intent/schedule;U.WorkEnactmentfor enactment. - Boundary: entry into
U.WorkEnactmentis viaOperationalGate(profile)withUSM.LaunchGuard;DesignRunTagseparates design time from run time;DesignRunTagFrom/Toappear only at gates. - Holonic note: Applies to any
U.Systemscope (single holon or a supervised sub‑holon cluster); supervisory structure is handled by roles rather than structural mereology (B.2.5).
- FPF constructs:
- Role‑Enactor / Device‑Structure View (
EngineeringVPId = VP.RoleEnactor) — “what carrier/ports/constraints exist; who typically enacts it”-
FPF constructs: Module interfaces are
Signaturenodes; module realizations areMechanismnodes; inter‑module dependencies traverseU.Transfer, with gates on crossings. -
Publication: MVPK faces are typed projections, not
U.Workrecords or execution carriers; faces add no new numeric claims (E.17). Constraints and compatibility appear as CV checks (A.20). -
Holonic note: Structural mereology (part/whole of the carrier) is modeled in Part A; E.TGA ties interface/exposure semantics to morphisms and gates.
-
Device‑View structural reinterpretation (Transduction↔Transductor). The same transduction flow valuation can be described as a device that performs the transduction (transductor) without changing the declared E.TGA graph object: model with
Signature+Mechanismonly; do not introduce extra edge kinds. If EntityOfConcernRef retargets (function↔element), useStructuralReinterpretationwith aKindBridge (CL^k)on UTS and a SquareLaw‑Retargeting witness; preserve⟨L,P,E⃗,D⟩and treat it as a non‑crossing (CC‑TGA‑06‑EX; witness shape §4.7). -
Role‑label guard.
TypicalEnactorRoleNameis pedagogical only and is not used as a GateFit role; GateFit usesU.Role(A.21).
-
- Module‑Interface View (
EngineeringVPId = VP.ModuleInterface, physical/logical module structure) — “what modules exist and how they specify commitments and constraints across interfaces”- FPF constructs: Module interfaces are
Signaturenodes; module realizations areMechanismnodes; inter‑module dependencies traverseU.Transfer, with gates on crossings. - EntityOfConcernRef note: Functional-view-to-element-structure reinterpretation follows the Device‑View structural reinterpretation rule above (Role‑Enactor family) and CC‑TGA‑06‑EX; see §4.7 for the retargeting witness shape and CV witness linkage.
- Holonic note: The same module can appear as a holon in multiple views; supervisory loops (B.2.5) remain orthogonal to structural composition.
This is an expandable list of viewpoint families; TGA is intentionally viewpoint‑neutral. Additional engineering bundles beyond TEVB (safety, mission, information, …) are introduced as separate
U.ViewpointBundlespecies via E.17.1/E.17.2; S12 does not define them.
- FPF constructs: Module interfaces are
Alias families for transduction species (LEX‑only).
Scope. A pattern or domain profile can declare AliasesInViewFamilies[] for U.Transduction species so practitioners can recognise familiar engineering view families. All semantics come from the referenced bundles (typically TEVB) and MVPK; aliases are purely lexical.
Norms.
-
Each
U.Transductionspecies can publishAliasesInViewFamilies[]— an open list of records{ ViewFamilyId, EngineeringVPId?, Alias : TechASCII }.- If
ViewFamilyId = VF.TEVB.ENG, thenEngineeringVPIdis one of{VP.Functional, VP.Procedural, VP.RoleEnactor, VP.ModuleInterface}(TEVB; CC‑TEVB‑1/6). - Other
ViewFamilyIdvalues denoteU.ViewpointBundleinstances defined elsewhere (e.g. safety/assurance/information bundles), not ad‑hoc local families.
- If
-
Aliases are LEX‑only: no arithmetic, no new claims, no check participation, no
CtxStateslot writes/updates (incl.DesignRunTag). They do not create MVPK faces. -
Aliases are not used as
PublicationVPId; publication viewpoints remain in MVPK. -
Twin registers are allowed (Tech/Plain) per E.10; naming follows F.18 local‑first discipline.
-
Do not name transductions by operands or output states (operation != operand or output state).
-
TypicalEnactorRoleNamecan be added for pedagogy; it is not used as a GateFit role (GateFit usesU.Roleonly). -
Morphology: ASCII TitleCase; conjunctions via
And; for composite actions useXingAndYing(orXAndYingif grammar calls for it). -
The P2W illustrative species row (
U.Signature(profile=FormalSubstrate)…U.EvaluatingAndRefreshingwith functional/procedural aliases andTypicalEnactorRoleName) is informative and does not change kind or viewpoint semantics.
Conditional deliverable — UTS.ViewpointMap (TEVB-aligned when live).
Publish a UTS block named ViewpointMap only when an engineering or publication viewpoint-family mapping claim is made or consumed. Ordinary E.TGA use does not require UTS.ViewpointMap when the question under repair is only the graph object, flow valuation, path slice, or crossing.
Minimum row schema (per row, when ViewpointMap is live).
ViewFamilyId—U.ViewpointBundle.viewFamilyId(e.g.VF.TEVB.ENGfor TEVB, or another bundle id).EngineeringVPId : ViewpointId— a viewpoint from that bundle (for TEVB, one of{VP.Functional, VP.Procedural, VP.RoleEnactor, VP.ModuleInterface}).PublicationVPId : ViewpointId?— MVPK publication viewpoint id that governs faces implementing this engineering view (optional if not publishing).TargetHolon ∈ {U.System, U.Episteme}(extended species can add{U.PromiseContent|U.MethodFamily}; ifTargetHolon ≠ U.System, noU.Workenactment appears).PrimaryTGAConstructs— nodes/edges/gates actually used for this(ViewFamilyId, EngineeringVPId, TargetHolon)(typically one of the four families above).Crossings{BridgeId, CL/CL^plane?}— crossings involved; penalties appear in R-lane only.EditionPins{...}whenever comparable claims appear (bind to CG-Spec/ComparatorSet editions; any face citing editions includesBridgeCard + UTSrow per MVPK/UNM).SenseCells[](at least two per row), each citing Context name + edition (F.17/E.10 discipline; UTS-wide coverage rules still apply).- (REQUIRED when publishing)
CorrespondenceRef[]— ISO 42010 correspondences linking emitted faces to the engineering view(s) they implement; can cross architecture descriptions. - Optional relation field
ConcernsCovered[]— ISO 42010 stakeholder concerns addressed by this row via GateProfiles/check catalogues.
Conformance (S12-scoped, only when ViewpointMap is live).
(i) UTS.ViewpointMap exists when a viewpoint-family mapping claim is made or consumed.
(ii) For each holon that claims TEVB alignment, there are at least four rows whose {ViewFamilyId, EngineeringVPId} cover {VF.TEVB.ENG × {VP.Functional, VP.Procedural, VP.RoleEnactor, VP.ModuleInterface}} (per CC-TEVB-1/6).
(iii) Rows that carry edition identifiers also include BridgeCard + UTS rows through F.9, F.17, E.17, and E.18; edition-bearing faces that lack such rows are not admissible for downstream consumption.
(iv) Each row has at least two SenseCells and the sheet meets global UTS coverage rules.
(v) Any TargetHolon = U.System that reaches U.Work shows LaunchGate with DesignRunTag consistency.
(vi) Crossings referenced in ViewpointMap follow CC-TGA-11; comparability along the mapped paths follows CC-TGA-10.
(vii) Rows do not use an unqualified ViewpointId; they use EngineeringVPId and/or PublicationVPId explicitly.
(viii) When faces are published, CorrespondenceRef[] is present and resolvable to U.Viewpoint ids.
(ix) Additional bundles (e.g. assurance, information, mission) can appear as extra ViewFamilyId values but are declared as U.ViewpointBundle species; they do not extend VF.TEVB.ENG.
Archetypal Grounding (Tell–Show–Show; concise)
Tell (P2W reference path). A first-principles-to-work path is one path through the graph, not the graph itself: U.Signature(profile=FormalSubstrate) declaration, principle frame, mechanism, normalization, selection, planning, work enactment, and refresh become nodes linked by one U.Transfer edge kind, with crossings pinned where context, plane, edition, or design/run state changes.
Show-A (Supply chain). Nodes: procurement -> inbound QC (UNM) -> selection (supplier set; declared order) <-> planning (lotting/schedule; budget) -> execution (receipts; WorkEnactment enacts (world-contact)) -> refresh (quality telemetry; re-emit faces). Crossings: vendor Context via Bridge/CL; penalties appear in R only; comparators pinned to CG-Spec edition.
Show-B (Neural-net functional). Nodes: U.Signature(profile=FormalSubstrate) declaration (typed tensor-operation declaration) -> mechanism (combinator algebra) -> UNM (dataset normalization; TransportRegistry^Phi) -> selection (architecture/hyperparam set; Pareto set over accuracy@ratio and FLOPs@ratio) <-> planning (compute budget horizon) -> Work (training runs; Delta recorded) -> refresh (parity inserts; slice-scoped). Faces pin DescriptorMapRef.edition and DistanceDefRef.edition when QD telemetry values are shown; illumination remains report-only telemetry by default.
Show-C (Developed product, then application). One flow develops a specification, pattern, process description, mechanism description, method set, or tool through drafting, checks, projection, build, or publication. A later flow uses that product in project work or analysis. A further flow may use the result again: a tool is made, then used to make a chair, then the chair supports a person writing a text. The graph can join all these flows through transfers and feedback, while each flow keeps its own governed object, DesignRunTag, flow-local relation position for the carried object, work occurrence, evidence, and reopened slice.
Show-D (FPF pattern development and use). The development flow creates, evaluates, projects, publishes, and later repairs a pattern. The use flow applies that pattern to its own EntityOfConcern. An evaluation or use-found defect can return to the smallest development slice for repair. E.TGA keeps the common graph visible while separating the developed pattern, the use of the pattern, the evidence found during use, and the edition or slice that is reopened.
Cross-pattern boundary slice (QD archive). A QD selector emits an archive. E.18 says: this is one PathSlice in one TransductionGraph; selection returns a set/archive, not a hidden scalar. A.20 says: the archive insertion or update step has a live CV class, CV.Status, and witness or refusal; no acceptance is inferred. A.21 says: a comparability gate or LaunchGate can publish a GateDecision only when that gate relation is live and consumes the relevant CV result. E.20 says: if a new selector mechanism-governing definition is introduced, the mechanism-governing definition is the locus for the meaning while suites and wiring only cite or bind it. These are four governed loci, not one prescribed work order.
Post-2015 SoTA echoes (illustrative): TAMP and MPC, MAP-Elites / QD (incl. CMA-ME), refinement-typed stacks, profunctor optics. Worked examples and Tell-Show-Show vignettes for P2W, comparator/archive, coupled development/application flows, and refresh specializations stay outside this graph-architecture core unless a current pattern explicitly selects them.
Conformance — Unified checklist (normative)
Conformance use. This checklist is evidence for the graph/flow/crossing action guidance already stated in the Solution. It is not the first entry text for ordinary use and not a full audit regime by default; an item is applied only when its corresponding graph, crossing, publication, gate, refresh, or assurance move is live. Before applying any item, name the Solution move it tests; if no such practitioner move is live, treat the item as auxiliary-only or not applicable rather than expanding the applied assurance or conformance material.
Conformance groups. Ordinary graph/path use starts with graph object, single edge kind, node typing, CtxState preservation, and flow valuation. Crossing/launch items apply only when a GateCrossing, LaunchGate, StructuralReinterpretation, or work-boundary crossing is live. Publication/assurance items apply only when MVPK faces, edition pins, evidence carriers, decision logs, or replay are live. Extension/change items apply only when node-kind scope, budget/refresh behavior, or UNM/comparator editions are being changed or consumed downstream.
Coupling note.
CC‑TGA‑07 (CV⇒GF)andCC‑TGA‑21a (Decision join)together ensure that any GateFit‑scoped GateCheckRef returnsabstainuntil the aggregated CV status equalspass; CV/GF separation remains intact. Scope note (E.TGA vs neighbor patterns): Detailed mechanism-scoped checks and publication obligations are governed by the current neighbor patterns named in this pattern's Relations. E.TGA fixes only graph-architecture obligations: singleU.Transferedge kind, gate crossings, valuation, publication pins, CV/GF boundary, and slice-local refresh.
Glossary (additions)
-
Open‑world species — non-exhaustive domain-scoped specializations of
U.Transductionthat map to the minimal kind set. -
Signature (TGA kind) —
U.Transduction(kind=Signature); identical to A.6.0U.Signature(universal block). Not aC.3.2 KindSignature. -
KindSignature (C.3.2) — definition of a
U.Kindby intent, extent, and formality; unrelated to TGA kinds; never agenus. -
Species (domain-scoped) — typed specialisations
speciesOf(kind=...)that declareKindDefinition=<current governing pattern id>(e.g.,kind=Mechanism; KindDefinition=A.6.1). -
KindBridge (
CL^k) — a compatibility note on UTS for EntityOfConcernRef/kind transitions; required by CC‑TGA‑06‑EX and crossings (CC‑TGA‑11). -
Eulerian interpretation — operational stance where a flow is treated as a valuation over
U.Transferand edges perform assurance‑only operations (no token‑passing semantics). -
GateCheckKind boundary.
GateCheckKindis a publication/check lexeme used insideGateCheckRef, not a TGA node kind. NoGateCheckKindbecomesU.Transduction(kind=Check)unless anOperationalGate(profile)node is actually present. -
GateCheckRef shape (publication lexeme governed by A.21). Where graph faces carry GateChecks, a GateCheckRef is a record defined by
A.21; E.TGA constrains only where graph faces carry such refs along TGA paths.
GateCheckRef := { aspect, kind, edition, scope } with:
aspect ∈ {ConstraintValidity, GateFit}, kind ∈ GateCheckKind, edition ∈ Editions, and scope ∈ {lane | locus | subflow | profile}.
- GateDecision / GateDecisionRationale / GateDecisionExplanation (terminology).
— GateDecision — the aggregated lattice value produced by
OperationalGate(profile)for a specific{GateProfile, GateCheckRef[]}. — GateDecisionRationale — the minimal structured rationale for that GateDecision: per‑check outcomes, profile‑bound folds, and published evidence or witness references on the DecisionLog; it records why the GateDecision is admissible under the active profile. — GateDecisionExplanation — an optional human‑readable narrative derived from the GateDecisionRationale; it does not carry decision status. While aggregatedConstraintValidity ≠ pass, GateFit‑scoped checks returnabstain; any GateFit‑oriented GateDecisionExplanation does not apply.
Clarity note. GateDecision ≠ GateDecisionExplanation; narratives are optional and derivative of GateDecisionRationale.
-
GateFit (aspect, not an entity). GateFit names the aspect of checks that evaluate profile‑fit; there is no separate GateFit entity. “Gate decision under GateFit” means “the gate’s decision computed from GateChecks with
aspect=GateFit”.This shape is publication-only; it introduces no new execution steps and no arithmetic on faces. (Couples to A.20 or A.21 without duplicating their check catalogs.)
-
VALATA (VA/LA/TA) — value-annotation scheme used on AssuranceLane; carriers are referenced via SCR/RSCR; detailed evidence obligations live in
A.10and the named evidence, publication, or crossing pattern for the live case. Included here so evidence pins are self-describing in Part E texts. -
Transfer vs Transport — Transfer = the sole graph edge kind
U.Transfer. Transport = Φ‑policy/registry‑defined conversions (TransportRegistry^Φ) referenced by UNM; “reuse via Transport” refers to the latter. -
GateCrossing — a typed node transition that writes/updates a CtxState slot or the kind‑channel; see S1.b for the normative list and required pins.
-
Admissible path — a typed path obeying the GateCrossing discipline (no hidden crossings; witnesses present), Γ‑pinned on compare/launch, and
T^D↔T^Ronly atLaunchGate; see S2.
Gating Profiles (applied to E.TGA)
This table is an architectural coverage table for E.TGA graph crossings and path slices. It is not the source of GateProfile semantics. A.21 governs gate decision semantics, folds, DecisionLog minima, and the GateFit check-catalog boundary.
Gating is expressed as publication‑gating per E.17 profiles. The graph model aligns with the CC items listed for the chosen profile; broader obligation profiles include all narrower-profile items.
Recommended defaults (non-normative, tie-in to A.21 and G.11). Profiles inherit along a PathSlice; local overrides only add GateChecks; weakening uses a new PathSlice and refresh wiring through the current G.11 locus when live.
TGA LEX discipline (registration)
Register Tech tokens (ASCII) used by this architecture with twin‑labels: U.TransductionGraph, U.TransductionFlow, StructuralReinterpretation, OperationalGate, GateProfile, GateCheckRef, GateCheckKind, DecisionLog, USM.CompareGuard, USM.LaunchGuard, KindBridge, SubflowRef, FlowEmbed, SentinelId, PathSliceId, SliceRefresh, FinalizeLaunchValues, VALATA. Add an ASCII alias CLKind ↔ Plain CL^k (cf. CLPlane ↔ CL^plane). Reference MVPK E.17 naming for faces.
CtxState Extension Registry. Register any extra CtxState slot beyond ⟨L,P,E⃗,D⟩ with: slot id, informal intent, partial‑order law (with neutral/absorbing), SquareLaw compatibility note, and the owning Gate profile(s) that may change it. Absence of registration ⇒ non‑conformant.
Consequences
Benefits.
- Universality with discipline: one edge kind and explicit gates eliminate second hidden work and method orders and make cross-domain flows (ML, supply-chain, TAMP and MPC, scientific work graphs) uniformly analyzable and auditable.
- Comparability & replayability: CSLC and edition‑pinned comparators prevent covert scalarization and enable declared set returns and reproducible decisions.
- Locality of change: sentinel subflows restrict refresh to affected
PathSlices; large graphs remain stable under frequent edition bumps. - Clean DesignRunTag fold: LaunchGate and
DesignRunTagConsistencystop premature launch‑value slot filling; acceptance and telemetry live where they occur (U.Work). - Assurance visibility: MVPK makes GateProfile/DecisionLog records locally checkable and cacheable for the same
{PathSlice, GateChecks, Editions}.
Trade‑offs. a) Higher upfront modeling cost: explicit Bridge/UTS pins and GateProfiles demand care; mitigated by Lean profile and templates. b) Longer edge face sets: MVPK faces are verbose by design; lean face sets can be used for low‑risk segments. c) Tooling alignment: some incumbent DAG‑only orchestrators conflict with budgeted cycles and set‑return semantics; adapters project E.TGA semantics to their interop boundary (never the other way round).
Rationale
E.TGA states strict separation of concerns (graph-architecture scope only); specialized semantics are governed by the patterns named below for those live relations:
- What the graph is: typed morphism definitions and the single graph edge kind
U.Transfer. - Where/when it crosses contexts: only at
OperationalGate(profile), with Bridge+UTS, CL/CL^plane, and Φ published in R-lane. - How comparability works: UNM is the single governing locus for unit, plane, and transport declarations, and selectors operate only on normalized, edition-pinned comparators, returning sets or archives rather than totals. Edition-aware pins and archive semantics are checked through
A.19.SelectorMechanism,C.18,C.19,G.5,G.9, andG.11when live. - How change propagates: sentinel‑bounded
PathSlicerefresh; editions are monotone; LaunchGate is the only binder of launch‑values.
This arrangement gives checkable conditions for functorial publication (commuting squares on crossings) and orthogonality of inner technical validity (ConstraintValidity) to context fit (GateFit), which in turn keeps gate aggregation order-independent under the CV=>GF activation predicate.
SoTA‑Echoing (post‑2015, multi‑Tradition)
Each row states the source idea, the FPF invariant E.TGA adopts, the practitioner move it changes, and the shortcut it rejects. Vendor, tool, and literature tokens are informative; the invariant and practitioner move carry the pattern explanatory work.
Cross-tradition note. Rows 1-3 (compositional graph practice), rows 4-5 (publication and reproducibility practice), row 6 (controls/robotics), row 7 (evolutionary search), and row 8 (PL/semantics) jointly position E.TGA across multiple traditions per E.8, but each row is retained only because it changes a practitioner move or rejected overread.
Bias‑Annotation (per E.8 SG‑bias slot)
- Acyclic‑bias risk. Tooling accustomed to DAGs may discourage admissible feedback loops; E.TGA explicitly permits loops with budget/sentinel controls (CC‑TGA‑13,‑18).
- Scalarization-bias risk. Cultural defaults to single-score rankings can suppress Pareto/QD sets; E.TGA keeps declared order relations and return sets visible (CC-TGA-10, CC-TGA-12).
- Interop‑dominance risk. File/format ecosystems (CWL/RO‑Crate/lineage) can be mistaken for semantic sources; E.TGA places them in InteropCard and keeps governing semantics in nodes/gates.
- Over‑formalization risk. Category‑theoretic formalisms can obscure operational guard‑rails; E.TGA grounds crossings in Bridge/UTS/CL/Φ pins and SquareLaw audits (CC‑TGA‑11,‑17).
- Retrospective rewrite risk. Global rewrites break replay; E.TGA confines them to edition bumps and slice‑local refresh (CC‑TGA‑16).
Mitigations. Profile‑gated publication, audit of DecisionLog, mandatory edition pins, Lean‑to‑Core upgrade paths, and conformance tests tied to PathSlice replay.
Relations (explicit pattern‑to‑pattern edges)
Directed edges (→) are typed as builds_on / constrains / coordinates / specializes / publishes_on / requires / provides_checks_for.
Foundations
- E.TGA →builds_on→ E.17 MVPK (for Morphisms). Faces, pins, lanes, functorial publication, Lean/Core/Regulated profiles.
- E.TGA →builds_on→ A.6.0 U.Signature / A.6.1 U.Mechanism. Node kinds and governing-definition content boundaries.
- E.TGA -> builds_on -> A.7 Strict Distinction (EntityOfConcern, Description episteme, Description episteme admitted for specification use, and publication/carrier separation). No new claims on faces; publication faces project graph, crossing, or flow-valuation information without becoming the governed graph object, Description episteme, specification use, evidence, gate decision, work occurrence, or carrier.
Flow semantics & checks
- E.TGA →coordinates→ A.20 U.Flow (ConstraintValidity scope). CV checks live inside transformations; no declaration/translation of planes/units in CV; error/timeout/unknown folds follow CC‑TGA‑22 as the minimum default (profiles can be stricter). Terminology discipline (A.20 boundary). In CV scope, publications use status/witness language; GateDecisionRationale/GateDecisionExplanation are reserved for gating and do not apply to CV.
- E.TGA →coordinates→ A.21 GateProfilization (GateFit scope). GateFit-scoped GateChecks are aggregated by
OperationalGate(profile)with CV⇒GF activation; the enumeration and publication shape of GateChecks live in A.21. Equivalently: a GateFit decision different fromabstainappears only when aggregatedConstraintValidity = pass; otherwise the GateDecisionExplanation (GateFit‑oriented) does not apply. - E.TGA →uses→ USM.CompareGuard and USM.LaunchGuard. Guards publish scope and responsible gate; guard failures are handled by the declared gate.
- E.TGA -> constrains -> F.9/F.17 bridge and terminology-synchronization loci (Bridge+UTS, CL/CL^plane, Phi -> R). A transition is treated as a Crossing iff
Bridge+UTSand the appropriateCL/CL^planeare published; otherwise this crossing explanation does not apply. Where Phi defines penalties, they appear in the R-lane only. - Operational interpretation (default): Eulerian. A flow is a valuation over
U.Transfer; edges carry assurance‑only operations (see CC‑TGA‑17); no token‑passing semantics are assumed.
UNM & comparability
- E.TGA →constrains→ UNM declaration and use loci.
CG‑Spec,ComparatorSet, andUNM.TransportRegistryΦdeclarations are governed by UNM; normalize-then-compare is mandatory. - E.TGA →constrains→ G.5 SelectionAndTuning. Set‑returning, comparator‑pinned decisions, no hidden scalarization;
MethodTuningwithout launch‑value slot filling. - E.TGA →constrains→ G.11 EvaluatingAndRefreshing. EditionBumpProposal, two-phase update through the UNM declaration locus, path-local refresh.
Work boundary
- E.TGA →coordinates with→ A.15 U.WorkEnactment (
FinalizeLaunchValuesOnlyInWork). Single point ofFinalizeLaunchValues;FreshnessUpToDatehard at LaunchGate; acceptance/telemetry published here.
Structure & reuse
- E.TGA →specializes→ U.TransductionFlow (and its family). The graph architecture is the common graph-architecture base on which flow patterns (e.g., P2W, EvaluatingAndRefreshing) are defined; E.TGA provides coherence checks for their crossings, guards, and MVPK faces.
- E.TGA -> coordinates with -> C.30.TGA-FLOW-REL. When a TGA graph is used in an architecture-flow relation,
C.30.TGA-FLOW-RELrecords the relation between flow/transduction structure andArchitectureOf@Context; E.TGA keeps graph, crossing, and flow-valuation discipline. - E.TGA →publishes_on→ E.17 MVPK views (
PlainView,TechCard,InteropCard,AssuranceLane) for every edge/node where publication occurs; Lean mode allowed only as per profile.
Conformance Use Checks
- Model lint: run static checks for CC‑TGA‑01…25 (edge kind, gates on crossings, CV⇒GF, guard aggregation assignment, UNM declaration locus, SquareLaw).
- Publication audit: sample a commuting square and a sentinel‑bounded subflow; verify pins and DecisionLog behavior on block/degrade.
- Replay test: hold editions fixed; re‑run selection on a PathSlice; observe identical return‑sets; apply a bump; see only affected
PathSlices refresh. - StructuralReinterpretation probe: construct a minimal reinterpretation step; confirm
CL^kwithbridgeChannel=Kindon UTS, a SquareLaw‑retargeting witness on UTS,PathSliceIdpinned, CV.ReinterpretationEquivalence=pass, and absence of hidden scalarization.
Relation boundary: E.18 governs transduction graph architecture. When a graph use raises work planning, performed work, evidence, assurance, gate, decision, architecture, structural-view, mechanism, selector, comparison, refresh, publication, or wording-use claims, name the governing pattern for that relation before relying on the graph.
E.18.1 P2W Child-Pattern Relation
E.18.1 is a child pattern for principles-to-work carry-through. It inherits this pattern's graph, path, flow-valuation, transfer, crossing, and gate minimum, then adds the local P2W relation from accepted problem-side output to the next FPF kind named by value, relation, record, or application. Pilot examples for one specialization belong in the selected child pattern that uses them; E.18 keeps only the graph-architecture law and this short child-pattern relation.
E.18:End
Principles-to-Work Transduction Path
Tech-name:
PrinciplesToWorkTransductionPathPlain-name: principles-to-work carry-through path Type: Architectural pattern (E) Status: Stable Normativity: Normative unless explicitly marked informative Placement: Part E -> E.18 child pattern Builds on:E.18Transduction Graph Architecture,C.22.2ProblemCard@Context,A.6.0U.Signature,A.6.1U.Mechanism, the A.15 work family,C.29,C.16,F.9,A.20,A.21, and Part G comparison, selection, and refresh patterns. Purpose: carry an accepted problem-side output toward the next FPF kind named by value, relation, record, or pattern application while preserving the useful first-principles move.
Problem frame
Use this pattern when an accepted ProblemCard@Context is ready enough to guide work, but the next FPF use is not yet settled. The practitioner has an unsettled carry-through question: which problem-side distinction can be carried into the next FPF relation or record named by value?
The primary EntityOfConcern is the P2W carry-through relation: the relation between accepted problem-side material and the next admissible FPF use. P2W keeps first-principles material usable by turning it into one recoverable next move instead of letting an inspiring explanation become an all-purpose project claim.
Use this when
- an accepted
ProblemCard@Contextnames a working problem and the team needs a disciplined next move toward method, planning, performed work, or result interpretation; - a first-principles,
U.Signature(profile=FormalSubstrate),PrincipleFrame, mechanism, method, WorkPlanning, performed-work, result-record, or source-currentness cue is present, but the FPF kind or relation to use next is still unsettled; - a TGA graph, P2W path, flow diagram, principle scheme, scenario, functional description, or source publication helps the team think, while the next move must still be recovered as an accepted FPF kind or relation;
- a result artifact, telemetry line, acceptance record, quality-evaluation record, done-state update, feedback pin, or integration claim needs to be unpacked before it can guide the next move.
What goes wrong if missed
The team jumps from a convincing problem-side formulation into downstream language without naming the FPF relation being used. The work then looks connected to first principles, but the next record is unclear, the result phrase becomes too broad, and measurement or source-currentness changes have no honest return path.
What this buys
The practitioner gets one admissible next move: write a P2W carry-through record, recover the next FPF kind or relation, write or use the governed record, stop with a reduced-use cue, or return to the earlier application whose assumption changed. The payoff is practical: first-principles thinking remains action-guiding without becoming a hidden project authorization.
Not this pattern when
- there is no accepted problem-side record; use
C.22.2or the problem-side pattern named by value first; - the FPF kind under repair, relation, and record to write are already settled; use that pattern directly and do not add a P2W layer;
- the requested work product is a local project procedure, schedule, or work-management method; use the relevant work, planning, method, gate, or operational-management pattern;
- the requested record or claim is an evidence case, assurance case, gate record, decision record, architecture description, publication-use claim, or wording-use repair; use the recovered relation and its governing pattern directly.
Problem
First-principles work often becomes useful exactly when a problem-side formulation is ready to move toward work. The accepted problem card may expose an invariant, mathematical lens, functional role, mechanism candidate, method family, planning constraint, result cue, or changed measurement assumption. Without P2W, that useful material is either overcompressed into "we have a solution" or scattered across several related FPF patterns before the working distinction is preserved.
P2W solves a carry-through problem. It takes accepted problem-side material, states the distinction it can carry, selects the next admissible FPF node, and records what was written, stopped, split, or reopened. The pattern succeeds only when a practitioner can replay the move from source problem to next record without importing the law of another pattern into P2W.
Forces
Solution
Use P2W as a declarative graph of admissible carry-through moves from an accepted ProblemCard@Context to accepted FPF applications. The graph is not a prescribed FPF-development workflow. It can describe or join project workflows only when the workflow is the EntityOfConcern of the TGA use being made: a U.MethodDescription, U.WorkPlan, U.TransductionFlow, or flow valuation over U.TransductionGraph. It shows what can be carried, split, written, stopped, or reopened after a problem-side result becomes useful for work.
P2W declarative graph
The graph has eight recurring node classes. A concrete use can skip nodes, branch into several applications, split one source phrase into several records, stop with a reduced-use cue, or reopen an earlier node when measurement or source currentness changes.
Admissible edges are carry, recover, write, split, stop, and return. Carry preserves a distinction from the problem side. Recover names the FPF kind or relation. Write creates or amends the governed record. Split separates one source phrase into several applications. Stop preserves a reduced-use cue when no admissible continuation is available. Return reopens the smallest earlier application whose assumption changed.
Carry-through record
For first-minute use, fill only ProblemCardRef, CarriedDistinction, NextFPFUseQuestion, and either RecoveredFPFKindOrRelation or StopCondition. Use the remaining fields only when the move continues, splits, writes a record, or returns after a changed assumption.
Use one filled record when applying P2W. It is the local work product of the pattern. Do not copy an empty form into project material; if a field cannot be filled with recovered claim content, state the stop condition or leave the field out.
ProblemCardRef and CarriedDistinction locate the accepted problem-side material and the distinction being carried. NextFPFUseQuestion, P2WNode, and RecoveredFPFKindOrRelation keep the next FPF kind or relation explicit before the path continues. SelectedApplication and WrittenRecordOrApplication name what is actually used or written.
NotCarried is a compact field, not a place to repeat boundary doctrine from other governing patterns. It names only the local overread that would change this P2W move. StopCondition, ReturnTrigger, and SourceCurrentnessCheck keep stopping and reopening tied to a changed relation, measurement, source-currentness, or problem-side assumption.
This record shows the complete P2W mechanism: problem-side distinction, first-principles value, selected FPF application, written record, stop condition, and return after measurement and source-currentness change.
Positive action spine
Node use details
Problem-side input: P2W starts only from accepted problem-side material. The record carries the distinction that matters for the next move, not the whole problem-side pattern.
First-principles and declarations: mathematical-lens use, U.Signature(profile=FormalSubstrate), ontology, UTS, CHR, measurement, normalization, bridge, and PrincipleFrame material are handled as declaration-stack work. The P2W record names which declaration or neighboring relation is being written or cited, what structure is preserved, what is lost, and which downstream relation is still unsettled.
When mathematical wording points both to a formal declaration and to a mathematical lens, P2W does not decide by vocabulary. Use the slot discipline in A.6.0:10a.1: A.6.0 owns U.Signature(profile=FormalSubstrate) declaration, C.29 owns mathematical-lens use, A.6.1 owns mechanism consumption or realization, and E.18.1 owns only the carry-through cue and next-relation selection.
Mechanism and method: mechanism wording names operation algebra, law set, admissibility condition, effect realization, or mechanism-description need. Method wording names candidate sets, comparison, selector, retained-set, or selected-record need. P2W keeps the question visible until the method or mechanism application is actually used.
Planning and performed work: WorkPlanning writes planning records, plan items, evidence hooks, feasibility notes, freshness requests, and planned constraints. Performed work is a dated U.Work occurrence. P2W records which side of that boundary the carry-through record uses and which later result records have appeared.
Result carry-through: a result phrase is treated as a bundle of possible records. The P2W action is to unpack it before it guides any next move.
Graph, publication, function, interface, and integration cues: a graph or publication can help classify the P2W move. A functional description, interface constraint, protocol, port, connection, resource limit, or integration statement can shape the next relation. The P2W record names the recovered relation and then uses the relation selection aid in E.18.1:4.6.
Boundary and relation discipline
P2W is not a catalogue of boundary doctrines from other governing patterns. It has one local boundary rule: carry only the distinction accepted on the problem side, recover the next FPF kind or relation, and stop everything else as named source material until that relation is being made.
Return and refresh rule
P2W can reopen earlier work without becoming a required work procedure. Reopen only the smallest application whose assumption changed:
The earlier dated U.Work occurrence remains a dated occurrence. P2W may cite it during return, but the changed assumption determines which application is reopened.
Relation selection aid
Use this aid after the carry-through record when several cues compete for the continuing FPF application. It names the relation family P2W must recover before another pattern can carry the claim.
Pattern names for these relation families are listed once in E.18.1:12.
Lowering and reopen block
Use this block when the carry-through record cannot carry the stronger-looking source cue. P2W succeeds when it leaves one admissible move. If the move is not recoverable by value, lower the cue, stop, or reopen the smallest affected application.
Replay and currentness record
Use this compact record after source restoration, changed measurement, changed problem-side material, FPF pattern change, or a use-found defect. The record keeps replay local: it says what changed, what still carries, what no longer carries, and which application reopens.
ChangedAssumptionKind names the assumption kind, such as measurement, unit, reference plane, source record, problem-side statement, method set, comparator, interface relation, publication-use relation, or FPF pattern change. StillCarried and NoLongerCarried prevent a source-currentness change from silently rewriting the whole path. SmallestReopenedApplication keeps the repair local, and NextMove states whether to continue, stop, split, lower to a reduced-use cue, or return to the problem-side pattern.
Archetypal Grounding
E.18.1 is grounded in a simple System and Episteme contrast. In System-facing work, accepted problem-side material may lead toward method choice, planning, performed work, result records, and result measurement. In Episteme-facing work, the same material may lead toward a U.Signature(profile=FormalSubstrate) declaration, mathematical-lens use, description, publication, evidence, or gate-related claims. The P2W move asks one question in both cases: which FPF kind or relation can carry the next claim being made?
Worked slices
-
Thin first-principles start. An accepted
ProblemCard@Contextsays the problem is not one more local tuning task because a conserved structure is being ignored. P2W records the carried distinction, recovers mathematical-lens use andU.Signature(profile=FormalSubstrate)declaration only if needed, and stops before method selection until comparator, measurement, and selected-set relations are named. -
Planning from selected enough method. A method family is selected enough for planning. P2W carries the planning relation; the plan records planned constraints, planned fillers, evidence-reference hooks, and freshness requests.
-
Performed work after planning. A dated work occurrence has appeared. P2W carries the performed-work relation and records which gate, release, provenance, or launch-value relation is separate from the occurrence.
-
Result interpretation without generic result. A source says the work result proves that the approach worked. P2W unpacks artifact, telemetry, measurement, evidence, acceptance, quality-evaluation, refresh, and role-enactability candidates before any one of them guides the next move.
-
Functional explanatory order. A source diagram places
U.Signature(profile=FormalSubstrate), principle frame, mechanism, normalization, method selection, planning, performed work, and result measurement in one readable order. P2W uses the diagram to classify applications while keeping material time and performed-work chronology with their own patterns. -
Interface split before P2W use. A source says a port-throughput limit makes a solution feasible after integration. P2W first splits the phrase: module-interface relation (
A.6.M), flow or throughput relation (E.18orA.6.Fwhen function use is being claimed), WorkPlan constraint (A.15.2), performed-work actual (A.15.1), evidence or gate claim (A.10,G.6,A.20, orA.21), or architecture and structural-view claim (C.30family). The carry-through record writes only the relation that changes the P2W move being made and leaves the other readings as stopped cues. -
Result measurement returns to planning. A performed
U.Workoccurrence produced telemetry and an artifact. Later measurement shows that the planned interface constraint was interpreted against the wrong reference plane. P2W splits measurement, reference-plane repair, source restoration, refresh, planning revision, and method-comparison claims. If the originalProblemCard@Contextno longer states the right problem, the problem-side correction returns to the problem-side pattern.
Additional worked situations
Pilot examples for coupled development and application flows
The old TGA assignment supplied a broad example bank. Use these pilots as grounding checks, not as old terminology to import. They exercise the same common shape: one graph can join several transduction flows, one flow may develop or select a usable product, another flow may apply it, and an evaluation or refresh flow may return to the smallest affected development or application locus. The joined graph does not merge the flow objects, DesignRunTag boundaries, evidence, gates, work occurrences, or the relation position that the carried object fills inside each flow. Use each pilot to check whether the P2W use being made can name the joined flows, the carried object's flow-local relation position, the DesignRunTag boundary, and the smallest reopened slice.
Bias-Annotation
Lenses tested: Gov, Arch, Ontological and epistemic, Prag, Did. Scope: accepted problem-side output moving toward FPF applications.
- Governance bias (Gov): permission, gate, release, assurance, and decision cues are preserved only as local cues until the relevant FPF relation is recovered.
- Architectural bias (Arch): diagrams, selected structures, and interface language help classify the next move; they do not displace the P2W carry-through relation.
- Ontological and epistemic bias:
U.Signature(profile=FormalSubstrate), near-sameness, source publication, and evidence-looking language are turned into recovered FPF kinds and relations. - Pragmatic bias (Prag): the graph is useful for action without becoming a required project procedure.
- Didactic bias (Did): the positive graph and filled record come before the boundary table, so precision does not bury the working move.
Conformance Checklist
CC-E18.1-1The P2W use starts from an acceptedProblemCard@Contextor stops before P2W begins.CC-E18.1-2The carry-through record statesProblemCardRef,CarriedDistinction,NextFPFUseQuestion,RecoveredFPFKindOrRelation,SelectedApplication,WrittenRecordOrApplication,NotCarried,StopCondition,ReturnTrigger, andSourceCurrentnessCheck.CC-E18.1-3The positive graph is recoverable: accepted problem-side output, question under repair, first-principles lens, declaration stack, mechanism or method, planning, performed work, result records, and return or refresh.CC-E18.1-4One source phrase may split into several FPF applications; the record does not compress them into one generic token.CC-E18.1-5Result wording is unpacked into concrete result-related relations; a genericWorkResultkind is not admitted.CC-E18.1-6PrincipleFramematerial keeps postulates and CHR observability distinct from units, planes, comparators, thresholds, ontology editions, CHR editions, plans, work, evidence, and gates.CC-E18.1-7Measurement, source currentness, reference-plane, method-set, comparator, or problem-side changes return to the smallest affected application.CC-E18.1-8Non-P2W governing law appears only as a recovered relation inE.18.1:4.6and as a pattern list in Relations, not as repeated local doctrine.CC-E18.1-9Local boundary wording remains only where it names a near-miss that changes the next P2W action.CC-E18.1-10The pattern leaves one useful admissible action: write the carry-through record, write or use the governed record, split a source phrase, stop with a reduced-use cue, or return to a changed application.CC-E18.1-11Archetypal grounding can replay at least one coupled-flow pilot fromE.18.1:5.3; the pilot joins development, application, evaluation, and repair flows in one graph while keeping their objects, flow-local relation positions,DesignRunTagboundaries, and evidence distinct. The self-evolving-spec pilot keeps development-flow or use-found evidence outside the used pattern, specification, or process description.CC-E18.1-12Every carried claim family can be lowered, stopped, split, or reopened throughE.18.1:4.7; a source cue that cannot name the recovered FPF kind or relation remains a reduced-use cue.CC-E18.1-13Every replay after changed source, measurement, problem-side material, or FPF relation law names the changed assumption kind, what is still carried, what is no longer carried, the smallest reopened application, the governing relation checked, and the next move.
Common Anti-Patterns and How to Avoid Them
Consequences
Rationale
E.18.1 is a child of E.18 because P2W uses inherited transduction-graph architecture as its setting. It does not define graph law. It defines a local carry-through pattern for turning accepted problem-side material into a next admissible FPF use.
The design puts the positive mechanism first because repeated negative distinction sets can make a pattern whose primary EntityOfConcern is P2W behave like reference policing. P2W needs precision, but precision is useful here only when it leaves a surviving action: write the carry-through record, recover the FPF kind or relation, use the governed record, stop, split, or return.
SoTA-Echoing
SoTA alignment rule. P2W borrows useful distinctions from practice traditions only after they can be stated as a P2W carry-through move: accepted problem-side material, carried distinction, recovered FPF relation, written record, stop condition, and local return. Currentness has two sources. A project source can become stale or be replaced. An FPF pattern can also change the relation law used by the carry-through record. In both cases P2W reopens only the smallest affected application.
Relations
E.18governs inherited transduction graph architecture, transfer annotations, flow valuation,ConstraintValidity,GateFit, gate profile, design tags, and run tags.C.22.2governs the accepted problem-side record and problem-side claims related to the carried distinction.C.29,A.6.0,E.14,F.17,F.9,C.16,A.19.UNM, and Part G govern mathematical-lens use,U.Signature(profile=FormalSubstrate), principle-frame, ontology, UTS, bridge, measurement, normalization, and comparison relations.A.6.1andE.20govern mechanism and mechanism-method stabilization relations.G.5,G.9,A.19.SelectorMechanism,C.18, andC.19govern candidate-set, comparison, selector, retained-set, and selected-record relations.A.15,A.15.1,A.15.2,A.15.3, andA.15.4govern role-method-work alignment, performed work, planning, planned baselines, and work-relevant source restoration.A.10,B.3,G.6,E.19,A.20,A.21, andC.11govern evidence, assurance, provenance, conformance, gate, release, work-entry, and decision claims.C.30,C.30.AD,C.30.ASV,C.31,A.6.M,A.6.F,E.10,E.17, andE.17.EFPgovern architecture, architecture-description, structural-view, reusable-structure, module-interface, function, wording-use, publication, and publication-use claims.
E.18.1:End
Pattern Quality Gates: Review and Refresh Profiles
Type: Architectural pattern Status: Stable Normativity: Normative
Use this when
Use E.19 when you need to decide whether one new, substantially revised, or aging FPF pattern is ready for admission, refresh, or return for repair. It turns quality review into a repeatable pattern-quality run rather than a matter of reviewer taste.
Use it especially when a draft looks structurally compliant but may still fail on first-minute usability, primary EntityOfConcern stability, terminology, SoTA grounding, related-pattern boundaries, examples, anti-patterns, or shipping-facing authority claims.
Not this pattern when. Use E.8 to write the pattern body. Use E.9 to record the content decision that explains why FPF should change. Use E.9.DA when the question is whether one concrete DRR is adequate for a declared downstream authoring use before drafting or host amendment. Use E.23 when the aim is repeated quality improvement against an object-under-improvement evaluation rather than one admission or refresh review profile. Use local patterns for the domain rule or constraint being reviewed. Use project gate or release patterns when the question is whether a project publication, work-result record, or release candidate passes a delivery gate rather than whether an FPF pattern is mature. E.19 reviews whether an FPF pattern remains useful action guidance; it does not certify the world, the project, the publication, or the release.
What goes wrong if missed
Review collapses into heading compliance or personal taste. A draft can pass because it has the right headings while still being hard for a practitioner to recognise, too thin against current practice, unclear about its primary EntityOfConcern, relation record, or claim record, or misleading about related governing patterns and authority claims.
What this buys
E.19 gives authors, reviewers, and stewards a shared review profile: what must be checked, how deep the check should go, which defects block admission or refresh, and what evidence is needed before a pattern-quality claim is made. It also makes the recognition text visible before the heavier assurance machinery begins.
First useful move. Name the pattern-quality review or refresh claim, run baseline triage over the reviewed pattern or subset, and add only the risk-selected profiles needed by the present ontology, usability, SoTA, boundary, naming, or authority risk.
Local-repair boundary. If baseline triage shows that the current review question has no present ontology, usability, SoTA, boundary, naming, or authority risk beyond a small mechanical repair, close with that repair direction. Do not run every profile just because E.19 exists, and do not claim an E.21 quality value unless E.21 has evaluated the pattern version over its required coordinate set.
Primary EntityOfConcern in plain terms. The primary EntityOfConcern is one FPF pattern-quality review or refresh claim: the reviewed pattern text, the selected profile, the defects found or cleared, and the boundary of the admission or refresh decision.
Primary working reader. The first reader is an FPF reviewer, with the pattern author close behind. The review must still be answerable to the eventual practitioner or manager who will rely on the admitted pattern.
Problem frame
FPF evolves by adding and revising patterns. Over time, the framework accumulates two kinds of risk:
-
Admission risk — a newly authored pattern can be structurally compliant yet still fail on ontology, semantics, terminology conflicts and vagueness, scope, SoTA in related disciplines, or cross-context hygiene.
-
Staleness risk — older patterns can remain internally consistent while drifting away from contemporary practice and newer parts of FPF, current internal vocabulary, or updated related governing patterns. The result is “quiet decay”: the pattern still appears clear, but becomes misleading, incomplete, or incompatible.
FPF already contains many checklists and constraints, but they are distributed across patterns and suites. Authors and reviewers therefore lack a single, repeatable way to answer: What should be checked, and how deep, before a pattern is admitted or kept?
Problem
Without a unified, explicit review pattern:
- Different reviewers optimize for formal/template compliance and miss deeper ontological, semantic, and naming issues, producing bureaucratic output that does not improve the enforceable Conformance Checklist.
- Authors “optimize for the visible checklist” and miss hidden requirements (lexical discipline, Bridge hygiene, SoTA‑Echoing quality, scope claims, delta‑class impact).
- Older patterns accumulate conceptual staleness and diverge from current practice, current terminology, or current internal invariants.
- The specification's normative content becomes harder to trust: compliance becomes a matter of reviewer taste rather than a repeatable gate.
Forces
Solution — Profile-based gates for admission and refresh
Establish Pattern Quality Gates (PQG): a conceptual review mechanism that applies profiles of checks rather than a single monolithic checklist.
A Pattern Check Profile (PCP) is a named bundle of check families. Profiles are additive: every review applies a baseline profile, then adds risk-driven profiles as needed.
Terminology note (disambiguation). PQG and PCP are editorial review constructs in the authoring plane (Part E). They are distinct from enactment and runtime gating constructs such as OperationalGate(profile), GateProfile, and GateDecision (A.21), which govern Work transitions and gate decision policies elsewhere in FPF.
Mint vs reuse. This pattern mints PQG, PCP, and the profile IDs PCP-BASE, PCP-MOD, PCP-PRAG, PCP-NORM, PCP-SOTA, PCP-BRIDGE, PCP-SUITE, PCP-P2W, PCP-TERM, PCP-DEONT, PCP-REFRESH, and PCP-ENTRY. It reuses existing FPF terms (e.g., Delta‑Class, DRR, Bridge, CL, SoTA Synthesis Pack) without changing their meanings.
Define the reviewed pattern or subset
A review SHOULD leave one findings-first run record against a named reviewed pattern or landing subset. The run MAY propose didactic restructuring or compact repair direction, but its primary requirement is to leave an independent review record that improves downstream usage and interoperability without relying on chat memory or reviewer taste.
A nontrivial pattern-quality review SHOULD state its quality-evaluation purpose before depth is selected. Use E.22 or an equivalent compact question frame to say whether this run is a floorEvaluation, exceptionalImprovementEvaluation, paretoTradeoffEvaluation, openQuestionDiscoveryEvaluation, absorptionEvaluation, or a declared combination. If the purpose is absent, E.19 treats the run as an admission-refresh blocker read, not as a request to raise every evaluated coordinate toward exceptional expression. When coordinate values, PatternQualityStatus, or all-4/all-5 claims are needed for one pattern version, the run opens or consumes an E.21 result instead of assigning those values inside E.19.
When the run opens or consumes E.21, E.19 treats E.21 as a hard pattern-quality evaluation, not as a selectable profile. The run record must reject an E.21 claim that omits required coordinates, omits ShortRationale, omits PrecisionRestorationProfile, uses inactive/triggered-coordinate language, narrows the requested use to make the result pass, or replaces coordinate values with blocker triage. Baseline triage can close an E.19 review-boundary result only when no E.21 quality value, all-4/all-5 claim, landing-quality claim, or pattern-improvement movement claim is being made.
If the aim is repeated improvement against an object-under-improvement evaluation, use E.23 for the repeated method. E.19 may supply a review profile and findings inside that loop, but the profile is not the loop method and the review result is not a quality value until the object-under-improvement evaluation evaluates the changed pattern version.
E.19 reviewer and reviewed-pattern wording is FPF pattern-quality gate wording. It governs FPF admission, refresh, return-for-repair, blocker, and review-profile claims, not E.21 coordinate assignment and not project-side publication interpretation, explanation interpretation, comparative review-unit use, or participation in a named project-side review relation. When those project-side relations are used, use the publication or project-side pattern that names the object being interpreted or reviewed.
Project-side reuse boundary. Use this boundary when an E.19 pattern-quality result is being reused as project certification, project evidence, safety-assurance material, gate input, release justification, compliance-assurance material, assurance material, work authority, or publication truth. The first E.19 move is to return the result to the governing FPF pattern-quality claim it reviews: admission, refresh, repair return, or selected pattern-quality boundary. If that result is cited for a project-side claim, the project-side governing relation must be opened for that claim named by value: A.10 for evidence/currentness, B.3 for assurance, A.20 for local CV status, A.21 for gate decision, A.15 for work, or another governing pattern when that claim needs one. The review result may be evidence about FPF pattern quality; it is not certification of the project world. Plain wording in the reviewed text remains ordinary unless it changes admissible use, evidence, gate, assurance, work, decision, or FPF pattern application.
Common wrong first interpretation. Pattern review passed means the project, release, publication, safety claim, or compliance claim is certified. First honest entry: E.19 returns only a pattern-quality result; any project-side reuse must name the project-side governing relation and its evidence or assurance source.
Misuse guard. A pattern-quality caution, return-for-repair result, or selected pattern-quality boundary result cannot be reused as project refusal or project approval unless a project-side governing relation states admissible and non-admissible use for that relation.
Formal/template defects (e.g. non-compliance with E.8 structure or not conforming to RFC deontic terminology) have lower review priority than semantic/ontological defects or non-SoTA Solutions, but they also MUST be recorded with the active repair boundary named.
E.g. if the header block is missing or incomplete, continue with ontology and semantic review first. Treat missing header fields as one mechanical defect to record with concrete repair direction (PCP-BASE #7), not as a reason to stop.
The run SHOULD give best-known Delta-Class (Δ-0…Δ-3) and record an initial impact radius (dependent patterns/tests/relations that need be changed due to pattern norms), using existing definitions where available (e.g., the LEX-AUTH protocol).
If the local process separates review from repair, direct reviewed-text patching, unified-diff output, or immediate remediation edits are optional local tactics rather than part of the core E.19 run record. The core requirement is one findings-first run record plus sufficiently precise repair direction.
Apply the baseline profile to every run
Every run MUST include PCP‑BASE as a triage baseline. Full-depth checking is selected only where the relevant risk is present; reviewer depth SHOULD prioritize the FPF-governed sections and enforceable requirements in E.19:4.2.1.
- Internal coherence (problem <-> conformance claim <-> solution) The Conformance Checklist matches Problem statement and the Solution (no "orphan requirements" and no "unclaimed requirements").
- Lexical discipline & reserved vocabulary Terms and registers follow lexical rules; ambiguous "everyday" synonyms do not silently replace kernel vocabulary.
- SoTA-Echoing minimum compliance (E.8) SoTA-Echoing satisfies the E.8 authoring requirements applicable to the pattern kind (Architectural vs Definitional), including explicit adopt/adapt/reject stances and the E.8 two-part SoTA test: current best-known problem-solving practice for the named practice question, and by-value incorporation into FPF-governed pattern loci. If a SoTA Synthesis Pack exists for the topic, SoTA-Echoing binds to it rather than forking an untracked narrative; any divergence of pattern norms from contemporary practice is explicitly stated as such. SoTA-Echoing MUST be non-decorative, MUST reflect best-known current practice rather than official status, source recency, institutional adoption, or merely popular defaults for the declared problem, and MUST govern the Solution and other FPF-governed sections, or those sections MUST justify divergence explicitly.
- Cross-pattern compatibility & impact radius Relations are consistent with declared dependencies and dependents; declared scope/impact is compatible or explicitly limited.
- Didactic grounding Archetypal Grounding is present and teaches the concept with concrete cases or references, not only abstractions.
- Reader-role fit
The pattern body stays addressed to the intended FPF user rather than to FPF developers, package architects, reviewers, evaluators, or release/projection carriers. FPF-governed sections explain admissible use, costs, boundaries, FPF governing patterns named by value, project-side FPF kinds and references named by value, and related relation named by values in user terms. Architecture-placement, freeze/merge state, package-boundary rationale, reference boilerplate, quality/projection evidence, corpus-entry evidence,
PatternQualityStatus, monolith-parity evidence, landing evidence, and broader package-development rationale stay inDRR, architecture documents, review handoff,E.21result,E.19run record, README/ToC/E.11/I.2, cards, retrieval/projection carriers, release/landing evidence carriers, companions, or ordinary reference apparatus unless they change the working reader's first admissible move. - Template & section integrity This is lowest priority for review depth and SHOULD NOT consume effort that would displace ontology/semantics/modularity/slots/SoTA checks.
- Modularity & contradiction hygiene
The pattern SHOULD NOT be overloaded or significantly expand requirements or dependencies without an explicit reason and impact record.
Checks include: scope containment, split/refactor recommendations when warranted, and contradiction scans against neighbor patterns in Relations.
The pattern SHOULD balance cohesion and coupling across FPF.
If the pattern defines specialization or an abstraction stack, it SHOULD NOT mix slot interfaces or parameters from different abstraction positions; use explicit
⊑/⊑⁺orUsescuts instead. - Substantive solution and locus adequacy Baseline triage includes a small reviewed-pattern-specific question set about the actual problem and current change: does the pattern still solve the stated problem, are decision loci and governing-pattern applications correct, are kind boundaries and selected companion or projection roles preserved, did anything get worse, are SoTA rows current enough for the claim they discipline, and is the applied apparatus neither too thin nor too heavy for that claim?
Triage: spend depth on FPF-governed sections without making reviews heavier
PQG is meant to increase semantic and ontological trust, not to turn every review into an exhaustive editorial audit on form. To keep reviews feasible while improving the important parts:
-
Treat FPF-governed sections and deontic requirements as the primary depth loci:
- the pattern’s Problem frame, Rationale, and worked slices when a new family/profile/specialization would otherwise be intelligible only from project context,
- reader-role fit in Problem, Solution, Consequences, Rationale, and worked slices whenever the draft risks mixing user guidance with package-development rationale,
- the pattern’s Conformance Checklist (the enforceable conformance check set): keep items universal, cognitively ergonomic, not overly prohibitive, and avoid duplicating checks that belong to other patterns (modularity),
- deontic clauses (
MUST/SHALL/SHOULD/MAY) that define requirements on the authoring/validation plane (not laws of nature or mathematical facts; ensure an explicit conformance subject), - admissibility constraints (
Invariant:/Well-formedness constraint:) that define valid models (cardinality, typing/kinds, totality) and are written as non-deontic predicates (no RFC keywords inside the predicate), - definitions and mint/reuse decisions (new terms, renamed terms, scope claims baked into names, names that are not overloaded and are properly chosen),
- cross-context and cross-plane claims (Bridge hygiene and “sameness” assertions),
- SoTA (when the pattern claims state-of-the-art rather than a popular-but-outdated solution or vocabulary),
- substantive solution and locus adequacy: one reviewed-pattern-specific content pass checks whether the repaired text still solves the stated problem, assigns claim-bearing material to the correct governing loci named by value, preserves kind boundaries and selected companion or projection roles, keeps quality/projection evidence and role-turn correspondence out of the pattern unless the pattern's own
EntityOfConcernand user move are that evaluation/projection work, and has not become either under-grounded or over-bureaucratic, - modularity and Slot discipline of A.6.5 that provide evolvability of FPF,
- absence of contradictions in a pattern,
- Relations that define compatibility and impact radius.
-
Treat low-signal text as “quick-pass” unless it changes meaning: headings, micro-typos, stylistic polish, and non-FPF-governed narrative refactors, including RFC-form deontic cleanup.
-
Do not block semantic review on template and RFC compliance defects. Missing header block fields (E.8 H-5), missing canonical sections, or a missing footer marker are fixable integrity defects. Record them as repair items and continue with the FPF-governed section checks in the same run.
-
Sentence-level precision matters on FPF-governed prose. Reviewers SHOULD inspect FPF-governed sentences for generic heads, claim-bearing qualifiers, overloaded trigger words, bare relation shorthand, and hidden process/API metaphors. The default repair order is: restore head kind, then qualifier claim kind or admissible-use boundary, then comparison criterion or escalation condition homogeneity, and only then judge whether a later Plain or coarsened rendering is admissible.
-
Precision-restoration distribution must be preserved. When an
E.10scan selects a non-local precision-restoration path, the run checks thatE.10remains the trigger and applicability pattern,E.10.ARCHcarries the shared recovery architecture, the relevant realization pattern (A.6.P,C.2.P,C.30.P,C.16.P,C.16.Q,A.19.SPR, or another selected restoration pattern) performs the ontological unpacking, and affected patterns keep thin declarative pointers rather than local trigger registries or duplicate recovery algorithms. -
EntityOfConcern and precision-restoration questions travel with the same triage. When the reviewed change touches EntityOfConcern, same-referent, slot/reference, alignment-path, role-boundary, consumer-disposition wording, description/publication-use guards, phrase apparatus, repeated boundary doctrine, architecture-placement rationale, package-boundary rationale, or quality/projection evidence, the run asks before acceptance: what is the pattern's own
EntityOfConcernand first useful move; does the text state this pattern's own subject kind, action spine, practical delta, and bounded non-use before auxiliary material; which governing pattern carries any outside claim/relation/boundary; does the prose needF.19before word/head/use restoration; do remaining word/head/use problems applyE.10,E.10.ARCH,F.18, or another relation named by value pattern; do role, method, work, evidence, assurance, gate, and decision claims remain with their governing patterns; and has every current-host consumer of the selected-family repair received a semantic, mechanical, compatibility, or not-triggered disposition. WhenE.21is active, these questions are recorded through itsPrecisionRestorationProfilerather than as separate local E.19 rows. -
Design-time and run-time both count. The same precision discipline applies to FPF pattern prose and to any reviewed publication text, worked slice, or performed-work exemplar when that text is being assessed for admissibility, guidance, reuse, gating, release, policy, assurance, or action-selection use.
-
Report ordering (impact-first). In run outputs and remediation direction, prioritize findings on ontology, semantic, modularity and SoTA-related FPF-governed sections first; group low-signal formatting/typos into one compact tail finding unless they change meaning.
Add risk-driven profiles
PCP‑PRAG (Pragmatic utility & adoption) — Trigger: the pattern is Normative and claims practice guidance.
Checks include: a visible first-reading recognition text early enough for a cold working reader; a recognisable first-minute working situation; one short Use this when or equivalent entry; a plain statement of what goes wrong if the pattern is missed; a plain statement of what the pattern buys in practice; the first admissible action-guiding move the user should take; a visible ordinary not this pattern when boundary; a minimally viable example; non-decorative Consequences/Anti-Patterns; at least one worked slice when the pattern is easy to misuse; a visible assurance text carrying declaration, guidance/check, modeling, and review/check scope; reader-fit consistency so that the assurance text does not silently widen or universalize the recognition-text claim; explicit practical payoff in user-facing prose; a short user-facing statement of the primary EntityOfConcern, relation record, or claim record and any minimal modeling lens when typed declaration material has FPF-governed use; nearby pairwise plain glosses for FPF-governed technical terms that appear before the heavier harness; a short working-reader implication for any SoTA-Echoing rows that carry explanatory work plus visible linkage to the worked cases or boundary slices they discipline; explicit primary working reader, concern, and viewpoint fields when several working-reader situations are being served; an explicit So what? adoption test; and, when the pattern claims universal or transdisciplinary reach, at least three heterogeneous recognition-text situations with F.16 preferred as the compact example-matrix template.
