Part F — The Unification Suite (U-Suite): Concept-Sets, SenseCells & Contextual Role Assignment
Preface node
heading:part-f-the-unification-suite-u-suite-concept-sets-sensecells-contextual-role-assignment:87583
What this page is
This is generated FPF reference text from the specification preface or supporting sections. It helps interpret FPF; it is not FPF Reference product documentation.
Methodology
Use it to understand how the specification wants to be read, then return to a route, pattern, or work packet for active work. Cite generated IDs only when the wording changes the task decision.
Content
Contextual Lexicon Principles
One‑sentence summary. All meanings in FPF are local to a
U.BoundedContext(“Context of meaning”); terms are spoken with their Context, and any relation across Contexts exists only as an explicit Alignment Bridge with stated loss/fit.
Status. Architectural pattern.
Builds on: A.1.1 U.BoundedContext (formal frame); A.7 Strict Distinction (C‑6); A.8 Universal Core (C‑1); A.11 Ontological Parsimony (C‑5); A.4 Temporal Duality (C‑7); E.10.D1 D.CTX (lexical discipline for “Context”).
Coordinates with. F.1 (Context Map via Context Cards), F.2 (local term capture), F.3 (intra‑Context clustering), F.7 (Concept‑Set Table), F.9 (Alignment & Bridge), B.3 (Trust & Assurance; CL penalties).
Didactic note. In the Tech register, Context ≡
U.BoundedContext(per E.10.D1). We use “Context of meaning” as a metaphor only; Context remains the normative short form forU.BoundedContext. The word anchor is not used in FPF. The word plane is reserved to CHR:ReferencePlane only.
Terminology guard (normative, Part F). The row classifier is senseFamily: {Role | Status | Measurement | Type‑structure | Method | Execution}. Characteristic (MM‑CHR) names measurable aspects only (A.17–A.19) and MUST NOT be used for row typing in Part F. Avoid the generic word facet in Part F; when unavoidable, reference C.3.5 KindAT (informative facet) or Compose‑CAL U.Facet explicitly. Only CHR:ReferencePlane is permitted (no bare “plane”); use EntityOfConcern / Description episteme / specification-use boundary for entity-description-specification-use discipline; use stance for design vs run.
Problem Frame
Trans‑disciplinary modelling fails without an explicit discipline for where words mean what.
- Semantic drift. The same string (“process”, “role”, “service”) slides between domains and editions.
- Homonym collisions. One label carries incompatible senses across fields.
- Hidden synonymy. Different labels point to the same local sense, but the identity is unstated.
- Implicit globalism. Meaning is treated as universal; integration silently re‑writes models.
FPF resolves this by localising meaning first, then explicitly translating across locales.
The Three Principles (normative)
P‑S - Source Localisation Principle — Speak with the Context.
Rule. Every term in a normative FPF publication unit MUST be bound to a specific U.BoundedContext (its “Context of meaning”). The binding is explicit in text, notation, or table headers (e.g., process (BPMN 2.0)).
Implications.
- No free‑floating “global terms”.
- A finite Context Map (see F.1) is chosen before naming work starts.
- If a source intrinsically fixes time stance, the DesignRunTag is carried by the Context (C‑7).
Reasoning move (conceptual).
Context(C) ∧ says(C, term t) ⊢ usable(t@C)
Illustration (Enactment line).
activity @ PROV‑O (run) vs task @ IEC 61131‑3 (run) vs process @ BPMN 2.0 (design).
P‑L - Local Meaning Principle — Meaning lives inside the Context.
Rule. The intended sense of a term is established inside its Context as a SenseCell: a small, reconstructible unit of local meaning with Tech/Plain labels and a concise gloss. SenseCells are lexical only (C‑6): no behaviours, no deontics, no equations.
Implications.
- SenseCells are Context‑scoped; they do not cross Contexts.
- Minimal generality (G‑1) and contextual specification (G‑2) govern naming inside the Context.
- Intra‑Context clustering of raw mentions precedes any Cross‑context act (see F.3).
Reasoning move (conceptual).
usable(t@C) ∧ fits(gloss, C) ⊢ SenseCell⟨t@C⟩
Illustration (KD‑CAL).
observation @ SOSA/SSN: Tech “observation”, Plain “measurement act”; gloss “Result‑bearing act applying a Procedure…”.
P‑B - Explicit Bridge Principle — across Contexts, only with a bridge.
Rule. Any relation between terms from different Contexts MUST be stated as an Alignment Bridge (see F.9): a named mapping between SenseCell⟨-⟩ items with a declared relation kind (e.g., overlaps, broader‑than, near‑equivalent) and a Congruence Level (CL) for trust calculus (B.3).
Implications.
- No by‑name identity across Contexts; string equality ≠ sense equality.
- Bridges carry loss/fit notes and are auditable; they can be revised by edition.
- Concept‑Sets (F.7) are built from bridged cells, not from lexical strings.
- When the prose wording uses umbrella sameness/alignment tokens (“same/equivalent/align/map/…”), treat it as an RPR trigger and repair it via A.6.9 (RPR‑XCTX) before granting any naming or substitution licence.
Reasoning move (conceptual).
SenseCell⟨x@A⟩ ↔⟨rel, CL⟩ SenseCell⟨y@B⟩ ⊢ translatable(x@A, y@B, rel, CL)
Illustration (Sys‑CAL × Enactment).
actuation @ CTRL‑Text ↔⟨near‑equiv, CL=2⟩ control‑output @ IEC 61131‑3.
Minimal Conceptual Objects (conceptual, notationally neutral)
These conceptual objects are thought‑objects; they specify what must exist conceptually, not how it is stored.
Context Card (for each U.BoundedContext)
A terse descriptor used in the Context Map (F.1):
id(stable local handle) -title-edition/yearfamily(discipline family; informal) -scope gisttimeStance?(design/run, if inherent)trip‑wires(few lexical caveats that often mislead, e.g., “process≠thermo process”)
SenseCell (unit of local meaning, inside one context)
label.tech/label.plain(two registers)gloss(minimal generality, Context‑true)notes?(warnings, edition shifts)- No behaviour/deontics/equations (C‑6)
Where it comes from. F.2 describes how SenseCells can be derived from local term evidence; F.0.1 only requires that local meaning be expressible as a SenseCell.
Alignment Bridge (between SenseCells from different Contexts)
left: SenseCell⟨-@A⟩,right: SenseCell⟨-@B⟩relation(e.g., equivalent‑under‑assumptions, overlaps, broader‑than)CL(Congruence Level; feeds B.3 Trust & Assurance)loss/fit(explicit statement of what is lost or assumed)
Invariants (normative)
- I‑1 - Context‑qualified usage. Every normative use of a term is Context‑qualified (directly or via table/section headers).
- I‑2 - Local‑only cells. A SenseCell belongs to exactly one Context.
- I‑3 - senseFamily hygiene. SenseCells are lexical; behaviour, deontics, measurements, proof steps live in their respective patterns (C‑6).
- I‑4 - Time stance fidelity. If a source fixes a
DesignRunTag, the Context Card carries it and SenseCells inherit it. - I‑5 - No implicit Cross‑context identity. Cross‑context relations exist only as F.9 Bridges with
relationandCL. - I‑6 - Parsimony & heterogeneity hook. The Context Map is finite, heterogeneous (≥ 3 families per unification line), and parsimonious (F.1).
Reasoning Primitives (judgement schemata; pure, side‑effect‑free)
These capture allowable mental moves; they do not prescribe storage, APIs, or workflow.
-
Context qualification
Context(C) ∧ mentions(C, s) ⊢ uses(s@C)Reading: If a string s is used under Context C, we treat it as the local term s@C. -
Local sense formation
uses(t@C) ∧ gloss_C(t) ⊢ SenseCell⟨t@C⟩Reading: A Context‑true gloss yields a SenseCell for t inside C. -
Admissible Cross‑context relation
SenseCell⟨x@A⟩ ∧ SenseCell⟨y@B⟩ ∧ declare(rel, CL) ⊢ Bridge(x@A, y@B, rel, CL)Reading: Only an explicit declaration generates a Bridge; no name‑matching inferences. -
Bridge‑to‑Concept‑Set hint (for F.7)
Bridge(x@A, y@B, rel≈equiv, CL≥k) ⊢ candidate_same_row(x, y)Reading: High-CL, near‑equivalence bridges can nominate cells for one Concept‑Set row (final decision in F.7).
Didactic Metaphor (informative)
- Contexts. Each
U.BoundedContextis a Context; its Context Card is a published boundary marker (name, edition, time stance, trip‑wires). - Words in a Context. A SenseCell is a dictionary entry pinned to that Context’s wall.
- Door‑to‑door links. An Alignment Bridge is a labelled passage connecting two Contexts; a CL placard says how trustworthy that passage is.
We first speak inside Contexts; only then decide which doors to connect—and with what warnings.
Placement & Flow
F.0.1 is the front door of Part F. It enables: F.1 (choosing Contexts with Context Cards) → F.2 (deriving SenseCells inside each Context) → F.3 (stabilising local senses) → F.7 (building Concept‑Set rows) → F.9 (stating Bridges).
Anti‑patterns & remedies
Compact worked examples
Each vignette shows (1) two Context Cards (abridged), (2) SenseCells inside Contexts, (3) the Bridge with relation & CL, and (4) a Concept‑Set hint (if any).
F.0.1:9.1 Enactment × Provenance — process vs activity
-
Context A:
BPMN_2_0- Business Process Model and Notation v2.0 (2011) - design SenseCell⟨process@BPMN⟩: Tech “process”; Plain “workflow process”; Gloss “graph of flow nodes/events executed by participants.” -
Context B:
PROV_O_2013- W3C PROV‑O (2013) - run SenseCell⟨activity@PROV⟩: Tech “activity”; Plain “provenance activity”; Gloss “time‑bounded occurrence using/generating entities.” -
Bridge: ⟨process@BPMN⟩ ↔⟨
design‑spec‑of, CL=2, loss: “no concurrency semantics in trace”; fit: “maps to execution plan”⟩ ⟨activity@PROV⟩ -
Concept‑Set hint: No same‑row nomination (relation ≠ near‑equiv); instead, record a design↔run linkage.
Control × PLC runtime — actuation vs control output
-
Context A:
CTRL_Text_Classic- control theory primers - design SenseCell⟨actuation@CTRL⟩: Tech “actuation”; Plain “control output”; Gloss “signal applied to plant actuators.” -
Context B:
IEC_61131_3- PLC languages - run SenseCell⟨q‑output@IEC⟩: Tech “control‑output”; Plain “PLC output”; Gloss “program‑produced output variable to field I/O.” -
Bridge: ⟨actuation@CTRL⟩ ↔⟨
near‑equivalent, CL=2, loss: “hardware/scan‑cycle specifics absent in CTRL”; fit: “semantics align under linear regime”⟩ ⟨q‑output@IEC⟩ -
Concept‑Set hint: Candidate same‑row (F.7) with note: “merge permitted at CL≥2 threshold.”
F.0.1:9.3 Measurement × Service — observation vs service metric
-
Context A:
SOSA_SSN_2017- sensing/observations - run SenseCell⟨observation@SOSA⟩: Tech “observation”; Plain “measurement act”. -
Context B:
ITIL4_2020- services - (mixed) SenseCell⟨slo‑metric@ITIL⟩: Tech “service‑level metric”; Plain “service measure”; Gloss “quantity used to evaluate SLOs.” -
Bridge: ⟨observation@SOSA⟩ ↔⟨
provides‑value‑for, CL=2, loss: “organizational context not in SOSA”; fit: “metric results are measurement results.”⟩ ⟨slo‑metric@ITIL⟩ -
Concept‑Set hint: Not a same‑row case; this is a role‑in‑use relation (measurement feeds status evaluation).
F.0.1:9.4 Type reasoning — subclass‑of (OWL) vs is‑a (plain)
-
Context A:
OWL2_Profiles- description logics SenseCell⟨subclass@OWL⟩: Tech “subclass‑of”; Plain “is‑a”. -
Context B:
ENG_Glossary- engineering plain usage compendium SenseCell⟨is‑a@ENG⟩: Tech “is‑a (engineering)”; Plain “kind‑of”; Gloss “informal subsumption in specs.” -
Bridge: ⟨subclass@OWL⟩ ↔⟨
near‑equivalent, CL=1, loss: “OWL formal constraints absent in ENG”; fit: “intended subsumption semantics.”⟩ ⟨is‑a@ENG⟩ -
Concept‑Set hint: Keep separate rows unless the consuming artefact demands formal semantics.
F.0.1:9.5 Deontics × Access — permission vs role (RBAC)
-
Context A:
ODRL_2_2- policy/deontics SenseCell⟨permission@ODRL⟩: Tech “permission”; Plain “allowed action”. -
Context B:
NIST_RBAC_2004- access control SenseCell⟨role@RBAC⟩: Tech “access‑role”; Plain “permission set”. -
Bridge: ⟨permission@ODRL⟩ ↔⟨
member‑of‑set‑in, CL=2, loss: “contextual obligations not preserved”; fit: “RBAC roles aggregate permissions.”⟩ ⟨role@RBAC⟩ -
Concept‑Set hint: Not same row (different kinds); useful linkage for Enactment when binding duties to sessions.
Extended reasoning moves (pure judgement schemata)
Judgements are conceptual entailments over Contexts, SenseCells, and Bridges. They carry no storage, workflow, or governance semantics.
Context‑qualified use
Context(C) ∧ mentions(C, s) ⊢ uses(s@C)
If s is used under Context C, we treat it as the local term s@C.
Sense formation (local)
uses(t@C) ∧ gloss_C(t) ⊢ SenseCell⟨t@C⟩
A Context‑true gloss yields a SenseCell inside C.
Admissible Bridge (creation predicate)
SenseCell⟨x@A⟩ ∧ SenseCell⟨y@B⟩ ∧ A≠B ∧ rel∈R ∧ cl∈{0,1,2} ⊢ Bridge(x@A,y@B,rel,cl)
Only explicit relation rel with Congruence Level cl constitutes a Bridge.
Canonical relation set R (didactic catalogue):
equivalent‑under‑assumptions - near‑equivalent - overlaps - broader‑than - narrower‑than - design‑spec‑of - run‑trace‑of - representation‑of - member‑of‑set‑in - provides‑value‑for.
Bridge composition (minimum CL and relation loss)
Bridge(a,b,rel₁,cl₁) ∧ Bridge(b,c,rel₂,cl₂) ⊢ Bridge*(a,c,rel*,cl*)
cl* := min(cl₁, cl₂)(do not inflate confidence)rel* := conservativeRel(rel₁, rel₂)(e.g., near‑equiv composed with overlaps yields overlaps)
Reading: Chained passages inherit the minimum CL and the relation that remains admissible after composition.
Non‑identity by stance
SenseCell⟨x@A(design)⟩ ∧ SenseCell⟨y@B(run)⟩ ∧ ¬declared(Bridge(x,y,near‑equiv,_)) ⊢ ¬same‑row(x,y)
Different time stances forbid same‑row unless an explicit near‑equiv Bridge exists.
Row viability (Concept‑Set candidacy)
Cells = {c₁…cₙ} ⊢ row‑viable(Cells) ⇔ connected(Cells, Bridges_{rel∈{equiv,near‑equiv}, cl≥k}) ∧ ¬contradiction(Cells)
Reading: A row is viable if its cells form a connected subgraph via Bridges with sufficient CL and contain no mutually exclusive links.
Contradiction sieve
Bridge(a,b,broader) ∧ Bridge(a,b,narrower) ⊢ contradiction(a,b)
Incompatible relations across the same pair flag a contradiction for review (conceptually).
Non‑bridge implication ban
name(x) = name(y) ∧ A≠B ⊢ ¬Bridge(x@A, y@B, _, _)
String equality across Contexts never implies a Bridge.
SCR/RSCR acceptance checks (conceptual)
These checks are content‑oriented; they validate that a manuscript/model respects Part F principles. No process/tool assumptions are implied.
SCR — Static conformance
- SCR‑F01 (Context‑qualified). Every normative term is Context‑qualified (directly, or via a scoped header that unambiguously fixes the Context).
- SCR‑F02 (Local cells). Each SenseCell belongs to exactly one Context; no cell aggregates Cross‑context senses.
- SCR‑F03 (senseFamily hygiene). SenseCell glosses contain no behaviours/deontics/equations; those appear only in their patterns.
- SCR‑F04 (Bridges explicit). Every Cross‑context relation appears as a Bridge with
relationandCLand a short loss/fit note. - SCR‑F05 (No string identity). There is no use of string equality to stand in for Cross‑context identity.
- SCR‑F06 (Time stance fidelity). Where a Context fixes a
DesignRunTag, the SenseCells and any Bridges reflect that stance explicitly. - SCR‑F07 (Row viability). Any Concept‑Set row shown is supported by a connected subgraph of Bridges with CL ≥ threshold and no contradictions.
RSCR — Regression & evolution
- RSCR‑F01 (Edition split). When a source edition changes materially, SenseCells tied to the old edition remain; new cells bind to the new Context; Bridges are re‑assessed.
- RSCR‑F02 (Bridge stability). If any Bridge endpoint changes gloss/stance, downgrade or retire the Bridge, documenting the loss/fit change.
- RSCR‑F03 (Composition guard). When composing Bridges in a chain, the resulting
CLnever exceeds the minimal link; relationCLdrops monotonically. - RSCR‑F04 (Heterogeneity + QD guard): requires ≥3 domain‑families AND MinInterFamilyDistance ≥ δ_family (per the active F1‑Card edition), with QD‑triad evidence (publish Diversity_P and IlluminationSummary on the declared grid/kernel). Near‑alias pairs (per dSig rule) SHALL be flagged and excluded or merged before the guard is evaluated. Record the F1‑Card edition id.
Publish‑ready summary
An artefact is ready with respect to F.0.1 when:
- SCR‑F01…F07 hold for all terms, cells, rows, and bridges it presents;
- RSCR‑F01…F04 hold under simulated edition/stance changes;
- Every Cross-context statement can be read as a Bridge or as a composition of Bridges with stated
CLand relation loss.
Quick reference (didactic)
- Context = a
U.BoundedContextwith edition, scope, and (if inherent) time stance. - SenseCell = the minimal, lexical unit of meaning inside a Context (Tech/Plain labels + gloss).
- Bridge = the only Cross‑context relation, labelled with
relationand CL, plus a short loss/fit note. - Concept‑Set row = a didactic table row collecting SenseCells that are sufficiently the‑same‑thing under declared Bridges.
Mental checklist: Name the Context → speak in the Context → connect Contexts only by labelled bridges → build rows from bridged cells.
F.0.1:End
Domain‑Family Landscape Survey
“Fix the context of meaning before you name anything.” Status. Architectural pattern. Depends on. E.10.D1 Lexical Discipline for “Context” (D.CTX); F.0.1 Contextual Lexicon Principles; A.7 Strict Distinction (Clarity Lattice); A.11 Ontological Parsimony. Coordinates with. F.2 Term Harvesting & Normalisation; F.3 Intra‑Context Sense Clustering; F.4 Role Description; F.9 Alignment & Bridge Across Contexts; G.0–G.1 (Scope/entityOfConcern handoff). (Bridges live only in F.9.)
Aliases (informative). Contexts‑first survey; Context cut.
Intent & applicability
Intent. Establish a finite set of U.BoundedContext (“context of meaning”), each tied to an authoritative source or canon within a domain family, so that all later moves (term harvesting, clustering, role naming, cross‑context bridges) operate on local meanings rather than on drifting, globalised words.
Applicability. Use at the start of any unification effort for any FPF pattern (role assignment and performed-work attribution, Sys-CAL, KD-CAL, Kind-CAL, LCA-CAL…) and whenever a discipline canon materially changes (new edition, re-framing, seminal result).
Non‑goals. No tooling, workflow, or editorial roles. No global ontology. No cross‑context equations. This pattern describes how to think, not how to store.
Problem frame
Without explicit context of meaning:
- Word‑drift. Common words (process, role, service, model) silently change sense across disciplines.
- Scope mirages. One influential standard is mistaken for the domain.
- Retro‑lock. Old editions become the implicit truth simply because they were “there first”.
- Category bleed. Behavioural roles, epistemic statuses, deontic permissions mix because their contexts were never fixed.
- Name inflation. Convenience root kind labels or global names appear just to "stabilise" unstable words.
Forces
Core idea (didactic)
Think in Contexts, not in words. A Context of meaning is a U.BoundedContext (per D.CTX) that encloses a coherent vocabulary and its rules from a specific, citable canon (standard, BoK, seminal paper, textbook tradition). You name and reason inside the Context. When you must step between Contexts, you will declare a bridge later (F.9) with explicit losses or mismatches.
Minimal vocabulary (this pattern only)
- U.BoundedContext (short: Context in Tech register). The formal Context of meaning.
- Context (Tech register alias for U.BoundedContext). Use Context for pedagogy, U.BoundedContext for formal references.
- Domain family. An informative shelf‑label grouping related Contexts (e.g., workflow & provenance; services & deontics; sensing & measurement; types & taxonomies; control & actuation). No semantics attach; Domain ≠ Context.
- Context Card. A one‑screen conceptual sketch of a Context (see §7.2).
- SenseCell (appears downstream). A (Context × Local‑Sense) address; F.3 will mint these after clustering. Mentioned here only to keep the destination in view.
Solution — the Contexts‑first survey (conceptual, notation‑free)
Step 1 — Declare your unification line(s). State which FPF pattern threads are in play (e.g., Enactment + KD‑CAL sensing + Sys‑CAL execution). This keeps the cut purposeful.
Step 2 — Cut the landscape by domain families. For each line, select at least three distinct domain families (heterogeneity guard). Examples:
- Workflow & provenance (BPMN 2.0; W3C PROV‑O)
- Services & deontics (ITIL 4; ODRL 2.2)
- Sensing & measurement (SOSA/SSN; ISO 80000‑1)
- Types & taxonomies (OWL 2; FCA corpus)
- Control & actuation (state‑space control texts; IEC 61131‑3)
Step 3 — For each family, sketch 1–3 Context Cards. Prefer canonical, widely cited canons. If a field is fragmented, choose one exemplar and one counter‑voice to surface heterogeneity.
Step 4 — Make locality explicit. Treat words as context‑local. Process (BPMN) ≠ process (thermodynamics) ≠ process (PROV). Do not reconcile. Do not average. Just fix the Contexts.
Step 5 — Bound the set. Small enough to hold in working memory. As a rule of thumb:
- per unification line: ≥ 3 families;
- per family: 1–3 Contexts. More only if a missing Context hides a known sense‑split you will certainly need.
Step 6 — Postpone bridges. If two Contexts seem “close”, resist collapsing. Note the tension and leave any bridge claim to F.9 Alignment & Bridge.
What to record (conceptual, not clerical)
7.1 The two‑minute memory. Everything you need to think correctly later fits on an eight‑line card. No registries, no workflows, no storage choices.
7.2 The Context Card (one‑screen sketch). (Each bullet is a thought, not a field.)
- Name & edition. “BPMN 2.0 (2011)” • “W3C PROV‑O (2013)” • “ITIL 4 (2020)”.
- Domain family. workflow / provenance / services / deontics / sensing / types / control … (informative only; never used to infer meaning).
- Scope gist (didactic; ≠
USM.ScopeSlice(G)). One line that marks the inside/outside (“workflow graphs & participants”, “provenance entities/activities/agents”). - Time stance (if inherent). Does the canon speak design (specifications, models) or run (occurrences, acts)?
- Lexical trip‑wires. Known homonyms or false friends in this Context (“process ≠ thermodynamic process”, “role (RBAC) ≠ behavioural role”).
- Neighbour Contexts (informative). Close cousins that people often conflate (BPMN ↔ PROV‑O, ITIL ↔ ODRL).
- Recency note. Current / superseded / candidate (only as a reminder to yourself which text you mean).
- Why this Context matters here. One sentence linking to your unification line (“we will name Executions later; PROV‑O keeps them run‑time”).
- Diversity signature (dSig). A 5-characteristics discrete signature for
U.BoundedContext: [Sector, Function, Archetype, Regime, MetricFamily]. Authors SHOULD pick from local discipline taxonomies. Publish adSigSourcelist (five refs/URIs, one per characteristic) on every Card, falling back to free-text only where no canonical term exists. Two Contexts are flagged as Near-Duplicate when ≥3 characteristics match. PublishdSiganddSigSourceon every Card.
If your Card spills beyond a screen, you are collecting facts, not fixing meaning.
F1‑Card (normative artefact): { taxonomyRef, embeddingRef, DistanceDef, δ_family, confidenceBand, calibrationSet, edition, subFamilyDef? }. subFamilyDef (optional): declares the stable partitioning below a domain‑family (e.g., taxonomic sub‑fields or CVT clusters with parent family anchors). When HET‑FIRST quotas refer to “sub‑family”, they MUST use this declared subFamilyDef.
Declare DomainDistance policy (cosine or transport) and δ_family threshold; version as part of DescriptorMapRef. Publish confidenceBand (e.g., CI90%) for the calibrated δ_family; treat numbers in examples as illustrative, not normative.
Invariants (normative, lightweight)
- Context ≡ U.BoundedContext. In this pattern, Context always means U.BoundedContext (per E.10.D1).
- Locality. Words are local to their Context; no global meaning is implied or imported.
- Heterogeneity. Each unification line considers ≥ 3 distinct Domain families (labels are informative only).
- Parsimony. Prefer few, canonical Contexts per family (1–3) that jointly expose the key sense splits.
- No bridging here. No equivalence or mapping is asserted between Contexts in F.1. (Bridges live in F.9.)
- DesignRunTag honesty. If a canon fixes a DesignRunTag, note it. Do not reinterpret.
- Didactic primacy. Each Context Card must be readable by a thoughtful engineer in under two minutes.
- Domain‑family neutrality. Domain families carry no semantics; they SHALL NOT be used for inheritance, inference, or bridge implication.
- Scope naming separation.
Scope giston Cards is didactic only; formal Scope/entityOfConcern (=USM.ScopeSlice(G)⊕entityOfConcern(GroundingHolon, ReferencePlane)) is declared in G.0–G.1, not in F.1. - Diversity signature present. Each Context Card PUBLISHES a
dSigin the 5‑characteristics form. - Collision rule. If any pair of Cards has
dSigmatching on ≥3 characteristics, mark Near‑Duplicate and either merge into one slot or replace one by a Context from a different domain‑family. Record action in SCR.
Self‑checks (mental, not procedural)
- The mirror test. Can you explain why each Context is inside your cut in one breath? If not, you are surveying for comfort, not for meaning.
- The homonym ping. For each frequent word (process, role, service, model, execution), can you immediately list the Contexts where it differs? If not, add the missing Context.
- The bridge itch. Feel the temptation to say “these are the same”? Good. Write the itch down and refuse to scratch it here. That’s F.9’s job.
- The memory rule. If your entire survey cannot be recalled without opening a document, it is too large.
Micro‑examples (illustrative only)
One unification line: role assignment and performed-work attribution with sensing and execution.
- BPMN 2.0 (2011) — workflow family. Scope gist: flow nodes, sequence flows, participants (design‑time). Trip‑wires: “process” here is a graph; not a run.
- W3C PROV‑O (2013) — provenance family. Scope gist: Activity that uses/generates entities (run‑time). Trip‑wires: “activity/process” here is a temporal occurrence.
- ITIL 4 (2020) — services family. Scope gist: service as value co‑creation; SLO/SLA (deontic talk nearby). Trip‑wires: “incident/problem/practice” don’t equal workflow tasks.
- ODRL 2.2 — deontics family. Scope gist: permissions, prohibitions, duties (design). Trip‑wires: “duty/obligation” ≠ service guarantee mechanics.
- SOSA/SSN (2017) — sensing family. Scope gist: Observation as an act yielding a Result for a property. Trip‑wires: “observation” ≠ “state”; it’s an act with a procedure.
- IEC 61131‑3 — control languages family. Scope gist: tasks that execute programs (run‑time). Trip‑wires: “task/execution” ≠ “workflow process”.
With only these Contexts fixed, later steps become almost mechanical: F.2 harvests terms inside each Context; F.3 clusters within each Context; F.4 names roles or statuses pointing to SenseCells; F.9 draws the bridges you refused to draw here.
Anti‑patterns & remedies
Worked examples
Each example shows the cut (the Contexts you keep in view) and the thinking pay‑off you get before any harvesting, clustering, or bridging.
F.1:12.1 Role assignment and performed-work attribution with sensing and execution (service acceptance)
Unification line. Enactment + KD‑CAL (sensing) + Sys‑CAL (execution).
Contexts (six Cards).
- BPMN 2.0 (2011) — workflow family; design; graph of flow nodes, participants.
- PROV‑O (2013) — provenance family; run; Activity uses/generates Entities; Agents.
- ITIL 4 (2020) — services family; design; service, SLO/SLA vocabulary.
- ODRL 2.2 — deontics family; design; permission / prohibition / duty.
- SOSA/SSN (2017) — sensing family; run; Observation as act with Result.
- IEC 61131‑3 — control languages; run; tasks execute control programs.
Thinking pay‑off (examples).
- You stop saying “process uptime” and think Execution (IEC) measured by Observation (SOSA) compared against SLO (ITIL)—three Contexts, three senses.
- You mark a trip‑wire: RBAC role (not in this cut) is not a behavioural role (BPMN participant).
- You resist equating PROV Activity with BPMN workflow; later F.9 may relate them with explicit loss.
F.1:12.2 Method quartet with types & measurement (model state graph)
Unification line. Method/work stack (A.3/A.15/B.1.5) + Kind-CAL + KD‑CAL.
Contexts (five Cards).
- SPEM 2.0 / ISO 24744 — methods family; design; Method and MethodDescription language.
- OWL 2 (profiles) — types family; design; class, subclass, equivalent class.
- FCA corpus — types family; design; concept lattices.
- SOSA/SSN (2017) — sensing family; run; Observation / Procedure.
- ISO 80000‑1 (2022) — metrology family; design; quantity kinds, units.
Thinking pay‑off.
- You keep Method (abstract how‑to) separate from MethodDescription (epistemic recipe) and Execution (run) because the Contexts already split design vs run.
- You avoid treating FCA "concept" as a root kind; later F.9 can bridge OWL classes to FCA concepts with cautions.
F.1:12.3 Control & actuation with services (operational SLOs in plants)
Unification line. Sys‑CAL + LCA‑CAL (planned) + services/deontics.
Contexts (five Cards).
- State‑space control texts — control family; design; controller/plant, feedback.
- IEC 61131‑3 — control languages; run; task, program execution.
- ISA‑95 — integration family; design; levelled layers, interfaces.
- ITIL 4 (2020) — services family; design; SLO/SLA.
- SOSA/SSN (2017) — sensing family; run; Observation.
Thinking pay‑off.
- “Actuation” is recognised as control output (Sys‑CAL), not a service promise.
- “Incident” (ITIL) is not a plant fault (Sys‑CAL); Contexts deter category errors.
Reasoning primitives (judgement schemas, notation‑free)
These are mental moves, not queries. They read “given these thoughts, this conclusion is safe to hold (conceptually).”
-
Context set for a line
line L declared ⊢ Contexts(L) = {C₁,…,Cₙ}Reading: For a unification line L, the Contexts you deliberately keep in view are{C₁,…,Cₙ}(from your Cards). -
Heterogeneity check
families(L) = F ⊢ heterogeneous(L) ≡ (|distinct(F)| ≥ 3)Reading: Your cut is heterogeneous if it spans at least three domain families. -
Parsimony check
Contexts(L)=R, families(L)=F ⊢ parsimonious(L) ≡ (∀f∈F: 1≤|R∩f|≤3)Reading: Each family contributes a few Contexts, not a phonebook. -
Locality assertion
term w, C∈Contexts(L) ⊢ meaning(w)@C is localReading: A word’s sense is context‑local; no global meaning is implied. -
Time‑stance guard
C has stance s∈{design,run} ⊢ claims@C must respect sReading: If a Context is design‑time, do not make run‑time claims in it (and vice versa). -
Trip‑wire recall
C lists tripWires T ⊢ for any w∈T, require Context‑prefix when speakingReading: Words on the trip‑wire list must be spoken with the Context name. -
Bridge embargo
C₁≠C₂ ⊢ no‑equivalence(C₁,C₂) within F.1Reading: F.1 never asserts equivalence across Contexts; postponement is principled, not procrastination. -
Context sufficiency probe
common‑word w used in L ∧ w not covered by any trip‑wire ⊢ consider adding a Context that makes w differReading: If a frequent word has no deliberate sense‑split in your cut, you may be missing a Context. -
Memory rule
|Contexts(L)| too large ⊢ reduce until a careful mind can recite them unaidedReading: The survey should live in memory, not in a registry.
F1‑Card example (informative)
Relations (with other patterns)
Builds on: E.10.D1 Lexical Discipline for “Context” (D.CTX) — ensures Context ≡ U.BoundedContext and reserves “Problem Frame” for narrative use. A.7 Strict Distinction — guards EntityOfConcern/Description-episteme/publication-carrier and DesignRunTag splits while you cut Contexts. A.11 Ontological Parsimony — motivates the small cut.
Constrains: F.2 (Term Harvesting): harvest inside Contexts named here; every occurrence carries a Context name. F.3 (Intra‑Context Sense Clustering): cluster per Context; no Cross‑context sense claims. F.4 (Role Descriptions): any role template or status template must cite a SenseCell that lives in a Context from this cut. F.9 (Alignment & Bridge): only F.9 may relate Contexts; never F.1–F.4.
Used by. Extension patterns in Part C (Sys‑CAL, KD‑CAL, Kind-CAL, LCA‑CAL) plus the method/work stack (A.3/A.15/B.1.5) as the lexical starting grid for their examples and definitions.
Migration notes (conceptual)
- New edition appears. Keep the old Card; add a new Card with the new edition. If the sense shifts, treat it as a new Context; if it is strictly editorial, mark recency but keep one context.
- New family emerges. If a missing family explains recurrent confusion in your line, admit it with one exemplar Context; remove a less informative Context to keep parsimony.
- Language variants. Treat language editions as separate Contexts unless the canon itself declares a single normative bilingual mapping.
- Trip‑wire growth. When you notice a recurring confusion, add a crisp trip‑wire to the relevant Card (one line; no essays).
- Bridges discovered later. Do not back‑port bridges into F.1; leave the Cards untouched and record the mapping in F.9.
- Dormant Contexts. If a Context no longer contributes to any active line, move it to a parking shelf (informative note on the Card) rather than deleting it.
Acceptance tests (SCR/RSCR — concept‑level)
Static conformance checks (SCR)
- SCR‑F1‑S01 (Heterogeneity). For each unification line, the set of Cards spans ≥ 3 distinct domain families.
- SCR‑F1‑S02 (One‑screen Cards). Each Card fits on one screen: name+edition; family; scope gist; time stance (if inherent); 1–3 trip‑wires; neighbour Contexts (optional); recency note.
- SCR‑F1‑S03 (Locality pledge). Nowhere in F.1 are Cross‑context equivalences or merges asserted.
- SCR‑F1‑S04 (Parsimony). In every family, 1–3 Contexts are kept; if more, a clear sentence justifies each extra Context’s unique sense contribution.
- SCR‑F1‑S05 (Context discipline). “Context” is used only as a synonym of U.BoundedContext; “domain” appears only as an informative family label.
- SCR‑F1‑S06 (Temporal honesty). If a canon fixes DesignRunTag, the Card states it.
- SCR‑F1‑S07 (Family neutrality). No claim, classification, or relation in F.1 relies on Domain‑family membership; families appear only as shelf labels on cards.
- SCR‑F1‑S08 (dSig present). Every Context Card has a 5‑characteristics
dSig. - SCR‑F1‑S09 (Collision policy). Any pair with
dSigmatch on ≥3 characteristics is either merged or replaced; SCR records the action.
Regression checks (RSCR)
- RSCR‑F1‑E01 (Edition churn). When a new edition is added, prior Cards remain; no silent replacement.
- RSCR‑F1‑E02 (Family balance). Adding/removing Cards does not drop any line below three families.
- RSCR‑F1‑E03 (Trip‑wire coverage). After introducing a new Context, the trip‑wire lists of neighbouring Contexts are reconsidered and updated if needed.
- RSCR‑F1‑E04 (No creep). Periodically apply the memory rule: if the cut no longer fits in working memory, shrink it.