If an E.10 trigger scan selects epistemic precision restoration during admission or refresh, PCP-PRAG treats type-correct-but-inert wording as a usability defect governed by E.2 P-2 and E.12: the run must name the remaining admissible reader move or the FPF pattern application and governing ontology that carry the claim, and must confirm any Plain recognition line maps back to the recovered Tech reading when both registers are used. A more expressive recognition line or intentional didactic metaphor may stay ordinary when it carries no FPF-governed use; when it carries ontological, evidence, causal, assurance, bridge, gate, work, decision, or admissibility claim kind or admissible-use boundary, that claim kind or admissible-use boundary must be recoverable through the recovered Tech reading or named FPF pattern application.
For a broad cleanup across several patterns, or any cleanup that touches FPF-governed Problem frames, Problem sections, first-use recognition text, archetypal grounding, examples, or worked slices, the run must leave a short didactic change account: improved, preserved, or harmed. Harmed blocks admission or refresh unless the same pass restores the working situation and first useful move, or names the FPF pattern application and governing ontology that carry the claim.
PCP‑MOD (Modularity and abstraction-boundary discipline) — Trigger: the reviewed pattern or subset shows scope creep or abstraction-boundary mixing (e.g., one pattern bundles universal core rules with frame-specific content and discipline-specific method semantics; or it mixes EntityOfConcern/Description/Spec roles in one object).
Checks include:
- an explicit core vs extensions cut (universal invariants are factored into one stable “core”, and extensions reference it rather than re-stating or mutating it),
- no conflation of specialization vs dependency: use
⊑/⊑⁺for refinement/extension andUsesfor pipelines; do not mix their semantics, - no conflation of package-form, governing-pattern relation, and package-relation roles: Pack vs Kit vs Suite vs Family vs Bundle vs Cluster vs Profile vs Overlay vs Record vs Umbrella are not interchanged, and the review states carrier status, governing-pattern relation, and package relation explicitly instead of leaving it implicit or varying it for style,
- description-lane descriptions and their publications do not grow mechanism semantics; MVPK faces remain projections and do not become "the place of truth",
- slot-discipline hygiene for any ordered specialization set: SlotKind invariance is preserved and inherited operations do not gain new mandatory inputs (A.6.5 / A.6.1 specialization discipline).
PCP‑REFRESH (Staleness & compatibility refresh) — Trigger: staleness signals are present (e.g., outdated SoTA rows, renamed/superseded Relations entries, terminology drift, or an explicit refresh window in LAT/DRR). Checks include:
- refresh‑sensitive claims are identified (time‑bounded or ecosystem‑bounded) and either (a) updated with post‑2015 evidence and matching Solution changes, or (b) explicitly scope‑limited and labeled as historical lineage,
- Relations are updated to current pattern IDs; deprecations/renames are handled via explicit continuity notes (no silent relabeling),
- when one new or substantially revised pattern subset is being prepared for send or landing, the run explicitly checks which related governing patterns, governing-pattern constraints, companion patterns, Relations entries, or monolith-backed pattern sections require aligned edits so the subset does not land as one isolated local improvement; the run record states which of those updates are inside the claimed boundary now and which therefore remain outside that claimed boundary,
- any long-lived companion, profile, check sheet, pattern-local companion row, review harness, or analogous selected non-pattern FPF kind-reference pair kept with the reviewed pattern or subset states its use question, governing pattern or selected non-pattern FPF kind-reference pair, admissible companion-only use, one real breakage if absent, and demotion or deletion condition when no such breakage exists.
- the run records a Delta‑Class and impact radius; if the refresh causes Δ‑2/Δ‑3, it emits/updates a DRR pointer and triggers any required refresh and Bridge requirements defined elsewhere (E.15/F.15/F.9).
Trigger overrides are permitted but intentionally rare: a run MAY override a triggered profile only when it can show the trigger’s risk is genuinely absent in this case, and the record MUST name (a) why the trigger is a false positive here and (b) what compensating check(s) were applied instead.
PCP‑NORM (Normative guidance integrity) — Trigger: the pattern introduces or changes normative requirements, introduces new conformance items, or shifts downstream requirements. Checks include:
- Delta‑Class (Δ‑0…Δ‑3) and impact radius are explicit (what breaks, who depends on this),
- requirements are testable in principle (conceptually), scoped, and non-contradictory,
- downstream patterns cited in Relations are compatible with the new guidance.
- where the change is Δ‑2/Δ‑3 or a new normative pattern is being admitted: a DRR exists and references the PQG findings (pointer is sufficient; no duplicated prose).
PCP‑SOTA (Evidence and SoTA alignment) — Trigger: the pattern’s Solution asserts “best practice”, “state-of-the-art”, or introduces new synthesis claims. Checks include:
- each “best practice” claim or SoTA claim in the Solution is explicitly bound to SoTA‑Echoing rows (or to SoTA Synthesis Pack identifiers when used), rather than floating as ungrounded prescription, and those rows identify best-known current practice rather than popularity alone,
- the selected SoTA practice or source set answers the declared working problem and the relevant domain or practice tradition rather than merely justifying package placement, naming neatness, or pattern clustering,
- each SoTA row changes at least one FPF-governed outcome for the pattern: what the user may do, what the user must not over-read, which FPF pattern application must be named, or which claim cannot be raised to release, policy, assurance, gate, action-selection, or adjudication use,
- novel synthesis is not presented as established SoTA: it is either (a) framed as a scoped hypothesis with explicit limits, or (b) promoted into or registered as a SoTA Synthesis Pack entry before the pattern is admitted as normative guidance; a merely explanatory SoTA note that leaves the FPF-governed sections untouched is non-conforming,
- where traditions disagree substantively, the pattern makes the disagreement visible and states whether it adopts, adapts, or rejects each relevant source idea instead of silently selecting one tradition,
- retrieval or benchmark methods are used only when the relevant evidence relation is present; their dimensions do not become universal pattern-quality benchmarks,
- refresh‑sensitive claims (those likely to decay) are explicitly marked with scope limits, timespan notes, or lineage labeling when appropriate.
PCP‑BRIDGE (Cross-context or cross-plane reuse integrity) — Trigger: the pattern imports claims, terms, or norms across contexts, disciplines, or reference planes. Checks include:
- explicit Bridge usage where required (no silent identity by spelling),
- Congruence / loss is made explicit where applicable,
- any cross-plane reuse is explicitly acknowledged and its penalties do not leak into unrelated assurances.
PCP‑SUITE (Mechanism-suite integrity) — Trigger: the reviewed pattern or subset introduces or revises a suite-level Description that enumerates multiple distinct mechanisms (e.g., MechSuiteDescription or a suite specialization) and/or changes suite requirements, conformance pins, or suite protocols.
Checks include:
- the suite remains a Description-level object: it enumerates member
U.Mechanism.EntityOfConcernrefs and declares shared requirements/pins, but does not define mechanism blocks (OperationAlgebra,Transport,Audit, …) and is not used as a mechanism node, - membership has set semantics:
mechanismsis duplicates-free and order carries no semantics; any intended ordering is expressed only insuite_protocols, - suite protocols are closed over membership: if
suite_protocolsis present, each protocol step references a member mechanism (no “step points outside the suite”), - the suite is not a family of implementations: it MUST NOT be encoded as a
MechFamilyDescription(families remain “many realizations of one mechanism”, not “many mechanisms”), - the suite does not mint transport exceptions: any cross-context, cross-plane, or cross-kind requirement remains Bridge-only; loss or penalty handling stays with
R/R_effonly; the suite does not embed CL/Φ/Ψ/Φ_plane tables (references/pins only), - CG/CN authority pins remain explicit references to the single governance card and legality gate: if suite protocols include numeric comparison/aggregation/scoring, they cite
CG‑Spec(SCP + Γ-fold + MinimalEvidence) and (where applicable)CN‑Spec, rather than duplicating “local CG‑Spec-like” content, - suite protocols contain no hidden tails: if UNM/UINDM/ULSAM are required, the protocol expresses them as explicit
Usessteps and suite audit requirements cite the chosen mechanism ids/refs (no “implicit normalization/aggregation inside score/compare/select”), - gate separation is preserved: mechanisms and guards use tri-state
GuardDecision := {pass|degrade|abstain}and MUST NOT publishGateDecisionorDecisionLog;blockremains gate-level only (OperationalGate(profile)), - defaults remain single-sourced: portfolio mode, dominance regime, and unknown/failure behavior are either pinned in
TaskSignatureor one policy-assignment record, or not claimed; the suite does not define competing defaults, - when the suite claims reusable outputs, publish/telemetry is explicit and terminates via existing publication forms/faces (e.g., G.10 and/or PTM), not as a hidden tail inside a selection step.
PCP‑P2W (Planned baseline & slot-fillings seam integrity) — Trigger: the reviewed pattern or subset introduces or revises WorkPlanning records or publications that pin planned fillers for a slot-bearing description object's slots (e.g., SlotFillingsPlanItem or specializations), or introduces view projections of those records or publications.
Checks include:
- the PlanItem remains a WorkPlanning baseline (
U.WorkPlan.PlanItem,kind = SlotFillingsPlanItem), not an execution log and not a mechanism, - planned slot filling stays WorkPlanning-only: plan items publish planned fillers/pins (ByValue or
<RefKind>) and MUST NOT include launch values,FinalizeLaunchValueswitnesses, gate decisions, or decision logs (these areU.WorkEnactment/ gate-level only), - target and scope are explicit and non-leaky:
- the item targets exactly one slot-bearing description via
target_slot_bearing_description_ref, target_slot_bearing_description_refis a description-lane, edition-addressable slot-bearing ref (kit/suite) and MUST NOT be aU.Mechanism.EntityOfConcernRef,- the item carries explicit P2W references (bounded context; and CG-frame/path-slice/scope references when used for legality/selection baselines),
- the item targets exactly one slot-bearing description via
- time is explicit: the item includes
Γ_time_selectororΓ_time_rule_ref(XOR); implicit “latest/current” is nonconformant, planned_fillingsis the authority: duplicateslot_kindrows are nonconformant unless the slot-bearing description declares the slot multi-valued; any “indices” are derivable projections and are not maintained independently,- crossing information is referenced, not duplicated: the plan item (and any associated views) cite CrossingBundle/Bridge/policy-id pins rather than embedding CL/Φ/Ψ/Φ_plane tables or defining transport edges,
- MVPK projections remain projections: any
U.Viewface (TechCard, PlainView, InteropCard, or AssuranceLane) over a plan item MUST NOT add new claims, MUST NOT introduce “shadow defaults”, and MUST avoid “signature” language (signatures belong to EntityOfConcerns), - if a view publishes edition pins or makes claims about crossing/comparability/selection/launch, it MUST also carry the required audit/slot-target pins (UTS + Path pins, crossing pins, applicable guard-source pins); missing pins are treated as downstream fail-closed nonconformance.
PCP-TERM (Terminology & naming protocol) — Trigger: the pattern introduces new terms, new U.Types, new “unified names”, redefines existing labels, leans on FPF-governed phrases whose head kind or qualifier claim kind or admissible-use boundary is not yet restored, or uses FPF-governed trigger wording as if the word itself carried the needed kind. Checks include:
- “mint vs reuse” decision is explicit,
- naming follows the local-first naming protocol and avoids scope smuggling (roles/metrics/stages baked into labels; overloaded words used as terms with a local sense). Remediation SHOULD use F.18,
- when PCP-TERM is selected,
F.18winner selection andA.6.Pfollow-through are one mandatory chain rather than two optional passes: the run records candidate heads or phrases reviewed, any kind-conflict findings and lexical-conflict findings, the provisional F.18 winner plus rejected candidates, and the resultingA.6.Psurvival result on the repaired phrase, - FPF-governed trigger wording must be classified before acceptance by semantic area, not by a local forbidden-word list. Typical classes include admissibility/deontic terms, evidence and review-check terms, action-invitation terms, characteristic/scale and stratification source labels, state-family terms, lifecycle/process terms, pattern-application wording, publication-form terms, and local equivalents. The run names the exact admissibility, deontic, evidence, review-check, reader-task, action-invitation, characteristic or scale, state-family bearer and value frame under
A.19.SPR, EntityOfConcern and Description-episteme boundary, specification-use gate, control-layer relation, method, work-plan, work occurrence, authority reference, declarative FPF pattern application with governing ontology named by value or conformance claim or section, publication face, publication form, publication unit, or publication carrier, or selected companion role or base declaration named by the sentence, - generic heads and claim-bearing qualifiers are not accepted at face value in FPF-governed prose: the review restores the head kind first, and a narrowing qualifier by itself does not count as that restoration; only then does the review restore the qualifier claim kind or admissible-use boundary before deciding whether the phrase is admissible,
- if a sentence compares, escalates, downgrades, or otherwise puts pressure on a phrase after that restoration, the review checks that the comparison criterion is ontologically homogeneous,
- the run leaves one explicit account of the resulting primary
EntityOfConcern, first useful move, outside work, and any role-word or package-form decision when the repaired wording still carries architectural claim kind or admissible-use boundary, - source-side old wording and continuity rules are respected.
PCP‑DEONT (Deontic clause hygiene: RFC keywords) — Trigger: the pattern conflates admissibility/validity constraints with deontic obligations (e.g., uses RFC keywords where a non-deontic Invariant: predicate is required). Checks include:
- Deontic requirements are expressed with RFC-style keywords (see H-8);
- obligations are not smuggled into prose as informal imperatives. Admissibility/validity constraints are stated non‑deontically as
Invariant:/Well‑formedness constraint:predicates and referenced from the Conformance Checklist when enforceable. - Subject discipline for RFC keywords. If a sentence uses RFC keywords, its grammatical subject MUST be an agent or a specified published record/model whose required content is being constrained (author, reviewer, record, published model). RFC keywords MUST NOT modify modeled-world entities (e.g., “Earth”, “RoleAssignment”, “Role”, “holon”) — express those as
Invariant:/Well‑formedness constraint:predicates instead, and (if needed) reference them from CC items.
PCP-ENTRY (Pattern-entry discoverability and entry-orientation changes) — Trigger: one change substantively affects how one reader recognizes, selects, rejects, or reclassifies one applicable governing pattern body, applicable projection role, first-entry pattern-comparison set, Problem-frame recognition signature, expanded entry-disambiguation case, or entry lexical-query cue.
Trigger classification:
PCP-ENTRY is an explicit profile identifier under the existing Pattern Check Profile family. It reuses the PCP profile kind; it is an editorial review profile, not a runtime gate, not GateProfile, not a workflow state, and not a new route registry.
PCP-ENTRY is risk-triggered rather than universal.
Use one lead review profile for the change, and import other profiles only for
their specific failure mode.
Use this risk-trigger model:
-
Trigger class 0 — micro-edit punctuation, formatting, typo repair, grammar, or meaning-preserving compression with unchanged pattern-selection effect. No
PCP-ENTRY, no compact pattern-local note, no evidence mode, and no parity scan are required. -
Trigger class 1 — local recognition wording repair one improved
Use this when,Not this pattern when, or one removed sequence-implying phrase with unchanged candidate-pattern set and unchanged governing-entry or applicable-projection-role boundary. Only the four-question core check is required. -
Trigger class 2 — substantive entry, companion, or projection change one new or changed README scenario, ToC query cue,
E.11entry-distribution locus,I.2expanded entry-disambiguation case, pattern, or applicable projection role newly treated as entry-bearing, one changed wrong-pattern or governing-entry or applicable-projection-role boundary, one changed local first-entry selection effect, or one substantive lexical-query cue change. The author leaves one compact pattern-local note, runs the core check, and adds at most one selected risk check if needed. -
Trigger class 3 — multi-role or high-risk public entry change one change affecting several selected projection or companion roles together, one public-entry rewrite, one often-misclassified entry-recognition role, or one newly introduced first-entry pattern-comparison set. The author runs the core check and adds only the relevant selected risk check, usually parity, wrong-pattern, public-entry, or expanded-entry-disambiguation-case adequacy.
-
Trigger class 4 — retrieval-facing, observed-failure, or measured-improvement change one retrieval-facing companion or projection role changes, one observed misretrieval or repeated search failure is being repaired, or the patch itself claims measured discoverability improvement. One selected evidence mode may be required, but benchmark-style reporting is not the default.
-
Trigger class 5 — normative authority, kind, or durable-name change one entry-selection split, stable-name settlement, label-family change, or other normative architectural rewrite is in scope.
DRR,PCP-TERM, andPCP-MODare the lead decision or review profiles as applicable;PCP-ENTRYreviews only the entry-facing effects.
Ordinary non-triggers include:
-
punctuation, formatting, and typo fixes;
-
meaning-preserving prose tightening;
-
one bare mention of a pattern without changed entry-selection effect;
-
local wording repair that preserves the current first honest entry-recognition role, candidate-pattern set, governing-entry or applicable-projection-role boundary, and first-entry pattern-comparison-set membership.
PCP-ENTRY stays one narrow additive review profile, not one super-profile
that absorbs PCP-PRAG, PCP-MOD, PCP-TERM, PCP-NORM, and every other
review/check scope.
It composes with PCP-PRAG, PCP-TERM, and PCP-MOD; it does not replace
them.
Its distinctive object is changed pattern-selection effect, changed first-use
entry-recognition role, changed first-entry pattern-comparison-set membership, changed tempting-wrong-pattern
boundary, changed Problem-frame recognition role, changed expanded entry-disambiguation case
effect, changed entry lexical-query cue, and changed semantic companion-or-projection role parity.
Its default review scope is one small core triggered check:
-
No workflow implication Entry text does not imply mandatory sequence, control transfer, handoff, or publication, carrier, or record sequence unless another governing entry or applicable projection role explicitly governs that semantics.
-
Governing-entry boundary preserved Entry, index, and lexical-query companion roles do not redefine the governing pattern body's
ProblemorSolution. -
First honest entry-recognition role preserved The change does not make the first entry-recognition role or case signal misleading.
-
No duplicate high-detail companion or projection role The change does not create one new stale echo or one second high-detail companion or projection role outside the one applicable governing pattern body or applicable projection role already named for the claim.
A change pays only the review cost of the concern it actually changes.
Learning-order edits do not trigger PCP-ENTRY unless they also change
candidate-pattern set, governing-entry or applicable-projection-role boundary,
first honest entry-recognition role, or first-entry pattern-comparison-set membership.
Lexical-only edits do not trigger extra entry-review scope unless they change
pattern-selection effect or entry recognition.
Retrieval fixtures are not required unless retrieval-facing behavior is
explicitly claimed, one machine-consumed projection is in scope, or one
observed misretrieval is being repaired.
When the risk warrants more than that core check, the run may add only the relevant selected risk checks:
- one parity check when more than one pattern-entry discoverability-bearing projection changes;
- one wrong-pattern check when known misclassification is present;
- one lexical check when subject-language divergence is substantive;
- one expanded-entry-disambiguation-case check when
I.2changes or one high-risk first-entry pattern-comparison set still lacks depth; - one public-entry check when coarse public entry wording substantively changes entry-selection effect or carries high public-entry risk;
- one retrieval check when the change is retrieval-facing or repairs one observed retrieval failure.
Substantial discoverability changes leave one compact pattern-local note in the current DRR, PCP record, patch note, or run record.
That pattern-local note may stop at one explicit rationale when the risk is already
controlled by governing-entry or applicable-projection-role inspection, companion-or-projection role
partition, or one local wording repair.
It is not a separate review record unless the change is high-risk, disputed,
public-facing with substantive entry risk, or retrieval-facing.
When one compact pattern-local note is needed, it names only the changed companion or projection role, the affected first-entry pattern-comparison set or pattern, the changed first-use entry-recognition role or recognition signature, the governing entry or applicable projection role for the claim or projection role, and the selected check if any.
One compact risk-triggered gate is enough here:
Empirical evidence is required only when the change is:
- high-risk;
- disputed;
- retrieval-facing;
- repeatedly misclassified;
- public-facing with substantive entry-selection change, repeated failure, or one measured-improvement claim;
- or itself claims measured discoverability improvement.
PCP-ENTRY-E4 is selected only when retrieval-facing behavior is explicitly
claimed, one machine-consumed projection is in scope, or one observed
misretrieval is being repaired.
Public-facing changes with substantive entry-selection risk usually select PCP-ENTRY-E1.
Lexical-hook changes usually select PCP-ENTRY-E3.
Changes across multiple projections or companion roles usually select PCP-ENTRY-E5.
Observed search or query failures usually select PCP-ENTRY-E6, optionally
together with PCP-ENTRY-E3 or PCP-ENTRY-E4 when the failure is lexical or
retrieval-facing.
The following evidence modes are selected high-risk tools, not one suite to exhaust on ordinary authoring passes. Selected evidence modes may include:
-
PCP-ENTRY-E1 — cold-reader recognition or pattern-selection task Given one real case signal, can one reader recover the intended applicable governing pattern body or one admissible candidate-pattern set? One tiny micro-task is enough:
-
PCP-ENTRY-E2 — wrong-pattern and wrong-entry trap Does the companion or projection role actively prevent the most tempting wrong pattern or wrong family?
-
PCP-ENTRY-E3 — lexical query check Does subject-domain phrasing retrieve the governing entry or applicable projection role without uncontrolled aliases?
-
PCP-ENTRY-E4 — retrieval or
RAGfixture Does retrieval recover the governing entry or applicable projection role under exact-ID or keyword phrasing, under semantic paraphrase phrasing, and under projection-vs-governing-entry ambiguity, while keeping retrieved companion material, source faithfulness, stale echoes, and post-rationalized citation-like material distinct from the applicable governing pattern body? -
PCP-ENTRY-E5 — companion-or-projection role parity check Do the companion or projection roles, plus any explicit absence note, preserve the same first-use entry-recognition role, governing entry or applicable projection role, wrong-pattern boundary, projection-only status, and no-claim-beyond-Core claim without requiring identical wording, rows, or examples?
-
PCP-ENTRY-E6 — observed failure or query-log capture Does one observed misretrieval, wrong-pattern loop, or repeated query miss still survive after the repair, or has the failure actually been removed?
Tiny golden case bank for regression and worked examples
One tiny golden case bank is enough here. It is a review-regression echo, not the canonical entry inventory: rows 1-4 mirror README scenarios, E.11 entry-distribution loci, and I.2 expanded entry-disambiguation cases that already carry entry companion or projection roles, while rows 5-6 add review-specific search and retrieval stress cases. E.11 and I.2 remain the governing entry companions; this bank only tests whether a change preserved them.
It is not one benchmark suite and does not require universal empirical review for ordinary wording or companion-or-projection role edits.
A run may cite one relevant golden case or state that none is relevant. It does
not need to execute the whole bank.
It keeps a stable set of recurring entry-recognition roles recoverable across hardening
passes:
These six cases are enough to keep:
- entry-recognition consistency;
- wrong-pattern or wrong-entry rejection;
- admissible entry-stop honesty;
- lexical-query discipline;
- thin-echo retrieval hygiene;
- and governing-entry and projection separation recoverable as the amendment lands.
When one empirical or retrieval evidence run is actually selected, the run makes recoverable only the fields needed by that run, such as:
When retrieval evidence is selected, keep retrieval result, answer faithfulness, and stale-echo result distinct without forcing benchmark-style reporting on ordinary edits. One minimal retrieval fixture checks exact ID or keyword retrieval, semantic paraphrase retrieval, projection-vs-governing-entry disambiguation, and, when thin echoes are used, thin-echo governing-entry reference presence. Ordinary local guidance stays prose-only rather than minting one stable governing-entry reference by default.
Common hardening accounts are triggered by review need
When one common hardening concern has FPF-governed use, is disputed, or is explicitly invoked by the reviewed pattern or subset, the run record names the checked source and finding. Otherwise absence is ordinary and does not require a by-value absence recital.
Use triggered accounts only for the selected entry-recognition role:
- Usability and working-reader fit. Record this when first-reading recognition text, assurance text, first-minute working-reader usability, practical payoff, worked slices, primary-reader fit, or
E.8/E.12/E.13/E.14/E.17.*/F.16checks carry the finding or acceptance decision. - Scenario / anti-case / utility-fit source set. Record this when a scenario pack, anti-case corpus, pilot bank, utility tree, fitness catalog, or analogous source is actually used or substantively disputed.
- Packaging, governing-pattern relation, package relation, and shipping-fit. Record this before any send-facing, landing-facing, monolith-facing, or governing-pattern relation or package-relation state claim. Do not require it for ordinary local wording repairs.
- Domain-tightened profile depth. Record this when a domain-specific profile-depth note actually tightens a selected profile or resolves a finding.
- Accepted-decision or accepted source-material carry-through. Record this when the review work states that accepted decisions from an accepted
DRR, returned-finding set, accepted intake, architecture source material, or other accepted source material named by value are implemented in or discharged by theE.19reviewed pattern or subset. The run record assigns accepted decisions and conformance subjects to loci inside that reviewed pattern or subset or to a named governing FPF pattern, companion document, record, or accepted source material, and classifies each as expressed sufficiently, expressed partially, not expressed and blocking, carried by a direct accepted-source-material consultation condition, correctly absent because rejected or not triggered, inherited unchanged, or outside the reviewed pattern or subset with a named governing FPF pattern, companion document, record, or accepted source material. This account does not rename anE.17.ID.CRcomparative review unit,PublicationUnit, publication form or face, source-pinned interpretation case, document whose accepted-source-material, evidence-source-material, architecture-source-material, or review-source-material role is named, or project-side review relation as anE.19reviewed pattern or subset; when those are present, name the governing-pattern kind and reference and assign carry-through to it or to a named governing FPF pattern, companion document, record, or accepted source material.
For PCP-ENTRY, the ordinary compact pattern-local note remains enough unless one of the triggered concerns above is genuinely present.
Decision outcomes
A PQG run MUST end with (a) one compact list of blocking findings and (b) one concrete remediation-direction account.
Remediation payload. The run MUST provide repair direction precise enough that one independent repair pass can adopt it into the reviewed text without reinventing the diagnosis. The core requirement is findings-first traceability, not direct patch emission.
Precision-remediation order. When a defect sentence combines a generic head, a claim-bearing qualifier, and mixed comparison-criterion pressure, remediation SHOULD repair them in that order: restore head kind, then qualifier claim kind or admissible-use boundary, then comparison-criterion homogeneity. A narrowing qualifier does not by itself repair the head-kind defect. Only after those repairs may the run keep or reintroduce a Plain, didactic, or coarsened restatement, and only if the more precise upstream interpretation remains recoverable.
Kind-restoration closure. A remediation direction or accepted repair does not close a precision-restoration finding merely because the old trigger word disappeared. For every wording, naming, or phrase-apparatus repair that changes FPF-governed text, the run record must recover the pre-repair kind, relation or claim kind, admissible use, and scope, then the post-repair kind, relation or claim kind, admissible use, and scope. If the repair narrows, widens, splits, or changes the kind, the run records the accepted decision or leaves the finding blocking. A lexical substitution without this account is still an open finding.
Report ordering (impact-first). The blocking findings are the primary review output. Remediation directions accompany them and SHOULD be listed in descending order of expected impact on semantic trust (FPF-governed sections first). Template-only issues belong at the end unless they hide missing content.
Budget discipline (anti-form-only review). If the run identifies semantic defects in FPF-governed sections, remediation direction MUST prioritize those fixes; purely mechanical edits (formatting, micro-typos) MUST be minimized and MUST NOT dominate the review by volume.
Noise discipline. The run record is a human-facing audit trail. It SHOULD stay sparse: list findings, boundary exceptions when any exist, repair direction, and decisions; no per-check pass recital is needed when no defect was found.
Archetypal Grounding — Tell–Show–Show: System / Episteme
Bias-Annotation
Lenses tested: Gov, Arch, Onto/Epist, Prag, Did. Scope: Universal (applies to all patterns and all clusters).
Bias risks and mitigations:
- Governance bias (Gov): reviewers may over-prioritize compliance signals and under-prioritize teaching value. Mitigation: PCP‑BASE includes didactic grounding and internal coherence checks and priority for ontology and semantics, not to form.
- Epistemic monoculture (Onto/Epist): SoTA‑Echoing can become single-tradition name-dropping. Mitigation: require explicit multi-tradition coverage and usage of F.18 for neutral naming.
- Pragmatic bias (Prag): a pattern can be “correct” yet unusable. Mitigation: consequences and anti-patterns remain mandatory sections, surfacing trade-offs and misuse paths.
- Didactic bias (Did): narrative quality can be mistaken for truth. Mitigation: conformance and SoTA‑Echoing sections bind claims to explicit requirements and lineage.
Conformance Checklist
Common Anti-Patterns and How to Avoid Them
Consequences
Rationale
Patterns are both teaching publications and normative guidance publications. A specification that grows without explicit quality gates becomes a patchwork: locally good, globally inconsistent. A profile-based gate is the smallest structure that keeps reviews repeatable while remaining sensitive to risk and pattern kind.
The baseline profile protects cross-pattern comparability and editorial sanity. Risk-selected profiles keep depth where it matters: norms, SoTA claims, cross-context reuse, terminology changes, staleness refresh, and reader-role fit. A pattern that is admissible in package terms but speaks to the wrong reader is still a review defect.
SoTA-Echoing - post-2015 review and validation practice alignment
Evidence binding note. If a SoTA Synthesis Pack exists for review and validation discipline or refresh discipline in your Context, cite it and keep this section consistent with it. Otherwise, use the table below as the current source-use basis for this pattern revision; do not duplicate it elsewhere as a seed list or treat reference sources as automatic SoTA.
Action result from the pattern-review and validation practice grounding: an E.19 pass, caution, return-for-repair result, clean checklist, or clean retrieval-entry check does not become project certification, project evidence, safety-assurance material, gate input, release justification, compliance-assurance material, assurance material, work authority, publication truth, or project refusal or approval. The local E.19 result is a pattern-quality review or refresh claim over the named reviewed pattern, selected profile, defects found or cleared, admission, refresh, repair-return, or selected pattern-quality boundary. Reopen the pattern-quality result when the reviewed text, accepted-source-material decision, SoTA grounding, related governing pattern, selected companion or projection role, profile trigger, review boundary, or attempted project-side reuse changes.
Relations
-
Builds on:
-
E.8(authoring conventions; canonical section order; SoTA‑Echoing authoring requirements) -
E.10(lexical discipline, trigger detection, and applicability) -
E.10.ARCH(distributed precision-restoration architecture and realization/governing-pattern split) -
E.9(design rationale records for changes that affect semantics) -
E.9.DA(scoped DRR decision-adequacy evaluations before pattern drafting or host amendment; anE.19finding may expose that an upstreamDRRdid not decide enough, butE.19keeps the pattern-review finding whileE.9.DAevaluates only the upstreamDRRdecision-adequacy claim. AnE.19pass, return, or absence is notE.9.DAcoordinate evidence.) -
E.22(improvement-oriented quality-evaluation question framing; distinguishes floor blocker review, exceptional-improvement review, Pareto trade-off inspection, open-question discovery, and absorption impact before theE.19review result is formed.) -
E.23(repeated quality-improvement method; anE.19profile can supply findings inside such a loop, butE.23governs repeated absorption, object-under-improvement evaluation re-evaluation, method-family selection, and stop, continue, switch method, open-new-frame, or hold decisions.) -
E.15(authoring/evolution protocol; harness mindset; refresh planning) -
A.6.5(slot discipline; SlotKind/ValueKind/refMode invariants)
-
-
Coordinates with:
F.8(mint vs reuse decisions)F.18(local-first naming protocol)F.9(cross-context alignment discipline)F.15(conceptual harness and regression framing)E.17(MVPK /U.Viewprojection discipline)E.11(pattern-entry discoverability discipline, forPCP-ENTRYonly as a review hook, not as a semantic prerequisite)E.21(scoped pattern-quality characteristic space, coordinate evidence discipline,PatternQualityStatus, and stop condition;E.19findings may supply evidence for a laterE.21value only when they identify content defects or strengths in the reviewed pattern version, but final coordinate values andPatternQualityStatusare assigned byE.21, not byE.19)A.6.7(MechSuiteDescriptionsuite-level semantics)A.15.3(SlotFillingsPlanItemP2W planned-baseline seam)G.11(refresh/decay orchestration principles, where applicable)
E.19:End
Mechanism Introduction Protocol
Type: Architectural pattern Status: Draft Normativity: Normative
Problem frame
FPF is intentionally open-ended: new U.Mechanism definitions, suite compositions, and SoTA-driven wiring modules can be added over time. This flexibility creates a recurrent authoring problem: introducing a new mechanism (or revising an existing one) tends to touch multiple governing patterns, specification loci, and extension blocks across Parts A/E/F/G and can easily create drift:
- semantics appear in the wrong governing locus (e.g., Part G wiring starts carrying mechanism meaning),
- suites degrade into “meta‑mechanisms” or hidden gates,
- planned baselines (WorkPlanning) are conflated with execution witnesses (WorkEnactment),
- token drift breaks public references, or
- the corpus accumulates dangling references and non-normative drafting commitments without a governing definition.
This pattern provides a repeatable, governing-definition assignment protocol for introducing mechanisms. It supports kernel coherence by keeping extension points and governing definitions explicit.
Use this when. Use E.20 when a proposed FPF change introduces or revises mechanism meaning, suite denotation, suite closure, suite obligations, suite pins, suite protocol semantics, planned-baseline pins, wiring semantics, governing-definition assignment, or what a citeable token denotes.
First useful move. Classify the edit with MIP trigger triage: MIP not triggered, local wording or alias-docking only, or MIP-run manifest required. If a manifest is required, name exactly one governing definition for each changed item before writing the pattern text.
Smallest sufficient governing-definition assignment guidance. Use the lightest governing-definition assignment guidance that preserves the next admissible reader move. Add MIP-run manifest fields, canonical mechanism card stubs, suite fields, planned-baseline pins, wiring refs, RSCR triggers, PQG coverage, or deprecation-continuity material only when the live mechanism-definition or citeable-token claim would otherwise become false, unsafe, non-replayable, or lack a named governing-definition locus.
Minimum sufficient next move. If the edit does not change citeable-token denotation, mechanism meaning, suite denotation, suite closure, suite obligations, suite pins, suite protocol semantics, planned-baseline pins, wiring semantics, or governing-definition assignment, a MIP-run manifest is not opened; name the current governing locus or alias-docking relation and stop.
Do not escalate when. Do not create a MIP-run manifest when alias docking or local wording repair preserves denotation. Do not treat a suite, plan, wiring module, or lexical cleanup as mechanism meaning unless the changed item needs a new or revised governing definition.
Same problem, different question under repair. For a TGA-looking problem, use E.18 for graph/flow/crossing, A.20 for internal step validity, A.21 for gate-decision publication, and E.20 for mechanism-meaning placement; do not open the other three until their own claim is live.
Semantic repair return. When E.20 blocks a misleading word, face, alias, or source label, the repair must return to the enabled authoring move: name the governing definition, canonical location, alias-docking relation, or non-trigger stop that remains admissible. Do not stop at a classification of vocabulary or publication faces.
Governed-object and relation separation. Keep the graph object and path or crossing relation (E.18), MVPK publication faces (E.17), internal CV status and witness (A.20), gate decision and DecisionLog (A.21), evidence or provenance relation (A.10/G.6), work plan or work occurrence (A.15), and mechanism-governing definition assignment (E.20) distinct. An MVPK face, DecisionLog, evidence carrier, MIP manifest, or work witness does not carry another pattern's project-side value unless that governing pattern consumes it for that relation.
Smallest affected locus. Localize the change to the smallest live locus: PathSlice or crossing in E.18, CV step in A.20, GateDecision equivalence class in A.21, or mechanism-governing definition in E.20. Do not widen to a whole flow or unrelated claim being made, locus, or EntityOfConcern when that locus is enough.
Ordinary success. For ordinary E.20 use, success is that the edit is classified, the current governing locus or alias-docking relation is named, and no MIP-run manifest is opened unless denotation, mechanism meaning, suite denotation, suite closure, suite obligations, suite pins, suite protocol semantics, planning pins, wiring semantics, or governing-definition assignment actually changes.
Locality asymmetry. E.18 is graph-local, A.20 is step-local, A.21 is gate-local, and E.20 is trigger-local. Do not normalize the four patterns into one assurance regime.
Do not merge these pairs. Keep CV.Status distinct from GateDecision, TGA Check distinct from GateCheckKind, MIP manifest distinct from DecisionLog, ViewpointMap distinct from graph semantics, PathSlice distinct from a work run, and GateProfile=Lite distinct from PublishMode=Lite.
Field liveness. Always core for E.20: trigger triage and the current governing locus or alias-docking relation. Conditional-live: MIP-run manifest fields, canonical mechanism card stubs, suite fields, planned-baseline pins, wiring refs, RSCR triggers, PQG coverage, and deprecation continuity; open them only when the corresponding denotation, mechanism-meaning, suite, planning, wiring, lexical, refresh, review, or retirement claim is live.
Retrieval trap guard. When excerpted alone, E.20 manifest language must not be read as requiring a full MIP-run for every mechanism-adjacent edit. Pure currentness cleanup, alias docking, optional suite-member citation of an already-defined mechanism, and local wording repair stop at the current governing locus unless denotation, mechanism meaning, suite closure, suite obligations, suite pins, suite protocol semantics, planning pins, wiring semantics, or governing-definition assignment changes.
Anti-Goodhart guard. A complete MIP-run manifest is not a substitute for the governed mechanism result: the mechanism-governing definition must still carry the operation, law, admissibility, slot, transport, applicability, and audit meaning needed for the claim.
Generative side. E.20 preserves open-ended action by allowing new mechanism definitions, suite variants, wiring, and citeable tokens to enter FPF with a named governing definition; the discipline prevents semantic drift so new work can be added rather than merely blocked.
What goes wrong if missed. A suite can start defining mechanism meaning, a plan item can start carrying enactment witnesses or gate decisions, a wiring module can carry kernel semantics, or a token rename can break citations while looking like harmless cleanup.
What this buys. E.20 gives the reader one current authoring move: assign the change to the right governing definition and keep mechanism, suite, planning, wiring, and lexical continuity distinct.
Not this pattern when. If the edit is only pure currentness, typo, reference, or old-label cleanup and changes no semantics or citeable-token denotation, record the current governing locus and stop. If the question under repair is runtime gate passage, gate decision, approval, suite-as-mechanism, plan-as-enactment, or performed work, use the gate, suite, planning, or work loci that own that question. A MIP-run manifest is not a runtime gate, gate passage, approval packet, or binary pass/fail decision.
Problem
When a new mechanism (or mechanism family) is introduced without an explicit authoring protocol:
- Governing-definition ambiguity causes partial changes: a suite enumerates a new
...MechanismDefinitionRef, but the canonicalU.Mechanismdefinition card is missing or inconsistent. - Boundary erosion occurs: suite descriptions start to define mechanism semantics; method wiring starts to redefine kernel meaning; publication/telemetry becomes a hidden tail.
- Plan/enactment confusion appears: planned slot fillings start to carry launch values, witnesses, or gate decisions.
- Terminology drift breaks citations: renames happen silently; tokens fragment across registers; downstream references become unstable.
- Review becomes non‑local: every introduction is a bespoke scavenger hunt across patterns, making training, review, and refresh unreliable.
Forces
Solution — the Mechanism Introduction Protocol (MIP)
Terminology note (disambiguation)
This protocol and any MIP-run manifest are authoring-side semantic-governing-definition assignment maps. A manifest is not an approval packet, gate, runtime decision, or pass/fail result. It names where mechanism meaning lives and what must not be inferred from suites, plans, wiring, aliases, or gates.
MIP governs how changes are assigned to their governing definitions, not how systems execute.
MIP trigger triage. Not every reference cleanup is a MIP-run. Classify the proposed edit before requiring a manifest:
- MIP not triggered: pure currentness, reference, typo, or old-label cleanup that changes no mechanism, suite, planned-baseline, wiring, governing-definition, or citeable-token semantics.
- Local wording or alias-docking only: wording clarifies an already-governed mechanism relation, or
F.18alias docking preserves citeability of an old token without changing what the token denotes. - MIP-run manifest required: the edit changes mechanism meaning, suite denotation, suite closure, suite obligations, suite pins, suite protocol semantics, planned-baseline pins, wiring semantics, governing-definition assignment, or what a citeable token denotes.
Only the third outcome uses the manifest in E.20:4.2. The first two still name the current governing locus or alias-docking relation when the text will be published. When the only live result is no denotation change, the published content should not carry MIP-run vocabulary except as a short non-trigger note.
Mint vs reuse
Mints:
- MIP — Mechanism Introduction Protocol (this pattern).
- MIP-run — an authoring event that applies this protocol to a concrete change set, captured as a short manifest (recorded as a DRR-linked change record or an equivalent, explicitly citeable change record).
Reuses:
U.Mechanismdefinition cards andMechanismDefinitionRef, suite descriptions (MechSuiteDescriptionand specializations), WorkPlanning plan items (SlotFillingsPlanItemand specializations), alias docking (F.18), RSCR triggers (G.Core), and PQG profiles (E.19).
Step 1: Classify the introduction
A MIP-run SHALL first classify the change, because different classes have different governing definitions:
- New mechanism family, species, or archetypal grounding (new
U.Mechanismarchetypal definition). - New mechanism definition within an existing A.6.1 mechanism kind (new
MechanismDefinitionRef, new canonical card). - Mechanism revision (signature/laws/slots/transport/audit semantics change).
- Suite change (membership, obligations, spec pins, suite protocols, suite audit obligations).
- Planned-baseline change (new or revised
SlotFillingsPlanItemspecialization, or changes to its pins). - Wiring change (new or revised Part‑G extension modules, SoTA method packs, selectors).
- Terminology migration (renames, token splits/merges, register changes).
- Deprecation / supersession / retirement (marking mechanisms/suites/plan items as deprecated, declaring successors, and preserving citeability; apply E.20:4.9.1).
Mechanism kind boundary. A MIP-run may introduce a new MechanismDefinitionRef. It does not introduce a new U.Transduction(kind=...) unless E.18 is explicitly updated, and it does not introduce a new C.3 U.Kind unless C.3 and A.6.5 discipline is explicitly live.
A.6.1 compatibility. MIP assigns mechanism meaning to A.6.1-governed mechanism definitions: operation algebra, law set, admissibility conditions, slot interface, transport or bridge regime, applicability, and audit. Suites, planned-baseline records, and Part-G wiring modules may cite or bind that meaning; they do not supply or redefine it.
New mechanism-family criterion. Treat a change as a new mechanism family, species, or archetypal grounding only when the existing mechanism-governing pattern cannot express the operation algebra, law set, admissibility conditions, slot interface, transport boundary, or audit semantics without changing its kind invariants. Otherwise classify the change as a new mechanism definition or MechanismDefinitionRef within an existing A.6.1 mechanism kind.
A single MIP-run MAY span multiple classes, but SHALL treat each class with its correct governing-definition assignment (below).
Step 2: Declare the governing-definition assignment map (mandatory)
For every new or modified change item, the MIP-run SHALL name exactly one governing definition and assign the change there. In FPF, that governing definition is a citeable, patchable PatternId, PatternId:SectionPath, PatternScopeId = G.x:Ext.*, or DRRId (E.9). The core MIP-run manifest in a citeable change record is limited to:
- each changed item,
- its governing definition,
- its canonical location (expressed as
PatternId:SectionPath,PatternScopeId, orDRRId, not as prose), and - the forbidden overread or forbidden move blocked by that assignment.
Conditional support fields appear only when live:
- the change class(es) from E.20:4.1 when needed to disambiguate the assignment,
- new or changed citeable tokens (
MechanismDefinitionRef,SlotKindtokens,PatternScopeId, etc.) when token denotation or citeability changes, - the best-known Delta-Class (
Δ-0toΔ-3) and impact radius estimate (E.15) when the run is plausiblyΔ-2orΔ-3, - intended RSCR trigger types when refresh or regression wiring is live, and
- the PQG (E.19) profile set when the run crosses an E.19-governed review boundary.
Note (normative). If the canonical location is a Part‑G wiring module, it SHALL be cited as a PatternScopeId (G.x:Ext.*) and the module SHALL declare GoverningPatternId (wiring is binding-only; meaning remains governed by its cited pattern).
Canonical governing-definition map (normative):
Guard (normative). Any proposed change that cannot name a governing definition from the table above SHALL be treated as a non-normative drafting note or candidate intake and SHALL NOT be relied upon as an FPF architectural commitment. Such material may exist only in an explicitly marked non-normative source carrier until assigned to its governing definition.
Step 3: Card-first canonicalization (eliminate dangling refs)
If the introduction adds a new MechanismDefinitionRef anywhere (especially inside a suite):
- The MIP-run SHALL first create a canonical mechanism card at the governing pattern location that publishes the
MechanismDefinitionRefand the minimal identity fields (names, intent, and "this is a distinct mechanism"). - The card MAY be a stub initially, but SHALL reserve:
- the stable
MechanismDefinitionRef(and its lexical register entry per E.10/F.17), - the intended mechanism family or species placement, and
- a DRR pointer for completing semantics (including any missing register/twin-label work).
Only after (1) is in place MAY suites or protocols enumerate the new MechanismDefinitionRef.
Step 4: Mechanism semantics completion (what “done” means)
Definition-of-done note (delegated). MIP uses two completion checkpoints for mechanism cards:
- Stub done - a citeability stub for a
MechanismDefinitionRef: a resolvable canonical target created only to prevent dangling references (E.20:4.3), not semantic completion.
A stub SHALL (i) exist at the mechanism-governing pattern's canonical location, (ii) reserve and publish the stable MechanismDefinitionRef (and its lexical/register entries), (iii) set MechanismDefinitionHeader.status = draft, and (iv) carry an explicit DRR pointer for completing semantics. A stub SHALL also list the A.6.1 conformance checklist item IDs it does not yet satisfy (without duplicating that checklist here). A stub may preserve citeability for suite or protocol enumeration, but it does not authorize suite closure, gate checks, planned baselines, wiring consumption, reuse, or import unless the fields required for that use are present and marked current.
- Introduced done - a mechanism card that can be relied upon as a
U.Mechanismdefinition. "Introduced done" is defined by A.6.1 conformance: the card SHALL satisfy the applicable A.6.1:7 Conformance Checklist items (CC-UM.*), with the baseline items designated by A.6.1 (e.g., CC-UM.0 and CC-UM.1) being the minimum requirement.
The list below is informative only (semantic orientation); the normative structure and “done” criteria are delegated to A.6.1’s CC items to avoid drift between this protocol and the canonical mechanism definition.
For an “introduced” mechanism beyond a stub, the useful completion target is to make the following semantic fields explicit:
- Operation field: the named operations that the mechanism provides (signature-scoped intent).
- Law/invariant field: the invariants that govern the operations, including admissibility constraints when applicable.
- Admissibility field: preconditions or eligibility predicates for admissible operation (not a gate decision log, and not per-run outcomes).
- Slot interface: required input and output slot kinds, with stable kinds and explicit ref modes.
- Specialisation discipline (when
⊑/⊑⁺is declared): explicit parent+morphism kind; SlotKind invariance; monotone ValueKind narrowing; no new mandatory inputs to inherited operations (per A.6.1:4.2.1 / CC‑UM.8). - Transport: declarative transport semantics (no hidden crossings; crossings are published via Bridges where required).
- Audit obligations: which evidence anchors are required when the mechanism is used.
If the mechanism introduces new slot kinds shared across a family/suite, apply E.20:4.5.
Step 5: Suite-scoped slot-token lexicon discipline (prevent slot drift)
If the mechanism belongs to a suite or family where multiple member mechanisms share slot vocabulary:
-
The suite-governing pattern SHALL provide a suite-scoped slot-token lexicon referencing
A.6.5SlotSpecs (or update it if already present) in the suite-governing pattern's canonical location (A.6.7/A.6.7.<FamilyKey>), or as a dedicated lexicon card explicitly referenced from there. The lexicon cites and organizes SlotKind tokens; it does not create new SlotKind semantics. -
Mechanism cards SHALL cite slot kinds from that lexicon (rather than minting local near-duplicates).
-
New slot kinds SHALL be introduced into the lexicon first, then referenced by member mechanisms. If any citeable
SlotKindtokens are minted/renamed, apply E.20:4.9.
This step is specifically intended to prevent the “same idea, different slot token” drift that makes planned baselines and audits non‑portable.
Step 6: Suite integration (if the mechanism is a suite member)
If the introduction changes a suite (MechSuiteDescription or specialization):
- Membership set semantics (WF‑MS‑1).
mechanismsis a set: duplicates are nonconformant and list order carries no semantics. - Ordering is only in protocols. If ordering matters, express it only in
suite_protocols. - Protocol closure (WF‑MS‑2). If
suite_protocolsis present, then for everyProtocolStepin everySuiteProtocol,step.mechanism ∈ mechanisms. - No hidden tails. Required stages (e.g., normalization/aggregation/Γ‑fold) are explicit protocol steps; do not hide them inside other steps.
- Guard/gate separation. Suites and mechanisms SHALL NOT publish
GateDecision/DecisionLog.AdmissibilityConditionsand tri‑stateGuardDecisionremain governed by the mechanism definition;OperationalGate(profile)acceptance thresholds and pass/fail criteria remain gate/acceptance concerns. - Suite is descriptive only (WF‑MS‑3/4). Any publish/telemetry continuation is outside the suite protocol and terminates via publication faces, packs, or modules; suites SHALL NOT define mechanism blocks (
OperationAlgebra,LawSet,Transport,Audit, …).
Kernel stability rule (recommended). If the suite is a kernel suite, and the change adds a new required stage, prefer creating a suite variant rather than mutating the kernel membership. If mutation is unavoidable, pair it with terminology continuity (E.20:4.9) and RSCR triggers (E.20:4.10).
Step 7: Planned baseline & P2W planning-to-work boundary (if planning changes)
If the mechanism introduction changes what a WorkPlanning baseline pins (e.g., selected comparator specs, method descriptions, time selector, guard pins):
- Introduce or revise a
SlotFillingsPlanItemspecialization under the WorkPlanning governing pattern. - The plan item SHALL remain planning-only:
- pins/refs only (ByValue or
<RefKind>), - no launch values,
- no
FinalizeLaunchValueswitnesses, - no gate decisions or decision logs.
- time is explicit: include
Γ_time_selectororΓ_time_rule_ref(XOR); implicit “latest/current” is nonconformant.
- pins/refs only (ByValue or
- The plan item SHALL target exactly one Description-scoped, edition-addressable slot-bearing description via
target_slot_bearing_description_ref(typically a kit or suite) and SHALL NOT target aMechanismDefinitionRef. If a "standalone mechanism baseline" is needed, introduce an explicit Description-scoped slot-bearing description wrapper (e.g., a mech kit or a suite-of-one) and target that.
This step exists to keep the P2W planning-to-work boundary crisp: planning defines planned fillers, enactment witnesses actual runs.
Step 8: Wiring & SoTA updates (keep method evolution out of kernel)
If the introduction involves methods, comparators, selectors, or other SoTA-sensitive choices:
- Put method/comparator family semantics in SoTA packs (G.2) and reference them by edition-pinned refs.
- Pin the chosen SoTA refs for a baseline in WorkPlanning plan items (E.20:4.7); wiring consumes pins rather than silently overriding them.
- Put flow/task binding logic in wiring modules (
GPatternExtension), with an explicitPatternScopeIdand declared governing pattern. - Wiring may bind, select, dispatch, or cite SoTA method packs; it may not redefine the operation, law, admissibility, transport, slot, or audit meaning of the mechanism it wires.
- If a SoTA update changes a mechanism's signature/laws, that semantic change SHALL be performed in the mechanism-governing pattern, under the A.6.1 mechanism-definition template; the change SHALL emit RSCR triggers (E.20:4.10).
Step 9: Terminology continuity (alias docking)
If the introduction renames any public token or changes canonical naming:
- Use lexical alias docking (F.18) so old tokens remain citeable.
- Update registers and twin labels per lexical discipline.
- Avoid silent rewrites: the MIP-run SHALL make the alias relation and successor relation explicit.
Deprecation / supersession / retirement (preserve citeability)
If the change class includes deprecation/supersession/retirement (E.20:4.1 #8), the MIP-run SHALL preserve reference continuity while making the status change explicit:
- Preserve the canonical target. The deprecated mechanism card, suite description, plan item, or wiring module SHALL remain resolvable at its canonical location; deprecation MUST NOT be implemented by removal that would break citations.
- Keep the public token citeable. The deprecated token (
MechanismDefinitionRef, suite token, plan-item token, etc.) SHALL remain citeable. If a successor token/name is introduced, the old token SHALL be alias-docked per F.18 (E.20:4.9). - Declare successor (or “no successor”). The deprecated mechanism card, suite description, plan item, or wiring module SHALL declare a successor pointer (or explicitly declare that there is none) using the project’s established deprecation/supersession fields.
- Assign downstream updates to governing definitions. Any needed suite denotation, closure, obligation, pin, protocol-semantic, WorkPlanning-pin, or wiring-semantic change SHALL be performed in its respective governing definition (E.20:4.2), preferably by introducing a suite variant rather than silently swapping kernel membership.
- Emit RSCR triggers. Deprecation/supersession SHALL emit typed RSCR triggers and extend the regression envelope (E.20:4.10), including checks for dangling refs and alias coverage.
Step 10: RSCR triggers + regression envelope
A MIP-run that changes any of:
- mechanism signatures,
- suite membership/protocols,
- planned baseline pins,
- slot vocabulary / SlotKind lexicon,
- terminology/alias docking that changes citeable tokens,
- or other reference loci
SHALL emit typed RSCR triggers via the RSCR governing pattern and SHALL extend the regression envelope to include, at minimum:
- no dangling
MechanismDefinitionRefenumerations, - suite membership set semantics + protocol closure,
- guard/gate separation preservation,
- P2W planning-to-work boundary preservation (planning vs enactment).
Guard (normative). Trigger kind identifiers (e.g., RSCRTriggerKindId) SHALL be selected from the RSCR trigger catalogue governed by G.Core. A MIP-run SHALL NOT mint ad hoc trigger kinds (“reason kinds”) scattered in arbitrary patterns/modules.
Manifest hook (recommended). The MIP-run manifest SHOULD list emitted trigger types and the regression envelope deltas as checkable items.
Step 11: Apply PQG profiles (E.19) and close the run
Every MIP-run SHALL be reviewed using PQG (E.19) with:
- PCP‑BASE always, and
- the triggered profiles implied by the change class (at least):
- PCP‑SUITE if any suite locus changed,
- PCP‑P2W if any planned-baseline locus changed,
- PCP‑TERM if any new terms/renames are introduced,
- PCP‑SOTA if SoTA packs are introduced/modified,
- PCP‑NORM if the run introduces/changes normative requirements or conformance items,
- PCP‑DEONT if RFC keyword clauses are introduced/modified (or if invariant/predicate vs deontic form is ambiguous),
- PCP‑BRIDGE if cross-context reuse, crossings, or bridges are introduced or changed,
- PCP‑REFRESH if refresh-sensitive claims (SoTA lists, “current practice”, enumerations) are touched,
- plus any applicable modularity / boundary / normativity profiles required by the delta.
MIP-run outcomes (normative set). A reviewed MIP-run SHALL be closed as one of:
- Proceed (single change set).
- Proceed via governing-definition split (mandatory when semantics were placed under the wrong governing definition; the change is split into governing-definition-correct edits).
- Proceed via suite variant (preferred when kernel stability is threatened by adding new required stages).
- Block with explicit missing condition (insufficient semantics; stub exists but completion condition is DRR-tracked).
- Reject (violates invariants such as suite-as-gate, plan-as-enactment, or governing-definition ambiguity).
Archetypal Grounding (Tell–Show–Show)
Show 0 (suite member, no new mechanism meaning). A suite adds an already-defined MechanismDefinitionRef as an optional member and changes no operation, law set, admissibility condition, slot interface, transport boundary, audit semantics, planned-baseline pins, or wiring semantics. E.20 records the suite-governing locus and stops; no new mechanism-governing card and no MIP-run manifest are opened.
Bias-Annotation
Lenses tested: Governance (governing-definition assignment, continuity), Architecture (boundary hygiene and modularity), Onto/Epist (meaning placement and type discipline), Pragmatic authoring (reviewability, governing-definition split handling), Didactic (Tell-Show-Show training support).
Conformance Checklist (normative)
Conformance use. This checklist is evidence for the governing-definition assignment guidance already stated in the Solution. It is not the first entry text for ordinary use and not a full audit regime by default; an item is applied only when its corresponding trigger triage, manifest, card, suite, planning, wiring, lexical, RSCR, PQG, or deprecation move is live. Before applying any item, name the Solution move it tests; if no such reader move is live, treat the item as support-only or not applicable rather than expanding the applied assurance or conformance material.
Conformance groups. Ordinary E.20 use starts with trigger triage and stops at the current governing locus when no denotation or mechanism-meaning change is live. Manifest-core items apply only when a MIP-run is actually triggered. Publication/assurance items apply only when citeability, card stubs, alias docking, RSCR, PQG, or deprecation continuity are live. Crossing, launch, and work-enactment checks are not governed by E.20; if they become live, use the gate, planning, or work loci and keep E.20 to governing-definition assignment.
Common Anti-Patterns and How to Avoid Them
Consequences
Benefits
- Mechanism introductions become trainable and reviewable (a repeatable governing-definition map).
- Reduces drift by requiring one governing pattern for each mechanism meaning and keeping semantics in their governing pattern.
- Keeps suites descriptive and the P2W planning-to-work boundary crisp, improving auditability.
- Supports SoTA evolution without destabilizing kernel meaning.
Costs
- Introductions use more explicit assignment records (governing-definition map, PQG coverage).
- Some changes will be split into multiple governed edits (by design), which increases authoring overhead.
- Kernel stability discipline can feel “slow” when a team wants a quick mutation.
Rationale
Mechanisms are high-leverage semantic units: a small change can touch suites, planned baselines, wiring modules, and audits. Without a protocol, the corpus tends toward semantic duplication across governing loci and non-local correctness (you can’t know what changed without reading everything).
Governing-definition-directed authoring is a pragmatic compromise: it does not depend on tooling, yet it gives a stable governing-definition map that supports subsequent review and refresh.
SoTA-Echoing
Relations
Builds on:
- E.8 (pattern structure and normative authoring discipline)
- E.10 / F.17–F.18 (lexical registers, twin labels, alias docking)
- E.19 (PQG/PCP profile-based review)
- E.15 (evolution discipline; DRR/edition thinking)
Coordinates with:
- A.6.1 (
U.Mechanismdefinition template governance) - A.6.7 (
MechSuiteDescriptionintegrity) - A.15.3 (
SlotFillingsPlanItemand planned baseline seam) - E.18 (E.TGA flows that cite planned baselines)
- G.Core (RSCR trigger catalogue)
- G.2 (SoTA synthesis packs)
- G.x:Ext.* (wiring modules via
GPatternExtension)
Constrains:
- Any change set that introduces or revises mechanisms, suites, planned baselines, or wiring in a way that changes citeable loci.
E.20:End
FPF Pattern-Quality Evaluation CharacteristicSpace
Status: Core.
Problem frame
Use E.21 when one authored FPF pattern of concern must be evaluated for quality under the use required by the governing evaluation frame: ordinary practitioner use, authoring input, landing input, release input, external-review input, high-assurance reuse input, canonization input, or another explicitly requested pattern-quality use. The evaluator does not replace the required ClaimScope with an easier one. If the pattern fails the required use, the result is repairBeforeUse, holdForArchitectureDecision, or refreshNeeded; a different use needs a different evaluation frame and does not rescue the current result.
Not this pattern when the evaluated object is one DRR, an FPF-level corpus object, a single wording repair, a source-use decision, or a project-side evidence, assurance, gate, release, safety, compliance, work, or decision claim. Use E.9.DA, E.2.DA, E.10 and precision-restoration neighboring patterns named by value, or the project-side pattern governing the claim for those objects.
First useful move: recover the required scope from the governing request, E.22 frame, campaign seam, landing check, release check, or review assignment; then name the governing pattern of concern, required scope, working reader, intended use, and qualification window; then evaluate every coordinate in RequiredPatternQualityCoordinates with a value and short rationale.
floorEvaluation changes the declared floor and expected evidence economy. It never creates a partial E.21, inactive coordinates, overlay-trigger shortcuts, narrowing to an easier use, blocker-only substitution, or a permission to skip precision-restoration discharge. Fragmentary, wrong-shaped, or weak pattern text is still evaluated under the required scope; weakness receives low coordinate values, repair status, architecture hold, or refresh status.
What goes wrong if missed: pattern quality becomes taste, checklist closure, source count, review state, landing state, or length. Short patterns can pass while missing mature content; long patterns can pass while hiding the first user move; semio material can take over a non-semio pattern.
Primary EntityOfConcern in plain terms: the quality claim of one governing FPF pattern of concern for a declared use.
Problem
FPF patterns need a quality evaluation that is stronger than a style checklist and lighter than a project assurance audit. Earlier review habits produced two opposite failures:
- Too weak. A reviewer marks a pattern "ready" because no blocker is obvious, because it landed, or because headings exist.
- Too heavy. A reviewer adds more warnings, evidence cards, source rows, boundary notes, and process residues until the pattern becomes harder to use.
E.21 solves this by measuring the pattern of concern against one complete coordinate set. The coordinates ask whether the pattern is usable, coherent, current, precise, affordable, mature enough for its claim, and safe from proxy improvement.
Forces
Solution
E.21 is the FPF pattern-quality specialization of A.19.ECS. It evaluates one pattern of concern under one declared quality claim.
There is one evaluation shape:
- frame the object and use;
- apply the ordinal scale to every required coordinate;
- justify each value with
ShortRationale; - assign
PatternQualityStatus; - state stop, repair, architecture hold, or refresh condition;
- when improvement is requested, return proposal rows without changing the coordinate result into a work plan.
There is no separate pre-check result. If a pattern lacks frame, first move, source basis, mature comparison, or naming clarity, the relevant coordinates fall.
Local names and kind settlement
Evaluation record
Ordinal scale, result row, and adjacent-value rationale
Values are ordinal content evaluations. They are not U.Measures, averages, percentages, maturity-ladder steps, review votes, or landing status.
The result-bearing coordinate row has exactly this shape:
A two-column coordinate/value table, a narrative paragraph, a table whose comment lacks adjacent-value comparison, or a result whose value depends on unchecked external loci is not an E.21 result. It is only draft evaluation material until every coordinate has a ShortRationale row and the result names the EvaluationEvidenceBasis used for values that depend on source, comparator, corpus, projection, or worked-case evidence.
A ShortRationale is allowed to be compact, but it is not allowed to be evidenceless. When the value depends on a source-currentness row, mature comparator, README scenario, ToC row, E.11 entry-distribution locus, I.2 expanded entry-disambiguation case, card, retrieval cue, monolith section, worked slice, near-miss, or anti-case, the rationale names that locus by value or says that the locus was missing or unchecked. "By value" means a recoverable section, row, case, checklist item, relation, source row, projection row, comparator id plus selected ingredient, or exact absent locus; a category list such as "entry, first move, boundaries, SoTA, checklist, relations" is not by-value discharge. Missing or unchecked evidence lowers the value for the coordinate that needs it; it does not create a separate "not evaluated" result.
A 5 is not a reward for clear early wording, named neighbour relations, or a well-formed field set alone. It needs exceptional expression for the declared use: reinforcing loci, a worked or otherwise replayable slice where the coordinate demands one, and no hidden cost or neighbour loss. When the evaluator cannot say why 4 would understate the evidence, assign 4 or lower.
When a coordinate's 5 meaning names a filled case, replayable slice, near-miss, anti-case, worked comparison, projection evidence, currentness basis, or exact-neighbour replay, absence of that evidence caps that coordinate at 4 even if the prose is otherwise strong. Do not hide the same absence only in CaseCountercaseAndTransferCoverage; lower every coordinate whose own 5 meaning needs that missing evidence. A 5 rationale names the reinforcing evidence loci that make 4 too weak.
For MaturePatternParityAndSelectedContentSufficiency, the rationale names a mature-pattern comparison set and the selected mature ingredients being claimed. For non-epistemic patterns, include at least one mature non-epistemic comparator when one exists: work, method, role, system, control, architecture, selection, engineering-action, or another pattern whose primary EntityOfConcern is not an episteme or publication. Value 4 requires by-value discharge of selected ingredients in the body or neighboring pattern governing the claims; comparator IDs plus a generic "main ingredients are present" sentence are only value 3. The comparison is not a length target and not permission to copy semio apparatus.
For a 4 or 5 on MaturePatternParityAndSelectedContentSufficiency, include a compact maturity-discharge payload in the rationale or CoordinateEvidenceRefs: comparator=<pattern id>; selectedIngredient=<ingredient name>; currentLocus=<section, row, case, checklist item, relation, or neighboring pattern governing the claim>; missingOrLowering=<absent or weak ingredient, if any>. A category list such as "frame, first move, neighbour relations, CC, SoTA, relations" without current loci is still value 3, even when the listed categories are plausible mature ingredients.
Precision-restoration profile
Before assigning the coordinate table, record one PrecisionRestorationProfile. This is not an optional scan and not a lexical grep result. It is a role-based attention discharge: the evaluator asks what work the sentence, table, section, or repeated content family is doing in the pattern of concern.
Use this compact shape:
This profile deliberately collapses several small subreadings into one scalar effect. The scalar is the strongest quality effect that any layer requires: clean, bounded local repair, coordinate lowering, or repair-before-use. The layers are diagnostic, not extra coordinates, checklists, or proposal quotas. A new precision-restoration symptom is classified into one of these layers or assigned to the selected restoration or governing pattern; it does not mint a new [E.21](/generated/patterns/E.21) coordinate. Details belong in the patterns that govern those objects: word/head/name problems apply [E.10](/generated/patterns/E.10), [E.10.ARCH](/generated/patterns/E.10.ARCH), or [F.18](/generated/patterns/F.18); phrase-level boilerplate and plain-technical rewriting apply [F.19](/generated/patterns/F.19); claim, relation, evidence, work, decision, assurance, publication, or pattern-application problems apply the pattern that governs that object. [E.21](/generated/patterns/E.21) consumes only the result: which coordinates fall, which stay protected, and what repair would make the quality claim true.
The kindRestorationCheck is required whenever a precision-restoration finding or repair proposal changes wording. It records the meaning-bearing object, kind, relation, slot or use-position, admissible use, and scope before and after the proposed repair, then names the governing pattern when another pattern governs the affected kind, relation, claim, or position ([A.6.0](/generated/patterns/A.6.0)/[A.6.5](/generated/patterns/A.6.5), [A.6.P](/generated/patterns/A.6.P), [C.29](/generated/patterns/C.29), [A.15](/generated/patterns/A.15), [E.10.ARCH](/generated/patterns/E.10.ARCH), or another governing pattern). [E.21](/generated/patterns/E.21) does not restate slot discipline or mathematical-lens ontology; it only checks that the repair preserved or deliberately changed them by value. The check is a bounded complete preservation proof, not a blanket demand to formalize every sentence and not a license to do the least visible work. Complete means every field whose value can drift because of the changed wording receives one explicit disposition: not triggered/ordinary prose/no FPF-governed phrase changed with checked loci, preserved, split, intentionally changed by accepted decision, or blocker. A no-repair result is valid only as one of those dispositions with loci; "nothing to do" without that discharge is a missing repair. Expand the row only when a kind, relation, claim, slot/use-position, or admissible use can drift. A lexical replacement is not a repair when it only removes a trigger word, substitutes one umbrella for another, narrows a graph or method into a work sequence, widens a work occurrence into a method, turns a publication or evidence carrier into the object itself, or otherwise changes kind or slot/use-position without an accepted decision. If the kind or slot/use-position cannot be recovered, the profile is at least lowersCoordinates; if the proposed repair would change kind or slot/use-position and no accepted DRR or governing pattern justifies that change, the result is repairBeforeUse or holdForArchitectureDecision.
When the profile is not clean, lower every affected coordinate named by the profile. Do not hide a present precision-restoration issue only in EntityOfConcernPrimacyAndSemioBiasResistance, and do not raise the result through related-pattern-boundary praise, projection evidence, or "correct but true" guards when the profile shows that those materials compete with the positive subject/action spine.
RequiredPatternQualityCoordinates
Every E.21 evaluation of an FPF pattern of concern evaluates every coordinate below.
Constraint, harm, safety, security, compliance, deontic, self-application, recursion, and high-assurance questions do not add a second coordinate family. Evaluate them through the coordinate that owns the content: related-pattern authority, traceability, formal legality, falsifiability, affordability, corpus ecology, or evolution/refresh.
Coupled-flow unity/separation for pattern quality. An E.21 run evaluates a PatternOfConcernRef inside a development, refresh, or admission flow. Another flow may make the same pattern a pattern of concern for a different role, for example a practitioner selecting and using it, a reviewer applying it to another text, or a later evaluator reopening it. One TransductionGraph may join pattern development, pattern use, use-found evaluation, and repair or refresh flows through transfer, feedback, return, edition-change, or projection relations. Keep three roles distinct in each sentence: the pattern as concern of the current flow, the intended reader addressed by the pattern, and the pattern's own primary EntityOfConcern inside its Problem/Solution/guidance. E.21, E.19, handoffs, ledgers, README/ToC/E.11/I.2/retrieval checks, and landing evidence are checking operations or carriers in the development or evaluation flow. They can cause edits to the pattern, but they are not automatically user-facing content for the role addressed by the pattern. DesignRunTag stays on the subject-context, claim, work, trace, or artifact relation inside the TGA graph; it does not decide whether a pattern is current, obsolete, under development, or being used. Treat FPF pattern development as the local pilot case: quality-loop proof changes the pattern through edits, not by being copied into the pattern.
Frequent 3/4/5 calibration points
These rows calibrate common disagreements. They do not replace the coordinate definitions above.
For EntityOfConcernPrimacyAndSemioBiasResistance, do not compensate a bad PrecisionRestorationProfile with NeighborAuthorityAndBoundedUseFit or CorpusEntryProjectionAndEcologyFit. This is a role-based evaluation, not a lexical search: ask what role the sentence plays. Material about developing, reviewing, projecting, landing, evaluating, or proving this pattern's quality belongs in the carrier that owns that work, not in the pattern. Related-pattern statements named by value can be true and still damage the pattern of concern when they appear before the pattern's own EntityOfConcern and action spine are recoverable. If the opening Problem frame or Solution starts with precision-restoration material before the pattern's own subject and move, this coordinate is at most 2; if a positive action exists but the reader must traverse that material across sections to find it, it is at most 3. Compact related-pattern statements belong in Relations or short late boundary rows and must preserve kind. Local boundary prose is admissible only when it states a documented local confusion and local stop condition not already carried by the owning pattern for that specific distinction or claim boundary. Also lower ActionPathGuidance, WorkingSituationAndUseBoundaryRecognizability, PracticalUseDeltaAndHarmPrevention, and UseAffordabilityAndApparatusProportionality when the profile shows that precision-restoration issues displace first-use content.
If the declared use is Stable, landing-input, release-input, external-review-ready, or another corpus-facing use, the evaluation must use evidence for corpus entry and projection coordinates. A host-only body evaluation can still evaluate the pattern body, but it cannot silently turn missing README, ToC, E.11, I.2, card, retrieval, monolith, or projection evidence into a high CorpusEntryProjectionAndEcologyFit value.
Status and stop condition
Default floor is 4 wellExpressedForDeclaredUse on every coordinate for ordinary practitioner use, authoring-input use, landing-input use, Stable, external-review-ready, release-input, canonization-input, stop-improving claims, and ordinary improvement-loop use. A diagnostic or exploratory request still measures every coordinate and reports values; it does not create an admissible-use shortcut. If the assignment asks for corpus-facing, landing-input, Stable, release, or external-review use, the evaluator measures that required use and returns repairBeforeUse, holdForArchitectureDecision, or refreshNeeded when the floor is missed.
An all-5 result is a local exceptional result under the declared scope and qualification window. It is not a permanent end of development. E.23 can reopen improvement when use, source, comparison set, front, affordability, or payoff changes.
Compact result form
An E.21 result uses this result-bearing form:
Status is not assigned from a two-column table, a prose summary, a checklist count, an [E.19](/generated/patterns/E.19) pass/fail row, a table missing ShortRationale, a result missing the required PrecisionRestorationProfile, or a result missing the evidence basis needed for the values it claims. Such material can support a later evaluation, but it is not the [E.21](/generated/patterns/E.21) result. Conversely, an [E.21](/generated/patterns/E.21) status is a pattern-quality status, not a release crossing: [E.19](/generated/patterns/E.19) or the release named by value/admission process still checks gate-specific carry-through, projection, monolith, packaging, authority, and non-overread conditions.
Finding and proposal rows
When [E.22](/generated/patterns/E.22), [E.23](/generated/patterns/E.23), returned-finding absorption, or exceptionalImprovementEvaluation asks for improvements, add proposal rows for every below-target coordinate, status weakness, stop-condition weakness, or open question that can be improved within the declared scope. One proposal may cover several coordinates only when it names all affected coordinates and the shared repair.
Worked slices
Names named by value, no first move. A pattern has precise Tech names and current source rows but no first user move. WorkingSituation..., ActionPathGuidance, and PracticalUseDelta... fall; source currentness does not rescue ordinary use.
Short architecture pattern. A compact pattern has a triage form but no worked slice and no mature-pattern comparison. It can be useful as local expert reference material, but MaturePatternParity... and CaseCountercase... stay below exceptional until selected mature content is present.
Precision-restoration profile in a non-semio pattern. A pattern about architecture, work, system levels, method, P2W, or another non-semio EntityOfConcern tries to introduce the subject through a catalog of other claim kinds or objects that are outside its own subject. That catalog is unbounded because every EoC is outside infinitely many other EoCs. If copied boundary doctrine leads the Problem frame or Solution, EntityOfConcernPrimacyAndSemioBiasResistance falls to 2 or 3 even when every individual boundary is true. Repair by leading with this pattern's own EntityOfConcern and action spine, and replace copied boundary doctrine with one governing pattern id or one governing pattern for <claim/relation/boundary> statement unless a documented local confusion needs an local stop condition not already carried there. If the same doctrine is spread across Problem frame, Solution, anti-patterns, checklist, and Relations, classify the aggregate under the profile's repetition/distribution layer and repair the distribution, not just each local sentence.
Reference apparatus before Solution content. A pattern's first Solution paragraph assigns other patterns or related-pattern mappings before it unfolds the ontology, method, norm, worked action, or other positive solution for the pattern of concern's own EntityOfConcern. Even if the related pattern id is correct, ActionPathGuidance, EntityOfConcernPrimacyAndSemioBiasResistance, PracticalUseDeltaAndHarmPrevention, and sometimes NeighborAuthorityAndBoundedUseFit fall. Repair by moving discoverability to README, ToC, E.11, I.2, or retrieval/projection carriers, moving compact pattern-id or governing pattern for <claim/relation/boundary> statements to Relations or a late boundary row, moving architecture-placement rationale to DRR or architecture documents, and rewriting the Solution to answer "what do I do with this pattern's EoC?" before any statement about another pattern.
Overformalized precision. A pattern uses correct FPF kinds, slots, references, and governing-pattern pointers so densely that the working reader cannot recover the first useful move, practical delta, or generalizing insight without doing an internal audit. Precision is then present but not usable. Lower UseAffordabilityAndApparatusProportionality, WorkingSituationAndUseBoundaryRecognizability, and sometimes ActionPathGuidance. Repair by keeping the ontology named by value only where it carries a live FPF-governed claim, moving restoration evidence to the evaluation or DRR carrier, and adding a short worked slice or plain recognition sentence that preserves the same kind without extra apparatus.
QualityCarrierLeakage in the pattern. The pattern says that corpus projection, README/ToC/E.11/I.2 alignment, retrieval/cold-reader evidence, monolith parity, external-review readiness, landing evidence, PatternQualityStatus, all-4/all-5 posture, or another quality-carrier result is what the user should do with the pattern's EntityOfConcern, or records developer/reviewer/executor correspondence as if it were pattern content. The defect is not limited to Problem frame, Solution, examples, or checklist; notes, appendices, Relations, Rationale, SoTA-Echoing, tables, and conformance rows are also parts of the pattern in hosts and the monolith. That evidence may be required for E.21, E.19, landing, or retrieval carriers, but it is not automatically a user action in the pattern of concern. Lower EntityOfConcernPrimacyAndSemioBiasResistance, ActionPathGuidance, UseAffordabilityAndApparatusProportionality, and CorpusEntryProjectionAndEcologyFit when this evidence enters the pattern. Repair by moving the evidence to the E.21 result, E.19 run record, README/ToC/E.11/I.2, card/retrieval/projection carrier, or release/landing evidence carrier, and keeping in the pattern only the user-facing move or boundary that follows from that evidence.
Quality table without rationale. A result gives values but no adjacent-value rationale. Values are unsupported. Add ShortRationale or lower.
Goodharted improvement. A rewrite improves source refs and proof sketches but becomes hard to use. Re-evaluate affordability, repair locality, proxy-for-value, and corpus ecology before stopping.
Conformance checklist
Common anti-patterns and repairs
Consequences
Rationale
E.21 keeps the measuring device simple: one object kind, one ordinal scale, one required coordinate set, one status set, and one stop condition. The evaluation never asks whether a coordinate is active. It asks what value the current pattern and its named evidence basis earn under the declared use.
The mature-pattern parity coordinate is deliberately strict because recent short patterns looked formally clean while lacking the worked slices, source carry-through, lowering conditions, and transfer coverage present in mature FPF patterns. The repair is not "make everything long"; it is "carry the selected mature ingredients that the declared use needs."
SoTA-Echoing
Relations
E.21:End
Improvement-Oriented Quality Evaluation Question Framing
Status: Core.
Problem frame
Use E.22 when someone is about to ask for a quality evaluation, quality review, returned-finding absorption, improvement proposal, or next-move hypothesis over an object version named by value, and the question needs to say what kind of evaluation is wanted before the evaluator starts.
E.22 frames the question. It does not evaluate the object. The values, coordinates, statuses, and stop meanings come from the named object-under-improvement evaluation: for example E.21 for one pattern version, E.9.DA for one DRR, E.2.DA for an FPF-level object, C.25 for an engineering quality bundle, or another declared characteristic space, scale set, rubric, or review profile. E.19 is different: it supplies an admission or refresh review gate and findings profile. Use E.19 as the object-under-improvement evaluation only when the object being evaluated is an E.19 review-profile result itself. For one FPF pattern version, E.21 supplies the coordinate values and PatternQualityStatus; E.19 may later check that the E.21 result is valid, sufficient for the release seam, and not overread as project evidence, release, gate, assurance, or work.
Not this pattern when the question is already scoped and one direct evaluation is enough. Run the object-under-improvement evaluation directly. Use E.23 when repeated improvement across passes is needed.
First useful move: write a QualityEvaluationQuestionFrame naming the object version, the object-under-improvement evaluation, the purpose, the floor or improvement aim, protected trade-offs, expected evidence basis, and expected result form.
What goes wrong if missed: "review this" can mean too many different things. A floor check may be mistaken for exceptional improvement, a review may suggest work without naming quality movement, absorption may count closed rows without re-evaluating the changed object, or a next-move suggestion may be overread as a decision, work plan, gate, evidence, assurance, or release.
Primary EntityOfConcern in plain terms: the framed quality-evaluation question for one object version.
Problem
Quality evaluations fail when the evaluator has to infer the question. The same object can be checked for floor adequacy, improved toward exceptional expression, compared across trade-offs, mined for open questions, or evaluated after finding absorption. Those purposes produce different findings.
The defect is not that reviewers need more ceremony. The defect is that an unframed question hides the object under improvement, the evaluation that supplies values, and the allowed shape of returned work.
Forces
Solution
E.22 gives one compact declaration for improvement-oriented quality evaluation questions. It keeps the question from replacing the evaluation and keeps the evaluation result from becoming a decision or work product beyond its authority.
Local names and kind settlement
These names frame and report quality evaluation. They do not select candidates, publish sets, plan work, certify evidence, approve release, or create new values.
Quality evaluation purposes
Purposes can be combined, but the result keeps them distinguishable. A floor result does not answer exceptional improvement. Absorption count is not quality movement. A proposal is not a selected work item.
Question frame
The shortest floor frame may name only object version, object-under-improvement evaluation, purpose floorEvaluation, and declared floor. The named evaluation still runs its required coordinate set and returns the result-row shape, evidence basis, rationales, coordinate-specific payloads, and mandatory attention-discharge profiles required by that evaluation. For one FPF pattern version under [E.21](/generated/patterns/E.21), compactness never permits omitted coordinates, missing ShortRationale, absent PrecisionRestorationProfile, inactive/triggered-coordinate shortcuts, scope narrowing, or a blocker-only substitute result.
The frame does not authorize post-hoc scope replacement. If the requested floor is landing-input, corpus-facing, Stable, release, external-review, or another stated use, the evaluator measures that use. If a different use becomes interesting, open a new QualityEvaluationQuestionFrame; do not report the current request as passed under an easier scope.
Finding and proposal rows
An actionable finding has this shape:
A proposal row uses the same shape plus expected trade-offs and the governing pattern for any outside claim, relation, or boundary when needed. One edit may close several rows, but each row keeps its own disposition and closure evidence.
For wording, naming, and precision-restoration proposals, the correction direction is not "replace X with Y". It must state the recovered object kind, relation, slot or use-position when live, admissible use, and scope before and after the change, or state not triggered, ordinary prose, already satisfied, or blocker with loci. A proposal that only removes the suspicious word, that leaves the text unchanged without by-value discharge, or that narrows one kind into another without an accepted decision, is a finding, not a closed repair.
Absorption impact values
The absorption result is quality movement under the object-under-improvement evaluation, not a count of accepted rows.
OEE/NQD and proposal portfolios
When the object is a candidate, archive/front member, selected set, parity report, refresh report, or declared transduction result, E.22 can frame the quality question and return proposal rows. C.17, C.18, C.19, G.5, G.9, and G.11 keep authority over candidate characteristics, archive/front semantics, pool policy, selected-set publication, parity, and refresh.
Worked slices
Floor evaluation. A reviewer is asked whether one pattern is ready for ordinary use. The frame names E.21, purpose floorEvaluation, the declared floor, and the expected E.21 result form. The result is a complete E.21 coordinate table with ShortRationale and EvaluationEvidenceBasis, not a narrative "looks fine."
Exceptional improvement. A pattern already passes the floor. The frame asks for non-dominated improvements toward 5 while protecting usability and related-pattern fit. The result returns proposal rows for missing worked cases and source-currentness, plus no-candidate dispositions for coordinates already strongly expressed.
Absorption. External review returns many suggestions. The frame asks for absorptionEvaluation. The result says which changes improved coordinates, which were already satisfied, which introduced trade-offs, and which belong outside the evaluation.
Proposal portfolio. A candidate improvement campaign needs alternatives before editing. The frame asks for candidateImprovementProposalEvaluation. The result returns bounded proposal rows; selection or generation stays with the pattern that governs that claim and is not decided by the evaluation frame.
Bias annotation
This pattern biases FPF toward asking the quality question by value. The bias is useful because unframed review requests often produce plausible but wrong answers.
The bias is bounded. E.22 does not supply quality values, run repeated improvement, publish selected sets, decide work, or certify project claims.
Conformance checklist
Common anti-patterns and repairs
Consequences
Rationale
There is no neutral generic request when a quality result is wanted. The useful artifact is the framed question: object version, evaluation, purpose, expected evidence basis, expected result form, and boundary. This keeps review helpful without turning it into process control or project authority.
SoTA-Echoing
Relations
E.22:End
Quality Improvement Loop Method
Status: Core.
Problem frame
Use E.23 when an object version will be improved through repeated passes under a declared object-under-improvement evaluation. The object can be a pattern, DRR, FPF corpus object, engineering quality object, naming candidate, OEE/NQD candidate, archive/front member, selected set, parity report, refresh report, or declared transduction result, if an exact evaluation supplies values and stop meanings for that object kind.
Not this pattern when one direct quality evaluation is enough. Use E.22 to frame one evaluation and then run the named object-under-improvement evaluation. Use A.19.ECS first if the needed evaluation characteristic space does not exist.
First useful move: name the object version under improvement, the exact evaluation that will re-evaluate it, the improvement aim, protected trade-offs, cost and risk account, and local stop condition.
What goes wrong if missed: teams close discharge rows instead of improving quality, retry blindly, optimize visible values while damaging protected qualities, stop forever after a local all-5 result, or let a review recommendation become decision, work, evidence, selected-set publication, parity, or refresh by stealth.
Primary EntityOfConcern in plain terms: the repeated quality-improvement method for one object version under one declared evaluation.
Problem
FPF often improves artifacts by repeated review, repair, and re-evaluation. The loop is useful only when the changed object is evaluated again by the same object-under-improvement evaluation or by a declared stronger one. Without that discipline, repeated passes become checklist closure, agentic retry, source citation, or process state.
The loop must also avoid the maturity-ladder trap. A floor or all-5 result can close this loop under current use, comparison set, source state, and cost boundary; it is not proof that the object cannot improve under a new use, source, front, or payoff.
Forces
Solution
E.23 is the general method for repeated improvement of an object version under an object-under-improvement evaluation named by value. It changes the object, re-evaluates the changed version using that evaluation's required evidence basis and result-row shape, checks trade-offs and cost, and decides whether to stop, continue, switch method family, open a new frame, or hold for exact information.
Local names and kind settlement
These names belong to loop method. They do not create quality values, project evidence, release state, selected-set publication, parity, refresh, or proof of quality.
Loop method
For one quality-improvement loop:
- Declare
ObjectUnderImprovementRef, object version, andObjectUnderImprovementEvaluationRef. - Declare
ImprovementAim, floor or target, protected trade-offs, cost and risk account, and local stop condition. - Use
E.22to frame the first quality evaluation when the purpose is not already explicit. - Run the object-under-improvement evaluation in its required result form. For one FPF pattern version, this is an
E.21result with every required coordinate, everyShortRationale, thePrecisionRestorationProfile, evidence basis, coordinate-specific payloads, and status. A loop record, profile pass, blocker summary, two-column table, or "no blockers" note is not a substitute. - Record row-atomic findings or proposal rows when work is returned. A step is closed only after its finding or proposal row is written; do not rely on memory or a later grouped summary.
- Apply repairs or variants to the object. When generation, selection, publication, parity, refresh, decision, planning, work, evidence, or assurance claims leave quality improvement, keep the pattern that governs that claim, relation, or boundary in the loop record or
Relations. Do not let loop-method prose replace the object's positive content. For precision-restoration defects, use the selected restoration or governing pattern named by the evaluation:E.10,E.10.ARCH,F.18,F.19, or an object-specific pattern. Also record a bounded completeKindRestorationCheckbefore closing the finding: the repair must say what kind, relation, slot or use-position, admissible use, and scope were present before the edit and what kind, relation, slot or use-position, admissible use, and scope the changed text now carries when those items are live. No-op closure is admissible only asnot triggered,ordinary prose, oralready satisfiedwith loci; otherwise unchanged text remains a live finding. When another pattern governs the kind under repair, relation, claim, or position, cite that pattern;E.23records the repair and reruns the evaluation, it does not duplicate the restoration algorithm. - Re-evaluate the changed object version through the object-under-improvement evaluation, using that evaluation's required coordinate set, evidence basis, result-row shape, short rationales, mandatory attention-discharge rows, and coordinate-specific payloads.
- Record what improved, what stayed floor-only, what was unchanged by value with loci, what became worse, and which rows moved outside the evaluation.
- Decide
stop,continue,switchMethodFamily,openNewFrame, orholdForExactInformation. - Leave a
QualityImprovementLoopRecordsufficient for the next reader to replay the object versions, evidence basis, evaluation result, trade-offs, cost/risk, and loop decision.
Stop, continue, and reopen
Stop when the current object version meets the declared floor or improvement aim and no feasible non-dominated proposal remains worth its cost under the current use, comparison set, source state, and protected trade-offs.
Continue only when the next pass has an expected evaluation movement and acceptable cost/risk. Switch method when the current method family is not moving the object, is too costly, or no longer fits the evaluation. Hold when object, evaluation, authority, evidence, source condition, or comparison set is too under-specified.
An all-5, all-exceptional, current-front-reaching, or current-front-improving result closes this loop locally. It does not say that future development is impossible. A new use, Q component, source line, SoTA front, comparison set, affordability boundary, or higher-payoff proposal can open a later loop.
Method-family selection
The selected family is justified by characteristic-space fit, expected evaluation movement, cost/risk, and protected trade-offs. Familiarity, automation, or current popularity is not enough.
Operation-family selection
An operation family is selected only when the loop record names:
- expected movement under the object-under-improvement evaluation;
- failure mode addressed;
- cost or risk reason;
- protected trade-offs;
- stop or removal condition.
Typical operation families are specification articulation, task decomposition, context refresh with carry-forward evidence, failure-context retry, verification against specification, memory or distillation, external critic or co-regulation, proposal portfolio use, search breadth or variants, bounded object-change budget, held-out evaluation, rejected-change memory, optimizer-memory separation, source-line contribution assignment, agent-tool-interface hardening, and task-family adaptation signature. They remain selectable only for the loop that justifies them.
Cost and BLP discipline
C.19.1 governs the preference for broad, scale-amenable methods when safety, legality, and practical fitness are comparable. E.23 uses that preference but still evaluates end-to-end accepted-work cost:
This is not a hidden quality score. It is a prompt for cost/risk reasoning. If avoided loss is large, an expensive loop can be right. If the object is simple, a human edit, small direct repair, lower-cost model, specialized cycle, or one-shot evaluation can be better.
Harness improvement is usually the first high-leverage move when it reduces blind retry: better frames, row shapes, test cases, source references, local tools, memory, verification, and stop conditions.
Source-bearing and OEE/NQD improvement
Accepted SoTA is the working external front only when assigned by the object-under-improvement evaluation, accepted source-use decision, or declared comparison set. E.23 can govern a loop that reaches, maintains, or improves relative to that front; it does not self-assign SoTA.
When several source lines are used, the loop records each line's contribution: value semantics, operation family, boundary, comparison discipline, failure mode, protected trade-off, or stop discipline. The changed object version then states the SourceComposedResultClaim and is re-evaluated.
For NQD/OEE, E.23 can change one object version or candidate to improve declared Q movement. C.17, C.18, C.19, G.5, G.9, and G.11 keep authority over novelty, diversity, descriptors, distances, archive/front insertion, pool policy, selected-set publication, parity, and refresh.
Worked slices
Affordable floor evaluation. A pattern needs admission readiness. E.22 frames floorEvaluation; E.21 evaluates all required coordinates. If the result is admissible and no improvement aim is requested, E.23 stays closed. If an admission, refresh, landing, or release crossing is claimed, E.19 and the release named by value/admission process still check the gate conditions; the E.21 status is necessary quality evidence, not the gate itself.
Pattern exceptional improvement. A pattern already passes floor but lacks worked slices and source-currentness. E.22 frames exceptional improvement. E.23 applies proposal rows, re-evaluates by E.21, checks what became worse, and stops locally when no non-dominated improvement remains under the declared use.
DRR improvement. A DRR needs drafting adequacy for multi-locus authoring. E.9.DA supplies coordinates; E.23 applies decision repairs and re-evaluates. The improved object is still a decision record, not prewritten pattern prose.
NQD quality-side improvement. A generated candidate has declared Q components and a comparison set. E.22 returns proposal rows. E.23 may change the candidate and re-evaluate Q; archive/front insertion, selected-set publication, parity, and refresh remain under the pattern that governs each claim and are not quality-loop decisions.
Bias annotation
This pattern biases FPF toward adaptive improvement with explicit re-evaluation. The bias is useful because many real objects improve only through feedback and revision.
The bias is bounded. One direct evaluation can close without a loop. Repetition is justified only by expected evaluation movement and acceptable cost/risk.
Conformance checklist
Common anti-patterns and repairs
Consequences
Rationale
The shared method is simple: change an object version, re-evaluate it by the exact evaluation that gives values, check trade-offs and cost, then stop, continue, switch method, open a new frame, or hold. Classical improvement cycles, agentic loops, fixed-performer optimization, MCDA, Goodhart, and OEE/NQD lines contribute useful operations and boundaries, but they do not replace this method.
SoTA-Echoing
Relations
E.23:End
Contextual Lexicon Principles
One‑sentence summary. All meanings in FPF are local to a
U.BoundedContext(“Context of meaning”); terms are spoken with their Context, and any relation across Contexts exists only as an explicit Alignment Bridge with stated loss/fit.
Status. Architectural pattern.
Builds on: A.1.1 U.BoundedContext (formal frame); A.7 Strict Distinction (C‑6); A.8 Universal Core (C‑1); A.11 Ontological Parsimony (C‑5); A.4 Temporal Duality (C‑7); E.10.D1 D.CTX (lexical discipline for “Context”).
Coordinates with. F.1 (Context Map via Context Cards), F.2 (local term capture), F.3 (intra‑Context clustering), F.7 (Concept‑Set Table), F.9 (Alignment & Bridge), B.3 (Trust & Assurance; CL penalties).
Didactic note. In the Tech register, Context ≡
U.BoundedContext(per E.10.D1). “Context of meaning” is a metaphor only; Context remains the normative short form forU.BoundedContext. The word anchor is not used in FPF, and the bare word plane is reserved to CHR:ReferencePlane.
Terminology guard (normative, Part F). The row classifier is senseFamily: {Role | Status | Measurement | Type‑structure | Method | Execution}. Characteristic (MM‑CHR) names measurable aspects only (A.17–A.19) and MUST NOT be used for row typing in Part F. Avoid the generic word facet in Part F; when unavoidable, reference C.3.5 KindAT (informative facet) or Compose‑CAL U.Facet explicitly. Only CHR:ReferencePlane is permitted (no bare “plane”); use EntityOfConcern / Description episteme / specification-use boundary for entity-description-specification-use discipline; use stance for design vs run.
Problem Frame
Trans‑disciplinary modelling fails without an explicit discipline for where words mean what.
- Semantic drift. The same string (“process”, “role”, “service”) slides between domains and editions.
- Homonym collisions. One label carries incompatible senses across fields.
- Hidden synonymy. Different labels point to the same local sense, but the identity is unstated.
- Implicit globalism. Meaning is treated as universal; integration silently re‑writes models.
FPF resolves this by localising meaning first, then explicitly translating across locales.
The Three Principles (normative)
P‑S - Source Localisation Principle — Speak with the Context.
Rule. Every term in a normative FPF publication unit MUST be bound to a specific U.BoundedContext (its “Context of meaning”). The binding is explicit in text, notation, or table headers (e.g., process (BPMN 2.0)).
Implications.
- No free‑floating “global terms”.
- A finite Context Map (see F.1) is chosen before naming work starts.
- If a source intrinsically fixes time stance, the DesignRunTag is carried by the Context (C‑7).
Reasoning move (conceptual).
Context(C) ∧ says(C, term t) ⊢ usable(t@C)
Illustration (Enactment line).
activity @ PROV‑O (run) vs task @ IEC 61131‑3 (run) vs process @ BPMN 2.0 (design).
P‑L - Local Meaning Principle — Meaning lives inside the Context.
Rule. The intended sense of a term is established inside its Context as a SenseCell: a small, reconstructible unit of local meaning with Tech/Plain labels and a concise gloss. SenseCells are lexical only (C‑6): no behaviours, no deontics, no equations.
Implications.
- SenseCells are Context‑scoped; they do not cross Contexts.
- Minimal generality (G‑1) and contextual specification (G‑2) govern naming inside the Context.
- Intra‑Context clustering of raw mentions precedes any Cross‑context act (see F.3).
Reasoning move (conceptual).
usable(t@C) ∧ fits(gloss, C) ⊢ SenseCell⟨t@C⟩
Illustration (KD‑CAL).
observation @ SOSA/SSN: Tech “observation”, Plain “measurement act”; gloss “Result‑bearing act applying a Procedure…”.
P‑B - Explicit Bridge Principle — across Contexts, only with a bridge.
Rule. Any relation between terms from different Contexts MUST be stated as an Alignment Bridge (see F.9): a named mapping between SenseCell⟨-⟩ items with a declared relation kind (e.g., overlaps, broader‑than, near‑equivalent) and a Congruence Level (CL) for trust calculus (B.3).
Implications.
- No by‑name identity across Contexts; string equality ≠ sense equality.
- Bridges carry loss/fit notes and are auditable; they can be revised by edition.
- Concept‑Sets (F.7) are built from bridged cells, not from lexical strings.
- When the prose wording uses umbrella sameness/alignment tokens (“same/equivalent/align/map/…”), treat it as an RPR trigger and repair it via A.6.9 (RPR‑XCTX) before granting any naming or substitution licence.
Reasoning move (conceptual).
SenseCell⟨x@A⟩ ↔⟨rel, CL⟩ SenseCell⟨y@B⟩ ⊢ translatable(x@A, y@B, rel, CL)
Illustration (Sys‑CAL × Enactment).
actuation @ CTRL‑Text ↔⟨near‑equiv, CL=2⟩ control‑output @ IEC 61131‑3.
Minimal Conceptual Objects (conceptual, notationally neutral)
These conceptual objects are thought‑objects; they specify what must exist conceptually, not how it is stored.
Context Card (for each U.BoundedContext)
A terse descriptor used in the Context Map (F.1):
id(stable local handle) -title-edition/yearfamily(discipline family; informal) -scope gisttimeStance?(design/run, if inherent)trip‑wires(few lexical caveats that often mislead, e.g., “process≠thermo process”)
SenseCell (unit of local meaning, inside one context)
label.tech/label.plain(two registers)gloss(minimal generality, Context‑true)notes?(warnings, edition shifts)- No behaviour/deontics/equations (C‑6)
Where it comes from. F.2 describes how SenseCells can be derived from local term evidence; F.0.1 only requires that local meaning be expressible as a SenseCell.
Alignment Bridge (between SenseCells from different Contexts)
left: SenseCell⟨-@A⟩,right: SenseCell⟨-@B⟩relation(e.g., equivalent‑under‑assumptions, overlaps, broader‑than)CL(Congruence Level; feeds B.3 Trust & Assurance)loss/fit(explicit statement of what is lost or assumed)
Invariants (normative)
- I‑1 - Context‑qualified usage. Every normative use of a term is Context‑qualified (directly or via table/section headers).
- I‑2 - Local‑only cells. A SenseCell belongs to exactly one Context.
- I‑3 - senseFamily hygiene. SenseCells are lexical; behaviour, deontics, measurements, proof steps live in their respective patterns (C‑6).
- I‑4 - Time stance fidelity. If a source fixes a
DesignRunTag, the Context Card carries it and SenseCells inherit it. - I‑5 - No implicit Cross‑context identity. Cross‑context relations exist only as F.9 Bridges with
relationandCL. - I‑6 - Parsimony & heterogeneity hook. The Context Map is finite, heterogeneous (≥ 3 families per unification line), and parsimonious (F.1).
Reasoning Primitives (judgement schemata; pure, side‑effect‑free)
These capture allowable mental moves; they do not prescribe storage, APIs, or workflow.
-
Context qualification
Context(C) ∧ mentions(C, s) ⊢ uses(s@C)Reading: If a string s is used under Context C, we treat it as the local term s@C. -
Local sense formation
uses(t@C) ∧ gloss_C(t) ⊢ SenseCell⟨t@C⟩Reading: A Context‑true gloss yields a SenseCell for t inside C. -
Admissible Cross‑context relation
SenseCell⟨x@A⟩ ∧ SenseCell⟨y@B⟩ ∧ declare(rel, CL) ⊢ Bridge(x@A, y@B, rel, CL)Reading: Only an explicit declaration generates a Bridge; no name‑matching inferences. -
Bridge‑to‑Concept‑Set hint (for F.7)
Bridge(x@A, y@B, rel≈equiv, CL≥k) ⊢ candidate_same_row(x, y)Reading: High-CL, near‑equivalence bridges can nominate cells for one Concept‑Set row (final decision in F.7).
Didactic Metaphor (informative)
- Contexts. Each
U.BoundedContextis a Context; its Context Card is a published boundary marker (name, edition, time stance, trip‑wires). - Words in a Context. A SenseCell is a dictionary entry pinned to that Context’s wall.
- Door‑to‑door links. An Alignment Bridge is a labelled passage connecting two Contexts; a CL placard says how trustworthy that passage is.
We first speak inside Contexts; only then decide which doors to connect—and with what warnings.
Placement & Flow
F.0.1 is the front door of Part F. It enables: F.1 (choosing Contexts with Context Cards) → F.2 (deriving SenseCells inside each Context) → F.3 (stabilising local senses) → F.7 (building Concept‑Set rows) → F.9 (stating Bridges).
Anti‑patterns & remedies
Compact worked examples
Each vignette shows (1) two Context Cards (abridged), (2) SenseCells inside Contexts, (3) the Bridge with relation & CL, and (4) a Concept‑Set hint (if any).
F.0.1:9.1 Enactment × Provenance — process vs activity
-
Context A:
BPMN_2_0- Business Process Model and Notation v2.0 (2011) - design SenseCell⟨process@BPMN⟩: Tech “process”; Plain “workflow process”; Gloss “graph of flow nodes/events executed by participants.” -
Context B:
PROV_O_2013- W3C PROV‑O (2013) - run SenseCell⟨activity@PROV⟩: Tech “activity”; Plain “provenance activity”; Gloss “time‑bounded occurrence using/generating entities.” -
Bridge: ⟨process@BPMN⟩ ↔⟨
design‑spec‑of, CL=2, loss: “no concurrency semantics in trace”; fit: “maps to execution plan”⟩ ⟨activity@PROV⟩ -
Concept‑Set hint: No same‑row nomination (relation ≠ near‑equiv); instead, record a design↔run linkage.
Control × PLC runtime — actuation vs control output
-
Context A:
CTRL_Text_Classic- control theory primers - design SenseCell⟨actuation@CTRL⟩: Tech “actuation”; Plain “control output”; Gloss “signal applied to plant actuators.” -
Context B:
IEC_61131_3- PLC languages - run SenseCell⟨q‑output@IEC⟩: Tech “control‑output”; Plain “PLC output”; Gloss “program‑produced output variable to field I/O.” -
Bridge: ⟨actuation@CTRL⟩ ↔⟨
near‑equivalent, CL=2, loss: “hardware/scan‑cycle specifics absent in CTRL”; fit: “semantics align under linear regime”⟩ ⟨q‑output@IEC⟩ -
Concept‑Set hint: Candidate same‑row (F.7) with note: “merge permitted at CL≥2 threshold.”
F.0.1:9.3 Measurement × Service — observation vs service metric
-
Context A:
SOSA_SSN_2017- sensing/observations - run SenseCell⟨observation@SOSA⟩: Tech “observation”; Plain “measurement act”. -
Context B:
ITIL4_2020- services - (mixed) SenseCell⟨slo‑metric@ITIL⟩: Tech “service‑level metric”; Plain “service measure”; Gloss “quantity used to evaluate SLOs.” -
Bridge: ⟨observation@SOSA⟩ ↔⟨
provides‑value‑for, CL=2, loss: “organizational context not in SOSA”; fit: “metric results are measurement results.”⟩ ⟨slo‑metric@ITIL⟩ -
Concept‑Set hint: Not a same‑row case; this is a role‑in‑use relation (measurement feeds status evaluation).
F.0.1:9.4 Type reasoning — subclass‑of (OWL) vs is‑a (plain)
-
Context A:
OWL2_Profiles- description logics SenseCell⟨subclass@OWL⟩: Tech “subclass‑of”; Plain “is‑a”. -
Context B:
ENG_Glossary- engineering plain usage compendium SenseCell⟨is‑a@ENG⟩: Tech “is‑a (engineering)”; Plain “kind‑of”; Gloss “informal subsumption in specs.” -
Bridge: ⟨subclass@OWL⟩ ↔⟨
near‑equivalent, CL=1, loss: “OWL formal constraints absent in ENG”; fit: “intended subsumption semantics.”⟩ ⟨is‑a@ENG⟩ -
Concept‑Set hint: Keep separate rows unless the consuming artefact demands formal semantics.
F.0.1:9.5 Deontics × Access — permission vs role (RBAC)
-
Context A:
ODRL_2_2- policy/deontics SenseCell⟨permission@ODRL⟩: Tech “permission”; Plain “allowed action”. -
Context B:
NIST_RBAC_2004- access control SenseCell⟨role@RBAC⟩: Tech “access‑role”; Plain “permission set”. -
Bridge: ⟨permission@ODRL⟩ ↔⟨
member‑of‑set‑in, CL=2, loss: “contextual obligations not preserved”; fit: “RBAC roles aggregate permissions.”⟩ ⟨role@RBAC⟩ -
Concept‑Set hint: Not same row (different kinds); useful linkage for Enactment when binding duties to sessions.
Extended reasoning moves (pure judgement schemata)
Judgements are conceptual entailments over Contexts, SenseCells, and Bridges. They carry no storage, workflow, or governance semantics.
Context‑qualified use
Context(C) ∧ mentions(C, s) ⊢ uses(s@C)
If s is used under Context C, we treat it as the local term s@C.
Sense formation (local)
uses(t@C) ∧ gloss_C(t) ⊢ SenseCell⟨t@C⟩
A Context‑true gloss yields a SenseCell inside C.
Admissible Bridge (creation predicate)
SenseCell⟨x@A⟩ ∧ SenseCell⟨y@B⟩ ∧ A≠B ∧ rel∈R ∧ cl∈{0,1,2} ⊢ Bridge(x@A,y@B,rel,cl)
Only explicit relation rel with Congruence Level cl constitutes a Bridge.
Canonical relation set R (didactic catalogue):
equivalent‑under‑assumptions - near‑equivalent - overlaps - broader‑than - narrower‑than - design‑spec‑of - run‑trace‑of - representation‑of - member‑of‑set‑in - provides‑value‑for.
Bridge composition (minimum CL and relation loss)
Bridge(a,b,rel₁,cl₁) ∧ Bridge(b,c,rel₂,cl₂) ⊢ Bridge*(a,c,rel*,cl*)
cl* := min(cl₁, cl₂)(do not inflate confidence)rel* := conservativeRel(rel₁, rel₂)(e.g., near‑equiv composed with overlaps yields overlaps)
Reading: Chained passages inherit the minimum CL and the relation that remains admissible after composition.
Non‑identity by stance
SenseCell⟨x@A(design)⟩ ∧ SenseCell⟨y@B(run)⟩ ∧ ¬declared(Bridge(x,y,near‑equiv,_)) ⊢ ¬same‑row(x,y)
Different time stances forbid same‑row unless an explicit near‑equiv Bridge exists.
Row viability (Concept‑Set candidacy)
Cells = {c₁…cₙ} ⊢ row‑viable(Cells) ⇔ connected(Cells, Bridges_{rel∈{equiv,near‑equiv}, cl≥k}) ∧ ¬contradiction(Cells)
Reading: A row is viable if its cells form a connected subgraph via Bridges with sufficient CL and contain no mutually exclusive links.
Contradiction sieve
Bridge(a,b,broader) ∧ Bridge(a,b,narrower) ⊢ contradiction(a,b)
Incompatible relations across the same pair flag a contradiction for review (conceptually).
Non‑bridge implication ban
name(x) = name(y) ∧ A≠B ⊢ ¬Bridge(x@A, y@B, _, _)
String equality across Contexts never implies a Bridge.
SCR/RSCR acceptance checks (conceptual)
These checks are content‑oriented; they validate that a manuscript/model respects Part F principles. No process/tool assumptions are implied.
SCR — Static conformance
- SCR‑F01 (Context‑qualified). Every normative term is Context‑qualified (directly, or via a scoped header that unambiguously fixes the Context).
- SCR‑F02 (Local cells). Each SenseCell belongs to exactly one Context; no cell aggregates Cross‑context senses.
- SCR‑F03 (senseFamily hygiene). SenseCell glosses contain no behaviours/deontics/equations; those appear only in their patterns.
- SCR‑F04 (Bridges explicit). Every Cross‑context relation appears as a Bridge with
relationandCLand a short loss/fit note. - SCR‑F05 (No string identity). There is no use of string equality to stand in for Cross‑context identity.
- SCR‑F06 (Time stance fidelity). Where a Context fixes a
DesignRunTag, the SenseCells and any Bridges reflect that stance explicitly. - SCR‑F07 (Row viability). Any Concept‑Set row shown is supported by a connected subgraph of Bridges with CL ≥ threshold and no contradictions.
RSCR — Regression & evolution
- RSCR‑F01 (Edition split). When a source edition changes materially, SenseCells tied to the old edition remain; new cells bind to the new Context; Bridges are re‑assessed.
- RSCR‑F02 (Bridge stability). If any Bridge endpoint changes gloss/stance, downgrade or retire the Bridge, documenting the loss/fit change.
- RSCR‑F03 (Composition guard). When composing Bridges in a chain, the resulting
CLnever exceeds the minimal link; relationCLdrops monotonically. - RSCR‑F04 (Heterogeneity + QD guard): requires ≥3 domain‑families AND MinInterFamilyDistance ≥ δ_family (per the active F1‑Card edition), with QD‑triad evidence (publish Diversity_P and IlluminationSummary on the declared grid/kernel). Near‑alias pairs (per dSig rule) SHALL be flagged and excluded or merged before the guard is evaluated. Record the F1‑Card edition id.
Publish‑ready summary
An artefact is ready with respect to F.0.1 when:
- SCR‑F01…F07 hold for all terms, cells, rows, and bridges it presents;
- RSCR‑F01…F04 hold under simulated edition/stance changes;
- Every Cross-context statement can be read as a Bridge or as a composition of Bridges with stated
CLand relation loss.
Quick reference (didactic)
- Context = a
U.BoundedContextwith edition, scope, and (if inherent) time stance. - SenseCell = the minimal, lexical unit of meaning inside a Context (Tech/Plain labels + gloss).
- Bridge = the only Cross‑context relation, labelled with
relationand CL, plus a short loss/fit note. - Concept‑Set row = a didactic table row collecting SenseCells that are sufficiently the‑same‑thing under declared Bridges.
Mental checklist: Name the Context → speak in the Context → connect Contexts only by labelled bridges → build rows from bridged cells.
F.0.1:End
Domain‑Family Landscape Survey
“Fix the context of meaning before you name anything.” Status. Architectural pattern. Depends on. E.10.D1 Lexical Discipline for “Context” (D.CTX); F.0.1 Contextual Lexicon Principles; A.7 Strict Distinction (Clarity Lattice); A.11 Ontological Parsimony. Coordinates with. F.2 Term Harvesting & Normalisation; F.3 Intra‑Context Sense Clustering; F.4 Role Description; F.9 Alignment & Bridge Across Contexts; G.0–G.1 (Scope/entityOfConcern handoff). (Bridges live only in F.9.)
Aliases (informative). Contexts‑first survey; Context cut.
Intent & applicability
Intent. Establish a finite set of U.BoundedContext (“context of meaning”), each tied to an authoritative source or canon within a domain family, so that all later moves (term harvesting, clustering, role naming, cross‑context bridges) operate on local meanings rather than on drifting, globalised words.
Applicability. Use at the start of any unification effort for any FPF pattern (Enactment (U.RoleAssignment + U.RoleEnactment), Sys-CAL, KD-CAL, Kind-CAL, LCA-CAL…) and whenever a discipline canon materially changes (new edition, re-framing, seminal result).
Non‑goals. No tooling, workflow, or editorial roles. No global ontology. No cross‑context equations. This pattern describes how to think, not how to store.
Problem frame
Without explicit context of meaning:
- Word‑drift. Common words (process, role, service, model) silently change sense across disciplines.
- Scope mirages. One influential standard is mistaken for the domain.
- Retro‑lock. Old editions become the implicit truth simply because they were “there first”.
- Category bleed. Behavioural roles, epistemic statuses, deontic permissions mix because their contexts were never fixed.
- Name inflation. New U.Types appear just to “stabilise” unstable words.
Forces
Core idea (didactic)
Think in Contexts, not in words. A Context of meaning is a U.BoundedContext (per D.CTX) that encloses a coherent vocabulary and its rules from a specific, citable canon (standard, BoK, seminal paper, textbook tradition). You name and reason inside the Context. When you must step between Contexts, you will declare a bridge later (F.9) with explicit losses or mismatches.
Minimal vocabulary (this pattern only)
- U.BoundedContext (short: Context in Tech register). The formal Context of meaning.
- Context (Tech register alias for U.BoundedContext). Use Context for pedagogy, U.BoundedContext for formal references.
- Domain family. An informative shelf‑label grouping related Contexts (e.g., workflow & provenance; services & deontics; sensing & measurement; types & taxonomies; control & actuation). No semantics attach; Domain ≠ Context.
- Context Card. A one‑screen conceptual sketch of a Context (see §7.2).
- SenseCell (appears downstream). A (Context × Local‑Sense) address; F.3 will mint these after clustering. Mentioned here only to keep the destination in view.
Solution — the Contexts‑first survey (conceptual, notation‑free)
Step 1 — Declare your unification line(s). State which FPF pattern threads are in play (e.g., Enactment + KD‑CAL sensing + Sys‑CAL execution). This keeps the cut purposeful.
Step 2 — Cut the landscape by domain families. For each line, select at least three distinct domain families (heterogeneity guard). Examples:
- Workflow & provenance (BPMN 2.0; W3C PROV‑O)
- Services & deontics (ITIL 4; ODRL 2.2)
- Sensing & measurement (SOSA/SSN; ISO 80000‑1)
- Types & taxonomies (OWL 2; FCA corpus)
- Control & actuation (state‑space control texts; IEC 61131‑3)
Step 3 — For each family, sketch 1–3 Context Cards. Prefer canonical, widely cited canons. If a field is fragmented, choose one exemplar and one counter‑voice to surface heterogeneity.
Step 4 — Make locality explicit. Treat words as context‑local. Process (BPMN) ≠ process (thermodynamics) ≠ process (PROV). Do not reconcile. Do not average. Just fix the Contexts.
Step 5 — Bound the set. Small enough to hold in working memory. As a rule of thumb:
- per unification line: ≥ 3 families;
- per family: 1–3 Contexts. More only if a missing Context hides a known sense‑split you will certainly need.
Step 6 — Postpone bridges. If two Contexts seem “close”, resist collapsing. Note the tension and leave any bridge claim to F.9 Alignment & Bridge.
What to record (conceptual, not clerical)
7.1 The two‑minute memory. Everything you need to think correctly later fits on an eight‑line card. No registries, no workflows, no storage choices.
7.2 The Context Card (one‑screen sketch). (Each bullet is a thought, not a field.)
- Name & edition. “BPMN 2.0 (2011)” • “W3C PROV‑O (2013)” • “ITIL 4 (2020)”.
- Domain family. workflow / provenance / services / deontics / sensing / types / control … (informative only; never used to infer meaning).
- Scope gist (didactic; ≠
USM.ScopeSlice(G)). One line that marks the inside/outside (“workflow graphs & participants”, “provenance entities/activities/agents”). - Time stance (if inherent). Does the canon speak design (specifications, models) or run (occurrences, acts)?
- Lexical trip‑wires. Known homonyms or false friends in this Context (“process ≠ thermodynamic process”, “role (RBAC) ≠ behavioural role”).
- Neighbour Contexts (informative). Close cousins that people often conflate (BPMN ↔ PROV‑O, ITIL ↔ ODRL).
- Recency note. Current / superseded / candidate (only as a reminder to yourself which text you mean).
- Why this Context matters here. One sentence linking to your unification line (“we will name Executions later; PROV‑O keeps them run‑time”).
- Diversity signature (dSig). A 5-characteristics discrete signature for
U.BoundedContext: [Sector, Function, Archetype, Regime, MetricFamily]. Authors SHOULD pick from local discipline taxonomies. Publish adSigSourcelist (five refs/URIs, one per characteristic) on every Card, falling back to free-text only where no canonical term exists. Two Contexts are flagged as Near-Duplicate when ≥3 characteristics match. PublishdSiganddSigSourceon every Card.
If your Card spills beyond a screen, you are collecting facts, not fixing meaning.
F1‑Card (normative artefact): { taxonomyRef, embeddingRef, DistanceDef, δ_family, confidenceBand, calibrationSet, edition, subFamilyDef? }. subFamilyDef (optional): declares the stable partitioning below a domain‑family (e.g., taxonomic sub‑fields or CVT clusters with parent family anchors). When HET‑FIRST quotas refer to “sub‑family”, they MUST use this declared subFamilyDef.
Declare DomainDistance policy (cosine or transport) and δ_family threshold; version as part of DescriptorMapRef. Publish confidenceBand (e.g., CI90%) for the calibrated δ_family; treat numbers in examples as illustrative, not normative.
Invariants (normative, lightweight)
- Context ≡ U.BoundedContext. In this pattern, Context always means U.BoundedContext (per E.10.D1).
- Locality. Words are local to their Context; no global meaning is implied or imported.
- Heterogeneity. Each unification line considers ≥ 3 distinct Domain families (labels are informative only).
- Parsimony. Prefer few, canonical Contexts per family (1–3) that jointly expose the key sense splits.
- No bridging here. No equivalence or mapping is asserted between Contexts in F.1. (Bridges live in F.9.)
- DesignRunTag honesty. If a canon fixes a DesignRunTag, note it. Do not reinterpret.
- Didactic primacy. Each Context Card must be readable by a thoughtful engineer in under two minutes.
- Domain‑family neutrality. Domain families carry no semantics; they SHALL NOT be used for inheritance, inference, or bridge implication.
- Scope naming separation.
Scope giston Cards is didactic only; formal Scope/entityOfConcern (=USM.ScopeSlice(G)⊕entityOfConcern(GroundingHolon, ReferencePlane)) is declared in G.0–G.1, not in F.1. - Diversity signature present. Each Context Card PUBLISHES a
dSigin the 5‑characteristics form. - Collision rule. If any pair of Cards has
dSigmatching on ≥3 characteristics, mark Near‑Duplicate and either merge into one slot or replace one by a Context from a different domain‑family. Record action in SCR.
Self‑checks (mental, not procedural)
- The mirror test. Can you explain why each Context is inside your cut in one breath? If not, you are surveying for comfort, not for meaning.
- The homonym ping. For each frequent word (process, role, service, model, execution), can you immediately list the Contexts where it differs? If not, add the missing Context.
- The bridge itch. Feel the temptation to say “these are the same”? Good. Write the itch down and refuse to scratch it here. That’s F.9’s job.
- The memory rule. If your entire survey cannot be recalled without opening a document, it is too large.
Micro‑examples (illustrative only)
One unification line: Enactment (U.RoleAssignment + U.RoleEnactment) with sensing and execution.
- BPMN 2.0 (2011) — workflow family. Scope gist: flow nodes, sequence flows, participants (design‑time). Trip‑wires: “process” here is a graph; not a run.
- W3C PROV‑O (2013) — provenance family. Scope gist: Activity that uses/generates entities (run‑time). Trip‑wires: “activity/process” here is a temporal occurrence.
- ITIL 4 (2020) — services family. Scope gist: service as value co‑creation; SLO/SLA (deontic talk nearby). Trip‑wires: “incident/problem/practice” don’t equal workflow tasks.
- ODRL 2.2 — deontics family. Scope gist: permissions, prohibitions, duties (design). Trip‑wires: “duty/obligation” ≠ service guarantee mechanics.
- SOSA/SSN (2017) — sensing family. Scope gist: Observation as an act yielding a Result for a property. Trip‑wires: “observation” ≠ “state”; it’s an act with a procedure.
- IEC 61131‑3 — control languages family. Scope gist: tasks that execute programs (run‑time). Trip‑wires: “task/execution” ≠ “workflow process”.
With only these Contexts fixed, later steps become almost mechanical: F.2 harvests terms inside each Context; F.3 clusters within each Context; F.4 names roles or statuses pointing to SenseCells; F.9 draws the bridges you refused to draw here.
Anti‑patterns & remedies
Worked examples
Each example shows the cut (the Contexts you keep in view) and the thinking pay‑off you get before any harvesting, clustering, or bridging.
F.1:12.1 Enactment (U.RoleAssignment + U.RoleEnactment) with sensing & execution (service acceptance)
Unification line. Enactment + KD‑CAL (sensing) + Sys‑CAL (execution).
Contexts (six Cards).
- BPMN 2.0 (2011) — workflow family; design; graph of flow nodes, participants.
- PROV‑O (2013) — provenance family; run; Activity uses/generates Entities; Agents.
- ITIL 4 (2020) — services family; design; service, SLO/SLA vocabulary.
- ODRL 2.2 — deontics family; design; permission / prohibition / duty.
- SOSA/SSN (2017) — sensing family; run; Observation as act with Result.
- IEC 61131‑3 — control languages; run; tasks execute control programs.
Thinking pay‑off (examples).
- You stop saying “process uptime” and think Execution (IEC) measured by Observation (SOSA) compared against SLO (ITIL)—three Contexts, three senses.
- You mark a trip‑wire: RBAC role (not in this cut) is not a behavioural role (BPMN participant).
- You resist equating PROV Activity with BPMN workflow; later F.9 may relate them with explicit loss.
F.1:12.2 Method quartet with types & measurement (model state graph)
Unification line. Method‑CAL + Kind-CAL + KD‑CAL.
Contexts (five Cards).
- SPEM 2.0 / ISO 24744 — methods family; design; Method and MethodDescription language.
- OWL 2 (profiles) — types family; design; class, subclass, equivalent class.
- FCA corpus — types family; design; concept lattices.
- SOSA/SSN (2017) — sensing family; run; Observation / Procedure.
- ISO 80000‑1 (2022) — metrology family; design; quantity kinds, units.
Thinking pay‑off.
- You keep Method (abstract how‑to) separate from MethodDescription (epistemic recipe) and Execution (run) because the Contexts already split design vs run.
- You avoid treating FCA “concept” as a U.Type; later F.9 can bridge OWL classes to FCA concepts with cautions.
F.1:12.3 Control & actuation with services (operational SLOs in plants)
Unification line. Sys‑CAL + LCA‑CAL (planned) + services/deontics.
Contexts (five Cards).
- State‑space control texts — control family; design; controller/plant, feedback.
- IEC 61131‑3 — control languages; run; task, program execution.
- ISA‑95 — integration family; design; levelled layers, interfaces.
- ITIL 4 (2020) — services family; design; SLO/SLA.