Didactic distillation (90‑second teaching script)
“Before you name anything, fix the context of meaning. A Context is a U.BoundedContext tied to a specific canon—BPMN 2.0, PROV‑O, ITIL 4, SOSA/SSN, IEC 61131‑3, OWL 2. Words are local to Contexts: process (BPMN) is a workflow graph, activity (PROV) is a run‑time occurrence, service (ITIL) is a promise vocabulary. Cut the landscape so each unification line sees at least three domain families, with one‑screen Cards per Context (scope gist, time stance, trip‑wires). Do not bridge Contexts here—just write down the itch to bridge as an F.9 bridge question. Keep the cut small enough to remember. With Contexts fixed, harvesting (F.2), local clustering (F.3), role template or status templates (F.4), and explicit Cross‑context bridges (F.9) become straightforward—and you avoid naming ghosts that come from words floating without walls.”
F.1:End
F.2 — Term Harvesting & Normalisation
“Harvest words inside Contexts, name them in the Context’s own idiom, and stop there.” Status. Architectural pattern. Depends on. E.10.D1 Lexical Discipline for “Context” (D.CTX); F.0.1 Contextual Lexicon Principles (Source - Local Meaning - Bridge‑Only Crossing); A.7 Strict Distinction; A.11 Ontological Parsimony. Coordinates with. F.1 Context Map via Context Cards; F.3 Intra‑Context Sense Clustering; F.4 Role Description; F.9 Alignment & Bridge Across Contexts. Aliases (informative). context‑local harvesting; Local normalisation.
Intent & applicability
Intent. Provide a conceptual (notation‑free) discipline for turning Context‑internal usage into context‑local lexical units ready for later reasoning—without Cross‑context merging and without slipping into governance or tooling. The result is a small, auditable set of context‑local names and glosses that faithfully reflect how the canon speaks.
Applicability. Use whenever a unification line (from F.1) needs actual words to be referenced by patterns in Part C (Extention patterns) or by Role Descriptions (F.4). Re‑enter F.2 when a canon/edition changes or when a new Context is admitted in F.1.
Non‑goals. No global labels; no Cross‑context equivalence; no workflow or role descriptions; no storage/API talk. F.2 specifies how to think, not how to “run a pipeline”.
Problem Frame
Even with Contexts fixed (F.1), three mistakes recur:
- Word‑centrism. Treating a string as if it carried its meaning across Contexts (process, role, service).
- Over‑normalisation. Forcing one spelling/morphology across different canons, erasing Context‑specific cues.
- Premature structure. Smuggling behaviour, deontics, or type structures into what should remain lexical.
F.2 prevents these by localising meaning and naming strictly inside each Context.
Forces
Core idea (didactic)
Harvest inside each Context; name in that Context’s idiom; do not cross Contexts. For every Context (a U.BoundedContext from F.1), you gather attested phrases as thought-cues, choose a Local Normal Form (LNF) that matches the Context's idiom, attach a two-register label (Tech/Plain), and write a one-sentence gloss. That's all. These local lexical units become Local-Senses in F.3 and later addressable SenseCells (Context x Local-Sense). Cross-context sameness, behavioural claims, deontics, and durable kindhood are handled by F.9, A.15, E/E-LOG, or admission under E.24.UK and C.3 when those claims are being made.
Minimal vocabulary (this pattern only)
- Context — Tech‑register alias for U.BoundedContext (per E.10.D1).
- Attested phrase — A short, verbatim cue from the canon that shows how a word is used in this Context (citation idea, not a record format).
- Local Normal Form (LNF) — The Context‑specific canonical surface you will use when referring to the term in this Context (minimal editing: spelling/hyphenation/casing per the canon).
- Two‑register label — Tech (engineer‑facing) and Plain (pedagogic) forms for the same Context‑local meaning.
- Gloss (one‑sentence) — A Context‑faithful description of how the canon uses the term, at minimal generality.
- Local lexical unit — The quintet (Context, LNF, Tech, Plain, Gloss). This is F.2’s only outcome.
- Homonymy (signal) — Awareness that the same string has different local lexical units across Contexts (no relation asserted).
- SenseCell (appears downstream) — Address (Context × Local‑Sense) minted in F.3; mentioned here so you know what you’re preparing.
Everything above is a way of thinking. None of it implies a database, statuses, or roles.
Solution — three mental moves (notation‑free)
Move A — Localise the word
Question to ask. “In which Context am I hearing this word?” Action (mental). Point to a specific Context (from F.1). Grab 1–2 attested phrases that are representative in this Context. Outcome. You stop thinking “global word” and start thinking “context‑local usage”.
Micro‑cue. If you cannot name the Context, do not harvest the word.
F.2:6.2 -Move B — Name it in the Context’s idiom
Question to ask. “How would this Context itself write it?” Action (mental). Choose the LNF (Context‑conformant spelling/hyphenation). Then write the two‑register label and a one‑sentence gloss that says what the canon means here—nothing more. Outcome. You have a local lexical unit (Context, LNF, Tech, Plain, Gloss).
Micro‑cues. • Prefer the canon’s head noun; keep canonical hyphens; avoid invented compounds. • The Plain label should help a non‑specialist; the Tech label should match engineers’ eyes. • The Gloss must fit on a single line; put details in F.3.
Move C — Fence it off
Question to ask. “What must I refuse to conclude here?” Action (mental). Explicitly refuse to: (1) compare across Contexts, (2) fold morphology that the canon treats as meaningful, (3) embed behaviour, deontics, or type structure. Outcome. A clean, context‑local lexical unit that will be safe to cluster in F.3 and safe to bridge (or not) in F.9.
Guard‑rails (normative, lightweight)
- context‑locality. Every local lexical unit MUST cite a Context (U.BoundedContext from F.1).
- Context‑idiom normalisation. LNF MUST respect the Context’s idiom (spelling/hyphenation/casing) and use minimal edits.
- Two registers. Each unit SHOULD carry both Tech and Plain labels for didactics; if one is missing, justify.
- Minimal generality (G‑1). The gloss MUST be as specific as the Context’s canon requires—no broader.
- EntityOfConcern / Description / specification-use hygiene (A.7). MUST NOT include behaviour equations, deontic rules, measurement math, or type axioms; those belong to patterns.
- No Cross‑context claims. MUST NOT assert equivalence, subsumption, or similarity with terms in other Contexts (F.9 only).
- Edition honesty. If the Context’s canon has multiple editions with shifting usage, treat them as distinct Contexts in F.1 before harvesting.
- Parsimony. Prefer few, telling lexical units over long tails; keep head terms that will power F.3/F.4/F.9.
Micro‑examples (illustrative, context‑local)
Each line is one local lexical unit. No relations are implied across lines.
-
Context: BPMN 2.0 (2011) — LNF:
processTech:process- Plain:workflow processGloss: “Directed graph of flow nodes and sequence flows enacted by participants.” -
Context: PROV‑O (2013) — LNF:
activityTech:activity- Plain:temporal occurrenceGloss: “Time‑bounded occurrence that uses and generates entities and is linked to agents.” -
Context: ITIL 4 (2020) — LNF:
service‑level‑objectiveTech:service‑level‑objective- Plain:service targetGloss: “Target value for a service characteristic within a service promise vocabulary.” -
Context: NIST RBAC (2004) — LNF:
roleTech:access‑role- Plain:permission roleGloss: “Named grouping of permissions assignable via sessions.” -
Context: SOSA/SSN (2017) — LNF:
observationTech:observation- Plain:measurement actGloss: “Act applying a procedure to a feature of interest to produce a result.” -
Context: IEC 61131‑3 — LNF:
taskTech:task- Plain:runtime program executionGloss: “Cyclic or event‑driven execution unit for control programs.”
Didactic heuristics (informative)
- Keep the Context prefix in your inner speech. Say “process (BPMN)”, “activity (PROV)”.
- Prefer head nouns. If the canon says “service‑level objective”, do not shorten it to “objective”.
- Resist elegance that erases signal. Hyphens and case often carry the Context’s culture; keep them.
- Gloss from use, not from opinion. Quote in your mind, then compress; avoid importing definitions from neighbouring Contexts.
Anti‑patterns & remedies
Worked examples (context‑local only)
Each line is a local lexical unit (Context, LNF, Tech, Plain, Gloss). No Cross‑context relation is implied. Later clustering (F.3) and bridges (F.9) may connect them.
F.2:11.1 Enactment + sensing
-
Context: BPMN 2.0 (2011) — LNF:
processTech:process- Plain:workflow processGloss: “Directed graph of flow nodes and sequence flows enacted by participants.” -
Context: PROV‑O (2013) — LNF:
activityTech:activity- Plain:temporal occurrenceGloss: “Time‑bounded occurrence that uses and generates entities and links to agents.” -
Context: SOSA/SSN (2017) — LNF:
observationTech:observation- Plain:measurement actGloss: “Act applying a procedure to a feature of interest to produce a result.” -
Context: ITIL 4 (2020) — LNF:
service‑level‑objectiveTech:service‑level‑objective- Plain:service targetGloss: “Target value for a service characteristic within a service promise vocabulary.”
Thinking pay‑off: you can phrase “compare observation to service‑level‑objective” without importing workflow or provenance semantics.
F.2:11.2 Sys‑CAL / LCA‑CAL + services
-
Context: State‑space control texts — LNF:
actuationTech:actuation- Plain:control outputGloss: “Signal applied to the plant to influence state or output.” -
Context: IEC 61131‑3 — LNF:
taskTech:task- Plain:runtime program executionGloss: “Cyclic or event‑driven execution unit for control programs.” -
Context: ITIL 4 (2020) — LNF:
incidentTech:incident- Plain:reported disruptionGloss: “Unplanned interruption or reduction in the quality of a service.”
Thinking pay‑off: avoids calling a plant fault an “incident” unless you cross Contexts later with an explicit bridge.
F.2:11.3 Kind-CAL + method/work stack + KD‑CAL
-
Context: OWL 2 (profiles) — LNF:
subclass‑ofTech:subclass‑of- Plain:is‑a (type hierarchy)Gloss: “C ⊑ D: every instance of C is an instance of D.” -
Context: FCA corpus — LNF:
formal‑conceptTech:formal‑concept- Plain:extent–intent nodeGloss: “Maximal (objects, attributes) pair under a Galois connection.” -
Context: SPEM 2.0 / ISO 24744 — LNF:
methodTech:method- Plain:abstract way of doingGloss: “Abstract how‑to independent of specification or execution.” -
Context: SOSA/SSN (2017) — LNF:
procedureTech:procedure- Plain:measurement recipeGloss: “Specification guiding how an observation is produced.”
Thinking pay-off: discourages treating an FCA "concept" as a root kind, or a procedure as a method without later proof.
Reasoning primitives (judgement schemas, notation‑free)
Read each as a permitted mental move over the outcomes of F.2. Symbols:
R= Context (U.BoundedContext),u= local lexical unit,s= lexical string.
-
Localisation
heard(s) ∧ R chosen ⊢ localize(s,R)You decide to hearsonly in ContextR. -
Context‑idiom normalisation
localize(s,R) ⊢ LNF_R(s) = ℓWithinR, the Local Normal Form forsisℓ. -
Unit formation
LNF_R(s)=ℓ ∧ labelTech=t ∧ labelPlain=p ∧ gloss=g ⊢ unit(u) = ⟨R,ℓ,t,p,g⟩A local lexical unit is formed (quintet). -
Lexical‑only guard
unit(u) ⊢ lexicalOnly(u)No behavioural/deontic/type math is attached to the gloss. -
Homonymy signal (Cross‑context)
LNF_Ra(s)=ℓa ∧ LNF_Rb(s)=ℓb ∧ Ra≠Rb ⊢ homonymy(s) ⊇ {Ra,Rb}Same string across Contexts is flagged as different by default. -
Minimal generality check
unit(u) ⊢ minimal(u) ⇔ gloss(u) says no more than the Context’s usage requiresThe gloss fits the Context; broader claims are withheld. -
Two‑register adequacy
unit(u) ⊢ didactic(u) ⇔ (tech(u) faithful) ∧ (plain(u) explanatory)Tech stays canonical; Plain helps non‑specialists. -
No Cross‑context conclusion
unit(u@Ra), unit(v@Rb), Ra≠Rb ⊢ ¬(u ≡ v) (within F.2)F.2 never asserts Cross‑context equivalence. -
Ready‑for‑F.3 signal
lexicalOnly(u) ∧ minimal(u) ∧ didactic(u) ⊢ readyF3(u)A unit is suitable input for intra‑Context clustering in F.3.
Relations
Builds on: F.1 (Contexts fixed; heterogeneity/parsimony in place). E.10.D1 D.CTX (Context ≡ U.BoundedContext; “Problem Frame” reserved for narrative). F.0.1 (Source - Local Meaning - Bridge‑Only Crossing).
Constrains: F.3 (Intra‑Context Sense Clustering): operates only on units from one Context; produces Local‑Senses and addressable SenseCells. F.4 (Role Description Definition): may cite SenseCells, not raw strings. F.9 (Alignment & Bridge): consumes homonymy signals; declares explicit Cross‑context mappings with loss policies.
Used by. Extention patterns in Part C when referencing domain idioms (labels stay context‑local).
Migration notes (conceptual)
- New edition appears. Add a Context in F.1; harvest afresh in F.2 using that Context; do not overwrite earlier units.
- Idiomatic update discovered. If your LNF fought the canon’s idiom, re‑LNF within the same context; keep labels/glosses steady unless the canon itself differs.
- Ambiguity inside a Context. If use splits, mint two units with distinct glosses; F.3 will sort their relation (same/different Local‑Sense).
- Language split. Treat each language canon as its own Context; resist cross‑language merges in F.2.
- Tail pruning. If units accumulate without feeding F.3/F.4/F.9, drop them from the working set; keep head terms that carry bridges.
- DSL quarantine. If a tool dialect is unavoidable, keep it as one context among others; never let it define the idiom for other Contexts.
Acceptance tests (SCR/RSCR — concept‑level)
Static conformance (SCR)
- SCR‑F2‑S01 (context‑locality). Every unit cites a Context from F.1.
- SCR‑F2‑S02 (Idiomatic LNF). Each LNF reflects the Context’s spelling/hyphenation/casing with minimal edits.
- SCR‑F2‑S03 (Two registers). Each unit carries both Tech and Plain labels; if not, a reason exists tied to didactics.
- SCR‑F2‑S04 (Lexical‑only). No gloss contains behaviour, deontics, measurement math, or type axioms.
- SCR‑F2‑S05 (No Cross‑context claims). Nowhere does F.2 assert equivalence/similarity/subsumption across Contexts.
- SCR‑F2‑S06 (Minimal generality). Glosses match the Context’s use; no globalisation.
- SCR‑F2‑S07 (Temporal honesty). For Contexts with fixed DesignRunTag, units and glosses respect it.
Regression (RSCR)
- RSCR‑F2‑E01 (Edition split). Introducing a new edition yields new units under a new Context; earlier units persist unchanged.
- RSCR‑F2‑E02 (Normaliser stability). Adjusting an LNF does not silently widen/narrow the gloss.
- RSCR‑F2‑E03 (Language split). Adding a second language yields a second Context; no bilingual collapse in F.2.
- RSCR‑F2‑E04 (No stealth bridges). After updates, F.2 still contains zero Cross‑context identity claims; any mapping appears only in F.9.
- RSCR‑F2‑E05 (Head‑term focus). Periodic check shows the unit set remains small and oriented to F.3/F.4/F.9 needs.
Didactic distillation (60‑second script)
“In F.2 you harvest inside Contexts. For each Context, pick the canon’s own phrasing, choose a Local Normal Form in that idiom, add Tech and Plain labels, and write a one‑sentence Gloss that matches how that Context talks. Stop there. No bridging, no behaviour, no equations. If the same string appears in another Context, treat it as a different unit. These units feed F.3, where you’ll sort senses within a Context, and F.9, where you’ll relate Contexts explicitly. This keeps meaning local, names faithful, and later reasoning clean.”
F.2:End
Intra‑Context Sense Clustering
“Within one context, decide what ‘the same sense’ really is—before you ever cross Contexts.” Status. Architectural pattern. Depends on. F.1 Domain‑Family Landscape Survey; F.2 Term Harvesting & Normalisation; E.10.D1 Lexical Discipline for “Context” (D.CTX); A.7 Strict Distinction; A.11 Ontological Parsimony. Coordinates with. F.4 Role Description; F.7 Concept‑Set Table; F.8 Mint or Reuse Decision; F.9 Alignment & Bridge Across Contexts. Aliases (informative). context‑local clustering; Sense consolidation.
Intent & applicability
Intent. Consolidate the context‑local lexical units from F.2 into a small set of Local‑Senses that actually operate in that one context (U.BoundedContext). Each Local‑Sense receives a crisp, didactic label pair (Tech/Plain) and a short sense statement. The result is an addressable basis for later uses (Role Assignment, tables, bridges) that is still strictly context‑local.
Applicability. Apply after F.2 for any Context that will feed naming (F.4/F.5), decision gates (F.8), Cross‑context bridges (F.9), or exemplars in Part C. Use again whenever the canon (edition) shifts usage enough to split or merge senses within the same context.
Non‑goals. No Cross‑context comparison or merging. No behaviour/deontics/type mathematics. No storage schemas or workflows. This is pure sense‑making inside one context.
Problem Frame
context‑local units (LNF + labels + gloss) from F.2 often over‑ or under‑differentiate meaning:
- Over‑split: superficial variants (service‑level‑objective vs SLO) treated as different “things”.
- Under‑split: one gloss covering two selectional frames or incompatible use‑cases.
- Drift within a canon: multi‑chapter texts use the same head differently unless the reader consolidates the intended sense.
- Didactic mismatch: engineer‑friendly label and plain label drift apart when units remain too granular.
F.3 repairs this inside the Context by clustering “same sense” and distinguishing “different sense”, with parsimony.
Forces
Core idea (didactic)
Cluster by usage, not by string. Inside one context:
- Same sense → Local‑Sense: a small, coherent usage‑region the canon treats as one idea (even if it has aliases or minor surface variation).
- Different sense → two Local‑Senses: incompatible selectional frames, entailments, or role in the canon’s own statements.
Each Local‑Sense becomes addressable when paired with its Context: SenseCell = (Context × Local‑Sense). SenseCells are context‑local coordinates; they do not pre‑judge any Cross‑context mapping.
Minimal vocabulary (this pattern only)
- Context — short for
U.BoundedContext(per D.CTX). - Unit — a context‑local lexical unit from F.2 (LNF + Tech/Plain + gloss).
- Local‑Sense — the conceptual cluster of Units deemed “same sense” within that Context.
- SenseCell — the address for a Local‑Sense: (Context, Local‑Sense). This is what later patterns will cite.
- Counter‑example — a short, canonical sentence or use that must not be covered by the Local‑Sense; it sharpens the boundary.
- Usage cue (informative) — a clue from usage (collocational patterns, paraphrases, entailments in the canon) that suggests merge or split. Cues do not decide; the canon’s intent does.
Solution — how to think the clustering (notation‑free)
What follows are mental moves, not steps for a team. Use them as probes until the Context’s usage partitions itself naturally.
6.1 Consolidate aliases into one Local‑Sense. If Units differ only by orthography, abbreviation, or canon‑blessed synonymy and are used interchangeably in the Context’s own sentences, treat them as one Local‑Sense. Example (ITIL): service‑level‑objective and SLO → one Local‑Sense.
6.2 Split on incompatible selectional frames. If the same head pairs with different kinds of arguments or plays different roles in the canon’s statements (and those roles cannot both be true at once), split. Example (BPMN): event as node type vs as occurrence narrative in a tutorial → two Local‑Senses; adopt the node type sense if that is the normative layer.
6.3 Split on entailments that pull apart. If paraphrases lead to different entailments (e.g., one implies temporality, another structural position), you have two senses. Example (PROV): activity implies time‑bounded use/generate; it cannot be the same sense as a static capability.
6.4 Prefer sense minimality. If two candidate Local‑Senses never lead to different conclusions in the Context’s own use, merge them. If they sometimes do, split them—and record a counter‑example to keep the boundary crisp.
6.5 Keep Tech label idiomatic; Plain label helpful. Tech label stays as the canon speaks; Plain label conveys the function of the sense to a careful newcomer. Neither label may broaden the sense beyond usage.
6.6 Name only as much as you will use. If a fine-grained split has no downstream consequence (Role Descriptions, tables, bridges), prefer the coarser Local-Sense.
Outputs (conceptual, not clerical)
F.3 yields, per Context:
-
A small set of Local‑Senses, each with:
- Label pair: Tech (idiomatic) - Plain (didactic).
- Sense line: one‑sentence usage statement, in the Context’s voice.
- Inside list (informative): which Units from F.2 it consolidates.
- Counter‑example (optional but powerful): a short use that must not be included.
-
A SenseCell address for each Local‑Sense: (Context, Local‑Sense).
These are thinking reference points (cognitive only), not records or files. Later patterns cite SenseCells by name; nothing about storage is implied.
Invariants (normative, lightweight)
- context‑locality. Every Local‑Sense belongs to exactly one context. No Cross‑context clustering.
- Parsimony. Local‑Senses are few; prefer the coarsest partition that preserves the canon’s distinctions.
- Idiomatic Tech. The Tech label must stay in the Context’s idiom; no house‑style overrides.
- Didactic Plain. The Plain label must aid comprehension without adding scope.
- Usage‑first. Sense lines reflect the canon’s usage, not imported taxonomies or external theories.
- Counter‑examples rule. If a counter‑example exists that the sense would wrongly include, split.
- No behaviour math. Sense lines contain no behavioural, deontic, metrological, or type calculus; those live in Part C.
- Temporal honesty. If the Context fixes DesignRunTag, the sense line respects it (e.g., PROV activity is run‑time).
Self‑checks (mental probes)
- Same‑conclusion test. Do two candidate senses ever lead to different conclusions in the canon? If not, merge.
- Argument‑slot probe. Replace arguments in canonical sentences; do both candidates still read true? If one fails, split.
- Label inversion. Read the Plain label alone: does it tempt you to over‑generalise? If yes, tighten it.
- Counter‑example ping. Can you state a ten‑word use that the sense must exclude? If you can, write it; if you cannot, your sense may be too broad.
- Memory rule. Can you recall the Context’s Local‑Senses without notes? If not, you split too finely.
Anti‑patterns & remedies
Local‑Sense Cards (one‑glance form)
A Local‑Sense Card is a one‑glance sketch per sense in a Context. It teaches faster than prose lists and keeps senses crisp.
Fields (thought‑items, not fields to fill):
- Context (U.BoundedContext, edition)
- Label pair — Tech (idiomatic) - Plain (didactic)
- Sense line — one sentence in the Context’s voice
- Inside — which F.2 Units it consolidates (names only)
- Counter‑example — a short use that must not be included
Worked examples (all intra‑Context)
BPMN 2.0 (workflow Context)
Card A — “process (graph)”
- Label: Tech process - Plain workflow graph
- Sense line: A BPMN graph of flow nodes and sequence flows specifying orchestration among participants (design‑time).
- Inside: process, process model, business process (when used as diagram).
- Counter‑example: “This process took 5 minutes” ← runtime occurrence, not this sense.
Card B — “event (node‑type)”
- Label: Tech event (node) - Plain event symbol
- Sense line: A node-type that marks starts, ends, and intermediates; typed by trigger and result.
- Inside: start event, message event, end event.
- Counter‑example: “The outage event happened at 13:05” ← narrative occurrence, not the node‑type.
Outcome: “Process uptime” is rejected as a BPMN sense; Execution belongs to another Context.
PROV‑O (provenance Context)
Card C — “activity (run)”
- Label: Tech activity - Plain time‑bounded execution
- Sense line: An occurrence that uses and generates entities; linked to agents; has start/end.
- Inside: activity, execution (when PROV authors use it).
- Counter‑example: “Sorting algorithm” ← capability/method, not an occurrence.
Card D — “agent (provenance)”
- Label: Tech agent - Plain provenance actor
- Sense line: Thing that bears responsibility for an activity’s effects (person, org, software).
- Inside: agent.
- Counter‑example: “RBAC role” ← access status, not a PROV agent.
ITIL 4 (services Context)
Card E — “service‑level objective”
- Label: Tech SLO - Plain service target
- Sense line: A target value/range for a service characteristic used to define acceptable service.
- Inside: service‑level objective, SLO.
- Counter‑example: “Actual availability 99.5%” ← observation, not the target.
Card F — “incident”
- Label: Tech incident - Plain service disruption
- Sense line: An unplanned interruption or reduction in quality of a service.
- Inside: incident.
- Counter‑example: “Fault in plant sensor” ← Sys‑CAL fault; different Context.
SOSA/SSN (sensing Context)
Card G — “observation (act)”
- Label: Tech observation - Plain measurement act
- Sense line: An act applying a Procedure to a FeatureOfInterest to yield a Result for a property.
- Inside: observation.
- Counter‑example: “Temperature is 20 °C” ← result value, not the act.
OWL 2 (types Context)
Card H — “subclass‑of”
- Label: Tech subclass‑of (⊑) - Plain is‑a (class)
- Sense line: A class inclusion: every instance of C is an instance of D.
- Inside: SubClassOf, is‑a (when authors use it for classes).
- Counter‑example: rdf:type (instance‑of) — not class inclusion.
Card I — “equivalent‑class”
- Label: Tech equivalent‑class - Plain same class extension
- Sense line: Mutual class identity by extension; two labels for the same set of instances.
- Inside: EquivalentClasses.
- Counter‑example: owl:sameAs (individual identity), different predicate.
IEC 61131‑3 (control‑runtime Context)
Card J — “task (runtime)”
- Label: Tech task - Plain program runner
- Sense line: A cyclic or event‑driven execution unit that invokes programs on schedule or trigger.
- Inside: task.
- Counter‑example: “Control algorithm” ← design/method, not the runtime task.
Reasoning primitives (judgement schemas, notation‑free)
Each schema captures a safe mental move. It implies no storage, API, or workflow.
-
Alias‑to‑sense consolidation
Context C ⊢ interchangeable(U₁,…,Uₖ) ⇒ Local‑Sense σReading: If Units are used interchangeably by the canon in C, consolidate them into one Local‑Sense σ. -
Selectional‑frame split
C ⊢ frames(U) = F, frames(V) = G, F ∩ G = ∅ ⇒ split(U,V)Reading: In C, if the argument/role patterns do not overlap, treat as different senses. -
Entailment divergence
C ⊢ entail(U) ≠ entail(V) on canonical paraphrases ⇒ split(U,V)Reading: If paraphrases lead to different conclusions in the canon, split. -
Parsimony merge
C ⊢ no‑test distinguishes {U₁,…,Uₖ} ⇒ merge(U₁,…,Uₖ)Reading: If no canonical test yields a difference, merge into one sense. -
Counter‑example trigger
C ⊢ ∃e: e should not be covered by σ ⇒ refine(σ)Reading: A crisp counter‑example forces a narrower sense (split or relabel). -
Idiomatic Tech, faithful Plain
C ⊢ labelTech(σ) in idiom(C) ∧ labelPlain(σ) ⊆ usage(σ)Reading: Tech label speaks the canon; Plain label does not widen the sense. -
SenseCell address
C ⊢ σ ⇒ SenseCell ⟨C,σ⟩Reading: Pair each Local‑Sense with its Context to form an address used downstream. -
Temporal guard
stance(C)=design ⇒ forbid(run‑claims in σ)(and symmetrically) Reading: Sense lines must not cross the Context’s DesignRunTag. -
Edition guard
C≠C′ (different editions with usage shift) ⇒ no‑merge(σ@C, τ@C′)Reading: Do not merge senses across Contexts when editions shift usage. -
Completeness ping (optional)
frequent head w in C ∧ no Local‑Sense on w ⇒ consider(sense for w)Reading: If a common head lacks a sense, you may be missing a useful consolidation (within C).
Relations
Builds on: F.1 Domain‑Family Landscape Survey (Contexts fixed); F.2 Term Harvesting (Units ready); E.10.D1 D.CTX (Context discipline); A.7 Strict Distinction.
Constrains:
- F.4 Role Description. Role Descriptions cite SenseCells; they do not invent senses.
- F.7 Concept‑Set Table. Rows are built from SenseCells (later Cross‑context assembly); intra‑Context clarity here prevents row bloat.
- F.8 Mint or Reuse Decision. Decisions compare proposed names to existing SenseCells to avoid type inflation.
- F.9 Alignment & Bridge. Bridges connect SenseCell ↔ SenseCell across Contexts; F.3 provides the stable endpoints.
Is used by. Part C Extention Patterns to ground examples and invariants in Context‑true language.
Migration notes (conceptual)
- Usage clarifies → merge. If two Local‑Senses never lead to different conclusions in the Context’s canon, merge and keep the narrower sense line.
- Usage diverges → split. If new reading reveals incompatible roles/entailments, split and attach a counter‑example to each side.
- Edition change → new Context. When a new edition reframes usage, treat it as a separate Context (F.1) and re‑cluster there.
- Label upkeep. If the Plain label tempts broadening, tighten it; if the Tech label drifts from idiom, restore the canon term.
- Dormant sense. If a Local‑Sense ceases to matter for any active line, leave it listed but mark it low‑use in your own notes; do not fold it into another unless rule 1 holds.
- Bridge temptation. Record tensions to bridge elsewhere; F.3 never resolves Cross‑context relations.
Acceptance tests (SCR/RSCR — concept‑level)
Static conformance (SCR)
- SCR‑F3‑S01 (context‑locality). Every Local‑Sense is paired with exactly one context; no Cross‑context clustering appears.
- SCR‑F3‑S02 (Label pair). Each Local‑Sense has Tech (idiomatic) and Plain (didactic) labels; neither widens usage beyond the sense line.
- SCR‑F3‑S03 (Sense line fidelity). Each sense line is grounded in canonical statements of the Context; no behaviour/deontic/math content.
- SCR‑F3‑S04 (Parsimony). The set of Local‑Senses per Context is small enough to recall unaided by a careful mind.
- SCR‑F3‑S05 (Counter‑example presence). For any ambiguous head, at least one counter‑example is recorded to guard the boundary.
- SCR‑F3‑S06 (Temporal honesty). Where the Context has a declared stance, sense lines respect the DesignRunTag.
Regression (RSCR)
- RSCR‑F3‑E01 (Merge soundness). Every merge is justified by a failed distinction test (no selectional or entailment difference).
- RSCR‑F3‑E02 (Split necessity). Every split cites a role/entailment conflict or a concrete counter‑example.
- RSCR‑F3‑E03 (Edition guard). No Local‑Sense spans Contexts that differ by edition with usage shift.
- RSCR‑F3‑E04 (Label stability). Changes to labels do not change sense; if they do, the change is treated as a split/merge per E01/E02.
- RSCR‑F3‑E05 (Downstream continuity). After splits/merges, SenseCell references in F.4/F.7/F.9 remain referentially clear (new addresses are explicit; no silent aliasing).
Didactic close (60‑second recap)
Within one context, collect how the canon actually uses a head, not how we wish it did. Merge aliases that never lead to different conclusions; split uses that do. Give each consolidated use a crisp Tech label in the Context’s idiom and a faithful Plain label. The pair (Context, Local-Sense) is your SenseCell—the address later cited by Role Descriptions, tables, and bridges. No Cross‑context mergers here; that job belongs to F.9. Keep senses few, boundaries sharp, and labels honest.
F.3:End
Role Description - Description Episteme for U.Role
Type: Definitional (D) Status: Stable Normativity: Normative unless marked informative
Use This When
Plain name. Role-description episteme.
Use this pattern when a project needs a short, reusable description that makes one work-facing U.Role recognizable, teachable, and checkable inside one U.BoundedContext.
Typical moments:
- a project has a role name such as
ReviewerRole,OperatorRole,InspectorRole,TransformerRole,ShipyardCoordinatorRole, orModelCardReviewerRole, but the bounded context, admissible holder kind, role invariants, capability expectations, or work-facing boundary are unclear; - a method description names required roles, but readers cannot tell what role value is required before a
U.RoleAssignmentcan be checked; - a role name is starting to carry method, capability, work, permission, evidence, publication, or status claims that belong to neighboring patterns;
- a former source phrase says that a report, standard, dataset, theorem, dashboard, publication, or requirement has a "role" and the text must decide whether that phrase is a real work-facing role description or a direct episteme-use relation.
Primary EntityOfConcern. The EntityOfConcern is the role-description episteme: a U.Episteme that describes one U.Role value in one bounded context. It is not the role value itself, not the holder, not a role assignment, not a capability, not a method description, not performed work, not a status-use relation, and not a publication form.
Primary working reader. The first reader is an engineer-manager, analyst, method author, or pattern author who must let people recognize a role while keeping role value, holder, assignment, capability, method, work, evidence use, status use, and publication use distinct.
First useful move. Name the role value being described, the bounded context that gives it meaning, the kind of holder admitted for role assignment, and the smallest set of role invariants that matters for the next assignment, method, work, naming, or bridge claim.
What goes wrong if missed. A role-description card becomes a hidden method, access policy, permission badge, evidence relation, status assertion, staffing plan, or work log. Then FPF grows one role ontology for acting holons and a second role-like ontology for epistemes, publications, statuses, and relation positions.
What this buys. A project can publish a compact, human-readable role description while keeping operational claims in their direct patterns. The role remains recognizable; the assignment remains checkable; capability, method, work, evidence, status, and publication claims stay inspectable instead of being smuggled into the role name.
Not this pattern when.
- If the current claim is the role value itself or role taxonomy, use
A.2. - If the current claim is which holder bears which role in which context and window, use
A.2.1. - If the current claim is role state or enactable-state admission, use
A.2.5. - If the current claim is role-requirement substitution, role incompatibility, role-factor qualification, or bundle expression, use
A.2.7. - If the current claim is capability, use
A.2.2. - If the current claim is method, method description, work plan, or performed work, use
A.15and its neighbors. - If the current claim is evidence use, status use, source use, standard use, requirement use, publication use, assurance use, gate use, or decision use of an episteme, use the direct pattern for that relation. Do not call that episteme a role holder.
- If the current issue is only a durable name, use
F.18. - If the current issue is cross-context sameness or translation, use
F.9. - If "role" means a relation position, use
A.6.5SlotSpec discipline.
Problem Frame
Role descriptions are useful because a role value needs a recognizable description before people can assign it, name it, compare it, or use it in a method requirement. A role such as InspectorRole is not self-explanatory. The project needs to know which bounded context gives it meaning, what kind of holder can bear it, which role invariants matter, and which neighboring checks may become current.
The recurring failure is to make the role description carry too much. A compact card is tempting: put role, status, permission, evidence, capability, method, assignment, work, and publication cues into one "assignable" template. That looks convenient but creates duplicate ontology. A standard used as a requirement source becomes a "standard role"; a report used as evidence becomes an "evidence role"; an access-control label becomes a behavioral role; a role name becomes proof of capability or proof that work occurred.
F.4 therefore treats a role description as a description episteme about a work-facing U.Role. It may mention neighboring relations, but it does not absorb them.
Problem
Without this pattern:
- Role description and role value collapse. The description is treated as if it were the
U.Rolevalue. - Role description and assignment collapse. A role name or card is treated as proof that a holder has the role.
- Role description and capability collapse. A role name is treated as evidence that the holder can do the work.
- Role description and method collapse. Role invariants become a hidden procedure or method description.
- Role description and performed work collapse. A role card is treated as evidence that work happened.
- Status and evidence uses become roles. Epistemes, publications, standards, datasets, and claims are put into role language because they are used in project reasoning.
- Relation positions become roles. Slot positions in signatures, interfaces, evidence relations, or status-use relations are called roles.
- Cross-context labels overreach. The same role-like word in two contexts is treated as one role description without a bridge.
Forces
Solution
Use a role-description episteme to describe one U.Role in one bounded context. The description gives readers enough to recognize and check the role, while sending neighboring claims to their governing patterns.
This is a description episteme shape, not a new assignment relation. Its publication may be a card, table row, method appendix, standard clause, or pattern section. The publication form is not the role description by default; it publishes or carries the description episteme.
Core Slot Meanings
The slot list is an open-world discipline. A quick local description may fill only the role, context, recognition text, holder admission, and non-role boundary. A safety-critical work-admission use may need role-state, capability, method, assignment-window, and evidence references through neighboring patterns.