- SOSA/SSN (2017) — sensing family; run; Observation.
Thinking pay‑off.
- “Actuation” is recognised as control output (Sys‑CAL), not a service promise.
- “Incident” (ITIL) is not a plant fault (Sys‑CAL); Contexts deter category errors.
Reasoning primitives (judgement schemas, notation‑free)
These are mental moves, not queries. They read “given these thoughts, this conclusion is safe to hold (conceptually).”
-
Context set for a line
line L declared ⊢ Contexts(L) = {C₁,…,Cₙ}Reading: For a unification line L, the Contexts you deliberately keep in view are{C₁,…,Cₙ}(from your Cards). -
Heterogeneity check
families(L) = F ⊢ heterogeneous(L) ≡ (|distinct(F)| ≥ 3)Reading: Your cut is heterogeneous if it spans at least three domain families. -
Parsimony check
Contexts(L)=R, families(L)=F ⊢ parsimonious(L) ≡ (∀f∈F: 1≤|R∩f|≤3)Reading: Each family contributes a few Contexts, not a phonebook. -
Locality assertion
term w, C∈Contexts(L) ⊢ meaning(w)@C is localReading: A word’s sense is context‑local; no global meaning is implied. -
Time‑stance guard
C has stance s∈{design,run} ⊢ claims@C must respect sReading: If a Context is design‑time, do not make run‑time claims in it (and vice versa). -
Trip‑wire recall
C lists tripWires T ⊢ for any w∈T, require Context‑prefix when speakingReading: Words on the trip‑wire list must be spoken with the Context name. -
Bridge embargo
C₁≠C₂ ⊢ no‑equivalence(C₁,C₂) within F.1Reading: F.1 never asserts equivalence across Contexts; postponement is principled, not procrastination. -
Context sufficiency probe
common‑word w used in L ∧ w not covered by any trip‑wire ⊢ consider adding a Context that makes w differReading: If a frequent word has no deliberate sense‑split in your cut, you may be missing a Context. -
Memory rule
|Contexts(L)| too large ⊢ reduce until a careful mind can recite them unaidedReading: The survey should live in memory, not in a registry.
F1‑Card example (informative)
Relations (with other patterns)
Builds on: E.10.D1 Lexical Discipline for “Context” (D.CTX) — ensures Context ≡ U.BoundedContext and reserves “Problem Frame” for narrative use. A.7 Strict Distinction — guards EntityOfConcern/Description-episteme/publication-carrier and DesignRunTag splits while you cut Contexts. A.11 Ontological Parsimony — motivates the small cut.
Constrains: F.2 (Term Harvesting): harvest inside Contexts named here; every occurrence carries a Context name. F.3 (Intra‑Context Sense Clustering): cluster per Context; no Cross‑context sense claims. F.4 (Role Descriptions): any role template or status template must cite a SenseCell that lives in a Context from this cut. F.9 (Alignment & Bridge): only F.9 may relate Contexts; never F.1–F.4.
Used by. Extention patterns in Part C (Sys‑CAL, KD‑CAL, Kind-CAL, Method‑CAL, LCA‑CAL) as the lexical starting grid for their examples and definitions.
Migration notes (conceptual)
- New edition appears. Keep the old Card; add a new Card with the new edition. If the sense shifts, treat it as a new Context; if it is strictly editorial, mark recency but keep one context.
- New family emerges. If a missing family explains recurrent confusion in your line, admit it with one exemplar Context; remove a less informative Context to keep parsimony.
- Language variants. Treat language editions as separate Contexts unless the canon itself declares a single normative bilingual mapping.
- Trip‑wire growth. When you notice a recurring confusion, add a crisp trip‑wire to the relevant Card (one line; no essays).
- Bridges discovered later. Do not back‑port bridges into F.1; leave the Cards untouched and record the mapping in F.9.
- Dormant Contexts. If a Context no longer contributes to any active line, move it to a parking shelf (informative note on the Card) rather than deleting it.
Acceptance tests (SCR/RSCR — concept‑level)
Static conformance checks (SCR)
- SCR‑F1‑S01 (Heterogeneity). For each unification line, the set of Cards spans ≥ 3 distinct domain families.
- SCR‑F1‑S02 (One‑screen Cards). Each Card fits on one screen: name+edition; family; scope gist; time stance (if inherent); 1–3 trip‑wires; neighbour Contexts (optional); recency note.
- SCR‑F1‑S03 (Locality pledge). Nowhere in F.1 are Cross‑context equivalences or merges asserted.
- SCR‑F1‑S04 (Parsimony). In every family, 1–3 Contexts are kept; if more, a clear sentence justifies each extra Context’s unique sense contribution.
- SCR‑F1‑S05 (Context discipline). “Context” is used only as a synonym of U.BoundedContext; “domain” appears only as an informative family label.
- SCR‑F1‑S06 (Temporal honesty). If a canon fixes DesignRunTag, the Card states it.
- SCR‑F1‑S07 (Family neutrality). No claim, classification, or relation in F.1 relies on Domain‑family membership; families appear only as shelf labels on cards.
- SCR‑F1‑S08 (dSig present). Every Context Card has a 5‑characteristics
dSig. - SCR‑F1‑S09 (Collision policy). Any pair with
dSigmatch on ≥3 characteristics is either merged or replaced; SCR records the action.
Regression checks (RSCR)
- RSCR‑F1‑E01 (Edition churn). When a new edition is added, prior Cards remain; no silent replacement.
- RSCR‑F1‑E02 (Family balance). Adding/removing Cards does not drop any line below three families.
- RSCR‑F1‑E03 (Trip‑wire coverage). After introducing a new Context, the trip‑wire lists of neighbouring Contexts are reconsidered and updated if needed.
- RSCR‑F1‑E04 (No creep). Periodically apply the memory rule: if the cut no longer fits in working memory, shrink it.
Didactic distillation (90‑second teaching script)
“Before you name anything, fix the context of meaning. A Context is a U.BoundedContext tied to a specific canon—BPMN 2.0, PROV‑O, ITIL 4, SOSA/SSN, IEC 61131‑3, OWL 2. Words are local to Contexts: process (BPMN) is a workflow graph, activity (PROV) is a run‑time occurrence, service (ITIL) is a promise vocabulary. Cut the landscape so each unification line sees at least three domain families, with one‑screen Cards per Context (scope gist, time stance, trip‑wires). Do not bridge Contexts here—just write down the itch to bridge as an F.9 bridge question. Keep the cut small enough to remember. With Contexts fixed, harvesting (F.2), local clustering (F.3), role template or status templates (F.4), and explicit Cross‑context bridges (F.9) become straightforward—and you avoid naming ghosts that come from words floating without walls.”
F.1:End
F.2 — Term Harvesting & Normalisation
“Harvest words inside Contexts, name them in the Context’s own idiom, and stop there.” Status. Architectural pattern. Depends on. E.10.D1 Lexical Discipline for “Context” (D.CTX); F.0.1 Contextual Lexicon Principles (Source - Local Meaning - Bridge‑Only Crossing); A.7 Strict Distinction; A.11 Ontological Parsimony. Coordinates with. F.1 Context Map via Context Cards; F.3 Intra‑Context Sense Clustering; F.4 Role Description; F.9 Alignment & Bridge Across Contexts. Aliases (informative). context‑local harvesting; Local normalisation.
Intent & applicability
Intent. Provide a conceptual (notation‑free) discipline for turning Context‑internal usage into context‑local lexical units ready for later reasoning—without Cross‑context merging and without slipping into governance or tooling. The result is a small, auditable set of context‑local names and glosses that faithfully reflect how the canon speaks.
Applicability. Use whenever a unification line (from F.1) needs actual words to be referenced by patterns in Part C (Extention patterns) or by Role Descriptions (F.4). Re‑enter F.2 when a canon/edition changes or when a new Context is admitted in F.1.
Non‑goals. No global labels; no Cross‑context equivalence; no workflow or role descriptions; no storage/API talk. F.2 specifies how to think, not how to “run a pipeline”.
Problem Frame
Even with Contexts fixed (F.1), three mistakes recur:
- Word‑centrism. Treating a string as if it carried its meaning across Contexts (process, role, service).
- Over‑normalisation. Forcing one spelling/morphology across different canons, erasing Context‑specific cues.
- Premature structure. Smuggling behaviour, deontics, or type structures into what should remain lexical.
F.2 prevents these by localising meaning and naming strictly inside each Context.
Forces
Core idea (didactic)
Harvest inside each Context; name in that Context’s idiom; do not cross Contexts. For every Context (a U.BoundedContext from F.1), you gather attested phrases as thought‑cues, choose a Local Normal Form (LNF) that matches the Context’s idiom, attach a two‑register label (Tech/Plain), and write a one‑sentence gloss. That’s all. You do not claim sameness with any other Context; you do not embed behaviour or deontics; you do not mint U.Types here. These local lexical units will become Local‑Senses in F.3 and later addressable SenseCells (Context × Local‑Sense).
Minimal vocabulary (this pattern only)
- Context — Tech‑register alias for U.BoundedContext (per E.10.D1).
- Attested phrase — A short, verbatim cue from the canon that shows how a word is used in this Context (citation idea, not a record format).
- Local Normal Form (LNF) — The Context‑specific canonical surface you will use when referring to the term in this Context (minimal editing: spelling/hyphenation/casing per the canon).
- Two‑register label — Tech (engineer‑facing) and Plain (pedagogic) forms for the same Context‑local meaning.
- Gloss (one‑sentence) — A Context‑faithful description of how the canon uses the term, at minimal generality.
- Local lexical unit — The quintet (Context, LNF, Tech, Plain, Gloss). This is F.2’s only outcome.
- Homonymy (signal) — Awareness that the same string has different local lexical units across Contexts (no relation asserted).
- SenseCell (appears downstream) — Address (Context × Local‑Sense) minted in F.3; mentioned here so you know what you’re preparing.
Everything above is a way of thinking. None of it implies a database, statuses, or roles.
Solution — three mental moves (notation‑free)
Move A — Localise the word
Question to ask. “In which Context am I hearing this word?” Action (mental). Point to a specific Context (from F.1). Grab 1–2 attested phrases that are representative in this Context. Outcome. You stop thinking “global word” and start thinking “context‑local usage”.
Micro‑cue. If you cannot name the Context, do not harvest the word.
F.2:6.2 -Move B — Name it in the Context’s idiom
Question to ask. “How would this Context itself write it?” Action (mental). Choose the LNF (Context‑conformant spelling/hyphenation). Then write the two‑register label and a one‑sentence gloss that says what the canon means here—nothing more. Outcome. You have a local lexical unit (Context, LNF, Tech, Plain, Gloss).
Micro‑cues. • Prefer the canon’s head noun; keep canonical hyphens; avoid invented compounds. • The Plain label should help a non‑specialist; the Tech label should match engineers’ eyes. • The Gloss must fit on a single line; put details in F.3.
Move C — Fence it off
Question to ask. “What must I refuse to conclude here?” Action (mental). Explicitly refuse to: (1) compare across Contexts, (2) fold morphology that the canon treats as meaningful, (3) embed behaviour, deontics, or type structure. Outcome. A clean, context‑local lexical unit that will be safe to cluster in F.3 and safe to bridge (or not) in F.9.
Guard‑rails (normative, lightweight)
- context‑locality. Every local lexical unit MUST cite a Context (U.BoundedContext from F.1).
- Context‑idiom normalisation. LNF MUST respect the Context’s idiom (spelling/hyphenation/casing) and use minimal edits.
- Two registers. Each unit SHOULD carry both Tech and Plain labels for didactics; if one is missing, justify.
- Minimal generality (G‑1). The gloss MUST be as specific as the Context’s canon requires—no broader.
- EntityOfConcern / Description / specification-use hygiene (A.7). MUST NOT include behaviour equations, deontic rules, measurement math, or type axioms; those belong to patterns.
- No Cross‑context claims. MUST NOT assert equivalence, subsumption, or similarity with terms in other Contexts (F.9 only).
- Edition honesty. If the Context’s canon has multiple editions with shifting usage, treat them as distinct Contexts in F.1 before harvesting.
- Parsimony. Prefer few, telling lexical units over long tails; keep head terms that will power F.3/F.4/F.9.
Micro‑examples (illustrative, context‑local)
Each line is one local lexical unit. No relations are implied across lines.
-
Context: BPMN 2.0 (2011) — LNF:
processTech:process- Plain:workflow processGloss: “Directed graph of flow nodes and sequence flows enacted by participants.” -
Context: PROV‑O (2013) — LNF:
activityTech:activity- Plain:temporal occurrenceGloss: “Time‑bounded occurrence that uses and generates entities and is linked to agents.” -
Context: ITIL 4 (2020) — LNF:
service‑level‑objectiveTech:service‑level‑objective- Plain:service targetGloss: “Target value for a service characteristic within a service promise vocabulary.” -
Context: NIST RBAC (2004) — LNF:
roleTech:access‑role- Plain:permission roleGloss: “Named grouping of permissions assignable via sessions.” -
Context: SOSA/SSN (2017) — LNF:
observationTech:observation- Plain:measurement actGloss: “Act applying a procedure to a feature of interest to produce a result.” -
Context: IEC 61131‑3 — LNF:
taskTech:task- Plain:runtime program executionGloss: “Cyclic or event‑driven execution unit for control programs.”
Didactic heuristics (informative)
- Keep the Context prefix in your inner speech. Say “process (BPMN)”, “activity (PROV)”.
- Prefer head nouns. If the canon says “service‑level objective”, do not shorten it to “objective”.
- Resist elegance that erases signal. Hyphens and case often carry the Context’s culture; keep them.
- Gloss from use, not from opinion. Quote in your mind, then compress; avoid importing definitions from neighbouring Contexts.
Anti‑patterns & remedies
Worked examples (context‑local only)
Each line is a local lexical unit (Context, LNF, Tech, Plain, Gloss). No Cross‑context relation is implied. Later clustering (F.3) and bridges (F.9) may connect them.
F.2:11.1 Enactment + sensing
-
Context: BPMN 2.0 (2011) — LNF:
processTech:process- Plain:workflow processGloss: “Directed graph of flow nodes and sequence flows enacted by participants.” -
Context: PROV‑O (2013) — LNF:
activityTech:activity- Plain:temporal occurrenceGloss: “Time‑bounded occurrence that uses and generates entities and links to agents.” -
Context: SOSA/SSN (2017) — LNF:
observationTech:observation- Plain:measurement actGloss: “Act applying a procedure to a feature of interest to produce a result.” -
Context: ITIL 4 (2020) — LNF:
service‑level‑objectiveTech:service‑level‑objective- Plain:service targetGloss: “Target value for a service characteristic within a service promise vocabulary.”
Thinking pay‑off: you can phrase “compare observation to service‑level‑objective” without importing workflow or provenance semantics.
F.2:11.2 Sys‑CAL / LCA‑CAL + services
-
Context: State‑space control texts — LNF:
actuationTech:actuation- Plain:control outputGloss: “Signal applied to the plant to influence state or output.” -
Context: IEC 61131‑3 — LNF:
taskTech:task- Plain:runtime program executionGloss: “Cyclic or event‑driven execution unit for control programs.” -
Context: ITIL 4 (2020) — LNF:
incidentTech:incident- Plain:reported disruptionGloss: “Unplanned interruption or reduction in the quality of a service.”
Thinking pay‑off: avoids calling a plant fault an “incident” unless you cross Contexts later with an explicit bridge.
F.2:11.3 Kind-CAL + Method‑CAL + KD‑CAL
-
Context: OWL 2 (profiles) — LNF:
subclass‑ofTech:subclass‑of- Plain:is‑a (type hierarchy)Gloss: “C ⊑ D: every instance of C is an instance of D.” -
Context: FCA corpus — LNF:
formal‑conceptTech:formal‑concept- Plain:extent–intent nodeGloss: “Maximal (objects, attributes) pair under a Galois connection.” -
Context: SPEM 2.0 / ISO 24744 — LNF:
methodTech:method- Plain:abstract way of doingGloss: “Abstract how‑to independent of specification or execution.” -
Context: SOSA/SSN (2017) — LNF:
procedureTech:procedure- Plain:measurement recipeGloss: “Specification guiding how an observation is produced.”
Thinking pay‑off: discourages treating an FCA “concept” as a U.Type, or a procedure as a method without later proof.
Reasoning primitives (judgement schemas, notation‑free)
Read each as a permitted mental move over the outcomes of F.2. Symbols:
R= Context (U.BoundedContext),u= local lexical unit,s= lexical string.
-
Localisation
heard(s) ∧ R chosen ⊢ localize(s,R)You decide to hearsonly in ContextR. -
Context‑idiom normalisation
localize(s,R) ⊢ LNF_R(s) = ℓWithinR, the Local Normal Form forsisℓ. -
Unit formation
LNF_R(s)=ℓ ∧ labelTech=t ∧ labelPlain=p ∧ gloss=g ⊢ unit(u) = ⟨R,ℓ,t,p,g⟩A local lexical unit is formed (quintet). -
Lexical‑only guard
unit(u) ⊢ lexicalOnly(u)No behavioural/deontic/type math is attached to the gloss. -
Homonymy signal (Cross‑context)
LNF_Ra(s)=ℓa ∧ LNF_Rb(s)=ℓb ∧ Ra≠Rb ⊢ homonymy(s) ⊇ {Ra,Rb}Same string across Contexts is flagged as different by default. -
Minimal generality check
unit(u) ⊢ minimal(u) ⇔ gloss(u) says no more than the Context’s usage requiresThe gloss fits the Context; broader claims are withheld. -
Two‑register adequacy
unit(u) ⊢ didactic(u) ⇔ (tech(u) faithful) ∧ (plain(u) explanatory)Tech stays canonical; Plain helps non‑specialists. -
No Cross‑context conclusion
unit(u@Ra), unit(v@Rb), Ra≠Rb ⊢ ¬(u ≡ v) (within F.2)F.2 never asserts Cross‑context equivalence. -
Ready‑for‑F.3 signal
lexicalOnly(u) ∧ minimal(u) ∧ didactic(u) ⊢ readyF3(u)A unit is suitable input for intra‑Context clustering in F.3.
Relations
Builds on: F.1 (Contexts fixed; heterogeneity/parsimony in place). E.10.D1 D.CTX (Context ≡ U.BoundedContext; “Problem Frame” reserved for narrative). F.0.1 (Source - Local Meaning - Bridge‑Only Crossing).
Constrains: F.3 (Intra‑Context Sense Clustering): operates only on units from one Context; produces Local‑Senses and addressable SenseCells. F.4 (Role Description Definition): may cite SenseCells, not raw strings. F.9 (Alignment & Bridge): consumes homonymy signals; declares explicit Cross‑context mappings with loss policies.
Used by. Extention patterns in Part C when referencing domain idioms (labels stay context‑local).
Migration notes (conceptual)
- New edition appears. Add a Context in F.1; harvest afresh in F.2 using that Context; do not overwrite earlier units.
- Idiomatic update discovered. If your LNF fought the canon’s idiom, re‑LNF within the same context; keep labels/glosses steady unless the canon itself differs.
- Ambiguity inside a Context. If use splits, mint two units with distinct glosses; F.3 will sort their relation (same/different Local‑Sense).
- Language split. Treat each language canon as its own Context; resist cross‑language merges in F.2.
- Tail pruning. If units accumulate without feeding F.3/F.4/F.9, drop them from the working set; keep head terms that carry bridges.
- DSL quarantine. If a tool dialect is unavoidable, keep it as one context among others; never let it define the idiom for other Contexts.
Acceptance tests (SCR/RSCR — concept‑level)
Static conformance (SCR)
- SCR‑F2‑S01 (context‑locality). Every unit cites a Context from F.1.
- SCR‑F2‑S02 (Idiomatic LNF). Each LNF reflects the Context’s spelling/hyphenation/casing with minimal edits.
- SCR‑F2‑S03 (Two registers). Each unit carries both Tech and Plain labels; if not, a reason exists tied to didactics.
- SCR‑F2‑S04 (Lexical‑only). No gloss contains behaviour, deontics, measurement math, or type axioms.
- SCR‑F2‑S05 (No Cross‑context claims). Nowhere does F.2 assert equivalence/similarity/subsumption across Contexts.
- SCR‑F2‑S06 (Minimal generality). Glosses match the Context’s use; no globalisation.
- SCR‑F2‑S07 (Temporal honesty). For Contexts with fixed DesignRunTag, units and glosses respect it.
Regression (RSCR)
- RSCR‑F2‑E01 (Edition split). Introducing a new edition yields new units under a new Context; earlier units persist unchanged.
- RSCR‑F2‑E02 (Normaliser stability). Adjusting an LNF does not silently widen/narrow the gloss.
- RSCR‑F2‑E03 (Language split). Adding a second language yields a second Context; no bilingual collapse in F.2.
- RSCR‑F2‑E04 (No stealth bridges). After updates, F.2 still contains zero Cross‑context identity claims; any mapping appears only in F.9.
- RSCR‑F2‑E05 (Head‑term focus). Periodic check shows the unit set remains small and oriented to F.3/F.4/F.9 needs.
Didactic distillation (60‑second script)
“In F.2 you harvest inside Contexts. For each Context, pick the canon’s own phrasing, choose a Local Normal Form in that idiom, add Tech and Plain labels, and write a one‑sentence Gloss that matches how that Context talks. Stop there. No bridging, no behaviour, no equations. If the same string appears in another Context, treat it as a different unit. These units feed F.3, where you’ll sort senses within a Context, and F.9, where you’ll relate Contexts explicitly. This keeps meaning local, names faithful, and later reasoning clean.”
F.2:End
Intra‑Context Sense Clustering
“Within one context, decide what ‘the same sense’ really is—before you ever cross Contexts.” Status. Architectural pattern. Depends on. F.1 Domain‑Family Landscape Survey; F.2 Term Harvesting & Normalisation; E.10.D1 Lexical Discipline for “Context” (D.CTX); A.7 Strict Distinction; A.11 Ontological Parsimony. Coordinates with. F.4 Role Description; F.7 Concept‑Set Table; F.8 Mint or Reuse Decision; F.9 Alignment & Bridge Across Contexts. Aliases (informative). context‑local clustering; Sense consolidation.
Intent & applicability
Intent. Consolidate the context‑local lexical units from F.2 into a small set of Local‑Senses that actually operate in that one context (U.BoundedContext). Each Local‑Sense receives a crisp, didactic label pair (Tech/Plain) and a short sense statement. The result is an addressable basis for later uses (Role Assignment, tables, bridges) that is still strictly context‑local.
Applicability. Apply after F.2 for any Context that will feed naming (F.4/F.5), decision gates (F.8), Cross‑context bridges (F.9), or exemplars in Part C. Use again whenever the canon (edition) shifts usage enough to split or merge senses within the same context.
Non‑goals. No Cross‑context comparison or merging. No behaviour/deontics/type mathematics. No storage schemas or workflows. This is pure sense‑making inside one context.
Problem Frame
context‑local units (LNF + labels + gloss) from F.2 often over‑ or under‑differentiate meaning:
- Over‑split: superficial variants (service‑level‑objective vs SLO) treated as different “things”.
- Under‑split: one gloss covering two selectional frames or incompatible use‑cases.
- Drift within a canon: multi‑chapter texts use the same head differently unless the reader consolidates the intended sense.
- Didactic mismatch: engineer‑friendly label and plain label drift apart when units remain too granular.
F.3 repairs this inside the Context by clustering “same sense” and distinguishing “different sense”, with parsimony.
Forces
Core idea (didactic)
Cluster by usage, not by string. Inside one context:
- Same sense → Local‑Sense: a small, coherent usage‑region the canon treats as one idea (even if it has aliases or minor surface variation).
- Different sense → two Local‑Senses: incompatible selectional frames, entailments, or role in the canon’s own statements.
Each Local‑Sense becomes addressable when paired with its Context: SenseCell = (Context × Local‑Sense). SenseCells are context‑local coordinates; they do not pre‑judge any Cross‑context mapping.
Minimal vocabulary (this pattern only)
- Context — short for
U.BoundedContext(per D.CTX). - Unit — a context‑local lexical unit from F.2 (LNF + Tech/Plain + gloss).
- Local‑Sense — the conceptual cluster of Units deemed “same sense” within that Context.
- SenseCell — the address for a Local‑Sense: (Context, Local‑Sense). This is what later patterns will cite.
- Counter‑example — a short, canonical sentence or use that must not be covered by the Local‑Sense; it sharpens the boundary.
- Usage cue (informative) — a clue from usage (collocational patterns, paraphrases, entailments in the canon) that suggests merge or split. Cues do not decide; the canon’s intent does.
Solution — how to think the clustering (notation‑free)
What follows are mental moves, not steps for a team. Use them as probes until the Context’s usage partitions itself naturally.
6.1 Consolidate aliases into one Local‑Sense. If Units differ only by orthography, abbreviation, or canon‑blessed synonymy and are used interchangeably in the Context’s own sentences, treat them as one Local‑Sense. Example (ITIL): service‑level‑objective and SLO → one Local‑Sense.
6.2 Split on incompatible selectional frames. If the same head pairs with different kinds of arguments or plays different roles in the canon’s statements (and those roles cannot both be true at once), split. Example (BPMN): event as node type vs as occurrence narrative in a tutorial → two Local‑Senses; adopt the node type sense if that is the normative layer.
6.3 Split on entailments that pull apart. If paraphrases lead to different entailments (e.g., one implies temporality, another structural position), you have two senses. Example (PROV): activity implies time‑bounded use/generate; it cannot be the same sense as a static capability.
6.4 Prefer sense minimality. If two candidate Local‑Senses never lead to different conclusions in the Context’s own use, merge them. If they sometimes do, split them—and record a counter‑example to keep the boundary crisp.
6.5 Keep Tech label idiomatic; Plain label helpful. Tech label stays as the canon speaks; Plain label conveys the function of the sense to a careful newcomer. Neither label may broaden the sense beyond usage.
6.6 Name only as much as you will use. If a fine-grained split has no downstream consequence (Role Descriptions, tables, bridges), prefer the coarser Local-Sense.
Outputs (conceptual, not clerical)
F.3 yields, per Context:
-
A small set of Local‑Senses, each with:
- Label pair: Tech (idiomatic) - Plain (didactic).
- Sense line: one‑sentence usage statement, in the Context’s voice.
- Inside list (informative): which Units from F.2 it consolidates.
- Counter‑example (optional but powerful): a short use that must not be included.
-
A SenseCell address for each Local‑Sense: (Context, Local‑Sense).
These are thinking reference points (cognitive only), not records or files. Later patterns cite SenseCells by name; nothing about storage is implied.
Invariants (normative, lightweight)
- context‑locality. Every Local‑Sense belongs to exactly one context. No Cross‑context clustering.
- Parsimony. Local‑Senses are few; prefer the coarsest partition that preserves the canon’s distinctions.
- Idiomatic Tech. The Tech label must stay in the Context’s idiom; no house‑style overrides.
- Didactic Plain. The Plain label must aid comprehension without adding scope.
- Usage‑first. Sense lines reflect the canon’s usage, not imported taxonomies or external theories.
- Counter‑examples rule. If a counter‑example exists that the sense would wrongly include, split.
- No behaviour math. Sense lines contain no behavioural, deontic, metrological, or type calculus; those live in Part C.
- Temporal honesty. If the Context fixes DesignRunTag, the sense line respects it (e.g., PROV activity is run‑time).
Self‑checks (mental probes)
- Same‑conclusion test. Do two candidate senses ever lead to different conclusions in the canon? If not, merge.
- Argument‑slot probe. Replace arguments in canonical sentences; do both candidates still read true? If one fails, split.
- Label inversion. Read the Plain label alone: does it tempt you to over‑generalise? If yes, tighten it.
- Counter‑example ping. Can you state a ten‑word use that the sense must exclude? If you can, write it; if you cannot, your sense may be too broad.
- Memory rule. Can you recall the Context’s Local‑Senses without notes? If not, you split too finely.
Anti‑patterns & remedies
Local‑Sense Cards (one‑glance form)
A Local‑Sense Card is a one‑glance sketch per sense in a Context. It teaches faster than prose lists and keeps senses crisp.
Fields (thought‑items, not fields to fill):
- Context (U.BoundedContext, edition)
- Label pair — Tech (idiomatic) - Plain (didactic)
- Sense line — one sentence in the Context’s voice
- Inside — which F.2 Units it consolidates (names only)
- Counter‑example — a short use that must not be included
Worked examples (all intra‑Context)
BPMN 2.0 (workflow Context)
Card A — “process (graph)”
- Label: Tech process - Plain workflow graph
- Sense line: A BPMN graph of flow nodes and sequence flows specifying orchestration among participants (design‑time).
- Inside: process, process model, business process (when used as diagram).
- Counter‑example: “This process took 5 minutes” ← runtime occurrence, not this sense.
Card B — “event (node‑type)”
- Label: Tech event (node) - Plain event symbol
- Sense line: A node-type that marks starts, ends, and intermediates; typed by trigger and result.
- Inside: start event, message event, end event.
- Counter‑example: “The outage event happened at 13:05” ← narrative occurrence, not the node‑type.
Outcome: “Process uptime” is rejected as a BPMN sense; Execution belongs to another Context.
PROV‑O (provenance Context)
Card C — “activity (run)”
- Label: Tech activity - Plain time‑bounded execution
- Sense line: An occurrence that uses and generates entities; linked to agents; has start/end.
- Inside: activity, execution (when PROV authors use it).
- Counter‑example: “Sorting algorithm” ← capability/method, not an occurrence.
Card D — “agent (provenance)”
- Label: Tech agent - Plain provenance actor
- Sense line: Thing that bears responsibility for an activity’s effects (person, org, software).
- Inside: agent.
- Counter‑example: “RBAC role” ← access status, not a PROV agent.
ITIL 4 (services Context)
Card E — “service‑level objective”
- Label: Tech SLO - Plain service target
- Sense line: A target value/range for a service characteristic used to define acceptable service.
- Inside: service‑level objective, SLO.
- Counter‑example: “Actual availability 99.5%” ← observation, not the target.
Card F — “incident”
- Label: Tech incident - Plain service disruption
- Sense line: An unplanned interruption or reduction in quality of a service.
- Inside: incident.
- Counter‑example: “Fault in plant sensor” ← Sys‑CAL fault; different Context.
SOSA/SSN (sensing Context)
Card G — “observation (act)”
- Label: Tech observation - Plain measurement act
- Sense line: An act applying a Procedure to a FeatureOfInterest to yield a Result for a property.
- Inside: observation.
- Counter‑example: “Temperature is 20 °C” ← result value, not the act.
OWL 2 (types Context)
Card H — “subclass‑of”
- Label: Tech subclass‑of (⊑) - Plain is‑a (class)
- Sense line: A class inclusion: every instance of C is an instance of D.
- Inside: SubClassOf, is‑a (when authors use it for classes).
- Counter‑example: rdf:type (instance‑of) — not class inclusion.
Card I — “equivalent‑class”
- Label: Tech equivalent‑class - Plain same class extension
- Sense line: Mutual class identity by extension; two labels for the same set of instances.
- Inside: EquivalentClasses.
- Counter‑example: owl:sameAs (individual identity), different predicate.
IEC 61131‑3 (control‑runtime Context)
Card J — “task (runtime)”
- Label: Tech task - Plain program runner
- Sense line: A cyclic or event‑driven execution unit that invokes programs on schedule or trigger.
- Inside: task.
- Counter‑example: “Control algorithm” ← design/method, not the runtime task.
Reasoning primitives (judgement schemas, notation‑free)
Each schema captures a safe mental move. It implies no storage, API, or workflow.
-
Alias‑to‑sense consolidation
Context C ⊢ interchangeable(U₁,…,Uₖ) ⇒ Local‑Sense σReading: If Units are used interchangeably by the canon in C, consolidate them into one Local‑Sense σ. -
Selectional‑frame split
C ⊢ frames(U) = F, frames(V) = G, F ∩ G = ∅ ⇒ split(U,V)Reading: In C, if the argument/role patterns do not overlap, treat as different senses. -
Entailment divergence
C ⊢ entail(U) ≠ entail(V) on canonical paraphrases ⇒ split(U,V)Reading: If paraphrases lead to different conclusions in the canon, split. -
Parsimony merge
C ⊢ no‑test distinguishes {U₁,…,Uₖ} ⇒ merge(U₁,…,Uₖ)Reading: If no canonical test yields a difference, merge into one sense. -
Counter‑example trigger
C ⊢ ∃e: e should not be covered by σ ⇒ refine(σ)Reading: A crisp counter‑example forces a narrower sense (split or relabel). -
Idiomatic Tech, faithful Plain
C ⊢ labelTech(σ) in idiom(C) ∧ labelPlain(σ) ⊆ usage(σ)Reading: Tech label speaks the canon; Plain label does not widen the sense. -
SenseCell address
C ⊢ σ ⇒ SenseCell ⟨C,σ⟩Reading: Pair each Local‑Sense with its Context to form an address used downstream. -
Temporal guard
stance(C)=design ⇒ forbid(run‑claims in σ)(and symmetrically) Reading: Sense lines must not cross the Context’s DesignRunTag. -
Edition guard
C≠C′ (different editions with usage shift) ⇒ no‑merge(σ@C, τ@C′)Reading: Do not merge senses across Contexts when editions shift usage. -
Completeness ping (optional)
frequent head w in C ∧ no Local‑Sense on w ⇒ consider(sense for w)Reading: If a common head lacks a sense, you may be missing a useful consolidation (within C).
Relations
Builds on: F.1 Domain‑Family Landscape Survey (Contexts fixed); F.2 Term Harvesting (Units ready); E.10.D1 D.CTX (Context discipline); A.7 Strict Distinction.
Constrains:
- F.4 Role Description. Role Descriptions cite SenseCells; they do not invent senses.
- F.7 Concept‑Set Table. Rows are built from SenseCells (later Cross‑context assembly); intra‑Context clarity here prevents row bloat.
- F.8 Mint or Reuse Decision. Decisions compare proposed names to existing SenseCells to avoid type inflation.
- F.9 Alignment & Bridge. Bridges connect SenseCell ↔ SenseCell across Contexts; F.3 provides the stable endpoints.
Is used by. Part C Extention Patterns to ground examples and invariants in Context‑true language.
Migration notes (conceptual)
- Usage clarifies → merge. If two Local‑Senses never lead to different conclusions in the Context’s canon, merge and keep the narrower sense line.
- Usage diverges → split. If new reading reveals incompatible roles/entailments, split and attach a counter‑example to each side.
- Edition change → new Context. When a new edition reframes usage, treat it as a separate Context (F.1) and re‑cluster there.
- Label upkeep. If the Plain label tempts broadening, tighten it; if the Tech label drifts from idiom, restore the canon term.
- Dormant sense. If a Local‑Sense ceases to matter for any active line, leave it listed but mark it low‑use in your own notes; do not fold it into another unless rule 1 holds.
- Bridge temptation. Record tensions to bridge elsewhere; F.3 never resolves Cross‑context relations.
Acceptance tests (SCR/RSCR — concept‑level)
Static conformance (SCR)
- SCR‑F3‑S01 (context‑locality). Every Local‑Sense is paired with exactly one context; no Cross‑context clustering appears.
- SCR‑F3‑S02 (Label pair). Each Local‑Sense has Tech (idiomatic) and Plain (didactic) labels; neither widens usage beyond the sense line.
- SCR‑F3‑S03 (Sense line fidelity). Each sense line is grounded in canonical statements of the Context; no behaviour/deontic/math content.
- SCR‑F3‑S04 (Parsimony). The set of Local‑Senses per Context is small enough to recall unaided by a careful mind.
- SCR‑F3‑S05 (Counter‑example presence). For any ambiguous head, at least one counter‑example is recorded to guard the boundary.
- SCR‑F3‑S06 (Temporal honesty). Where the Context has a declared stance, sense lines respect the DesignRunTag.
Regression (RSCR)
- RSCR‑F3‑E01 (Merge soundness). Every merge is justified by a failed distinction test (no selectional or entailment difference).
- RSCR‑F3‑E02 (Split necessity). Every split cites a role/entailment conflict or a concrete counter‑example.
- RSCR‑F3‑E03 (Edition guard). No Local‑Sense spans Contexts that differ by edition with usage shift.
- RSCR‑F3‑E04 (Label stability). Changes to labels do not change sense; if they do, the change is treated as a split/merge per E01/E02.
- RSCR‑F3‑E05 (Downstream continuity). After splits/merges, SenseCell references in F.4/F.7/F.9 remain referentially clear (new addresses are explicit; no silent aliasing).
Didactic close (60‑second recap)
Within one context, collect how the canon actually uses a head, not how we wish it did. Merge aliases that never lead to different conclusions; split uses that do. Give each consolidated use a crisp Tech label in the Context’s idiom and a faithful Plain label. The pair (Context, Local-Sense) is your SenseCell—the address later cited by Role Descriptions, tables, and bridges. No Cross‑context mergers here; that job belongs to F.9. Keep senses few, boundaries sharp, and labels honest.
F.3:End
Role Description (RCS + RoleStateGraph + Checklists)
“Name the mask or the badge — and say what it commits to — but only inside a Context.”
Status. Architectural pattern.
Depends on. E.10.D1 Lexical Discipline for “Context” (D.CTX); E.10.D2 EntityOfConcern, Description Episteme, and Specification-Use Discipline; F.1 Domain‑Family Landscape Survey; F.2 Term Harvesting; F.3 Intra‑Context Sense Clustering; A.2.1 U.RoleAssignment; A.7 Strict Distinction; A.11 Ontological Parsimony.
Coordinates with. F.5 Naming Discipline for U.Types & Roles; F.7 Concept‑Set Table; F.9 Alignment & Bridge Across Contexts; B.3 Trust & Assurance Calculus (for later status evaluation).
Aliases (informative). Mask/Badge card; role card (plain only).
Intent & applicability
Intent. Provide a conceptual template for two kinds of assignables:
- Role Template — a behavioural mask that a holder can wear in a specific Context (U.BoundedContext), shaping how it acts (via Method/Execution relations).
- Status Template — an epistemic or deontic badge that a holder (or artefact, event, claim) can bear inside a Context, shaping how it is treated (evaluation, permission, standing).
Each template is grounded in a SenseCell ⟨Context, Local‑Sense⟩ from F.3 and declares minimal invariants that later assignments must satisfy. No Cross‑context meaning is imported here.
Applicability. Whenever you need to speak precisely about what it means to be a Participant (BPMN), hold an access‑role (RBAC), be an Incident (ITIL), or carry a Verified status (evidence line), before minting U.Types or drawing Cross‑context bridges.
Non‑goals. No workflows, no storage, no editors. No equations for assurance or control; those live in Part B/C. This pattern describes how to think and speak about assignables — not how to manage files.
Problem frame
Without explicit Role Descriptions:
- Role/status conflation. Access role (RBAC) treated as behavioural mask (BPMN participant); deontic duty treated as runtime effect.
- Context drift. A “role” quietly starts meaning different things across canons; later assignments contradict each other.
- Hidden commitments. We name a role assignment or status assertion but never state what must hold when it is assigned; downstream reasoning becomes arbitrary.
- Premature unification. A single template tries to straddle several Contexts; losses remain implicit.
Forces
Minimal vocabulary (this pattern only)
- Context — U.BoundedContext (per E.10.D1).
- Local‑Sense — a consolidated sense in a Context (F.3).
- SenseCell — the address
⟨Context, Local‑Sense⟩. - Role Template — behavioural mask defined in a Context, later bound by
U.RoleAssignment. - Status Template — epistemic/deontic badge defined in a Context, later asserted as a claim about a holder/artefact.
- Holder — the thing that may wear a mask or carry a badge (e.g., a U.System, U.MethodDescription, U.Work, U.Episteme).
Core idea (didactic)
A Role Description is a small card that says: (i) which Context’s sense it relies on (SenseCell), (ii) what label we use to speak about it (Tech & Plain), and (iii) what must hold when someone wears the mask (Role) or bears the badge (Status).
It is not a definition by prose alone; it is a pledge of invariants — minimal, Context‑true, and later checkable.
The Role Description Card (one‑screen sketch)
Each bullet is a thought‑item, not a file field.
Header
- Template kind: Role | Status
- Label pair: Tech (idiomatic) - Plain (didactic) (naming discipline in F.5)
- SenseCell:
⟨ContextId, Local‑Sense label⟩
Applicability
- Holder scope: what can wear/bear it (e.g., U.System, U.Work, U.MethodDescription, U.Episteme).
- Time stance: design / run aligned to the Context (F.1).
- Preconditions (Context‑true): crisp conditions that must already be true in the Context’s idiom.
Invariants (minimal)
- Behavioural invariants (Role) or Evaluation invariants (Status) — 2–5 short lines stating what must hold after assignment/assertion, using the Context’s vocabulary and SenseCells where needed.
- Separation guard: a one‑line reminder of what this template does not imply (prevents senseFamily mixing).
Consequences (informative)
- Typical interactions: which Method/Execution/Observation constructs (by SenseCell) this template usually touches — names only.
- Common misreads (trip‑wire): 1–2 bullets to prevent known confusions.
Memory rule: If your card can’t be read in under two minutes, you are writing a manual, not a template.
Autonomy hooks (when Role may act autonomously)
- RCS additions (illustrative):
AgencyLevel ∈ {None, Assisted, Delegated, Autonomous},SafetyCriticality ∈ {SC0..SC3}. - RSG gate: mark which states are enactable under autonomy (cf. A.2.5); link to
AutonomyBudgetDeclRef. - References: If autonomy is claimed for this Role, the Role Description MUST reference:
AutonomyBudgetDeclRef(id, version),Aut-Guard policy-id (PolicyIdRef),OverrideProtocolRef. - Checklist: include a pre‑enactment checklist item “Autonomy Green‑Gate passed” (guard verdicts present).
Normative invariants (template discipline)
- context‑local grounding. Every Role Description MUST cite exactly one SenseCell as its semantic anchor.
- EntityOfConcern / Description / specification-use separation.
- A Role Template MUST NOT encode deontic, access, or measurement rules.
- A Status Template MUST NOT encode behaviour or control flow.
- Time honesty. The card’s stance (DesignRunTag) MUST match the Context’s stance (F.1).
- Minimality. Invariants SHOULD be the fewest that decide the assignment; avoid procedural sequences.
- No Cross‑context smuggling. A single card MUST NOT import foreign semantics; if two Contexts are needed, the relation is handled later in F.9.
- Label fidelity. Tech label MUST be idiomatic to the Context; Plain label MUST not widen the sense (F.3).
- Binding Standard (roles). A Role Template is the design‑time mask; at run‑time, a
U.RoleAssignmentcreates System‑in‑Role instances that are subject to the card’s invariants. - Assertion Standard (statuses). A Status Template is a badge; asserting it commits to the card’s evaluation invariants and to the Context’s way of checking them (later anchored via SenseCells, not formulas here).
Reasoning primitives (judgement schemas, notation‑free)
Conceptual moves only; no APIs, no data stores.
-
Template grounding
Template T cites SenseCell ⟨C,σ⟩ ⊢ meaning(T) is local to CReading: The template’s meaning is context‑local. -
Role assignability
holder h, RoleTemplate T, preconds_T(h) ⊢ assignable(h,T)Reading: If the preconditions hold for h, it is eligible to wear the mask T. -
Role assignment obligation
assignable(h,T) ∧ bind(h,T: C) ⊢ invariants_T(h) must holdReading: Once bound (viaU.RoleAssignment), h must satisfy T’s behavioural invariants. -
Status assertability
StatusTemplate S, evidence_in_C supports S for x ⊢ assertable(x,S)Reading: If evidence in the Context C supports S for x, the badge is assertable (details of evidence logic live in Part B). -
Status consequence
assertable(x,S) ∧ assert(x,S) ⊢ evaluation_invariants_S(x)Reading: Once asserted, S’s evaluation invariants constrain how x is treated. -
Separation guard
RoleTemplate T ⊢ not(deontic_implied(T))-StatusTemplate S ⊢ not(behaviour_implied(S))Reading: Wearing a mask doesn’t grant permissions; carrying a badge doesn’t define behaviour. -
Bridge embargo
T cites ⟨C,σ⟩ ∧ C≠C′ ⊢ no‑equivalence(T@C, −) inside F.4Reading: No Cross‑context equivalence is asserted here; use F.9 later.
Worked examples (Context‑true)
Illustrative cards only; names are tech/plain labels, not final U.Type IDs (F.5 will govern naming).
Role Template: participant (workflow actor) — Context: BPMN 2.0 (2011)
-
Kind: Role
-
Label: Tech participant - Plain workflow actor
-
SenseCell:
⟨BPMN_2_0, participant (actor in workflow)⟩ -
Holder scope: U.System (organisation, team, service)
-
Time stance: design
-
Preconditions: Holder is addressable as a lane/pool in the workflow model.
-
Behavioural invariants:
- Activities assigned to the participant appear in its lane/pool.
- The participant interacts through message flows at its boundaries.
- The participant does not define run‑time occurrence; it structures the model.
-
Separation guard: No permissions implied; no execution logs implied.
-
Typical interactions (informative): BPMN process (graph); message event (node).
-
Common misreads: ≠ RBAC role; ≠ PROV Activity.
Status Template: access‑role membership — Context: NIST RBAC (2004)
-
Kind: Status
-
Label: Tech access‑role - Plain permission role
-
SenseCell:
⟨NIST_RBAC_2004, role (permission grouping)⟩ -
Holder scope: U.System (user/session)
-
Time stance: run
-
Preconditions: A defined set of permissions exists for the role.
-
Evaluation invariants:
- If x carries this badge, x’s session inherits exactly the role’s permissions.
- The badge does not describe behaviour in a workflow; it determines access.
-
Separation guard: No commitment about BPMN assignment; no deontic duties.
-
Typical interactions (informative): permission, session (RBAC).
-
Common misreads: ≠ participant (BPMN); ≠ person as an ontological type.
Status Template: incident (service disruption) — Context: ITIL 4 (2020)
-
Kind: Status
-
Label: Tech incident - Plain service disruption
-
SenseCell:
⟨ITIL4_2020, incident (service quality drop)⟩ -
Holder scope: U.Work (recorded occurrence affecting a service)
-
Time stance: run
-
Preconditions: A service exists with declared SLOs/quality metrics.
-
Evaluation invariants:
- The occurrence reduces service quality below acceptable levels.
- It triggers restoration activities per service practice (names only).
-
Separation guard: Not a plant fault; not a BPMN event node.
-
Typical interactions: SLO (ITIL), Observation (SOSA) — names only.
-
Common misreads: ≠ problem (root cause category).
Role Template: task runner (control runtime) — Context: IEC 61131‑3
-
Kind: Role
-
Label: Tech task - Plain program runner
-
SenseCell:
⟨IEC_61131_3, task (runtime execution unit)⟩ -
Holder scope: U.System (controller CPU/task scheduler)
-
Time stance: run
-
Preconditions: A program is registered for cyclic/event execution.
-
Behavioural invariants:
- Invokes assigned program according to cycle/trigger.
- Provides schedule constraints (period/priority) to its program.
-
Separation guard: No claim about deontic guarantees or service targets.
-
Typical interactions: Execution (A.15 family), Actuation (Sys‑CAL).
-
Common misreads: ≠ workflow task; ≠ algorithm (design).
Anti‑patterns & remedies
Concept‑level operators (refinement & compatibility)
Judgement schemas — pure reasoning moves over cards. No APIs, no storage, no workflow.
Let sense(T) denote the SenseCell cited by template T.
Let inv(T) denote the set of invariants on T.
Let senseFamily(T) ∈ {Role, Status}.
Let stance(T) ∈ {design, run} (from the Context).
Same‑Context equivalence
Form.
sense(T₁) = sense(T₂) ∧ inv(T₁) ⇔ inv(T₂) ⊢ T₁ ≡ T₂
Reading. Two cards in the same Context with logically equivalent invariants co‑designate the same assignable.
Tech cue. Use this to merge duplicates conceptually without changing labels.
Refinement (strictness order)
Form.
sense(T₁) = sense(T₂) ∧ inv(T₁) ⇒ inv(T₂) ⊢ T₁ ⪯ T₂
Reading. T₁ is a refinement of T₂ if its invariants imply those of T₂ (same Context).
Effects. Assigning T₁ automatically satisfies T₂; the converse need not hold.
Incompatibility (mutual exclusion)
Form.
sense(T₁) = sense(T₂) ∧ (inv(T₁) ∧ inv(T₂) ⇒ ⊥) ⊢ incompatible(T₁,T₂)
Reading. Two cards in the same Context are mutually exclusive if their invariants cannot co‑hold.
Use. A conceptual Separation‑of‑Duty signal without governance.
Co‑wearability / co‑bearability
Form.
senseFamily(T₁)=senseFamily(T₂)=Role ∧ stance(T₁)=stance(T₂) ∧ ¬incompatible(T₁,T₂) ⊢ coWearable(T₁,T₂)
senseFamily(T₁)=senseFamily(T₂)=Status ∧ ¬incompatible(T₁,T₂) ⊢ stackable(T₁,T₂)
Reading. Within a Context, two Roles can be worn together (or two Statuses carried) when they do not conflict.
Time‑stance alignment
Form.
stance(T)=design ⊢ inv(T) may not assert run‑facts
stance(T)=run ⊢ inv(T) may not assert design‑commitments
Reading. Invariants must respect the Context’s DesignRunTag (F.1).
Binding/Assertion admissibility
Form. (Roles)
holder h ∧ preconds_T(h) ⊢ assignable(h,T)
assignable(h,T) ∧ bind(h,T) ⊢ inv(T)(h)
Form. (Statuses)
evidence_in_Context(C) supports S for x ∧ sense(S)=⟨C,σ⟩ ⊢ assertable(x,S)
assertable(x,S) ∧ assert(x,S) ⊢ inv(S)(x)
Reading. Preconditions and evidence gate the act of wearing a mask or bearing a badge; once done, invariants apply.
Cross‑context embargo (inside F.4)
Form.
sense(T₁)=⟨C,−⟩, sense(T₂)=⟨C′,−⟩, C≠C′ ⊢ no‑relation(T₁,T₂) here
Reading. F.4 never asserts Cross‑context relations. If a relation is desired, it becomes a Bridge in F.9.
Relations (where this card sits)
Builds on:
E.10.D1 D.CTX (Context ≡ U.BoundedContext); F.1 (Contexts cut); F.2 (harvested terms); F.3 (Local‑Sense → SenseCell); A.2.1 U.RoleAssignment; A.7 Strict Distinction.
Constrains: F.5 (Naming): pairs Tech/Plain must reflect the Context idiom and avoid Cross‑context overreach. F.7 (Concept-Set Table): rows reference SenseCells; Role Description cards point to those rows but never create cross-context identity. F.8 (Mint or Reuse?): prefer refinement (⪯) over new cards; split cards rather than mixing senseFamilies. F.9 (Alignment & Bridge): any relation across Contexts is declared there; Role Description cards remain context-local.
Is used by. A.15 family (Role–Method–Work alignment) to interpret System‑in‑Role and Work; Part B evidence/status checks to interpret evaluation invariants.
Migration notes (conceptual playbook)
- Context update (edition split). If the Context’s Local‑Sense changes, fork the card per new SenseCell; keep the old card as historically valid.
- Family correction (Role and Status). If a card mixes behaviour and deontics, split into one Role and one Status; move permission language to the Status.
- Tighten by refinement. When practice reveals a stricter understanding, prefer T′ ⪯ T over replacing T; this preserves existing assignments conceptually.
- Rename safely (labels only). If F.5 revises labels, change Tech/Plain wording; SenseCell and invariants remain untouched.
- Scope correction. If Holder scope was too wide, split into parallel cards with disjoint Holder scopes; avoid complex conditional invariants.
- Bridge discovery. Do not inject Cross‑context text into cards; record the relation as an F.9 Bridge (with CL policy), leaving the cards as they are.
Acceptance tests (SCR/RSCR — concept‑level)
Static conformance (SCR)
- SCR‑F4‑S01 (Uni‑Context grounding). Each card cites exactly one SenseCell.
- SCR‑F4‑S02 (Family honesty).
senseFamily(T)is either Role or Status; invariants match the family; a separation guard line is present. - SCR‑F4‑S03 (Time honesty).
stance(T)matches the Context’s stance; no opposing‑stance claims appear. - SCR‑F4‑S04 (Minimality). Card lists 2–5 invariants; none are procedural step lists.
- SCR‑F4‑S05 (Label fidelity). Tech label is idiomatic to the Context; Plain label does not widen meaning.
- SCR‑F4‑S06 (No Cross‑context import). Invariants reference only the Context’s idiom or other SenseCells by name (no identity claims).
- SCR‑F4‑S07 (Holder clarity). Holder scope is a single coherent kind (e.g.,
U.SystemorU.Work), not a grab‑bag. - SCR‑F4‑S08 (No tooling/governance). Card contains no mentions of manifests, pipelines, editors, or workflows.
Regression (RSCR)
- RSCR‑F4‑E01 (Edition churn). When a Context edition changes, existing cards are not overwritten; new cards are added per SenseCell.
- RSCR‑F4‑E02 (Refinement safety). If T′ ⪯ T is introduced, prior usages of T remain conceptually valid; no backward contradictions arise.
- RSCR‑F4‑E03 (senseFamily integrity). No card changes senseFamily across revisions (Role↔Status) without an explicit split noted.
- RSCR-F4-E04 (Bridge discipline). After adding an F.9 Bridge, Role Description cards remain unchanged; cross-context meanings do not seep back into cards.
- RSCR‑F4‑E05 (Label updates). Label changes per F.5 preserve SenseCell and invariants; tests treat them as renames, not semantic edits.
Didactic distillation (60‑second close)
A Role Description card is a Context-true way to speak about an assignable: a Role (behavioural mask) or a Status (epistemic/deontic badge). Each card names one SenseCell, gives a Tech/Plain label, states minimal invariants, and declares what it does not imply. Cards never mix Role and Status senseFamilies and never cross EntityOfConcern, Description episteme, and specification-use positions, never flip time stance, and never import other Contexts. Inside one context, you can compare cards by equivalence (≡), refinement (⪯), incompatibility, and co‑wearability. across Contexts, say nothing in the card; use a Bridge later. Keep cards one‑screen simple: enough to decide assignments; nothing procedural; no tools; just clear thought.
F.4:End
Naming Discipline for U.Types & Roles
Status. Definitional pattern. Depends on. E.10.D1 Lexical Discipline for “Context” (D.CTX); E.10.D2 EntityOfConcern, Description Episteme, and Specification-Use; F.1 Domain‑Family Landscape Survey; F.2 Term Harvesting & Normalisation; F.3 Intra‑Context Sense Clustering; F.4 Role Description Definition; A.7 Strict Distinction; A.11 Ontological Parsimony; F.0.1 context‑local Lexicon Principle (RLP). Coordinates with. F.7 Concept‑Set Table; F.8 Mint or Reuse?; F.9 Alignment & Bridge; F.13 Term Registry & Deprecation. Aliases (informative). Context‑true naming; Two‑register labels.
Intent & applicability
Intent. Provide a small, normative code of naming so that U.Types (Cross‑context categories) and Role Descriptions (context‑local Roles or Statuses) are labelled clearly, locally faithful, and globally stable, without importing tooling, workflows, or editorial process. Names are consequences of meaning fixed earlier (F.1–F.4), not badges invented to “stabilise” drifting words.
Applicability. Use whenever you (a) mint or revise a U.Type name from a Concept‑Set row (F.7), or (b) assign labels to a Role Description (F.4). This pattern governs what a good name must be, not how a team produces it.
Non‑goals. No registries, reviews, or hand‑offs. No style‑police for punctuation beyond conceptual clarity. No bridging or synonym decisions across Contexts (F.9 does that).
Problem frame
Naming errors cause structural errors:
- Context denial. A label hides its Context, inviting Cross‑context misuse (“process” used for both BPMN and PROV senses).
- senseFamily blur. Names conflate Role (behavioural mask) with Status (epistemic/deontic badge).
- Over‑reach. U.Types inherit jargon from one canon and sound global while being parochial.
- Under-reach. Role Description labels sound so generic that they pretend to be U.Types.
- Unstable synonyms. Labels drift to placate readers rather than reflect meaning fixed in SenseCells.
This code resolves these by Context fidelity, senseFamily‑aware morphology, and two‑register pedagogy.
Minimal vocabulary (this pattern only)
- Tech label — the Context‑idiomatic name engineers expect inside that Context.
- Plain label — a teaching gloss in simple English that does not broaden the sense.
- Symbolic alias (optional) — conventional symbol if the canon uses one (e.g., “≤”).
- SenseCell — the (Context × Local-Sense) address cited by a Role Description card (F.3–F.4).
- Concept‑Set row — the Cross‑context table row that supports minting a U.Type name (F.7).
Core idea (didactic)
Name what the invariants already make true.
For Role Descriptions, speak like the Context (Tech), then teach it (Plain). For U.Types, speak like nobody’s Context: pick the neutral, minimal‑generality label that best fits the intersection shown by your Concept‑Set row.
Normative rules — Role Descriptions (context‑local labels)
Let T be a Role Description in Context C with SenseCell sense(T)=⟨C,σ⟩.
R‑RD‑1 (Two registers). Provide both:
Tech(T) = the Context‑idiomatic phrase (exact canon wording if possible).
Plain(T) = a brief, neutral explanation that does not broaden meaning.
Symbolic alias is optional and purely informative.
R‑RD‑2 (No Context tags in labels). Do not embed the Context name in the label (avoid “(BPMN)” in the label itself). Context is already carried by the SenseCell; keep labels clean.
R‑RD‑3 (senseFamily‑aware morphology).
— Role names are countable nouns for masks (e.g., Participant, Operator, Reviewer). Avoid verbs and gerunds. Add the suffix “Role” only if the Context idiom risks confusion with a substance or a status (e.g., “Reviewer Role” in a Context that also has a “Reviewer Status”).
— Status names are state nouns or adjectival‑noun collocations (e.g., Approved, Compliant, In‑Service, Access Role (RBAC)). If a family of levels exists, encode the level (Assurance L1, Readiness L2) rather than inventing decorative adjectives.
R‑RD‑4 (Local idiom first). Prefer the canon’s term of art even if it sounds narrower than a cross‑discipline cliché. The Plain label handles pedagogy; the Tech label honours the Context.
R‑RD‑5 (Minimal generality). Choose the narrowest label whose invariants you actually assert. Do not “upgrade” Task to Activity or Process just to sound universal.
R‑RD‑6 (No permissions by stealth). Role labels must not imply entitlement (“Privileged Operator” is a Status+Role mashup). Keep deontics in Status names in the deontics Context.
R‑RD‑7 (Edition‑neutral labels). Do not bake edition/profile into labels. Edition lives in the Context; the card binds to a SenseCell that already encodes edition where needed.
R‑RD‑8 (Short and stable). Favour 1–3 words. Avoid rhetorical adjectives (“robust, optimal, best‑practice”).
Normative rules — U.Types (Cross‑context labels)
Let U be a U.Type minted from a Concept‑Set row (F.7) satisfying A.8 (≥3 domain families) AND MinInterFamilyDistance ≥ δ_family (from F1‑Card).
R‑UT‑1 (Witnessed neutrality). The Tech label must not be a term bound to one context when alternatives exist. Prefer discipline‑neutral head nouns (Result, Reading, Execution, Evidence, Requirement, State, Type Node). Use Characteristic/Scale/Value/Level/Coordinate/Score/ScoringMethod only when the U.Type denotes a measurement‑sense kind anchored in a declared CharacteristicSpace; otherwise avoid these measurement‑canon terms to prevent semantics bleed.
R‑UT‑2 (Minimal generality). Name the least upper sense that all row witnesses share. If Observation and Measurement disagree, perhaps the U.Type is Result or Reading, not Observation.
R‑UT‑3 (No senseFamily mixing in names). Do not name a U.Type with deontic or behavioural language (“PermittedService”, “ResponsibleAgent”). Role, Status, Method, and Execution belong to Role Descriptions (F.4) or local senses; U.Types are what‑it‑is kinds, not what‑it‑does or what‑is‑allowed.
R‑UT‑4 (Head–modifier discipline). Prefer head nouns with light modifiers over stacked compounds. Good: Evidence Status, Requirement Status, Type Node. Risky: Multi‑stage‑workflow‑execution‑record (compresses a scenario into a name).
R‑UT‑5 (No Context tags in names). U.Types are Context‑agnostic; never append “(BPMN)”/“(PROV)”. Provenance for the row lives in F.7, not in the name.
R‑UT‑6 (Alias only for pedagogy). Allow Plain aliases for teaching; Tech label is unique and stable. Synonym management belongs to F.13; do not invent alternates ad hoc.
R‑UT‑7 (Family coherence). When minting a family, use parallel shapes (… Status, … Level, … Characteristic only for measurement families with a declared CharacteristicSpace) so related U.Types signal relation by form.
R‑UT‑8 (Symbolic names sparingly). Symbols may be listed as aliases for readers of formal sections; they are never the U.Type’s Tech label.
R‑UT‑9 (No edition/version in name). Versions live in the Concept‑Set evidence; the name denotes a time‑robust kind.
Twin rules
Mandatory Tech name. Every U.Type/Role MUST declare a Tech name; plain twin is optional.
Role suffix invariant. Role Tech names MUST end with Role; plain twin MUST keep “(role)” on first use.