Role Description vs Neighboring Values
Keep these distinctions:
F.4 may point to these patterns; it does not copy their ontology.
Positive Construction Rule
Write a role description in this order:
- Name the described
U.Roleand bounded context. - State the admitted holder kind for role assignment.
- Give one short recognition paragraph.
- List the role invariants that make the role different from neighboring roles.
- State the non-role boundary: what this description does not say about assignment, capability, method, work, evidence, status, permission, publication, or slot positions.
- Add neighboring references only when the current use depends on them.
- If the name is durable, public, cross-context, or Core-facing, settle it through
F.18; if the sense crosses contexts, useF.9.
Invariants
- One described role. A role description describes exactly one
U.Rolevalue in the current application. - One bounded context. The role description is local to one
U.BoundedContext; cross-context reuse needsF.9. - Description boundary. The role description is a
U.Episteme; it is not the role value, assignment relation, holder, capability, method, work, or status-use relation. - Work-facing holder boundary. The holder admitted by a role assignment is a system or acting holon admitted by the governing work or method pattern. An episteme is not a role holder because it is used as evidence, source, standard, requirement, definition, explanation, status bearer, publication, or assurance input.
- No hidden capability. Capability requirements may be referenced, but the role description does not prove capability.
- No hidden method. Method requirements may be referenced, but the role description is not a method description.
- No hidden work. A role description may enable work attribution checks, but it is not evidence that work occurred.
- No status-template fusion. Status-use and evidence-use relations are direct relations, not a second branch of role description.
- Slot discipline. If a source says "role" for a relation position, recover
SlotKind,ValueKind, andRefKindthroughA.6.5. - Name after meaning. Durable naming follows
F.18only after role value, context, and local sense are recovered.
Reasoning Primitives
Use these judgement schemas as thinking checks.
Worked Cases
Pump Inspector Role
The description makes PumpInspectorRole recognizable. It does not say that Robot-7 holds the role, can inspect, followed the method, or performed work. Those claims go to [A.2.1](/generated/patterns/A.2.1), [A.2.2](/generated/patterns/A.2.2), [A.15](/generated/patterns/A.15), and evidence patterns.
Reviewer Role and Review Report
ReviewerRole in PatternReview_2026 may have a role description with invariants about checking a pattern against declared scales. A review report produced by a reviewer is an episteme used as evidence or source for a pattern-quality claim. The report is not the role holder and does not hold an evidence role.
Use:
A.2forReviewerRole;F.4for the role-description episteme;A.2.1forAlice#ReviewerRole:PatternReview_2026@Window;A.15.1for the review work occurrence;A.10,B.3,G.6, or a direct evidence-use pattern for the review report as evidence.
Standard Used as Requirement Source
The sentence "ISO 42010 has the architecture-standard role in this work" is unsafe if it makes the standard a role holder.
Repair it as:
Only a system or acting holon can hold a work-facing role. The standard may constrain, evidence, or source a claim through direct episteme-use relations.
Access Role Is Not Automatically Work-Facing Role
RBAC "role" often names a permission grouping. If the current claim is permission or access standing, use the status, policy, or deontic governing pattern. Do not describe it as U.Role unless the bounded context explicitly introduces a work-facing role value and the holder, assignment, method, and work claims are current.
Anti-Patterns and Repairs
Consequences
Benefits.
- Role descriptions become short enough for practical use while preserving ontology.
- Part F naming and bridge patterns can rely on role descriptions without inheriting assignment, capability, method, work, evidence, or status claims.
- Episteme-use relations stay direct and do not become a parallel role ontology.
- Method and work checks can cite role descriptions without treating them as work evidence.
Costs.
- Former "role-or-status template" material must move to F.10, A.2.4, B.3, A.10, E.17, G.6, or direct use patterns.
- A stronger claim may require several neighboring patterns instead of one overloaded role card.
- Durable names require
F.18when the role name is public, Core-facing, or cross-context.
SoTA-Echoing and Source-Use
Current best-known pressure for this problem is not a larger universal role taxonomy. It is explicit separation of local role value, assignment, attributes or capability, permission or policy standing, performed work, and evidence or status use. RBAC, ABAC, zero-trust authorization, safety independence practice, method engineering, and FPF slot discipline all push in that direction, while F.4 keeps only the role-description episteme and hands the neighboring claims to direct patterns.
Currentness and reopen condition: reopen this pattern when A.2, A.2.1, A.2.5, A.2.7, A.15, A.6.5, C.2.1, F.9, F.10, F.18, or the accepted episteme-use and status-use discipline changes enough that role-description, holder admission, or non-role-use boundaries would be stated differently.
Relations
Builds on. A.2, A.2.1, A.6.5, A.7, C.2.1, E.10.D2, and E.24.
Coordinates with. A.2.2, A.2.5, A.2.7, A.15, A.15.1, A.15.2, F.9, F.10, F.14, F.15, F.18, evidence-use, status-use, source-use, publication-use, requirement-use, and assurance patterns.
Constrains.
F.5must name role descriptions after the describedU.Role, bounded context, and local sense are recovered.F.8must decide durable role-name minting or reuse without turning status-use or episteme-use relations into role descriptions.F.14must treat bundles and separation-of-duties as role relation structure or neighboring role-description claims, not as hybrid role descriptions.F.15must check role-description single-role and non-role-use boundaries.
Conformance Checklist
Phrasebook
Prefer:
- "role-description episteme describing
ReviewerRoleinPatternReview_2026"; - "holder admission for
ReviewerRoleis governed byA.2.1"; - "capability requirement referenced by the role description";
- "method requirement referenced by the role description";
- "review report used as evidence for the claim";
- "standard used as requirement source";
- "relation position governed by SlotSpec discipline".
Avoid as live vocabulary:
- "evidence role" for an episteme;
- "status role" for a badge or status-use relation;
- "standard role" for a standard used as source;
- "holder" for a publication, report, standard, dataset, or theorem unless a direct pattern admits an acting holon holder;
- "role" for a SlotKind;
- "role description" for a method, capability, work record, access policy, or status-use relation.
Didactic Memory
A role description is the readable episteme that tells people what a role value means in a bounded context. It helps someone assign, check, name, or compare the role. It does not assign the role, prove capability, define the method, perform the work, grant permission, carry evidence, publish itself, or turn every useful episteme into a role holder.
F.4:End
Naming Discipline for U-kind Names and RoleDescription Labels
Type: Definitional (D) Status: Stable Normativity: Normative unless marked informative
Use This When
Plain name. Meaning-first naming discipline.
Use this pattern when a project needs a durable name for either:
- a U-kind or other cross-context concept admitted through
E.24.UK, a Concept-Set row, or a direct governing pattern; or - a label used by a role-description episteme for one work-facing
U.Rolein oneU.BoundedContext.
Typical moments:
- a Concept-Set row has enough witnesses to admit a reusable FPF name, but the candidate names import one source tradition too strongly;
- a role-description episteme names a role such as
ReviewerRole,OperatorRole,InspectorRole, orTransformerRole, and the label must stay faithful to the bounded context without smuggling capability, permission, method, work, evidence, or status; - a role-like external phrase must be named for local use, but the project has not yet decided whether it is a work-facing
U.Role, a status-use relation, an access or policy term, a relation slot, or only a local phrase; - two similar names threaten to make a U-kind, a
U.Role, a status value, a method, and a work occurrence look like one object.
Primary EntityOfConcern. The EntityOfConcern is the naming discipline for these two name families. It governs the relation between a recovered meaning and its Tech and Plain labels. It does not define the named U-kind, does not define the described U.Role, does not assign a holder to a role, does not assert status, does not provide evidence, and does not make a publication form authoritative.
Primary working reader. The first reader is an engineer-manager, analyst, pattern author, or terminology steward who already has a candidate meaning and must choose a name that remains usable by readers without creating a second ontology.
First useful move. Before choosing the label, recover the named value kind and its source of meaning: E.24.UK, Concept-Set row, or direct governing pattern for a U-kind; role-description episteme, described U.Role, bounded context, and local sense for a role label. Then choose Tech and Plain labels whose morphology matches that kind and whose scope does not exceed the recovered meaning.
What goes wrong if missed. Names become arguments. A role label starts implying permission or capability. A status phrase becomes a role. A U-kind name imports one context's private ontology. A pretty global word hides that the Concept-Set witnesses do not agree. Downstream patterns then repair "semantics" that were actually broken at naming time.
What this buys. Readers can use short names without guessing the ontology. U-kind names stay neutral across their witnesses. RoleDescription labels stay local to their bounded context and point to work-facing roles. Status, evidence, access, requirement, source, publication, assurance, and gate names remain governed by their direct patterns instead of becoming "roles" by naming accident.
Not this pattern when.
- If the current problem is ordinary phrase repair rather than a durable name, use
E.10,E.10.ARCH,A.6.P, or the direct governing pattern. - If the current issue is whether a
U.*spelling or structural name should survive as a durable U-kind, useE.24.UKbefore F.5. - If the current issue is the broader local-first naming protocol, Name Cards, candidate fronts, lineage, or public naming governance, use
F.18. - If the current issue is a role-description episteme itself, use
F.4. - If the current issue is role assignment, holder, context, window, or performed-work attribution, use
A.2.1. - If the current issue is status classification, use
F.10or the direct status-use pattern. - If the current issue is evidence, source, standard, requirement, publication, assurance, gate, or decision use of an episteme, use the direct pattern for that relation.
- If "role" means a relation position, use
A.6.5SlotSpec discipline. - If cross-context sameness or translation is current, use
F.9.
Problem Frame
FPF needs names that humans can use without dragging the wrong ontology behind them. A good name is short enough to be used in documents and conversations, but it is not free-floating. It belongs to a recovered meaning.
This pattern keeps two recurrent naming families separate.
First, a U-kind or similar cross-context concept gets its name only after the value is admitted by E.24.UK, a Concept-Set row, or a direct governing pattern. The name should be neutral with respect to the witnesses and should name the least shared kind that the admission source actually admits.
Second, a role-description episteme labels one work-facing U.Role in one bounded context. The label should fit the local idiom and make the role recognizable. It should not make a holder assignment, capability, method, work occurrence, status, evidence relation, permission, publication, or relation slot look like part of the role value.
The tempting shortcut is to make "Role Description" cover both roles and statuses because both need labels. That is convenient wording, but it creates duplicate ontology. Statuses and evidence uses need names too; they do not become roles because they are named.
Problem
Without this pattern:
- Context-local terms look global. A name such as
Observation,Activity, orProcessis promoted to a U-kind name even though it carries one witness tradition's private commitments. - Role names become hidden assignments. A label such as
ReviewerRoleis treated as if someone already holds the role. - Role names become capability claims. A holder is assumed able because the role label sounds competent.
- Role names become methods. A noun label hides a method or method family.
- Status names become roles.
Approved,AccessRole,ModelFitEvidenceRole, orRequirementRolebecomes a role-name family instead of a status-use, evidence-use, access-policy, requirement-use, or source-use relation. - Relation positions become roles. Signature, relation, or argument-position names borrow role morphology and collide with
U.Role; interface wording is used only when a governing boundary or interface pattern makes that meaning current. - Names carry editions or contexts. Labels such as
Task-IEC61131orParticipant-BPMNfossilize provenance inside the label instead of using Context, SenseCell, or Concept-Set evidence. - Aliases become silent renames. Several labels circulate for one meaning without lineage or bridge discipline.
Forces
Solution
Name after meaning. For each candidate name, first recover the named value, its meaning source, and its intended use. Then choose labels that preserve that meaning.
This record is not a registry requirement. It is the smallest relation a reader should be able to reconstruct from the pattern text, a Name Card, a table row, or a role-description episteme when the name is used.
Name Families Governed Here
Tech and Plain Labels
Use two human-facing labels when the name is durable enough to be reused:
For a role-description label, the Tech label may be an agentive noun, local role term, or role phrase such as ReviewerRole, PumpInspectorRole, Participant, or Approver. The suffix Role is a disambiguator, not a universal law. Use it when it prevents confusion with a status, method, work occurrence, organization unit, publication, or access-policy term. Do not add it merely to make the name look formal.
For a coupled role-method label, recover the role expression and the method value or work value separately before naming. RoboticsEngineerRole may be a durable Tech label for a robotics-qualified engineering role value. RobotEngineeringMethod names a method or method family. The ordinary label "engineer-roboticist" can be useful when the context makes the coupled role-method meaning recoverable, but it must not replace the method record or work record.
For a U-kind, the Tech label should be neutral enough that no witness context wins by vocabulary alone. If witnesses disagree between Observation, Reading, and MeasurementResult, the admitted name may be Result, Reading, or another head only if the Concept-Set row admits it by value.
Positive Naming Rules
Use these rules when choosing or checking a name.
- Recover kind first. State whether the named value is a U-kind,
U.Role, role-description episteme, role-relation expression, method, work, status-use value, evidence-use relation, relation slot, lens description, or another named kind. - Recover meaning source. Use
E.24.UK, Concept-Set row, or a direct governing pattern for U-kind admission; role-description episteme and bounded context for role labels;A.2.7for role-relation expressions;A.3.1,A.3.2,A.15,G.5, or a direct method-composition pattern for method, method-family, method relation structure, or work names; direct governing pattern for statuses, evidence, source, requirement, publication, assurance, gate, decision, and relation slots. - Use minimal generality. The name's scope stays no wider than the admitted invariants.
- Keep context out of the label string. Context, edition, source, and witness provenance belong in Context, SenseCell, Concept-Set row, or Name Card fields, not inside the main label.
- Make morphology kind-sensitive. Agentive role names fit work-facing roles. State or level forms fit statuses. Verbal or gerund forms fit methods only when the method pattern admits them. Slot names should say
Slot,Argument,Endpoint, or another declared slot or position head when current. - Keep coupled role-method names typed. A phrase like "engineer-roboticist" may be the ordinary label for a qualified role expression; "robot engineering" may be a method or work name. Do not make one label carry holder assignment, role value, method, work, and capability at once.
- Do not encode thresholds or windows in the name. Put time, state, threshold, capability envelope, or admission window in the governing pattern.
- Use aliases only with lineage. A source term, previous term, symbol, or translation can be an alias; it does not create a second Tech label.
- Escalate when reuse becomes public or cross-context. Use
F.18,F.17, andF.9when the name crosses local use, public publication, or context boundary.
Neighboring Use Boundary
When a label contains a tempting word, recover the current claim instead of replacing words mechanically.
The name is admitted only after this recovery. A cleaner string is not a repair if it hides the same kind error.
Archetypal Grounding
Cross-Context Type Name
A Concept-Set row compares:
- SOSA
Observation; - metrology
measurement result; - ML practice
metric reading; - a dashboard value exported for subsequent comparison.
The row does not justify naming the U-kind Observation merely because one source tradition uses that word. It also does not justify DashboardValue if the dashboard is only one publication form. A name such as Reading or Result is admissible only if the row shows the shared invariant: produced value or record admitted for comparison in the declared context.
Work-Facing Role Label
In PlantMaintenance_2026, the role-description episteme describes PumpInspectorRole.
The label helps readers identify the role. It does not say Robot-7 holds the role, can inspect pumps, followed the inspection method, or produced an admissible report.
Evidence Use Is Not a Role Name
Source text may say ModelFitEvidenceRole. The repair is not to invent a prettier role name. The project first recovers the current claim: a dataset, report, or model-output episteme is being used as evidence for a target claim under a scope, polarity, relevance window, assurance use, weight model, and provenance constraints.
The durable name, if needed, is a name for that evidence-use relation or status-use value under the direct governing pattern. It is not a work-facing U.Role and not a RoleDescription label.
Relation Position Is Not a Role Name
In a relation signature, "provider role" may mean "the provider argument position". F.5 does not make ProviderRole a U.Role name. Use A.6.5 to recover ProviderSlot, its admitted ValueKind, and its reference mode. If a provider system also has a work-facing role in a method, that is a separate U.Role claim and, when assigned, a separate U.RoleAssignment claim.
Bias-Annotation
This pattern protects against four naming biases.
- Semio-bias. A name, card, table row, publication, or source label is mistaken for the named value or for authority to use it.
- Role-bias. Useful relation words such as evidence, status, access, source, requirement, or argument position are put into
Rolelanguage because role words sound familiar. - Source-vocabulary capture. One source context's term becomes the FPF Tech label without proving cross-context fit.
- Suffix formalism. Adding
Role,Status,Record,Graph, orMapmakes a label look precise while leaving the kind unresolved.
The repair is always kind recovery first, label second.
Conformance Checklist
Use this checklist on each durable name governed by F.5.
Common Anti-Patterns and How to Avoid Them
Consequences
Good consequences:
-
durable names become shorter because the ontology is carried by the right pattern, not by compound labels;
-
role-description labels stay usable without becoming assignment, capability, method, or evidence claims;
-
U-kind names become easier to bridge because their Concept-Set row is explicit;
-
E.10 repair cases that uncover durable naming issues use the direct
F.5orF.18naming discipline instead of inventing ad hoc word replacements.
Costs:
- authors must recover kind and meaning source before naming;
- some familiar source labels cannot be promoted as FPF Tech labels;
- public or cross-context names may require
F.18,F.17, andF.9even when the local name looks obvious; - source text that used
Rolefor status, evidence, access, or relation position must be repaired by ontology, not by suffix editing.
Reopen F.5 when role-description label morphology, U-kind neutrality rules, Tech and Plain label relation, alias lineage, or cross-context naming boundaries change. Reopen neighboring patterns when the dispute is about the named object itself.
Rationale
Naming is late ontology, not early decoration. FPF can tolerate many local phrases, but durable names become references used in reasoning, search, publications, and pattern relations. If a name is wrong, subsequent users inherit a false kind claim.
The key design choice is to split naming by meaning source rather than by source spelling. Role in a source phrase may refer to a work-facing role, a policy term, a status label, an evidence-use relation, a relation position, or ordinary English. F.5 does not decide by suffix. It recovers the current value and then applies naming discipline.
This also keeps F.5 smaller than F.18. F.18 governs the fuller local-first naming protocol, Name Cards, candidate fronts, lineage, and public naming. F.5 supplies the special discipline needed by U-kind names and RoleDescription labels so that Part F does not preserve role and status fusion.
SoTA-Echoing - Source-Use
Source-use boundary: external labels are evidence for local meaning or common practice, not automatic FPF Tech labels. A source term becomes the selected label only after E.24.UK, the governing Concept-Set row, role-description episteme, or direct relation pattern admits it.
Relations
Builds on. A.2, F.4, F.7, F.18, E.10, and E.10.ARCH.
Coordinates with. E.24.UK for U-kind admission and structural U.* repair; A.2.1 for role assignment; A.2.2 for capability; A.2.5 for role state; A.2.7 for role relation structure and role-algebra lens use; A.6.5 for relation-slot names; A.15 for role-method-work alignment; F.8 for mint-or-reuse; F.9 for cross-context bridges; F.10 for status mapping; F.13 for aliases and continuity; F.14 for anti-explosion; F.15 for harness checks; F.17 for public term-sheet use.
Used by. Part F unification patterns, role-description authors, Concept-Set authors, E.10 repairs that uncover naming rather than only phrase-use issues, and any FPF pattern that creates a durable local name for a U-kind or work-facing role label.
Does not replace. Direct evidence-use, status-use, requirement-use, source-use, publication-use, assurance, gate, decision, relation-signature, method, work, or architecture patterns.
F.5:End
RoleAssignment and Performed-Work Attribution Check
Type: Boundary and use pattern Status: Stable Normativity: Normative unless marked informative
Use This When
Plain name. Check who performed this work under which role assignment.
Use this pattern when deciding whether one exact dated Work individual W : U.Work was performed under one exact obtaining assignment occurrence RA : U.RoleAssignment. When it was, the direct world-side relation performedUnderAssignment(W, RA) obtains. A separate attribution assertion or record may designate W and RA and state that the relation obtains.
Typical moments include:
- a work record says "Alice reviewed", "Robot-7 inspected", or "the operations team approved", but the exact assignment episode is missing;
- a method description names a work-facing role and the project must connect performed work to the system that held that role;
- source wording says
RoleEnactment, "played the role", orHolder#Role:Context@Window, and the direct work-to-assignment relation must be recovered; - a report, standard, dashboard, access label, or other episteme is described with role language even though it did not perform the work;
- a role label is reused under another role taxonomy or reference scheme and local attribution would be unsafe without an explicit bridge.
Primary EntityOfConcern. One obtaining direct performedUnderAssignment relation occurrence between one exact U.Work occurrence and one exact U.RoleAssignment occurrence.
Primary working reader. An engineer, operator, method author, manager, or FPF author deciding whether a performed-work attribution is grounded strongly enough for the next use.
First useful move. Name the Work occurrence and the assignment occurrence that may participate in the attribution relation. Recover the assignment's holder system, role value, role-taxonomy episteme, effective reference scheme, and assignment window before deciding whether performedUnderAssignment(W, RA) obtains.
What goes wrong if missed. Assignment is treated as proof that work happened; a work log names a person but not the assignment episode; a context-like word hides the role taxonomy and interpretation scheme; or an episteme is made the performer because it described, constrained, or evidenced the work.
What this buys. Work attribution becomes a direct, inspectable relation while role state, capability, method fit, evidence, source use, result, publication, and cross-scheme correspondence remain with their own governing patterns.
Not this pattern when. Use A.2 for the role value, A.2.1 for the assignment occurrence, A.2.5 for a current role-state predicate, A.2.2 for capability, and A.15.1 for the work occurrence. Use A.10, A.15.4, E.17, or another direct pattern when the current claim is evidence use, source reliance, publication, status, gate, or decision. Use A.6.5 when "role" means a relation position rather than a work-facing U.Role.
Problem Frame
U.RoleAssignment admits assignment-relation occurrences; U.Work admits Work individuals. One exact RA : U.RoleAssignment is a world-side assignment-relation occurrence that relates an admitted holder System to one role value, one role-taxonomy episteme, and one effective reference scheme and obtains throughout one assignment episode. One exact W : U.Work is a dated world-side Work occurrence. The existence of RA and W does not by itself establish the additional world-side attribution between them: performedUnderAssignment(W, RA) must separately obtain. A distinct assertion or record may designate RA and W, state that RA obtains, state that W occurred, or state that the attribution relation obtains.
F.6 governs the missing direct relation. The assignment is one participant and the work occurrence is the other. A roster row may assert the assignment; a work log may assert the work and attribution; evidence may support either assertion. Those epistemes help a system know or use the relation, but they do not become relation participants and do not make the world-side relation obtain merely by being recorded.
This separation matters because assignment, state, ability, performance, evidence, and acceptance can vary independently. A system can hold a role and do no work. It can perform poor work under a valid assignment. A report can accurately describe the work without performing it. One compact "enactment" label hides these distinctions.
Problem
Without the direct attribution relation, recurring engineering failures appear:
- Assignment-as-work. Current role holding is treated as evidence that the assigned system performed a particular occurrence.
- Performer by label. A name such as
ReviewerorOperatoris used without the assignment episode that fixes holder, role interpretation, and time. - Assignment-episode mismatch. The assignment interval does not cover the work interval, yet attribution is accepted.
- Support-as-constitution. A log, report, standard, dashboard, or decision is treated as what makes the attribution obtain rather than as an assertion or support relation.
- Duplicate enactment ontology.
RoleEnactmentorRoleEnactmentFactbecomes a second object beside the dated work and its directperformedUnderAssignmentrelation. - Hidden locality. A generic context field replaces the role-taxonomy episteme, effective reference scheme, assignment window, or an independently selected model-use structure.
Forces
Solution
Govern performed-work attribution as one direct relation species under U.Relation.
Direct Relation Declaration
WorkOccurrenceSlot names the dated performed occurrence governed by [A.15.1](/generated/patterns/A.15.1). RoleAssignmentSlot names the obtaining assignment occurrence governed by [A.2.1](/generated/patterns/A.2.1).
For an obtaining attribution, the readable actual-performer cue is S = actualPerformerSystem(W, RA) = RA.HolderSystemSlot: S is the admitted U.System that acts, while RA is the assignment under which that action is attributed. The projection exposes the actor already carried by the assignment participant; it does not assert attribution when the relation fails to obtain and is not another relation kind or occurrence.
performedBy(W, RA) is a deprecated compatibility spelling of performedUnderAssignment(W, RA). Existing claims or records may be read through that alias only after resolving S = RA.HolderSystemSlot. New practitioner-facing claims, examples, and conformance statements MUST use S performed W under RA or performedUnderAssignment(W, RA), never wording that makes RA the performer.
No evidence, log, status, method description, result, publication, context record, or role-state assertion is a generic participant in this relation.
Obtaining and Occurrence Identity
The relation performedUnderAssignment(W, RA) obtains when:
Wis one exact datedU.Workoccurrence governed byA.15.1;RAis one obtainingU.RoleAssignmentoccurrence;- the holder system in
RA.HolderSystemSlotactually performedWunderRA.RoleValueSlot; - the assignment predicate for
RAobtains throughout the temporal extent ofW.
If the performer attribution concerns only a temporal, episode, or operational part of a larger work whole, first identify that part as the U.Work occurrence under A.15.1 and use it in WorkOccurrenceSlot. Do not hide an unidentified work portion inside the attribution relation.
When a receiving use needs an explicit relation-occurrence reference, use:
The temporal extent is inherited from WorkOccurrenceSlot. Extending an open work interval or later recording its end does not create another attribution occurrence while both participants remain the same. A separately identified work occurrence, including a separately identified work part, or a different assignment episode yields a different relation occurrence.
An evidence gap leaves a relied-on attribution assertion unresolved. It does not demonstrate that performedUnderAssignment failed to obtain. A demonstrated different performer or non-covering assignment episode can support the stronger negative claim.
Recover the Exact Assignment
Before relying on the attribution, recover the four direct participants of the exact assignment occurrence RA that fills RoleAssignmentSlot:
One assignment occurrence is the maximal continuous period during which the assignment predicate obtains for those fixed four participants. A supporting assertion or occurrence description may state assignmentInterval, including an open end, but that field is not a participant and does not establish temporal coverage. Verify coverage for performedUnderAssignment from the actual obtaining history of the exact assignment occurrence and the exact work extent.
Do not replace these participants with one Context value. If source notation contains Context, recover what that token denotes and send it to its direct pattern. It may denote an actual system or work locus, a claim scope, or an independently selected BoundedModelUseStructure; those objects have different kinds and relations. A selected model-use structure can qualify the receiving attribution assertion, but it is not an optional participant of generic U.RoleAssignment.
Attribution Check Sequence
Use this short sequence for the current attribution claim:
- Name the exact
U.Workoccurrence whose performer is being asserted. - Name or recover the exact
U.RoleAssignmentoccurrence through its four fixed participants and uninterrupted obtaining extent. - Check that the holder system named by the assignment is the system claimed to have performed the work.
- Check that the assignment episode covers the attributed work interval.
- State the direct
performedUnderAssignment(WorkOccurrenceSlot, RoleAssignmentSlot)relation, or keep the attribution assertion unresolved when support is insufficient. - Send role state, capability, method fit, evidence, source use, result, acceptance, publication, and bridge questions to their direct governing patterns.
The sequence is application guidance, not a new check record, work plan, or workflow object. Its useful result is the repaired direct relation or an explicit stop at the missing relation participant or support claim.
Direct Neighboring Relations
Source Shorthand and RoleEnactment
Holder#Role:Context@Window is readable source notation only. Before reliance-bearing use, recover the assignment's holder system, role value, role-taxonomy episteme, effective reference scheme, and assignment window. Recover the object denoted by Context separately.
When source wording says RoleEnactment or RoleEnactmentFact, recover the dated U.Work occurrence and the direct performedUnderAssignment relation. Do not retain a second enactment kind, fact object, or relation occurrence.
Lightweight Use
Ordinary use can stop at a readable assertion:
Expose the relation declaration and occurrence key only when a receiving use must distinguish attribution occurrences, cite one as a participant, compare assertions, or preserve provenance. If the assignment cannot be recovered, lower the claim to "Robot-7 is named as performer in record R" and route that reliance through [A.15.4](/generated/patterns/A.15.4) or the direct source and evidence patterns.
Invariants
- Every performed-work attribution relates one exact
U.Workoccurrence to one exactU.RoleAssignmentoccurrence. - The assignment occurrence
RAinRoleAssignmentSlotkeeps exactly four fixed participants and one maximal continuous obtaining extent; no mandatoryU.BoundedContext, generic context slot, or optional model-use participant is added. - The actual maximal continuous extent of the assignment occurrence covers the attributed portion of the work interval; a declared or recorded window alone does not establish coverage.
- Assignment does not prove performance, and performance attribution does not prove capability, state, method validity, result quality, or acceptance.
RoleEnactmentwording is repaired to dated work plus directperformedUnderAssignment; no duplicate enactment object is retained.- Assertions, logs, rosters, evidence, identifiers, and publications remain epistemic or representational objects distinct from world-side relation obtaining.
- An evidence gap yields unresolved reliance, not an inferred non-attribution interval.
- An episteme does not fill
HolderSystemSlotmerely because it describes, constrains, or supports the work claim. - Cross-scheme role correspondence uses a direct bridge relation and does not change either assignment identity.
- Reduced prose remains admissible until a receiving use needs explicit relation-occurrence identity.
Reasoning Primitives
Archetypal Grounding
Robot Inspection
The assertion interval describes the known extent of RoleAssignment-17; the direct assignment predicate must actually obtain throughout InspectionWork-17 before performedUnderAssignment obtains. The relation attributes the inspection occurrence to Robot-7 under that assignment. Sensor capability, calibration state, inspection-method adequacy, report quality, and acceptance remain separate claims.
Reviewer and Review Report
Engineer Alice is identified as the exact holder and satisfies the A.1 U.System criterion. ReviewAssignment-82 assigns her ReviewerRole under ReviewRoles-v5 and Review-Scheme-A for one uninterrupted review assignment episode. ReviewWork-82 performedUnderAssignment ReviewAssignment-82 attributes the dated work.
ReviewReport-82 is a separately identified U.Episteme. When ReviewWork-82 first constitutes that exact episteme and the inception claim matters, A.15.PROD recovers the local work/change/identity claim. A later evidence relation may use the report for a decision. The report never fills HolderSystemSlot and never becomes the attribution relation.
Standard Used During Safety Work
A safety method description cites a standard, and source prose says that the standard has a "normative role". F.6 does not create a work-facing assignment for the standard. The standard is an episteme used through the exact external-rule, source-use, specification-use, or evidence relation selected by the claim.
A safety engineer or tool system may separately hold SafetyAnalystRole and perform dated safety work. That attribution names the engineer's or tool system's assignment; it does not use the standard as performer.
Access Label and Approval Work
An access directory says Alice has DB-Admin. That entry describes an access or policy relation under its own scheme. It is not automatically a work-facing ApproverRole assignment.
If Alice performs ApprovalWork-481, recover a separate U.RoleAssignment under the role taxonomy used by the approval method and relate the work through performedUnderAssignment. The directory entry may support authorization or gate reasoning through its direct pattern; it does not substitute for the work assignment.
Bias Annotation
Conformance Checklist
WorkOccurrenceSlotnames one admitted datedU.Workoccurrence.RoleAssignmentSlotnames one obtainingU.RoleAssignmentoccurrence.- The assignment exposes holder system, role value, role-taxonomy episteme, and effective reference scheme as participants; its maximal continuous assignment extent is checked separately.
- The assignment holder is the system claimed to have performed the work.
- The assignment episode covers the selected work occurrence's interval; attribution to only one part first selects that part as
U.Work. - The attribution uses direct
performedUnderAssignmentwording and introduces noRoleEnactmentFact. - Role state, capability, method, result, evidence, source reliance, publication, gate, and decision claims use their direct patterns.
- Any selected model-use structure is designated by the receiving attribution assertion or use, not by an optional slot in generic
U.RoleAssignment. - Missing evidence leaves the relied-on assertion unresolved rather than proving non-attribution.
- Compact source notation is unfolded before a receiving use depends on hidden assignment positions.
Common Anti-Patterns and Repairs
Consequences
Benefits. Assignment and performed work remain independently identifiable, while attribution becomes a direct relation that can be cited, compared, supported, corrected, or left unresolved. The pattern works for people, organizations, machines, and software systems because the holder is always an admitted U.System, not a domain-specific performer category.
Costs. Reliance-bearing use must recover the exact assignment episode rather than stopping at a familiar role label. A compact source sentence may split into an assignment assertion, a work occurrence, the direct attribution relation, an exact change or production claim, an operation-result binding or result episteme, and any evidence relation current for the use.
Limits. F.6 does not determine capability, readiness, method validity, work success, result acceptance, authorization, or evidence sufficiency. It only governs the relation by which one performed work occurrence is attributed to one role assignment.
Rationale
The direct relation is needed because U.RoleAssignment and U.Work admit different kinds of world-side occurrence. One obtaining assignment occurrence RA relates its holder System to a role value under one interpretation and throughout one episode; one Work individual W : U.Work is the dated Work occurrence. performedUnderAssignment(W, RA) either obtains or does not obtain as the additional world-side attribution between them. A distinct assertion or record may designate RA and W, state that RA obtains, state that W occurred, or state that the attribution relation obtains.
Making a log, status, decision, or evidence item a relation participant would confuse world-side attribution with knowledge of attribution. Creating RoleEnactmentFact would duplicate the same pair under a second identity. The two-participant relation preserves realism and keeps correction local: changing an evidence use does not rewrite work or assignment; discovering a different performer changes the attribution assertion and, when demonstrated, the selected relation occurrence.
SoTA-Echoing and Source Use
These lines discipline the examples rather than supply a foreign ontology. FPF takes the useful separation pressure and retains its own constructive relation, work, role-assignment, episteme, and evidence distinctions.
Relations
Builds on: A.6.REL for relation obtaining and occurrence identity; A.2 for U.Role; A.2.1 for U.RoleAssignment; and A.15.1 for dated U.Work.
Uses when current: A.2.5 for role state; A.2.2 for capability; A.3.1, A.3.2, and A.15 for method and work alignment; A.10 for evidence; A.15.4 for reliance on encountered project material; F.9 for cross-scheme correspondence; and A.1.1 only when an independently selected model-use structure changes assignment interpretation.
Coordinates with: F.4 for role-description epistemes; F.5 and F.18 for durable names; E.17 for publication; and E.10 for source-word precision repair.
Completion Conditions
F.6 use is complete when the reader has either:
- one direct
performedUnderAssignmentrelation between an exact work occurrence and an exact assignment occurrence; - an unresolved attribution assertion with the missing assignment, interval, or support relation named;
- or a corrected exit to the direct pattern because the encountered claim concerns assignment, state, capability, method, evidence, source reliance, result, publication, gate, or decision rather than performed-work attribution.
F.6:End
Concept‑Set Table
“Show one thing across Contexts—only where explicit bridges allow it.”
Status. Architectural pattern.
Depends on. E.10.D1 Lexical Discipline for ‘Context’ (Context ≡ U.BoundedContext); F.0.1 senseFamily (normative); F.1 Domain‑Family Landscape Survey; F.2 Term Harvesting; F.3 Intra‑Context Sense Clustering (SenseCells); F.5 Naming Discipline; F.9 Alignment & Bridge Across Contexts.
Coordinates with. F.4 Role Description; F.6 Role Assignment & Enactment Cycle (Six-Step); Part C patterns (for examples), MM‑CHR (for Characteristic); A.6.9 (RPR‑XCTX for repairing umbrella cross‑Context sameness/alignment prose before it justifies rows).
Aliases (informative). Concept‑Set table, comparison grid.
Intent & applicability
Intent. Provide a single, didactic page where each row presents one Concept‑Set—a set of SenseCells from different Contexts that we are licensed (by explicit Bridges) to treat as “the same for a stated scope”. Columns are Contexts; cells carry local labels. The table does not invent equivalences: it summarises already declared F.9 Bridges, exposing scope, losses, and counter‑examples at a glance.
Applicability. Use whenever cross-context reading is necessary (naming admitted U-kinds, roles, methods, characteristic terms, teaching contrasts, assignment/enactment-adjacent terminology). It is a reading lens, not a data model: notation-free, governance-free, Context-loyal.
Non‑goals. No hidden merges. No “global terms”. No workflows or tool schemas. The table is a conceptual display of licensed sameness and honest non‑sameness.
Problem frame
Without a disciplined Cross‑context view:
- Silent equivalence. Readers assume sameness by name alone (e.g., process).
- Loss denial. Mappings hide what is dropped (DesignRunTag, units, agency).
- Name inflation. Convenience root kind labels are coined to avoid facing heterogeneity.
- Cognitive scatter. Concepts drift across documents without one compact, teachable “where‑what‑how‑same” view.
Forces
Core idea (didactic)
A Concept‑Set is a finite set of addresses
$$ \text{CS}={\langle \text{Context}_i,\ \text{SenseCell}i\rangle}{i=1..n} $$
that FPF treats as one for a declared scope because there exist F.9 Bridges connecting these SenseCells pairwise (directly or via a short chain) with congruence level $\text{CL}$ above a threshold suitable for that scope. The table row shows:
- FPF Label (Tech/Plain) — the didactic, FPF‑level name chosen per F.5.
- Row Scope — where “being one” is safe (e.g., Naming-only, assignment/enactment-eligibility, KD-CAL metric, Type‑structure).
- Row CL(min) — the minimum CL of the Bridges that justify the row.
- Context columns — each cell: the local label + (optional) short cue.
- Rationale (one line) — why sameness is warranted for this scope.
- Counter‑examples (one line) — where/why sameness breaks.
Memory hook. A Concept‑Set row is a promise: “You may read across these Contexts this far—and no farther.”
Minimal vocabulary (this pattern only)
- Context — shorthand for
U.BoundedContext(per E.10.D1). - senseFamily — referenced from F.0.1; not redefined here; used to type rows and to require uniformity within a row.
- SenseCell — a (Context × Local‑Sense) address from F.3.
- Bridge (F.9) — an explicit, declarative Cross‑context mapping with a congruence level CL and loss note.
- Characteristic (MM‑CHR) — measurable comparandum defined in MM‑CHR; may be referenced in Measurement/KD‑metric rows; do not use “axis” only as a euphemism.
- Concept‑Set (row) — a licensed sameness across Contexts, bounded by Row Scope and Row CL(min).
- Contrast row — a non‑sameness row: same surface across Contexts with no sufficient Bridges; teaches difference, not unity.
The table (conceptual layout)
One page. Fixed column order by Context. Each row fits in five lines max.
Reading rules (didactic):
- Cells are local. A cell is not a translation; it is the Context’s own label for its SenseCell.
- Scope is king. The FPF label only licenses sameness within its Row Scope. Outside that scope, treat cells as different.
- Row CL(min) governs trust. Lower CL ⇒ narrower applicability; never up‑scope a row without revisiting Bridges.
- Rationale & counter‑examples are obligatory one‑liners; if you need paragraphs, you need an F.9 walkthrough, not a row.
Didactic name rationale “Giants' table’” that alludes to standing on the shoulders of giants: each row explicitly leans on authoritative context of meaning (U.BoundedContext) established by prior disciplines and not imagined. It does not mean a physically large table; the name signals epistemic humility and traceable reliance on those sources. "We are like dwarfs on the shoulders of giants, so that we can see more than they, and things at a greater distance, not by virtue of any sharpness of sight on our part, or any physical distinction, but because we are carried high and raised up by their giant size." by Bernard of Chartres , d. c.1130, French philosopher.
Conceptual construction (thought moves, not workflow)
The table is derived from earlier patterns; it creates nothing new.
- Sourcing. Candidate cells come only from SenseCells (F.3).
- Licensing. A row exists iff the relevant Bridges (F.9) already justify sameness at the chosen Row Scope.
- Bounding. Prefer 2–4 Contexts per row (parsimony); add more only if each adds a distinct necessity for the sameness claim.
- Typing. A row is typed by senseFamily: Role, Status, Type‑structure, Measurement, etc. Do not mix senseFamilies in one row.
- Temporal honesty. A row’s cells must share compatible DesignRunTag; if not, either split into two rows or mark a contrast row.
Invariants (normative)
- Context‑loyal cells. Every non‑empty cell is a SenseCell address; no minted paraphrases.
- Bridge sufficiency. For a Concept‑Set row, every pair of filled cells is connected by an F.9 Bridge path whose bottleneck CL ≥ Row CL(min) printed for the row.
- Scope declaration. Each row MUST declare a Row Scope chosen from a small controlled set (e.g., Naming-only, assignment/enactment-eligibility, KD-metric, Type-structure).
- senseFamily uniformity. All cells in a row belong to the same senseFamily (Role or Status or Type-structure or Measurement…).
- Temporal compatibility. Either all cells share the same stance, or the row is a contrast row (no sameness claim).
- Loss disclosure. If any Bridge in the row has a loss note, the row MUST include a counter‑example that illustrates that loss in one line.
- No stealth expansion. Adding a new cell to a row MUST NOT lower the printed Row CL(min) without updating Row Scope or splitting the row.
- Parsimony. A row with only one filled cell is forbidden (that would be local talk, not a Cross‑context concept).
- Didactic bound. A row that cannot be read in ≤ 30 seconds violates didactic primacy and must be split.
Micro‑illustrations (safe patterns)
Illustrative only; these presume corresponding F.9 Bridges exist with stated CL and losses.
(a) Subtyping across type‑formalisms (Type‑structure row)
(b) “Observation result value” (Measurement row)
(c) Contrast row: “process” (no sameness)
Anti‑patterns & remedies
Worked examples
Each example gives a row (compact), then a reading explaining scope and limits. All sameness claims presuppose suitable F.9 Bridges with the stated CL.
Behavioural actor across Contexts (naming‑only)
Reading. The row licenses a glossary‑level sameness for didactic prose (“the actor”). It does not license modelling identity or inference across Contexts.
Execution occurrence (assignment/enactment-eligibility)
Reading. Safe to use as the run-time occurrence referenced by performed-work attribution when we say “this Work was performed under an assignment”. Not safe to equate all PROV Activities with all PLC task runs for analytics.
Result value as KD‑metric (measurement)
Reading. Licences metric tables that join observations to service targets; warns that composite KPIs may violate unit fidelity.
Subtype relation (type‑structure)
Contrast: “role” (access vs behaviour)
Reading. This row teaches difference; it deliberately does not license sameness.
Reasoning primitives (judgement schemas, notation‑free)
All judgements are pure (no side effects). “Contexts” are
U.BoundedContext.SC(C)denotes a SenseCell in ContextC.CL(X↔Y)is the congruence level of the best Bridge path (F.9) between SenseCellsXandY(bottleneck along that path).
Row licensing
Form.
S = {SC(C₁), …, SC(Cₙ)}, Scope = s, τ(s) = requiredCL ⊢ licensable(S,s) ⇔ (∀ i<j: CL(SC(Cᵢ)↔SC(Cⱼ)) ≥ requiredCL ∧ senseFamily (S) is uniform ∧ stance(S) compatible)
Reading. A set of cells licenses a row of scope s iff every pair is bridged at or above the required CL for that scope, all cells sit in the same senseFamily, and DesignRunTag is compatible.
Bottleneck CL for a row
Form.
RowCL(S) = min_{i<j} CL(SC(Cᵢ)↔SC(Cⱼ))
Reading. The row’s CL is the minimum congruence level across all pairs (the weakest link).
Scope guard
Form.
licensable(S,s) ∧ s ⊑ s' ⊢ licensable(S,s') only if RowCL(S) ≥ τ(s')
Reading. You may tighten scope (use the row for a higher-scope purpose) only if the row’s CL meets the higher threshold for that scope.
Contrast decision
Form.
(∃ i<j: CL(SC(Cᵢ)↔SC(Cⱼ)) < τ(Naming‑only)) ⊢ publish‑contrast(S)
Reading. If even Naming‑only cannot be licensed, publish a contrast row instead of forcing sameness.
Row extension guard
Form.
licensable(S,s) ∧ add SC(Cₖ) ⊢ licensable(S∪{SC(Cₖ)}, s) iff ∀ i: CL(SC(Cᵢ)↔SC(Cₖ)) ≥ τ(s)
Reading. You may add a new cell only if it bridges to every existing cell at the row’s scope.
Loss disclosure obligation
Form.
licensable(S,s) ∧ (∃ i<j: lossNote on Bridge(SC(Cᵢ),SC(Cⱼ))) ⊢ row must carry ≥1 counter‑example
Reading. Any loss note on any supporting Bridge obliges the row to include a counter‑example one‑liner.
Relations (with other patterns)
Builds on: F.1 Contexts fixed → defines the column set; F.2 Harvest → supplies harvested terms; F.3 SenseCells → provide cell addresses; F.5 Naming Discipline → provides the two‑register FPF labels; F.9 Bridges → justify each row.
Constrains: F.4 Role Description — when a template cites an FPF label from the table, it inherits the Row Scope; no template may claim semantics beyond the row’s licence. F.6 Role Assignment & Enactment Cycle (Six-Step) — Move M‑4 (“choose label”) must reference a row if it wants Cross‑context reading.
Used by. Part C patterns for didactic alignment pages; Part B trust calculus (B.3) may consume Row CL(min) when computing translation penalties.
Migration notes (conceptual)
- Bridge update. If any supporting Bridge’s CL changes, recompute Row CL(min). If it drops below the printed value, either lower Row Scope, split the row, or retire it.
- New Context appears. Do not auto‑expand rows. Test with 12.5; add only if it brings a distinct necessity.
- Sense revision inside a Context. If a SenseCell splits (F.3), decide which child cell (if any) remains in the row; the rest may require new rows or a contrast.
- Scope promotion. To use a row for a higher-scope purpose (e.g., from Naming-only to assignment/enactment-eligibility), first ensure Row CL(min) ≥ τ(new scope); otherwise construct new Bridges or decline promotion.
- Deprecation. If a row no longer meets its invariant, mark its FPF label as retired in F.5 and point to successor rows (if any).
- Edition churn. When a Context is superseded (F.1), either keep the cell (if semantics stable) or treat the successor as a new Context and re‑evaluate licensability.
Acceptance tests (SCR/RSCR — concept‑level)
Static conformance checks (SCR)
- SCR‑F7‑S01 (Context‑loyal cells). Every non‑empty cell references an existing SenseCell (F.3) in a declared Context (F.1).
- SCR‑F7‑S02 (Closure & bottleneck). For each Concept‑Set row, every pair of cells has a Bridge path with CL ≥ Row CL(min) printed; Row CL(min) equals the minimum pairwise CL.
- SCR‑F7‑S03 (Typed & scoped). Each row declares a Row Scope from the controlled set and is senseFamily‑uniform (Role or Status or Measurement or Type‑structure…).
- SCR‑F7‑S04 (Temporal compatibility). Non‑contrast rows have compatible DesignRunTag across cells.
- SCR‑F7‑S05 (Loss disclosure). If any supporting Bridge has a recorded loss, the row includes ≥1 counter‑example line.
- SCR‑F7‑S06 (Parsimony). Rows contain 2–4 Contexts unless a one‑line necessity is stated for each extra Context.
Regression checks (RSCR)
- RSCR‑F7‑E01 (Bridge drift). After any Bridge change (F.9), recompute Row CL(min); flag rows whose scope is now overstated.
- RSCR‑F7‑E02 (Sense split). After a SenseCell splits (F.3), ensure rows referencing it either pick a child cell or retire.
- RSCR‑F7‑E03 (Scope integrity). No consumer pattern uses a row outside its declared Row Scope.
- RSCR‑F7‑E04 (No stealth growth). Additions of cells never lower Row CL(min) silently; if they do, either split the row or reduce scope.
Didactic distillation (60‑second teaching script)
“A Concept-Set row shows one idea across Contexts—but only where explicit Bridges license it. Columns are Contexts; cells are their own labels. The row prints a scope (‘Naming-only’, ‘assignment/enactment-eligibility’, ‘Type-structure’, ‘KD-metric’) and the weakest CL that justifies reading across. A one‑line rationale says why sameness is safe here; a counter‑example warns where it breaks. Keep rows small (2–4 Contexts), typed (don’t mix senseFamilies), and temporally honest (design vs run stance). If Bridges don’t suffice, publish a contrast row instead. The table doesn’t invent meaning; it summarises licensed sameness so readers can cross disciplines without smuggling assumptions.”
F.7:End
Mint-or-Reuse Decision
Type: Architectural pattern Status: Stable Normativity: Normative unless marked informative
Use This When
Plain name. Name admission decision.
Use this pattern when a project has a candidate expression and must decide whether it should stay local, reuse an existing name, become an alias, reuse a Concept-Set row, name a role-description episteme, introduce a new Concept-Set row, introduce a policy id, or become a rare U-kind candidate.
Typical moments:
- a role-like expression such as
ReviewerRole,AccessRole,EvidenceRole,RequirementRole,ProviderRole, or "actor" appears and the project must decide whether it names a work-facingU.Role, a status-use relation, an evidence-use relation, an access or policy term, a relation position, or only a local phrase; - a source tradition uses a convenient name, but the name would import one context's ontology if promoted as an FPF name;
- a Concept-Set row seems reusable, but its scope may be only naming, not substitution, role assignment, measurement, or structural inference;
- a project wants a new U-kind, policy id, role-description label, or public term because no existing name feels comfortable;
- an
E.10repair discovers that a smoother word would still hide the current kind or relation.
Primary EntityOfConcern. The EntityOfConcern is one mint-or-reuse decision for one candidate expression or proposed durable name. The pattern governs the decision relation. It does not define the named U-kind, does not describe the U.Role, does not assign a holder, does not assert status, does not provide evidence, and does not make a publication authoritative.
Primary working reader. The first reader is an engineer-manager, analyst, method author, pattern author, or terminology steward deciding whether a candidate expression deserves durable FPF treatment.
First useful move. Recover what the candidate expression is trying to name in the current bounded context. Then choose the smallest admissible decision: local phrase, alias, local name reuse, Concept-Set row reuse, RoleDescription label, direct-pattern name, policy id, new row, or rare U-kind candidate.
What goes wrong if missed. A convenient label becomes a new ontology. A source word becomes global. A status, evidence, access, requirement, source, publication, or relation-position use gets named as a role. A Concept-Set row is used beyond the scope admitted by its bridge evidence. FPF then accumulates duplicate kinds where it needed a smaller decision.
What this buys. Teams can reuse names without growing FPF by accident. Durable names become harder to mint, but easier to trust. Role expressions become work-facing role names only when the role ontology is actually current; other expressions go to their direct patterns before any durable naming.
Not this pattern when.
- If the issue is ordinary phrase repair with no durable name, use
E.10,E.10.ARCH,A.6.P, or the direct governing pattern. - If the issue is choosing a good label after the mint-or-reuse decision is already made, use
F.5for the local name family andF.18for the fuller public naming protocol. - If the issue is describing one work-facing role, use
F.4. - If the issue is assigning a holder to a role or attributing performed work, use
A.2.1,F.6, andA.15.1. - If the issue is cross-context sameness, use
F.9andF.7. - If the issue is status, evidence, source, standard, requirement, publication, assurance, gate, or decision use, use the direct pattern before naming.
Problem Frame
Name pressure is often a sign of unresolved ontology. A project wants one short expression, but the expression may stand for several different values: a local sense, a reusable row, a role-description label, a status value, a method name, a work occurrence label, a policy id, or a new U-kind candidate.
The dangerous shortcut is to decide by word form. If the word contains Role, it is treated as a role. If the word appears in two contexts, it is treated as the same concept. If a source standard uses the name, the name is promoted. If the expression is short and readable, it becomes public vocabulary.
F.8 delays naming until the current kind and use are recovered. It is the gate between local expression and durable name, not the naming style guide itself.
Problem
Without this pattern:
- Local phrases become durable names. A temporary phrase outlives its context and looks like FPF vocabulary.
- Source names capture FPF. One tradition's word becomes the selected FPF name before cross-context fit is shown.
- Role expressions become role ontology.
EvidenceRole,RequirementRole,AccessRole, orProviderRoleis promoted without checking whether a work-facingU.Roleexists. - Role names hide assignments. A RoleDescription label is treated as if a holder already has the role.
- Concept-Set rows overreach. A row admitted for naming is reused for assignment, measurement, or structural inference.
- Aliases change meaning. A prettier label is introduced but silently changes kind, scope, or use.
- Kernel inflation follows comfort. A new U-kind is proposed because existing names feel awkward.
- Policy ids appear as strings. A policy identifier is reused or introduced without a resolvable policy specification and decision trace.
Forces
Solution
Treat mint-or-reuse as a typed decision over a recovered candidate, not as a vote on wording. Use this compact relation:
DecisionKindSlot is a local field for the result of this pattern. It does not create a new U.* kind.
Admissible decision kinds:
localPhraseOnly;reuseLocalSenseLabel;aliasOnly;reuseConceptSetRow;nameRoleDescription;nameDirectPatternValue;introducePolicyId;proposeConceptSetRow;proposeUKindCandidate;blockOrLowerUse.
Decision Targets
Decision Sequence
Use this order. Stop at the first result that fits the recovered kind and use.
- Recover the current claim. Name the bounded context, local sense if known, and the kind or relation being claimed.
- Split mixed candidates. If one expression covers role, status, evidence, work, method, measurement, or structure at once, split it before deciding.
- Check local reuse. If one bounded context already has the needed local sense, reuse its label inside that context.
- Check role expression. If the candidate describes one work-facing
U.Role, useF.4andF.5. If it asserts assignment or performed work, useA.2.1,F.6, orA.15.1. If it is evidence, status, access, requirement, source, publication, assurance, gate, decision, or relation-position use, use the direct pattern. - Check cross-context reuse. If more than one context is current, use
F.9bridge discipline andF.7Concept-Set row discipline. Reuse a row only for the row's admitted use. - Check alias. If the meaning is the same and only wording changes, use alias discipline. Do not let an alias change kind or scope.
- Check policy id. If the candidate is a policy identifier, require
PolicyIdRefdiscipline inF.8:8.1. - Propose new row. If the need recurs across contexts and bridges admit the intended use but no row exists, propose a small Concept-Set row.
- Propose new U-kind only rarely. Use this only when the candidate is cross-family, irreducible to existing FPF values, governed by
E.24.UK, and then accepted under the relevant A.8, A.11, C.3, E.9, and F.18 law. - Block or lower. If none of the above is true, keep the expression local, quote it as source wording, or lower the claim.
Role Expression Boundary
A role expression becomes a durable role name only when it names one work-facing U.Role or the role-description episteme for that role in one bounded context.
Row Scope Consumption
F.8 consumes row scope; it does not define bridge strength. F.9 declares bridges and F.7 declares Concept-Set rows. F.8 asks whether the row's declared use is enough for the proposed name.
If the row does not admit the intended use, lower the name's use or open the direct bridge or row repair. Do not strengthen a name because the wording is attractive.
Invariants
- Kind before name. The candidate's recovered kind or relation comes before the label decision.
- One decision, one current use. Mixed uses are split into separate decisions.
- Local before cross-context. Reuse local sense labels before proposing cross-context rows or new U-kinds.
- Aliases are meaning-preserving. An alias cannot change kind, scope, use, or authority.
- Role names are work-facing. A role name or RoleDescription label must point to a work-facing
U.Role; status, evidence, access, source, publication, requirement, assurance, gate, decision, and relation-position uses are direct-pattern names. - Role assignment is not naming. A name does not assign a holder and does not show that work was performed.
- Rows do not exceed their admitted use. F.8 may reuse a row only at the use declared by
F.7and admitted byF.9. - New U-kind candidates are rare. Cross-family recurrence, irreducibility,
E.24.UKadmission, and accepted decision basis are necessary. - Policy ids are resolvable. A policy id needs a policy specification reference and, when introduced, a mint decision reference.
- Source labels are not semantic authority. A source term can be evidence for a local sense or alias, not automatic FPF vocabulary.
Reasoning Primitives
Archetypal Grounding - worked cases
Reviewer Role vs Review Report
The expression ReviewerRole in PatternReview_2026 names a work-facing role value. F.8 admits nameRoleDescription: use F.4 for the role-description episteme and F.5 or F.18 for the label.
The expression "review report has reviewer role" is different. The report is an episteme. It may be used as evidence or source for an adequacy claim about the reviewed pattern; it does not hold the work-facing role. F.8 does not mint a role name for the report. The evidence-use, source-use, or publication-use claim remains governed by its direct pattern.
Actor Across BPMN and PROV
A manager wants one word, "actor", for BPMN participant and PROV agent in a diagram. F.8 asks for the intended use. If the Bridge Card and Concept-Set row admit only naming use, the result is reuseConceptSetRow for prose and diagram labels only.
No role assignment follows. If the project subsequently needs a work-facing role in one context, it creates or reuses the local role-description episteme for that context.
Access Role
An access-control source says ApproverRole. In that source, the expression may name a permission grouping. F.8 first recovers the access or policy relation. Only if the project also defines a work-facing U.Role for approval work in a bounded context does a RoleDescription label become current.
Otherwise the durable name, if needed, belongs to the access, policy, status, or gate pattern, not to role ontology.
Policy Id
A gate profile introduces Aut-Guard-2026. F.8 treats this as a policy-id decision. Reuse requires a resolvable PolicySpecRef. New introduction also needs a MintDecisionRef or equivalent accepted decision record.
The policy id is not a role, method, gate result, evidence value, or source authority by itself. It is a reference to a policy specification used by the pattern that governs the policy claim.
New U-kind Candidate
A team proposes U.InfluenceEdge because many documents use "influence". F.8 blocks immediate minting. The team must show the candidate is not an existing relation, causal claim, evidence relation, characteristic, method relation, bridge relation, structural name, publication form, or local frame under current patterns. If it is still cross-family, irreducible, and needed by several domain families, the proposal goes to E.24.UK, A.8, A.11, C.3, E.9, and F.18.
Filled Decision Records
Bias-Annotation
F.8 blocks minting-bias: the existence of a convenient candidate expression, suffix, title, source term, or memorable public phrase does not prove that FPF needs a new name, row, policy id, or U-kind. The decision starts from the recovered governed object, admissible use, bounded context, and direct pattern. Naming is allowed only after the smallest adequate decision target is found.
Policy-Id Mint-or-Reuse Discipline
FPF treats policy ids such as Phi(CL), Phi_plane, Psi(CL^k), Aut-Guard, EmitterPolicyRef, insertion-policy ids, and acceptance-clause ids as versioned identifiers whose meaning must be recoverable. They are not "just strings", role names, or gate decisions.
PolicySpecRef is a resolvable reference to the policy definition. It identifies the policy id, pins an edition or equivalent digest when needed, and can be found from the same publication family or cited source relation.
MintDecisionRef is a resolvable reference to the decision that introduced the policy id in the declared namespace. For FPF normative policy ids this is usually an accepted [E.9](/generated/patterns/E.9) decision record. For local non-exported policy ids, the governing gate, decision, or publication pattern may admit a smaller decision record when the local scope is explicit.
Rules:
- No silent policy-id introduction. A newly introduced policy id carries both
PolicySpecRefandMintDecisionRef. - Reuse is reference use. Reusing an existing policy id cites
PolicySpecRef; it does not restate policy semantics as if a new policy had been introduced. - Gate checkability. A gate, crossing, bridge, assurance, or publication claim that depends on policy ids includes
PolicyIdRefor an equivalent resolvable structure admitted by its governing pattern. - Policy authority stays with the governing pattern. F.8 decides introduction or reuse of the identifier; it does not decide whether the policy permits work, passes a gate, or gives evidence.
Conformance Checklist
Common Anti-Patterns and How to Avoid Them
Consequences
Good consequences:
- durable vocabulary grows more slowly and with clearer justification;
- role, status, evidence, access, source, requirement, publication, and slot-position cases stop forming duplicate role ontology;
- Concept-Set rows keep their declared scope;
- F.5 and F.18 are used with better naming inputs because mint-or-reuse has already settled the decision kind;
- policy identifiers become checkable references instead of decorative strings.
Costs:
- authors must do kind recovery before naming;
- some attractive names remain local phrases or aliases;
- public and cross-context names may require bridge, row, naming, and decision records;
- a new U-kind becomes harder to justify because minting now waits for
E.24.UKand the relevant admission law rather than naming comfort.
Reopen F.8 when E.24.UK, A.2, A.2.1, F.4, F.5, F.6, F.7, F.9, F.18, A.6.5, E.10, E.9, A.8, A.11, or policy-id publication discipline changes enough that the decision kinds or boundaries would change.
Rationale
F.8 is placed before naming style because a naming mistake is often a kind mistake. A project should not ask "what name should we use?" until it has asked "what kind of value or relation is this, and does it deserve durable naming?"
The pattern is intentionally narrower than F.18. F.18 can run a full candidate search, Name Card, public term sheet, lineage, and bridge-facing naming protocol. F.8 supplies the prior admission decision: should this expression become a durable name at all, and if so, under which direct governing pattern?
The strict role decision is central. A role expression names a work-facing role only when U.Role is recovered. Epistemes, publications, standards, requirements, evidence, statuses, permissions, gates, decisions, methods, work, and relation positions may need names, but they do not become roles because a source phrase used "role".
SoTA-Echoing - Source-Use
Source-use boundary: a source tradition may supply candidate words and current practice pressure. It does not select the FPF decision kind. The decision kind follows the recovered value or relation and the direct governing pattern.
Relations
Builds on. A.7, E.24.UK, A.8, A.11, E.10, E.10.ARCH, F.1, F.2, F.3, F.5, F.7, F.9, and F.18.
Coordinates with. A.2, A.2.1, A.2.5, A.2.7, A.6.5, A.15, A.15.1, F.4, F.6, F.10, F.13, F.14, F.15, F.17, C.3, E.9, E.24.CD, E.24.PUB, and direct status-use, evidence-use, source-use, publication-use, requirement-use, assurance, gate, decision, method, work, characteristic, and architecture patterns.
Constrains.
F.5names only after F.8 has decided what kind of naming case is current.F.4governs only work-facing role-description naming cases.F.9andF.7govern cross-context row admission before F.8 reuses the row label.F.18expands durable public naming after F.8 has admitted the name decision.F.14andF.15use F.8 to avoid role, status, row, and alias explosion.
Does not replace. Direct governing patterns for the named value, role assignment, performed work, status, evidence, source, publication, requirement, assurance, gate, decision, method, work, relation-slot, characteristic, architecture, or mathematical-lens claims.
Didactic Memory
Do not ask for a better name first. Ask what the expression is trying to name, whether that value already exists locally, whether any cross-context row admits the intended use, and whether the expression is really a role, status, evidence, policy, source, slot, method, work, or kind case. Mint only after reuse, alias, direct-pattern naming, and row options have failed.
F.8:End
Alignment and Bridge across Contexts
Type: Pattern Status: Stable
"Translate across contexts; never collapse them."
Type: Architectural pattern.
Status: Stable.
Normativity: Normative.
Builds on: F.17 for exact scheme-based SchemeSenseCell identity and SenseCellAddressRef; F.18 for designation selection; C.2.1 for assertion and description-episteme identity; F.0.1 for senseFamily and bridge-only crossing discipline; F.7 and F.8 for downstream naming and reuse decisions.
Coordinates with: A.10 for evidence-provenance relations and local reliance dispositions; B.3 for assurance claims and minimum assurance records; A.2, A.2.1, F.4, F.5, F.6, and A.15.1 for work-facing role and performed-work claims; A.6.5 for relation-slot discipline; C.29 for mathematical-lens use; A.6.3.CSC for controlled coarsening; C.26.1 and C.26.2 for quantum-like export boundaries.
Plain entry cues (informative). Context-to-context translator; sense bridge.
Intent and applicability
Intent. Govern one actual semantic Bridge relation between two exact F.17 SchemeSenseCell values from different semantic contexts. Keep that relation separate from a claim that it suits a proposed use, the evidence or assurance on which a reader relies, an optional Bridge Card, and any object created when the proposed use is actually performed.
Applicability. Use this pattern when an author needs to compare local senses across contexts, reuse a familiar label, connect design-time and run-time senses, compare two standards' terms, or justify a cross-context row. A shared word or available mapping is only a reason to ask whether a Bridge obtains.
Primary EntityOfConcern in plain terms. One actual correspondence or difference between two exact local senses. The governed object is the direct Bridge occurrence, not a card, context, transport chain, work process, role assignment, evidence item, or global meaning layer.
Admissible move in plain terms. First resolve the two local senses. Then state what semantic correspondence or difference holds between them and test that relation. If it obtains, identify the Bridge. Only after that, state the proposed use separately: what the reader will do, in which direction, by which correspondence rule, and how much semantic loss that use tolerates. A current affirmative C.2.1 claim answers whether this Bridge is suitable for that bounded use. Check the evidence for relying on that claim under A.10, or use B.3 when an assurance claim is made or its material-reliance threshold is met. If the use actually happened, recover the resulting Work, assertion, publication, relation, operation application, or other object under its direct owner. Add a Bridge Card only when a reusable package is worth maintaining.
Primary working reader. An author, checker, or practitioner deciding first whether a cross-local semantic relation actually obtains and then whether it supports one named use.
Use this when. Use F.9 when a receiving claim needs an exact semantic relation between two local senses whose <ReferenceScheme, LocalSenseClaim> interpretation bases differ. Different schemes, identical spelling, a mapping implementation, or a request for comparison does not establish that relation.
What goes wrong if missed. Teams turn shared labels and convenient mappings into silent equivalence, substitution, structural inference, status transfer, or role assignment. They also mistake evidence about a proposed use, or a polished card, for the relation itself.
What this buys. A reader can see which relation is true, which proposed use is being judged, what evidence supports reliance on that judgement, and whether any downstream act actually happened. Those facts can change independently without silently merging local meanings.
Not this pattern when. Not F.9 when the case is still inside one semantic context, or when the live question is role assignment, performed-work attribution, evidence use, status use, source use, publication, assurance, authorization, a gate, a decision, or a mathematical-lens operation. Use the direct governing pattern for that object; cite F.9 only when cross-context semantic correspondence is also needed.
Recognition versus assurance note. Resolving the endpoint senses and testing the direct Bridge predicate recognizes the semantic relation. A separate C.2.1 claim judges one bounded use. A.10 or B.3 governs whether a reader may rely on that claim for the named use. None of those steps supplies legal, policy, or deontic authorization.
Problem frame
Cross-context work fails in predictable ways:
- String-equals fallacy. Identical spellings such as "process", "role", "accuracy", or "ready" are taken as identical meaning.
- Relation-to-use jump. A true semantic correspondence is treated as sufficient for whatever comparison, substitution, translation, or publication is wanted next.
- Design-run jumping. Design artefacts are substituted for run-time occurrences, or run-time occurrences are treated as design definitions.
- Direction amnesia. A symmetric relation is read as two use licences, or narrower and broader senses are used in the unsafe direction.
- Loss blindness. The proposed use does not name which differences it tolerates.
- Evidence and permission collapse. A score, card, or assurance record is treated as the semantic relation, authorization, or proof that the use occurred.
F.9 answers these failures by separating the direct relation, the bounded-use proposition, reliance on that proposition, optional packaging, authorization, and any actual receiving object.
Problem
A shared label across contexts can look like identity or permission before any semantic relation is tested. Even after a Bridge obtains, its truth does not answer whether one particular comparison or substitution is suitable. The problem is to preserve useful cross-context work while keeping the relation, the proposed use, its evidence, and the downstream act individually testable.
Forces
Solution
Start with the two exact local senses, not with a context object, mapping table, or card. Resolve each endpoint as an F.17 SchemeSenseCell coordinate:
For F.9, semantic context is Plain shorthand for the bounded interpretation basis recovered from one cell's <ReferenceScheme, LocalSenseClaim> projection. It is not a U.Entity, U.BoundedContext, selected model-use structure, project, scope, viewpoint, description, designator, or reference. Two expressions under the same projection are a designation question first. Different projections make a Bridge question possible but do not make a Bridge obtain.
When the two cells are from different semantic contexts, declare one relation-semantic BridgePredicateProfile and test it against their current meanings. Shared spelling, different schemes, a mapping implementation, a card, a registry entry, evidence, an assessment score, or publication establishes none of those facts by itself.
Direct Bridge relation
Bridge is a direct species of U.Relation. Its reusable RelationSignature has exactly two participant meanings:
No context, proposed use, use direction, correspondence rule for that use, permitted-loss tolerance, assertion, evidence item, policy, time value, card, publication, registry id, or carrier is a third participant.
An F.9-local BridgePredicateProfile is a by-value predicate declaration, not a U-kind, participant, card, claim, or evaluation result. Its identity-bearing content is only:
- the
BridgeKindand its kind-defined symmetry or endpoint orientation; - the exact source and receiving endpoint-sense readings, including their
senseFamilyreadings where material; - the relation-kind-specific correspondence or difference condition;
- the applicability and as-of basis for testing that condition;
- the Boolean truth condition; and
- every stop dependency whose absence prevents a truthful result.
The profile contains no receiving-use role, use direction, use-specific correspondence rule, permitted-loss tolerance, bounded-use proposition, assertion polarity, evidence-reliance classification, assurance claim, authorization, or receiving object.
Bridge(SourceSenseCell, ReceivingSenseCell; BridgePredicateProfile) obtains exactly when:
- both endpoint references resolve to exact F.17
SchemeSenseCellvalues; - their semantic-context projections differ;
- the profile applies to those endpoint readings at its stated as-of basis;
- the current endpoint meanings satisfy its kind-specific correspondence or difference condition and Boolean truth condition; and
- every required dependency is present.
If an endpoint is unresolved, the projections are the same, a dependency is missing, or the predicate is false or unresolved, assert no positive occurrence and state the exact exit: ordinary designation, unresolved SenseCell endpoint, same semantic context, missing Bridge dependency, Bridge predicate false, or Bridge predicate unresolved.
The occurrence is identified by the exact endpoint cells together with the exact profile. For an asymmetric kind, the ordered source-to-receiving relation tuple is identity-bearing and an inverse claim requires another profile and occurrence. For a symmetric kind, swapping only the readable presentation of the same canonical endpoint pair does not create another occurrence. A changed endpoint or changed relation-semantic profile identifies another occurrence candidate. A changed proposed use, use direction, rule, tolerance, evidence path, reliance disposition, assurance claim, card, registry entry, publication, form, or carrier does not reidentify the fixed Bridge.
Judge a bounded use separately
Once exact Bridge b obtains, state the proposed use in ordinary language before introducing FPF terms. Name:
u: what the reader proposes to compare, substitute, translate, publish, or otherwise do;d: the exact source-to-receiving direction for that use;r: the use-specific correspondence rule;t: the semantic-loss tolerance for that use; and- whether the claim is affirmative or negative.
The resulting C.2.1 claim asks whether b is suitable for <u,d,r,t>. Its exact EntityOfConcern is b; its ClaimGraph designates u, d, r, t, and polarity; its effective ReferenceScheme makes those designations interpretable. That C.2.1 triple identifies the claim episteme. Changing u, d, r, or t changes the claim, not the Bridge.
An affirmative claim is one premise for the proposed use. It is not a permission, authorization, evidence-provenance relation, reliance classification, assurance claim, decision, or occurrence of that use. A negative claim says that the Bridge is not suitable for the named use; it does not make the Bridge cease to obtain.
For ordinary evidence reliance below B.3's material-reliance threshold and with no assurance claim, recover the exact A.10 evidence-provenance graph relation by value and state its local RelianceDisposition for the same bounded use. Only RelianceDisposition=pass supports reliance on the affirmative claim for that exact use; degrade supports only its named narrower use, while abstain, reopen, evidence-needed, blocked-current-use, or safety-case-required supplies no passing classification for the attempted use.
Enter B.3 when the receiver makes an assurance claim or the proposed use meets B.3's material-reliance threshold. Decide first whether a current assurance claim exists. A met threshold requires the minimum reliance safety assurance record and contest boundary but creates no positive claim. Use a positive current B.3 assurance claim only when it exists, its record is sufficient, and it carries the same bounded assurance use. Otherwise state the exact no-assurance, insufficient-record, narrowed, rejected, withdrawn, abstaining, or blocked disposition and stop or narrow the use accordingly.
Neither an A.10 passing disposition nor a positive B.3 assurance claim is legal, policy, or deontic authorization. If authorization is needed, recover it under its direct governor. If a later claim says the use happened, recover the actual Work, assertion episteme, publication occurrence, direct relation, operation application, or other object under its own pattern; the role u in the bounded-use claim is not that occurrence.