No head elision. Head terms MUST NOT be dropped in a way that changes expected Kind (e.g., “Approval” ≠ “Approver (role)”).
One twin, one context. At most one plain twin per Context; register in E.10.P.
Invariants (normative, lightweight)
INV-F5-1 (Pair). Every Role Description card and every U.Type MUST carry Tech and Plain labels; symbol is optional and informative.
INV-F5-2 (Context fidelity for Role Descriptions). Tech(T) MUST be idiomatic for its Context; Plain(T) MUST NOT broaden sense(T).
INV‑F5‑3 (Neutrality for U.Types). Tech(U) MUST be discipline‑neutral with respect to the witness Contexts in its Concept‑Set row.
INV‑F5‑4 (senseFamily honesty). Role Description Role labels are behavioural masks; Role Description Status labels are states/badges; neither sneaks in the other senseFamily.
INV‑F5‑5 (Minimality). Labels MUST reflect the minimal generality supported by invariants (F.4 for Role Description, F.7 for U.Types).
INV-F5-6 (No Context tags). Names MUST NOT embed Context/edition tags; that information resides in SenseCells (Role Description) and Concept-Set rows (U.Types).
Reasoning primitives (judgement schemas, notation‑free)
Pure mental checks; no tools implied.
-
Context-idiom check (Role Description).
T in Context C ⊢ idiomatic(Tech(T), C)Reading: The Tech label reads like the Context’s own term of art. -
Plain‑safety check.
sense(T)=⟨C,σ⟩ ⊢ ¬broadens(Plain(T), σ)Reading: The Plain label explains without enlarging the sense. -
Neutral‑witness check (U.Type).
witnessContexts(U)=R ⊢ neutral(Tech(U), R)Reading: The Tech label doesn’t privilege one witness Context’s jargon. -
senseFamily form check (Role Description).
senseFamily(T)=Role ⊢ nounMask(Tech(T))senseFamily(T)=Status ⊢ stateForm(Tech(T))Reading: The morphology matches the senseFamily. -
Minimality proof.
inv(T) ⇒ nameScope(Tech(T)) ⊆ senseScope(sense(T))(Role Description)rowWitnesses(U) ⇒ nameScope(Tech(U)) ⊆ intersectionScope(row)(U.Type) Reading: The name’s scope is no wider than what the invariants/witnesses support. -
Collision ping.
similar(Tech(X), Tech(Y)) ∧ senseFamily(X)≠senseFamily(Y) ⊢ requireDisambiguatorOrSplitReading: If two labels nearly coincide across senseFamilies, either add a minimal disambiguator (Role Description only, within Context idiom) or split concepts.
Micro‑examples (illustrative)
Role Description (BPMN Context). Tech: Participant - Plain: actor in a workflow - senseFamily: Role (No “BPMN” in label; behaviour mask, not entitlement.)
Role Description (RBAC Context). Tech: Access Role - Plain: named permission set - senseFamily: Status (Deontic badge; not a behavioural mask.)
Role Description (ITIL Context). Tech: Service‑Level Objective - Plain: service target value - senseFamily: Status (Levelable family: SLO [target], SLI [indicator] handled in F.10/F.12 semantics, not in the label.)
U.Type (from Concept‑Set row: SOSA Observation, PROV Activity (result‑bearing), ML Metric Reading). Tech: Result - Plain: the produced value or record of a measurement/assessment (Neutral head noun when “Observation” is too Context‑coloured.)
U.Type (from OWL class, FCA concept, taxonomy nodes). Tech: Type Node - Plain: a node in a type hierarchy or lattice (Neutral across DL and FCA.)
Anti‑patterns & remedies
Worked examples
Each example shows the reasoning move that leads to the label; no procedures, no tooling.
Role Description labels (context-local)
(a) BPMN Context — behavioural mask vs node word
- SenseCell. ⟨BPMN 2.0, local‑sense: lane/pool actor that enacts tasks⟩
- Decision. Tech = Participant (Context idiom); Plain = actor in a workflow
- Why.
Participantis the mask; it is not the node (Task, Event). (R-RD-3, R-RD-4)
(b) RBAC Context — deontic badge
- SenseCell. ⟨NIST RBAC, local‑sense: named permission set assigned to sessions⟩
- Decision. Tech = Access Role; Plain = named permission set
- Why. It’s a Status, not a behavioural mask; deontic plane kept explicit. (R-RD-3, R-RD-6)
(c) ITIL Context — service target
- SenseCell. ⟨ITIL 4, local‑sense: target value for a service characteristic⟩
- Decision. Tech = Service‑Level Objective; Plain = service target value
- Why. Family will carry
… Level,… Indicatorin adjacent cards; avoids jargon drift. (R-RD-3, R-UT-7)
(d) IEC 61131-3 Context — run-time execution notion as Role Description?
- SenseCell. ⟨IEC 61131‑3, local‑sense: cyclic/event‑driven task unit⟩
- Decision. For a Role Description Status of a run, label Completed, Failed, Skipped (Context idiom); avoid naming the Work itself here.
- Why. The record of work is a U.Type elsewhere (A.15.1); Role Description in this Context carries badges of runs. (A.7 stance split; R-RD-3)
U.Type labels (from Concept‑Set rows)
Row R₁ (measurement‑sense): SOSA: Observation • ML practice: metric reading • Metrology: measurement result
- Witness Contexts. sensing; ML metrics; metrology
- Decision. U.Type Tech = Result; Plain = the produced value or record of a measurement/assessment
- Why. Neutral head noun covering all witnesses; avoids privileging SOSA’s Observation. (R‑UT‑1, R‑UT‑2)
Row R₂ (type‑structure): OWL: class / subclass • FCA: formal concept (node in concept lattice)
- Witness Contexts. DL; FCA
- Decision. U.Type Tech = Type Node; Plain = a node in a type hierarchy or lattice
- Why. Neutral over DL vs FCA; head‑modifier shape is stable. (R‑UT‑1, R‑UT‑4, R‑UT‑7)
Row R₃ (status family): ITIL: incident status • Safety cert.: assurance level • QA: readiness level
- Witness Contexts. services; assurance; QA
- Decision. Two U.Types: Assurance Level, Readiness Level (family‑coherent), plus Requirement Status (for normative clauses)
- Why. Separates families; preserves level vs status distinction. (R‑UT‑7, R‑UT‑3)
Mixed scenario (service acceptance over execution traces)
Contexts in play. IEC 61131‑3 (run), SOSA/SSN (sensing), ITIL 4 (services).
- Role Description (ITIL) — Tech: Service-Level Objective; Plain: service target value.
- U.Type (from R₁) — Tech: Result (to carry measured values).
- Role Description (IEC) — Tech: Completed / Failed (Status on a run).
- Name discipline payoff. The sentence “Compare IEC run Results against the ITIL Service‑Level Objective” is Context‑true without tags, because each label encodes its senseFamily and neutrality.
Migration notes (conceptual)
-
When a Context changes edition. Names stay; the SenseCell shifts to the new edition. Only change a label if the sense has changed; then split the card rather than mutate the name. (INV‑F5‑2, R‑RD‑7)
-
When a Concept‑Set row gains a new witness Context. Re‑ask neutrality: if the Tech label now privileges a Context, refactor to a more neutral head (e.g.,
Observation→Result). (R‑UT‑1, R‑UT‑2) -
Collision emergence. If a Role card and a Status card converge phonetically (
ApprovervsApproved), keep both but add the minimal morphological disambiguator only where the Context idiom demands it (Reviewer Role). (R-RD-3) -
Family hygiene. As families grow, keep parallel shapes (
… Level,… Status). If a legacy label breaks shape, add a Plain alias for teaching; don’t rename the Tech label without Concept‑Set pressure. (R‑UT‑7, R‑UT‑6) -
Language variants. Non-English canons keep their own Tech labels (idiomatic in that Context); the Plain label remains English in FPF unless the Part mandates localisation. (R-RD-4, INV-F5-1)
-
Symbol addition. You may add a symbolic alias later for readers of formal sections; never promote a symbol to the Tech label. (R‑UT‑8)
-
De‑jargonising the Plain label. If readers stumble, adjust Plain wording only; do not widen the sense. (Plain‑safety check)
-
Deprecation path. If a label must change, publish the new Tech + Plain, keep the old as an alias in the registry (F.13), and leave the reasoning trail in the Concept‑Set row that forced the rename. (R‑UT‑6, F.13 linkage)
Acceptance tests (SCR/RSCR — concept‑level)
Static conformance (SCR)
- SCR-F5-S01 (Two registers). Every Role Description card and U.Type has both Tech and Plain labels; any symbol is marked alias.
- SCR-F5-S02 (Context fidelity for Role Descriptions). For any Role Description
Tin ContextC,Tech(T)appears idiomatic in C;Plain(T)does not broadensense(T). - SCR‑F5‑S03 (Neutrality for U.Types). For any U.Type
U, its Tech label does not coincide with a witness Context’s proprietary term when alternatives exist. - SCR‑F5‑S04 (senseFamily morphology). Role labels are countable nouns; Status labels are state nouns / adjectival‑noun forms.
- SCR-F5-S05 (Minimal generality). For each label, there exists a reading where the name’s scope ⊆ invariant scope (Role Description) or ⊆ row intersection (U.Type).
- SCR‑F5‑S06 (No Context tags). No label embeds Context or edition strings.
- SCR‑F5‑S07 (Family coherence). Families that claim parity (e.g., Levels) show parallel shapes across members.
Regression checks (RSCR)
- RSCR‑F5‑E01 (Witness drift). When a Concept‑Set row gains/removes a witness Context, re‑evaluate neutrality; if violated, refactor the Tech label to a more neutral head.
- RSCR-F5-E02 (Edition churn). When a Context updates, Role Description labels remain stable unless the sense changed; if sense changed, split the card and keep aliases in F.13.
- RSCR‑F5‑E03 (Collision guard). If two labels become confusable across senseFamilies, either add the minimal disambiguator (Role Description only, Context‑idiom) or separate the concepts.
- RSCR‑F5‑E04 (Rhetoric creep). Periodic skim for decorative adjectives; remove them unless they encode formal levels or families.
Didactic distillation (60‑second recap)
Name what is already true. Role Description labels speak like the Context (Tech) and teach without widening (Plain). U.Type labels speak like nobody’s Context: neutral head nouns at minimal generality, shaped in parallel families. Never glue Context tags or editions into names. Never mix senseFamilies in morphology. If witnesses change, reconsider neutrality; if senses split, split names, don’t stretch them. The label is the last step of understanding, not the first.
F.5:End
Role Assignment & Enactment Cycle (Six-Step)
“Assign only what you can later justify by local meaning and observable facts.” Status. Architectural pattern. Depends on. E.10.D1 Lexical Discipline for “Context” (D.CTX); F.1 Domain‑Family Landscape Survey; F.2 Term Harvesting & Normalisation; F.3 Intra‑Context Sense Clustering; F.4 Role Description; F.5 Naming Discipline. Coordinates with. F.7 Concept‑Set Table; F.8 Mint or Reuse?; F.9 Alignment & Bridge; F.10 Epistemic Status Mapping; A.2.1 U.RoleAssignment; A.15.* Role–Method–Work alignment; KD‑CAL (observations, results). Aliases (informative). Assign-and-verify mental loop; six-step role cycle.
Intent & applicability
Intent. Provide a minimal set of reasoning moves that turn a Role Description (F.4), anchored in a SenseCell, into a sound claim about a concrete holder—either a Role assignment or a Status assertion—with local meaning (within one context) and a clear path to evidence (KD‑CAL). These are mental moves, not workflows or tools.
Applicability. Any time you (a) bind a system to a Role mask, or (b) assert a Status about a system/artefact, inside one U.BoundedContext. Use when drafting models, reconciling vocabularies, or reading external canons.
Non‑goals. No process charts, no registries, no governance roles. No Cross‑context equivalences (that is F.9). No operational runbooks—only conceptual judgements.
Problem frame
Without disciplined Role Assignment & Enactment reasoning:
- Sense‑family slippage. Behavioural Roles and deontic/epistemic Statuses get mixed (keep them on distinct senseFamilies, per F.0.1).
- Context drift. A label is lifted from one canon and used as if universal.
- Evidence vacuum. Assignments are asserted with no thought to what could show they hold.
- Time blur. Design‑time masks are judged by run‑time traces (or vice versa).
- Name inflation. New labels are minted to patch noisy assignments.
Forces
Minimal vocabulary (this pattern only)
- Context — shorthand for U.BoundedContext (per E.10.D1).
- SenseCell σ — address ⟨Context C × Local‑Sense ℓ⟩ per F.3. (Informative: we write simply σ; it already contains C.)
- Role Description — a Role or Status card anchored in a SenseCell (F.4).
- Holder — the concrete entity admitted by the Role or Status Template; when the holder is semio-side, name the kind named by value, such as system, episteme, publication, or carrier.
- Subject — the referent of a Status assertion; determined by the Template (may or may not be the Holder).
- subject_of(τ, H) — function yielding the Subject for Status assertions given Template τ (and, if needed, candidate H).
- Eligibility — conditions on the Holder that must hold to apply the Template (F.4 invariants).
- Window — the DesignRunTag or interval relevant to the claim (DesignRunTag; instant or period).
- Evidence shape — the Observation/Result/Procedure/Feature pattern (KD‑CAL) that could confirm/refute the claim in its Context.
Pre‑conditions (lightweight)
- The Context is in your F.1 cut; Context ≡ U.BoundedContext.
- The Template references a SenseCell in that Context (F.4).
- The Holder is identified (by type or instance) without relying on Cross‑context mappings.
The six moves (judgement schemas, notation‑free)
Each move is a thought you can justify, expressed as premises ⊢ conclusion.
All moves are context-local and side-effect free: they assert knowledge; they do not modify the project entities they describe.
M1 - Locate — Fix the Context and the Template
Form.
Template τ anchored at SenseCell σ≡⟨C, ℓ⟩ ⊢ address(τ) = σ
Reading. Name the Context and the exact SenseCell that gives local meaning to the Template. Note. This forbids “floating” Roles or Statuses and prevents Context drift.
M2 - Stance — Respect DesignRunTag
Form.
stance(C)=s ∧ stance(τ)∈{s, both} ⊢ compatible_stance(τ,C)
Reading. The Template’s DesignRunTag is compatible with its Context’s stance (design vs run). Note. Guards against judging a design-mask by run-traces or judging a run-status by design-time descriptions.
M3 - Qualify — Check Holder eligibility
Form.
Holder H ∧ eligibility(τ) holds in C ⊢ eligible(H, τ @ C)
Reading. Given the Template’s eligibility predicates (F.4), the Holder qualifies to be bound/assessed in this Context. Note. Typical predicates: type membership, capability present, scope fit; all context‑local.
M4 - Bind/Assert — Make the Role Assignment / Status claim
Role assignment (behavioural mask).
eligible(H, τ @ C) ∧ window W ⊢ plays_role(H, τ : C) @ W
Status assertion (epistemic/deontic state).
eligible(H, τ @ C) ∧ window W ∧ S = subject_of(τ, H) ⊢ has_status(S, τ : C) @ W
Reading. Assert either a Role binding or a Status about the appropriate subject (system, artefact, service), within a Window. Note. The subject of a Status may differ from the Role holder (e.g., a service has SLO status; a team plays a Role).
M5 - Evidence — Shape what would make it true/false
Form.
plays_role/has_status κ in C ⊢ evidence_shape(κ) = Σ(C)
Reading. From the Context’s semantics, state the Observation/Result pattern (KD‑CAL) that would confirm or refute the claim (what, where, when). Note. This is not an execution plan: it is a conceptual test tied to the Context’s vocabulary.
M6 - Conclude — Issue a defensible verdict with confidence
Form.
evidence E fits Σ(C) ∧ invariants(τ) hold ⊢ holds(κ) with confidence γ ∈ [0,1]
Reading. If observed facts match the expected evidence shape and Template invariants stand, the assignment/status claim holds with some confidence (cf. B.3). Note. Confidence combines measurement adequacy (KD‑CAL) with any Context‑specific uncertainty; no Cross‑context boost is implied.
Autonomy admission (Green‑Gate) and ledger
- Before enactment: If the Method step lists
requiresAutonomyBudget, the enactingU.RoleAssignmentMUST pass the Autonomy Green‑Gate: (i) active/enactable RSG state, (ii) budget tokens/envelope remain in the declared Γ_time window, (iii) all guardspass. - On enactment: Write an AutonomyLedgerEntry attached to the
U.Work, with deltas and guard verdicts. - On depletion: Block further autonomy‑gated steps; emit a DepletionNotice (SpeechAct) and follow the
OverrideProtocolRef. - SoD: Enforce
⊥between autonomy consumer Role and override caller Role.
Core invariants (normative)
- Locality. Every judgement is about one context. No Cross‑context equivalence is presumed or implied (that is F.9’s remit).
- Strict splits. (a) senseFamily split: Role ≠ Status (per F.0.1); (b) stance split: design ≠ run (A.7). Each judgement names its senseFamily and stance.
- Eligibility before claim. No binding or status without eligible(H, τ @ C).
- Window honesty. Every claim states or inherits a Window consistent with
stance(τ)andstance(C). - Evidence‑ability. Every claim must admit at least one evidence shape Σ in its Context (KD‑CAL compatible).
- Name discipline. Labels used in judgements follow F.5 (Tech/Plain registers; no Context tags inside names).
Reasoning aides (didactic)
- Context‑prefix speech. Think and speak with the Context prefix when ambiguity lurks: participant (BPMN), role (RBAC), activity (PROV).
- Window templates. Prefer short phrases: “during release‑R3 cutover”, “for the Q3 service period”, “at 2025‑08‑12T14:30Z”.
- Evidence as shape words. Result of Observation of ⟨Characteristic⟩ on ⟨Feature⟩ by ⟨Procedure⟩ within W—not a measurement script.
“Assign only what you can later justify by local meaning and observable facts.”
Anti‑patterns & remedies
Worked examples
Each example is a context-local assignment/status reasoning trace using M1…M6. cross-context relations, if any, are noted as optional bridges (F.9) but not relied upon.
Service availability status (ITIL + KD‑CAL)
Context. ITIL 4 (services family; design)
*Template (Status). SLO:availability≥99.9% anchored at SenseCell ⟨ITIL4, “SLO (availability)”⟩.
M1 Locate. address(τ)=⟨ITIL4, SLO(availability)⟩
M2 Stance. stance(ITIL4)=design, stance(τ)=design ⇒ compatible_stance(τ, ITIL4)
M3 Qualify. eligible(Service S, τ@ITIL4) if S is a published service with declared availability target.
M4 Assert. has_status(S, τ:ITIL4) @ W where W = Q1‑2025 (the evaluation period).
M5 Evidence shape Σ(ITIL4). Observation of availability characteristic (MM‑CHR) for S, produced by a Procedure that samples uptime and computes the Result as ratio over W. (KD‑CAL/MM‑CHR terms only; no tool implied.)
M6 Conclude. If Results across W give ≥ 99.9 % with adequate sampling and declared exclusions applied, holds( has_status(S, τ:ITIL4) @ W ) with γ≈0.9.
Optional bridge. If uptime sensing vocabulary is expressed in SOSA/SSN, an F.9 Bridge may map ITIL’s “availability metric” to ObservableProperty(availability) with a declared CL penalty; the assignment/status claim itself remains ITIL-local.
Behavioural operator role (IEC 61131‑3 + Enactment)
Context. IEC 61131‑3 (control languages; run)
*Template (Role). Control‑Task‑Executor anchored at SenseCell ⟨IEC61131‑3, “task executes program”⟩.
M1 Locate. address(τ)=⟨IEC61131‑3, task‑execution⟩
M2 Stance. stance(IEC61131‑3)=run, stance(τ)=run ⇒ compatible.
M3 Qualify. Holder PLC_7 qualifies if program P is loaded on it and task T schedules it.
M4 Bind. plays_role(PLC_7, τ:IEC) @ W where W = [08:00, 18:00] 2025‑06‑05.
M5 Evidence shape Σ(IEC). Observation of task schedule and program invocation logs as Results for features T/P during W; presence of expected cyclic/event‑driven triggers.
M6 Conclude. If Results show the expected executions with no missed cycles beyond tolerance, holds( plays_role(PLC_7, τ:IEC) @ W ) with γ≈0.8.
Trip-wire. Do not restate this as “PROV Activity” without F.9; keep the assignment/status claim IEC-local.
Dataset accuracy status (ISO/IEC 25024 + KD‑CAL)
Context. ISO/IEC 25024 (data‑quality; design)
*Template (Status). accuracy≥0.98 anchored at SenseCell ⟨ISO25024, “data accuracy”⟩.
M1 Locate. address(τ)=⟨ISO25024, data‑accuracy⟩
M2 Stance. stance(Context)=design, stance(τ)=design ⇒ compatible.
M3 Qualify. Subject Dataset D has a defined reference set and sampling protocol.
M4 Assert. has_status(D, τ:ISO25024) @ W where W = “snapshot v2025‑04”.
M5 Evidence shape Σ(ISO25024). Observation of correctness of sampled records vs reference, Procedure per standard, Result as proportion correct with confidence interval.
M6 Conclude. If CI lower bound ≥ 0.98, holds( has_status(D, τ) @ W ) with γ≈0.85.
Access vs behavioural: two claims, two Contexts
Contexts. NIST RBAC (access; design) and BPMN 2.0 (workflow; design).
Templates. DB‑Admin (RBAC status) vs Participant (BPMN role).
RBAC claim (Status).
M1…M6 yield has_status(User U, RBAC:DB‑Admin) @ W_dir with Σ(RBAC) = Observation of assignment state in the access model at time W_dir.
BPMN claim (Role).
M1…M6 yield plays_role(Team T, BPMN:Participant) @ W_proc with Σ(BPMN) = Observation that lanes/pools enact tasks during W_proc.
Lesson. Two separate context-local claims — one Status assertion and one Role assignment; no implication that holding RBAC status entails playing the BPMN Role.
Relations (with other patterns)
Builds on: F.1 Domain‑Family Landscape Survey (Contexts fixed); F.2 Term Harvesting (local terms); F.3 Intra‑Context Clustering (SenseCells); F.4 Role Description (invariants, stance); F.5 Naming Discipline (labels).
Constrains: F.7 (Concept-Set Table): rows reference SenseCells; Role Description cards point to those rows but never create cross-context identity. F.8 Mint or Reuse? Uses outcomes of Role or Status claims to decide: a new Role or Status label only when existing Templates cannot express the claim with eligibility/Window adjustments. F.9 (Alignment & Bridge): any relation across Contexts is declared there; Role Description cards remain context-local. F.10 Epistemic Status Mapping. Consumes M6 confidences γ and Σ‑adequacy to roll up assurance.
Coordinates with. MM‑CHR (characteristics, scales) wherever Characteristic/Scale is used in evidence shapes.
Used by. Patterns (Part C) to anchor their examples: Sys‑CAL (execution/actuation roles), KD‑CAL (measurement statuses), Method‑CAL (execution claims for Methods/MethodDescription), Kind-CAL (typing claims remain outside Role Assignment & Enactment, but may inform eligibility predicates).
Migration notes (conceptual)
- Template refactor. If a Template’s invariants change, claims remain as‑is; re‑evaluate M6 on demand. Do not silently rewrite past claims.
- Edition updates. When a Context’s canon updates, treat it as a new Context if sense shifts; Claims anchored to the old Context stay valid for their Window.
- Name revisions. Renaming per F.5 does not alter address(τ)=⟨Context, SenseCell⟩; claims reference the address, not lexical form.
- Bridge introduction. Adding an F.9 Bridge never upgrades an existing Role or Status claim; at most it enables separate translations with declared loss.
- From exception to Status. If recurring exceptions to a Role appear, prefer minting a Status Template that marks the exception rather than proliferating Roles.
- Window tightening. If evidence shows drift, narrow future Windows; past claims remain tied to their original Windows.
Acceptance tests (SCR/RSCR — concept‑level)
Static conformance (SCR)
- SCR-F6-S01 (Local address). Every assignment/status claim states
address(τ)=σwhereσis a SenseCell (per F.3); no bare labels. - SCR‑F6‑S02 (SenseFamily clarity). Each claim is typed Role or Status, never both; subjects are of the correct kind. Claim records both senseFamily and stance explicitly or by inheritance.
- SCR‑F6‑S03 (Stance compatibility).
stance(Context)andstance(τ)are compatible byDesignRunTag. - SCR‑F6‑S04 (Eligibility first). For each claim,
eligible(H, τ@context)is derivable prior to assertion. - SCR‑F6‑S05 (Window explicit). Each claim has a Window (explicit or inherited) consistent with stance.
- SCR‑F6‑S06 (Evidence‑ability). For each claim, an evidence shape Σ(Context) is stated using only that Context’s vocabulary plus KD‑CAL/MM‑CHR primitives.
- SCR‑F6‑S07 (Locality guard). No Cross‑context terms appear inside a claim; any reference to other Contexts is flagged as F.9 Bridge (informative), not used to justify the claim.
Regression (RSCR)
- RSCR‑F6‑E01 (Edition stability). Adding a new edition/Context does not mutate existing claims’ Contexts or Windows.
- RSCR‑F6‑E02 (Name stability). Changing labels per F.5 leaves addresses and conclusions invariant.
- RSCR‑F6‑E03 (Bridge neutrality). Introducing or revising an F.9 Bridge does not auto‑flip claim truth values; at most it enables explicit translations with loss notes.
- RSCR‑F6‑E04 (Evidence refresh). When KD‑CAL procedures or MM‑CHR characteristic scales change, only γ is re‑evaluated; the claim’s semantics remain.
Didactic distillation (60‑second recap)
Six moves. (M1) Locate the Context & SenseCell; (M2) check stance; (M3) test eligibility; (M4) bind/assert with a Window; (M5) sketch the evidence shape in that Context; (M6) conclude with confidence γ. Two iron rules. Keep it context‑local; keep Role and Status on their senseFamily. Pay-off. Assignment/status claims become small, auditable thoughts: easy to teach, easy to check, and easy to relate—later—via explicit Bridges when you truly must step between Contexts.
F.6:End
Concept‑Set Table
“Show one thing across Contexts—only where explicit bridges allow it.”
Status. Architectural pattern.
Depends on. E.10.D1 Lexical Discipline for ‘Context’ (Context ≡ U.BoundedContext); F.0.1 senseFamily (normative); F.1 Domain‑Family Landscape Survey; F.2 Term Harvesting; F.3 Intra‑Context Sense Clustering (SenseCells); F.5 Naming Discipline; F.9 Alignment & Bridge Across Contexts.
Coordinates with. F.4 Role Description; F.6 Role Assignment & Enactment Cycle (Six-Step); Part C patterns (for examples), MM‑CHR (for Characteristic); A.6.9 (RPR‑XCTX for repairing umbrella cross‑Context sameness/alignment prose before it justifies rows).
Aliases (informative). Concept‑Set table, comparison grid.
Intent & applicability
Intent. Provide a single, didactic page where each row presents one Concept‑Set—a set of SenseCells from different Contexts that we are licensed (by explicit Bridges) to treat as “the same for a stated scope”. Columns are Contexts; cells carry local labels. The table does not invent equivalences: it summarises already declared F.9 Bridges, exposing scope, losses, and counter‑examples at a glance.
Applicability. Use whenever cross-context reading is necessary (naming U.Types, teaching contrasts, assignment/enactment-adjacent terminology). It is a reading lens, not a data model: notation-free, governance-free, Context-loyal.
Non‑goals. No hidden merges. No “global terms”. No workflows or tool schemas. The table is a conceptual display of licensed sameness and honest non‑sameness.
Problem frame
Without a disciplined Cross‑context view:
- Silent equivalence. Readers assume sameness by name alone (e.g., process).
- Loss denial. Mappings hide what is dropped (DesignRunTag, units, agency).
- Name inflation. New U.Types are coined to avoid facing heterogeneity.
- Cognitive scatter. Concepts drift across documents without one compact, teachable “where‑what‑how‑same” view.
Forces
Core idea (didactic)
A Concept‑Set is a finite set of addresses
$$ \text{CS}={\langle \text{Context}_i,\ \text{SenseCell}i\rangle}{i=1..n} $$
that FPF treats as one for a declared scope because there exist F.9 Bridges connecting these SenseCells pairwise (directly or via a short chain) with congruence level $\text{CL}$ above a threshold suitable for that scope. The table row shows:
- FPF Label (Tech/Plain) — the didactic, FPF‑level name chosen per F.5.
- Row Scope — where “being one” is safe (e.g., Naming-only, assignment/enactment-eligibility, KD-CAL metric, Type‑structure).
- Row CL(min) — the minimum CL of the Bridges that justify the row.
- Context columns — each cell: the local label + (optional) short cue.
- Rationale (one line) — why sameness is warranted for this scope.
- Counter‑examples (one line) — where/why sameness breaks.
Memory hook. A Concept‑Set row is a promise: “You may read across these Contexts this far—and no farther.”
Minimal vocabulary (this pattern only)
- Context — shorthand for
U.BoundedContext(per E.10.D1). - senseFamily — referenced from F.0.1; not redefined here; used to type rows and to require uniformity within a row.
- SenseCell — a (Context × Local‑Sense) address from F.3.
- Bridge (F.9) — an explicit, declarative Cross‑context mapping with a congruence level CL and loss note.
- Characteristic (MM‑CHR) — measurable comparandum defined in MM‑CHR; may be referenced in Measurement/KD‑metric rows; do not use “axis” only as a euphemism.
- Concept‑Set (row) — a licensed sameness across Contexts, bounded by Row Scope and Row CL(min).
- Contrast row — a non‑sameness row: same surface across Contexts with no sufficient Bridges; teaches difference, not unity.
The table (conceptual layout)
One page. Fixed column order by Context. Each row fits in five lines max.
Reading rules (didactic):
- Cells are local. A cell is not a translation; it is the Context’s own label for its SenseCell.
- Scope is king. The FPF label only licenses sameness within its Row Scope. Outside that scope, treat cells as different.
- Row CL(min) governs trust. Lower CL ⇒ narrower applicability; never up‑scope a row without revisiting Bridges.
- Rationale & counter‑examples are obligatory one‑liners; if you need paragraphs, you need an F.9 walkthrough, not a row.
Didactic name rationale “Giants' table’” that alludes to standing on the shoulders of giants: each row explicitly leans on authoritative context of meaning (U.BoundedContext) established by prior disciplines and not imagined. It does not mean a physically large table; the name signals epistemic humility and traceable reliance on those sources. "We are like dwarfs on the shoulders of giants, so that we can see more than they, and things at a greater distance, not by virtue of any sharpness of sight on our part, or any physical distinction, but because we are carried high and raised up by their giant size." by Bernard of Chartres , d. c.1130, French philosopher.
Conceptual construction (thought moves, not workflow)
The table is derived from earlier patterns; it creates nothing new.
- Sourcing. Candidate cells come only from SenseCells (F.3).
- Licensing. A row exists iff the relevant Bridges (F.9) already justify sameness at the chosen Row Scope.
- Bounding. Prefer 2–4 Contexts per row (parsimony); add more only if each adds a distinct necessity for the sameness claim.
- Typing. A row is typed by senseFamily: Role, Status, Type‑structure, Measurement, etc. Do not mix senseFamilies in one row.
- Temporal honesty. A row’s cells must share compatible DesignRunTag; if not, either split into two rows or mark a contrast row.
Invariants (normative)
- Context‑loyal cells. Every non‑empty cell is a SenseCell address; no minted paraphrases.
- Bridge sufficiency. For a Concept‑Set row, every pair of filled cells is connected by an F.9 Bridge path whose bottleneck CL ≥ Row CL(min) printed for the row.
- Scope declaration. Each row MUST declare a Row Scope chosen from a small controlled set (e.g., Naming-only, assignment/enactment-eligibility, KD-metric, Type-structure).
- senseFamily uniformity. All cells in a row belong to the same senseFamily (Role or Status or Type-structure or Measurement…).
- Temporal compatibility. Either all cells share the same stance, or the row is a contrast row (no sameness claim).
- Loss disclosure. If any Bridge in the row has a loss note, the row MUST include a counter‑example that illustrates that loss in one line.
- No stealth expansion. Adding a new cell to a row MUST NOT lower the printed Row CL(min) without updating Row Scope or splitting the row.
- Parsimony. A row with only one filled cell is forbidden (that would be local talk, not a Cross‑context concept).
- Didactic bound. A row that cannot be read in ≤ 30 seconds violates didactic primacy and must be split.
Micro‑illustrations (safe patterns)
Illustrative only; these presume corresponding F.9 Bridges exist with stated CL and losses.
(a) Subtyping across type‑formalisms (Type‑structure row)
(b) “Observation result value” (Measurement row)
(c) Contrast row: “process” (no sameness)
Anti‑patterns & remedies
Worked examples
Each example gives a row (compact), then a reading explaining scope and limits. All sameness claims presuppose suitable F.9 Bridges with the stated CL.
Behavioural actor across Contexts (naming‑only)
Reading. The row licenses a glossary‑level sameness for didactic prose (“the actor”). It does not license modelling identity or inference across Contexts.
Execution occurrence (assignment/enactment-eligibility)
Reading. Safe to use as the run-time occurrence that U.RoleEnactment points to when we say “this Work was performed under an assignment”. Not safe to equate all PROV Activities with all PLC task runs for analytics.
Result value as KD‑metric (measurement)
Reading. Licences metric tables that join observations to service targets; warns that composite KPIs may violate unit fidelity.
Subtype relation (type‑structure)
Contrast: “role” (access vs behaviour)
Reading. This row teaches difference; it deliberately does not license sameness.
Reasoning primitives (judgement schemas, notation‑free)
All judgements are pure (no side effects). “Contexts” are
U.BoundedContext.SC(C)denotes a SenseCell in ContextC.CL(X↔Y)is the congruence level of the best Bridge path (F.9) between SenseCellsXandY(bottleneck along that path).
Row licensing
Form.
S = {SC(C₁), …, SC(Cₙ)}, Scope = s, τ(s) = requiredCL ⊢ licensable(S,s) ⇔ (∀ i<j: CL(SC(Cᵢ)↔SC(Cⱼ)) ≥ requiredCL ∧ senseFamily (S) is uniform ∧ stance(S) compatible)
Reading. A set of cells licenses a row of scope s iff every pair is bridged at or above the required CL for that scope, all cells sit in the same senseFamily, and DesignRunTag is compatible.
Bottleneck CL for a row
Form.
RowCL(S) = min_{i<j} CL(SC(Cᵢ)↔SC(Cⱼ))
Reading. The row’s CL is the minimum congruence level across all pairs (the weakest link).
Scope guard
Form.
licensable(S,s) ∧ s ⊑ s' ⊢ licensable(S,s') only if RowCL(S) ≥ τ(s')
Reading. You may tighten scope (use the row for a higher-scope purpose) only if the row’s CL meets the higher threshold for that scope.
Contrast decision
Form.
(∃ i<j: CL(SC(Cᵢ)↔SC(Cⱼ)) < τ(Naming‑only)) ⊢ publish‑contrast(S)
Reading. If even Naming‑only cannot be licensed, publish a contrast row instead of forcing sameness.
Row extension guard
Form.
licensable(S,s) ∧ add SC(Cₖ) ⊢ licensable(S∪{SC(Cₖ)}, s) iff ∀ i: CL(SC(Cᵢ)↔SC(Cₖ)) ≥ τ(s)
Reading. You may add a new cell only if it bridges to every existing cell at the row’s scope.
Loss disclosure obligation
Form.
licensable(S,s) ∧ (∃ i<j: lossNote on Bridge(SC(Cᵢ),SC(Cⱼ))) ⊢ row must carry ≥1 counter‑example
Reading. Any loss note on any supporting Bridge obliges the row to include a counter‑example one‑liner.
Relations (with other patterns)
Builds on: F.1 Contexts fixed → defines the column set; F.2 Harvest → supplies harvested terms; F.3 SenseCells → provide cell addresses; F.5 Naming Discipline → provides the two‑register FPF labels; F.9 Bridges → justify each row.
Constrains: F.4 Role Description — when a template cites an FPF label from the table, it inherits the Row Scope; no template may claim semantics beyond the row’s licence. F.6 Role Assignment & Enactment Cycle (Six-Step) — Move M‑4 (“choose label”) must reference a row if it wants Cross‑context reading.
Used by. Part C patterns for didactic alignment pages; Part B trust calculus (B.3) may consume Row CL(min) when computing translation penalties.
Migration notes (conceptual)
- Bridge update. If any supporting Bridge’s CL changes, recompute Row CL(min). If it drops below the printed value, either lower Row Scope, split the row, or retire it.
- New Context appears. Do not auto‑expand rows. Test with 12.5; add only if it brings a distinct necessity.
- Sense revision inside a Context. If a SenseCell splits (F.3), decide which child cell (if any) remains in the row; the rest may require new rows or a contrast.
- Scope promotion. To use a row for a higher-scope purpose (e.g., from Naming-only to assignment/enactment-eligibility), first ensure Row CL(min) ≥ τ(new scope); otherwise construct new Bridges or decline promotion.
- Deprecation. If a row no longer meets its invariant, mark its FPF label as retired in F.5 and point to successor rows (if any).
- Edition churn. When a Context is superseded (F.1), either keep the cell (if semantics stable) or treat the successor as a new Context and re‑evaluate licensability.
Acceptance tests (SCR/RSCR — concept‑level)
Static conformance checks (SCR)
- SCR‑F7‑S01 (Context‑loyal cells). Every non‑empty cell references an existing SenseCell (F.3) in a declared Context (F.1).
- SCR‑F7‑S02 (Closure & bottleneck). For each Concept‑Set row, every pair of cells has a Bridge path with CL ≥ Row CL(min) printed; Row CL(min) equals the minimum pairwise CL.
- SCR‑F7‑S03 (Typed & scoped). Each row declares a Row Scope from the controlled set and is senseFamily‑uniform (Role or Status or Measurement or Type‑structure…).
- SCR‑F7‑S04 (Temporal compatibility). Non‑contrast rows have compatible DesignRunTag across cells.
- SCR‑F7‑S05 (Loss disclosure). If any supporting Bridge has a recorded loss, the row includes ≥1 counter‑example line.
- SCR‑F7‑S06 (Parsimony). Rows contain 2–4 Contexts unless a one‑line necessity is stated for each extra Context.
Regression checks (RSCR)
- RSCR‑F7‑E01 (Bridge drift). After any Bridge change (F.9), recompute Row CL(min); flag rows whose scope is now overstated.
- RSCR‑F7‑E02 (Sense split). After a SenseCell splits (F.3), ensure rows referencing it either pick a child cell or retire.
- RSCR‑F7‑E03 (Scope integrity). No consumer pattern uses a row outside its declared Row Scope.
- RSCR‑F7‑E04 (No stealth growth). Additions of cells never lower Row CL(min) silently; if they do, either split the row or reduce scope.
Didactic distillation (60‑second teaching script)
“A Concept-Set row shows one idea across Contexts—but only where explicit Bridges license it. Columns are Contexts; cells are their own labels. The row prints a scope (‘Naming-only’, ‘assignment/enactment-eligibility’, ‘Type-structure’, ‘KD-metric’) and the weakest CL that justifies reading across. A one‑line rationale says why sameness is safe here; a counter‑example warns where it breaks. Keep rows small (2–4 Contexts), typed (don’t mix senseFamilies), and temporally honest (design vs run stance). If Bridges don’t suffice, publish a contrast row instead. The table doesn’t invent meaning; it summarises licensed sameness so readers can cross disciplines without smuggling assumptions.”
F.7:End
Mint or Reuse? (U.Type vs Concept-Set vs Role Description vs Alias)
“Name only what thinking requires, and reuse everything else.”
Status. Architectural pattern. Depends on. E.10.D1 Lexical Discipline for “Context” (D.CTX); A.7 Strict Distinction; A.11 Ontological Parsimony; A.8 Universal Core. Coordinates with. F.1 Contexts (Contexts); F.2 Harvest; F.3 SenseCells; F.4 Role Description; F.5 Naming Discipline; F.7 Concept‑Set Table; F.9 Alignment & Bridge. Aliases (informative). Mint‑vs‑Reuse gate; Naming governor.
Intent & applicability
Intent. Provide a minimal, conceptual decision lattice that answers, for any modelling need:
“Do I reuse an existing label, add an alias, reference a Concept‑Set row, define a Role Description, or mint a new U.Type?”
The lattice enforces locality of meaning (Contexts), senseFamily separation (A.7), and parsimony (A.11) while remaining didactically simple.
Applicability. Use whenever a new name seems “needed” in any FPF pattern thread (Role Assignment & Enactment, Sys-CAL, KD-CAL, Kind-CAL, Method-CAL, LCA-CAL…).
Non‑goals. No workflows, no roles, no storage. This is thinking discipline, not process guidance.
Problem frame
Modellers tend to mint names when they actually need reuse, aliasing, or explicit Cross‑context reading. Consequences:
- Name inflation. Parallel labels for the same idea across Contexts.
- senseFamily mixing. Behavioural Role names that smuggle in deontic Status or measurement talk.
- Hidden bridges. Cross‑context sameness is implied by look‑alike words rather than declared (F.9).
- Kernel sprawl. New U.Types appear to plaster over local vocabulary gaps.
Forces
Minimal vocabulary (used in this pattern only)
- Context —
U.BoundedContext(per D.CTX). - SenseCell — address of a local sense produced by F.3 (one context × one clustered sense).
- Concept‑Set row — a licensed Cross‑context reading (F.7) of cells in one senseFamily with a declared Row Scope and Row CL(min).
- senseFamily — as defined in F.0.1; here used as the typed discriminator for rows restricted to {Role | Status | Measurement | Type‑structure | Method | Execution}.
- Role Description — a Role or Status template anchored to a single SenseCell (F.4).
- Alias — an additional label for an existing FPF label (within F.5), no new semantics.
- CL threshold τ(scope) — the minimum congruence level needed for a row’s scope (e.g., τ(Naming-only) < τ(Assignment-eligibility) < τ(Type-structure)).
The decision lattice (conceptual, notation‑free)
Read top‑to‑bottom; the first satisfied branch decides. At every step, state the senseFamily (Role, Status, Measurement, Type-structure, Method, or Execution) before you proceed.
Q0 — What is the senseFamily of your need?
- If uncertain, return to F.1/F.3: stabilise the Context(s) and the local sense.
- If mixed, split the need: one decision per senseFamily (A.7).
Q1 — Is there a single Context whose SenseCell already expresses it?
-
Yes → Reuse the SenseCell’s label inside that Context.
- If you need assignable behaviour or deontics on that sense: define a Role Description anchored to that SenseCell (F.4).
-
No → go to Q2.
Example (engineer). You want “task execution” in control software. In
IEC 61131‑3there is a clear SenseCell for task execution. Reuse that label; if you need responsibilities (“who monitors runs”), define a Role Description anchored to this SenseCell.
Q2 — Do you need to read across Contexts (same senseFamily)?
-
No → stay within one context; if your desire is merely a nicer label, consider an Alias (Q3).
-
Yes → check F.7 for a Concept‑Set row covering your cells in this senseFamily with adequate Row Scope and Row CL(min).
- Found & sufficient → Reuse the row’s FPF label at that scope.
- Not found or insufficient → either (a) publish a contrast (teach difference), or (b) propose a new row but only after F.9 Bridges exist at τ(scope).
Example (manager). You want one label for the actor in workflow and provenance prose. F.7 has a Naming‑only row mapping BPMN Participant ↔ PROV Agent at CL = 2. Reuse “actor” at Naming‑only scope; do not infer identity in models.
Q3 — Is this only a wording preference for an existing FPF label?
- Yes → add an Alias in F.5 (Tech register and/or Plain register), no semantics changed.
- No → go to Q4.
Example (researcher). You prefer “is‑a” to “subclass‑of” in Type pages. That is an Alias for the same concept; no new row, no new U.Type.
Q4 — Does your need recur across Contexts in a way not captured by current rows, with Bridges already available at the required CL?
- Yes → propose a new Concept‑Set row (F.7): small (2–4 Contexts), one senseFamily, declare Row Scope and Row CL(min), include a counter‑example if any Bridge has loss notes.
- No → go to Q5.
Example (engineer). You repeatedly compare runtime occurrence in PROV with PLC task runs. F.9 Bridges exist at CL = 2. Propose row “execution-occurrence” at assignment/enactment-eligibility scope (not Type-structure).
Q5 — Are you describing a kernel‑level notion missing from the catalogue, not reducible to existing rows or Role Descriptions, and present across ≥ 3 domain families (A.8)?
- Yes → propose a new U.Type (rare). Supply: (i) the minimal intensional definition; (ii) cross‑family evidence (≥ 3 Contexts, distinct families); (iii) how it doesn’t duplicate an existing U.Type.
- No → you do not mint a new type. Re‑express the need in terms of Context reuse, row reuse, Alias, or a Role Description.
Example (researcher). You think we need U.InfluenceEdge (causal tendency). If it appears as a stable, senseFamily‑specific notion across control, epistemic inference, and methods (≥ 3 families), and cannot be formed from existing
U.Relationsubtypes, it may qualify. Otherwise, treat it as a pattern or a row.
Scope thresholds (default τ) — how much sameness you’re allowed to claim
Guard. You may tighten scope (e.g., from Naming-only → Assignment-eligibility) only if the Row CL(min) meets the higher τ.
Micro‑examples (didactic triad)
For engineers — “Do we need a new Execution label?”
- Need. “We want to refer to what actually happened in both provenance logs and PLC runtime.”
- senseFamily. Execution - stance. run.
- Contexts.
PROV‑O(Activity),IEC 61131‑3(task run). - Row? F.7 has execution-occurrence at assignment/enactment-eligibility, CL = 2.
- Decision. Reuse that row’s label at Assignment-eligibility; no new U.Type; define Role Descriptions anchored to each Context as needed.
For managers — “Can we call them all actors?”
- Need. A single everyday word in the spec to denote “the responsible party”.
- senseFamily. Role (behavioural mask in prose).
- Contexts.
BPMN 2.0(Participant),PROV‑O(Agent). - Row? Naming‑only row “actor”, CL = 2.
- Decision. Reuse “actor” in prose only; keep Context‑loyal labels in formal sections. No Role Description minted unless tied to one context.
For researchers — “New U.Type for ‘Work Scope’?”
- Need. Kernel notion capturing feasible performance region across systems.
- Test A.8. Appears in control (reachable sets), services (operating envelope), measurement (confidence bands): ≥ 3 families?
- Reduction test. Can it be expressed as a row + existing
U.Relation+ KD‑CAL constructs? - Decision. If not reducible and cross‑family stable, propose new U.Type with minimal definition; otherwise, prefer a row or a pattern.
Invariants (normative, lightweight)
- Context‑first. Every decision cites at least one Context; no global senses.
- senseFamily purity. A single decision covers one senseFamily. Mixed needs are split.
- Row honesty. Any Cross‑context reuse occurs via a Concept‑Set row at or above τ(scope); no stealth equivalence.
- Role Description anchoring. Role Descriptions are single-Context, single-cell anchors (F.4).
- Alias modesty. Aliases never change semantics and live under F.5.
- Kernel restraint. New U.Types are rare; A.8 (≥ 3 families) is mandatory, and duplication with existing U.Types must be ruled out.
Mint/Reuse discipline for policy-ids (normative addendum)
FPF treats policy-ids (e.g., Φ(CL), Φ_plane, Ψ(CL^k), Aut-Guard, EmitterPolicyRef, InsertionPolicyRef, Acceptance clause ids) as first-class, versioned tokens. They are not “just strings”, and they are not governed by tier ladders or implied authority.
PolicySpecRef. A resolvable reference to the normative definition of a policy-id (“what does this policy-id mean?”). At minimum it:
- identifies the policy-id,
- pins an immutable edition (or equivalent digest), and
- can be located from the same publication bundle (MVPK / UTS / EvidenceGraph anchors).
MintDecisionRef. A resolvable reference to the decision record that introduced (minted) a policy-id into a declared namespace/registry. For normative policy-ids this is typically a DRR id (E.9) or an equivalent change decision record. For purely local, non-exported policy-ids it MAY be a Gate DecisionLog entry (A.21) if that local-only scope is explicit.
PolicyIdRef (canonical bundle).
PolicyIdRef := { policy_id, PolicySpecRef, MintDecisionRef? }.
Rules.
- No silent policy-id minting. If a publication introduces a new policy-id (not previously present in the declared namespace/registry), it MUST surface a
PolicyIdRefwhose:PolicySpecRefis edition-pinned, andMintDecisionRefis resolvable from the publication’s DRR/DecisionLog links.
- Reuse is reference-only. If a publication reuses an existing policy-id, it MUST surface a
PolicySpecRef(and SHOULD preserve the prior mint decision link where available). It MUST NOT restate policy semantics as if minting a new policy-id. - GateCrossing checkability. Any GateCrossing/CrossingBundle that surfaces policy-ids MUST include
PolicyIdRef(or an equivalent “policy-id + resolvable refs” structure) so GateChecks can verify resolvability and pin consistency (E.18/A.21/G.6:7.5.8). - Authority is policy, not tiers. “Who may mint” vs “who may reuse” is expressed by the referenced policy specs and mint decisions (and enforced by the active GateProfile/GateChecks), not by fixed tier labels.
Quick reference (one‑glance map)
Anti‑patterns & remedies
Reasoning primitives (judgement schemas, notation‑free)
Each item states a mental entailment. No storage, no roles, no workflows. Symbols:
C= Context,σ= SenseCell,R= Concept‑Set row,SF= senseFamily,τ= scope threshold,CL= congruence level.
-
senseFamily split
need(n) ∧ mixedSF(n) ⊢ split(n) into {n₁…nₖ} by senseFamilyYou cannot decide for mixed senseFamilies; decide per senseFamily. -
Cell reuse
∃ C,σ : expresses(n,SF)@σ ⊢ reuseLabel(σ) in CIf a single Context’s SenseCell already says it, reuse it locally. -
Assignment-eligibility
reuseLabel(σ) ∧ needAssignable(SF ∈ {Role,Status}) ⊢ mintRoleDescription(σ)When you need assignable behaviour/deontics for a local sense, mint a Role Description anchored to that sense. -
Row reuse
crossContexts(n,SF) ∧ ∃ R: covers(R,SF) ∧ CL(R) ≥ τ(scope) ⊢ reuseRow(R,scope)For Cross‑context readings, reuse a row at a scope whose τ is met. -
Alias suffices
sameIntent(n,label₀) ∧ stylePreference(n,label₁) ⊢ alias(label₀,label₁)If it’s only wording, add an Alias; no semantics move. -
Row proposal
recurrentCross(n,SF) ∧ bridgesCL(cells(n)) ≥ τ(scope) ∧ ¬∃R ⊢ proposeRow(cells,scope)If the need recurs and Bridges support the scope, propose a new row. -
Kernel minting (rare)
kernelCandidate(n) ∧ crossFamily≥3 ∧ irreducible(n) ⊢ proposeUType(n)Only if the notion is cross‑family and cannot be reduced to cells+rows+existing U.Types. -
Scope downgrade
reuseRow(R,scope) ∧ CL(R)↓ < τ(scope) ⊢ downgradeScope(R)If CL falls, lower the row’s licensed scope. -
Row rejection
conflictEvidence(rowCells) ∧ lossUnbounded ⊢ rejectRowIf bridges show open‑ended loss, do not publish a row; teach the contrast.
Extended worked examples
Execution, observation, and acceptance (engineers)
Need. A reusable label for “what actually happened and how it was checked against the promise”. senseFamilies. Execution (stance: run); Measurement (KD); Status (accept/reject).
Contexts.
IEC 61131‑3 (task run), PROV‑O (Activity), SOSA/SSN (Observation), ITIL 4 (SLO/SLA).
Reasoning.
Execution:IECSenseCell (task run) andPROVSenseCell (Activity). There exists a row execution-occurrence at Assignment-eligibility with CL = 2 → reuse row at Assignment-eligible scope; do not infer Type-structure.Measurement:SOSAObservation cell; no Cross‑context needed → reuse cell.Status:ITILSLO/SLA cell; Role Description “SLO‑Target” anchored to ITIL cell.
Outcome. Prose may say: “This execution-occurrence (row@assignment/enactment-eligibility) was observed (SOSA cell) and evaluated against the SLO (ITIL cell).” No new U.Type; no hidden merges.
Actor across workflow and provenance (managers)
Need. A single everyday label for “the responsible party” in diagrams. senseFamily. Role (behavioural mask in prose/diagrams).
Contexts. BPMN 2.0 (Participant), PROV‑O (Agent).
Reasoning. A Naming‑only row “actor” exists, CL = 2. Reuse the row at Naming‑only. If assignable behaviour is needed in a model, mint Role Description anchored to BPMN Participant (not to the row).
Outcome. Diagrams show “actor”; formal sections reference Participant or Agent as appropriate.
Accuracy across metrology and data quality (researchers)
Need. Treat “accuracy” consistently across ISO 80000 (metrology) and ISO/IEC 25024 (data quality). senseFamily. Measurement.
Contexts. ISO 80000‑1 (quantity/units), ISO/IEC 25024 (data quality).
Reasoning. Bridges indicate related but not identical definitions; procedures differ. Existing KD‑metric row “accuracy” has CL = 2 with loss note: population vs instrument focus. Reuse row at KD‑metric scope for dashboards; do not use the row to justify interchange of procedures.
Outcome. One label in reports; method sections still cite the context‑local procedure.
F.8:12.4 Subtype relation across OWL and a curated taxonomy (formalists)
Need. Present “is‑a” uniformly across OWL 2 classes and a domain taxonomy. senseFamily. Type‑structure.
Contexts. OWL 2 (SubClassOf), Taxonomy_X (curated “is‑a” edges).
Reasoning. F.7 row “subtype‑order” exists at Type‑structure scope with CL = 3 (only after verifying acyclicity & anti‑symmetry in Taxonomy_X). If the curated taxonomy contains cycles, downgrade to Naming‑only or reject the row.
Outcome. When CL≥3, you may reuse row for structural proofs; else teach differences.
Relations (with other patterns)
-
Builds on: E.10.D1 (D.CTX) Context ≡ U.BoundedContext; F.1 Contexts; F.2 Harvest; F.3 SenseCells.
-
Constrains:
-
Used by. All patterns (Part C) whenever new labels are contemplated.
Migration notes (conceptual)
- Old “anchor” language. Replace legacy “anchor” with: SenseCell (local sense) + Role Description (assignable Standard) + (optionally) Concept‑Set row (Cross‑context reading).
- Overclaiming rows. If a row was used for assignment/enactment-eligibility or Type-structure but CL drops, downgrade row scope to Naming-only in prose; adjust examples.
- Split rows. If one row covers cells whose Bridges diverge, split into two narrower rows with explicit loss notes.
- Alias proliferation. Collapse redundant Aliases under a single F.5 entry; keep both registers (Tech/Plain).
- Proto‑types. Suspect kernel inflation? Attempt reduction: SenseCell + row + existing U.Type. Only if irreducible across ≥ 3 families, reopen as a U.Type candidate.
Acceptance tests (SCR/RSCR — concept‑level)
Static conformance (SCR)
- SCR‑F8‑S01 (senseFamily purity). Every decision record names one senseFamily; mixed needs are split.
- SCR‑F8‑S02 (Proper anchoring). Every Role Description cites one SenseCell; no row is used as a assignment/enactment anchor.
- SCR‑F8‑S03 (Row scope). Whenever a row is reused, its Scope is stated and Row CL(min) ≥ τ(scope) holds.
- SCR‑F8‑S04 (Alias modesty). Aliases introduced in F.5 do not claim new semantics or change senseFamily.
- SCR‑F8‑S05 (Kernel restraint). Any new U.Type proposal includes ≥ 3 domain families of evidence and an irreducibility note.
Regression (RSCR)
- RSCR‑F8‑E01 (CL drift). If any Bridge’s CL changes, re‑evaluate dependent rows; downgrade or split where τ(scope) is no longer met.
- RSCR-F8-E02 (Row overuse). Scan examples: no case uses Naming-only rows to justify Assignment-eligibility or Type-structure claims.
- RSCR‑F8‑E03 (Alias creep). Ensure no Alias has accreted senseFamily‑specific semantics; if it has, migrate to a row or Role Description.
- RSCR‑F8‑E04 (Kernel hygiene). New U.Type proposals are rejected if a SenseCell + row construction suffices.
Didactic distillation (90‑second teaching script)
“When you feel like coining a new name, pause. Which senseFamily are you in—Role, Status, Measurement, Type‑structure, Method, or Execution? If a single Context’s SenseCell already says it, reuse that label. If you need an assignable Standard, mint a Role Description anchored to that SenseCell. If you must read across Contexts, reuse a Concept‑Set row—but only at a stated scope and only if its CL meets the threshold (τ). If it’s just a nicer wording, add an Alias (style only). Only in the rare case of a cross‑family, irreducible notion do you mint a new U.Type. Never let Naming‑only rows justify Assignment-eligibility or structural inference, and never let identical strings force equivalence. This is not process—it’s discipline of thought: reuse what exists, declare scope when you bridge, and mint new primitives only when the kernel truly needs them.”
F.8:End
Alignment & Bridge across Contexts
“Translate across Contexts; never collapse them.” Type. Architectural pattern. Status. Stable. Normativity. Normative. Builds on: E.10.D1 (Context discipline: Context = U.BoundedContext); F.0.1 (senseFamily & StatusModality guard; Bridge-only crossing); F.1 (Contexts fixed); F.2/F.3 (Cells exist); F.7 (rows depend on Bridges); F.8 (thresholds and reuse choice).
Coordinates with: B.3 Trust & Assurance Calculus (uses CL penalties); A.6.1 U.Mechanism (Transport clause for cross-context use; penalties feed R/R_eff only; F/G invariant); Part C patterns (apply Bridges in formal claims); A.6.9 (RPR-XCTX for repairing umbrella “same/equivalent/align/map” prose into explicit Bridge Cards). Aliases (informative). Context-to-Context translator; Sense bridge.
Intent & applicability
Intent. Provide a conceptual discipline for relating SenseCells from different Contexts (U.BoundedContext). A Bridge states what kind of relationship holds, how far it holds (via CL: Congruence Level), and what is lost during the translation. Bridges support carefully scoped reuse (e.g., a Concept-Set row) while rejecting silent equivalence.
Applicability. Use whenever an author needs to read across Contexts—to reuse a familiar label, to connect design-time and run-time notions, to compare two standards’ terms, or to justify a row in the Concept-Set table. This pattern is not storage, enactment protocol, or governance; it codifies thinking moves.
Non-goals. No global meaning; no publication face/form semantics; no editor roles. Bridges are semantic relations between local senses, not transport chains, not processes.
Primary EntityOfConcern in plain terms. One bridge card relating two SenseCells across different U.BoundedContexts; not a transport chain, not a workflow, and not one global meaning layer.
Admissible move in plain terms. Declare relation kind, direction, CL, and loss between local senses so cross-context reading stays inspectable without collapsing them into silent equivalence.
Primary working reader. The primary working reader is an author, checker, or practitioner preparing one bridge card, one comparative mapping note, or one concept-set row that depends on cross-context reading without pretending the contexts have already collapsed.
Use this when. Use this pattern when two local senses from different contexts need one explicit bridge card before a team can admissibly reuse a label, justify a row, or compare the cases without pretending the senses are equivalent or substitutable.
Start here when. The same term, role, quality, or status label appears in more than one context and the team is about to treat that overlap as if it were already equivalence, safe substitution, or structure-preserving reuse.
What goes wrong if missed. Teams fall back to shared labels, string-equals shortcuts, or informal analogies, then quietly smuggle equivalence, substitution, or structure across contexts without publishing relation kind, CL, or loss.
What this buys. One explicit bridge discipline that lets a team reuse names, compare contexts, and publish bounded cross-context support without losing track of direction, loss, and the limits of admissible substitution.
Not this pattern when. Not this pattern when the case is still only a coarsened source-pinned rendering with no bridge claim yet, or when the real job is storage, enactment, governance, or one single local context rather than explicit cross-context alignment.
Boundary to controlled coarsening. This pattern is also the explicit boundary pattern when a simplified or coarsened cross-context rendering starts to imply equivalence, substitution, projection, or interoperability scope. If the case is still only a coarsened source-pinned rendering for narrower use, keep it with that rendering's own source tether, non-admissible-use line, and reopen condition, using A.6.3.CSC Controlled Semantic Coarsening when that narrower-use card is primary. A lighter cross-context note may provide informal orientation, but that is not a formal F.9 Naming-only row. Any bridge, substitution, row, or interoperability claim must reopen the source-bearing episteme or source publication needed for the Bridge Card before the Bridge Card may be published under F.9.
Recognition vs assurance note. Read Intent, Applicability, Non-goals, and the A.6.3.CSC neighbor boundary above as the ordinary recognition block. Read Bridge kinds, CL, conformance, and Relations below as assurance blocks that tighten the same bridge-card claim; they do not widen the pattern into transport, workflow, or one global meaning layer.
Problem frame
Cross-context work fails in predictable ways:
- String-equals fallacy. Identical spellings (“process”, “role”, “accuracy”) taken as identical meaning.
- Scope creep. A naming convenience is stretched to assignment or structural claims.
- DesignRunTag jumping. Design artefacts are substituted for run-time occurrences (or vice-versa).