Minimal vocabulary
- Semantic context - Plain shorthand for the interpretation basis
<ReferenceScheme, LocalSenseClaim>recovered from an exact F.17 cell; it is not a separate entity or participant. - SchemeSenseCell - the exact F.17 local composite value
<ReferenceScheme by value, LocalExpression, LocalSenseClaim>. - SenseCellAddressRef - an address that resolves one exact
SchemeSenseCell; the address is not the cell. - Bridge - an obtaining direct semantic relation between two exact
SchemeSenseCellvalues from different semantic contexts under one exact profile. - BridgePredicateProfile - the F.9-local by-value declaration of the direct relation's kind, symmetry or orientation, endpoint readings, correspondence or difference condition, applicability and as-of basis, Boolean truth condition, and stop dependencies.
- Bounded-use claim - an ordinary C.2.1 claim that says whether one exact obtaining Bridge is suitable for one named use, direction, use-specific rule, and loss tolerance. This phrase is descriptive, not a new public kind name.
- Relation orientation - how the Bridge kind orders or symmetrically relates its endpoint slots; it is not a use licence.
- Use direction - the ordered
<UseSourceSenseCell, UseReceivingSenseCell>designated inside one bounded-use claim. - Observed semantic loss - a difference or counterexample found in evidence. It can bear on a bounded-use claim but is not the use's permitted-loss tolerance.
- Permitted-loss tolerance - the maximum named loss accepted by one proposed use; it is content of that use's C.2.1 claim.
- Bridge Card - an optional C.2.1 claim-bearing episteme about an actual Bridge or a proposed relation candidate; it is not the relation.
- CL (Congruence Level) - optional F.9-local shorthand for the strength of evidence about a stated correspondence. It is neither a participant nor a use threshold and never grants a use.
- senseFamily - the local meaning family used by Part F. A
senseFamilylabel is not a durable U-kind.
Bridge kinds
A Bridge kind classifies the direct semantic relation tested by a profile. It says what correspondence or difference obtains; it does not settle any proposed use.
Same-family relation kinds
- Equivalence - the endpoint senses have the same extension and relevant intension under the stated relation condition. The relation is symmetric and should be rare. A later use still names its direction, rule, and tolerance.
- Narrower-than - the source sense is properly included in the receiving sense. The relation is asymmetric.
- Broader-than - the source sense properly includes the receiving sense. The relation is asymmetric.
- Partial-overlap - the senses have a non-empty intersection, while each has cases excluded by the other. The relation is symmetric.
- Disjoint - the senses have no common admissible case under the stated readings. The relation is symmetric.
For inclusion, a narrower-to-broader proposed use is usually easier to justify than the reverse, but neither direction follows from the relation alone. A broader-to-narrower proposal normally needs refined endpoint cells and a separately tested Bridge plus a separately warranted bounded-use claim.
Cross-family relation kinds
These kinds state semantic correspondence across different senseFamily readings. They explain a connection; they do not create substitution, evidence authority, policy force, or a receiving occurrence.
- Design-spec-to-run-occurrence - a design sense corresponds to a run-time occurrence sense while remaining different in temporal and realization status.
- Measurement-evidence-for - a measurement sense corresponds to the measured aspect of another sense. The kind is semantic; actual evidential support remains with A.10 or B.3.
- Policy-constraint-on - a policy or deontic sense corresponds to a constrained behavioral sense. Actual obligation, permission, or authority remains with the policy or deontic governor.
- Viewpoint-correspondence - a sense used in one view corresponds to a sense used in another view over an EntityOfConcern. View, description, publication, and source-use claims keep their direct owners.
Evidence about relation and use
Evidence must answer the question it actually bears on:
CL may summarize evidence strength for a stated correspondence: 0 contradicted, 1 weakly comparable, 2 bounded support with explicit counterexamples, and 3 matched stated invariants with no current material counterexample. It is optional and never serves as a use threshold. A CL=3 label does not make a type-structure use suitable; the separate claim must still name the rule and tolerance, and reliance must still pass under A.10 or B.3.
Observed losses, unit differences, counterexamples, and invariant checks belong in the evidence path or card. The proposed use's permitted-loss tolerance belongs in its ClaimGraph. A loss observation can change without reidentifying either the fixed Bridge or the bounded-use claim; it may instead reopen the claim's polarity or the current reliance disposition.
Bridge occurrence and Bridge Card
Recover the direct relation before describing it. A Bridge may obtain without any card. Use a card only when durable reuse, delayed handoff, evidence review, audit, publication, or costly reversal makes a reusable claim package worthwhile.
For ClaimMode: actual, the card's exact EntityOfConcern is the already individuated Bridge occurrence. The card may package the Bridge claim, one or more bounded-use propositions, their evidence and polarity, the exact A.10 relation and local disposition or the selected B.3 branch, currentness, and nearest non-use.
For ClaimMode: candidate or negative, no positive occurrence reference exists. The card's EntityOfConcern is the admitted F.9 direct Bridge relation kind. Its ClaimGraph designates the proposed endpoints and profile. candidate states that the proposed Bridge may obtain; negative states that its predicate does not obtain. Any bounded-use proposition in the same graph keeps its own polarity. Completing, approving, registering, or publishing this card creates no Bridge.
The exact <ClaimGraph, EntityOfConcern, effective ReferenceScheme> triple identifies the card episteme. A changed card edition, evidence path, reliance disposition, assurance claim or disposition, registry record, publication occurrence, form, carrier, or layout does not reidentify a fixed Bridge.
Boundary to coarsening and quantum-like export
Open F.9 when a receiving use needs an actual semantic relation between exact local senses. A lossy or approximate export is not thereby a Bridge, and an actual Bridge is not thereby a quantum-like state transition.
Use this order:
- resolve the exact F.17 cells, state the relation-semantic profile, and test whether the Bridge obtains;
- state the proposed use separately as
<u,d,r,t>and give the C.2.1 claim its polarity; - recover the exact A.10 evidence-provenance relation and local disposition, or the B.3 claim or disposition selected for that use;
- if the use happened, identify the actual governed object and apply its direct owner;
- add a Bridge Card only if durable packaging pays;
- open A.6.3.CSC, C.26.1, or C.26.2 only when coarsening, probe effects, or failure of any faithful-enough report is the live question.
When a state, metric, option, causal reading, or viability claim crosses the semantic boundary, its direct owner states what survives and what is lost. The Bridge supplies only the semantic-correspondence premise; the bounded-use claim supplies only the named suitability proposition.
Invariants
- Exact endpoints first. A Bridge has exactly two F.17
SchemeSenseCellparticipants. - No context object. Semantic context is recovered from endpoint content and is not a relation participant.
- Different context is not enough. Different projections trigger the question but do not establish the relation.
- Profile contains relation semantics only. Receiving use, direction, use rule, loss tolerance, polarity, reliance, authorization, and receiving objects are absent from profile identity.
- Obtaining before occurrence reference. A positive Bridge reference appears only after the fixed predicate is true and its dependencies are present.
- Use claim is separate. Every proposed use names
u,d,r,t, and polarity in a C.2.1 claim about the exact Bridge. - Reliance is separate. A.10 or B.3, not F.9 or the card, says whether current evidence or assurance supports relying on that claim.
- Role is not occurrence. The named receiving-use role is ClaimGraph content; any actual Work, assertion, publication, relation, or operation application keeps its own identity and owner.
- Card separation. Card identity, completion, approval, registration, and publication neither make the relation obtain nor make the use happen.
- Loss separation. Observed semantic loss is evidence; permitted loss is tolerance inside the bounded-use claim.
- No authorization by implication. Semantic suitability, evidence reliance, and assurance are not legal, policy, or deontic permission.
- No silent inverse or composition. An inverse asymmetric relation and any direct A-to-C relation are tested independently.
Micro-examples
The labels below are readable aliases. An actual case resolves exact F.17 cells and tests one profile before stating a proposed use.
- Participant versus Agent. A
Partial-overlapBridge may obtain between the exact BPMN and PROV senses. A separate claim may affirm use of the label "actor" in one orientation table under a rule that preserves the stated participation distinction. That claim creates no role assignment. - Process design versus Activity occurrence. A
Design-spec-to-run-occurrenceBridge may explain the semantic connection. A separate claim can bound an explanatory use; it does not identify a run occurrence from a design artefact. - Observation versus SLO fulfilment. A
Measurement-evidence-forBridge can relate the exact senses. A separate claim asks whether the observation sense is suitable for interpreting one named SLO comparison; A.10 or B.3 governs reliance on the evidence. - Subtype across OWL and a curated taxonomy. An
EquivalenceBridge obtains only under a profile whose relation condition includes the required class-level invariants. A separate claim asks whether one exact type-structure row may use that Bridge under its stated rule and zero material-loss tolerance. - Accuracy in metrology versus data quality. A
Partial-overlapBridge can make the shared word intelligible. A bounded-use claim may affirm that the label is suitable in one explanatory table while rejecting transfer of measurement methods or values.
Worked examples
Service target and monitoring observation
A service team resolves two exact cells: the ITIL sense of an availability target and the SOSA sense of an availability observation. Profile P-SLO-OBS-v2 states a Measurement-evidence-for semantic relation: the observation sense concerns a measured availability quantity relevant to the target sense, while observation and target remain different kinds of claim. The profile names the endpoint readings, direction of the semantic relation, applicability to the cited editions, Boolean condition, and required quantity-definition dependency. Current meanings satisfy it, so Bridge b-slo-obs obtains.
The team next proposes use u-slo-check: compare one observation result with the target. Direction d-slo is observation-to-target; rule r-slo requires the same quantity kind, aligned windows, and the stated unit conversion; tolerance t-slo permits the named rounding loss but no quantity-kind change. A C.2.1 claim with EntityOfConcern b-slo-obs states affirmative polarity for <u-slo-check,d-slo,r-slo,t-slo>.
Because this is an ordinary bounded evidence use below the B.3 threshold and no assurance claim is made, the team recovers the exact A.10 evidence-provenance graph relation for the observation record and states RelianceDisposition=pass only for u-slo-check. That supports relying on the claim within its boundary. It does not make the SLO fulfilled, authorize acceptance, or prove that comparison Work occurred. Those claims remain with their direct owners.
Behavioral participant and access role
An exact Partial-overlap Bridge obtains between a BPMN participant sense and a named RBAC role sense when the profile's overlap and difference conditions are satisfied. A separate bounded-use claim proposes the label "actor" for one glossary row, in the stated direction, under a rule that preserves assignment moment, enforcement locus, multiplicity, and accountability differences, with zero tolerance for reading the label as a role assignment. Current evidence can support that label use under A.10.
If a project later says an RBAC role counts for a work step, it must recover an exact U.RoleAssignment under A.2.1 or F.6. The Bridge, affirmative label-use claim, and passing evidence disposition establish no assignment and no performed-work attribution.
Subtype notions in one structural row
The endpoint senses are OWL2:SubClassOf under a cited OWL profile and curated-taxonomy is-a under one named taxonomy edition. The Bridge profile states Equivalence and makes its direct relation predicate true only when both endpoint meanings use compatible class-level reasoning and satisfy the stated acyclicity and anti-symmetry conditions. When those facts and dependencies are current, the exact Bridge obtains.
A second premise is still required. The C.2.1 claim names the proposed type-structure row, its source-to-receiving direction, the rule that preserves the three invariants, and zero material-loss tolerance. Only an affirmative current claim with passing A.10 reliance, or the positive B.3 assurance branch when that pattern is triggered, supports relying on the row. A contradicted relation invariant makes the Bridge predicate false; a use-specific tolerance failure can instead make the bounded-use claim negative while the Bridge remains unchanged.
Setpoint versus service target
CTRL:setpoint and ITIL:target share a familiar word but usually have only Partial-overlap or are Disjoint under the exact readings. A proposed substitution in a control calculation receives a negative bounded-use claim because its rule and tolerance cannot preserve the physical-reference meaning. A didactic comparison may receive a different affirmative claim. Neither claim changes which Bridge obtains.
Common Anti-Patterns and How to Avoid Them
Reasoning primitives
These are conceptual judgements, not work-enactment, card-completion, registry, publication, permission, or authorization rules.
Direct Bridge occurrence
No proposed use, direction, use-specific rule, loss tolerance, claim polarity, reliance result, or card is a component of P.
Bounded-use proposition
Changing u, d, r, or t changes C; it does not change b. Affirmative polarity is not evidence reliance, assurance, authorization, or occurrence.
Ordinary A.10 reliance
A non-passing or narrower disposition supplies no support for the attempted use. The disposition is a local A.10 classification statement, not a new result kind.
B.3 assurance branch
A met threshold alone creates no positive claim. A no-assurance, insufficient-record, narrowed, rejected, withdrawn, abstaining, or blocked disposition stops or narrows the use as B.3 specifies.
Receiving occurrence stays separate
An actual receiving object exists only when its direct owner supplies its participants or arguments, obtaining or performance facts, and identity.
Direction guard
Relation symmetry or orientation does not select d. Each proposed direction receives its own bounded-use claim. For an inclusion relation, a broader-to-narrower proposal normally requires refined endpoint senses and a separately tested Bridge; it cannot borrow safety from the inverse reading.
Chained-use guard
A composite proposed use must cite each obtaining Bridge, state one exact composite rule and accumulated tolerance in its own claim, and recover current reliance for that claim. If a direct A-to-C correspondence is needed, test it independently.
Candidate-card guard
The card concerns the admitted direct Bridge relation kind and places proposed endpoints, profile, ClaimMode, and polarity in its ClaimGraph. It creates neither relation nor receiving occurrence.
Relations
Builds on: F.17, F.18, C.2.1, F.0.1, F.7, and F.8.
Coordinates with:
- A.10. Owns the exact evidence-provenance graph relation and local
RelianceDispositionfor ordinary bounded evidence use. - B.3. Owns the first decision about whether an assurance claim exists, the minimum reliance safety assurance record, a positive assurance claim when current, and explicit non-positive dispositions.
- F.4, F.5, A.2.1, F.6, and A.15.1. Naming, role assignment, required-role satisfaction, and performed-work attribution remain direct work-role claims.
- F.8. A mint-or-reuse decision may consume an obtaining Bridge plus a separately warranted bounded-use claim; it does not strengthen either.
- A.2.6. Scope translation may use an obtaining Bridge only together with an affirmative claim naming the exact direction, scope-correspondence rule, and loss tolerance. A.2.6 owns the translated scope and membership.
- A.6.1. Owns any actual operation application. A proposed use role in a Bridge claim is not an application binding.
- A.6.5. Relation-position labels and SlotSpec claims remain governed by slot discipline.
- C.29. Mathematical-lens use may cite a Bridge and bounded-use claim; C.29 still governs its mathematical object, preserved and lost structure, and actual lens use.
- C.34. Structural correspondence or morphism adequacy may cite an obtaining Bridge and a bounded-use claim but states its own preserved and lost architecture structure.
- E.17. Owns any actual publication occurrence. Publishing a card or claim does not make a receiving use occur.
- A.6.3.CSC, C.26.1, and C.26.2. Govern coarsening, probe effects, and no-faithful-enough-report cases when those questions are live.
Revision law
- Endpoint change. A changed by-value scheme, local expression, or local-sense claim identifies another F.17 cell and requires another Bridge test.
- Profile change. A changed kind, symmetry or orientation, endpoint reading, relation-specific correspondence or difference condition, applicability or as-of basis, Boolean truth condition, or stop dependency identifies another profile and occurrence candidate.
- Use-content change. A changed receiving-use role, direction, use-specific rule, or permitted-loss tolerance identifies another C.2.1 claim while the fixed Bridge remains unchanged.
- Polarity change. Affirmative versus negative is changed claim content; it is not a changed reliance disposition.
- Evidence or reliance change. A changed evidence item, path, currentness window, A.10 relation, local
RelianceDisposition, B.3 claim, record, or disposition reopens reliance without reidentifying the fixed Bridge or fixed C.2.1 claim. - Obtaining change. New endpoint facts may establish, refute, or leave unresolved the predicate for a fixed occurrence candidate without silently changing its identity.
- Card or publication change. Apply C.2.1 to card identity and E.17 to publication identity; neither creates or removes the Bridge.
- Receiving occurrence change. Reidentify or revise the Work, assertion, publication, relation, application, or other receiving object under its direct owner.
Acceptance tests
Static conformance
- SCR-F9-S01 (Well-typed direct relation). Each actual Bridge has exactly two resolved F.17
SchemeSenseCellendpoints and one exact relation-semantic profile. - SCR-F9-S02 (Different semantic contexts). The endpoint
<ReferenceScheme, LocalSenseClaim>projections differ; same-context aliases stay with designation resolution. - SCR-F9-S03 (Profile boundary). The profile contains only kind, symmetry or orientation, endpoint readings, relation condition, applicability and as-of basis, Boolean truth condition, and stop dependencies.
- SCR-F9-S04 (Obtaining). Current endpoint facts satisfy the exact profile and all required dependencies are present. Scheme difference, spelling, implementation, evidence score, card, registry, or publication alone fails this test.
- SCR-F9-S05 (Separate bounded use). Every use claim identifies exact Bridge
b, namesu,d,r,t, polarity, and an effective ReferenceScheme under C.2.1. - SCR-F9-S06 (Reliance branch). The same bounded use has either the exact A.10 relation plus a passing local disposition, or the exact B.3 positive-claim or non-positive branch required by its trigger.
- SCR-F9-S07 (No authorization overread). Semantic fit, A.10 reliance, and B.3 assurance are not described as legal, policy, or deontic permission.
- SCR-F9-S08 (Receiving-object boundary). A named use role is never treated as performed Work, assertion, publication, relation, or operation application.
- SCR-F9-S09 (Card truthfulness). An actual card concerns an already individuated occurrence; a candidate or negative card concerns the admitted relation kind and has no positive occurrence ref.
- SCR-F9-S10 (Plain action). A practitioner can tell what relation to test, what use is proposed, what would stop reliance, and which downstream object still needs its own owner.
Regression checks
- RSCR-F9-E01 (Same Bridge, changed use). Reversing direction, changing the use rule, or changing tolerance reidentifies the C.2.1 claim, not the Bridge.
- RSCR-F9-E02 (Same claim, changed evidence). Stale or stronger evidence changes the A.10 relation or disposition, or the B.3 branch, without reidentifying the fixed claim.
- RSCR-F9-E03 (Threshold without positive assurance). Meeting the B.3 threshold can yield a required record and explicit no-assurance or insufficient-record disposition; it does not manufacture a positive assurance claim.
- RSCR-F9-E04 (Profile change). A changed relation condition or endpoint reading identifies another profile and occurrence candidate.
- RSCR-F9-E05 (Packaging change). A changed card, registry entry, publication, form, or carrier leaves the Bridge and fixed bounded-use claim unchanged unless their own discriminators changed.
- RSCR-F9-E06 (Positive proposal versus occurrence). An affirmative claim with passing reliance proves no comparison Work, assertion, publication, direct relation, or operation application.
- RSCR-F9-E07 (Polarity versus reliance). Negative claim polarity and a non-passing reliance disposition remain different facts.
- RSCR-F9-E08 (Reliance versus authorization). Passing A.10 reliance or positive B.3 assurance does not imply permission.
- RSCR-F9-E09 (No inverse or composition). Neither an asymmetric inverse nor a direct A-to-C Bridge follows without its own profile and obtaining test.
Didactic distillation
Use this five-part script:
- Find the two exact local senses.
- Say what semantic relation holds and test whether that Bridge obtains.
- State the proposed use separately: action, direction, rule, tolerated loss, and polarity.
- Check whether current evidence or assurance supports relying on that claim; recover authorization separately if needed.
- If the use happened, identify the actual object under its owner. Make a card only when reuse is worth the maintenance.
The short memory aid is: relation first, use second, reliance third, receiving occurrence last; packaging is optional.
Archetypal Grounding
Tell
A Bridge is an actual semantic relation, not a synonym claim or enactment edge. Its profile says what correspondence holds. A separate claim says whether that relation suits one proposed use. Evidence, authorization, packaging, and actual performance remain separate.
Show: service lane
The observation sense can bear a semantic relation to the target sense without being the target status. The team then states and warrants one comparison use; status and acceptance remain with their owners.
Show: role lane
A process team and an access-control team both use operator. An obtaining overlap Bridge plus an affirmative, warranted label-use claim can support one glossary row. It cannot assign the access-control role to a work occurrence.
Show: episteme lane
An actual card can package the relation claim, bounded-use claim, evidence path, and reliance disposition. It remains an episteme about the Bridge and creates neither the relation nor the receiving act.
Bias-Annotation
Lenses tested: governance, architecture, ontology and episteme, pragmatics, didactics. Scope: universal for cross-context correspondence and reuse.
- Governance bias. The pattern adds a separate use claim and reliance check. Mitigation: keep them in ordinary sentences when durable packaging has no payoff.
- Architecture bias. Typed relation profiles can look heavier than synonym prose. Mitigation: the five-part script begins with the practical action and introduces exact terms only where they stop a real overread.
- Ontology and episteme bias. F.9 resists global meaning claims and keeps claims separate from their subject. Mitigation: explicit Bridges still permit practical cross-context comparison.
- Pragmatic bias. Conservative separation can feel slower than reusing a mapping table. Mitigation: a fixed Bridge can support many independently stated uses without being reidentified.
- Didactic bias. The four-object split can become bureaucratic if written only in internal nouns. Mitigation: every use starts by saying what a person will do, what rule they will follow, and what result would make them stop.
Conformance Checklist
An F.9 use conforms iff:
- both endpoints resolve to exact F.17
SchemeSenseCellvalues; - their semantic-context projections differ;
- the Bridge has exactly two participants and one relation-semantic profile;
- the profile contains no receiving-use or reliance content;
- the profile applies, its Boolean predicate is true, and its dependencies are present before a positive occurrence is cited;
- every proposed use is a separate C.2.1 claim naming
u,d,r,t, polarity, and effective scheme; - observed loss stays in evidence while permitted loss stays in the bounded-use claim;
- current reliance uses the exact A.10 or B.3 branch for the same bounded use;
- no reliance or assurance statement is read as authorization;
- any actual receiving object is recovered under its direct owner;
- card, registry, publication, form, and carrier remain distinct from Bridge occurrence and use occurrence; and
- inverse and composed relations are tested independently.
Consequences
Benefits. F.9 permits comparison, translation, and bounded reuse without collapsing local senses. One stable Bridge can support several differently directed or differently tolerant use claims, and evidence can change without silently changing relation identity.
Costs. A reader must state two premises instead of one: the semantic relation and the bounded-use proposition. Material reliance can also require A.10 or B.3 work. This cost is paid only when a real cross-context use is proposed; a card remains optional.
Failure mode avoided. A Bridge, score, or card can no longer act as a quiet substitute for role assignment, status transfer, evidence authority, authorization, publication, or performed-work attribution.
Rationale
Cross-context comparison is unavoidable, but the truth of a semantic relation and the suitability of one action are different claims. Putting direction, a use rule, and tolerated loss into BridgePredicateProfile would reidentify the relation whenever the proposed use changed. Putting them in a separate C.2.1 claim lets one Bridge remain fixed while several uses are affirmed, rejected, narrowed, or reopened independently.
The same separation keeps evidence honest. A.10 or B.3 can reopen reliance without erasing the relation. A card can travel without becoming the relation. A proposed use can be warranted without being authorized or performed. These boundaries preserve practical reuse and make each failure local and repairable.
SoTA-Echoing
Bridge Card publication discipline
Minimal truthful card
A reusable card states its mode and exact C.2.1 identity. An actual card names its already obtaining Bridge. A candidate or negative card instead names the admitted direct Bridge relation kind and places proposed endpoints, profile, mode, and polarity in its ClaimGraph. When the card packages a proposed use, it states u, d, r, t, polarity, observed loss, evidence, currentness, nearest non-use, and the exact A.10 or B.3 branch. Missing relation facts are never repaired by filling more fields.
One occurrence, several claims and descriptions
Several bounded-use claims, cards, reviews, or publications may concern the same actual Bridge. Their C.2.1 identities differ when their ClaimGraph, EntityOfConcern, or effective scheme differs; the Bridge identity does not. Prefer one primary current card only when it reduces navigation cost.
Revision without silent ontology change
If evidence, observed loss, reliance, assurance, wording, or publication changes while endpoints and profile remain fixed, revise the corresponding claim, evidence relation, disposition, card, or publication. Test another Bridge only when an endpoint or relation-semantic profile component changes.
Bundle and endpoint interaction
Viewpoint bundles, quality bundles, dashboards, reports, and endpoint bundles may cite Bridges and bounded-use claims, but they do not absorb their semantics. Each bundle keeps its own ontology and direct use rule.
When a quality-family claim crosses contexts, observed loss may bear on its bounded-use claim and on B.3 assurance, but neither fact retypes the quality family. An F.9.1 stance overlay may help readers interpret the claim; it remains a separate episteme and cannot widen the relation, proposed use, reliance, authorization, or occurrence.
C.29 mathematical-lens use relation
When a mathematical-lens use relies on cross-local meaning, first recover an actual F.9 Bridge. Then state the exact bounded-use claim for the lens direction, correspondence rule, and tolerated loss, and recover current reliance. C.29 owns the mathematical object, LensMappingMode, preserved and lost structure, lens-use judgement, and actual lens use. A Bridge can make a lens interpretable without making any lens use occur.
Review matrix
A reader can test bridge integrity with eight questions:
- Do both endpoint refs resolve exact F.17
SchemeSenseCellvalues from different semantic contexts? - Does the profile say only which semantic relation holds, with its endpoint readings, condition, applicability, truth rule, and stop dependencies?
- Is the Bridge claimed only after that fixed predicate is true?
- Does each proposed use separately name the action, direction, correspondence rule, tolerated loss, and polarity?
- Does the same use have the correct current A.10 evidence-provenance relation and local disposition, or the B.3 claim or disposition selected by its trigger?
- Are semantic suitability, reliance, assurance, and authorization kept distinct?
- If someone says the use happened, is the actual Work, assertion, publication, relation, operation application, or other object recovered under its own pattern?
- Does any card remain optional packaging rather than the source of relation truth, permission, or occurrence?
Repair same, equivalent, align, and map prose in that order: recover the exact senses; test the Bridge; state the bounded-use claim; check reliance; recover authorization or the actual receiving object only when those questions are live. Do not start from a polished card or a score.
F.9:End
Bridge Stance Overlay
Type: Architectural (A) Status: Stable Normativity: Normative unless marked informative
Plain-name. Bridge-card stance overlay.
One-line summary. BridgeStanceOverlay governs one stance annotation over an existing F.9 bridge card so authors can say how to read that bridge without changing its kind, direction, CL, or loss notes and without treating the overlay as bridge authority or as a cure for missing source-bearing return.
Primary EntityOfConcern in plain terms. One overlay annotation attached to an existing F.9 bridge card; not the bridge card itself, not a second bridge kind, and not the pattern that governs coarsened renderings.
Use this when. Use this overlay when an existing bridge card already exists and the real need is one compact stance label such as localRename, operationalizes, partialAnalogy, projection, or nonEquivalent that helps readers interpret that bridge without widening its substitution licence.
Start here when. Your first honest artefact is already an F.9 bridge card, and the practical question is how to read that bridge rather than whether a bridge exists at all.
What goes wrong if missed. Authors fall back to vague phrases like "roughly analogous" or "just a rename", and readers either over-read the gloss as silent bridge authority or under-read it as disposable style.
What this buys. One compact interpretive gloss over an existing bridge card that stays reusable, keeps the bridge taxonomy stable, and still leaves source-bearing return and bridge publication duties where they belong.
Not this pattern when. Not this overlay when the case is the bridge card itself under F.9, or when a coarsened rendering still needs source-bearing return before any bridge-bearing use is admissible; use A.6.3.CSC Controlled Semantic Coarsening for that coarsened-rendering relation.
Problem frame
When positions or trajectories in language-state work are compared across schools or contexts, authors often need a disciplined interpretive gloss on top of a formal bridge card. The gloss must help reading without becoming a second bridge taxonomy.
Problem
Authors often express stance informally ("roughly analogous", "really a projection", "just a rename"), which makes bridge interpretation unstable. A full second taxonomy would be worse: it would compete with the core bridge kinds.
Forces
Solution
A Bridge Stance Overlay is a local interpretive annotation attached to an existing F.9 bridge card. It does not change the underlying bridge kind, direction, CL, or loss notes.
Starter overlay vocabulary
Boundary rule
A stance annotation is interpretive help for authors and readers. It is not a second bridge ontology, not a bridge card, and not a permission and not a publication with named authority-reference relation.
It is also not the coarsening governing pattern. Labels such as projection or nonEquivalent may help a reader interpret an already-declared bridge, but they do not carry source tether, narrower admissible use, non-admissible downstream use, or reopen duty for a coarsened rendering. If that coarsened-rendering relation becomes primary, it belongs to A.6.3.CSC Controlled Semantic Coarsening rather than being absorbed into stance language. If return to the source-bearing episteme or source publication is still needed before any bridge reading is admissible, reopen that episteme or publication before adding stance.
Relation to CL and loss
CLstill governs substitution licence.- loss notes still govern what fails to carry.
- stance annotations merely say how the author wants the bridge to be read.
If the stance materially affects interpretation, the bridge card should publish explicit loss notes that match it.
Archetypal Grounding
Tell. A stance annotation says how to read the bridge, not what the bridge kind structurally is.
Show (System). An operator alarm label may operationalizes a broader control cue without becoming identical to it.
Show (Episteme). A TAE felt-sense phrase may be only a partialAnalogy to a later formal term.
Bias-Annotation
Lenses tested: Gov, Arch, Onto/Epist, Prag, Did. Scope: Universal for stance overlays attached to existing F.9 Bridge Cards inside FPF.
This pattern favors disciplined cross-school comparison and bridge readability over sweeping synonym claims. The main mitigation is that every stance remains subordinate to the underlying Bridge Card, its direction, CL, and loss notes, with explicit handoff to A.6.3.CSC when the issue under repair is source-bearing return for a coarsened rendering rather than bridge-card reading.
Conformance Checklist
CC-F.9.1-1A stance annotation SHALL NOT replace the underlyingF.9bridge kind.CC-F.9.1-2Stance annotations SHOULD be accompanied by explicit loss notes when they materially affect interpretation.CC-F.9.1-3nonEquivalentSHALL block silent substitution.CC-F.9.1-4A stance annotation SHALL NOT claim higher-CL sameness than the bridge card'sCLand kind allow.CC-F.9.1-5A stance annotation SHALL NOT stand in for source-bearing return when a coarsened rendering still needs reopen before any bridge-bearing reading is admissible; that relation belongs toA.6.3.CSC Controlled Semantic Coarsening.
Common Anti-Patterns and How to Avoid Them
- Annotation as ontology. Do not treat stance as the bridge kind itself.
- Friendly-vague analogy. If the relation is high-loss, say so explicitly.
- Stance inflation. Do not use the annotation to smuggle in substitution rights that
F.9withholds. - Stance as coarsened-rendering cure. Do not add
projection,localRename, or another overlay as if that repaired a coarsened note that still needs source-bearing return before bridge reading.
Consequences
The benefit is reusable interpretive clarity for bridge-heavy bundles and school comparisons. The trade-off is one more declared annotation layer on bridge cards.
Rationale
U.LanguageStateSpace and U.LanguageStateMoveTrajectory create many legitimate cross-school comparisons. F.9.1 gives those comparisons a reusable stance vocabulary without fragmenting the underlying F.9 bridge discipline.
The practical gain is narrow but real: teams already use short stance glosses in review work, and without a governed overlay those glosses either smuggle bridge CL through casual wording or sprawl into a second bridge taxonomy. Keeping the overlay subordinate to the bridge card lets bundles reuse interpretive cues while the boundary rule and the worked projection anti-case keep source-bearing return and bridge publication duty where they belong.
SoTA-Echoing
SoTA note. This section does not mint an independent second bridge rule track. It stays truthful only when the boundary rule, conformance checklist, worked bridge-card examples, and legacy-note repair below still tell the same story about the stance staying subordinate to the bridge card.
Traditions covered. This overlay binds itself to comparative-theory glossing, design-translation annotation, operator documentation, and other practices that add short interpretive stance labels on top of already governed bridge cards.
Worked-slice docking. The nearest practical recovery loci here are the localRename, operationalizes, projection, and partialAnalogy examples in F.9.1:13.1 through F.9.1:13.4, plus the anti-case F.9.1:13.5. If the SoTA claim cannot be recovered through those worked slices and the early boundary rule, do not let the citation stand in for the live pattern law.
Local stance. Best-known current practice supports a narrow rule: stance labels are useful only when they stay visibly subordinate to a published bridge card, its direction, CL, loss notes, and reviewable source-cell and target-cell structure.
Relations
- Builds on:
F.9,C.2.2a. - Primary boundary:
F.9governs Bridge Card discipline;F.9.1governs only stance overlays attached to existing Bridge Cards. - Coordinates with:
A.16.0,E.17.1,A.6.P,A.6.A,C.16.Q,C.25, andB.4.1. - Constrains: local stance annotations on bridge cards used in comparative and tradition bundles.
Worked Bridge-Card Examples
localRename
A bridge card may relate two near-coextensive operational labels inside one declared context fragment and mark the stance as localRename. The bridge card still publishes its own direction, kind, CL, and loss notes. The stance only warns the reader that the author's intended reading is close renaming within that boundary; it does not license export of the rename beyond the stated fragment.
operationalizes
A broad capability cue may be bridged to a more procedural checklist or control ritual. The bridge card may carry the stance operationalizes to show that the target is being read as a procedural or operational gloss over the source. The relation can still be high-loss: the procedural target need not preserve the source's broader theoretical framing, and the stance does not claim type-structure sameness, implementation authority, execution permission, gate approval, or A.15 work authority.
projection
A rich construct may be mapped into a narrower reporting or measurement rendering. The bridge card may declare the stance projection when the target intentionally keeps only one aspect. The required loss notes should name the dropped dimensions, because the stance is informative only when the omitted structure is made explicit.
Table-level note: projection is only a stance over a declared bridge. It does not govern loss, recoverability, narrower admissible use, non-admissible downstream use, or source reopen for a coarsened rendering; that relation belongs to A.6.3.CSC Controlled Semantic Coarsening.
partialAnalogy and nonEquivalent
A comparative bundle may need to mention an explanatory resemblance across traditions without claiming substitution. In such cases partialAnalogy may guide reading when the shared pattern is local and declared. If review concludes that this local resemblance still lacks reuse support, nonEquivalent should be preferred so that apparent similarity does not drift into silent replacement. The label blocks equivalence and silent substitution; it does not by itself assert Disjoint or CL=0 unless the underlying F.9 bridge card says so.
projection is not a coarsened-note cure
A team may write a short comparison note saying that one report-only metric is basically a projection of a richer operations concept. That sentence does not by itself justify a projection overlay. First recover the underlying F.9 bridge card, its direction, CL, and Loss Notes from the source-bearing episteme or source publication needed for the Bridge Card. Only then may the overlay say how to read that bridge. If readers still need return to the source-bearing episteme or source publication before any bridge-bearing use is admissible, the overlay must wait; it cannot repair the missing bridge card.
Practical use guidance
- Publish a stance overlay only on top of a complete bridge card that already declares bridge kind, direction,
CL, and explicit loss notes where needed. - Choose the least-committing stance that truthfully describes the intended reading; do not upgrade the overlay merely because it sounds more helpful.
- If multiple interpretive notes are needed, prefer one primary stance plus explicit loss notes rather than several competing overlays.
- Use
nonEquivalentwhen the main value of the annotation is to warn the reader away from substitution. - In comparative sets or tradition-focused bundles, place the overlay near the bridge card it qualifies so readers can inspect structural bridge data before reading the interpretive gloss.
A practical check is simple: ask whether the overlay merely helps reading or is covertly claiming extra sameness, transport, or substitution rights. If it does the latter, revise the bridge card itself rather than decorating it.
Legacy-note repair and boundary
Legacy comparative notes often contain undeclared stance language such as "roughly the same", "really a projection", or "just an operational version". When such a note is normalized, the first repair step is to recover the underlying bridge card in F.9; only then may a Bridge Stance Overlay be added as an explicit local stance annotation.
The pattern intentionally does not define a second bridge taxonomy, a new substitution calculus, or a score for bridge quality. Those responsibilities remain with the bridge card, CL, and declared loss discipline. Tradition bundles may carry many bridge cards with stance overlays, but the overlays remain local annotations attached to those cards, not free-standing comparative objects.
Overlay Declaration Discipline
A stance overlay is useful only when it stays visibly subordinate to the bridge card it qualifies.
Minimal overlay declaration
A usable stance overlay should normally publish:
- the qualified
F.9bridge card, - the chosen stance term,
- the local reason the stance is helpful,
- and any loss emphasis that becomes especially important under that stance.
Without this declaration set, a stance word becomes a decorative gloss detached from the bridge it is supposed to interpret.
One primary stance per bridge card
A bridge card should normally carry one primary stance overlay. If several interpretive notes are needed, the extras should usually live in explicit loss notes or surrounding commentary rather than in several competing stance tags.
Overlay locality
A stance overlay is local to the bridge card and context fragment that publish it. Reusing the same stance label elsewhere is admissible only when the new bridge card independently supports that reading.
Interaction with CL, Direction, and Loss
CL remains prior
If the stance sounds friendlier than the declared CL, CL wins. An operationalizes or localRename overlay cannot overrule a high-loss bridge or a low-substitution CL declaration.
Direction-sensitive reading
Some stance labels read differently depending on bridge direction. A construct may project into a report-only rendering in one direction while the reverse direction is not admissible at all. Authors should therefore avoid stance prose that sounds symmetric when the bridge card is directional.
Loss emphasis rule
When a stance is likely to invite over-reading, the loss note should state a sharper boundary rather than soften it. The overlay is useful exactly because it helps interpretation; that is also why it can mislead if the losses are understated.
Bundle Use and Comparative Reading
Bundle-level reuse
Tradition bundles and viewpoint bundles may reuse the same stance vocabulary across many bridge cards, but the interpretation remains card-local. Bundle reuse is a readability aid, not a warrant that similarly named overlays are structurally equivalent.
Comparative stance caution
Two bridge cards may both be marked projection while dropping very different dimensions. Reviewers should therefore compare the loss notes and source-cell and target-cell structure, not the overlay term alone.
Boundary to second bridge taxonomy
If authors start grouping bridges primarily by stance label and ignoring bridge kind, direction, CL, or loss, they have implicitly created a rival bridge taxonomy. F.9.1 forbids that drift.
Review Matrix and Migration Tests
A reviewer can test stance-overlay integrity with five questions:
- Is the underlying bridge card complete and still primary?
- Does the overlay stay within the bridge card's structural claims?
- Would the same overlay still be truthful if read in the reverse direction? If not, the locality or directionality needs to be made clearer.
- Do the loss notes carry the interpretive claim that the overlay might otherwise overstate?
- Is the bundle using stance as a readability aid, or as a covert replacement for bridge ontology?
Legacy prose about things being "really the same", "only a projection", or "just an operational version" should therefore be migrated by recovering bridge kind, direction, CL, and loss first, then adding an overlay only if it still adds disciplined interpretive value.
F.9.1:End
Status Families Mapping: Evidence, Standard, and Requirement Status
Type: Boundary and relation-use pattern Status: Stable Normativity: Normative
Problem frame
Use this pattern when a project uses status words such as "observed", "measured", "validated", "approved", "deprecated", "satisfied", "violated", "waived", "pending", "current", or "ready" and needs to know what kind of status is being claimed, what it qualifies, and whether it can be compared or reused in another bounded context.
Use it especially when evidence, standards, and requirements are being mixed: a dashboard says a service is ready, a standard says a method is approved, a measurement says a requirement is satisfied, a model card says a model is validated, or a requirement register says a clause is waived.
Primary EntityOfConcern. The primary EntityOfConcern is the status-use statement and the status-family mapping that make one status value usable in one bounded context. The pattern governs the relation among status cell, target, target kind, scope, window, source or provenance constraint, and intended status use. It does not make an episteme hold a role and does not treat a visible status display as gate passage, permission, assurance, evidence, or performed work by itself.
First useful move. Write the smallest status-use statement: status family, bounded context, status value, target, target kind, scope, window when current, source or provenance constraint, intended use, and stronger use not carried by this relation.
What goes wrong if missed. A single word such as "validated" starts doing the work of evidence, standard approval, requirement satisfaction, gate passage, release readiness, and assurance at once. Cross-context dashboards compare labels without bridge loss. A report or standard is treated as if it had a status role. A design-time approval is read as run-time compliance.
What this buys. Status words stay local, typed, and comparable. Evidence status says what has evidential standing for a claim. Standard status says what a canon or standard-governed context sanctions. Requirement status says what is happening to an obligation or clause. Cross-context movement becomes an explicit bridge claim instead of a synonym guess.
Not this pattern when. If the current claim is full evidence provenance, use A.10. If the current claim is only an episteme being used as evidence or status before full status-family mapping is needed, use A.2.4. If the current claim is assurance, use B.3. If the current claim is causal use, use C.28. If the current claim is a source, publication face, view, explanation, or specification-use question, use E.17, E.17.0, E.17.2, E.17.EFP, E.10.D2, or the direct publication-use pattern. If the current claim is a system or acting holon holding a work-facing role, use A.2 and A.2.1. If the current claim is performed work, use A.15.1.
Problem
Status vocabulary is useful because it is compact. It is dangerous because the same compact label often hides several different claims.
The common failures are:
- Modality collapse. "Validated" is read as evidence, standard approval, requirement satisfaction, and release permission at once.
- Target collapse. A status is asserted without saying whether it qualifies a claim, quantity, method description, standard text, requirement clause, work result, role assignment, publication, gate record, or another exact target.
- Window loss. Positive or negative status is asserted without the time, edition, condition, or relevance window that makes contradiction and freshness checkable.
- Context leakage. A status word from one context is reused in another as if the label itself carried equivalence.
- Episteme role drift. A report, standard, dashboard cell, model card, or requirement document is described as having an "evidence role", "status role", or "standard role" instead of being used in an evidence-use, status-use, source-use, standard-use, or requirement-use relation.
- Design-run substitution. A design-time standard approval is read as run-time evidence, or run-time evidence is read as standard approval, without an interpretation bridge and an evaluation rule.
- Display overread. A badge, traffic-light cell, dashboard tile, register excerpt, screenshot, certificate view, or generated summary is treated as the status source, gate decision, or assurance result without recoverable source relation.
Forces
Solution
Treat a status claim as a context-local status-use statement, not as a free-floating adjective and not as a role assignment.
Three Status Families
F.10 uses three status families as a small spine for common project work:
A project may add local sublevels or local labels, but the local label must map to one of these families or to another direct status pattern named by value. Do not create a new role kind merely because a status word is local.
StatusCell and StatusUseStatement
A StatusCell is a context-local sense cell for a status value. It has a status family, status modality, typical target kind, polarity, and window discipline. A StatusCell is a meaning cell, not a work performer and not a gate decision.
A StatusUseStatement applies one status cell or local status value to a target in a bounded context:
StatusTargetKind decides relation identity. A status that qualifies a method description is not the same status-use statement as a status that qualifies a requirement clause, even when the visible label is the same. NotCarried names the stronger use that this status statement does not carry, such as gate passage, release permission, assurance, performed work, causal identification, global truth, or cross-context substitution.
Relation Slots for Status Use
Use the A.2.4 status-use slots when a status statement must be precise enough for reliance:
These SlotKinds are relation positions. They are not U.Role names, not work-role qualifier slots, and not a new generic status ontic by themselves.
Family Spines
The following spines are deliberately small. They help contexts map local status words without pretending that every domain has the same status vocabulary.
EvidenceStatus values:
Observed- seen or recorded once under declared observation conditions.Measured- quantified under a declared measurement procedure.Corroborated- backed by more than one independent source, procedure, or observation line.Replicated- repeated by others or under varied declared conditions.Refuted- counter-evidence defeats the positive standing inside the same window.Inconclusive- the available evidence is insufficient or mixed for the target claim.
StandardStatus values:
Candidate- proposed and not yet normative in the context.Draft- worked text or profile, not yet the governing edition.Approved- normative in this context and edition.Deprecated- discouraged, allowed only under stated conditions, or being phased out.Superseded- replaced by a newer edition, profile, or governing source.
RequirementStatus values:
Applicable- the clause binds in the stated context and window.Inapplicable- the clause does not bind under stated conditions.Satisfied- met within the stated context and window.Violated- not met within the stated context and window.Waived- binding is suspended or exceptioned by a named source and window.Pending- awaiting evidence, evaluation, decision, or source-currentness repair.
Bridge Discipline
Status meanings do not travel by label. A cross-context comparison, explanation, or substitution uses an F.9 bridge with direction, bridge kind, congruence level, and loss notes.
Explanation is the ordinary cross-context use. Substitution is admitted only when the bridge kind, congruence level, window alignment, target kind, and local evaluation rule all admit the substitution. Cross-modality movement, such as evidence status being used to evaluate requirement status, is an interpretation relation; it is not equivalence.
Design-Run Discipline
Keep three questions separate:
- What does the evidence show about a claim or measured quantity in this window?
- What does the standard or canon sanction for a method description, profile, or governed project entity in this edition?
- What is the requirement clause doing in this context and window?
A standard-approved method description can be a source for method selection or a condition for allowed use. It does not by itself show that a run-time clause is satisfied. Run-time evidence can help evaluate a requirement clause. It does not by itself approve the method or standard profile unless a governing context has a rule for that promotion.
Archetypal Grounding
Service Acceptance from Run-Time Evidence
A service dashboard reports uptime for July. In the monitoring context, the measurement episteme gives EvidenceStatus = Measured for the claim "uptime was 99.95 percent in July." In the service-management context, the SLO clause has RequirementStatus = Satisfied only if the service pattern's evaluation rule says that the measured uptime meets the clause.
F.10 records two status-use statements and an interpretation bridge. It does not infer requirement satisfaction from the word "measured" alone.
Approved Method Description
A safety controller method description is StandardStatus = Approved in one standard profile and edition. That approval makes the method description admissible under that profile. It does not prove that a particular controller run met response-time obligations. A run-time log can be assigned EvidenceStatus = Corroborated for a response-time claim; a separate requirement-use statement can then evaluate the duty clause.
Model Card and Fairness Requirement
A model card says a model is "validated" because cross-validation AUC is high. In F.10 this becomes an EvidenceStatus statement for a predictive-performance claim inside the validation context. It does not decide the policy requirement "demographic parity delta <= 0.1" unless production-window fairness evidence and the policy evaluation rule are present.
Status Display Cue
A release dashboard cell shows Ready. The cell is a cue. A status-use statement is available only when the source, target, value, scope, window, and provenance constraint are recoverable. If the status is consumed for a gate, release, assurance, or admission use, the direct governing pattern for that use must also admit it.
Bias-Annotation
F.10 is vulnerable to three recurring biases.
- Label authority bias. A familiar status word is treated as source authority. Repair by recovering status target, source, window, and intended use.
- Semio-bias. A visible display, publication face, badge, or label becomes the center of the pattern. Repair by making the status-use relation the
EntityOfConcern; display and publication questions go toE.17,A.10, orE.10.D2. - Role drift. A standard, report, dashboard, or requirement is described as having a role. Repair by using status-use, standard-use, requirement-use, evidence-use, or source-use relations; reserve
U.RoleandU.RoleAssignmentfor work-facing holders.
Conformance Checklist
Common Anti-Patterns and How to Avoid Them
Consequences
F.10 adds a small amount of relation work before a status claim can be relied on. That cost is intentional: the user names context, target kind, window, source, and use instead of letting one status word decide everything.
The payoff is practical. Teams can compare statuses across disciplines, explain why a status was accepted or rejected, see where bridge loss enters, and stop a status display from becoming permission, assurance, or performed-work evidence by accident.
The main limitation is that F.10 does not decide the downstream claim. It does not compute assurance, pass a gate, authorize work, prove causal effect, perform source-currentness repair, or evaluate a requirement clause by itself. It supplies the status-family and status-use relation that the direct pattern may consume.
Open the direct governing pattern when the attempted use depends on evidence provenance, assurance level, gate decision, permission, performed work, causal identification, source freshness, publication interpretation, standard authority, requirement evaluation, or contested source order.
Rationale
Status words sit at the meeting point of evidence, norms, and action. That makes them tempting shortcuts. A shortcut is safe only when the status target and intended use remain visible.
F.10 keeps the shortcut by using a small family spine, but it prevents ontology drift by making the status-use statement explicit. A status value is not a role. A status display is not the status source by itself. A standard approval is not run-time satisfaction. Evidence status can explain requirement status only through an interpretation relation and an evaluation rule.
This keeps Part F naming and bridge machinery useful while letting A.10, B.3, C.28, E.17, A.2, A.15, and gate or requirement patterns govern their own stronger claims.
SoTA-Echoing
Relations
Builds on: A.2.4 for evidence-use and status-use relation slots; F.1 through F.3 for context, seed, and local-sense discipline; F.9 for bridges across contexts; F.18 for local-first naming discipline.
Coordinates with:
-
A.10when a status claim depends on evidence provenance, evidence source, source-currentness, or evidence-producing work. -
B.3when a status is consumed as assurance input. -
C.2.1when the identity of the episteme, claim graph, reference scheme, or grounding holon matters. -
C.28when the status is causal, counterfactual, intervention-facing, or simulation-output-facing. -
E.17,E.17.0,E.17.2,E.17.EFP, andE.10.D2when a publication face, view, explanation, source, description, or specification-use question is current. -
A.2,A.2.1, andA.15when a system or acting holon holds a work-facing role or performs work. -
Gate, release, standard-use, requirement-use, decision, and source-currentness patterns when status is consumed for those stronger uses.
-
Precision-restoration owners: When source wording says "status role", "approved role", "standard role", "validated means compliant", "green means ready", or another status-shaped phrase hides target kind, status family, window, bridge, source, or direct-pattern use, use
A.6.RSIRfor relation-slot or role-like slot recovery andE.10.ARCHfor ontology-first repair architecture.
F.10:End
Method Quartet Harmonisation
“Keep the how (Method), the recipe (MethodDescription), the happening (Work/Execution), and the control push (Actuation) in their own Contexts—then relate them explicitly.”
Status. Architectural pattern.
Builds on: E.10.D1 D.CTX (Context discipline); A.3/A.3.1/A.3.2 (Transformer Constitution; U.Method, U.MethodDescription); A.15/A.15.1 (U.Work as record of occurrence); Sys‑CAL (control/actuation semantics); KD‑CAL (observation).
Coordinates with. F.1–F.3 (Contexts, Seeds → SenseCells), F.4 (Role Description), F.5 (Naming), F.6 (Role Assignment & Enactment Cycle (Six-Step)), F.7/F.9 (Bridges), F.10 (Status families & Windows).
Aliases (informative). Method/Spec/Work or Actuation split; DesignRunTag harmonisation.
Intent & applicability
Intent. Provide a notation‑free, Context‑aware map that keeps four notions distinct and connectable:
U.Method— the abstract way of doing (design‑time concept).U.MethodDescription— the recipe episteme that describes a Method.U.Work(informal: Execution) — the run‑time occurrence of doing (recorded event).U.Actuation— the control output applied to a plant (domain‑specific Work in Sys‑CAL).
The pattern makes the split usable across FPF patterns (Role Assignment & Enactment, Sys-CAL, KD-CAL, Kind-CAL, planned LCA-CAL) and legible across Contexts (SPEM/BPMN for design; PROV-O/SOSA for run; IEC 61131-3/state-space for control).
Applicability. Any time a discussion risks mixing designs with executions, recipes with runs, or workflow with control signals; whenever you need to name or reason about “how we do X”, “the SOP/script/model”, “the actual run”, or “the actuator push”.
Non‑goals. No team workflow, no editors, no tools. No prescriptive file formats. Only conceptual distinctions and safe reasoning moves.
Problem frame
When Method, MethodDescription, Work, and Actuation collapse into one another, models drift:
- DesignRunTag blur. A BPMN process (design graph) is cited as if it had happened.
- Recipe/approval fallacy. An approved SOP (MethodDescription) is treated as proof that the service met its SLO.
- Execution ≟ control. PLC task execution logs are conflated with control outputs (actuation), hiding stability issues.
- Cross‑context homonymy. Activity, task, execution, process, command change sense across Contexts; inferences quietly break.
Forces
Core idea (didactic)
Four boxes, four arrows, zero leakage.
- Box 1 — Method (design). The idea of how to achieve an effect (algorithm, clinical pathway, welding technique).
- Box 2 — MethodDescription (design, epistemic). The written/encoded recipe that describes a Method (SOP, code, BPMN/SPEM model, theorem‑prover script).
- Box 3 — Work (run). The occurrence where a System‑in‑Role enacts (some version of) the Method.
U.Workis the record of this event. - Box 4 — Actuation (run, Sys‑CAL). The control output (setpoint/command) issued to influence a plant during Work.
Arrows (conceptual relations).
MethodDescription ↦ Method(describes) — design stance.Work ↦ MethodDescription(followedRecipe? yes/no/variant) — run stance referencing design.Work ↦ Method(enacts) — run stance referencing the abstract way.Actuation ↦ Work(part‑of / occurs‑during) — control output inside execution.
Each box/arrow is context‑local (SPEM, PROV‑O, IEC…). Cross‑context relations use Bridges (F.7/F.9) with CL/Loss.
Minimal vocabulary (this pattern only)
- Context =
U.BoundedContext(per D.CTX). - Local‑Sense → SenseCell (F.3): the address (Context × sense) for a term like process, task, activity, command.
- Concept‑Set (F.7/F.8): row aligning multiple SenseCells as “what we regard as the same” (after Bridges & losses are declared).
- Window (F.10): temporal/conditional envelope (e.g., July, during test run T42, under load ≥ 70%).
- StatusCell (F.10): laddered status about methods/specs/works (e.g., Approved (spec); Observed/Measured (work)).
Solution — the quartet lens (notation‑free)
Not steps for a team—lenses for a thinker. Use them to sanity‑check any statement about “how”, “script”, “run”, or “signal”.
The stance split (design vs run)
- If the claim is about what should be done or how it is described, you are on the design stance (Method or MethodDescription).
- If the claim is about what happened or what was emitted, you are on the run stance (Work or Actuation).
- Guard rule. Never let a conclusion cross stances without (a) an explicit Bridge kind (interpretation vs substitution), and (b) an acceptable CL (F.7/F.9, F.10).
The recipe/idea split
- Method is the idea; MethodDescription is the recipe describing that idea.
- Different recipes may describe the same method (profiles, languages, detail profiles); one recipe may encode several methods (composite SOP).
- Naming guard. Keep labels distinct: compressive‑strength test (Method) vs ASTM C39‑18 (MethodDescription).
The happening (Work) with signal (Actuation)
- Work is the occurrence (a PROV Activity, an IEC Task executing a program, a lab run).
- Actuation is the control output (setpoint, PWM command, valve open %) emitted during Work.
- You can have Work without Actuation (analysis job), or Actuation without a complex Method (manual push). Many scenarios have both.
The Role Assignment & Enactment touch-points
- Roles (F.4) bind who enacts the Method at run‑time (behavioural masks), not what permissions they hold (RBAC is a different Context).
- Statuses (F.10) bind to the right box: Approved → MethodDescription; Measured/Observed → Work; Satisfied/Violated → Requirement clause about the Work’s outcomes within a Window.
Harmonisation map (Context‑first)
Examples of local SenseCells and safe Bridges. You may keep the exact Contexts from your F.1 cut.
Design (ideas & recipes).
- SPEM/ISO 24744 Context:
SenseCell{Method}= Activity Definition / Task Definition;SenseCell{MethodDescription}= Process Description / WorkProduct (as recipe). - BPMN 2.0 Context:
SenseCell{MethodDescription}= Process (diagram) as design‑time recipe (do not confuse with run). - OWL/Kind-CAL Context: labels for Method kinds (type taxonomies) when needed (naming, not behaviour).
Run (occurrences & outputs).
- PROV‑O Context:
SenseCell{Work}= Activity (time‑bounded occurrence). - SOSA/SSN Context: Observations about Work results (feeds EvidenceStatus).
- IEC 61131‑3 Context:
SenseCell{Work}= Task executes Program (runtime);SenseCell{Actuation}= Output command / setpoint emitted by the program.
Typical Bridges (with intent).
BPMN:Process (design)≈SPEM:Process Definition(design↔design; CL depends on modelling profile; Loss: expressiveness gaps).IEC:Task execution⊑PROV:Activity(run↔run; Loss: control‑specific timing semantics, scan cycles).Actuation (IEC)⋂Activity (PROV)(intersection: the sub‑intervals where outputs are emitted).SOSA:ObservationinterpretsRequirement clause(F.10) about Work outcomes (cross‑StatusModality: epistemic→deontic; never substitution; declare Bridge(kind=Interpretation, CL, Loss)).
Invariants (normative)
- DesignRunTag honesty. Statements about Method or MethodDescription (design) MUST NOT be used as if they were statements about Work or Actuation (run) without an explicit Bridge and Window.
- Box discipline. Every claim about “how”, “recipe”, “run”, or “control output” MUST point to the correct box in the quartet.
- Context locality. Terms (process, activity, task, command) MUST be read as SenseCells in their Contexts (F.3); Cross‑context equivalence is a matter for F.7/F.9 Bridges.
- Status placement. Approved attaches to MethodDescription; Observed/Measured attach to Work; Satisfied/Violated attach to clauses about Work outcomes within a Window (F.10).
- Actuation as Work‑part. Actuation MUST be modelled as occurring within (or as a specialised form of) Work on the run stance; it does not replace Work.
- Naming clarity. Technical/Plain labels for the quartet SHOULD be distinct (F.5); avoid homonymous single‑word labels when Contexts collide.
- Bridge guard. Cross‑context moves MUST declare kind (≈, ⊑, ⊒, ⋂, ⊥, Interpretation), CL, and Loss (F.7/F.9).
Micro‑examples (didactic)
-
Data pipeline deploy (software). Method: “Delta‑load transform”. MethodDescription:
etl_delta.py@v3. Work: nightly run 2025‑07‑14. Actuation: none. Statuses: Spec Approved (governance Context); Work Measured (rows processed) → Evidence for SLO (F.10). -
Valve control (industrial). Method: PID tuning heuristic. MethodDescription: SOP sheet + IEC program. Work: PLC task cycle 18:00–18:30. Actuation: PWM duty sequence. Bridge:
IEC:Task⊑PROV:Activity(CL=2). Observed setpoint tracking interprets requirement “settling time ≤ 5 s”. -
Clinical assay (lab). Method: ELISA. MethodDescription: Kit IFU v7. Work: run batch #B217. Actuation: pipetting robot commands. Statuses: Spec Approved ≠ batch Satisfied (requires evidence at batch Window).
Anti‑patterns & remedies
Worked examples (extended)
Each scenario names Contexts (from your F.1 cut), identifies the quartet boxes, and shows safe Cross‑context moves.
ML service rollout (software + services + sensing)
-
Contexts: SPEM/ISO 24744 (design), PROV‑O (run), SOSA/SSN (sensing), ITIL 4 (services).
-
Quartet:
- Method: Canary deployment strategy.
- MethodDescription: Canary plan document with traffic slices and rollback rules (design Context).
- Work: Two canary runs 2025‑08‑02 10:00–12:00 (PROV‑Activities).
- Actuation: Traffic‑shifting commands (if modeled, they are outputs inside Work; optional in pure software).
-
Statuses (F.10): Spec Approved; Work Observed (latency/err‑rate via SOSA Observations); SLO clause Satisfied in Window if measured ≤ thresholds.
-
Bridge(s): BPMN (if used) Process (design) → PROV Activity (run) Interpretation, CL=2, Loss: path vs time granularity.
Pay‑off: No one infers SLO satisfaction from a plan. Evidence is about Work; the plan stays design‑time.
Industrial furnace control (control + sensing + services)
-
Contexts: State‑space control texts (design), IEC 61131‑3 (run), PROV‑O (run), SOSA/SSN (sensing), ITIL 4 (services).
-
Quartet:
- Method: PID with feed‑forward.
- MethodDescription: Controller tuning sheet + program description.
- Work: PLC task cycles 14:00–14:30 (IEC Task executes Program), Bridged as PROV Activity.
- Actuation: Setpoint & valve duty cycle outputs emitted during Work.
-
Statuses: Spec Approved; Work Observed (temperature curve); requirement settling time ≤ 5 s Satisfied if the observation within Window meets it.
-
Bridge(s):
IEC:Task⊑PROV:Activity(CL=2, Loss: scan‑cycle semantics).SOSA:Observationinterprets requirement clause (CL=3).
Pay‑off: Separates doing from pushing, and both from measuring; compliance judged where it belongs.
Clinical assay
-
Contexts: SPEM/ISO 24744 (design), Lab assay canon (DesignRunTag split as per discipline), PROV‑O (run), SOSA/SSN (sensing).
-
Quartet:
- Method: ELISA.
- MethodDescription: Kit IFU v7 (instructions for use).
- Work: Batch B217 performed 2025‑06‑21 (PROV Activity).
- Actuation: Pipetting robot commands (optional detail).
-
Statuses: Spec Approved; Work Observed (absorbance readings); Quality gate Satisfied within batch Window.
-
Bridge(s): IFU (design) interprets Activity (run) for acceptance (CL=2, Loss: deviations allowed per kit tolerances).
Pay‑off: A clean line from recipe → run → measurement → decision, without role-assignment and status-assertion conflation.
F.11:11.4 Incident response (services + enactment)
-
Contexts: ITIL 4 (services/design), BPMN 2.0 (design), PROV‑O (run).
-
Quartet:
- Method: Triage‑first incident handling.
- MethodDescription: Incident workflow diagram + playbook.
- Work: Handling INC‑3421, 09:10–10:02 (PROV Activity).
- Actuation: none (unless modeling command invocations as outputs).
-
Statuses: Spec Approved; Work Observed (timestamps, response time); SLO “MTTR ≤ 60 min” Satisfied within the incident Window.
-
Bridge(s): BPMN (design) → PROV (run) Interpretation, CL=2, Loss: gateways vs real‑time branching.
Pay‑off: MTTR claims are tied to Work, not to the playbook.
Reasoning primitives (judgement schemas)
Pure mental moves; no storage or workflow is implied.
-
Box classifier
statement s, Contexts fixed ⊢ box(s) ∈ {Method, MethodDescription, Work, Actuation}Reading: Classify any claim by its box (design idea, design recipe, run occurrence, control output). -
Stance firewall
box(s) ∈ {Method,MethodDescription} ⊢ s ∉ {claims about Work outcomes}Reading: A design‑time (stance) statement does not assert a run‑time (stance) outcome. -
Followed‑recipe judgement
Work w, MethodDescription m ⊢ follows(w,m) ∈ {exact, variant, none}Reading: A Work may follow a recipe exactly, with a variant, or not at all; later inferences must respect this value. -
Enactment link
Work w, Method h ⊢ enacts(w,h)Reading: The occurrence enacts the abstract Method (even if several specs describe it). -
Actuation inclusion
Actuation a, Work w ⊢ occursWithin(a,w)Reading: Control outputs are within (or are parts of) a Work interval. -
Observation binding (KD‑CAL handshake)
Observation o about outcome(x) during Window W of Work w ⊢ evidenceFor(w, clause(x,W))Reading: Measurements about a Work outcome within a Window serve as evidence for clauses about that Work. -
Clause evaluation (F.10 handshake)
evidenceFor(w,clause) ⊢ status(clause,w) ∈ {Satisfied, Violated, Inconclusive}Reading: A clause about Work yields a status via the observation set. -
Context locality
term t, Context C ⊢ meaning(t)@C is localReading: A term’s sense is local to its Context; Cross‑context claims require Bridges. -
Bridge application (F.7/F.9)
Bridge B: (X@A) ~kind,CL,Loss~ (Y@B); fact about X ⊢ transferableTo(Y) with penalty(CL,Loss)Reading: Facts may transfer across Contexts only along a declared Bridge, with the stated penalty. -
Version non‑retroactivity
MethodDescription m updated → m' ⊢ ∀ past Work w: follows(w,m')=none (unless w references m')Reading: New recipes don’t rewrite history. -
Composite reasoning
MethodDescription m = m1 ; m2, Work w executes steps w1,w2 ⊢ enacts(w1,m1) ∧ enacts(w2,m2)Reading: Composition on design does not force composition on run, but when it aligns you may relate sub‑runs to sub‑methods. -
SLO attachment guard
SLO clause about service outcome ⊢ attachesTo(Work-window), not MethodDescriptionReading: Service obligations concern what happened within a Window, not the existence of a plan.
Relations
Builds on:
E.10.D1 D.CTX (Context ≡ U.BoundedContext); A.3/A.3.1/A.3.2/A.15 (Method/Spec/Work foundations); Sys‑CAL (Actuation semantics); KD‑CAL (Observation); F.1–F.3 (Contexts → SenseCells); F.10 (Status families & Windows).
Constrains:
- F.4 Role Description: Roles or Statuses must point to the right box (e.g., Approved → MethodDescription; Observed → Work).
- F.5 Naming: Enforce distinct Tech/Plain labels for Method/Spec/Work or Actuation where homonyms threaten.
- F.7/F.9 Bridges: All Cross‑context assertions among quartet terms must go through explicit Bridges with kind/CL/Loss.
Used by. Part C patterns (Sys‑CAL, KD‑CAL, Kind-CAL, LCA‑CAL) and the method/work stack (A.3/A.15/B.1.5) when describing examples, proofs, and cross‑disciplinary mappings.
Migration notes (conceptual)
- Split conflated “process”. Where a single “process” node stands for both plan and run, refactor into MethodDescription (design) and Work (run); add a Bridge if the prose relied on identity.
- Reassign statuses. Move any Approval-like statuses from Work to MethodDescription; move Satisfied/Violated from Spec to clauses about Work within Windows.
- Expose actuation. If control outputs are buried in “execution logs,” mint Actuation SenseCells and relate them within Work.
- Version fences. Past Works keep references to the version of MethodDescription they attempted to follow; don’t update those links retroactively.
- Name collisions. Where task/activity/process appear with mixed meanings, prefix with Contexts and relabel per F.5 (Tech/Plain).
- Backfill Bridges. If earlier text implied Cross‑context equivalence, add explicit Bridges (F.7/F.9) declaring kind/CL/Loss.
Acceptance tests (SCR/RSCR — concept level)
Static conformance checks (SCR)
- SCR‑F11‑S01 (DesignRunTag honesty). Every normative claim about outcomes is attached to Work (with Window), not to Method or MethodDescription.
- SCR‑F11‑S02 (Box placement). Labels and statuses appear on the correct box (e.g., Approved on MethodDescription only).
- SCR‑F11‑S03 (Actuation inclusion). All Actuation statements are modeled as within a Work interval.
- SCR‑F11‑S04 (Context discipline). Each quartet term is expressed as a SenseCell with its Context; no Cross‑context identity is asserted here.
- SCR‑F11‑S05 (Bridge guard). Any Cross‑context reasoning among quartet terms references an explicit Bridge with kind/CL/Loss.
Regression checks (RSCR)
- RSCR‑F11‑E01 (Spec update). When a MethodDescription changes, previous Works remain valid and unchanged; their statuses don’t shift unless re‑evaluated with explicit rationale.
- RSCR‑F11‑E02 (Bridge drift). If a Context updates, revisit Bridges that touch quartet terms; adjust CL/Loss only via F.7/F.9.
- RSCR‑F11‑E03 (Status drift). Adding new statuses does not move them across boxes (e.g., no new “Work‑Approved”).
- RSCR‑F11‑E04 (Signal creep). Introducing new Actuation details does not erase or replace Work context.
Didactic distillation (90‑second script)
“When you talk about how something is done, decide which of the four boxes you mean. Method is the idea (the way). MethodDescription is the recipe (the description). Work is the happening (what actually occurred). Actuation is the control push (signals emitted during Work). Keep design and run as distinct stances. Plans and approvals live in the design stance; measurements and obligations live in the run stance within Windows. Words like process, task, activity, command are context‑local—say process (BPMN), activity (PROV), task (IEC). If you must relate them, draw a Bridge and declare its kind, CL, and Loss. For compliance, don’t point at the plan—point at Work, show Observations, and judge clauses in F.10. Hold this quartet in your head and you’ll stop mixing plans with facts, signals with outcomes, and names across Contexts. Everything else—naming (F.5),
U.RoleDescription(F.4),U.RoleAssignment, and performed-work attribution (A.2.1/F.6)—falls into place.
F.11:End
F.12 — Service Acceptance–Work Evidence Link
“Judge promises on what happened, not on what was planned.” Status. Architectural pattern. Builds on: F.1 context of meaning (U.BoundedContext); F.2 Term Harvesting; F.3 Intra‑Context Sense Clustering; F.5 Naming Discipline; F.7/F.9 Bridges & CL; F.10 Status Families & Windows; F.11 Method Quartet Harmonisation; A.2.3 U.PromiseContent. Coordinates with. KD‑CAL (Observation/Characteristic/Scale); Sys‑CAL (Work or Actuation contexts). Non‑goals. No team workflows, no tooling, no editorial procedures. This pattern specifies how to think about acceptance, not how to store or operate systems.
Intent & applicability
Intent. Provide a conceptual binding that turns a service promise (SLO/SLA clause) into a clear, local, time‑bounded judgement about actual Work, using Observations as evidence and explicit Bridges where Cross‑context notions must meet. The result is a Status (Satisfied/Violated/Inconclusive) that attaches to the clause‑about‑that‑Work‑in‑that‑Window.
Applicability. Any situation where a service promise clause (promise content) is published (availability, latency, safety margin, response time, quality gate, compliance duty) and its fulfilment must be decided from what occurred. Works across digital services, industrial control, laboratory processes, clinical pathways, logistics, etc.
Problem frame
- Plan ≠ proof. Diagrams and playbooks are treated as if they demonstrated fulfilment.
- Signal ≠ outcome. Control signals (Actuation) are mistaken for the consumer‑perceived outcome (the outcome promised by the clause).
- Global meanings. Availability, incident, latency are used as if universal, ignoring context‑local senses.
- Unstated translation. Metrics from one canon are mapped to clauses from another without declaring losses.
- Timeless verdicts. Judgements are asserted with no explicit Window (day, month, batch).
Forces
Core idea (didactic)
Bind promises to runs with measurements in time. Acceptance is a quadruple of anchors (all context‑local):
- ClauseCell — a deontic/Standardual SenseCell stating the promise (availability ≥ 99.9%, MTTR ≤ 60 min, temperature within band).
- WorkCell — a SenseCell for the Work that enacted service delivery work in the relevant situation.
- MeasureCell — a SenseCell for the Observation/Characteristic used as evidence (KD‑CAL).
- Window — the explicit period in which the judgement is made (F.10).
A Predicate compares the Measure against the Clause within the Window. The Status (Satisfied/Violated/Inconclusive) attaches to ClauseCell@Window about WorkCell, never to a plan.
Minimal vocabulary (this pattern only)
- ClauseCell. A context‑local deontic/Standardual concept (SLO, obligation, target), typically from services/deontics Contexts (e.g., ITIL 4, ODRL).
- WorkCell. A context‑local run‑time occurrence (PROV Activity, IEC Task Execution, etc.).
- MeasureCell. A context‑local observation concept (KD‑CAL Observation over a Characteristic with a Scale/Unit).
- Window. A time envelope (calendar month, batch, incident interval, shift) per F.10.
- Predicate. A clause‑shape: threshold, percentile, count‑within‑limit, band‑conformance, etc.
- Bridge. An explicit Cross‑context relation with kind/CL/Loss (F.7/F.9).
Context discipline. Terms like availability, activity, task, observation are always read as context‑local. Cross‑use requires a Bridge.
The binding, as five mental rules (notation‑free)
R1 — Attachment rule.
An acceptance verdict attaches to the Clause, scoped by a Window, about a specific Work:
status(ClauseCell, WorkCell, Window) ∈ {Satisfied, Violated, Inconclusive}.
Reading: We do not place “Satisfied” on the plan or on the whole service concept.
R2 — Evidence rule. Only Observations (MeasureCell) that refer to the outcome of the same Work and lie within the Window may support the verdict. Reading: Control commands and approvals are not evidence of outcome.
R3 — Predicate rule. Every ClauseCell is read with a Predicate schema that defines how Measures decide:
- Threshold:
value ≥/≤ target. - Percentile:
Pₚ(value) ≤ target. - Ratio/Share:
good_time / total_time ≥ target. - Count‑within‑limit:
count(events of type E) ≤ target. - Band:
min(value) ≥ L ∧ max(value) ≤ U.