- Direction amnesia. Narrower/broader relations treated as symmetric.
- Loss blindness. Differences (units, granularity, preconditions) are left unstated, contaminating downstream reasoning.
Bridges cure these by making relation, direction, loss, and CL explicit.
Forces
Core idea (didactic)
A Bridge is a declared translator between two local senses. It always names (a) the two SenseCells, (b) a Bridge kind (what relation), (c) a direction (if non-symmetric), (d) a CL value, and (e) Loss Notes (what fails to carry). Some Bridges support substitution in limited scopes; others support only explanation.
Minimal vocabulary (this pattern only)
-
Context — shorthand for U.BoundedContext (per E.10.D1).
-
SenseCell - the pair (Context, Local-Sense) from F.3.
-
Bridge — a conceptual relation between two SenseCells with kind, direction, CL, and loss notes.
-
CL (Congruence Level) — ordinal congruence class (0…3) of a Bridge (see §7).
-
Scope — the Bridge-supported use of a cross-context reading (as in F.7/F.8):
-
Naming-only (talk consistently),
-
Role Assignment & Enactment-eligibility (assignable constraints/roles/status reuse),
-
Type-structure (safe structural inference).
-
senseFamily — the semantic category (Role, Status, Measurement, Type-structure, Method, Execution…) per F.0.1 (normative Part F guard).
Bridge kinds (senseFamily-aware)
Two families of Bridges: Substitution Bridges (senseFamily-preserving; can support Concept-Set rows) and Interpretation Bridges (explanatory; not for substitution).
Substitution Bridges (sense-preserving)
These relate SenseCells of the same senseFamily and may support limited substitution:
-
Equivalence - near-identity of sense. Symmetric. Rare. Use: May support Type-structure rows when CL=3 and invariants match. Loss Notes: usually “none” or “profiling differences”.
-
Narrower-than / Broader-than - proper inclusion of sense. Directional. Use: Safe to substitute narrower > broader in Naming-only and sometimes Role Assignment & Enactment; broader > narrower is unsafe. Loss Notes: “loses special cases X”.
-
Partial-overlap - non-empty intersection, neither includes the other. Use: Naming-only at best. Never justifies Role Assignment & Enactment / Type-structure. Loss Notes: “A-only senseFamily”, “B-only senseFamily”.
-
Disjoint - explicit contrast. Use: For didactic warnings; not reuse support. Loss Notes: n/a (it asserts incompatibility).
Interpretation Bridges (cross-senseFamily, explanatory)
These do not support substitution but explain connections across senseFamilies:
-
Design-spec -> Run-trace - a design concept relates to its run-time occurrence. Example: BPMN:Process -> PROV:Activity. Use: Explain design-to-execution correspondence. No Concept-Set rows. Loss Notes: “graph vs event”, “control-flow vs temporal extent”.
-
Measure-of / Evidence-for (->) — a measurement SenseCell evidences or quantifies another senseFamily (e.g., a Requirement clause). Example: SOSA:Observation -> ITIL:SLO fulfilment. Use: Explain evaluation. No substitution.
-
Policy-implies / Obliges (->) — a deontic statement constrains another senseFamily. Example: ODRL:Duty -> Service behaviour. Use: Explain constraint propagation.
Rule of thumb. If you want rows or substitution, you need a Substitution Bridge on the same senseFamily. If you want to explain why artefacts relate without claiming sameness, use Interpretation Bridges.
CL scale and scope thresholds
CL expresses how safely meaning carries over.
-
Thresholds (normative):
- Publishing a Naming-only row requires CL >= 1 across the row's Cells.
- Publishing a Role Assignment & Enactment-eligible row requires CL >= 2, the same senseFamily, and compatible stance.
- Publishing a Type-structure row requires CL = 3 and matched invariants (acyclicity, anti-symmetry, units, etc.).
-
Penalty use (informative): B.3 may convert CL into an assurance penalty when a cross-context claim is made.
The Bridge Card (compact sketch)
A thought-format (not a form). Every bullet can be said in a sentence.
- Cells.
A@contextA-B@contextB. - senseFamily. Role, Status, Measurement, Type-structure, Method, or Execution ...
- Kind. Equivalence / Narrower-than / Broader-than / Partial-overlap / Disjoint / Design-spec -> Run-trace / Measure-of / Policy-implies.
- Direction. A -> B (if non-symmetric) or A <-> B.
- CL. 0–3 with a short why.
- Loss Notes (bullets). What fails to carry (units, scope, granularity, preconditions, time stance).
- Counter-example. The crispest case where substitution would mislead.
- Supported use. Naming-only / Role Assignment & Enactment-eligible / Type-structure / Explanation-only.
- Didactic hook. The helpful sentence a careful engineer can remember.
If it does not fit on a screen, you are describing the Contexts, not the Bridge.
Registry-reference note (normative). BridgeId and any policy/edition identifiers cited by a Bridge Card are registry references (keys into registries), not semantic symbols exported by signatures. Therefore they MUST NOT be demanded via SignatureManifest.provides (or "satisfied" via imports closure); conformance is checked by validating that the referenced registry entries exist and, where required, are edition-pinned (see F.15).
State export and quantum-like boundary note
Use F.9 first when meaning, label, relation, field, record, model output, report, or representation crosses a bounded context or publication plane. A bridge does not become quantum-like because it is lossy, approximate, contextual, or hard to translate. It becomes quantum-like only when the bridge/export claim still depends on order sensitivity, incompatible frames, a probe that changes the represented state, or no faithful-enough export supports the intended use.
Action path:
- Build the ordinary Bridge Card first: cells, sense family, kind, direction, CL, loss notes, counter-example, and Bridge-supported use.
- Ask what state, relation, evidence, metric, option, or viability reading is claimed to survive the crossing.
- State what the crossing omits, coarsens, re-keys, reframes, makes incomparable, or makes unsafe for the intended downstream use.
- If the bridge or export claims to preserve action, intervention, manipulation, explanation, or cross-scale structure, state the causal-abstraction or approximate-causal-abstraction mapping before treating the coarsened bridge as a QL issue.
- Ask whether asking, measuring, exporting, rendering, or bridging changes the represented state itself. If yes, coordinate with
C.26.1. - Ask whether coordinated work or live state is not exported faithfully enough for the intended use by any one report or bridge. If yes, coordinate with
C.26.2. - Ask whether the crossing is a state representation with declared source-loss mode or reduced recoverability. If yes, coordinate with CSC/RT and the C.26 coarsening support section.
- State Bridge-supported use and return-to-source trigger before the bridge result is reused.
Add this row to the Bridge Card only when the bridge result will be reused for decision, comparison, assurance, release, audit, or cross-context action. For a local orientation note, state the export loss and return-to-source trigger in prose without treating the note as a Bridge Card extension.
Useful outputs:
- an ordinary Bridge Card when translation/loss is the whole issue;
- a C.26.1 note when the export/probe changes represented state;
- a C.26.2 note when coordinated state has no faithful-enough export for the intended use;
- a CSC, RT, or C.26 coarsening handoff when the exported representation intentionally carries reduced detail, reduced recoverability, or narrower use.
Invariants (normative)
- Locality first. A Bridge relates SenseCells, never Contexts or strings.
- senseFamily discipline. Substitution Bridges must be senseFamily-preserving. Interpretation Bridges may cross senseFamilies but never support substitution.
- Direction clarity. If the kind is directional, state direction explicitly.
- CL honesty. Assign CL only if you can state at least one counter-example for
CL <= 2or explain its absence with invariants forCL = 3. - Loss visibility. Every Bridge carries Loss Notes (even “none”).
- Row dependence. A Concept-Set row’s scope is bounded by the weakest CL among its participating Bridges (F.7/F.8).
- No senseFamily jump by stealth. You must not use an Interpretation Bridge to justify a row or substitution.
- Time DesignRunTag honesty. If a Context fixes DesignRunTag, the Bridge must respect that distinction or explicitly declare a bridge such as
Design-spec -> Run-trace. - Kernel restraint. Bridges cannot be used to promote ad-hoc sameness into a new U.Type; A.11 applies.
- Non-inheritance of Contexts. Bridges do not imply -is-a- between Contexts (E.10.D1).
- Coarsened-note restraint. A lighter cross-context note, comparative aid, redacted view, or surrogate SHALL NOT be treated as a Bridge Card or as bridge-bearing or substitution-bearing evidence by convenience. If bridge-bearing use is still wanted, the source-bearing episteme or source publication needed for the Bridge Card must be reopened and the bridge must be declared explicitly with kind, direction,
CL, and loss notes.
Micro-examples (illustrative, one-liners)
-
Participant vs Agent (process model vs provenance) Cells:
BPMN:Participant-PROV:Agent- senseFamily: Role - Kind:Partial-overlap- CL: 2 - Loss: participation vs attribution scopes differ - Use: Naming-only ("actor"). -
Process (design) vs Activity (run) Cells:
BPMN:Process->PROV:Activity- senseFamily: Method / Execution - Kind: Design-spec -> Run-trace - CL: 2 - Loss: graph vs event; concurrency vs temporalization - Use: Explanation-only. -
Observation vs SLO check Cells:
SOSA:Observation->ITIL:SLO-fulfilment- senseFamily: Measurement / Status - Kind:Measure-of- CL: 2 - Loss: sampling window; target definition - Use: Explanation-only. -
Subtype across OWL and curated taxonomy Cells:
OWL:SubClassOf-TaxonomyX:is-a- senseFamily: Type-structure - Kind:Equivalence- CL: 3 (only if TaxonomyX is acyclic and anti-symmetric) - Loss: profile differences - Use: Type-structure rows supported. -
Accuracy (metrology vs data-quality) Cells:
ISO80000:accuracy-ISO25024:accuracy- senseFamily: Measurement - Kind:Partial-overlap- CL: 2 - Loss: instrument vs dataset perspective - Use: Naming-only row -accuracy-; methods stay context-local.
Anti-patterns & remedies
Worked examples (didactic)
Service acceptance (design) vs executions & observations (run)
- Cells & Contexts
ITIL4:SLO(Status, design) <-SOSA:Observation(availability)(Measurement, run)BPMN:Process(Method, design) ->IEC61131:Task-Execution(Execution, run) - Narrative Availability SLOs are evaluated by observations of task executions. No substitution follows: an SLO is not an observation, and a process is not an execution occurrence.
- Bridge Cards (sketch) ITIL:SLO <- SOSA:Observation - CL=2 - Loss: sampling window, clock skew. BPMN:Process -> IEC:Execution - CL=2 - Loss: control-flow vs temporalization, concurrency collapse.
- Supported use Explanation-only; Concept-Set rows may be Naming-only ("availability") with CL >= 1 label coherence across Contexts.
Behavioural role vs access role
- Cells & Contexts
BPMN:Participant(Role) -NIST-RBAC:Role(Status) - Narrative Both talk about -who acts-, but one is a behavioural mask in a process model, while the other is an authorization grouping.
- Bridge
Kind:
Partial-overlap, CL=2; Loss: assignment moment, enforcement placement, multiplicity. - Supported use
- Naming-only row “actor”; no Role Assignment & Enactment reuse across senseFamilies.
Equivalence of subtype notions for structural rows
- Cells & Contexts
OWL2:SubClassOf(Type-structure) -TaxX:is-a(Type-structure curated) - Bridge
Kind:
Equivalence, CL=3 iff the curated taxonomy is acyclic and anti-symmetric and uses class-level reasoning. - Supported use
Type-structure rows supported (
CL = 3); Loss: OWL profile limitations (RL/EL/QO).
Accuracy (metrology) vs accuracy (data-quality)
- Cells & Contexts
ISO80000:measurement-accuracy(Measurement) -ISO25024:data-accuracy(Measurement) - Bridge Kind: overlap, CL=2; Loss: “true value” notion differs (instrument vs dataset), scale transformations.
- Supported use Naming-only row “accuracy” used for reports; no shared methods.
Setpoint (control) vs target (service)
- Cells & Contexts
CTRL:text:setpoint(Status/Control) -ITIL:target(Status/Service) - Bridge
Kind:
Disjoint- Rationale: physical reference value vs business objective; different target kinds (control parameters vs requirement clause). - Supported use Didactic contrast only; prevents accidental substitution in SLO calculus.
Role substitution & CL gating (RoleAssignment/enactment scope)
Use. A worked, role-focused restatement of Bridge usage for the recurring question: “May
Role_B@BsatisfyRole_A@AforrequiredRoles/ enactment checks-”
Rule. No cross-context substitution by name. If a step in Context A needs Role_A, and the performer only holds Role_B in Context B, an explicit Bridge MUST state how Role_B@B relates to Role_A@A, with direction, CL, and Loss Notes.
Directional substitution (role-oriented shorthand)
A Bridge may assert, directionally:
substitutesFor(Role_B@B > Role_A@A)with a CL and a list of kept and lost characteristics (for roles: typical losses are RCS characteristics and/or RSG nuances).- The reverse direction does not follow unless declared (F.9:13.7).
CL > gating policy (didactic default)
Notes. The substitution scope is defined in F.9:13.2-13.3 (Role-Assignment/Enactment-eligible substitution requires CL >= 2; Naming-only is CL >= 1). CL penalties feed assurance (R) per B.3; safety-critical policies may require CL >= 2 by default (D.2).
Typical bridges (worked patterns)
-
BPMN Task - PROV Activity.
substitutesFor(Task@BPMN > Activity@PROV)with CL=2; lost: BPMN control-flow guards; kept: “bounded occurrence consuming/producing entities.” Effect. A Work logged asActivity@PROVmay satisfy a step requiring aTask@BPMNiff an extra guard enforces the BPMN pre-/post-conditions. -
Essence Alpha-State - RoleStateGraph state.
substitutesFor(“Alpha.State:Ready”@Essence > “Ready”@RSG)with CL=2; lost: Alpha-specific narrative criteria; kept: checklist-based readiness. Effect. A team may reuse Essence states as labels in RSG, but still maintains local checklists as StateAssertions. -
ITIL Service Owner - RBAC Administrator. Typically CL=1 and directional (Administrator@RBAC > ServiceOwner@ITIL) rejected unless a policy Bridge enumerates compensating controls. Effect. Prevents “ops admin = service-accountability role” conflations without an explicit waiver.
Bridge invariants (role-relevant reminders)
- Local first. Substitution never overrides in-Context role algebra (its own role relations, guards, and exclusions).
- Loss honesty. If a Bridge’s loss notes indicate that a dropped characteristic is required by a step, substitution is invalid (regardless of CL).
- No silent inversion. Direction is explicit; substitution does not reverse unless declared (F.9:13.7).
Reasoning primitives (judgement schemas)
All judgements are conceptual. They support or reject specific thinking moves-not enactment steps and not process-enactment records.
Bridge declaration
Bridge(A@RA, B@RB) : senseFamily, kind, dir, CL, Loss, scope
Reading: There exists a declared Bridge between SenseCells A and B with stated attributes.
Substitution scope (senseFamily-preserving)
Bridge(A,B): same senseFamily f, kind in {Equivalence, Narrower-than, Broader-than}, dir A->B, CL>=2, Loss L -> A may stand in for B at senseFamily f (Role-Assignment/Enactment-eligible)
Reading: A Substitution Bridge on the same senseFamily with CL >= 2 supports Role-Assignment/Enactment-level substitution in the stated direction. (Type-structure requires CL = 3.)
Naming-only scope
Bridge(A,B): kind in {Equivalence, Narrower-than, Broader-than, Partial-overlap}, CL>=1 -> A and B may share a label (Naming-only)
Reading: A Bridge with CL >= 1 supports using a shared label in prose or Concept-Set Naming-only rows, without structural or Role Assignment & Enactment commitments.
Prohibition by kind
Bridge(A,B): kind=Disjoint -> no substitution and no shared row
Reading: Disjoint supports neither substitution nor rows; only contrastive teaching remains supported.
Interpretation embargo
Bridge(A,B): kind in {Design-spec -> Run-trace, Measure-of, Policy-implies} -> Explanation-only
Reading: Interpretation Bridges never support substitution or rows.
Weakest-link rule for rows
row R uses {Bridge_i} -> scope(R) = min_i(scopeSupported(Bridge_i)) and CL(R) = min_i(CL_i)
Reading: The row scope and row CL are bounded by the weakest participating Bridge.
Direction guard
Bridge kind=Narrower-than with dir A->B -> not(B may stand in for A)
Reading: Narrower>Broader does not invert; only A may substitute into B under the stated scope.
SenseFamily purity
Bridge scope=Role Assignment & Enactment-eligible -> same senseFamily(A,B) and same stance(A,B)
Reading: Role Assignment & Enactment-level substitution requires same senseFamily and same stance (run-time or design time).
Loss accumulation
A->B with Loss L1 and B->C with Loss L2 -> A->C is supported only if the same senseFamily is preserved, CL=min(CL1,CL2), and Loss accumulates as L1 union L2
Reading: Chained substitution is rarer; if used, accumulate Loss and respect the minimum CL. When in doubt, avoid chaining across Contexts.
Relations
Builds on: E.10.D1 (Context discipline: Context = U.BoundedContext); F.0.1 (senseFamily guard; Bridge-only crossing); F.1 (Contexts fixed); F.2/F.3 (Cells exist); F.7 (rows depend on Bridges); F.8 (thresholds and reuse choice).
Coordinates with: F.9.1 for stance overlays that remain subordinate to bridge cards; E.17.1 when viewpoint bundles need explicit cross-family correspondence; C.16.Q / C.25 when evaluative endpoints or bundle-shaped quality families cite bridge cards without absorbing bridge semantics.
Constrains:
- F.7 Concept-Set Table: each cross-context row must name supporting Bridges; row scope <= the weakest supporting Bridge.
- F.8 Mint or Reuse: reuse choices reference CL and kind; no reuse without a Bridge.
- Part C patterns: formal claims that span Contexts cite Bridges and respect senseFamily/StatusModality & CL constraints.
- B.3 Trust & Assurance Calculus: may interpret CL as a penalty factor in Cross-context reasoning.
Migration notes (conceptual)
- Edition shift in a Context. Re-read affected Cells; if sense moved, split the Bridge or lower CL; keep the older Bridge for historical claims.
- New evidence of mismatch. Add a counter-example; decrease
CLor change bridge kind (for example fromEquivalencetoPartial-overlaporDisjoint). - Convergence over time. When invariants demonstrably match, and counter-examples evaporate, raise CL cautiously; for CL=3, cite invariants.
- senseFamily refactor. If a Cell’s senseFamily was mis-typed, fix the senseFamily first in F.3, then revisit Bridges; Interpretation is safer than forced substitution.
- Row under-protected. If a row’s scope exceeds the weakest Bridge, either split the row by Context or downgrade scope to Naming-only.
- Bridge sprawl. Consolidate near-duplicates into one Bridge with richer Loss Notes; retire the rest.
Acceptance tests (SCR/RSCR — concept-level)
Static conformance (SCR)
- SCR-F9-S01 (Well-typed). Every Bridge names two SenseCells, each bound to a Context from F.1, and states senseFamily, kind, dir (if needed), CL, Loss, and scope.
- SCR-F9-S02 (senseFamily discipline). Any Bridge that supports Role/Enactment-eligible substitution is senseFamily-preserving and has kind in {
Equivalence,Narrower-than,Broader-than}. - SCR-F9-S03 (Loss visibility). Every Bridge has non-empty Loss Notes (the word "none" is valid only with CL=3 and stated invariants).
- SCR-F9-S04 (Counter-example hygiene). Bridges with CL <= 2 carry at least one counter-example; Bridges with CL=3 cite matching invariants.
- SCR-F9-S05 (Row compliance). Every Concept-Set row shows a scope no greater than the minimum CL across its supporting Bridges; no row relies on Interpretation Bridges.
Regression (RSCR)
- RSCR-F9-E01 (Edition churn). When a Context's edition changes, re-validate all Bridges touching it; flag
CLdrift and update rows' scopes if needed. - RSCR-F9-E02 (Counter-example drift). New counter-examples lower CL; deletions do not automatically raise CL.
- RSCR-F9-E03 (senseFamily drift). If a Cell's
senseFamilyis corrected, all Bridges crossing that Cell are re-typed; any substitution that would now cross senseFamilies is invalidated. - RSCR-F9-E04 (Weakest-link enforcement). Adding a low-CL Bridge to a row reduces the row's scope; if the row's published scope would exceed the new minimum, split or downgrade the row.
Didactic distillation (90-second script)
A Bridge translates between local senses from different Contexts. It always declares what relation holds (
Equivalence,Narrower-than,Broader-than,Partial-overlap,Disjoint, or an interpretation such asDesign-spec -> Run-trace), which CL value applies (CL 0-3), which way (when direction matters), and what is lost. Substitution is supported only on the same senseFamily and only with CL >= 2; Type-structure needs CL = 3. Interpretation Bridges explain, never substitute. Rows in the Concept-Set table obey the weakest-link: their scope cannot exceed the lowestCLamong their Bridges. When editions change or counter-examples appear, lowerCLor change bridge kind; if two senses truly converge and invariants match, raise to CL = 3, rarely and with reasons. Translate across Contexts; never collapse them.
Bridge stance overlay compatibility
A bridge card may carry a F.9.1 Bridge Stance Overlay such as localRename, operationalizes, partialAnalogy, projection, or nonEquivalent. The overlay is a local interpretive annotation and does not replace the underlying bridge kind, direction, CL, or loss notes.
Archetypal Grounding
Tell
A Bridge is not a synonym claim and not an enactment edge. It is a context-bounded correspondence record that tells a reader what may be reused, what may only be explained, and what is lost when meaning is transported.
Show (System lane)
A service team may reuse the word availability across monitoring, SLO review, and architecture discussion. F.9 requires the team to publish Bridge Cards that separate observation, status target, and architectural concern rather than treating the shared label as silent sameness. The benefit is that naming convenience survives while substitution rights stay bounded by senseFamily, CL, and Loss Notes.
Show (Episteme lane)
A comparative bundle may say that two traditions both discuss readiness or capability. Under F.9, that statement is only explanatory until the author publishes the two SenseCells, the Bridge kind, direction, CL, and the counter-example that marks where the comparison stops. The Bridge then becomes an auditable correspondence rather than a rhetorical shortcut.
Coarsened cross-context note is not yet a Bridge Card
A service or review bundle may circulate a short cross-context note such as the vendor bulletin is basically the same readiness signal as our rollback worksheet. That note may be useful as informal orientation talk, but it is not yet an admissible Bridge Card and not yet a formal F.9 Naming-only row.
Before any substitution, equivalence, Naming-only row, or interoperability claim is made, the source-bearing episteme or source publication needed for the Bridge Card must be reopened and an explicit Bridge Card must publish the two SenseCells, bridge kind, direction, CL, Loss Notes, and admissible use. Friendly summary prose does not carry bridge-bearing use by itself.
Bias-Annotation
Lenses tested: Gov, Arch, Onto/Epist, Prag, Did. Scope: Universal for cross-context correspondence and reuse.
- Gov bias: F.9 raises the declaration bar by requiring explicit Bridge Cards. Mitigation: keep the card compact and teach weakest-link discipline as the default review heuristic.
- Arch bias: the pattern prefers typed bridge declarations over friendly synonym prose. Mitigation: allow Naming-only scope and explanatory Interpretation Bridges so useful comparisons are not blocked.
- Onto/Epist bias: F.9 is local-first and resists global meaning claims. Mitigation: reuse remains possible, but only through explicit correspondence, direction, and Loss Notes.
- Prag bias: conservative
CLassignment may feel slower than informal reuse. Mitigation: the pattern still supports bounded substitution when the evidence is good enough; it only blocks silent overreach. - Did bias: the didactic script can make Bridge Cards look simpler than they are. Mitigation: Conformance, counter-examples, and weakest-link rules keep the teaching explanation tied to real constraints.
Conformance Checklist (CC-F.9)
A Bridge publication conforms to F.9 iff:
-
CC-F.9-1 - Well-typed Bridge declaration. Every Bridge names two SenseCells bound to declared Contexts and publishes kind, direction (if needed),
CL, Loss Notes, and Bridge-supported use. -
CC-F.9-2 - Substitution discipline. Any substitution or row support comes only from a Substitution Bridge on the same
senseFamily; Role Assignment & Enactment-level substitution requiresCL >= 2, and Type-structure substitution requiresCL = 3plus matched invariants. -
CC-F.9-3 - Interpretation embargo. Interpretation Bridges remain explanation-only and are not used to justify substitution or Concept-Set rows.
-
CC-F.9-4 - CL honesty and loss visibility. Bridges with
CL <= 2publish a counter-example or explicit boundary case; Bridges withCL = 3publish the invariants that justify the higher-scope use; all Bridges publish Loss Notes. -
CC-F.9-5 - Weakest-link row discipline. Cross-context rows never claim a broader scope or higher row-level
CLthan the participating Bridges support. -
CC-F.9-6 - Overlay non-collapse. If a
F.9.1Bridge Stance Overlay is used, it remains an annotation and does not replace bridge kind, direction,CL, or Loss Notes. -
CC-F.9-7 - Registry-reference discipline.
BridgeIdand cited policy pins are treated as registry references, not as signature-exported semantic symbols. -
CC-F.9-8 - Coarsened cross-context note is not treated as a Bridge Card. If bridge-bearing reuse begins from a lighter note, summary, or comparison aid, the source-bearing episteme or source publication needed for the Bridge Card is reopened and a full Bridge Card is published before any equivalence, substitution,
Naming-onlyrow, interoperability, or other row admissibility is claimed.
Consequences
Benefits. F.9 lets FPF compare, translate, and partially reuse ideas across Contexts without collapsing them into one vocabulary. It gives downstream rows, claims, and assurance reasoning an explicit Bridge Card record instead of relying on prose intuition.
Trade-offs / mitigations.
The pattern adds explicit bridge declaration and may feel heavier than informal comparison. Mitigation: use Naming-only scope when explanation is enough, and reserve higher-scope uses for Bridges that carry the required CL and invariants.
Rationale
The core move of F.9 is simple: cross-context work is unavoidable, but silent sameness is unacceptable. A Bridge therefore does two jobs at once:
- it preserves practical reuse where bounded transport is genuinely available, and
- it keeps non-identity visible through direction, Loss Notes,
CL, and weakest-link scope.
Without that discipline, every shared label becomes a hidden ontology merger. With it, cross-context comparison stays teachable, auditable, and compatible with the rest of FPF.
SoTA-Echoing
SoTA note. This section does not mint an independent second bridge rule track. It stays truthful only when Bridge kinds, CL, Loss Notes, weakest-link scope, the A.6.3.CSC neighbor boundary, and the review matrix below still tell the same story about admissible cross-context reading.
Worked-slice docking. The nearest practical recovery loci here are the micro-examples in F.9:10, the worked examples in F.9:12, the revision law in F.9:14, and the review matrix in F.9:26. If the SoTA claim cannot be recovered through those explicit bridge-card loci, do not let the alignment rationale stand in for live bridge law.
Local stance. Best-known current practice supports a narrow rule: cross-context reuse is admissible only when correspondence is typed, directional where needed, explicit about loss, and narrower than silent lexical identity or convenience equivalence.
Bridge Card Publication Discipline
Minimal bridge-card declaration
A usable Bridge Card should make visible:
- the two typed SenseCells,
- the bridge kind,
- direction where direction matters,
- declared
senseFamily, CL,- explicit Loss Notes,
- and the Bridge-supported use or row consequence.
If any of these fields is absent, later readers are forced back into inference by prose similarity, which is exactly what F.9 is supposed to block.
One-pair default rule
The default declaration discipline is one primary Bridge per cell pair per relevant senseFamily, with richer Loss Notes rather than many near-duplicate cards. Local exceptions are admissible only when the cards genuinely differ in bridge kind, direction, or admissible use.
Revision over silent drift
If later evidence changes bridge CL, direction, or loss, the Bridge Card should be revised explicitly. It should not be left in place while surrounding prose quietly changes the practical scope.
Bundle and Endpoint Interaction Law
Viewpoint and bundle interaction
Viewpoint bundles, quality bundles, and other endpoint bundles may cite Bridges, but they do not absorb bridge semantics. F.9 remains the pattern for cross-context alignment, while the citing bundle keeps its own ontology.
Quality-family interaction
When a quality family claim crosses contexts, bridge loss and CL affect what may be compared or reused, but they do not retype the quality family itself. Any resulting assurance penalty feeds R rather than changing the ontology of F, G, or the Q-Bundle head.
Overlay interaction rule
A F.9.1 stance overlay may help readers interpret a bridge, but the bridge card remains primary. If the overlay overstates the bridge kind, direction, CL, or Loss Notes, the card wins and the overlay should be narrowed or removed.
Review Matrix and Migration Tests
A reader can test bridge integrity with six questions:
- Are the two cells and contexts explicit?
- Is the bridge kind the least-committing truthful kind rather than the friendliest one?
- Does
CLmatch the published counter-example or invariant evidence? - Are Loss Notes specific enough that the Bridge-supported use is really bounded?
- If a row or bundle cites the bridge, does it stay within the Bridge-supported use?
- If a stance overlay exists, does it stay within the bridge card's kind, direction,
CL, and Loss Notes?
Migration from legacy "same/equivalent/align/map" prose should therefore recover the Bridge Card first, then any row support, then any optional stance overlay. Doing it in the opposite order recreates silent equivalence under new vocabulary.
C.29 mathematical-lens use relation
When meaning, substitution, sense cells, direction,
CL, or Bridge-supported use crosses context, write theF.9Bridge Card first. Add the applicableC.29output only for mathematical-lens use: candidate mathematical object,LensMappingMode, preserved and lost structure, exposed invariants or distinctions, lens-use admissibility value, admissible and non-admissible use, and stop condition. Do not duplicate Bridge semantics inside MathLensUse. A Bridge may make a mathematical lens interpretable across contexts without making it substitution-safe.
F.9:End
Bridge Stance Overlay
Type: Architectural (A) Status: Stable Normativity: Normative unless marked informative
Plain-name. Bridge-card stance overlay.
One-line summary. BridgeStanceOverlay governs one stance annotation over an existing F.9 bridge card so authors can say how to read that bridge without changing its kind, direction, CL, or loss notes and without treating the overlay as bridge authority or as a cure for missing source-bearing return.
Primary EntityOfConcern in plain terms. One overlay annotation attached to an existing F.9 bridge card; not the bridge card itself, not a second bridge kind, and not the pattern that governs coarsened renderings.
Use this when. Use this overlay when an existing bridge card already exists and the real need is one compact stance label such as localRename, operationalizes, partialAnalogy, projection, or nonEquivalent that helps readers interpret that bridge without widening its substitution licence.
Start here when. Your first honest artefact is already an F.9 bridge card, and the practical question is how to read that bridge rather than whether a bridge exists at all.
What goes wrong if missed. Authors fall back to vague phrases like "roughly analogous" or "just a rename", and readers either over-read the gloss as silent bridge authority or under-read it as disposable style.
What this buys. One compact interpretive gloss over an existing bridge card that stays reusable, keeps the bridge taxonomy stable, and still leaves source-bearing return and bridge publication duties where they belong.
Not this pattern when. Not this overlay when the case is the bridge card itself under F.9, or when a coarsened rendering still needs source-bearing return before any bridge-bearing use is admissible; use A.6.3.CSC Controlled Semantic Coarsening for that coarsened-rendering relation.
Problem frame
When positions or trajectories in language-state work are compared across schools or contexts, authors often need a disciplined interpretive gloss on top of a formal bridge card. The gloss must help reading without becoming a second bridge taxonomy.
Problem
Authors often express stance informally ("roughly analogous", "really a projection", "just a rename"), which makes bridge interpretation unstable. A full second taxonomy would be worse: it would compete with the core bridge kinds.
Forces
Solution
A Bridge Stance Overlay is a local interpretive annotation attached to an existing F.9 bridge card. It does not change the underlying bridge kind, direction, CL, or loss notes.
Starter overlay vocabulary
Boundary rule
A stance annotation is interpretive help for authors and readers. It is not a second bridge ontology, not a bridge card, and not a permission and not a publication with named authority-reference relation.
It is also not the coarsening governing pattern. Labels such as projection or nonEquivalent may help a reader interpret an already-declared bridge, but they do not carry source tether, narrower admissible use, non-admissible downstream use, or reopen duty for a coarsened rendering. If that coarsened-rendering relation becomes primary, it belongs to A.6.3.CSC Controlled Semantic Coarsening rather than being absorbed into stance language. If return to the source-bearing episteme or source publication is still needed before any bridge reading is admissible, reopen that episteme or publication before adding stance.
Relation to CL and loss
CLstill governs substitution licence.- loss notes still govern what fails to carry.
- stance annotations merely say how the author wants the bridge to be read.
If the stance materially affects interpretation, the bridge card should publish explicit loss notes that match it.
Archetypal Grounding
Tell. A stance annotation says how to read the bridge, not what the bridge kind structurally is.
Show (System). An operator alarm label may operationalizes a broader control cue without becoming identical to it.
Show (Episteme). A TAE felt-sense phrase may be only a partialAnalogy to a later formal term.
Bias-Annotation
Lenses tested: Gov, Arch, Onto/Epist, Prag, Did. Scope: Universal for stance overlays attached to existing F.9 Bridge Cards inside FPF.
This pattern favors disciplined cross-school comparison and bridge readability over sweeping synonym claims. The main mitigation is that every stance remains subordinate to the underlying Bridge Card, its direction, CL, and loss notes, with explicit handoff to A.6.3.CSC when the issue under repair is source-bearing return for a coarsened rendering rather than bridge-card reading.
Conformance Checklist
CC-F.9.1-1A stance annotation SHALL NOT replace the underlyingF.9bridge kind.CC-F.9.1-2Stance annotations SHOULD be accompanied by explicit loss notes when they materially affect interpretation.CC-F.9.1-3nonEquivalentSHALL block silent substitution.CC-F.9.1-4A stance annotation SHALL NOT claim higher-CL sameness than the bridge card'sCLand kind allow.CC-F.9.1-5A stance annotation SHALL NOT stand in for source-bearing return when a coarsened rendering still needs reopen before any bridge-bearing reading is admissible; that relation belongs toA.6.3.CSC Controlled Semantic Coarsening.
Common Anti-Patterns and How to Avoid Them
- Annotation as ontology. Do not treat stance as the bridge kind itself.
- Friendly-vague analogy. If the relation is high-loss, say so explicitly.
- Stance inflation. Do not use the annotation to smuggle in substitution rights that
F.9withholds. - Stance as coarsened-rendering cure. Do not add
projection,localRename, or another overlay as if that repaired a coarsened note that still needs source-bearing return before bridge reading.
Consequences
The benefit is reusable interpretive clarity for bridge-heavy bundles and school comparisons. The trade-off is one more declared annotation layer on bridge cards.
Rationale
U.LanguageStateSpace and U.LanguageStateTransductionTrajectory create many legitimate cross-school comparisons. F.9.1 gives those comparisons a reusable stance vocabulary without fragmenting the underlying F.9 bridge discipline.
The practical gain is narrow but real: teams already use short stance glosses in review work, and without a governed overlay those glosses either smuggle bridge CL through casual wording or sprawl into a second bridge taxonomy. Keeping the overlay subordinate to the bridge card lets bundles reuse interpretive cues while the boundary rule and the worked projection anti-case keep source-bearing return and bridge publication duty where they belong.
SoTA-Echoing
SoTA note. This section does not mint an independent second bridge rule track. It stays truthful only when the boundary rule, conformance checklist, worked bridge-card examples, and legacy-note repair below still tell the same story about the stance staying subordinate to the bridge card.
Traditions covered. This overlay binds itself to comparative-theory glossing, design-translation annotation, operator documentation, and other practices that add short interpretive stance labels on top of already bridge-stance overlay relation cards.
Worked-slice docking. The nearest practical recovery loci here are the localRename, operationalizes, projection, and partialAnalogy examples in F.9.1:13.1 through F.9.1:13.4, plus the anti-case F.9.1:13.5. If the SoTA claim cannot be recovered through those worked slices and the early boundary rule, do not let the citation stand in for the live pattern law.
Local stance. Best-known current practice supports a narrow rule: stance labels are useful only when they stay visibly subordinate to a published bridge card, its direction, CL, loss notes, and reviewable source-cell and target-cell structure.
Relations
- Builds on:
F.9,C.2.2a. - Primary boundary:
F.9governs Bridge Card discipline;F.9.1governs only stance overlays attached to existing Bridge Cards. - Coordinates with:
A.16.0,E.17.1,A.6.P,A.6.A,C.16.Q,C.25, andB.4.1. - Constrains: local stance annotations on bridge cards used in comparative and tradition bundles.
Worked Bridge-Card Examples
localRename
A bridge card may relate two near-coextensive operational labels inside one declared context fragment and mark the stance as localRename. The bridge card still publishes its own direction, kind, CL, and loss notes. The stance only warns the reader that the author's intended reading is close renaming within that boundary; it does not license export of the rename beyond the stated fragment.
operationalizes
A broad capability cue may be bridged to a more procedural checklist or control ritual. The bridge card may carry the stance operationalizes to show that the target is being read as a procedural or operational gloss over the source. The relation can still be high-loss: the procedural target need not preserve the source's broader theoretical framing, and the stance does not claim type-structure sameness, implementation authority, execution permission, gate approval, or A.15 work authority.
projection
A rich construct may be mapped into a narrower reporting or measurement rendering. The bridge card may declare the stance projection when the target intentionally keeps only one aspect. The required loss notes should name the dropped dimensions, because the stance is informative only when the omitted structure is made explicit.
Table-level note: projection is only a stance over a declared bridge. It does not govern loss, recoverability, narrower admissible use, non-admissible downstream use, or source reopen for a coarsened rendering; that relation belongs to A.6.3.CSC Controlled Semantic Coarsening.
partialAnalogy and nonEquivalent
A comparative bundle may need to mention an explanatory resemblance across traditions without claiming substitution. In such cases partialAnalogy may guide reading when the shared pattern is local and declared. If review concludes that this local resemblance still lacks reuse support, nonEquivalent should be preferred so that apparent similarity does not drift into silent replacement. The label blocks equivalence and silent substitution; it does not by itself assert Disjoint or CL=0 unless the underlying F.9 bridge card says so.
projection is not a coarsened-note cure
A team may write a short comparison note saying that one report-only metric is basically a projection of a richer operations concept. That sentence does not by itself justify a projection overlay. First recover the underlying F.9 bridge card, its direction, CL, and Loss Notes from the source-bearing episteme or source publication needed for the Bridge Card. Only then may the overlay say how to read that bridge. If readers still need return to the source-bearing episteme or source publication before any bridge-bearing use is admissible, the overlay must wait; it cannot repair the missing bridge card.
Practical use guidance
- Publish a stance overlay only on top of a complete bridge card that already declares bridge kind, direction,
CL, and explicit loss notes where needed. - Choose the least-committing stance that truthfully describes the intended reading; do not upgrade the overlay merely because it sounds more helpful.
- If multiple interpretive notes are needed, prefer one primary stance plus explicit loss notes rather than several competing overlays.
- Use
nonEquivalentwhen the main value of the annotation is to warn the reader away from substitution. - In comparative sets or tradition-focused bundles, place the overlay near the bridge card it qualifies so readers can inspect structural bridge data before reading the interpretive gloss.
A practical check is simple: ask whether the overlay merely helps reading or is covertly claiming extra sameness, transport, or substitution rights. If it does the latter, revise the bridge card itself rather than decorating it.
Legacy-note repair and boundary
Legacy comparative notes often contain undeclared stance language such as "roughly the same", "really a projection", or "just an operational version". When such a note is normalized, the first repair step is to recover the underlying bridge card in F.9; only then may a Bridge Stance Overlay be added as an explicit local stance annotation.
The pattern intentionally does not define a second bridge taxonomy, a new substitution calculus, or a score for bridge quality. Those responsibilities remain with the bridge card, CL, and declared loss discipline. Tradition bundles may carry many bridge cards with stance overlays, but the overlays remain local annotations attached to those cards, not free-standing comparative objects.
Overlay Declaration Discipline
A stance overlay is useful only when it stays visibly subordinate to the bridge card it qualifies.
Minimal overlay declaration
A usable stance overlay should normally publish:
- the qualified
F.9bridge card, - the chosen stance term,
- the local reason the stance is helpful,
- and any loss emphasis that becomes especially important under that stance.
Without this declaration set, a stance word becomes a decorative gloss detached from the bridge it is supposed to interpret.
One primary stance per bridge card
A bridge card should normally carry one primary stance overlay. If several interpretive notes are needed, the extras should usually live in explicit loss notes or surrounding commentary rather than in several competing stance tags.
Overlay locality
A stance overlay is local to the bridge card and context fragment that publish it. Reusing the same stance label elsewhere is admissible only when the new bridge card independently supports that reading.
Interaction with CL, Direction, and Loss
CL remains prior
If the stance sounds friendlier than the declared CL, CL wins. An operationalizes or localRename overlay cannot overrule a high-loss bridge or a low-substitution CL declaration.
Direction-sensitive reading
Some stance labels read differently depending on bridge direction. A construct may project into a report-only rendering in one direction while the reverse direction is not admissible at all. Authors should therefore avoid stance prose that sounds symmetric when the bridge card is directional.
Loss emphasis rule
When a stance is likely to invite over-reading, the loss note should state a sharper boundary rather than soften it. The overlay is useful exactly because it helps interpretation; that is also why it can mislead if the losses are understated.
Bundle Use and Comparative Reading
Bundle-level reuse
Tradition bundles and viewpoint bundles may reuse the same stance vocabulary across many bridge cards, but the interpretation remains card-local. Bundle reuse is a readability aid, not a warrant that similarly named overlays are structurally equivalent.
Comparative stance caution
Two bridge cards may both be marked projection while dropping very different dimensions. Reviewers should therefore compare the loss notes and source-cell and target-cell structure, not the overlay term alone.
Boundary to second bridge taxonomy
If authors start grouping bridges primarily by stance label and ignoring bridge kind, direction, CL, or loss, they have implicitly created a rival bridge taxonomy. F.9.1 forbids that drift.
Review Matrix and Migration Tests
A reviewer can test stance-overlay integrity with five questions:
- Is the underlying bridge card complete and still primary?
- Does the overlay stay within the bridge card's structural claims?
- Would the same overlay still be truthful if read in the reverse direction? If not, the locality or directionality needs to be made clearer.
- Do the loss notes carry the interpretive claim that the overlay might otherwise overstate?
- Is the bundle using stance as a readability aid, or as a covert replacement for bridge ontology?
Legacy prose about things being "really the same", "only a projection", or "just an operational version" should therefore be migrated by recovering bridge kind, direction, CL, and loss first, then adding an overlay only if it still adds disciplined interpretive value.
F.9.1:End
Status Families Mapping (Evidence • Standard • Requirement)
“Keep statuses in their native modality; translate between Contexts explicitly.”
Status. Architectural pattern.
Builds on: E.10.D1 D.CTX (Context ≡ U.BoundedContext); F.1 (Contexts), F.2 (Seeds), F.3 (Local‑Senses → SenseCells), F.4 (Role Description Status templates), F.9 (Bridges).
Coordinates with. B.3 Trust & Assurance Calculus (interprets CL penalties); Part C patterns: KD‑CAL (measurement semantics), Norm‑CAL (deontic logic), Method‑CAL (DesignRunTag).
Intent & applicability
Intent. Provide a simple, Context‑first way to express and compare status meanings across disciplines without collapsing modalities (epistemic vs deontic). We focus on three pervasive status families:
- EvidenceStatus (what the world shows) — epistemic modality.
- StandardStatus (what a canon sanctions) — deontic (curatorial) modality.
- RequirementStatus (what an obligation is doing) — deontic (compliance) modality.
Each status meaning is local to a Context (U.BoundedContext). Cross‑context relationships appear only via Bridges (F.9) with a declared kind and CL (congruence level).
Applicability. Whenever models mix observations, standards, and obligations: service acceptance from uptime measurements; safety proofs against normative checklists; ML model “validated” vs “approved for use”.
Non‑goals. No workflows, no tool states, no editorial lifecycles. This pattern defines conceptual meaning and safe reasoning moves, not procedures.
Problem frame
Without a modality‑aware mapping of statuses:
- Homonym traps. Validated in metrology ≠ validated in software QA; approved in a standard ≠ compliant to a requirement.
- DesignRunTag bleed. Design‑time “approved method” is used as if it proved run‑time “meets SLO”.
- False substitution. Observed availability 99.95% is silently treated as SLO satisfied without declaring the translation.
- Name inflation. New U.Types minted to stabilise drifting status words instead of fixing Contexts and Bridges.
Forces
Core idea (didactic)
Three families, two modalities, one habit. Treat every status word as a SenseCell with a declared StatusModality and inside one Context. When you must relate statuses across Contexts, declare a Bridge (F.9) that says what kind of relation, which CL value applies, which way (if narrower/broader), and what is lost. Prefer explanation Bridges; permit substitution only when kind/CL allow it.
Reading an Episteme. For every U.Episteme, read the EntityOfConcernSlot, ClaimGraphSlot, ReferenceSchemeSlot, ViewpointSlot, and carrier references under A.7 and MVPK. Statuses classify the Episteme; enactment remains with U.System and U.Work. (Formal identity rules: see KD‑CAL.)
Minimal vocabulary (this pattern only)
- StatusFamily. Sub‑typing inside senseFamily=Status: one of EvidenceStatus, StandardStatus, RequirementStatus.
- StatusCell. A SenseCell whose meaning is a status with a declared StatusModality ∈ {epistemic, deontic}
- StatusModality. The mode of a StatusCell: epistemic or deontic. Use this term instead of the bare word modality per E.10 LEX rules.
- Polarity. The orientation of a status relative to a claim/obligation: Positive (supports/satisfies), Negative (contradicts/violates), Neutral/Undetermined.
- Window. The applicability span of a status (temporal or conditional), e.g., “Q3‑2025”, “under load ≥ 70%”.
- Status target. The exact value the status qualifies: a claim (epistemic), a method or exact standard-governed project kind and reference (standard), or a clause (requirement).
- Bridge (F.9). The only admissible way to relate StatusCells across Contexts; declares kind (≈, ⊑, ⊒, ⋂, ⊥, or an Interpretation arrow), CL, and Loss; substitution is modality‑preserving.
StatusModality guard. EvidenceStatus is epistemic; StandardStatus & RequirementStatus are deontic. Role Description Status templates (F.4) bind to these StatusModalities; no mixing. The bare token modality is against E.10/LEX); this pattern uses StatusModality.
The spine: three local ladders (Context‑native, small and renameable)
The following ladders are didactic spines. Each Context may rename levels or insert thin sub‑levels, but Bridges must state how they align to this spine (kind & CL). Names appear in Tech / Plain register.
-
Episteme‑as‑actor (forbidden). Never attribute Work to an Episteme; only Systems act.
-
Requirement vs Hypothesis. “Desired property/goal” is not
Requirementstatus; use hypothesis/target + evaluation. -
Mereology ≠ Provenance. Part‑whole edges never justify claims; use EPV‑DAG with carriers.
EvidenceStatus (epistemic statusModality)
EvidenceStatus order (lower-support to higher-support):
- Observed / Seen once.
- Measured / Quantified under a declared procedure.
- Corroborated / Seen independently (≥ 2 distinct sources/procedures).
- Replicated / Repeated by others under varied conditions.
- Refuted (negative polarity) / Counter‑evidence overrides prior levels.
- Inconclusive (neutral) / Insufficient signal.
Context alignment examples (illustrative):
SOSA/SSN:Observation ↦ Observed/Measured; GxP validation datapack may map to Replicated (if protocol diversity holds) with CL stated.
Invariants (context‑local): Replicated ⇒ Corroborated ⇒ Measured ⇒ Observed. Negative (Refuted) cancels positives within the same Window.
StandardStatus (deontic/curatorial statusModality)
Levels (design‑time stance):
- Candidate / Proposed, under review.
- Draft / Working text, not normative.
- Approved / Normative in this Context/edition.
- Deprecated (negative) / Discouraged; may be removed.
- Superseded (negative) / Replaced by a newer edition/profile.
Context alignment examples:
ISO profile: Published International Standard ↦ Approved; IETF RFC (Proposed Standard) ↦ Draft/Approved depending on local policy; CL must be declared on the Bridge.
Invariants: At most one positive stance at a time per Context & edition; Superseded implies Approved held in a prior Window.
RequirementStatus (deontic/compliance statusModality)
Levels (run‑aware stance toward an obligation):
- Applicable / The clause binds in this Window.
- Inapplicable / Clause does not bind under stated conditions.
- Satisfied (positive) / Met within Window.
- Violated (negative) / Not met within Window.
- Waived (neutral/administrative) / Binding suspended with justification.
- Pending (neutral) / Awaiting evaluation or evidence.
Context alignment examples:
ITIL4:SLO achieved ↦ Satisfied; ODRL:Duty fulfilled ↦ Satisfied; ODRL:Prohibition breached ↦ Violated.
Invariants: For the same clause and Window, Satisfied and Violated are mutually exclusive. Applicable is a precondition for either; Waived switches off the precondition temporarily.
Contextual Citation Operators (pointer)
Citation operators (context‑scoped). Authors MAY use the typed edges supports, refutes, dependsOn, supersedes inside a single Context when expressing how an Evidence/Standard status applies. Formal semantics are governed by B.3.2 (Evidence & Validation Logic). Cross‑Context use requires a declared Bridge (F.9) and carries CL/Loss penalties.
Solution — how meanings connect (conceptual, notation‑free)
S‑1. Anchor status meanings per Context. Every status word (validated, approved, compliant) is treated as a StatusCell inside a specific Context. The ladder position is determined locally (e.g., “validated (metrology)” aligns to Replicated with CL stated; “validated (software)” may align to Corroborated).
S‑2. Attach statuses to the right Targets. EvidenceStatus → Claim or Quantity; StandardStatus → Method/Artefact; RequirementStatus → Clause. This prevents swapping “how we measure” with “what we promise”.
S‑3. Translate via Bridges, not by name. Example: Measured availability (SOSA) →ᴍᴇᵃ SLO clause (ITIL) with CL=2, Loss: sampling window & clock skew. This supports explanation; substitution (“Satisfied”) requires same StatusModality, a stricter Bridge kind (F.9) and a declared evaluation rule (from the Service pattern), not from F.10.
S‑4. Keep DesignRunTag honest. StandardStatus is design‑stance; EvidenceStatus is run‑signal; RequirementStatus spans both. Use Interpretation Bridges (F.9) for design↔run readings, not equivalence.
S‑5. Prefer explanation over substitution. If a Bridge cannot reach CL≥2 on the same senseFamily, do not substitute. Use Naming‑only rows or explanations; keep Role Descriptions (F.4) out of harm’s way.
Invariants (normative, lightweight)
- Modality purity. A StatusCell’s StatusModality is explicit and must not change during reasoning; cross‑modality claims require an Interpretation Bridge (F.9).
- Target typing. A status must name its Target kind: claim, artefact, or clause. Inferences that ignore the Target kind are invalid.
- Window discipline. Every positive/negative status names a Window; contradictions are detected within the same Window only.
- Local monotonicity. Within one context, a higher-support EvidenceStatus implies all lower-support positives for the same Target & Window.
- Mutual exclusivity (requirement). For a given clause & Window: not (Satisfied ∧ Violated).
- No free promotion. StandardStatus (Approved) does not entail RequirementStatus (Applicable or Satisfied).
- Bridge gate. Any Cross‑context comparison or reuse of a status must cite a Bridge (kind, CL, Loss); otherwise only context‑local reading is permitted.
- Weakest‑link propagation. When multiple Bridges contribute to a Cross‑context interpretation, the effective CL is the minimum (cf. F.7/F.9).
- Naming restraint. Status labels used across Contexts without a Bridge are Naming-only and non-operative for Role Assignment & Enactment decisions.
Micro‑illustrations (snapshots, not procedures)
-
Metrology → Service. Observed uptime (SOSA) with Window “July” plus Bridge →ᴍᴇᵃ to SLO clause (ITIL) yields: we can explain why “Satisfied” might hold if the Service pattern’s evaluation rule says so. F.10 itself does not declare “Satisfied”.
-
QA vs GxP “validation”. Validated (software QA Context) aligns to Corroborated (CL=1–2). Validated (GxP Context) aligns to Replicated (CL=2–3) with Loss: environment diversity. Equating them needs ≈ with CL stated or they remain separate.
-
“Approved model” ≠ “Compliant outcome”. StandardStatus: Approved for a MethodDescription does not imply RequirementStatus: Satisfied for a production clause. It only permits use; evidence must still speak.
Anti‑patterns & remedies
Worked examples
Each example names Contexts, shows StatusCells on their native ladders, and draws only the Bridges that F.10 allows.
Service acceptance from run‑time evidence
Contexts. SOSA/SSN (2017) — sensing; ITIL 4 (2020) — services; ODRL 2.2 — deontics (optional).
Local statuses.
SOSA:Observation(uptime)→ EvidenceStatus: Measured, Window July.ITIL:SLO("99.9% monthly")→ RequirementStatus Target = clause SLO‑99.9, Window July.ITIL:Practice("Monitoring pipeline")→ StandardStatus: Approved (design‑time).
Bridges.
- Interpretation:
Measured(uptime@July)→ᴍᴇᵃSLO‑99.9(kind = ⊑, CL = 2, Loss: sampling bias, clock skew). - Evaluation rule (Service pattern, local to ITIL Context): returns Satisfied iff mean uptime ≥ threshold across Window.
Result. We may explain the Satisfied conclusion for SLO‑99.9@July; we do not assert StandardStatus⇒RequirementStatus. If logs later show outages, a Violated@July replaces Satisfied@July (mutual exclusivity + Window discipline).
Safety controller: design approval vs run‑time duty
Contexts. State‑space control texts — design; IEC 61131‑3 — run; Norm‑CAL profile (safety layer) — deontics.
Local statuses.
ControllerSpec(v3)— StandardStatus: Approved in the Norm‑CAL Context.PLC:Task(log@Q3)— EvidenceStatus: Corroborated for response time ≤ 50 ms, Window Q3.Duty("Emergency stop ≤ 100 ms")— RequirementStatus clause in Norm‑CAL.
Bridges.
- Interpretation:
Corroborated(response@Q3)→Dutycheck (kind = ⊑, CL = 2, Loss: sensor latency).
Result. The duty may be Satisfied@Q3 with explanation. Approved spec alone never yields Satisfied; it authorises deployment but does not prove compliance.
ML model: validation vs fairness requirement
Contexts. ML validation canon — DesignRunTag hybrid; Policy Context (fairness charter) — deontics; SOSA/metrics — sensing.
Local statuses.
Model v12: cross‑val AUC=0.92→ EvidenceStatus: Corroborated (Windows: CV folds).Policy: “Demographic parity Δ ≤ 0.1”→ RequirementStatus clause.“Validation SOP v5”→ StandardStatus: Approved (governance method).
Bridges.
Measured(Δ@Aug)→ᴍᴇᵃPolicy clause(⊑, CL = 2, Loss: sampling variance).
Result. Satisfied@Aug (if Δ≤ 0.1 in production Window) is justifiable. Cross‑val AUC does not decide fairness; only production Δ does.
Medical device log: refutation
Contexts. SOSA/clinical observations; Regulatory profile.
Local statuses.
Observation: adverse event→ EvidenceStatus: Observed@Week 34.Requirement: “No AE in first 30 days”→ RequirementStatus clause.
Bridge & outcome.
- Observation → Interpretation Bridge to clause check (kind: Interpretation, CL=3).
- Violated@Week 34 overrides any earlier Satisfied@Week 34 (Weakest‑link; same Window).
Reasoning primitives (judgement schemas, notation‑free)
Premises ⊢ conclusion. No side effects. All moves are mental and Context‑aware.
-
StatusModality classification
σ is a StatusCell ⊢ statusModality(σ) ∈ {epistemic, deontic}Reading: Every status sits on exactly one statusModality. -
Target typing
σ ⊢ targetKind(σ) ∈ {claim, artefact/method, clause}Reading: Evidence→claim; Standard→artefact/method; Requirement→clause. -
Window requirement
σ has polarity ∈ {positive, negative} ⊢ window(σ) ≠ ∅Reading: Pos/neg statuses must name a Window. -
Local ladder monotonicity (evidence)
Replicated(τ,W) ⊢ Corroborated(τ,W) ⊢ Measured(τ,W) ⊢ Observed(τ,W)Reading: Higher-support status implies lower-support status within the same Window. -
Requirement exclusivity
clause κ, window W ⊢ ¬(Satisfied(κ,W) ∧ Violated(κ,W))Reading: A clause cannot be both satisfied and violated in one Window. -
Windowed refutation
Refuted(τ,W) ⊢ cancels {Observed,Measured,Corroborated,Replicated}(τ,W)Reading: Negative evidence cancels positives only in the same Window. -
Explanation Bridge
σ@C, τ@D, Bridge(C,D, kind∈{≈,⊑,⊒,⋂}, CL, Loss), sameStatusModality ⊢ explains(σ ⇒ τ) with ⟨CL,Loss⟩Reading: Cross‑context explanation is permitted when statusModalities match. -
Substitution permission (guarded)
explains(σ ⇒ τ) ∧ kind∈{≈,⊑,⊒} ∧ CL≥θ ∧ windowsAligned ⊢ maySubstitute(σ→τ)Reading: Substitution is allowed only above a project‑declared threshold θ (see F.7) and aligned Windows. -
Cross‑statusModality embargo
statusModality(σ) ≠ statusModality(τ) ⊢ explains(σ ⇒ τ) requires Interpretation kindReading: Crossing statusModalities is interpretation only; no direct substitution. -
Observation→Requirement clause (SOSA, Work outcomes)
SOSA:Observation about Work outcomes ⊢ may interpret(RequirementClause κ) via Bridge(kind=Interpretation, CL, Loss); produces Evaluation(κ, Window); substitution forbiddenReading: Observations inform clause evaluation within a Window; they never become RequirementStatus. Use F.12 for the verdict pipeline. -
Weakest‑link CL
{explains(σᵢ ⇒ τ) with CLᵢ} ⊢ effectiveCL(⋀ᵢ σᵢ ⇒ τ) = minᵢ(CLᵢ)Reading: Multiple Bridges compose by the minimum CL. -
Naming‑only safeguard
noBridge(C,D) ⊢ crossContextUse(σ@C ⇒ τ@D) = namingOnlyReading: Without a Bridge, only explanatory prose is allowed—no status inferences. -
DesignRunTag honesty
statusModality=deontic ∧ targetKind=artefact/method ∧ window=W ⊢ doesNotDecide(clause κ @ W)Reading: Approval of a method never decides a clause’s satisfaction for a run‑time Window.
Relations
Builds on: E.10.D1 D.CTX (Context discipline); F.1 (Contexts in view); F.2–F.3 (Seeds→Local‑Senses→SenseCells); F.4 (Role Description Status template with statusModality/target/window slots); F.7 (Bridge taxonomy & CL semantics); F.9 (Bridge artefact).
Constrains:
- F.4 (Role Description Status): a Role Description Status must select a StatusFamily, StatusModality, target kind, and Window.
- F.8 (Naming): status labels reused across Contexts must be marked as Context‑scoped; global synonyms forbidden.
- Part C patterns: KD‑CAL provides measurement semantics for EvidenceStatus; Norm‑CAL provides clause logic for RequirementStatus; Method‑CAL frames DesignRunTag for StandardStatus.
Used by. Service Acceptance (F.12), Assurance roll‑ups (B.3), any cross‑domain conformance narrative.
Migration notes (conceptual)
- New status word appears. Treat it as a StatusCell in its Context; place it on the local ladder; only then consider Bridges.
- Edition changes. If a Context redefines a status, fork the StatusCell (new SenseCell) and relate old↔new via a Bridge (often ⊑/⊒ with Loss).
- Threshold tuning. The project sets θ (minimum CL for substitution). Lowering θ widens reuse but increases risk; document the choice in F.7 terms.
- Clause redesign. If a requirement clause changes, keep old Windows intact; new clause starts a new Target; do not rewrite history.
- Explode→compress. When many bespoke tool statuses pile up, map them to the nearest ladder level in their Contexts; keep tool labels as Naming‑only.
- Bridge hardening. If explanation Bridges are used frequently, reconsider experiments that could raise CL enough to permit substitution—or accept explanation as sufficient and stop short of substitution.
Acceptance tests (SCR/RSCR — concept‑level)
Static conformance (SCR)
- SCR‑F10‑S01 (Modality & Target). Every StatusCell declares StatusModality and target kind; none cross modalities.
- SCR‑F10‑S02 (Windowed polarity). Every positive/negative StatusCell instance bears a Window.
- SCR‑F10‑S03 (Local order). EvidenceStatus instances satisfy monotonicity; RequirementStatus enforces mutual exclusivity per clause+Window.
- SCR‑F10‑S04 (Bridge citation). Any Cross‑context comparison cites a Bridge(kind, CL, Loss); absent that, mark as naming‑only.
- SCR‑F10‑S05 (Substitution guard). Any substitution claim checks same StatusModality, kind ∈ {≈,⊑,⊒}, CL≥θ, Windows aligned.
- SCR‑F10‑S06 (Weakest‑link). Where multiple Bridges feed one conclusion, the displayed effective CL is the minimum.
Regression (RSCR)
- RSCR‑F10‑E01 (Edition churn). Adding a new edition of a Context does not retro‑change past status conclusions; only new Windows see new meanings.