R4 — Bridge rule. If Clause, Work, and Measure live in different Contexts, apply declared Bridges with kind, CL, and Loss notes. Reading: Without a Bridge, do not presume transferability of meanings.
R5 — Window rule. Every verdict is time‑bounded. Changing the Window can change the result; no retroactivity from new clauses or specs (cf. F.10).
Clause templates (conceptual schemata)
These are shapes of meaning, not data fields.
- Availability (share‑of‑time)
- ClauseCell: service availability ≥ 99.9% monthly (services Context).
- MeasureCell: uptime indicator over Work (KD‑CAL).
- Predicate:
good_time/total_time ≥ 0.999. - Window: calendar month.
- Bridge: from monitor semantics → consumer‑perceived availability (kind: proxy; CL: 2; Loss: blind to partial degradations).
- Latency (percentile)
- ClauseCell: p95 latency ≤ 120 ms during incidents (services Context).
- MeasureCell: response time observation for the same Work episode (KD‑CAL).
- Predicate:
P95(latency) ≤ 120ms. - Window: incident interval.
- Bridge: from request‑level telemetry → service‑level promise (kind: aggregation; CL: 2; Loss: sampling bias).
- Safety margin (band)
- ClauseCell: temperature ∈ [L,U] during batch (deontics/quality Context).
- MeasureCell: process temperature observation (KD‑CAL).
- Predicate:
min ≥ L ∧ max ≤ U. - Window: batch run interval (Work).
- Bridge: not needed if Measure and Clause are in the same Context; otherwise declare.
- MTTR (count‑within‑limit + duration)
- ClauseCell: MTTR ≤ 60 min per incident.
- MeasureCell: timestamps of Work phases (start fix → restore).
- Predicate:
restore_time − start_fix ≤ 60 min. - Window: each incident’s Work interval.
- Bridge: BPMN design steps → PROV Work Interpretation (CL=2; Loss: gateways ≠ real branching).
Invariants (normative)
- DesignRunTag split. Clauses live on the design stance; judgements live on the run stance about Work (F.11).
- Context locality. All terms are context‑local; Cross‑context meaning flows only across declared Bridges.
- Observation‑only evidence. Verdicts require Observations that about‑refer to Work outcomes; Actuation and Approvals are not sufficient.
- Window explicitness. Every verdict carries a Window; no timeless acceptance.
- Predicate declared. The Clause’s Predicate is explicit; no hidden aggregation or default percentile.
- Non‑retroactivity. Updating clauses or specs does not alter past verdicts; re‑evaluation must be explicit.
- One‑Work focus. A verdict references a specific Work (or a defined population of Works) matched to the Clause’s scope.
- Loss honesty. Each Bridge states kind,
CL, and loss; wider claims require Bridges with the neededCLor same-Context alignment. - No detached pass. When the ClauseCell is a
U.PromiseContent(service promise clause),Satisfiedabout a Work is admissible only if that Work also delivers the promised outcome spec for the clause (A.2.3:8.1fulfilsPromiseContent). This keeps acceptance on the same delivery evidence base (Work facts + Δ anchors + Observations) and prevents “pass verdict separate from delivery”.
Micro‑examples (didactic, multi‑domain)
SaaS uptime (services + sensing)
- Contexts: ITIL 4 (Clause), PROV‑O (Work), SOSA/SSN (Measure).
- ClauseCell: availability ≥ 99.9% monthly.
- WorkCell: service delivery work Activities during June.
- MeasureCell: uptime observation from synthetic probes.
- Predicate: share‑of‑time ≥ 0.999.
- Bridge: probe result → user availability (kind: proxy; CL: 2; Loss: regional gaps).
- Verdict: Satisfied (June) if the ratio holds; attaches to Clause@June about those Works.
Furnace band (industrial control)
- Contexts: quality/deontics canon (Clause), IEC 61131‑3/PROV (Work), KD‑CAL (Measure).
- ClauseCell: product temperature within [720,740] °C during soak.
- WorkCell: soak phase Work interval.
- MeasureCell: thermocouple Observations (KD‑CAL).
- Predicate: band conformance.
- Bridge: IEC task interval → PROV Activity (Interpretation, CL=2).
- Verdict: Violated if any measured value exits the band.
Incident MTTR (services + enactment)
- Contexts: ITIL 4 (Clause), PROV‑O (Work).
- ClauseCell: MTTR ≤ 60 min per incident.
- WorkCell: each incident’s handling Activity.
- MeasureCell: timestamps (Observed facts) of start‑fix and restore events.
- Predicate: duration ≤ 60 min.
- Bridge: BPMN steps → PROV Activity (Interpretation, CL=2).
- Verdict: Satisfied if the measured interval meets the target.
Anti‑patterns & remedies
Extended worked examples
Each example identifies Contexts, the quadruple ⟨ClauseCell, WorkCell, MeasureCell, Window⟩, any Bridge(s), and the Predicate. The verdict attaches to ClauseCell@Window about WorkCell.
CDN latency across regions (services + sensing + types)
- Contexts. ITIL 4 (Clause), PROV‑O (Work), SOSA/SSN (Measure), OWL 2 (type labels).
- ClauseCell. p95 end‑user latency ≤ 200 ms per region per month.
- WorkCell. delivery Activities per region during the month (PROV).
- MeasureCell. response‑time Observations tagged by region and path (SOSA/SSN).
- Predicate. For each region in the Window,
P95(latency) ≤ 200 ms. - Bridges. probe→user (kind: proxy; CL 2; Loss: last‑mile bias).
- Verdict. Region‑wise statuses; a global “all‑regions met” is the logical AND of region statuses (declare this aggregation explicitly).
- Manager cue. “Green map ≠ one green verdict”; acceptance is per Clause per Window per Work population.
Stroke care: door‑to‑needle (method + enactment + status)
- Contexts. clinical guideline canon (Clause), PROV‑O (Work), SOSA/SSN (Measure), F.10 (status windows).
- ClauseCell. 90% of ischemic‑stroke episodes achieve door‑to‑needle ≤ 30 min per quarter.
- WorkCell. Population of patient‑episode Activities started in the quarter.
- MeasureCell. Timestamps Observation of door and needle events (KD‑CAL).
- Predicate.
|{episodes with (needle−door ≤ 30)}| / |{episodes}| ≥ 0.9. - Bridges. EHR event semantics → PROV Activity (Interpretation, CL 2; Loss: missing triage tags).
- Verdict. If data gaps exceed a declared tolerance, status is Inconclusive rather than “Satisfied by assumption”.
Cold‑chain warehouse (control + sensing + deontics)
- Contexts. quality/deontics canon (Clause), IEC 61131‑3/PROV (Work), SOSA/SSN + ISO 80000‑1 (Measure).
- ClauseCell. temperature ∈ [2,8] °C for ≥ 99.5% of each day.
- WorkCell. The warehouse’s daily storage Activity.
- MeasureCell. Thermistor Observations with calibrated units (KD‑CAL/ISO 80000‑1).
- Predicate.
(good_time / 24h) ≥ 0.995. - Bridges. sensor position → product exposure (kind: proxy; CL 2; Loss: stratification).
- Verdict. Violated if any day fails; annotate Loss to communicate assurance limits.
SaaS incident MTTR (services + enactment)
- Contexts. ITIL 4 (Clause), PROV‑O (Work).
- ClauseCell. MTTR ≤ 60 min per incident.
- WorkCell. Each incident’s handling Activity.
- MeasureCell. Observations of start‑fix and restore timestamps.
- Predicate.
(restore − start_fix) ≤ 60 min. - Verdict. Per incident; a quarter’s report is an explicit aggregation of incident‑scoped verdicts.
Reasoning primitives (judgement schemas, notation‑free)
These are mental inferences; they neither read nor write artefacts. Each reads “if these thoughts hold, you may safely conclude …”.
-
Clause–Work match
covers(ClauseCell, WorkCell) ⊢ admissible(ClauseCell, WorkCell)Reading: The Clause speaks about the kind of Work under judgement (scope alignment). -
Window adequacy
Window is explicit ∧ Window intersects WorkCell-occurrence ⊢ admissible(Window)Reading: There is a concrete time envelope; the Work actually occurred within it. -
Evidence sufficiency
Observations E about WorkCell within Window ⊢ sufficient(E)Reading: There exists a non‑empty set of outcome Observations relevant to the Work and Window. -
Evidence insufficiency → Inconclusive
¬sufficient(E) ⊢ status = Inconclusive(ClauseCell, WorkCell, Window)Reading: Absent admissible evidence, do not guess; mark Inconclusive. -
Predicate evaluation
sufficient(E) ∧ eval(Predicate, E) = true ⊢ status = Satisfied(ClauseCell, WorkCell, Window)sufficient(E) ∧ eval(Predicate, E) = false ⊢ status = Violated(ClauseCell, WorkCell, Window)Reading: The Predicate (threshold/percentile/share/band/…) decides directly from E. -
Bridge discipline
usesCrossContexts(ClauseCell, WorkCell, MeasureCell) ∧ Bridges B declared ⊢ admissible(B)usesCrossContexts … ∧ ¬admissible(B) ⊢ status = InconclusiveReading: Cross‑context comparisons require explicit Bridges; without them, Inconclusive. -
CL aggregation (assurance hint)
Bridges B = {b₁…bₖ} ⊢ effectiveCL = min(CL(bᵢ))Reading: The weakest Bridge governs the assurance level communicated with the verdict (advisory to B.3 calculus). -
Population clauses
Clause quantifies over population W = {w₁…wₙ} ⊢ status = agg({status(Clause, wᵢ, Window)})Reading: For “≥ p%”‑style clauses, compute per‑Work verdicts, then apply the Clause’s quantifier. -
Non‑retroactivity
newClause or newMonitor after Window ⊢ doesNotAlter(status@Window)Reading: Later changes do not rewrite past verdicts. -
Conflict exposure
two admissible Bridge sets ⇒ conflicting statuses ⊢ escalate as Inconclusive, expose Loss notesReading: If equally defensible translations disagree, the honest outcome is Inconclusive plus an explanation.
Relations (with other patterns)
-
Builds on: F.1 (Contexts): keeps all meanings local. F.2–F.3: provide the SenseCells that become Clause/Work/Measure anchors. F.5: ensures labels for Clause/Work/Measure and Windows are didactically clear. F.7–F.9: supply Bridge kinds / CL and loss semantics. F.10: defines Status families and Window constructs. F.11: protects Method, MethodDescription, Work, and Actuation distinctions.
-
Uses (Part C patterns). KD‑CAL (Observation/Characteristic/Scale/Unit). Sys‑CAL (Work or Actuation Contexts). Kind-CAL (type labels for populations or cohort selection).
-
Constrains: Later reporting and assurance rules (B.3) must not collapse CL/Loss; they report them alongside status.
Migration notes (conceptual)
- Clause revisions. Introduce a new ClauseCell; keep old verdicts intact (Non‑retroactivity).
- Monitor changes. Update or replace Bridges (kind/CL/Loss). Future verdicts use the new Bridge; past ones are annotated, not rewritten.
- Scope corrections. If evidence was about the wrong Work, retire the verdict and restate the quadruple; do not patch by redefining the Clause.
- Unit harmonisation. When scales/units change, apply KD‑CAL conversions inside the Measure’s Context; if Cross‑context mapping is needed, declare a Bridge.
- Population refinement. If a Clause’s quantifier is refined (e.g., per‑region → per‑AZ), treat each as a new ClauseCell or a new Window partition; avoid hidden re‑baselining.
- Proxy retirement. When direct Observations become available, prefer them; keep earlier proxy‑based verdicts with their CL/Loss notes.
Acceptance tests (SCR/RSCR — concept‑level)
Static conformance (SCR)
- SCR‑F12‑S01 (Quadruple present). Every acceptance statement names ClauseCell, WorkCell, MeasureCell, and Window.
- SCR‑F12‑S02 (context‑locality). Each of the three Cells cites a Context (U.BoundedContext).
- SCR‑F12‑S03 (Evidence admissibility). The Observation(s) are about the same Work and lie within the Window.
- SCR‑F12‑S04 (Predicate explicit). The Predicate shape is stated (threshold/percentile/share/band/…) with any needed aggregation scope.
- SCR‑F12‑S05 (Bridge discipline). Any Cross‑context use declares Bridge(kind, CL, Loss).
- SCR‑F12‑S06 (Status trichotomy). The verdict is exactly one of {Satisfied, Violated, Inconclusive} and attaches to ClauseCell@Window about WorkCell.
- SCR‑F12‑S07 (Unit honesty). MeasureCell specifies Characteristic, Scale, Unit (KD‑CAL).
- SCR‑F12‑S08 (Temporal honesty). No verdict is asserted without a Window; no clause retroactively changes past verdicts.
Regression checks (RSCR)
- RSCR‑F12‑E01 (Bridge update). When a Bridge CL changes, past verdicts stand; future verdicts reference the new CL; reports surface the difference.
- RSCR‑F12‑E02 (Edition churn). When a Context’s canon updates, Cells reference the edition; old verdicts remain bound to their original editions.
- RSCR‑F12‑E03 (Scope drift guard). If the Work population definition changes, verdicts are not silently re‑interpreted; new verdicts cite the new population.
- RSCR‑F12‑E04 (Window partition). Changing from monthly to weekly windows creates new verdicts; monthly summaries are expressed as explicit aggregations of weekly statuses.
- RSCR‑F12‑E05 (Proxy retirement). When direct Observations replace proxies, the status computation is re‑run forward‑only; past proxy‑based verdicts retain their CL/Loss annotations.
F.12:15.3 Didactic distillation (60‑second recap)
Bind promises to runs with measurements in time. Name the Clause, the Work it talks about, the Measure of what actually happened, and the Window. Evaluate the Clause’s Predicate on Observations about that Work in that Window. If any concept crosses Contexts, declare a Bridge with kind/CL/Loss. The verdict (Satisfied/Violated/Inconclusive) attaches to Clause@Window about Work, never to a plan or to the abstract service.
F.12:End
Lexical Continuity & Deprecation
“Change names without changing history.” Status. Architectural pattern. Builds on: F.1 context of meaning; F.2 Term Harvesting; F.3 Intra‑Context Clustering (SenseCell); F.5 Naming Discipline; F.7 Concept‑Set (row) construction; F.8 Mint‑or‑Reuse decision; F.9 Bridges; F.10 Status windows. Coordinates with. Part C CALs when canon editions change (Sys/KD/Type/Method/LCA). Non‑goals. No registries, workflows, editors, or storage formats. No by‑name Cross‑context equivalence. No silent rewrites of old texts.
Intent & applicability
Intent. Provide a conceptual discipline for evolving labels (for SenseCells, Concept‑Set rows, and Role Description names) so that:
- new names clarify without erasing what earlier texts meant;
- aliases remain local to Contexts;
- genuine sense changes cause explicit splits/merges (F.7/F.9), not cosmetic renames.
Applicability. Whenever you consider renaming, aliasing, deprecating, or retiring any label in FPF: a SenseCell label in a Context, a Concept‑Set row label, or a Role Description name.
Problem frame
Unification efforts rot when names drift faster than senses or, worse, when senses change under a constant name.
- Silent relabeling. A new label is introduced as if nothing changed; readers cannot connect past to present.
- Alias bloat. Synonyms accumulate without discipline; reading becomes guesswork.
- Cross‑context aliasing. A single alias is made to stand for different Contexts (“global slang”), defeating locality.
- Retroactive edits. Old texts are silently rewritten to today’s names, corrupting provenance.
Forces
Core idea (didactic)
Treat names as lenses, not objects. The thing that persists is the sense (a SenseCell inside a Context, or the Cross‑context alignment embodied by a Concept‑Set row, or a Role Description that points to such sense). Names are lenses we look through. When the lens improves, we record a continuity relation between lenses; when the underlying sense changes, we split/merge the thing, then name accordingly.
Contexts keep names local. A label (including aliases) always belongs to one context or to one Concept‑Set row. Cross‑context similarity is handled by Bridges (F.9), never by shared names.
Minimal vocabulary (this pattern only)
- Legacy label — a previously used label in the same Context (or same Concept‑Set row / Role Description).
- Preferred label — the current F.5‑conformant label for that item.
- Alias (context‑local) — a read‑path from a legacy label to the preferred one inside the same Context (or the same row/template). For writing, prefer the current label.
- Continuity relation — a small set of relations over labels (below) that capture whether a change is just wording or a real sense change.
- Epoch note — an informative time marker (“used before 2024‑07”) attached to a legacy label to help readers of old texts. (No storage format implied.)
Solution — Continuity, not “registries”
Rather than maintain a tool or workflow, think with five continuity relations. Use the least-committing relation that tells the truth.
Continuity relations (normative meanings)
-
renames(label_old → label_new)— wording improved, sense unchanged. Use when: Same SenseCell / same Concept‑Set row / same Role Description; only the lexical form changed to satisfy F.5 (morphology, disambiguation, plain/tech harmony). Effect:label_oldbecomes a context‑local alias oflabel_new; both resolve to the same SenseCell, Concept-Set row, or Role Description. Past texts remain valid. -
aliases(label_legacy ↔ label_pref)— legacy synonym kept for reading. Use when: A common historical synonym exists in the same Context for the same SenseCell. Effect: Two‑way read‑path only; writing useslabel_pref. Keep at most one legacy alias per register to avoid bloat. -
splits(label_old ⇒ {label_A, label_B})— one label covered multiple senses; now separated. Use when: Your SenseCell was really two local senses; F.3 has split them; or a Concept‑Set row is refactored into two rows. Effect:label_oldis deprecated (read‑path allowed to a disambiguation note); new writing useslabel_A/label_B. No claim that either continues the old label wholesale. -
merges({label_A, label_B} ⇒ label_new)— two labels now recognized as one sense. Use when: F.3 shows same SenseCell; or two Concept‑Set rows collapse after F.9 raised CL sufficiently. Effect:label_Aandlabel_Bbecome aliases oflabel_new. Keep one epoch note on each legacy label. -
retires(label_old)— name withdrawn without successor. Use when: The label proved misleading and no single successor exists (e.g., it spanned different Contexts, or it was metaphorical). Effect: Only a read‑warning remains (“avoid in new writing; see Contexts X/Y”). Readers are pointed to Bridges or to multiple rows.
Important: All five relations are context‑local (SenseCell level) or row‑local (Concept‑Set). Never use them to “alias” across Contexts. If a change crosses Contexts, it is not a rename; it requires a Bridge (F.9) and often a split/merge of rows (F.7).
Invariants (normative)
- Locality of alias.
aliases(-)andrenames(-)operate within one context (SenseCell) or within one Concept‑Set row / Role Description. - Truth over comfort. If the sense changed, use
splits/merges(and possibly adjust rows/Bridges), notrenames. - Non‑retroactivity. Past texts remain phrased as written; continuity only adds read‑paths, never rewrites.
- Alias parsimony. per Context and per row, keep ≤ 1 legacy alias per register (Tech/Plain); prefer the one readers will most likely encounter.
- Prefer present for writing. In normative writing, use the current preferred label (F.5). Aliases are for reading comprehension.
- Bridge discipline. If a label shift would require crossing Contexts to “explain”, it is not a rename; use F.9 Bridge and, if needed, refactor the Concept‑Set row(s).
- Epoch honesty. When declaring continuity, attach a succinct epoch note (“pre‑2023 usage”) if it aids readers.
Self‑checks (mental, not procedural)
- Same‑sense test. Can you point to the same SenseCell (or same row) before and after? If yes →
renames/aliases. If no →splits/merges. - Context test. Does the change stay inside one context? If it needs two Contexts to explain, it’s a Bridge, not a rename.
- Reader test. What two legacy strings would a newcomer actually meet in old texts? Keep those two as aliases; drop the rest.
- History test. Does your “continuity” require editing old claims? If yes, you’re attempting a retroactive rewrite—stop.
- Didactic test. Can you explain the continuity relation in one sentence? If not, you are hiding a sense change.
Micro‑examples (illustrative)
Pure rename inside a Context (ITIL → clearer plain label)
Context: ITIL 4 (services).
Old: “SLO” (plain: service target) → New: “service‑level objective” (plain unchanged).
Relation: renames("SLO" → "service‑level objective").
Why: F.5 morphology & expansion; SenseCell unchanged (same clause semantics).
Effect: Old guidance remains readable; new writing spells out the term.
Alias for a common legacy synonym (Sys‑CAL)
Context: state‑space control (design).
Preferred: “actuation”. Legacy: “control output”.
Relation: aliases("control output" ↔ "actuation").
Why: Same SenseCell; legacy term appears in older textbooks.
Effect: Readers resolve to the SenseCell; new texts use “actuation”.
Split of a muddled local sense (Enactment)
Context: BPMN 2.0.
Legacy label “process” was used to mean both “collaboration” and “executable process” in a team’s prose.
Relation: splits("process" ⇒ {"collaboration","executable‑process"}).
Effect: The single Concept‑Set row becomes two; old label is deprecated with a disambiguation note.
Merge after clustering raised confidence (Kind-CAL row)
Two Concept‑Set rows {“DBaaS”, “Database‑Service”} converge after F.3 within the same context profile and F.9 raised CL.
Relation: merges({"DBaaS","Database‑Service"} ⇒ "Database‑Service").
Effect: “DBaaS” becomes a legacy alias with an epoch note.
Not a rename: Cross‑context temptation (forbidden)
Contexts: BPMN (design graph) vs PROV‑O (run activity). Temptation: “Let’s rename process to activity.” Diagnosis: Cross‑context; different SenseCells. Action: No continuity relation. Keep labels; if needed, declare a Bridge (F.9) explaining design→run mapping with CL/Loss.
Anti‑patterns & remedies
Extended examples
KD‑CAL × Services — metric target labels over time
- Contexts: ITIL 4 (services, design); SOSA/SSN (sensing, run).
- Before: Role Description used “SLO” (plain “target”) and readers often saw “service target”.
- Move:
renames("SLO" → "service‑level objective")(Context: ITIL). Keepaliases("service target" ↔ "service‑level objective"). - Why: Same local sense; clearer morphology for F.5; SOSA/SSN labels untouched.
- Pay‑off: Runtime Observations (SOSA) are later compared to service‑level objective clauses (ITIL) without Cross‑context aliasing.
Sys‑CAL × LCA‑CAL — separating execution vs actuation
- Contexts: IEC 61131‑3 (run); state‑space control texts (design).
- Temptation: Rename “task execution” to “actuation” “to sound control‑ish”.
- Diagnosis: Different Contexts; different SenseCells (program run vs control output).
- Move: No rename. Keep labels; later add Bridge “
execution (IEC)produces signals that realiseactuation (control)” with CL stating partial coverage. - Pay‑off: Plant narratives stop calling programs “actuators”; runtime vs control semantics stay crisp.
Kind-CAL × method/work stack — false merge avoided
- Contexts: OWL 2 (types, design); SPEM 2.0 (methods, design).
- Issue: A row labeled “Class” tried to absorb “WorkProductKind” by a
renames. - Diagnosis: Not same sense; different calculi (type vs artefact category).
- Move: Split the row:
splits("class" ⇒ {"type‑class","work‑product‑category"}). - Pay‑off: Downstream Role Descriptions can point to the correct SenseCell without redefining ontological commitments.
Enactment × KD‑CAL — retiring a misleading metaphor
- Context: BPMN 2.0 (design).
- Legacy: Team jargon “heartbeat” used for a timer event. Newcomers confuse it with sensor heartbeats (KD‑CAL).
- Move:
retires("heartbeat")in BPMN Context with note “use timer event; ‘heartbeat’ refers to sensor liveness in KD‑CAL”. - Pay‑off: Two different ecosystems stop colliding on the same catchy word.
Concept‑Set row refactor after rising CL
- Rows:
{“DBaaS”, “Database‑Service”}representing service notions across several Contexts. - F.3 + F.9 outcome: High CL; evidence of same Cross‑context alignment.
- Move:
merges({"DBaaS","Database‑Service"} ⇒ "Database‑Service")at row level. Both legacy labels become row‑local aliases with epoch notes. - Pay‑off: One clearer row label; old articles still understandable.
Reasoning primitives (judgement schemas, notation‑free)
Each judgement is a pure thought: premises ⇒ safe conclusion. No storage, no workflow, no roles.
Let ContextOf(ℓ) be the Context of label ℓ (when ℓ names a SenseCell); rowOf(ℓ) the Concept‑Set row (when ℓ names a row); senseOf(ℓ) the SenseCell it denotes (if local); pref(thing) the current preferred label of a SenseCell / row / Role Description.
Same‑sense & same‑place
ContextOf(ℓ₁)=ContextOf(ℓ₂) ∧ senseOf(ℓ₁)=senseOf(ℓ₂) ⊢ mayRename(ℓ₁→ℓ₂)
Reading: If two labels denote the same SenseCell in the same Context, a rename is legitimate.
F.13:12.2 -Local alias
ContextOf(ℓ₁)=ContextOf(ℓ₂) ∧ senseOf(ℓ₁)=senseOf(ℓ₂) ⊢ aliases(ℓ₁↔ℓ₂)
Reading: Legacy synonym can be kept as a read‑path; writing uses pref.
Split detection
coversMultipleLocalSenses(ℓ) ⊢ splits(ℓ ⇒ {ℓA,ℓB,… })
Reading: If one label straddles several local senses, declare a split and prefer the new precise labels.
Merge admission
ContextOf(ℓA)=ContextOf(ℓB) ∧ senseOf(ℓA)=senseOf(ℓB) ⊢ merges({ℓA,ℓB} ⇒ ℓN)
Reading: Once F.3 shows identity of sense within a Context, merging labels into one preferred label is safe.
Retirement
misleading(ℓ) ∧ ¬∃ℓ' sameSense(ℓ,ℓ') ⊢ retires(ℓ)
Reading: If a label misleads and has no single successor, retire it and point readers to relevant Contexts/rows.
Cross‑context guard
ContextOf(ℓ₁) ≠ ContextOf(ℓ₂) ⊢ ¬mayRename(ℓ₁→ℓ₂)
Reading: Different Contexts forbid rename/alias; any relation goes to Bridge (F.9).
Writing discipline
thing t ⊢ writeWithPreferred(t) = pref(t)
Reading: Normative prose uses the current preferred label; aliases are for reading.
Reading resolution
legacyLabel ℓ ⊢ readResolve(ℓ) = ⟨thing, pref(thing), epoch?⟩
Reading: A reader can mentally resolve a legacy label to the thing and its present name, with epoch hint if needed.
Alias budget
aliasesFor(thing, register=r) = A ⊢ |A| ≤ 1
Reading: Keep at most one legacy alias per register (Tech/Plain) for any one thing.
Row‑level continuity
rowOf(ℓA)=rowOf(ℓB)=R ∧ intension(R) stable ⊢ mayRenameRow(R,ℓB)
Reading: A row label can change if the row’s membership/intension did not change; otherwise refactor rows first (F.7).
Relations
Builds on: F.1 context of meaning (keeps locality), F.2 Harvesting (provides attested strings), F.3 Clustering (establishes SenseCells), F.5 Naming Discipline (supplies preferred labels), F.7 Concept‑Set rows, F.8 Mint‑or‑Reuse, F.9 Bridges, F.10 Status windows, F.11 Method harmonisation, F.12 Service acceptance.
Constrains:
- F.5 (Naming): may select preferred labels only after applying these continuity relations.
- F.7 (Rows): row relabels require row intension stability; otherwise use split/merge rows.
- F.9 (Bridges): Cross‑context changes must not be expressed as renames/aliases.
Used by. All Part C patterns when editions shift; all examples and tutorials when teaching with legacy terminology.
Migration notes (conceptual playbook)
- Ask the same‑sense question first. If the underlying SenseCell/row is unchanged, prefer
renames; else reach forsplits/merges. - Keep it inside the Context. If your explanation crosses Contexts, stop—this is Bridge territory (F.9), not a rename.
- Prefer clarity over fashion. Rename only when the new label removes a real ambiguity (F.5 criteria), not to chase style.
- Limit nostalgia. Admit one legacy alias in each register that readers will most likely meet; leave the rest to footnotes in examples.
- Deprecate with kindness. When retiring a label, add a one‑line pointer note (e.g., “see
timer eventin BPMN; ‘heartbeat’ in KD‑CAL means sensor liveness”). - Rows before names. If a rename request coincides with a shift in what the row covers, refactor rows (F.7) first, then choose labels.
- Edition bumps. When a canon updates, check labels used in that Context: if definitions shift, it’s a split/merge; if not, you may
renamesfor style/uniformity. - Teach the delta. In primers, show a mini table with legacy → preferred pairs only where readers will encounter both.
Acceptance tests (SCR/RSCR — concept‑level)
Static conformance (SCR)
- SCR-F13-S01 (context-local continuity). Every
renames/aliasesrelates labels within the same context or the same row/Role Description; none cross Contexts. - SCR‑F13‑S02 (Truthfulness). For each
renames, there exists an unchanged SenseCell/row; otherwise the move is rejected. - SCR‑F13‑S03 (Alias budget). For any one thing and register, the number of deprecated aliases is ≤ 1.
- SCR‑F13‑S04 (Non‑retroactivity). No requirement or suggestion to rewrite past texts is present; continuity is expressed as read‑paths.
- SCR‑F13‑S05 (Row integrity). A row rename occurs only when the row’s intension is stable; if membership changed, a row split/merge is documented (F.7).
- SCR‑F13‑S06 (Bridge discipline). No alias/rename is used to imply Cross‑context sameness; any such relation belongs under F.9.
Regression (RSCR)
- RSCR‑F13‑E01 (Edition drift audit). When a canon edition changes, all labels from that Context are checked against definitions; moves are
renamesif senses stable, elsesplits/merges. - RSCR‑F13‑E02 (Alias creep check). Periodically ensure alias budgets remain within ≤ 1 per register; surplus aliases are pruned.
- RSCR‑F13‑E03 (Bridge leak check). Scan continuity notes for Cross‑context hints; any such case is converted into a Bridge or deleted.
- RSCR‑F13‑E04 (Didactic continuity). Sampling of examples shows that readers can resolve legacy labels to current ones without confusion (via the continuity notes).
Didactic distillation (60‑second script)
Names are lenses. The thing that persists is the sense (a SenseCell in a Context, a Concept‑Set row, a Role Description). When you improve a lens, use
renamesoraliasesinside that same place. When the thing changes, say so withsplits/merges—and adjust rows/Bridges accordingly. Never rename across Contexts. Keep at most one legacy alias per register. Do not rewrite history; give readers read‑paths and brief epoch notes. With this discipline, you can clarify language without erasing meaning, and your models keep both continuity and truth.
F.13:End
Anti-Explosion Control for Role and Status Name Families
Status: Stable
"Name less; recover the kinds first."
Type. Architectural pattern.
Status. Stable.
Normativity. Normative.
Builds on: A.2 for work-facing U.Role; A.2.1 for U.RoleAssignment; A.2.5 for role state; A.2.7 for context-local role relation structure; A.15.1 for performed work; F.4 for RoleDescription; F.5 for local naming discipline; F.8 for mint-or-reuse decisions; F.9 for cross-context bridges; F.10 for status families and windows; F.18 for durable naming; A.6.5 for relation-slot discipline.
Coordinates with: A.2.2 for capability, A.3.1 and A.3.2 for method and method-family naming, A.10 and B.3 for evidence and assurance use, E.17 and E.10.D2 for publication and description use, and F.17 only when public or cross-context term-sheet reuse is current.
Plain entry cues (informative). Name explosion guard; role-name economy; status-name economy.
Intent and applicability
Intent. Keep role-like and status-like vocabularies small without losing real distinctions. F.14 is a control pass over candidate names and local name families. It does not define U.Role, does not define status ontology, and does not assign a holder. It asks what each proposed name is trying to name and blocks new durable names when the needed value is already a role value, role-relation expression, status family, status value, status window, qualifier, direct-pattern value, local phrase, or alias.
Applicability. Use F.14 when a project proposes several new role, status, access, evidence, requirement, source, method, capability, or work-like labels and the vocabulary starts to grow faster than the underlying distinctions. Use it before adding RoleDescriptions, Concept-Set rows, public names, cross-context rows, or role-relation names.
Primary EntityOfConcern in plain terms. One anti-explosion control pass over a candidate family of names in a bounded context or bridge family. The EoC is not the role value, not the status value, not the holder, not the work occurrence, and not a publication.
Admissible move in plain terms. Recover the kind of each candidate name, choose reuse or direct-pattern naming where possible, and record why no new durable role or status name is needed unless F.8 and F.18 admit it.
Primary working reader. A method author, terminology steward, architect, manager, or checker who sees names such as NightOperatorRole, EvidenceRole, SeniorReviewer, AtRiskStatus, PreValidated, AccessRole, or RequestApproverRole and must stop the vocabulary from becoming a second ontology.
Use this when. Use F.14 when name growth hides one of these questions:
- Is this one work-facing
U.Role, a RoleDescription label, a role-relation expression, a role assignment, a capability requirement, a method name, a work name, or only a local phrase? - Is this one status family, status value, status window, status-use relation, evidence-use relation, source-use relation, requirement-use relation, or presentation label?
- Is the candidate cross-context and therefore dependent on F.9 or F.17 before durable reuse?
What goes wrong if missed. Role labels become capability models, status labels become role families, access-control labels become work roles, and role-relation expressions become fake holders. The corpus then gets many small near-duplicate names that look precise but hide different kinds.
What this buys. A smaller vocabulary with stronger type separation: fewer durable names, clearer role relation structure, cleaner status families, fewer aliases with hidden claims, and more reliable F.8 and F.18 naming decisions.
Not this pattern when. Not F.14 when the question is one candidate expression only; use F.8. Not F.14 when the question is assigning a holder or attributing performed work; use A.2.1, F.6, and A.15.1. Not F.14 when the question is a status-use or evidence-use claim; use F.10, A.10, B.3, or the direct governing pattern. Not F.14 when the question is public terminology publication; use F.17 and F.18 after kind recovery.
Recognition versus assurance note. The recognition block is the name-growth situation plus the first kind-recovery move. The assurance block is the record, invariants, role-relation and status-family boundaries, conformance tests, and SoTA note. Assurance text tightens the same anti-explosion control pass; it must not turn F.14 into role ontology, status ontology, or naming authority for every value.
Problem frame
Name explosion usually begins with a helpful shortcut:
- Hybrid role shortcut.
RequestApproverRole,DevOpsEngineerRole, orIncidentLeadOnCallis minted because several roles often appear together. - Modifier-as-role shortcut.
NightOperatorRole,RemoteOperatorRole, orAPIApproverRoleis minted because a qualifier is visible. - Status-as-type shortcut.
AtRisk,Grace,PreValidated, orTemporarilyBreachedis minted as if time stance or status value were a new essence. - Source-suffix shortcut.
EvidenceRole,RequirementRole,AccessRole, orProviderRoleis minted because a source tradition uses role-like language. - Prestige shortcut.
SeniorReviewerorLeadApproveris minted to bypass a separation or assurance question. - Cross-context shortcut. The same label in two contexts is treated as one durable name without an F.9 bridge.
F.14 prevents those shortcuts from becoming durable ontology.
Forces
Core idea
Use the anti-explosion sequence before minting a durable role or status name.
- Recover kind first. Split the candidate family into role values, RoleDescription labels, role-relation expressions, assignments, work, capability, method, status, evidence, source, publication, requirement, policy, bridge, and local-phrase cases.
- Reuse existing values. If a role value, status family, Concept-Set row, local sense, or public term already admits the current use, reuse it and record aliases where needed.
- Use role relation structure instead of hybrid roles. If one role can satisfy another role requirement, two roles conflict, or roles travel together, use A.2.7 role relation structure. Do not mint a fused role unless the bounded context deliberately creates a new
U.Rolewith RoleDescription and F.8 and F.18 admission. - Use assignment checks instead of prestige names. If the issue is who may hold a role, whether a separation holds, or whether work occurred, use A.2.1, F.6, A.15.1, and role state checks.
- Use status families and windows instead of status-name sprawl. If the issue is time stance, evaluation state, grace, confidence, or presentation, use F.10 or the direct status pattern.
- Use direct patterns for qualifiers. Capability, method, work, evidence, source, publication, requirement, policy, and assurance qualifiers stay with their direct patterns. They may inform a name later; they do not become role or status ontology by suffix.