- RSCR‑F10‑E02 (Threshold change). If θ changes, re‑evaluate only substitution conclusions; explanations remain valid.
- RSCR‑F10‑E03 (Bridge drift). When a Bridge’s CL/Loss changes, recompute affected effective CL; substitution conclusions below θ revert to explanation.
- RSCR‑F10‑E04 (Contradiction catch). Adding a negative status within a Window cancels prior positives for the same clause (or raises a flagged contradiction if both persist).
Didactic distillation (90‑second script)
Three families, two modalities. Evidence tells us what the world shows (Observed→Measured→Corroborated→Replicated; Refuted cancels) — epistemic; Standard tells us what a canon sanctions (Candidate→Draft→Approved→Deprecated→Superseded) — deontic; Requirement tells us what an obligation is doing (Applicable/Inapplicable; Satisfied/Violated; Waived/Pending) — deontic. Every status is a StatusCell inside one Context with exactly one StatusModality, a Target, and a Window. When you must relate status meanings across Contexts, draw a Bridge that states the kind (≈, ⊑/⊒, ⋂, ⊥ or Interpretation), the CL value, and the Loss (what you ignore). Prefer explanation; allow substitution only when statusModalities match, kind permits, CL≥θ, and Windows align. Keep design vs run stance honest: approval is design‑time, evidence is run‑time, requirements span both. With this habit, “validated”, “approved” and “compliant” stop being a muddle of synonyms and become precise, local meanings you can compare safely and audibly.
F.10:End
Method Quartet Harmonisation
“Keep the how (Method), the recipe (MethodDescription), the happening (Work/Execution), and the control push (Actuation) in their own Contexts—then relate them explicitly.”
Status. Architectural pattern.
Builds on: E.10.D1 D.CTX (Context discipline); A.3/A.3.1/A.3.2 (Transformer Constitution; U.Method, U.MethodDescription); A.15/A.15.1 (U.Work as record of occurrence); Sys‑CAL (control/actuation semantics); KD‑CAL (observation).
Coordinates with. F.1–F.3 (Contexts, Seeds → SenseCells), F.4 (Role Description), F.5 (Naming), F.6 (Role Assignment & Enactment Cycle (Six-Step)), F.7/F.9 (Bridges), F.10 (Status families & Windows).
Aliases (informative). Method/Spec/Work or Actuation split; DesignRunTag harmonisation.
Intent & applicability
Intent. Provide a notation‑free, Context‑aware map that keeps four notions distinct and connectable:
U.Method— the abstract way of doing (design‑time concept).U.MethodDescription— the recipe episteme that describes a Method.U.Work(informal: Execution) — the run‑time occurrence of doing (recorded event).U.Actuation— the control output applied to a plant (domain‑specific Work in Sys‑CAL).
The pattern makes the split usable across FPF patterns (Role Assignment & Enactment, Sys-CAL, KD-CAL, Kind-CAL, planned LCA-CAL) and legible across Contexts (SPEM/BPMN for design; PROV-O/SOSA for run; IEC 61131-3/state-space for control).
Applicability. Any time a discussion risks mixing designs with executions, recipes with runs, or workflow with control signals; whenever you need to name or reason about “how we do X”, “the SOP/script/model”, “the actual run”, or “the actuator push”.
Non‑goals. No team workflow, no editors, no tools. No prescriptive file formats. Only conceptual distinctions and safe reasoning moves.
Problem frame
When Method, MethodDescription, Work, and Actuation collapse into one another, models drift:
- DesignRunTag blur. A BPMN process (design graph) is cited as if it had happened.
- Recipe/approval fallacy. An approved SOP (MethodDescription) is treated as proof that the service met its SLO.
- Execution ≟ control. PLC task execution logs are conflated with control outputs (actuation), hiding stability issues.
- Cross‑context homonymy. Activity, task, execution, process, command change sense across Contexts; inferences quietly break.
Forces
Core idea (didactic)
Four boxes, four arrows, zero leakage.
- Box 1 — Method (design). The idea of how to achieve an effect (algorithm, clinical pathway, welding technique).
- Box 2 — MethodDescription (design, epistemic). The written/encoded recipe that describes a Method (SOP, code, BPMN/SPEM model, theorem‑prover script).
- Box 3 — Work (run). The occurrence where a System‑in‑Role enacts (some version of) the Method.
U.Workis the record of this event. - Box 4 — Actuation (run, Sys‑CAL). The control output (setpoint/command) issued to influence a plant during Work.
Arrows (conceptual relations).
MethodDescription ↦ Method(describes) — design stance.Work ↦ MethodDescription(followedRecipe? yes/no/variant) — run stance referencing design.Work ↦ Method(enacts) — run stance referencing the abstract way.Actuation ↦ Work(part‑of / occurs‑during) — control output inside execution.
Each box/arrow is context‑local (SPEM, PROV‑O, IEC…). Cross‑context relations use Bridges (F.7/F.9) with CL/Loss.
Minimal vocabulary (this pattern only)
- Context =
U.BoundedContext(per D.CTX). - Local‑Sense → SenseCell (F.3): the address (Context × sense) for a term like process, task, activity, command.
- Concept‑Set (F.7/F.8): row aligning multiple SenseCells as “what we regard as the same” (after Bridges & losses are declared).
- Window (F.10): temporal/conditional envelope (e.g., July, during test run T42, under load ≥ 70%).
- StatusCell (F.10): laddered status about methods/specs/works (e.g., Approved (spec); Observed/Measured (work)).
Solution — the quartet lens (notation‑free)
Not steps for a team—lenses for a thinker. Use them to sanity‑check any statement about “how”, “script”, “run”, or “signal”.
The stance split (design vs run)
- If the claim is about what should be done or how it is described, you are on the design stance (Method or MethodDescription).
- If the claim is about what happened or what was emitted, you are on the run stance (Work or Actuation).
- Guard rule. Never let a conclusion cross stances without (a) an explicit Bridge kind (interpretation vs substitution), and (b) an acceptable CL (F.7/F.9, F.10).
The recipe/idea split
- Method is the idea; MethodDescription is the recipe describing that idea.
- Different recipes may describe the same method (profiles, languages, detail profiles); one recipe may encode several methods (composite SOP).
- Naming guard. Keep labels distinct: compressive‑strength test (Method) vs ASTM C39‑18 (MethodDescription).
The happening (Work) with signal (Actuation)
- Work is the occurrence (a PROV Activity, an IEC Task executing a program, a lab run).
- Actuation is the control output (setpoint, PWM command, valve open %) emitted during Work.
- You can have Work without Actuation (analysis job), or Actuation without a complex Method (manual push). Many scenarios have both.
The Role Assignment & Enactment touch-points
- Roles (F.4) bind who enacts the Method at run‑time (behavioural masks), not what permissions they hold (RBAC is a different Context).
- Statuses (F.10) bind to the right box: Approved → MethodDescription; Measured/Observed → Work; Satisfied/Violated → Requirement clause about the Work’s outcomes within a Window.
Harmonisation map (Context‑first)
Examples of local SenseCells and safe Bridges. You may keep the exact Contexts from your F.1 cut.
Design (ideas & recipes).
- SPEM/ISO 24744 Context:
SenseCell{Method}= Activity Definition / Task Definition;SenseCell{MethodDescription}= Process Description / WorkProduct (as recipe). - BPMN 2.0 Context:
SenseCell{MethodDescription}= Process (diagram) as design‑time recipe (do not confuse with run). - OWL/Kind-CAL Context: labels for Method kinds (type taxonomies) when needed (naming, not behaviour).
Run (occurrences & outputs).
- PROV‑O Context:
SenseCell{Work}= Activity (time‑bounded occurrence). - SOSA/SSN Context: Observations about Work results (feeds EvidenceStatus).
- IEC 61131‑3 Context:
SenseCell{Work}= Task executes Program (runtime);SenseCell{Actuation}= Output command / setpoint emitted by the program.
Typical Bridges (with intent).
BPMN:Process (design)≈SPEM:Process Definition(design↔design; CL depends on modelling profile; Loss: expressiveness gaps).IEC:Task execution⊑PROV:Activity(run↔run; Loss: control‑specific timing semantics, scan cycles).Actuation (IEC)⋂Activity (PROV)(intersection: the sub‑intervals where outputs are emitted).SOSA:ObservationinterpretsRequirement clause(F.10) about Work outcomes (cross‑StatusModality: epistemic→deontic; never substitution; declare Bridge(kind=Interpretation, CL, Loss)).
Invariants (normative)
- DesignRunTag honesty. Statements about Method or MethodDescription (design) MUST NOT be used as if they were statements about Work or Actuation (run) without an explicit Bridge and Window.
- Box discipline. Every claim about “how”, “recipe”, “run”, or “control output” MUST point to the correct box in the quartet.
- Context locality. Terms (process, activity, task, command) MUST be read as SenseCells in their Contexts (F.3); Cross‑context equivalence is a matter for F.7/F.9 Bridges.
- Status placement. Approved attaches to MethodDescription; Observed/Measured attach to Work; Satisfied/Violated attach to clauses about Work outcomes within a Window (F.10).
- Actuation as Work‑part. Actuation MUST be modelled as occurring within (or as a specialised form of) Work on the run stance; it does not replace Work.
- Naming clarity. Technical/Plain labels for the quartet SHOULD be distinct (F.5); avoid homonymous single‑word labels when Contexts collide.
- Bridge guard. Cross‑context moves MUST declare kind (≈, ⊑, ⊒, ⋂, ⊥, Interpretation), CL, and Loss (F.7/F.9).
Micro‑examples (didactic)
-
Data pipeline deploy (software). Method: “Delta‑load transform”. MethodDescription:
etl_delta.py@v3. Work: nightly run 2025‑07‑14. Actuation: none. Statuses: Spec Approved (governance Context); Work Measured (rows processed) → Evidence for SLO (F.10). -
Valve control (industrial). Method: PID tuning heuristic. MethodDescription: SOP sheet + IEC program. Work: PLC task cycle 18:00–18:30. Actuation: PWM duty sequence. Bridge:
IEC:Task⊑PROV:Activity(CL=2). Observed setpoint tracking interprets requirement “settling time ≤ 5 s”. -
Clinical assay (lab). Method: ELISA. MethodDescription: Kit IFU v7. Work: run batch #B217. Actuation: pipetting robot commands. Statuses: Spec Approved ≠ batch Satisfied (requires evidence at batch Window).
Anti‑patterns & remedies
Worked examples (extended)
Each scenario names Contexts (from your F.1 cut), identifies the quartet boxes, and shows safe Cross‑context moves.
ML service rollout (software + services + sensing)
-
Contexts: SPEM/ISO 24744 (design), PROV‑O (run), SOSA/SSN (sensing), ITIL 4 (services).
-
Quartet:
- Method: Canary deployment strategy.
- MethodDescription: Canary plan document with traffic slices and rollback rules (design Context).
- Work: Two canary runs 2025‑08‑02 10:00–12:00 (PROV‑Activities).
- Actuation: Traffic‑shifting commands (if modeled, they are outputs inside Work; optional in pure software).
-
Statuses (F.10): Spec Approved; Work Observed (latency/err‑rate via SOSA Observations); SLO clause Satisfied in Window if measured ≤ thresholds.
-
Bridge(s): BPMN (if used) Process (design) → PROV Activity (run) Interpretation, CL=2, Loss: path vs time granularity.
Pay‑off: No one infers SLO satisfaction from a plan. Evidence is about Work; the plan stays design‑time.
Industrial furnace control (control + sensing + services)
-
Contexts: State‑space control texts (design), IEC 61131‑3 (run), PROV‑O (run), SOSA/SSN (sensing), ITIL 4 (services).
-
Quartet:
- Method: PID with feed‑forward.
- MethodDescription: Controller tuning sheet + program description.
- Work: PLC task cycles 14:00–14:30 (IEC Task executes Program), Bridged as PROV Activity.
- Actuation: Setpoint & valve duty cycle outputs emitted during Work.
-
Statuses: Spec Approved; Work Observed (temperature curve); requirement settling time ≤ 5 s Satisfied if the observation within Window meets it.
-
Bridge(s):
IEC:Task⊑PROV:Activity(CL=2, Loss: scan‑cycle semantics).SOSA:Observationinterprets requirement clause (CL=3).
Pay‑off: Separates doing from pushing, and both from measuring; compliance judged where it belongs.
Clinical assay
-
Contexts: SPEM/ISO 24744 (design), Lab assay canon (DesignRunTag split as per discipline), PROV‑O (run), SOSA/SSN (sensing).
-
Quartet:
- Method: ELISA.
- MethodDescription: Kit IFU v7 (instructions for use).
- Work: Batch B217 performed 2025‑06‑21 (PROV Activity).
- Actuation: Pipetting robot commands (optional detail).
-
Statuses: Spec Approved; Work Observed (absorbance readings); Quality gate Satisfied within batch Window.
-
Bridge(s): IFU (design) interprets Activity (run) for acceptance (CL=2, Loss: deviations allowed per kit tolerances).
Pay‑off: A clean line from recipe → run → measurement → decision, without role-assignment and status-assertion conflation.
F.11:11.4 Incident response (services + enactment)
-
Contexts: ITIL 4 (services/design), BPMN 2.0 (design), PROV‑O (run).
-
Quartet:
- Method: Triage‑first incident handling.
- MethodDescription: Incident workflow diagram + playbook.
- Work: Handling INC‑3421, 09:10–10:02 (PROV Activity).
- Actuation: none (unless modeling command invocations as outputs).
-
Statuses: Spec Approved; Work Observed (timestamps, response time); SLO “MTTR ≤ 60 min” Satisfied within the incident Window.
-
Bridge(s): BPMN (design) → PROV (run) Interpretation, CL=2, Loss: gateways vs real‑time branching.
Pay‑off: MTTR claims are tied to Work, not to the playbook.
Reasoning primitives (judgement schemas)
Pure mental moves; no storage or workflow is implied.
-
Box classifier
statement s, Contexts fixed ⊢ box(s) ∈ {Method, MethodDescription, Work, Actuation}Reading: Classify any claim by its box (design idea, design recipe, run occurrence, control output). -
Stance firewall
box(s) ∈ {Method,MethodDescription} ⊢ s ∉ {claims about Work outcomes}Reading: A design‑time (stance) statement does not assert a run‑time (stance) outcome. -
Followed‑recipe judgement
Work w, MethodDescription m ⊢ follows(w,m) ∈ {exact, variant, none}Reading: A Work may follow a recipe exactly, with a variant, or not at all; later inferences must respect this value. -
Enactment link
Work w, Method h ⊢ enacts(w,h)Reading: The occurrence enacts the abstract Method (even if several specs describe it). -
Actuation inclusion
Actuation a, Work w ⊢ occursWithin(a,w)Reading: Control outputs are within (or are parts of) a Work interval. -
Observation binding (KD‑CAL handshake)
Observation o about outcome(x) during Window W of Work w ⊢ evidenceFor(w, clause(x,W))Reading: Measurements about a Work outcome within a Window serve as evidence for clauses about that Work. -
Clause evaluation (F.10 handshake)
evidenceFor(w,clause) ⊢ status(clause,w) ∈ {Satisfied, Violated, Inconclusive}Reading: A clause about Work yields a status via the observation set. -
Context locality
term t, Context C ⊢ meaning(t)@C is localReading: A term’s sense is local to its Context; Cross‑context claims require Bridges. -
Bridge application (F.7/F.9)
Bridge B: (X@A) ~kind,CL,Loss~ (Y@B); fact about X ⊢ transferableTo(Y) with penalty(CL,Loss)Reading: Facts may transfer across Contexts only along a declared Bridge, with the stated penalty. -
Version non‑retroactivity
MethodDescription m updated → m' ⊢ ∀ past Work w: follows(w,m')=none (unless w references m')Reading: New recipes don’t rewrite history. -
Composite reasoning
MethodDescription m = m1 ; m2, Work w executes steps w1,w2 ⊢ enacts(w1,m1) ∧ enacts(w2,m2)Reading: Composition on design does not force composition on run, but when it aligns you may relate sub‑runs to sub‑methods. -
SLO attachment guard
SLO clause about service outcome ⊢ attachesTo(Work-window), not MethodDescriptionReading: Service obligations concern what happened within a Window, not the existence of a plan.
Relations
Builds on:
E.10.D1 D.CTX (Context ≡ U.BoundedContext); A.3/A.3.1/A.3.2/A.15 (Method/Spec/Work foundations); Sys‑CAL (Actuation semantics); KD‑CAL (Observation); F.1–F.3 (Contexts → SenseCells); F.10 (Status families & Windows).
Constrains:
- F.4 Role Description: Roles or Statuses must point to the right box (e.g., Approved → MethodDescription; Observed → Work).
- F.5 Naming: Enforce distinct Tech/Plain labels for Method/Spec/Work or Actuation where homonyms threaten.
- F.7/F.9 Bridges: All Cross‑context assertions among quartet terms must go through explicit Bridges with kind/CL/Loss.
Used by. Part C patterns (Sys‑CAL, KD‑CAL, Method‑CAL, Kind-CAL, LCA‑CAL) when describing examples, proofs, and cross‑disciplinary mappings.
Migration notes (conceptual)
- Split conflated “process”. Where a single “process” node stands for both plan and run, refactor into MethodDescription (design) and Work (run); add a Bridge if the prose relied on identity.
- Reassign statuses. Move any Approval-like statuses from Work to MethodDescription; move Satisfied/Violated from Spec to clauses about Work within Windows.
- Expose actuation. If control outputs are buried in “execution logs,” mint Actuation SenseCells and relate them within Work.
- Version fences. Past Works keep references to the version of MethodDescription they attempted to follow; don’t update those links retroactively.
- Name collisions. Where task/activity/process appear with mixed meanings, prefix with Contexts and relabel per F.5 (Tech/Plain).
- Backfill Bridges. If earlier text implied Cross‑context equivalence, add explicit Bridges (F.7/F.9) declaring kind/CL/Loss.
Acceptance tests (SCR/RSCR — concept level)
Static conformance checks (SCR)
- SCR‑F11‑S01 (DesignRunTag honesty). Every normative claim about outcomes is attached to Work (with Window), not to Method or MethodDescription.
- SCR‑F11‑S02 (Box placement). Labels and statuses appear on the correct box (e.g., Approved on MethodDescription only).
- SCR‑F11‑S03 (Actuation inclusion). All Actuation statements are modeled as within a Work interval.
- SCR‑F11‑S04 (Context discipline). Each quartet term is expressed as a SenseCell with its Context; no Cross‑context identity is asserted here.
- SCR‑F11‑S05 (Bridge guard). Any Cross‑context reasoning among quartet terms references an explicit Bridge with kind/CL/Loss.
Regression checks (RSCR)
- RSCR‑F11‑E01 (Spec update). When a MethodDescription changes, previous Works remain valid and unchanged; their statuses don’t shift unless re‑evaluated with explicit rationale.
- RSCR‑F11‑E02 (Bridge drift). If a Context updates, revisit Bridges that touch quartet terms; adjust CL/Loss only via F.7/F.9.
- RSCR‑F11‑E03 (Status drift). Adding new statuses does not move them across boxes (e.g., no new “Work‑Approved”).
- RSCR‑F11‑E04 (Signal creep). Introducing new Actuation details does not erase or replace Work context.
Didactic distillation (90‑second script)
“When you talk about how something is done, decide which of the four boxes you mean. Method is the idea (the way). MethodDescription is the recipe (the description). Work is the happening (what actually occurred). Actuation is the control push (signals emitted during Work). Keep design and run as distinct stances. Plans and approvals live in the design stance; measurements and obligations live in the run stance within Windows. Words like process, task, activity, command are context‑local—say process (BPMN), activity (PROV), task (IEC). If you must relate them, draw a Bridge and declare its kind, CL, and Loss. For compliance, don’t point at the plan—point at Work, show Observations, and judge clauses in F.10. Hold this quartet in your head and you’ll stop mixing plans with facts, signals with outcomes, and names across Contexts. + Everything else—naming (F.5),
U.RoleDescription(F.4) andU.RoleAssignment/U.RoleEnactment(A.2.1/F.6), Bridges (F.7/F.9)—falls into place.
F.11:End
F.12 — Service Acceptance–Work Evidence Link
“Judge promises on what happened, not on what was planned.” Status. Architectural pattern. Builds on: F.1 context of meaning (U.BoundedContext); F.2 Term Harvesting; F.3 Intra‑Context Sense Clustering; F.5 Naming Discipline; F.7/F.9 Bridges & CL; F.10 Status Families & Windows; F.11 Method Quartet Harmonisation; A.2.3 U.PromiseContent. Coordinates with. KD‑CAL (Observation/Characteristic/Scale); Sys‑CAL (Work or Actuation contexts). Non‑goals. No team workflows, no tooling, no editorial procedures. This pattern specifies how to think about acceptance, not how to store or operate systems.
Intent & applicability
Intent. Provide a conceptual binding that turns a service promise (SLO/SLA clause) into a clear, local, time‑bounded judgement about actual Work, using Observations as evidence and explicit Bridges where Cross‑context notions must meet. The result is a Status (Satisfied/Violated/Inconclusive) that attaches to the clause‑about‑that‑Work‑in‑that‑Window.
Applicability. Any situation where a service promise clause (promise content) is published (availability, latency, safety margin, response time, quality gate, compliance duty) and its fulfilment must be decided from what occurred. Works across digital services, industrial control, laboratory processes, clinical pathways, logistics, etc.
Problem frame
- Plan ≠ proof. Diagrams and playbooks are treated as if they demonstrated fulfilment.
- Signal ≠ outcome. Control signals (Actuation) are mistaken for the consumer‑perceived outcome (the outcome promised by the clause).
- Global meanings. Availability, incident, latency are used as if universal, ignoring context‑local senses.
- Unstated translation. Metrics from one canon are mapped to clauses from another without declaring losses.
- Timeless verdicts. Judgements are asserted with no explicit Window (day, month, batch).
Forces
Core idea (didactic)
Bind promises to runs with measurements in time. Acceptance is a quadruple of anchors (all context‑local):
- ClauseCell — a deontic/Standardual SenseCell stating the promise (availability ≥ 99.9%, MTTR ≤ 60 min, temperature within band).
- WorkCell — a SenseCell for the Work that enacted service delivery work in the relevant situation.
- MeasureCell — a SenseCell for the Observation/Characteristic used as evidence (KD‑CAL).
- Window — the explicit period in which the judgement is made (F.10).
A Predicate compares the Measure against the Clause within the Window. The Status (Satisfied/Violated/Inconclusive) attaches to ClauseCell@Window about WorkCell, never to a plan.
Minimal vocabulary (this pattern only)
- ClauseCell. A context‑local deontic/Standardual concept (SLO, obligation, target), typically from services/deontics Contexts (e.g., ITIL 4, ODRL).
- WorkCell. A context‑local run‑time occurrence (PROV Activity, IEC Task Execution, etc.).
- MeasureCell. A context‑local observation concept (KD‑CAL Observation over a Characteristic with a Scale/Unit).
- Window. A time envelope (calendar month, batch, incident interval, shift) per F.10.
- Predicate. A clause‑shape: threshold, percentile, count‑within‑limit, band‑conformance, etc.
- Bridge. An explicit Cross‑context relation with kind/CL/Loss (F.7/F.9).
Context discipline. Terms like availability, activity, task, observation are always read as context‑local. Cross‑use requires a Bridge.
The binding, as five mental rules (notation‑free)
R1 — Attachment rule.
An acceptance verdict attaches to the Clause, scoped by a Window, about a specific Work:
status(ClauseCell, WorkCell, Window) ∈ {Satisfied, Violated, Inconclusive}.
Reading: We do not place “Satisfied” on the plan or on the whole service concept.
R2 — Evidence rule. Only Observations (MeasureCell) that refer to the outcome of the same Work and lie within the Window may support the verdict. Reading: Control commands and approvals are not evidence of outcome.
R3 — Predicate rule. Every ClauseCell is read with a Predicate schema that defines how Measures decide:
- Threshold:
value ≥/≤ target. - Percentile:
Pₚ(value) ≤ target. - Ratio/Share:
good_time / total_time ≥ target. - Count‑within‑limit:
count(events of type E) ≤ target. - Band:
min(value) ≥ L ∧ max(value) ≤ U.
R4 — Bridge rule. If Clause, Work, and Measure live in different Contexts, apply declared Bridges with kind, CL, and Loss notes. Reading: Without a Bridge, do not presume transferability of meanings.
R5 — Window rule. Every verdict is time‑bounded. Changing the Window can change the result; no retroactivity from new clauses or specs (cf. F.10).
Clause templates (conceptual schemata)
These are shapes of meaning, not data fields.
- Availability (share‑of‑time)
- ClauseCell: service availability ≥ 99.9% monthly (services Context).
- MeasureCell: uptime indicator over Work (KD‑CAL).
- Predicate:
good_time/total_time ≥ 0.999. - Window: calendar month.
- Bridge: from monitor semantics → consumer‑perceived availability (kind: proxy; CL: 2; Loss: blind to partial degradations).
- Latency (percentile)
- ClauseCell: p95 latency ≤ 120 ms during incidents (services Context).
- MeasureCell: response time observation for the same Work episode (KD‑CAL).
- Predicate:
P95(latency) ≤ 120ms. - Window: incident interval.
- Bridge: from request‑level telemetry → service‑level promise (kind: aggregation; CL: 2; Loss: sampling bias).
- Safety margin (band)
- ClauseCell: temperature ∈ [L,U] during batch (deontics/quality Context).
- MeasureCell: process temperature observation (KD‑CAL).
- Predicate:
min ≥ L ∧ max ≤ U. - Window: batch run interval (Work).
- Bridge: not needed if Measure and Clause are in the same Context; otherwise declare.
- MTTR (count‑within‑limit + duration)
- ClauseCell: MTTR ≤ 60 min per incident.
- MeasureCell: timestamps of Work phases (start fix → restore).
- Predicate:
restore_time − start_fix ≤ 60 min. - Window: each incident’s Work interval.
- Bridge: BPMN design steps → PROV Work Interpretation (CL=2; Loss: gateways ≠ real branching).
Invariants (normative)
- DesignRunTag split. Clauses live on the design stance; judgements live on the run stance about Work (F.11).
- Context locality. All terms are context‑local; Cross‑context meaning flows only across declared Bridges.
- Observation‑only evidence. Verdicts require Observations that about‑refer to Work outcomes; Actuation and Approvals are not sufficient.
- Window explicitness. Every verdict carries a Window; no timeless acceptance.
- Predicate declared. The Clause’s Predicate is explicit; no hidden aggregation or default percentile.
- Non‑retroactivity. Updating clauses or specs does not alter past verdicts; re‑evaluation must be explicit.
- One‑Work focus. A verdict references a specific Work (or a defined population of Works) matched to the Clause’s scope.
- Loss honesty. Each Bridge states kind,
CL, and loss; wider claims require Bridges with the neededCLor same-Context alignment. - No detached pass. When the ClauseCell is a
U.PromiseContent(service promise clause),Satisfiedabout a Work is admissible only if that Work also delivers the promised outcome spec for the clause (A.2.3:8.1fulfilsPromiseContent). This keeps acceptance on the same delivery evidence base (Work facts + Δ anchors + Observations) and prevents “pass verdict separate from delivery”.
Micro‑examples (didactic, multi‑domain)
SaaS uptime (services + sensing)
- Contexts: ITIL 4 (Clause), PROV‑O (Work), SOSA/SSN (Measure).
- ClauseCell: availability ≥ 99.9% monthly.
- WorkCell: service delivery work Activities during June.
- MeasureCell: uptime observation from synthetic probes.
- Predicate: share‑of‑time ≥ 0.999.
- Bridge: probe result → user availability (kind: proxy; CL: 2; Loss: regional gaps).
- Verdict: Satisfied (June) if the ratio holds; attaches to Clause@June about those Works.
Furnace band (industrial control)
- Contexts: quality/deontics canon (Clause), IEC 61131‑3/PROV (Work), KD‑CAL (Measure).
- ClauseCell: product temperature within [720,740] °C during soak.
- WorkCell: soak phase Work interval.
- MeasureCell: thermocouple Observations (KD‑CAL).
- Predicate: band conformance.
- Bridge: IEC task interval → PROV Activity (Interpretation, CL=2).
- Verdict: Violated if any measured value exits the band.
Incident MTTR (services + enactment)
- Contexts: ITIL 4 (Clause), PROV‑O (Work).
- ClauseCell: MTTR ≤ 60 min per incident.
- WorkCell: each incident’s handling Activity.
- MeasureCell: timestamps (Observed facts) of start‑fix and restore events.
- Predicate: duration ≤ 60 min.
- Bridge: BPMN steps → PROV Activity (Interpretation, CL=2).
- Verdict: Satisfied if the measured interval meets the target.
Anti‑patterns & remedies
Extended worked examples
Each example identifies Contexts, the quadruple ⟨ClauseCell, WorkCell, MeasureCell, Window⟩, any Bridge(s), and the Predicate. The verdict attaches to ClauseCell@Window about WorkCell.
CDN latency across regions (services + sensing + types)
- Contexts. ITIL 4 (Clause), PROV‑O (Work), SOSA/SSN (Measure), OWL 2 (type labels).
- ClauseCell. p95 end‑user latency ≤ 200 ms per region per month.
- WorkCell. delivery Activities per region during the month (PROV).
- MeasureCell. response‑time Observations tagged by region and path (SOSA/SSN).
- Predicate. For each region in the Window,
P95(latency) ≤ 200 ms. - Bridges. probe→user (kind: proxy; CL 2; Loss: last‑mile bias).
- Verdict. Region‑wise statuses; a global “all‑regions met” is the logical AND of region statuses (declare this aggregation explicitly).
- Manager cue. “Green map ≠ one green verdict”; acceptance is per Clause per Window per Work population.
Stroke care: door‑to‑needle (method + enactment + status)
- Contexts. clinical guideline canon (Clause), PROV‑O (Work), SOSA/SSN (Measure), F.10 (status windows).
- ClauseCell. 90% of ischemic‑stroke episodes achieve door‑to‑needle ≤ 30 min per quarter.
- WorkCell. Population of patient‑episode Activities started in the quarter.
- MeasureCell. Timestamps Observation of door and needle events (KD‑CAL).
- Predicate.
|{episodes with (needle−door ≤ 30)}| / |{episodes}| ≥ 0.9. - Bridges. EHR event semantics → PROV Activity (Interpretation, CL 2; Loss: missing triage tags).
- Verdict. If data gaps exceed a declared tolerance, status is Inconclusive rather than “Satisfied by assumption”.
Cold‑chain warehouse (control + sensing + deontics)
- Contexts. quality/deontics canon (Clause), IEC 61131‑3/PROV (Work), SOSA/SSN + ISO 80000‑1 (Measure).
- ClauseCell. temperature ∈ [2,8] °C for ≥ 99.5% of each day.
- WorkCell. The warehouse’s daily storage Activity.
- MeasureCell. Thermistor Observations with calibrated units (KD‑CAL/ISO 80000‑1).
- Predicate.
(good_time / 24h) ≥ 0.995. - Bridges. sensor position → product exposure (kind: proxy; CL 2; Loss: stratification).
- Verdict. Violated if any day fails; annotate Loss to communicate assurance limits.
SaaS incident MTTR (services + enactment)
- Contexts. ITIL 4 (Clause), PROV‑O (Work).
- ClauseCell. MTTR ≤ 60 min per incident.
- WorkCell. Each incident’s handling Activity.
- MeasureCell. Observations of start‑fix and restore timestamps.
- Predicate.
(restore − start_fix) ≤ 60 min. - Verdict. Per incident; a quarter’s report is an explicit aggregation of incident‑scoped verdicts.
Reasoning primitives (judgement schemas, notation‑free)
These are mental inferences; they neither read nor write artefacts. Each reads “if these thoughts hold, you may safely conclude …”.
-
Clause–Work match
covers(ClauseCell, WorkCell) ⊢ admissible(ClauseCell, WorkCell)Reading: The Clause speaks about the kind of Work under judgement (scope alignment). -
Window adequacy
Window is explicit ∧ Window intersects WorkCell-occurrence ⊢ admissible(Window)Reading: There is a concrete time envelope; the Work actually occurred within it. -
Evidence sufficiency
Observations E about WorkCell within Window ⊢ sufficient(E)Reading: There exists a non‑empty set of outcome Observations relevant to the Work and Window. -
Evidence insufficiency → Inconclusive
¬sufficient(E) ⊢ status = Inconclusive(ClauseCell, WorkCell, Window)Reading: Absent admissible evidence, do not guess; mark Inconclusive. -
Predicate evaluation
sufficient(E) ∧ eval(Predicate, E) = true ⊢ status = Satisfied(ClauseCell, WorkCell, Window)sufficient(E) ∧ eval(Predicate, E) = false ⊢ status = Violated(ClauseCell, WorkCell, Window)Reading: The Predicate (threshold/percentile/share/band/…) decides directly from E. -
Bridge discipline
usesCrossContexts(ClauseCell, WorkCell, MeasureCell) ∧ Bridges B declared ⊢ admissible(B)usesCrossContexts … ∧ ¬admissible(B) ⊢ status = InconclusiveReading: Cross‑context comparisons require explicit Bridges; without them, Inconclusive. -
CL aggregation (assurance hint)
Bridges B = {b₁…bₖ} ⊢ effectiveCL = min(CL(bᵢ))Reading: The weakest Bridge governs the assurance level communicated with the verdict (advisory to B.3 calculus). -
Population clauses
Clause quantifies over population W = {w₁…wₙ} ⊢ status = agg({status(Clause, wᵢ, Window)})Reading: For “≥ p%”‑style clauses, compute per‑Work verdicts, then apply the Clause’s quantifier. -
Non‑retroactivity
newClause or newMonitor after Window ⊢ doesNotAlter(status@Window)Reading: Later changes do not rewrite past verdicts. -
Conflict exposure
two admissible Bridge sets ⇒ conflicting statuses ⊢ escalate as Inconclusive, expose Loss notesReading: If equally defensible translations disagree, the honest outcome is Inconclusive plus an explanation.
Relations (with other patterns)
-
Builds on: F.1 (Contexts): keeps all meanings local. F.2–F.3: provide the SenseCells that become Clause/Work/Measure anchors. F.5: ensures labels for Clause/Work/Measure and Windows are didactically clear. F.7–F.9: supply Bridge kinds / CL and loss semantics. F.10: defines Status families and Window constructs. F.11: protects Method, MethodDescription, Work, and Actuation distinctions.
-
Uses (Part C patterns). KD‑CAL (Observation/Characteristic/Scale/Unit). Sys‑CAL (Work or Actuation Contexts). Kind-CAL (type labels for populations or cohort selection).
-
Constrains: Later reporting and assurance rules (B.3) must not collapse CL/Loss; they report them alongside status.
Migration notes (conceptual)
- Clause revisions. Introduce a new ClauseCell; keep old verdicts intact (Non‑retroactivity).
- Monitor changes. Update or replace Bridges (kind/CL/Loss). Future verdicts use the new Bridge; past ones are annotated, not rewritten.
- Scope corrections. If evidence was about the wrong Work, retire the verdict and restate the quadruple; do not patch by redefining the Clause.
- Unit harmonisation. When scales/units change, apply KD‑CAL conversions inside the Measure’s Context; if Cross‑context mapping is needed, declare a Bridge.
- Population refinement. If a Clause’s quantifier is refined (e.g., per‑region → per‑AZ), treat each as a new ClauseCell or a new Window partition; avoid hidden re‑baselining.
- Proxy retirement. When direct Observations become available, prefer them; keep earlier proxy‑based verdicts with their CL/Loss notes.
Acceptance tests (SCR/RSCR — concept‑level)
Static conformance (SCR)
- SCR‑F12‑S01 (Quadruple present). Every acceptance statement names ClauseCell, WorkCell, MeasureCell, and Window.
- SCR‑F12‑S02 (context‑locality). Each of the three Cells cites a Context (U.BoundedContext).
- SCR‑F12‑S03 (Evidence admissibility). The Observation(s) are about the same Work and lie within the Window.
- SCR‑F12‑S04 (Predicate explicit). The Predicate shape is stated (threshold/percentile/share/band/…) with any needed aggregation scope.
- SCR‑F12‑S05 (Bridge discipline). Any Cross‑context use declares Bridge(kind, CL, Loss).
- SCR‑F12‑S06 (Status trichotomy). The verdict is exactly one of {Satisfied, Violated, Inconclusive} and attaches to ClauseCell@Window about WorkCell.
- SCR‑F12‑S07 (Unit honesty). MeasureCell specifies Characteristic, Scale, Unit (KD‑CAL).
- SCR‑F12‑S08 (Temporal honesty). No verdict is asserted without a Window; no clause retroactively changes past verdicts.
Regression checks (RSCR)
- RSCR‑F12‑E01 (Bridge update). When a Bridge CL changes, past verdicts stand; future verdicts reference the new CL; reports surface the difference.
- RSCR‑F12‑E02 (Edition churn). When a Context’s canon updates, Cells reference the edition; old verdicts remain bound to their original editions.
- RSCR‑F12‑E03 (Scope drift guard). If the Work population definition changes, verdicts are not silently re‑interpreted; new verdicts cite the new population.
- RSCR‑F12‑E04 (Window partition). Changing from monthly to weekly windows creates new verdicts; monthly summaries are expressed as explicit aggregations of weekly statuses.
- RSCR‑F12‑E05 (Proxy retirement). When direct Observations replace proxies, the status computation is re‑run forward‑only; past proxy‑based verdicts retain their CL/Loss annotations.
F.12:15.3 Didactic distillation (60‑second recap)
Bind promises to runs with measurements in time. Name the Clause, the Work it talks about, the Measure of what actually happened, and the Window. Evaluate the Clause’s Predicate on Observations about that Work in that Window. If any concept crosses Contexts, declare a Bridge with kind/CL/Loss. The verdict (Satisfied/Violated/Inconclusive) attaches to Clause@Window about Work, never to a plan or to the abstract service.
F.12:End
Lexical Continuity & Deprecation
“Change names without changing history.” Status. Architectural pattern. Builds on: F.1 context of meaning; F.2 Term Harvesting; F.3 Intra‑Context Clustering (SenseCell); F.5 Naming Discipline; F.7 Concept‑Set (row) construction; F.8 Mint‑or‑Reuse decision; F.9 Bridges; F.10 Status windows. Coordinates with. Part C CALs when canon editions change (Sys/KD/Type/Method/LCA). Non‑goals. No registries, workflows, editors, or storage formats. No by‑name Cross‑context equivalence. No silent rewrites of old texts.
Intent & applicability
Intent. Provide a conceptual discipline for evolving labels (for SenseCells, Concept‑Set rows, and Role Description names) so that:
- new names clarify without erasing what earlier texts meant;
- aliases remain local to Contexts;
- genuine sense changes cause explicit splits/merges (F.7/F.9), not cosmetic renames.
Applicability. Whenever you consider renaming, aliasing, deprecating, or retiring any label in FPF: a SenseCell label in a Context, a Concept‑Set row label, or a Role Description name.
Problem frame
Unification efforts rot when names drift faster than senses or, worse, when senses change under a constant name.
- Silent relabeling. A new label is introduced as if nothing changed; readers cannot connect past to present.
- Alias bloat. Synonyms accumulate without discipline; reading becomes guesswork.
- Cross‑context aliasing. A single alias is made to stand for different Contexts (“global slang”), defeating locality.
- Retroactive edits. Old texts are silently rewritten to today’s names, corrupting provenance.
Forces
Core idea (didactic)
Treat names as lenses, not objects. The thing that persists is the sense (a SenseCell inside a Context, or the Cross‑context alignment embodied by a Concept‑Set row, or a Role Description that points to such sense). Names are lenses we look through. When the lens improves, we record a continuity relation between lenses; when the underlying sense changes, we split/merge the thing, then name accordingly.
Contexts keep names local. A label (including aliases) always belongs to one context or to one Concept‑Set row. Cross‑context similarity is handled by Bridges (F.9), never by shared names.
Minimal vocabulary (this pattern only)
- Legacy label — a previously used label in the same Context (or same Concept‑Set row / Role Description).
- Preferred label — the current F.5‑conformant label for that item.
- Alias (context‑local) — a read‑path from a legacy label to the preferred one inside the same Context (or the same row/template). For writing, prefer the current label.
- Continuity relation — a small set of relations over labels (below) that capture whether a change is just wording or a real sense change.
- Epoch note — an informative time marker (“used before 2024‑07”) attached to a legacy label to help readers of old texts. (No storage format implied.)
Solution — Continuity, not “registries”
Rather than maintain a tool or workflow, think with five continuity relations. Use the least-committing relation that tells the truth.
Continuity relations (normative meanings)
-
renames(label_old → label_new)— wording improved, sense unchanged. Use when: Same SenseCell / same Concept‑Set row / same Role Description; only the lexical form changed to satisfy F.5 (morphology, disambiguation, plain/tech harmony). Effect:label_oldbecomes a context‑local alias oflabel_new; both resolve to the same SenseCell, Concept-Set row, or Role Description. Past texts remain valid. -
aliases(label_legacy ↔ label_pref)— legacy synonym kept for reading. Use when: A common historical synonym exists in the same Context for the same SenseCell. Effect: Two‑way read‑path only; writing useslabel_pref. Keep at most one legacy alias per register to avoid bloat. -
splits(label_old ⇒ {label_A, label_B})— one label covered multiple senses; now separated. Use when: Your SenseCell was really two local senses; F.3 has split them; or a Concept‑Set row is refactored into two rows. Effect:label_oldis deprecated (read‑path allowed to a disambiguation note); new writing useslabel_A/label_B. No claim that either continues the old label wholesale. -
merges({label_A, label_B} ⇒ label_new)— two labels now recognized as one sense. Use when: F.3 shows same SenseCell; or two Concept‑Set rows collapse after F.9 raised CL sufficiently. Effect:label_Aandlabel_Bbecome aliases oflabel_new. Keep one epoch note on each legacy label. -
retires(label_old)— name withdrawn without successor. Use when: The label proved misleading and no single successor exists (e.g., it spanned different Contexts, or it was metaphorical). Effect: Only a read‑warning remains (“avoid in new writing; see Contexts X/Y”). Readers are pointed to Bridges or to multiple rows.
Important: All five relations are context‑local (SenseCell level) or row‑local (Concept‑Set). Never use them to “alias” across Contexts. If a change crosses Contexts, it is not a rename; it requires a Bridge (F.9) and often a split/merge of rows (F.7).
Invariants (normative)
- Locality of alias.
aliases(-)andrenames(-)operate within one context (SenseCell) or within one Concept‑Set row / Role Description. - Truth over comfort. If the sense changed, use
splits/merges(and possibly adjust rows/Bridges), notrenames. - Non‑retroactivity. Past texts remain phrased as written; continuity only adds read‑paths, never rewrites.
- Alias parsimony. per Context and per row, keep ≤ 1 legacy alias per register (Tech/Plain); prefer the one readers will most likely encounter.
- Prefer present for writing. In normative writing, use the current preferred label (F.5). Aliases are for reading comprehension.
- Bridge discipline. If a label shift would require crossing Contexts to “explain”, it is not a rename; use F.9 Bridge and, if needed, refactor the Concept‑Set row(s).
- Epoch honesty. When declaring continuity, attach a succinct epoch note (“pre‑2023 usage”) if it aids readers.
Self‑checks (mental, not procedural)
- Same‑sense test. Can you point to the same SenseCell (or same row) before and after? If yes →
renames/aliases. If no →splits/merges. - Context test. Does the change stay inside one context? If it needs two Contexts to explain, it’s a Bridge, not a rename.
- Reader test. What two legacy strings would a newcomer actually meet in old texts? Keep those two as aliases; drop the rest.
- History test. Does your “continuity” require editing old claims? If yes, you’re attempting a retroactive rewrite—stop.
- Didactic test. Can you explain the continuity relation in one sentence? If not, you are hiding a sense change.
Micro‑examples (illustrative)
Pure rename inside a Context (ITIL → clearer plain label)
Context: ITIL 4 (services).
Old: “SLO” (plain: service target) → New: “service‑level objective” (plain unchanged).
Relation: renames("SLO" → "service‑level objective").
Why: F.5 morphology & expansion; SenseCell unchanged (same clause semantics).
Effect: Old guidance remains readable; new writing spells out the term.
Alias for a common legacy synonym (Sys‑CAL)
Context: state‑space control (design).
Preferred: “actuation”. Legacy: “control output”.
Relation: aliases("control output" ↔ "actuation").
Why: Same SenseCell; legacy term appears in older textbooks.
Effect: Readers resolve to the SenseCell; new texts use “actuation”.
Split of a muddled local sense (Enactment)
Context: BPMN 2.0.
Legacy label “process” was used to mean both “collaboration” and “executable process” in a team’s prose.
Relation: splits("process" ⇒ {"collaboration","executable‑process"}).
Effect: The single Concept‑Set row becomes two; old label is deprecated with a disambiguation note.
Merge after clustering raised confidence (Kind-CAL row)
Two Concept‑Set rows {“DBaaS”, “Database‑Service”} converge after F.3 within the same context profile and F.9 raised CL.
Relation: merges({"DBaaS","Database‑Service"} ⇒ "Database‑Service").
Effect: “DBaaS” becomes a legacy alias with an epoch note.
Not a rename: Cross‑context temptation (forbidden)
Contexts: BPMN (design graph) vs PROV‑O (run activity). Temptation: “Let’s rename process to activity.” Diagnosis: Cross‑context; different SenseCells. Action: No continuity relation. Keep labels; if needed, declare a Bridge (F.9) explaining design→run mapping with CL/Loss.
Anti‑patterns & remedies
Extended examples
KD‑CAL × Services — metric target labels over time
- Contexts: ITIL 4 (services, design); SOSA/SSN (sensing, run).
- Before: Role Description used “SLO” (plain “target”) and readers often saw “service target”.
- Move:
renames("SLO" → "service‑level objective")(Context: ITIL). Keepaliases("service target" ↔ "service‑level objective"). - Why: Same local sense; clearer morphology for F.5; SOSA/SSN labels untouched.
- Pay‑off: Runtime Observations (SOSA) are later compared to service‑level objective clauses (ITIL) without Cross‑context aliasing.
Sys‑CAL × LCA‑CAL — separating execution vs actuation
- Contexts: IEC 61131‑3 (run); state‑space control texts (design).
- Temptation: Rename “task execution” to “actuation” “to sound control‑ish”.
- Diagnosis: Different Contexts; different SenseCells (program run vs control output).
- Move: No rename. Keep labels; later add Bridge “
execution (IEC)produces signals that realiseactuation (control)” with CL stating partial coverage. - Pay‑off: Plant narratives stop calling programs “actuators”; runtime vs control semantics stay crisp.
Kind-CAL × Method‑CAL — false merge avoided
- Contexts: OWL 2 (types, design); SPEM 2.0 (methods, design).
- Issue: A row labeled “Class” tried to absorb “WorkProductKind” by a
renames. - Diagnosis: Not same sense; different calculi (type vs artefact category).
- Move: Split the row:
splits("class" ⇒ {"type‑class","work‑product‑category"}). - Pay‑off: Downstream Role Descriptions can point to the correct SenseCell without redefining ontological commitments.
Enactment × KD‑CAL — retiring a misleading metaphor
- Context: BPMN 2.0 (design).
- Legacy: Team jargon “heartbeat” used for a timer event. Newcomers confuse it with sensor heartbeats (KD‑CAL).
- Move:
retires("heartbeat")in BPMN Context with note “use timer event; ‘heartbeat’ refers to sensor liveness in KD‑CAL”. - Pay‑off: Two different ecosystems stop colliding on the same catchy word.
Concept‑Set row refactor after rising CL
- Rows:
{“DBaaS”, “Database‑Service”}representing service notions across several Contexts. - F.3 + F.9 outcome: High CL; evidence of same Cross‑context alignment.
- Move:
merges({"DBaaS","Database‑Service"} ⇒ "Database‑Service")at row level. Both legacy labels become row‑local aliases with epoch notes. - Pay‑off: One clearer row label; old articles still understandable.
Reasoning primitives (judgement schemas, notation‑free)
Each judgement is a pure thought: premises ⇒ safe conclusion. No storage, no workflow, no roles.
Let ContextOf(ℓ) be the Context of label ℓ (when ℓ names a SenseCell); rowOf(ℓ) the Concept‑Set row (when ℓ names a row); senseOf(ℓ) the SenseCell it denotes (if local); pref(thing) the current preferred label of a SenseCell / row / Role Description.
Same‑sense & same‑place
ContextOf(ℓ₁)=ContextOf(ℓ₂) ∧ senseOf(ℓ₁)=senseOf(ℓ₂) ⊢ mayRename(ℓ₁→ℓ₂)
Reading: If two labels denote the same SenseCell in the same Context, a rename is legitimate.
F.13:12.2 -Local alias
ContextOf(ℓ₁)=ContextOf(ℓ₂) ∧ senseOf(ℓ₁)=senseOf(ℓ₂) ⊢ aliases(ℓ₁↔ℓ₂)
Reading: Legacy synonym can be kept as a read‑path; writing uses pref.
Split detection
coversMultipleLocalSenses(ℓ) ⊢ splits(ℓ ⇒ {ℓA,ℓB,… })
Reading: If one label straddles several local senses, declare a split and prefer the new precise labels.
Merge admission
ContextOf(ℓA)=ContextOf(ℓB) ∧ senseOf(ℓA)=senseOf(ℓB) ⊢ merges({ℓA,ℓB} ⇒ ℓN)
Reading: Once F.3 shows identity of sense within a Context, merging labels into one preferred label is safe.
Retirement
misleading(ℓ) ∧ ¬∃ℓ' sameSense(ℓ,ℓ') ⊢ retires(ℓ)
Reading: If a label misleads and has no single successor, retire it and point readers to relevant Contexts/rows.
Cross‑context guard
ContextOf(ℓ₁) ≠ ContextOf(ℓ₂) ⊢ ¬mayRename(ℓ₁→ℓ₂)
Reading: Different Contexts forbid rename/alias; any relation goes to Bridge (F.9).
Writing discipline
thing t ⊢ writeWithPreferred(t) = pref(t)
Reading: Normative prose uses the current preferred label; aliases are for reading.
Reading resolution
legacyLabel ℓ ⊢ readResolve(ℓ) = ⟨thing, pref(thing), epoch?⟩
Reading: A reader can mentally resolve a legacy label to the thing and its present name, with epoch hint if needed.
Alias budget
aliasesFor(thing, register=r) = A ⊢ |A| ≤ 1
Reading: Keep at most one legacy alias per register (Tech/Plain) for any one thing.
Row‑level continuity
rowOf(ℓA)=rowOf(ℓB)=R ∧ intension(R) stable ⊢ mayRenameRow(R,ℓB)
Reading: A row label can change if the row’s membership/intension did not change; otherwise refactor rows first (F.7).
Relations
Builds on: F.1 context of meaning (keeps locality), F.2 Harvesting (provides attested strings), F.3 Clustering (establishes SenseCells), F.5 Naming Discipline (supplies preferred labels), F.7 Concept‑Set rows, F.8 Mint‑or‑Reuse, F.9 Bridges, F.10 Status windows, F.11 Method harmonisation, F.12 Service acceptance.
Constrains:
- F.5 (Naming): may select preferred labels only after applying these continuity relations.
- F.7 (Rows): row relabels require row intension stability; otherwise use split/merge rows.
- F.9 (Bridges): Cross‑context changes must not be expressed as renames/aliases.
Used by. All Part C patterns when editions shift; all examples and tutorials when teaching with legacy terminology.
Migration notes (conceptual playbook)
- Ask the same‑sense question first. If the underlying SenseCell/row is unchanged, prefer
renames; else reach forsplits/merges. - Keep it inside the Context. If your explanation crosses Contexts, stop—this is Bridge territory (F.9), not a rename.
- Prefer clarity over fashion. Rename only when the new label removes a real ambiguity (F.5 criteria), not to chase style.
- Limit nostalgia. Admit one legacy alias in each register that readers will most likely meet; leave the rest to footnotes in examples.
- Deprecate with kindness. When retiring a label, add a one‑line pointer note (e.g., “see
timer eventin BPMN; ‘heartbeat’ in KD‑CAL means sensor liveness”). - Rows before names. If a rename request coincides with a shift in what the row covers, refactor rows (F.7) first, then choose labels.
- Edition bumps. When a canon updates, check labels used in that Context: if definitions shift, it’s a split/merge; if not, you may
renamesfor style/uniformity. - Teach the delta. In primers, show a mini table with legacy → preferred pairs only where readers will encounter both.
Acceptance tests (SCR/RSCR — concept‑level)
Static conformance (SCR)
- SCR-F13-S01 (context-local continuity). Every
renames/aliasesrelates labels within the same context or the same row/Role Description; none cross Contexts. - SCR‑F13‑S02 (Truthfulness). For each
renames, there exists an unchanged SenseCell/row; otherwise the move is rejected. - SCR‑F13‑S03 (Alias budget). For any one thing and register, the number of deprecated aliases is ≤ 1.
- SCR‑F13‑S04 (Non‑retroactivity). No requirement or suggestion to rewrite past texts is present; continuity is expressed as read‑paths.
- SCR‑F13‑S05 (Row integrity). A row rename occurs only when the row’s intension is stable; if membership changed, a row split/merge is documented (F.7).
- SCR‑F13‑S06 (Bridge discipline). No alias/rename is used to imply Cross‑context sameness; any such relation belongs under F.9.
Regression (RSCR)
- RSCR‑F13‑E01 (Edition drift audit). When a canon edition changes, all labels from that Context are checked against definitions; moves are
renamesif senses stable, elsesplits/merges. - RSCR‑F13‑E02 (Alias creep check). Periodically ensure alias budgets remain within ≤ 1 per register; surplus aliases are pruned.
- RSCR‑F13‑E03 (Bridge leak check). Scan continuity notes for Cross‑context hints; any such case is converted into a Bridge or deleted.
- RSCR‑F13‑E04 (Didactic continuity). Sampling of examples shows that readers can resolve legacy labels to current ones without confusion (via the continuity notes).
Didactic distillation (60‑second script)
Names are lenses. The thing that persists is the sense (a SenseCell in a Context, a Concept‑Set row, a Role Description). When you improve a lens, use
renamesoraliasesinside that same place. When the thing changes, say so withsplits/merges—and adjust rows/Bridges accordingly. Never rename across Contexts. Keep at most one legacy alias per register. Do not rewrite history; give readers read‑paths and brief epoch notes. With this discipline, you can clarify language without erasing meaning, and your models keep both continuity and truth.
F.13:End
Anti‑Explosion Control (Roles & Statuses)
“Name less, express more.”
Status. Architectural pattern. Depends on. F.1 context of meaning; F.2 Harvesting; F.3 Local Sense Clustering; F.4 Role Description; F.5 Naming Discipline; F.7 Concept‑Set Table; F.8 Mint‑or‑Reuse. Coordinates with. F.10 Status Windows & Mapping; F.11 Method Quartet Harmonisation; F.12 Service Acceptance Binding; F.13 Lexical Continuity. Aliases (informative). Role and Status economy; Explosion guard.
Intent & applicability
Intent. Prevent the uncontrolled growth of Roles and Statuses by privileging reuse, bundling, explicit separation‑of‑duties (SoD), and applicability windows over minting new names. Keep the vocabulary small, crisp, and composable while remaining faithful to local meanings fixed by Contexts (F.1) and SenseCells (F.3).
Applicability. Whenever a new Role or Status is proposed, a team merges two lines of work, or a domain shifts its jargon. Use this pattern before adding rows to the Concept‑Set Table (F.7) or new Role Descriptions (F.4).
Non‑goals. No org charts, no RBAC policies, no process roles. This pattern describes mental moves for architectural naming, not governance machinery.
Problem frame
Left unchecked, Role and Status vocabularies tend to diverge:
- Synonym stacks. Reviewer, Approver, Validator, Verifier minted separately despite overlapping responsibilities.
- Modifier creep. Night‑Operator, Shift‑Operator, Remote‑Operator proliferate where one Role plus a window would suffice.
- SoD leakage. New names invented to evade an intended separation (Requestor‑Approver as one Role).
- Status paintjobs. Compliant, At‑Risk, Grace, Waived, Temporarily‑Breached—labels multiply where a single Status × window model would be clearer.
- Context blending. A control‑Context Actuator gets treated as an Enactment Execution Role; a deontic Duty becomes a runtime Status.
Explosion harms didactics and increases alignment cost (F.9).
Forces
Minimal vocabulary (this pattern only)
- Role Description (F.4): a Role (behavioural mask) or Status (epistemic/deontic standing) tied to a SenseCell.
- Concept‑Set row (F.7): a Cross‑context intent (“what we count as one thing”) aligned by SenseCells.
- Bundle (this pattern): a named composition of Role Descriptions that are meant to be used together by design (e.g., {Requester, Approver} for change control). A Bundle is a concept, not a package.
- SoD Constraint (this pattern): a conceptual rule stating that two Roles must not be played by the same Holder in the same window.
- Window (F.10): an claim scope (time stance, holon level, run segment) that delimits when a Role or Status holds.
Core idea (didactic)
Use four levers before minting a name:
- Reuse the row. If the intent matches an existing Concept‑Set row and the local SenseCell is already present, use it.
- Bundle, don’t blur. When two Roles must travel together, name the Bundle, not a new hybrid Role.
- Declare SoD, don’t fuse. When Roles must stay apart, state the SoD instead of minting a “super‑role.”
- Window, don’t multiply. When a Status looks different across time/scale, keep one Status with explicit windows.
Solution — the control cabinet (conceptual, notation‑free)
Reuse by row (first lever)
- Move. If a proposal matches the intension of an existing row (F.7), adopt its Role Description or add a local SenseCell inside that row.
- Pay‑off. Names don’t proliferate; Cross‑context tables stay thin.
Example (services). Service‑availability‑compliance already exists as a row. New labels SLO‑Met / Uptime‑OK reuse that row; SOSA/SSN Observations later feed it (F.12).
Bundle instead of hybrid (second lever)
- Move. When practice always pairs two Roles, define a Bundle
{RoleA, RoleB}. - Not a hybrid. Do not coin RoleAB; you’ll erase SoD options and obscure responsibilities.
Example (enactment). {Requester, Approver} is a Bundle. Request‑Approver (one Role) is not allowed; it contradicts intended checks.
Separate by SoD, don’t evade (third lever)
- Move. Record SoD constraints where separation matters (“Requester ⟂ Approver in run window”).
- Why here. SoD belongs to semantics, not org policy; it protects structure across Contexts and times.
Example (methods). {Author ⟂ Reviewer} in the review window. A proposal Senior‑Reviewer to “do both” is rejected; the Bundle remains {Author, Reviewer} with SoD.
Window the Status (fourth lever)
- Move. Keep a single Status and attach windows for grace, evaluation, active, archival.
- Avoid. Compliant, At‑Risk, Grace as separate Status types.
Example (acceptance). Compliance Status has readings per window:
- evaluation window: “pending check”,
- active window: “met / breached”,
- grace window: “temporarily tolerated breach”. One Status; clear windows.
Factor modifiers as facets, not names
- Move. Treat qualifiers (shift, locality, domain) as facets of the same Role or Status or as windows, not new types.
Example (operations). Operator with window facet timeOfDay = night—not a new Role Night‑Operator.
Invariants (normative)
- context‑locality. Each Role Description remains tied to a SenseCell in a single Context (F.3, F.4).
- Row preference. New Role Descriptions SHOULD map to an existing row; new rows (F.7) require F.8 justification.
- No hybrid Roles. If two Roles are conceptually distinct, they must not be fused into one to bypass SoD. Use Bundle + SoD.
- Windowed statuses. Status proliferation across time/scale MUST be expressed as windows of a single Status family (F.10).
- Bundle clarity. A Bundle names only composition; it does not inherit or redefine member semantics.
- Minimal modifier naming. Adding a modifier to a label MUST pass F.5 tests; prefer facets/windows over new Role or Status names.
- Concept‑first. No invariant relies on organization charts or access policies; semantics precede governance.
Reasoning primitives (judgement schemas)
Pure mental moves; no tools, no workflows.
Let rowOf(τ) be the Concept‑Set row of template τ, senseOf(τ) its SenseCell, win(τ) its window set.
-
Row reuse admissibility
intent(τₙ) ≡ intent(row r) ∧ ∃σ: senseOf(σ) in r ⊢ reuseRow(τₙ → r)Reading: If the proposed template’s intent matches an existing row with a local SenseCell, reuse the row. -
Bundle recommendation
alwaysTogether{α,β} ∧ distinct(α,β) ⊢ bundle({α,β})Reading: If two distinct Roles occur together by design, name the Bundle. -
SoD necessity
conflictRisk{α,β} ∧ sameHolder ∧ sameWindow ⊢ SoD(α ⟂ β)Reading: If the same Holder in the same window would create a conflict, require SoD. -
Hybrid rejection
SoD(α ⟂ β) ⊢ forbid(hybrid(α,β))Reading: A SoD pair cannot be fused into one Role. -
Windowing over multiplication
status σ showsVariantsAcross(w₁,…,wₖ) ⊢ keepOneStatus(σ) ∧ win(σ)={w₁,…,wₖ}Reading: Variants across time/scale become windows, not new Status names. -
Facet over rename
modifier m changes circumstance ¬ essence ⊢ preferFacet(τ,m)Reading: If a modifier alters circumstances only, represent it as a facet/window.
Micro‑examples (engineer, manager, and researcher lenses)
Enactment (change control)
- Proposal. Requester‑Approver as a single Role “to move faster.”
- Moves. SoD(
Requester ⟂ Approver) + Bundle{Requester, Approver}. - Result. Same throughput, preserved checks, no hybrid Role.
Services (SLO evaluation)
- Proposal. New Status At‑Risk.
- Moves. Keep Compliance Status; add grace window and a forecast facet (informative) if needed.
- Result. One Status with windows; fewer names, clearer timelines.
KD‑CAL (evidence)
- Proposal. Pre‑validated between Verified and Validated.
- Moves. Use Status chain within one family:
Verified → Validated; represent uncertainty as confidence (F.10), not another Status. - Result. Clean ladder; no extra label.
Sys‑CAL (plant ops)
- Proposal. Night‑Operator, Remote‑Operator.
- Moves. Role: Operator; facets/windows:
timeOfDay,presenceMode. - Result. One Role, portable qualifiers.
Method quartet (reviews)
- Proposal. Senior‑Reviewer to bypass
{Author ⟂ Reviewer}. - Moves. Keep SoD; if seniority matters, introduce Assurance Level facet (F.10) on the review decision, not a new Role.
- Result. Separation preserved; trust expressed as a Status property, not a Role type.
Anti‑patterns & remedies
Worked examples
Enactment + Services + KD‑CAL — “SLO compliance without label sprawl”
Contexts. ITIL 4 (services), SOSA/SSN (sensing), PROV‑O (run). Intent. Track SLO compliance with minimal Status vocabulary.
- Naïve proposal. Statuses: Compliant, At‑Risk, Breached, Grace, Waived.
- Moves (F.14). Keep Compliance as one Status family; define windows: evaluation (prediction against forecast), active (actuals vs target), grace (tolerated breach). Waiver becomes a deontic Status in ODRL Context, not part of Compliance.
- Outcome. One Status + windows; observations (SOSA) and provenance (PROV) feed the active window; service policy (ITIL/ODRL) defines grace.
Method‑CAL + Enactment — “Reviews with SoD and Bundle”
Contexts. SPEM/ISO 24744 (methods), Enactment lexicon. Intent. Prevent authors reviewing their own work while keeping names lean.
- Naïve proposal. Roles: Author, Self‑Reviewer, Peer‑Reviewer, Senior‑Reviewer.
- Moves. Roles Author, Reviewer only; SoD(Author ⟂ Reviewer) in the review window. If practice needs two reviewers, mint Bundle
{Reviewer, Reviewer₂}; express seniority as a facet on the decision (Assurance Level), not a new Role. - Outcome. Two Roles, one Bundle, one SoD; no hybrid Role; assurance is visible as a property of the review result.
Sys‑CAL + LCA‑CAL + Services — “Operations without role fragments”
Contexts. IEC 61131‑3 (execution), state‑space control texts (actuation), ITIL 4 (services). Intent. Staff coverage across shifts and locations without ten operator types.
- Naïve proposal. Night‑Operator, Remote‑Operator, Local‑Operator, Shift‑Lead, On‑call‑Operator.
- Moves. Role = Operator; add facets/windows:
timeOfDay,presenceMode,dutyCycle. If coordination is distinct, mint Coordinator Role; when both occur together, Bundle{Operator, Coordinator}; keep SoD where needed (e.g.,Operator ⟂ Approverfor production change). - Outcome. One Role + small facet set + Bundle; clean hooks to execution and actuation semantics.
KD‑CAL + Kind-CAL — “Evidence ladder without new labels”
Contexts. KD‑CAL (evidence), OWL 2/FCA (types). Intent. Express proof maturity without inflating Status names.
- Naïve proposal. Candidate‑Evidence, Preliminary‑Evidence, Verified‑Evidence, Validated‑Evidence.
- Moves. Keep one Evidence Status ladder (
Collected → Verified → Validated); use Assurance Level facet (numeric or ordinal) and windows for in‑review vs active. Align types in a row; do not mint new Status names for granularity. - Outcome. Short vocabulary, clear ladder, quantitative facet where nuance is needed.
Relations (with other patterns)
-
Builds on: F.1 (Contexts), F.2 (Harvesting), F.3 (Local Clustering), F.4 (Role Description), F.5 (Naming).
-
Constrains:
- F.7 (Concept‑Set Table): prefer row reuse; new rows require F.8 justification.
- F.8 (Mint‑or‑Reuse): apply four levers (reuse, bundle, SoD, window) before minting.
- F.10 (Status Windows & Mapping): encode temporal/scale variation as windows, not new Status types.
- F.12 (Service Acceptance Binding): bind acceptance to the Compliance Status family; avoid ad‑hoc status labels.
- F.13 (Lexical Continuity): prior names become aliases; do not carry forward inflated vocabularies as new types.
-
Used by. FPF patterns to keep Role and Status vocabularies tight.
Migration notes (conceptual playbook)
- Map to rows. For each existing Role or Status, identify its Concept‑Set row; if two names share an intent, collapse to one row (keep other names as aliases, F.13).
- Extract SoD. Replace “super‑roles” with Bundles plus explicit SoD; where conflict exists, SoD is normative, not cultural.
- Demote modifiers. Convert adjectival Role types into U.Facet (per Compose‑CAL) or windows on the base Role.
- Window statuses. Merge Status families split by time/scale into one Status + windows; move waived/exempt notions to the deontic Context if applicable.
- Re‑use before minting. When encountering a gap, scan rows for a near‑match; only if intent genuinely differs, open a new row (F.8).
- Preserve continuity. Keep historic labels as aliases under the consolidated template (F.13); do not rewrite past texts.
- Rehearse the cut. After consolidation, you should be able to recite the entire Role and Status vocabulary from memory; if not, reduce again.
Acceptance tests (SCR/RSCR — concept‑level)
SCR — Static conformance
- SCR‑F14‑S01 (Row reuse). Every newly proposed Role Description either references an existing row or includes a clear F.8 justification for a new row.
- SCR‑F14‑S02 (No hybrids). No Role Description’s label or definition conflates two Roles that stand in a declared SoD relation.
- SCR‑F14‑S03 (Windowed statuses). Each Status family that shows temporal/scale variation is expressed as one Status + windows (not multiple Status types).
- SCR‑F14‑S04 (Facet over modifier). Role names do not encode circumstantial modifiers; such modifiers appear only as facets/windows.
- SCR‑F14‑S05 (Context locality). Every Role Description is anchored to exactly one SenseCell; no Cross‑context semantics inside a single template.
- SCR‑F14‑S06 (Bundles are pure). Every Bundle is a set of templates with no additional semantics beyond membership and referenced SoD.
RSCR — Regression (evolution)
- RSCR‑F14‑E01 (Vocabulary slope). Over a given interval, the count of distinct Role or Status templates does not increase unless matched by row justifications (F.8).
- RSCR‑F14‑E02 (SoD integrity). Adding templates does not introduce a label that circumvents any existing SoD relation.
- RSCR‑F14‑E03 (Window integrity). When windows are refined, Status type count remains constant; only window definitions change.
- RSCR‑F14‑E04 (Alias discipline). When labels change, prior names are recorded as aliases (F.13); no silent type multiplication.
Didactic distillation (90‑second script)
Name less, express more. Before minting a new Role or Status, try four levers: (1) Reuse the row — if the intent already exists, adopt it and add your local SenseCell. (2) Bundle, don’t blur — when two Roles travel together, Bundle them; keep SoD if they must stay apart. (3) Declare SoD, don’t fuse — conflicts of interest are solved with SoD, not with “trusted” super‑roles. (4) Window, don’t multiply — one Status can wear different windows (evaluation/active/grace); that’s not four Status types. Keep modifiers as facets, not names; keep every Role Description context‑local via its SenseCell. If your vocabulary no longer fits in a thoughtful mind, you have an explosion—return to the levers and reduce.
F.14:End
SCR/RSCR Harness for Unification
“Prove locality and parsimony first; only then prove composition.” Status. Architectural pattern. Builds on: E.10.D1 Lexical Discipline for “Context” (D.CTX); F.0.1 Foundational Principles; F.1–F.14. Coordinates with. B.3 Trust & Assurance Calculus (for CL use on Bridges).
Intent & applicability
Intent. Provide a minimal, notation‑free harness of conceptual checks that tells you whether a unification slice is sound: Contexts are fixed and diverse (F.1), terms are harvested and clustered inside Contexts (F.2–F.3), Role Descriptions point to one SenseCell (F.4), names obey discipline (F.5), rows are reused instead of multiplied (F.7–F.8), bridges are explicit and penalised (F.9), statuses vary by windows not type proliferation (F.10), and cross‑line bindings (F.11–F.12) respect locality. Applicability. Use whenever you declare or revise any of: Context cards, Local‑Senses, SenseCells, Concept‑Set rows, Role Descriptions, Bridges, Status windows. Non‑goals. No registries, workflows, or storage formats. No team roles. No metrics dashboards. This is thinking discipline, not governance.
Problem frame
Without a unification harness:
- Locality leaks. Cross‑context equivalence creeps in “by name”.
- Row sprawl. Concept‑Set tables grow laterally with near‑duplicates.
- Role or Status inflation. Adjectival or temporal variants become new types.
- Silent rewrites. New editions overwrite old meanings without a trace.
- Unstable bridges. Cross‑context relations harden into dogma without CL or loss statements.
Forces
Core idea (didactic)
The harness is a two-part net of assertions:
- SCR — Static Conformance Rules. context‑local and cross‑artefact checks that must hold now.
- RSCR — Regression & Stability Rules. Checks that must hold across changes (editions, rows, names).
Registry-reference note (normative). When an SCR/RSCR mentions BridgeId, policy identifiers, or edition identifiers, these are treated as registry references. They MUST be validated by registry presence/version checks, but MUST NOT be treated as symbols that have to appear in any provides list (e.g., SignatureManifest.provides) or be satisfied via imports closure, because they are not part of a signature’s exported vocabulary; they are external registry keys.
All checks are expressed as judgement schemas (premises ⊢ conclusion). They never prescribe artefact formats, roles, or workflows.
Minimal vocabulary (this pattern only)
- Unification line (L). The thematic cut you are pursuing (e.g., Enactment + Sensing + Execution).
- Check. A content‑level assertion about Contexts, senses, rows, Role Descriptions, bridges, or windows.
- Witness. A thoughtful minimal example that makes a check concrete (e.g., one seed, one bridge pair).
- Slice. The small set of objects under scrutiny together (Contexts in view, the row you’re adding, the Role Description that uses it, and any bridge it needs).
Objects under check
- Contexts —
U.BoundedContextcards (F.1). - Local‑Sense — clustered sense inside one context (F.3).
- SenseCell — (Context × Local‑Sense) address (F.3/F.4).
- Concept‑Set row — a cross-context alignment hypothesis with explicit Bridge support (F.7).
- Role Description — Role or Status definition pointing to one SenseCell (F.4).
- Bridge — explicit Cross‑context relation with CL and loss notes (F.9).
- Windows — temporal/scale views for a Status family (F.10).
- Aliases — name continuity commitments (F.13).
- Bundles & SoD — reuse levers that replace hybrid roles (F.14).
Solution overview — the harness as a lattice of checks
The harness arranges checks in three clusters:
- S‑Local. context‑local sanity (anchoring, clustering, two‑register labels).
- S-Cross. Cross-artefact coherence (row reuse, single-cell Role Description, bridge discipline, window honesty).
- R‑Evo. Evolution continuity (no silent rewrites, no vocabulary creep, bridge re‑validation).
SCR — Static conformance rules (S‑Local)
All S‑Local rules are Context‑internal and derive only from F.1–F.5.
SCR‑F15‑S1 (Anchored term).
Seed σ has context C ⊢ C ∈ Contexts(L)
Reading: Every harvested seed lives in a Context that is deliberately in view for your line (F.1, F.2).
SCR‑F15‑S2 (Edition trace).
Occurrence ω supports σ ⊢ ω carries edition+location
Reading: A Local‑Sense can be mentally reconstructed from attestations (F.2).
SCR‑F15‑S3 (Intra‑Context clustering).
Local‑Sense λ clusters {σᵢ} ⊢ ∀i: context(σᵢ)=context(λ)
Reading: No Cross‑context items inside a Local‑Sense (F.3).
SCR‑F15‑S4 (Two registers).
Local‑Sense λ ⊢ label(λ)=⟨tech,plain, symbol?⟩ ∧ plain≠∅ ∧ tech≠∅
Reading: Both engineering and plain labels exist; symbol (if any) is purely informative (F.2/F.3/F.5).
SCR‑F15‑S5 (Minimal gloss).
gloss(λ) framed at minimal necessary generality
Reading: The gloss neither smuggles behaviour/deontics nor globalises the sense (F.2/F.5).
SCR‑F15‑S6 (Context‑local normal form).
normalize_C(surface)=n ⊢ n used only within C
Reading: No global normal form at this stage (F.2).
SCR — Static conformance rules (S‑Cross)
S‑Cross rules tie Contexts, rows, Role Descriptions, bridges, and windows together without breaking locality.
SCR-F15-S7 (Single-cell Role Description).
Role Description τ ⊢ anchor(τ)=one SenseCell ⟨C,λ⟩
Reading: Every Role Description points to exactly one SenseCell; no mixed semantics (F.4).
SCR-F15-S8 (Name discipline).
Role Description τ ⊢ name(τ) obeys F.5
Reading: Labels follow the agreed morphology, register pairing, and minimal generality (F.5).
SCR‑F15‑S9 (Row sufficiency).
Row ρ lists cells {⟨Cᵢ,λᵢ⟩} ⊢ |distinct(Cᵢ)| ≥ 2
Reading: A row is meaningful only if it spans at least two Contexts (F.7).
SCR‑F15‑S10 (Row purity).
Row ρ ⊢ no cell contains Cross‑context clustering
Reading: Each cell is a single SenseCell, not a pre‑merged bundle (F.7).
SCR‑F15‑S11 (Reuse before mint).
Proposed row ρ' overlaps intent(ρ) ⊢ prefer reuse(ρ) ∨ document F.8 decision
Reading: Rows are reused by default; new rows require a mint‑or‑reuse rationale (F.7–F.8).
SCR‑F15‑S12 (Bridge is explicit).
C₁≠C₂ ∧ relation asserted between λ₁,λ₂ ⊢ Bridge β: ⟨⟨C₁,λ₁⟩ ↔ ⟨C₂,λ₂⟩, kind, CL, loss⟩
Reading: Cross‑context relations appear only as Bridges with declared kind (≡, ⊑, ⊒, ⟂), Congruence Level, and loss notes (F.9; B.3 for CL semantics).
SCR‑F15‑S13 (Bridge locality).
Bridge β ⊢ cells belong to different Contexts
Reading: You never bridge within a Context; that’s clustering (F.3/F.9).
SCR‑F15‑S14 (Window honesty).
Status family Σ varies by time/scale ⊢ windows(Σ) define variation; no new Status types introduced
Reading: Temporal and scale variation appears as windows, not as new types (F.10).
SCR-F15-S15 (SoD preservation).
Bundle B = {τ₁,τ₂,…} with SoD(τᵢ ⟂ τⱼ) ⊢ no single **Role Description** fuses τᵢ,τⱼ
Reading: Separation‑of‑Duties is a normative constraint, not a label tweak (F.14).
SCR‑F15‑S16 (Binding coherence).
Service‑Acceptance binding references Status Σ and Execution E ⊢ Σ anchored; E anchored; comparison defined via Bridge(s) if Cross‑context
Reading: Acceptance compares anchored executions and statuses, with any Cross‑context step made explicit (F.12 + F.9).
SCR/RSCR “Twin Harness” tests
SCR‑TWIN‑01 - Head term check. Plain twin preserves/declares the head per CC‑TWIN‑3. SCR‑TWIN‑02 - Kind check. Plain twin maps to the same Kind as the Tech name (C.3). SCR‑TWIN‑03 - SenseCell check. Twin and Tech resolve to the same SenseCell; record counter‑example(s). SCR‑TWIN‑04 - Stop‑list check. If the base noun is in the Ambiguity stop‑list, require bracketed head + gloss or fail. SCR‑TWIN‑05 - Normative surface check. No plain twins in CC blocks, signatures, or acceptance clauses. RSCR‑TWIN‑06 - Drift audit. On Context or glossary edits, re‑run twin harness; degrade or deprecate if SenseFidelity falls. RSCR‑TWIN‑07 - Bridge audit. If a twin is copied across Contexts, ensure a Bridge exists; record CL and loss notes.
Examples & Anti‑examples
Good (role with head):
- Tech:
TransformerRole→ Plain: “Transformer (role)” — passes Head & Kind checks. - Tech:
IncidentCommanderRole→ Plain: “Incident commander (role)”.
Good (episteme status with head):
- Tech:
U.EvidenceRole→ Plain: “Evidence (status)” — first mention includes head.
Borderline (allowed with gloss):
- Tech:
U.Episteme→ Plain: “Tradition (episteme)” — only with first‑use gloss, e.g., “Tradition (episteme) [U.Episteme] — a body of knowledge within IAU_2006”. (Without the head/gloss this is forbidden due to ambiguity.)
Forbidden:
- Tech:
U.Episteme→ Plain: “Tradition” (bare) — fails CC‑TWIN‑4/5. - Tech:
U.PromiseContent→ Plain: “API” — fails Kind and head checks (API is an access method, not the promise). - Tech:
U.RoleAssignment→ Plain: “Appointment” — banned term; conflates governance speech‑act with the binding object.
Migration guidance (lightweight)
- Inventory. List current plain twins per Context.
- Score. Assign SenseFidelity (0–3) and add counter‑examples; demote or deprecate any with score <2.
- Head & gloss. Add bracketed heads and first‑use glosses for all surviving twins.
- Register. Create/update entries in E.10.P; link a DRR for each change.
- Lint. Enable the Twin Harness in CI to block new ambiguous twins.
Judgement schemas (core moves)
Representative mental moves; each “fires” one cluster of SCRs.
-
Anchoring
Seed σ : context C, C ∈ Contexts(L) ⊢ anchored(σ)(S1) -
Local clustering
∀σ∈Σ: context(σ)=C ⊢ cluster_C(Σ) = Local‑Sense λ(S3) -
Role-Description anchoring
Role Description τ names ⟨C,λ⟩ ⊢ singleCell(τ)(S7) -
Row reuse
intent(ρ') ≈ intent(ρ) ⊢ reuse(ρ) ∨ justify_mint(ρ')(S11) -
Bridge assertion
C₁≠C₂ ∧ compare(⟨C₁,λ₁⟩,⟨C₂,λ₂⟩) ⊢ Bridge(CL,kind,loss)(S12–S13) -
Windowing
Status Σ exhibits temporal/scale variance ⊢ define windows(Σ); forbid Σ‑splitting(S14) -
SoD guard
SoD(τᵢ ⟂ τⱼ) ⊢ ¬exists Role Description υ that conflates {τᵢ,τⱼ}(S15)
Micro‑witnesses (illustrative)
11.1 Activity vs Task (PROV‑O ↔ IEC 61131‑3).
Contexts: PROV‑O (run), IEC 61131‑3 (run).
Local‑Senses: activity(prov), task(iec).
Fire: S7 (Role Description “Execution” points to one SenseCell), S12 (Bridge: overlap, CL=2, loss: IEC task may be cyclic; PROV activity need not be periodic), S13 (Contexts differ), S14 (Status windows for compliance later, not new types).
11.2 Service Acceptance (ITIL 4 ↔ SOSA/SSN).
Contexts: ITIL 4 (design), SOSA/SSN (run).
Row: Service‑Availability with cells ⟨ITIL:SLO availability⟩, ⟨SOSA:observation of uptime⟩.
Fire: S9 (row spans ≥2 Contexts), S12 (Bridge kind: measure-for-target, CL=3, loss: sampling bias), S16 (binding coherence), S-RoleDesc-SingleCell.
Relations (with other patterns)
Builds on: E.10.D1 (Context semantics), F.1–F.14. Constrains: Any addition to F.1–F.14 is publish‑ready only if all relevant SCR here evaluate true on its slice. Feed: B.3 may use Bridge CL and loss notes to adjust assurance.
RSCR — Regression & Stability Rules (R‑Evo)
These rules speak about changes over time. They are expressed as judgement schemas that compare two conceptual snapshots:
@t0and@t1. No storage, no workflows—just content assertions.
Notation.
X@t0 — object X before change • X@t1 — after change • Δ(X)=⟨…⟩ — described difference • same(…) / new(…) / retired(…) — conceptual status.
Contexts & editions
RSCR‑F15‑E1 (No silent replacement).
Context C@t0 : edition e0, C@t1 : edition e1, e1≠e0 ⊢ either newContext(C,e1) ∨ explicitRecency(C,e1)
Reading: A new edition becomes a new Context if sense shifts; otherwise keep one context and mark recency. Never overwrite meaning.
RSCR‑F15‑E2 (Trip‑wire carry‑over).
C@t1 derives from C@t0 ⊢ tripWires(C@t1) ⊇ review(tripWires(C@t0))
Reading: Known confusions are re‑checked and re‑stated (or explicitly dropped with a sentence why).
Local‑Senses & SenseCells
RSCR‑F15‑E3 (Reconstitutable seeds).
Local‑Sense λ@t0, Δ(occurrences) → λ@t1 ⊢ λ@t1 still reconstructible from attestations@t1
Reading: After changes in attestations, the Local‑Sense remains auditably rebuildable.
RSCR‑F15‑E4 (No Cross‑context creep).
SenseCell ⟨C,λ⟩@t0 → @t1 ⊢ context(λ@t1)=C
Reading: A SenseCell never migrates across Contexts through edits.
Concept‑Set rows
RSCR‑F15‑E5 (Row identity).
Row ρ@t0 with cells {⟨Cᵢ,λᵢ⟩} → ρ@t1 with {⟨Cᵢ,λᵢ'⟩} ⊢ ρ “same” iff intent(λᵢ')≈intent(λᵢ) ∀i
Reading: A row is the same row only if each cell still means the same Local-Sense in its Context. Otherwise, mint a new row and retire the old (F.7–F.8).
RSCR‑F15‑E6 (Row shrink‑before‑split).
ρ@t1 loses a cell due to edition split ⊢ prefer keep ρ@t0 + add new row ρ' rather than mutating ρ silently
Reading: When a Context splits meaning, preserve history: add instead of rewriting.
Role Descriptions (Role and Status)
RSCR-F15-E7 (Single-cell continuity).
Role Description τ@t0 → τ@t1 ⊢ anchor(τ@t1)=one SenseCell ∧ (sameCell ∨ justifiedSwitch)
Reading: A Role Description keeps pointing to one SenseCell; switching cells requires a one-sentence rationale tied to the row you reuse (F.4, F.8).
RSCR-F15-E8 (Alias-then-rename).
name(τ@t0) → name(τ@t1) ⊢ create alias(name@t0→name@t1) unless semantics changed
Reading: If only the name improves, create an Alias (F.13). If semantics change, mint a new Role Description instead.
Bridges
RSCR‑F15‑E9 (Re‑validate on movement).
Bridge β: ⟨⟨C₁,λ₁⟩ ↔ ⟨C₂,λ₂⟩, CL, loss⟩ @t0; any λᵢ mutates @t1 ⊢ β re‑examined; CL may drop; loss updated
Reading: Any end‑cell change forces a fresh look; default is more caution (CL non‑increasing unless newly justified).
RSCR‑F15‑E10 (No bridge drift to identity).
series of edits turns β(kind≠≡) → β(kind=≡) ⊢ require new witness set
Reading: Equivalence (≡) is special: it needs a fresh witness; you cannot slide into ≡ by minor edits.
Status windows & SoD
RSCR‑F15‑E11 (Window stability).
Status family Σ windows@t0 → @t1 ⊢ window set changes only if variance‑of‑meaning is shown
Reading: Add or remove windows only when meaning genuinely varies across time/scale—never for convenience (F.10).
RSCR‑F15‑E12 (SoD invariance).
SoD(τᵢ ⟂ τⱼ) @t0 → @t1 ⊢ SoD preserved; no new Role Description conflates τᵢ,τⱼ
Reading: Separation‑of‑Duties remains in force through changes (F.14).
Anti‑patterns the harness catches (and the fix)
Worked “dry‑runs” (composite slices)
Each dry‑run shows how the checks fire when something evolves. These are thinking rehearsals, not procedures.
New edition of ITIL (services) arrives
Slice. Contexts: ITIL 4(2020)@t0 → ITIL 4(2024)@t1; Row: Service-Availability; Role Description: AvailabilityStatus; Bridges: to SOSA/SSN observations.
Fire.
E1 (no silent replacement): decide new Context ITIL 4(2024) because SLO definitions narrowed.
E5 (row identity): row Service‑Availability@t1 new (cells now ⟨ITIL2024:SLO⟩ + ⟨SOSA:obs⟩). Retire old row with note.
E9 (bridge re‑validate): sampling assumptions changed → lower CL by one and update loss note (new calc window).
E7 (single-cell Role Description): AvailabilityStatus still points to exactly one cell (ITIL2024:SLO). Name unchanged → no alias needed.
Pay‑off. History is preserved; reuse remains safe; acceptance bindings (F.12) still compare anchored things.
Rename a Role Description without changing meaning
Slice. Role Description IncidentStatus@t0 → ServiceIncidentStatus@t1; same SenseCell.
Fire.
E8 (alias‑then‑rename): create Alias IncidentStatus → ServiceIncidentStatus (F.13).
S8 (name discipline): new name fits the suffix rules (F.5).
Pay‑off. Readers find both names; semantics untouched.
Tighten a Bridge (low-CL overlap → equivalence)
Slice. Bridge β between ⟨OWL:subclass⟩ and ⟨FCA:order‑edge⟩ was overlap, CL=2. New formal result proves equivalence in the covered fragment.
Fire. E10 (no drift to identity): to move from overlap→≡, present a new witness set (fragment constraints). S12 (bridge explicit): update β(kind=≡, CL=3) with precise scope/loss (“only within acyclic concept lattices with…”)
Pay‑off. Equivalence is scoped and auditable, not hand‑waved.
Window misuse detected
Slice. Team proposes PeakHoursAvailabilityStatus as a new Status type.
Fire.
S14/E11 (window honesty): reject new type; define a window for peak hours on AvailabilityStatus.
Pay‑off. No type explosion; the evaluation logic in F.12 stays uniform.
Migration cues (conceptual)
- When in doubt, fork—not overwrite. New edition? Add a Context unless you can argue sense identity in one sentence.
- Name pain → aliases, not merges. If a label confuses, rename with an alias; if meaning changed, mint new.
- Rows age gracefully. Never retrofit a row; retire and re‑row when any cell’s sense shifts.
- Bridges get colder over time. Prefer to lower CL when editions drift; raising CL needs fresh witnesses.
- Windows absorb variation. Resist splitting Status types; window by time/scale/phase.
- Guard SoD early. When binding composite responsibilities (F.14), check SoD before naming.
- Teach the delta. When things evolve, write one‑breath deltas (“what changed, why it matters”) as part of the example narrative—no registries implied.
Acceptance summary (“Harness green”)
A unification slice is publish‑ready when:
- All SCR (S‑Local & S‑Cross) hold for the current snapshot (Contexts, Local‑Senses, SenseCells, rows, Role Descriptions, Bridges, windows).
- All RSCR (R‑Evo) hold against the previous snapshot: no silent replacements; rows either unchanged or retired+reborn; Bridges re‑validated with CL non‑inflated without witnesses; windows adjusted only for real variance; SoD intact.
- One micro‑witness per moving part exists in the text (tiny example showing the check in action).
- Memory rule still holds: the active Context set for the line fits in a careful mind without external aids (F.1).
Didactic distillation (90‑second teaching script)
“Use the harness to think like a safety net. First, the SCR threads: everything is local to a Context; Role Descriptions point to one SenseCell; rows actually cross Contexts; Bridges are explicit with CL and a loss note; windows capture variation without spawning new types. Then, the RSCR knots: never overwrite an edition—fork the Context or mark recency; keep rows stable by retiring and re-rowing; Bridges get re-validated (CL goes down unless you bring proof); renames become aliases unless meaning changes; windows absorb time/scale shifts; SoD stays intact. If you can pass these thoughts on a small slice—and explain each pass in one breath—your unification is green. No tooling, no roles, no dashboards. Just clean Contexts, honest rows, cautious bridges, and names that help minds meet.”
F.15:End
Worked‑Example Template (Cross‑Domain)
“Show the thought, not the tooling.” Status. Architectural pattern. Builds on: E.10.D1 Lexical Discipline for “Context” (D.CTX); F.1–F.15. Coordinates with. B.3 Trust & Assurance Calculus (CL on Bridges); Part C patterns (Sys‑CAL, KD‑CAL, Kind-CAL, Method‑CAL).
Intent & applicability
Intent. Provide a single, didactic page template for cross‑domain worked examples that makes every claim local to a Context (Context), every Cross‑context step explicit via a Bridge, and every named role template or status template traceably tied to one SenseCell. The template is notation‑free and tool‑agnostic; it captures how to think the example so others can replay it.
Applicability. Use whenever you illustrate any FPF construct that spans more than one Context: Role Assignment & Enactment bindings, acceptance checks, measurement-driven claims, type alignment, control/actuation stories, etc.
Non‑goals. No registries, workflows, editors, or storage formats; no step‑by‑step “team procedures.” This pattern shapes the page a reader sees, not how it was produced.
Problem frame
Cross‑domain examples often fail in four predictable ways:
- Global words. Process, role, service, execution used without the Context, inviting drift.
- Hidden bridges. “It’s basically the same” across disciplines, with losses left implicit.
- Name without sense. A Role Description name appears with no visible tie to a SenseCell.
- List without structure. Facts line up but never meet in a single Concept‑Set row.
The template counters these by forcing Contexts → senses → row → bridges, in that order.
Core idea (didactic)
A robust worked example is a compact theatre:
- Stage = a declared unification line (which threads of Part C are in play).
- Backdrop = Context set (Contexts from F.1), each with a one‑line Card.
- Actors = SenseCells (⟨Context, Local‑Sense⟩) you will actually use.
- Plot = one Concept‑Set row where those SenseCells are aligned for this example.
- Cues = Role Descriptions that reference exactly one SenseCell each.
- Cross‑talk = Bridges across Contexts (with kind, CL, and loss).
- Timing = Windows (if status varies across time/scale) and SoD (if duties must remain separate).
- Moral = a handful of harness checks (F.15) that the reader can verify mentally.
Minimal vocabulary (this pattern only)
- Context / Context — always U.BoundedContext (E.10.D1).
- Local‑Sense — a sense clustered within one context (F.3).
- SenseCell — address
⟨Context, Local‑Sense⟩. - Concept‑Set row (ρ) — a Cross‑context alignment for “what we treat as one” in this example (F.7/F.8).
- Role Description (τ) — a Role or Status that points to one SenseCell (F.4–F.6).
- Bridge (β) — explicit Cross‑context relation with kind (≡ / overlaps / broader‑than / narrower‑than), CL, and loss note (F.9).
- Window — a bounded interval (time/scale/phase) tied to a Status (F.10).
- SoD — Separation-of-Duties constraint among Roles (F.14).
The one‑page Worked‑Example Canvas
Each bullet is a thought you make visible, not a form field.
-
Title & claim. A short name + one‑sentence claim you will demonstrate. Example: “Service Uptime as Evaluated by Runtime Executions” — “We compare Execution (IEC) observations to SLO (ITIL) within a declared window.”
-
Unification line. Which Part C threads are active. Example: Enactment + KD‑CAL (sensing) + Sys‑CAL (execution).
-
Context set (compact Cards). 3–6 Contexts from F.1 with one‑line scope and, if inherent, design vs run stance. Example: BPMN 2.0 (design: workflow graph); PROV‑O (run: Activity uses/generates); ITIL 4 (design: SLO/SLA); SOSA/SSN (run: Observation); IEC 61131‑3 (run: task executes).
-
SenseCells in play. List exactly the Local‑Senses you will use, each prefixed by its Context. Example: ⟨ITIL: service‑level‑objective⟩, ⟨SOSA: observation⟩, ⟨IEC: execution‑task⟩, ⟨PROV: activity⟩.
-
The Concept‑Set row (ρ). A single line that places the cells you treat as “the same” for the claim, with a one‑breath justification. Example row ρ: { ⟨ITIL:SLO⟩ ↔ ⟨SOSA:observed‑availability⟩ } — We treat “target availability” and “observed availability” as comparable magnitudes in a specific window.
-
Bridges (β). For any Cross‑context relation not captured by ρ (or that requires nuance), state kind, CL, loss. Example β₁: ⟨IEC:execution‑task⟩ overlaps ⟨PROV:activity⟩, CL=2, loss: PROV lacks cyclic scheduling semantics. Example β₂: ⟨SOSA:observation⟩ narrower‑than ⟨ITIL:measurement⟩, CL=2, loss: ITIL omits procedure metadata.
-
Role-Description hooks. Name the Role or Status templates and the one SenseCell each references. Example:
AvailabilityStatus→ ⟨ITIL:SLO⟩;Execution→ ⟨IEC:execution‑task⟩;EvidenceObservation→ ⟨SOSA:observation⟩. -
Windows & SoD (if relevant). Spell any status windows and any SoD you rely on. Example: Window: monthly, business‑hours; SoD: Operator ⟂ SLO‑Owner.
-
Micro‑narrative (5–7 lines). Walk the reader through the claim using Context‑prefixed words and the row/bridges above. Example (abridged): “A task (IEC) runs the control program. Its observations (SOSA) yield availability over the monthly window. We compare those to the SLO (ITIL) in the same window. Where we refer to activity (PROV) we do so via β₁ (overlap, CL=2). The row ρ carries the comparison; the Bridge β₂ explains why ‘measurement’ in ITIL is broader than ‘observation’ in SOSA.”
Harness pings (F.15). S-Row-Cross, S-RoleDesc-SingleCell, E-NoSilentEdition. Example: S‑Row‑Cross, S‑RoleDescription‑SingleCell, E‑NoSilentEdition.
Memory rule. If your Canvas cannot fit on a single page (or one slide), the example is teaching the wrong thing.
Invariants (normative)
- Locality of meaning. Every term in the narrative appears with its Context at first mention (process (BPMN), activity (PROV), …).
- At least one row. The example MUST include ≥ 1 Concept‑Set row spanning ≥ 2 Contexts.
- Single-cell Role Description. Every Role Description in the example MUST point to one SenseCell.
- Explicit bridges. Any Cross‑context step not explained by the row MUST appear as a Bridge with kind, CL, and loss.
- Temporal honesty. If a Context fixes design vs run, the narrative respects it.
- Window discipline. If comparison depends on time/scale/phase, a window is stated rather than minting a new Status type.
- SoD integrity. If duties are involved, SoD is explicit and unbroken.
- Didactic parsimony. One page, one claim, one row (or a tiny bundle of closely related rows).
The row panel (how to show it without notation)
Show the row as a compact two‑to‑five‑column list:
- Column header = Context.
- Cell =
Local‑Sense label(tech register; optional plain label on next line). - Footline (one line) = “row reason”—why these cells belong in this row for this claim.
Example visual (linear text): ITIL 4: service‑level‑objective | SOSA/SSN: observed‑availability → Row reason: both quantify availability for the same window; units harmonised by KD‑CAL; procedural metadata differs (captured in loss of β₂).
Worked micro‑example (didactic)
Title. Alarms Should Not Satisfy Uptime Claim. An alarm‑only Execution (IEC) cannot satisfy the SLO (ITIL) because observation (SOSA) windows exclude time in “alarm state.”
Contexts. IEC 61131‑3 (run), SOSA/SSN (run), ITIL 4 (design).
SenseCells. ⟨IEC:execution‑task⟩, ⟨SOSA:observation⟩, ⟨ITIL:SLO⟩.
Row ρ. { ⟨ITIL:uptime‑SLO⟩ ↔ ⟨SOSA:observed‑availability⟩ } — comparable magnitudes in the calendar‑month window.
Bridge β. ⟨IEC:alarm‑state⟩ narrower‑than ⟨SOSA:observation‑qualifier⟩, CL=2, loss: SOSA does not prescribe plant‑specific alarm semantics.
Role-Description hooks. AvailabilityStatus → ⟨ITIL:SLO⟩; EvidenceObservation → ⟨SOSA:observation⟩.
Window. Calendar month, business‑hours, exclusion: alarm‑state intervals.
Micro‑narrative (4 lines). A task (IEC) runs; when the plant is in alarm state, observations (SOSA) are flagged and excluded from the availability window. We then compare the remaining interval to the SLO (ITIL) via row ρ. The Bridge β clarifies why the flag is a qualifier in SOSA, not a Status type in ITIL.
Harness pings. S‑Row‑Cross, S‑RoleDescr‑SingleCell, S‑Window, S‑TemporalHonesty.
Relations (with other patterns)
Builds on: F.1 (Contexts), F.2–F.3 (terms & senses), F.4–F.6 (roles), F.7–F.8 (rows), F.9 (bridges), F.10 (windows), F.14 (SoD), F.15 (harness).
Constrains: Any example placed in Part C or Part B must render its claim through this canvas (or a faithful reduction), so readers can run F.15 mentally.
Didactic distillation (60‑second script)
“A good cross‑domain example fits on one page. First, name the claim. Then show the Contexts you’re using. List the SenseCells you will actually touch. Draw one row that makes them the same for this claim. Every Cross‑context nuance you can’t justify in that row becomes a Bridge with a kind, a CL, and a loss sentence. Point each Role Description to one cell. If time/scale matters, state the window; if duties matter, state SoD. Finish with two or three harness pings from F.15. That’s it—no tooling, no long procedures. The reader can now replay your thought and agree (or disagree) at the right place.”
Anti‑patterns & remedies
Extended worked micro‑examples
Each example fits the one‑page canvas (§5) and makes the row and bridges do the work.
Type alignment: OWL class vs FCA concept (design‑time only)
Title & claim. “Two Lenses on Pump: OWL class and FCA concept align for catalogue reasoning.”
Unification line. Kind-CAL (design) + FCA (design).
Contexts. OWL 2 (profiles) — classes, subClassOf (design). FCA corpus — formal concepts, lattice order (design).
SenseCells. ⟨OWL:class ‘Pump’⟩, ⟨FCA:formal‑concept ‘Pump’⟩.
Row ρ. { ⟨OWL:Pump⟩ ↔ ⟨FCA:Pump⟩ } — same practical extension in this product catalogue.
Bridge β. ⟨FCA:lattice‑order⟩ overlaps ⟨OWL:subclass‑order⟩, CL=2, loss: FCA intents may include context attributes not modeled in OWL restrictions.
Role-Description hooks. TypeLabel → ⟨OWL:class⟩ (for naming), no runtime Role Assignment/Enactment.
Micro‑narrative (3 lines). For catalogue queries, the instances covered by OWL class Pump match those of the FCA concept created from the same attributes; we treat them as one row. The orderings diverge in nuance (β), but not for membership in this example.
Harness pings. S‑Row‑Cross, S‑TemporalHonesty (design only), S‑Bridge‑Kind‑CL.
Role vs permission: SoD in enactment vs access control
Title & claim. “Behavioral role (BPMN) is disjoint from access role (RBAC); keep duties separate.”
Unification line. Role Assignmnent and Enactment (design & run) + access/deontics (design).
Contexts. BPMN 2.0 — participant/lanes (design). NIST RBAC (2004) — roles/permissions (design).
SenseCells. ⟨BPMN:participant⟩, ⟨RBAC:role⟩.
Row ρ. — (intentionally none) — we do not treat them as the same.
Bridge β. ⟨BPMN:participant⟩ disjoint ⟨RBAC:role⟩, CL=3, loss: none—different dimensions (behavioral mask vs permission grouping).
Role-Description hooks. Operator → ⟨BPMN:participant⟩; AccessRole → ⟨RBAC:role⟩. SoD: Operator ⟂ AccessRole‑Admin.
Window. Not applicable.
Micro‑narrative (3 lines). We show SoD by prohibiting the same actor from holding Operator and AccessRole‑Admin. The disjoint β prevents leakage between behavioral masks and permission bundles.
Harness pings. S‑RoleDescr‑SingleCell, S‑SoD, S‑Bridge‑Disjoint.
Method quartet: from MethodDescription to Work with observations
Title & claim. “Behavioral role (BPMN) is disjoint from access role (RBAC); keep duties separate.”
Unification line. Role Assignment & Enactment (design & run) + access/deontics (design).
Contexts. SPEM 2.0 (design: Method or MethodDescription), PROV‑O (run: Activity), SOSA/SSN (run: Observation), ITIL 4 (design: SLO).
SenseCells. ⟨SPEM:MethodDescription⟩, ⟨PROV:activity⟩, ⟨SOSA:observation⟩, ⟨ITIL:SLO⟩.
Row ρ. { ⟨ITIL:SLO:build‑time⟩ ↔ ⟨SOSA:observed‑build‑duration⟩ } — compare promised vs observed duration on the same window.
Bridges. β₁: ⟨SPEM:MethodDescription⟩ narrower‑than ⟨PROV:activity‑plan⟩, CL=2, loss: PROV lacks prescriptive structure; β₂: ⟨SOSA:observation⟩ narrower‑than ⟨ITIL:measurement⟩, CL=2, loss: ITIL abstracts from procedure.
Role-Description hooks. Operator → ⟨BPMN:participant⟩; AccessRole → ⟨RBAC:role⟩. SoD: Operator ⟂ AccessRole-Admin.
Window. Release window: calendar week.
Micro‑narrative (4 lines). The MethodDescription (SPEM) implies a target build‑time; Work (PROV activity) occurs; observations (SOSA) provide actuals; we compare against the SLO (ITIL) via row ρ over the calendar week window. Bridges β₁–β₂ explain why plan/measure semantics do not collapse.
Harness pings. S‑Row‑Cross, S‑Window, S‑RoleDesc‑SingleCell, S‑TemporalHonesty.
Reasoning primitives (judgement schemas)
These are mental checks you can perform on any example page.
-
Row validity
cells(ρ) = {⟨Cᵢ,Sᵢ⟩} with |Contexts(ρ)| ≥ 2 ⊢ validRow(ρ)Reading: A row is valid only if it spans at least two Contexts and all entries are legitimate SenseCells (from F.3). -
Bridge coverage
coRef(Ca,Cb) ∧ ¬sameRow(Ca,Cb) ⊢ requires β(Ca↔Cb)Reading: If two Contexts are co‑referenced in the narrative but their senses are not placed in the same row, an explicit Bridge is needed. -
Role-Description single-cell
Role Description τ used ⊢ ∃!⟨C,S⟩ : ref(τ)=⟨C,S⟩ -
Window sufficiency
compare(qᵢ@Cᵢ, qⱼ@Cⱼ) ⊢ windowDeclaredReading: Any Cross‑context quantitative comparison calls for a stated Window. -
Temporal honesty
C has stance s ∈ {design, run} ⊢ claims@C must respect sReading: Do not assert run‑facts in a design‑only Context, or vice versa. -
SoD integrity
SoD(D₁ ⟂ D₂) ∧ assign(actor, D₁) ∧ assign(actor, D₂) ⊢ violationReading: A declared SoD cannot be violated inside the example. -
Bridge clarity
β given ⊢ kind(β) ∧ CL(β) ∧ loss(β)Reading: Every Bridge shows kind, CL, and a one‑line loss. -
Edition clarity
card(C) ⊢ has(name, edition)Reading: Each Context Card specifies name + edition/profile. -
Harness ping mapping
ping ∈ {S‑*, E‑*} ⊢ ping ⇒ subset of judgements aboveReading: Each named harness check (F.15) has a clear reading in these judgements.
Acceptance tests (SCR/RSCR)
Static conformance (SCR)
- SCR‑F16‑S01 (Row present). The page contains ≥ 1 Concept‑Set row spanning ≥ 2 Contexts.
- SCR‑F16‑S02 (Bridge explicit). Every Cross‑context assertion not justified by a row is shown as a Bridge with kind, CL, loss.
- SCR-F16-S03 (Role-Description anchoring). Each Role Description appearing in the page references exactly one SenseCell.
- SCR‑F16‑S04 (Context prefixes). First mention of each ambiguous term is Context‑prefixed.
- SCR‑F16‑S05 (Window discipline). Any numeric comparison across Contexts names a Window.
- SCR‑F16‑S06 (DesignRunTag). Claims respect each Context’s DesignRunTag stance.
- SCR‑F16‑S07 (SoD). If duties are named and SoD is relevant, SoD is stated and unviolated.
- SCR‑F16‑S08 (One‑page parsimony). The example fits the one‑page canvas; if extended, each sub‑page still respects §6 invariants.
Regression (RSCR)
- RSCR‑F16‑E01 (Edition drift). When a Context’s edition changes, the example either (a) is unaffected or (b) adds a note adjusting β or the row; no silent rewrites.
- RSCR‑F16‑E02 (Bridge re‑score). If an upstream CL definition changes (B.3), affected Bridges on the page show the new CL and, if needed, an updated loss sentence.
- RSCR‑F16‑E03 (Row resilience). If a SenseCell is split in F.3 (sense refinement), the example either keeps the same row using one child sense, or splits into two rows with a short justification.
- RSCR‑F16‑E04 (Window clarity). If organisational cadence changes (e.g., from monthly to weekly), windows on the page are updated explicitly.
Migration notes (conceptual)
- Refactor long tutorials. Extract the claim; pick 3–6 Contexts (Cards); list the SenseCells you actually use; write one tight row; surface any cross‑talk as Bridges with loss notes; delete everything else.
- Split crowded rows. If a row tries to carry more than ~4 cells, split into two rows and write a one‑line purpose for each.
- Stabilise vocabulary. If you find yourself rewriting terms mid‑page, you likely forgot a Context; return to F.1 and add a Card.
- Teach the bridge itch. Leave “these are the same” feelings ungratified until you can articulate kind, CL, loss in one sentence.
- DesignRunTag respect. If a design‑only Context tempts you into runtime talk, move that part of the narrative into a run‑Context and Bridge as needed.
- Keep the page living. When upstream rows/bridges evolve (F.7–F.9), adjust the page minimally and call out the change in a margin note (conceptual, not procedural).
Teaching variants (all obey §6 invariants)
- Two‑Context equivalence. Smallest case: 1 row, 2 Contexts, β (≡, CL=3) to explain why they’re truly the same for this claim.
- Triangulation. 1 row, 3 Contexts; typical for measurement ↔ service ↔ execution.
- Disjointness lesson. No row; one β (disjoint) plus a short SoD story.
- Window primer. Same sense across Contexts but different default windows; the page is about the window choice, not the term.
Didactic checklist (author’s quick scan)
- One sentence claim?
- Contexts (with editions) visible?
- SenseCells named (tech & plain labels acceptable)?
- Exactly one tight row (or two, each justified)?
- All Cross‑context steps shown as β(kind, CL, loss)?
- Role Description → one SenseCell each?
- Window present where numbers meet?
- SoD stated where duties appear?
- Page fits a single view?
Closing distillation (30‑second echo)
A useful worked example is a one‑page alignment: claim → Contexts → cells → one row → explicit bridges → Role-Description hooks → window/SoD if needed. No tooling, no process charts—just visible thinking that any careful reader can replay and critique at the right place.
F.16:End
Unified Term Sheet (UTS)
“One table that a careful mind can hold.”
Status. Architectural pattern.
Builds on: F.1–F.3 (Contexts → seeds → local senses), F.4 (Role Characterisation), F.5 (Naming), F.7 (Concept‑Set table), F.8 (Mint/Reuse decision), F.9 (Bridges), F.10–F.12 (Status & method/service bindings), F.15 (SCR/RSCR).
Coordinates with: A.1.1 U.BoundedContext, A.7 Strict Distinction, A.8 Heterogeneity, A.11 Ontological Parsimony, A.15 Role–Method–Work Alignment.
Non‑goals. No registries, workflows, editors, or storage formats. No by‑name Cross‑context equivalence. No “data pipeline.” This pattern prescribes what a UTS is and how to judge it, not how to generate files.
Intent & Applicability
Intent. Provide a single, normative table—the Unified Term Sheet (UTS)—that distils the output of F.1–F.12 into human‑readable rows. Each row expresses one Concept‑Set unified into one FPF U.Type with its Tech/Plain names and cross‑context senses. The UTS is the front‑door view that authors, engineers, and managers use; it replaces scattered notes and eliminates guesswork.
Applicability. Produce a UTS per FPF pattern thread (e.g., Role Assignment & Enactment, Method quartet, Trust & Evidence). Use it:
- to name U.Types and their Tech/Plain labels (F.5),
- to teach the mapping from familiar canons to unified concepts,
- to audit coverage and heterogeneity (A.8), and
- to feed examples in Parts A/C without re‑explaining terminology.
Why now. Earlier F‑patterns define how to think. F.17 defines what you publish so others can think with you.
Problem Frame
Without a single sheet:
- Locality is lost. Mappings hide in prose; readers re‑globalise words.
- Naming drifts. Teams adopt ad‑hoc labels that collide later.
- Coverage is opaque. No quick check that coverage spans ≥ 3 domain families across the sheet (A.8).
- Didactic load spikes. Each section re‑teaches the same terms.
UTS fixes this by putting the unification decision and the cross‑context evidence on one line per concept.
Forces
Core Idea
A UTS is a Concept‑Set table with names. Each row = one Concept‑Set unified into one FPF U.Type (the “what we mean”). Each column family shows how this concept appears in the chosen contexts of meaning (F.1).
Two canonical layouts are allowed (pick one or publish both):
- Layout A — Kernel‑first: rows keyed by FPF U.Type; Bounded‑Context Columns (BCC).
- Layout B — Base‑concept: rows keyed by Base concept (EN/RU) of a discipline, then unified to U.Type; Discipline Columns (DC).
Both layouts are normative; choose based on audience. In Layout A, comparability is by BCC (Bounded‑Context Column); in Layout B, comparability is by DC (Discipline Column); never conflate the two.
Minimal Vocabulary (for this pattern)
- UTS (Unified Term Sheet). The published, human‑readable table per thread.
- Context. Alias in Tech register for
U.BoundedContext(E.10.D1). Normative unit of meaning; every SenseCell is scoped to a Context (name + edition). - Bounded‑Context Column (BCC). A didactic column used only in Layout A; one column per Context (
U.BoundedContext) from the F.1 cut; not a model element; the header includes the Context name + edition. - Discipline Column (DC). A discipline vantage used only in Layout B (e.g., Operational Management, IT/Software, Physics). A DC is not a Bounded‑Context Column and does not carry editions.
- Concept‑Set (CSR). One unified concept with pointers to its SenseCells.
- SenseCell. (Context × Local‑Sense) address—how a Context “says that thing”.
- Bridge / CL. Explicit cross‑context mapping (F.9) with Congruence Level and Loss note.
- Plain Twin (LEX). The LEX record pairing the Unified Tech name with its Unified Plain name for a U.Type; governed by PTG and referenced by
Twin‑Map Id (LEX)(E.10 LEX‑BUNDLE). - Block Plan. Didactic grouping of rows to keep the sheet memorizable.
- Unified Tech name / Unified Plain name. Dual‑register names chosen per F.5; the Tech name is the neutral, unified term for the U.Type, not a borrowed Context name.
Discipline. “Context” always means
U.BoundedContext(E.10.D1). No global words.
Row Schema (normative)
Every UTS row MUST carry the following fields (verbatim headings recommended):
Constraint. “SenseCells (by Context)” MUST cite at least three distinct Contexts overall across the sheet for the thread (A.8). A single row may show fewer if the concept truly appears in fewer contexts; coverage is a property of the whole UTS.
Discipline: Every SenseCell must cite the Context name + edition (e.g., “BPMN 2.0 (2011): Activity instance”).
NQD Fields (normative; when applicable)
If a UTS row describes a generator, selector, or typed portfolio-publication surface (design‑time or run‑time artefact), it MUST add the following fields. These are publication fields, not tooling‑specific formats.
Note. These fields extend the Row Schema; they do not change SenseCells/Bridges/Names. Rows that are purely definitional (no generator/selector/typed portfolio-publication semantics) do not carry §6.1.
Autonomy fields (when applicable)
Add the following columns (nullable; required when autonomy is claimed by the row’s subject):
AutonomyBudgetDeclRef(id, version)Aut-Guard policy-id (PolicyIdRef)OverrideProtocolRefScope (G)(autonomy scope)Γ_time(admission window selector)- (optional)
ScaleLensPolicyRef - (optional)
ScaleLensOptIn ∈ {OptedIn, Neutral, OptedOut}Note. These fields are required for UTS rows that describe a Role, Method, Service, or Selector with autonomy claims; optional fields make Bitter‑Lesson/Scale‑Lens an explicit opt‑in with published criteria.
Block Plan (didactic grouping)
A UTS MUST declare a Block Plan—the sequence of blocks that group rows. Blocks are thread‑specific. Example Block Plan for Role Assignment & Enactment (matches your earlier tables):
- Block A - Context & Roles —
U.BoundedContext,U.Role,U.RoleAssignment,U.Capability. - Block B - Method & Description —
U.Method,U.MethodDescription, Access/Acceptance descriptions (fields ofU.PromiseContent). - Block C - Execution & Schedule —
U.Work,U.WorkDescription,U.Observation. - Block D - Service & Deontics —
U.PromiseContent,U.SpeechAct,U.Commitment,U.PromiseContent,U.PromiseFulfillmentEvaluation. - Block E - Carriers & Bridges —
U.Carrier, Alignment (Bridge entry). - Block R - Knowledge Units & Statuses —
U.Episteme,U.EvidenceRole,U.StandardStatus,U.RequirementStatus,U.DefinitionRole,U.AxiomaticCoreRole.
Rule. Block names are didactic, not ontological. Do not infer mereology or subtyping from blocks.
Column Families (two canonical layouts)
Layout A — Kernel‑first (U.Type as rows)
Columns:
FPF U.Type - Unified Tech name - Unified Plain name - Plain‑Twin Governance (PTG) - Twin‑Map Id (LEX) - FPF Description(left rail;PTG/LEXare optional)- Bounded‑Context Columns (BCC) — one column per Context (
U.BoundedContext) from the F.1 cut; each header shows name + edition: e.g., OMG BPMN 2.0, W3C PROV‑O, ITIL 4, NIST RBAC, W3C SOSA/SSN, OMG Essence (Language), DEMO/DEMO‑EO, PMBOK 7, CM/BPM (CMMN/BPMN), IEC 61131‑3, ODRL 2.2, ISO 80000‑1 / Metrology … (your chosen 12 Contexts) Bridges (CL/Loss)Unification RationaleNotes
Do not mix Discipline Columns (DC) in Layout A. Columns here are only Bounded‑Context Columns (BCC).
Layout B — Base‑concept pivot (discipline columns)
Columns: Base concept - Scale‑map - Unified Tech name - Unified Plain name - Plain‑Twin Governance (PTG) - Twin‑Map Id (LEX) - Formal U.Type - Discipline Columns (DC) (e.g., Operational Management / IT/Software / Physics / …) - Rationale - Notes.
-
Base concept (EN / RU) -
Scale‑map (Σ / Π / μ)(optional; see §9.4) -
Unified Tech name -
Unified Plain name -
Plain‑Twin Governance (PTG)(optional) -
Twin‑Map Id (LEX)(optional) -
Formal U.Type -
Discipline Columns (DC) (choose 3–5): e.g., Operational Management, IT/Software, Physics, Science/Theory, Math/Proof, Literature, Religion (or other discipline columns suited to the thread)
-
Unification Rationale -
Notes
Guidance. Publish Layout A for kernel users and spec authors; publish Layout B for cross‑disciplinary onboarding and teaching. Clarification — Plain vs Base concept. In Layout B the
Base concept (EN/RU)is a discipline vantage aid and does not substitute for the single Unified Plain name in the left rail. Do not mint alternative unified‑plain synonyms inside DC cells; flag homonym risks with ⚡ inNotes.
Invariants (normative constraints)
- Locality. Every SenseCell is Context‑scoped (E.10.D1). No global synonyms.
- Bridges only via F.9. Cross‑context equivalence appears only as an explicit Bridge with CL. Any row citing > 1 Context must state at least one Bridge.
- Heterogeneity. Across the UTS, coverage must involve ≥ 3 domain families (F.1 Step 2; A.8).
- Scale‑map tags (optional but disciplined). If used in Layout B:
- Σ (Summative): concept’s quantitative properties aggregate across a population of executions/holders.
- Π (Conjunctive/Compositional): concept composes by required conjunction (all‑of), not by averaging.
- μ (Micro/Atomic): concept is inherently micro‑level (per single execution/holder). (Tags aid teaching; they do not change semantics.)
- Strict Distinction. Use
U.MethodvsU.MethodDescription,U.WorkvsU.WorkDescription,U.RolevsU.RoleCharacterisationcorrectly; do not collapse entities of concern with their Description epistemes. - Dual register. Every row has Tech and Plain labels per F.5.
- One‑breath rationale. The
Unification Rationaleis a single sentence explaining the conceptual sameness despite local wording. - Unified naming neutrality. The Unified Tech name is the neutral FPF choice per F.5; it is not lifted wholesale from any single Context unless the Concept‑Set justification (F.7) shows identity.
- Column discipline. Layout A uses Bounded‑Context Columns (BCC) only; Layout B uses Discipline Columns (DC) only. Mixing is non‑conformant.
- Plain‑twin discipline. The single Unified Plain name lives in the left rail; BCC/DC cells carry senses only. Any additional Plain aliases are managed in LEX (tv:*) and never minted per column.
How to Compile (conceptual moves, not a workflow)
M1 - Fix contexts (F.1). Declare the 12 (±) contexts for this thread.
M2 - Harvest & cluster (F.2–F.3). Identify candidate senses per Context; cluster within Contexts; mint SenseCells.
M3 - Form Concept‑Sets (F.7). For each “the‑same‑thing” across Contexts, create one CSR; attach SenseCells.
M4 - Name (F.5). Choose Tech/Plain labels; assert the FPF U.Type (or propose a new one via F.8).
M5 - Bridge (F.9). Where Cross‑context relations are not exact, assert Bridges with CL and a short Loss note.
M6 - Place rows into blocks (§7). Keep the sheet memorisable.
M7 - Write one‑line FPF Description and the Rationale.
M8 - Run acceptance harness (F.15). Apply the UTS checks in §11.
Note. These are thought moves. No tooling is implied or required.
Acceptance Harness (SCR/RSCR) for a UTS
Static Conformance Rules (SCR‑UTS)
- SCR‑UTS‑01 (Row completeness). Each row contains:
U.Type,Tech,Plain,FPF Description,SenseCells (≥ 1),Rationale. - SCR‑UTS‑02 (Dual register). Each row has both Tech and Plain labels; Tech is used in spec prose, Plain in didactics.
- SCR‑UTS‑03 (Locality discipline). Every SenseCell is cited with its Context name & edition.
- SCR‑UTS‑04 (Heterogeneity). Across the sheet, the set of referenced Context spans ≥ 3 domain families.
- SCR‑UTS‑05 (Bridge honesty). All cross‑context sameness claims are expressed via an F.9 Bridge with a CL score; if identity, mark CL=3 and note “identity/no loss” rather than omitting the bridge.
- SCR‑UTS‑06 (One‑breath rationale). The rationale is ≤ 35 words and states the conceptual invariant that unifies the row.
- SCR‑UTS‑07 (Block parsimony). Block Plan uses ≤ 7 blocks; each block’s rows can be recited from memory by a careful reader.
- SCR‑UTS‑08 (Strict Distinction). No row description conflates Method↔MethodDescription, Work↔WorkDescription, Role↔RoleCharacterisation.
- SCR‑UTS‑09 (Unified naming). Each row’s Unified Tech name complies with F.5 rules (dual register, minimal generality, morphology); it is not a mere alias of one Context unless justified by an F.9 Bridge with CL=3.
- SCR‑UTS‑10 (Column discipline). Layout A: all non‑left‑rail columns are Contexts with editions. Layout B: all non‑left‑rail columns are discipline columns. No cross‑use.
- SCR‑UTS‑11 (Plain‑twin hygiene). The Unified Plain name appears once in the left rail (tv:primary). Neither BCC (Layout A) nor DC (Layout B) cells may introduce alternative unified Plain synonyms; use the ⚡ marker in
Notesto flag homonym risk where needed.
Regression Rules (RSCR‑UTS)
- RSCR‑UTS‑A (Edition churn). When a Context’s edition changes, old SenseCells remain addressable; new cells are added; no silent rewrites.
- RSCR‑UTS‑B (Name stability). Tech labels change only with a documented F.5 decision; Plain labels may evolve didactically if the Tech name stays.
- RSCR‑UTS‑C (Coverage drift). Adding/removing rows must not reduce family heterogeneity below §9.3.
- RSCR‑UTS‑D (Loss drift). If new evidence changes a Bridge’s CL/Loss, the row updates both the CL and the 2–6 word loss note.
- RSCR‑UTS‑E (Plain discipline). No per‑column Plain text appears in BCC/DC columns; any additional Plain aliases are tracked in Annex with tv: entries and counted against the alias budget (F.13).
Canonical Heading Templates (fill with your Contexts/Discipline columns)
Layout A — Kernel‑first