Minimal vocabulary
- Anti-explosion control pass - one review of a candidate family of related names to prevent unnecessary durable names.
- Candidate name family - a local set of proposed names that appear to cover related work, role, status, evidence, source, capability, method, or policy concerns.
- Recovered value - the typed FPF value or relation that the candidate name is trying to name.
- Role-relation expression - a context-local role-requirement substitution, incompatibility, qualification, or bundle expression governed by A.2.7.
- Status-family expression - a status family, value, window, confidence, or status-use relation governed by F.10 or a direct status pattern.
- Qualifier value - a value governed by a direct pattern that narrows use without becoming part of the role or status kind.
- Blocked minting - a decision that the candidate name remains an alias, local phrase, qualifier, role-relation expression, or direct-pattern name rather than a new durable role or status name.
Anti-explosion record
Use this record when more than one related candidate name is under pressure.
RecoveredValues is the center of the record. Each candidate expression is mapped to the value or relation it is trying to name. If no typed value is recovered, the expression stays local or goes to F.8 for a mint-or-reuse decision. DurableNamingRefs cites F.5, F.17, or F.18 only after the relevant value is recovered.
Levers
Recover kind before naming
Ask what the candidate expression is trying to name.
Reuse before minting
Reuse a value when the recovered value, bounded context, and admitted use match. Use F.9 when reuse crosses context. Use F.8 when a candidate appears new. Use F.18 only when a durable name is needed after kind recovery.
Role Relation Structure Before Hybrid Role
If two roles often appear together, state a role-bundle expression in A.2.7. If two roles must stay apart, state an incompatibility relation in A.2.7 and check assignments with A.2.1 and F.6. If one role value can satisfy another role requirement, state a role-requirement substitution relation in A.2.7. The role-relation expression does not assign a holder and does not become a role value by itself.
Status window before status family multiplication
If the proposed name marks evaluation, active use, grace, archival state, confidence, or presentation, keep the status family and use F.10 windows, values, or direct status-use relations. A new status family needs a recovered value difference, not a new adjective.
Qualifier before role-name clone
If the proposed role name adds time, location, object type, seniority, permission, method, capability, evidence, or source, recover the qualifier's direct pattern. Only keep it in a durable role name if F.18 admits that the bounded context truly needs a separate role value.
Invariants
- Kind first. A candidate name is not admitted as a durable role or status name until its recovered value is named.
- No status roles. Status, evidence, requirement, source, publication, and access uses do not become work-facing roles by suffix.
- No assignment by name. A RoleDescription label or role-relation expression does not assign a holder and does not prove performed work.
- No hybrid role by convenience. Role-bundle and incompatibility expressions stay in A.2.7 unless a bounded context deliberately creates a new role value with F.8 and F.18 admission.
- No capability by role label. Role names do not prove capability, skill, permission, assurance, or method validity.
- Status windows stay status-side. Time, confidence, grace, or presentation variation stays with F.10 or the direct status pattern unless a new status family is recovered.
- Cross-context reuse needs a bridge. Shared labels across contexts use F.9 before any Concept-Set row, public name, or durable cross-context reuse.
- Lineage labels do not preserve ontology. A historical label may be recorded as lineage or source wording, but it does not carry its old fused ontology forward.
Reasoning primitives
Interpretation: the expression is a cue. The recovered value governs the naming decision.
Interpretation: a bundle expression may be named as an expression, but it does not mint a fused U.Role.
Interpretation: separation questions need A.2.1 and F.6 checks, not prestige names.
Interpretation: status values and windows do not multiply status families by default.
Interpretation: capability, method, work, evidence, source, publication, policy, and assurance qualifiers must not hide inside role or status names.
Worked cases
Requester and approver
Candidate family: RequesterRole, ApproverRole, RequestApproverRole, SeniorApprover.
Result:
RequesterRoleandApproverRoleare work-facing role values with RoleDescriptions.RequestApproverRoleis blocked as a fused role. Use an A.2.7 role-bundle expression when the two roles travel together.- If the same holder must not carry both assignments in the same change window, use A.2.7 incompatibility plus A.2.1 and F.6 assignment checks.
SeniorApproveris not proof of independence or assurance. Recover role state, capability, assurance, or local policy before durable naming.
Operators across shifts
Candidate family: OperatorRole, NightOperatorRole, RemoteOperatorRole, OnCallOperatorRole.
Result:
OperatorRoleis the role value.night,remote, andon-callare recovered as schedule, location, role-state, work-plan, or policy qualifiers.- A new role is blocked unless the bounded context shows a distinct role value with different RoleDescription, assignment predicates, and method or work implications.
SLO compliance labels
Candidate family: Compliant, AtRisk, Grace, Breached, Waived.
Result:
- These are not role names.
- F.10 recovers status family, status value, status window, confidence, or deontic or policy use.
- Presentation labels may stay local or be named by the direct status pattern. They do not become
U.Role, RoleDescription, or role relation structure.
Evidence and requirement suffixes
Candidate family: EvidenceRole, RequirementRole, StandardRole, SourceRole.
Result:
- No work-facing role is recovered from suffix alone.
- Evidence, requirement, standard, and source uses go to A.10, B.3, E.10.D2, E.17, or the direct requirement or source pattern.
- A durable name may be admitted for the recovered relation, but not as a role value.
Cross-context role labels
Two contexts both use Operator. One is a plant-control role; the other is an access-control permission grouping.
Result:
- F.9 Bridge Card first.
- The bridge may admit Naming-only or RoleDescription naming for a local work-facing role when the role value is recovered.
- The bridge does not import access permission as
U.RoleAssignment, capability, or performed work.
Ordinary composite role names
A project says: "Vasya is an engineer, he works on musical robots, and he is also a musician who teaches robots to play music."
Result:
- The ordinary phrase may remain "robotics engineer and musician" or "robotics engineer-musician" when the reader can recover it without ambiguity. FPF does not require a
Rolesuffix in ordinary prose. - Recover at least two work-facing role values when they are current:
EngineerRole@RobotEngineeringContextandMusicianRole@MusicPracticeContext. If the engineering work is specifically robotics engineering, use a role qualifier, RoleDescription, or A.2.7 role-relation expression rather than mintingEngineerRoboticistRoleautomatically. - If "robotics engineer" is a stable local bundle or qualification relation, record it as
RoleRelationStructure@BoundedContextunder A.2.7. The relation structure may be named for local use, but it is not a new role value by itself. - Recover method and work values separately: engineering method, robotics-engineering method family, music teaching method, robot-training work, and performed music work stay under the method and work patterns. They may motivate a role name only after F.8 and F.18 admission.
- A durable role value is selected only when the bounded context needs different assignment predicates, capability expectations, incompatibilities, method/work implications, or public naming. Otherwise keep the ordinary composite phrase and cite the recovered role relation, method, work, and capability values where they matter.
Anti-patterns and repairs
Conformance checklist
Regression checks
Relations
- A.2. Governs the work-facing role value; F.14 only prevents unnecessary role-name growth.
- A.2.1 and F.6. Govern assignment and performed-work attribution; F.14 blocks names that hide those relations.
- A.2.5. Governs role state and enactable-state admission; F.14 blocks role-state qualifiers from becoming unexamined new roles.
- A.2.7. Governs role-requirement substitution, incompatibility, qualification, and bundle expressions; F.14 chooses that expression before hybrid-role minting.
- F.4 and F.5. Govern RoleDescription and local naming; F.14 supplies pressure to keep names few.
- F.8. Governs one candidate mint-or-reuse decision; F.14 uses F.8 when a family-level pass leaves a candidate unresolved.
- F.9 and F.17. Govern bridge and public term-sheet reuse; F.14 does not admit cross-context durable names by label alone.
- F.10. Governs status families, status values, windows, and status-use relations; F.14 prevents status-name sprawl.
- F.18. Governs durable naming after value recovery.
- A.10, B.3, E.17, and E.10.D2. Govern evidence, assurance, publication, source, description, and specification-use cases that often arrive with role-like suffixes.
SoTA-Echoing
SoTA note. F.14 does not import access-control, policy, terminology, or status taxonomies as FPF ontology. It uses their shared discipline: separate the named value from assignment, permission, status, evidence, and currentness claims before making a durable name.
Didactic distillation
When names multiply, do not ask for a better name first. Ask what values are being named. Reuse existing roles and status families when they already admit the use. Use role relation structure for role-requirement substitution, incompatibility, qualification, and bundles. Use status windows and values for temporal or evaluative variation. Send capability, method, work, evidence, source, publication, requirement, policy, and assurance qualifiers to their direct patterns. Mint durable names only after the recovered value deserves one.
F.14:End
Static and Regression Conformance Harness for Unification
Type: Pattern Status: Stable
"Prove locality and parsimony first; only then prove composition."
Type: Architectural pattern.
Status: Stable.
Normativity: Normative.
Builds on: E.10.D1 for U.BoundedContext discipline; F.1 for context selection; F.2 and F.3 for term harvesting, Local-Sense, and SenseCell formation; F.4 for RoleDescription as description episteme for one local U.Role; F.5 for local naming discipline; F.7 and F.8 for Concept-Set rows and mint-or-reuse decisions; F.9 for Bridge Cards and CL; F.10 for status families, values, and windows; F.13 for aliases; F.14 for anti-explosion control; F.18 for durable naming.
Coordinates with: A.2, A.2.1, A.2.5, A.2.7, F.6, and A.15.1 for work-facing role, assignment, role state, role relation structure, and performed-work claims; A.10, B.3, E.17, and E.10.D2 for evidence, assurance, publication, source, and description-use claims; A.6.5 for relation-slot discipline.
Plain entry cues (informative). SCR and RSCR harness; unification slice check; context-bridge regression check.
Intent and applicability
Intent. Give one compact harness for checking whether a unification slice is locally sound now and remains sound across changes. F.15 does not define contexts, senses, rows, roles, status families, bridges, aliases, or names. It checks that the current slice uses those values under their direct patterns without collapsing them into one convenient table or one global meaning.
Applicability. Use F.15 when a project declares or revises a slice that contains several of these moving parts: U.BoundedContext cards, Local-Senses, SenseCells, Concept-Set rows, RoleDescriptions, Bridge Cards, status families or windows, aliases, or durable names.
Primary EntityOfConcern in plain terms. One unification slice under static and regression conformance check. The EoC is not a registry, not a work process, not a role assignment, not a status value, and not a publication.
Admissible move in plain terms. Check the slice against static conformance rules for the current snapshot and regression conformance rules for the changed snapshot, then treat any failed claim under the direct governing pattern.
Primary working reader. A terminology steward, method author, architect, manager, or checker who needs to decide whether a proposed unification row, bridge, role-description label, status window, or rename is safe enough to reuse.
Use this when. Use F.15 when a slice feels "almost unified" but one of these questions is still open:
- Do all local senses still stay inside their own bounded contexts?
- Does each RoleDescription still describe one local
U.Rolethrough one SenseCell? - Does a row really relate at least two contexts, or is it a row-shaped local note?
- Does a Bridge Card state kind, direction,
CL, loss, and admitted use? - Did an edition change, row change, rename, bridge change, or status-window change preserve the earlier commitments?
What goes wrong if missed. Local meanings become global by shared labels, rows multiply without real distinctions, role descriptions quietly become status or evidence templates, bridges become equivalence by habit, and changed editions rewrite earlier claims without a visible continuity decision.
What this buys. A small safety harness for Part F: context-local meaning remains local, cross-context use stays bridge-bound, role and status claims leave through direct patterns, and changes can be checked without turning the harness into a new governance format.
Not this pattern when. Not F.15 when the only question is one word, one role value, one role assignment, one status family, one bridge, one public term, one source relation, or one publication-use claim. Use the direct pattern first. Return to F.15 only when the slice combines several moving parts and their joint conformance is live.
Recognition versus assurance note. The recognition block is the unification slice and the current or changed moving parts. The assurance block is the static and regression rule set, the record, witnesses, and worked cases. Assurance text must not turn F.15 into a registry format, publication authority, role ontology, or status ontology.
Problem frame
Unification work fails when composition is claimed before locality and continuity have been checked:
- Locality leak. A same-spelled label is treated as one meaning across contexts.
- Row sprawl. Concept-Set rows grow laterally with near-duplicates.
- Role or status inflation. Adjectival, temporal, or source-label variants become new role or status types.
- Silent rewrite. An edition or rename changes meaning while keeping the old row or name.
- Bridge hardening. A weak Bridge is later used as equivalence without a new witness set.
- Register split. Unified Tech and Plain labels drift apart and no longer refer to the same local sense.
F.15 catches these failures before the slice is used for cross-context reuse, naming, assurance, or downstream claims.
Problem
A unification slice can look stable because labels, rows, bridges, aliases, role descriptions, status windows, or public names are already arranged in one table. The problem is that reuse may still outrun locality, bridge strength, edition continuity, direct governing patterns, or witness evidence; F.15 makes the static and regression checks explicit before the slice is used downstream.
Forces
Solution
The harness has two families of rules.
- Static Conformance Rules (SCR). Check the current snapshot. Contexts, Local-Senses, SenseCells, rows, RoleDescriptions, bridges, windows, aliases, and names must satisfy their direct local rules now.
- Regression and Stability Conformance Rules (RSCR). Check a changed snapshot against the earlier snapshot. The rule asks what stayed the same, what changed, what must be forked, what must be retired, and which bridge or name needs a fresh witness.
Both families are judgement schemas over content claims. They do not prescribe storage, implementation, team responsibility, or publication format.
Minimal vocabulary
- Unification slice - the small set of contexts, senses, rows, RoleDescriptions, bridges, windows, aliases, and names being checked together.
- Static Conformance Rule (SCR) - a check that must hold in the current snapshot.
- Regression and Stability Conformance Rule (RSCR) - a check that compares an earlier and later snapshot.
- Check claim - one content assertion such as "this row spans two contexts" or "this RoleDescription refers to one SenseCell".
- Witness - one small example, counterexample, invariant, or edition note that makes the check inspectable.
- Moving part - any context, local sense, row, role-description label, bridge, status window, alias, or public name whose change could affect the slice.
- Failed conformance - a check result that makes the claim governed by the direct pattern before reuse.
Objects under check
F.15 may check these values together, but does not redefine them:
U.BoundedContextcards from F.1.- Local-Senses from F.2 and F.3.
- SenseCells, meaning
(Context, Local-Sense). - Concept-Set rows from F.7.
- RoleDescriptions from F.4, each describing one local
U.Rolethrough one SenseCell. - Bridge Cards from F.9.
- Status families, values, confidence, and windows from F.10 or the direct status pattern.
- Aliases from F.13.
- Candidate names and durable names from F.5, F.8, F.14, F.17, and F.18.
If the slice contains role assignments, performed work, evidence use, source use, publication use, assurance, gate, decision, method, capability, or policy claims, F.15 records that those claims leave the harness for direct governing patterns. It does not absorb them.
Unification conformance record
Use this record when several moving parts are being checked together.
StaticRuleResults and RegressionRuleResults name only the checks that matter for the current slice. NonAdmittedUses names the tempting claim that the slice does not permit, such as direct role assignment, performed-work attribution, evidence use, source authority, publication authority, status transfer, or bridge-based equivalence.
Static conformance rules for local material
All local rules stay inside one U.BoundedContext.
SCR-F15-S1 (Context in view).
Seed sigma has context C -> C is among the slice contexts.
Every harvested seed lives in a bounded context that is deliberately in view for this slice.
SCR-F15-S2 (Attestation currentness).
Occurrence omega attests seed sigma -> omega states edition and locus.
A Local-Sense can be reconstructed from attestations rather than from memory or a fashionable label.
SCR-F15-S3 (In-context clustering).
Local-Sense lambda clusters seeds sigma_i -> every sigma_i belongs to context(lambda).
No cross-context items are hidden inside one Local-Sense.
SCR-F15-S4 (Two registers).
Local-Sense lambda -> Unified Tech label and Plain label both refer to lambda.
The two labels differ in register, not in kind or sense.
SCR-F15-S5 (Minimal gloss).
gloss(lambda) -> states only the needed local meaning.
The gloss does not smuggle behavior, permission, evidence, source authority, publication status, or global sameness.
SCR-F15-S6 (Context-local normal form).
normalize_C(sourceExpression) = n -> n is used only inside C unless F.9 or F.17 admits wider use.
Normalization inside one context does not create a global name.
Static conformance rules for cross-context material
Cross-context rules connect local material without collapsing locality.
SCR-F15-S7 (Single-cell RoleDescription).
RoleDescription tau -> refersTo(tau, one SenseCell) and describes(tau, one local U.Role).
A RoleDescription is not a status template, evidence template, source template, publication template, or role assignment.
SCR-F15-S8 (Name discipline).
RoleDescription tau or NameCard n -> name obeys F.5, F.8, F.14, and F.18 as applicable.
Naming follows kind recovery before durable naming.
SCR-F15-S9 (Row spans contexts).
Row rho lists cells cell_i -> at least two distinct contexts occur.
A row of one context is not cross-context unification.
SCR-F15-S10 (Row purity).
Row rho -> each listed item is one SenseCell.
No cell is a pre-merged bundle, hidden bridge, or global meaning.
SCR-F15-S11 (Reuse before minting).
Proposed row rho2 overlaps intended use of row rho -> reuse rho or record the F.8 mint decision.
New rows need a visible difference, not merely a new label.
SCR-F15-S12 (Bridge explicitness).
C1 != C2 and relation asserted between cells -> BridgeCard states cells, kind, direction, CL, loss, witness, and admitted use.
A cross-context relation appears as a Bridge Card before it is consumed by rows, names, assurance, or downstream claims.
SCR-F15-S13 (Bridge locality).
BridgeCard beta -> beta relates cells from different contexts.
Within one context, use clustering or local relation discipline rather than a bridge.
SCR-F15-S14 (Status window honesty).
Status family Sigma varies by time, scale, phase, confidence, or use -> F.10 names value or window; no new status family by adjective alone.
Temporal and scale variation does not create status ontology by suffix.
SCR-F15-S15 (Role-relation preservation).
role bundle or incompatibility expression is live -> A.2.7 states it; no fused RoleDescription is minted by convenience.
Role-relation expressions are not role assignments and do not prove performed work.
SCR-F15-S16 (Direct-pattern boundary for non-unification claims).
Slice contains assignment, work, evidence, source, publication, assurance, gate, decision, method, capability, or policy claim -> cite the direct governing pattern.
F.15 checks whether the slice is safe to compose; it does not decide those claims.
SCR-F15-S17 (Public or cross-context naming admission).
Name is public, cross-context, or term-sheet-facing -> F.17 and F.18 admit it after kind recovery.
Public reuse is not created by repeated local labels.
Twin-register checks
Use these checks when a Unified Tech label and Plain label are both present.
SCR-F15-T1 (Same local sense).
TechLabel t and PlainLabel p -> both resolve to the same SenseCell or NameCard target.
SCR-F15-T2 (Same kind).
TechLabel t names kind K -> PlainLabel p does not suggest another kind.
SCR-F15-T3 (Ambiguous head guarded).
PlainLabel p has a high-risk head -> first use includes a kind head or short gloss.
SCR-F15-T4 (No normative displacement).
PlainLabel p is reader-facing -> it does not replace the Unified Tech label in normative Core claims.
SCR-F15-T5 (Bridge before copying).
PlainLabel p is reused in another context -> F.9 Bridge Card or F.17 public term-sheet row exists first.
Regression and stability rules
The RSCR family compares an earlier snapshot @t0 and a later snapshot @t1.
Contexts and editions
RSCR-F15-E1 (No silent replacement).
Context C@t0 edition e0, Context C@t1 edition e1, e1 != e0 -> new context or explicit recency decision.
A new edition becomes a new context when sense changes; otherwise the recency decision is visible.
RSCR-F15-E2 (Known confusion check).
C@t1 derives from C@t0 -> known confusion cases from C@t0 are rechecked or explicitly retired.
Old traps do not disappear merely because an edition changed.
Local-Senses and SenseCells
RSCR-F15-E3 (Reconstructible Local-Sense).
Local-Sense lambda@t0 changes attestations -> lambda@t1 remains reconstructible from attestations@t1.
RSCR-F15-E4 (SenseCell context stability).
SenseCell (C, lambda)@t0 -> (C2, lambda2)@t1 -> same cell only if C2 = C and lambda2 preserves local sense.
A SenseCell does not migrate across contexts through edits.
Concept-Set rows
RSCR-F15-E5 (Row identity).
Row rho@t0 with cells cell_i -> row rho@t1 is same row only if each cell preserves its local sense.
If a cell changes sense, mint a new row and retire the old row.
RSCR-F15-E6 (Add or retire before silent mutation).
Row rho loses or gains a cell because an edition split occurred -> preserve old row and add or retire rows explicitly.
RoleDescriptions
RSCR-F15-E7 (Single-cell continuity).
RoleDescription tau@t0 -> tau@t1 -> refersTo(tau@t1, one SenseCell) and same cell or justified switch.
RSCR-F15-E8 (Alias for rename, new RoleDescription for meaning change).
name(tau@t0) -> name(tau@t1) -> alias if only label changed; new RoleDescription if described role or local sense changed.
Bridges
RSCR-F15-E9 (Recheck Bridge on endpoint movement).
Bridge beta@t0 and either endpoint cell changes -> beta is rechecked; CL, loss, admitted use, and witness may change.
RSCR-F15-E10 (No drift to equivalence).
Bridge beta kind is not equivalence at t0 and equivalence is claimed at t1 -> new witness set is required.
Equivalence is rare and cannot arrive by gradual wording drift.
Status windows and role relation structure
RSCR-F15-E11 (Window stability).
Status family windows@t0 -> windows@t1 -> changed only when variance of meaning or use is shown.
RSCR-F15-E12 (Role-relation stability).
role incompatibility, bundle, qualification, or role-requirement substitution@t0 -> @t1 -> preserved, retired, or restated before assignment or naming use.
No later RoleDescription fuses roles that were kept distinct by A.2.7.
Public naming
RSCR-F15-E13 (Public name continuity).
Public or term-sheet-facing name changes -> F.17 or F.18 records lineage, alias, split, merge, or retirement.
Local rename is not enough when the name already faces other contexts.
Reasoning primitives
Interpretation: F.15 checks only triggered rows. It does not require every possible object slot to be present.
Interpretation: a change that matters to context, sense, row, RoleDescription, Bridge, status window, alias, or name must be stated.
Interpretation: a failed Bridge rule is governed by F.9; a failed RoleDescription rule is governed by F.4; a failed status-window rule is governed by F.10; a failed naming rule is governed by F.8, F.17, or F.18.
Interpretation: a Bridge may admit naming, explanation, or type-structure use. It does not admit role assignment, work attribution, or evidence use by itself.
Archetypal Grounding - worked cases
Activity and task in two run contexts
Contexts: PROV-O run context and IEC 61131-3 run context.
Local senses: activity in the first context and task in the second.
F.15 result:
- SCR-F15-S9 passes only if a Concept-Set row lists both SenseCells.
- SCR-F15-S12 requires a Bridge Card. The admitted use may be comparison or explanation, not direct substitution.
- A RoleDescription named
ExecutionRolemay use one local SenseCell only. It does not describe both senses at once. - If a later edition makes the
tasksense cyclic while theactivitysense remains non-periodic, RSCR-F15-E9 rechecks the Bridge and may lowerCL.
Service availability row across service and observation contexts
Contexts: ITIL service-management context and SOSA observation context.
Row: ServiceAvailability with one SLO SenseCell and one uptime-observation SenseCell.
F.15 result:
- SCR-F15-S9 passes because two contexts are present.
- SCR-F15-S12 requires Bridge kind, direction,
CL, loss, and admitted use. - SCR-F15-S16 treats evidence and assurance claims under A.10 and B.3; the row itself does not make the observation adequate evidence.
- SCR-F15-S14 treats time-window and confidence variation under F.10.
Rename a RoleDescription without changing meaning
Slice: IncidentReviewerRoleDescription is renamed to ServiceIncidentReviewerRoleDescription, while the described local U.Role and SenseCell stay the same.
F.15 result:
- RSCR-F15-E7 checks single-cell continuity.
- RSCR-F15-E8 admits an alias because only the label changed.
- F.18 updates durable naming if the name is reusable outside the local context.
- If the described role changed, F.15 rejects alias-only treatment; F.4, F.8, and F.18 govern the repaired claim.
Weak bridge later claimed as equivalence
Slice: a Bridge between an OWL subclass sense and an FCA order-edge sense was partial overlap at CL = 2. A later formal result claims equivalence inside one constrained fragment.
F.15 result:
- RSCR-F15-E10 requires a new witness set for equivalence.
- SCR-F15-S12 updates kind, direction, loss, and admitted use.
- C.29 may govern the mathematical-lens claim; F.15 only checks that the changed Bridge is not silently strengthened.
Peak-hours status proposal
Slice: a team proposes PeakHoursAvailabilityStatus as a new status family.
F.15 result:
- SCR-F15-S14 fails if the only difference is a time window.
- F.10 governs the status-family and window claim.
- F.14 and F.18 block a new durable name unless a new recovered status family is present.
Bias-Annotation
F.15 blocks unification-bias: the temptation to treat one shared label, one table row, one bridge, one alias, or one changed edition as if it already proved a common meaning. It also blocks kind-transfer bias: a role description, status window, evidence claim, publication-use claim, or source relation inside a slice does not become governed by F.15 merely because the slice mentions it. The failed claim returns to the direct governing pattern.
Conformance Checklist
Common Anti-Patterns and How to Avoid Them
Closure conditions
A unification slice is locally admissible for reuse when:
- every triggered static conformance rule holds for the current snapshot;
- every changed moving part has a regression result;
- each failed rule names the direct governing pattern before reuse;
- at least one witness exists for each live Bridge, row, RoleDescription rename, status-window change, or public naming change;
- the record names tempting non-admitted uses such as role assignment, performed-work attribution, source authority, publication authority, status transfer, and evidence use.
Closure is local to the slice and current use. A later context edition, row change, Bridge endpoint change, RoleDescription change, public-name change, or status-window change reopens the relevant RSCR rows.
Consequences
Benefits. F.15 makes locality, bridge strength, and edition continuity visible before a slice is reused. It lets terminology, role-description, status-window, bridge, and naming patterns remain direct owners of their objects while still giving the combined slice one checkable harness.
Costs. A slice that looks unified by label or table shape may fail until witness rows, bridge cards, local contexts, and direct-governing-pattern returns are explicit.
Failure avoided. F.15 prevents row-shaped local notes, alias-only rewrites, bridge optimism, role/status inflation, and source/evidence/publication claims from becoming hidden global meanings.
Rationale
Unification needs a harness because cross-context reuse is useful only after locality, parsimony, bridge strength, and regression continuity are preserved. F.15 therefore checks the joint slice without becoming a new ontology for contexts, roles, statuses, bridges, evidence, publications, or names.
SoTA-Echoing
Currentness rule: treat the current Part F and role-method-work patterns named in Builds on and Coordinates with as the source of governing interpretation. If F.4, F.9, F.10, F.17, F.18, A.2.1, F.6, A.15.1, A.10, B.3, E.17, or E.10.D2 changes a governed value, relation, admitted use, or boundary, recheck only the affected SCR or RSCR rows and the worked case that exercises the changed boundary.
Relations
- F.1, F.2, F.3. Provide contexts, terms, Local-Senses, and SenseCells checked by SCR-F15-S1 through S6.
- F.4, A.2, A.2.1, F.6, A.15.1. Govern RoleDescription, role assignment, and performed-work claims that F.15 must not absorb.
- F.7 and F.8. Govern rows and mint-or-reuse decisions checked by SCR-F15-S9 through S11 and RSCR-F15-E5 through E6.
- F.9 and B.3. Govern Bridge Cards,
CL, loss, and assurance penalties. - C.34. Provides architecture-specific preservation or equivalence adequacy when a later slice claims that selected architecture structures still correspond after renaming, bridging, projection, coarsening, or conformance strengthening. F.15 checks regression; C.34 names the preserved and lost structure for the architecture use.
- F.10. Governs status family, value, confidence, and window claims.
- F.13, F.17, F.18. Govern aliases, public term sheets, and durable names.
- F.14. Governs anti-explosion before names are minted for role-like and status-like families.
- A.10, E.17, E.10.D2. Govern evidence, publication, source, and description-use claims when they appear inside a slice.
Didactic distillation
Use F.15 as a small check over a slice, not as a new vocabulary machine. First, check locality: contexts are named, local senses are inside their contexts, rows really cross contexts, RoleDescriptions describe one local role, bridges state kind and loss, and status variation stays with status windows. Then check change: editions, rows, bridges, role descriptions, aliases, names, and status windows either preserve their earlier meaning or state the change. When a check fails, do not patch the label. Treat the claim under the direct governing pattern and repair the value.
F.15:End
Worked‑Example Template (Cross‑Domain)
“Show the thought, not the tooling.” Status. Architectural pattern. Builds on: E.10.D1 Lexical Discipline for “Context” (D.CTX); F.1–F.15. Coordinates with. B.3 Trust & Assurance Calculus (CL on Bridges); Part C patterns (Sys‑CAL, KD‑CAL, Kind-CAL) and the method/work stack (A.3/A.15/B.1.5).
Intent & applicability
Intent. Provide a single, didactic page template for cross‑domain worked examples that makes every claim local to a Context (Context), every Cross‑context step explicit via a Bridge, and every named role template or status template traceably tied to one SenseCell. The template is notation‑free and tool‑agnostic; it captures how to think the example so others can replay it.
Applicability. Use whenever you illustrate any FPF construct that spans more than one Context: Role Assignment & Enactment bindings, acceptance checks, measurement-driven claims, type alignment, control/actuation stories, etc.
Non‑goals. No registries, workflows, editors, or storage formats; no step‑by‑step “team procedures.” This pattern shapes the page a reader sees, not how it was produced.
Problem frame
Cross‑domain examples often fail in four predictable ways:
- Global words. Process, role, service, execution used without the Context, inviting drift.
- Hidden bridges. “It’s basically the same” across disciplines, with losses left implicit.
- Name without sense. A Role Description name appears with no visible tie to a SenseCell.
- List without structure. Facts line up but never meet in a single Concept‑Set row.
The template counters these by forcing Contexts → senses → row → bridges, in that order.
Core idea (didactic)
A robust worked example is a compact theatre:
- Stage = a declared unification line (which threads of Part C are in play).
- Backdrop = Context set (Contexts from F.1), each with a one‑line Card.
- Actors = SenseCells (⟨Context, Local‑Sense⟩) you will actually use.
- Plot = one Concept‑Set row where those SenseCells are aligned for this example.
- Cues = Role Descriptions that reference exactly one SenseCell each.
- Cross‑talk = Bridges across Contexts (with kind, CL, and loss).
- Timing = Windows (if status varies across time/scale) and SoD (if duties must remain separate).
- Moral = a handful of harness checks (F.15) that the reader can verify mentally.
Minimal vocabulary (this pattern only)
- Context / Context — always U.BoundedContext (E.10.D1).
- Local‑Sense — a sense clustered within one context (F.3).
- SenseCell — address
⟨Context, Local‑Sense⟩. - Concept‑Set row (ρ) — a Cross‑context alignment for “what we treat as one” in this example (F.7/F.8).
- Role Description (τ) — a Role or Status that points to one SenseCell (F.4–F.6).
- Bridge (β) — explicit Cross‑context relation with kind (≡ / overlaps / broader‑than / narrower‑than), CL, and loss note (F.9).
- Window — a bounded interval (time/scale/phase) tied to a Status (F.10).
- SoD — Separation-of-Duties constraint among Roles (F.14).
The one‑page Worked‑Example Canvas
Each bullet is a thought you make visible, not a form field.
-
Title & claim. A short name + one‑sentence claim you will demonstrate. Example: “Service Uptime as Evaluated by Runtime Executions” — “We compare Execution (IEC) observations to SLO (ITIL) within a declared window.”
-
Unification line. Which Part C threads are active. Example: Enactment + KD‑CAL (sensing) + Sys‑CAL (execution).
-
Context set (compact Cards). 3–6 Contexts from F.1 with one‑line scope and, if inherent, design vs run stance. Example: BPMN 2.0 (design: workflow graph); PROV‑O (run: Activity uses/generates); ITIL 4 (design: SLO/SLA); SOSA/SSN (run: Observation); IEC 61131‑3 (run: task executes).
-
SenseCells in play. List exactly the Local‑Senses you will use, each prefixed by its Context. Example: ⟨ITIL: service‑level‑objective⟩, ⟨SOSA: observation⟩, ⟨IEC: execution‑task⟩, ⟨PROV: activity⟩.
-
The Concept‑Set row (ρ). A single line that places the cells you treat as “the same” for the claim, with a one‑breath justification. Example row ρ: { ⟨ITIL:SLO⟩ ↔ ⟨SOSA:observed‑availability⟩ } — We treat “target availability” and “observed availability” as comparable magnitudes in a specific window.
-
Bridges (β). For any Cross‑context relation not captured by ρ (or that requires nuance), state kind, CL, loss. Example β₁: ⟨IEC:execution‑task⟩ overlaps ⟨PROV:activity⟩, CL=2, loss: PROV lacks cyclic scheduling semantics. Example β₂: ⟨SOSA:observation⟩ narrower‑than ⟨ITIL:measurement⟩, CL=2, loss: ITIL omits procedure metadata.
-
Role-Description hooks. Name the Role or Status templates and the one SenseCell each references. Example:
AvailabilityStatus→ ⟨ITIL:SLO⟩;Execution→ ⟨IEC:execution‑task⟩;EvidenceObservation→ ⟨SOSA:observation⟩. -
Windows & SoD (if relevant). Spell any status windows and any SoD you rely on. Example: Window: monthly, business‑hours; SoD: Operator ⟂ SLO‑Owner.
-
Micro‑narrative (5–7 lines). Walk the reader through the claim using Context‑prefixed words and the row/bridges above. Example (abridged): “A task (IEC) runs the control program. Its observations (SOSA) yield availability over the monthly window. We compare those to the SLO (ITIL) in the same window. Where we refer to activity (PROV) we do so via β₁ (overlap, CL=2). The row ρ carries the comparison; the Bridge β₂ explains why ‘measurement’ in ITIL is broader than ‘observation’ in SOSA.”
Harness pings (F.15). S-Row-Cross, S-RoleDesc-SingleCell, E-NoSilentEdition. Example: S‑Row‑Cross, S‑RoleDescription‑SingleCell, E‑NoSilentEdition.
Memory rule. If your Canvas cannot fit on a single page (or one slide), the example is teaching the wrong thing.
Invariants (normative)
- Locality of meaning. Every term in the narrative appears with its Context at first mention (process (BPMN), activity (PROV), …).
- At least one row. The example MUST include ≥ 1 Concept‑Set row spanning ≥ 2 Contexts.
- Single-cell Role Description. Every Role Description in the example MUST point to one SenseCell.
- Explicit bridges. Any Cross‑context step not explained by the row MUST appear as a Bridge with kind, CL, and loss.
- Temporal honesty. If a Context fixes design vs run, the narrative respects it.
- Window discipline. If comparison depends on time/scale/phase, a window is stated rather than minting a new Status type.
- SoD integrity. If duties are involved, SoD is explicit and unbroken.
- Didactic parsimony. One page, one claim, one row (or a tiny bundle of closely related rows).
The row panel (how to show it without notation)
Show the row as a compact two‑to‑five‑column list:
- Column header = Context.
- Cell =
Local‑Sense label(tech register; optional plain label on next line). - Footline (one line) = “row reason”—why these cells belong in this row for this claim.
Example visual (linear text): ITIL 4: service‑level‑objective | SOSA/SSN: observed‑availability → Row reason: both quantify availability for the same window; units harmonised by KD‑CAL; procedural metadata differs (captured in loss of β₂).
Worked micro‑example (didactic)
Title. Alarms Should Not Satisfy Uptime Claim. An alarm‑only Execution (IEC) cannot satisfy the SLO (ITIL) because observation (SOSA) windows exclude time in “alarm state.”
Contexts. IEC 61131‑3 (run), SOSA/SSN (run), ITIL 4 (design).
SenseCells. ⟨IEC:execution‑task⟩, ⟨SOSA:observation⟩, ⟨ITIL:SLO⟩.
Row ρ. { ⟨ITIL:uptime‑SLO⟩ ↔ ⟨SOSA:observed‑availability⟩ } — comparable magnitudes in the calendar‑month window.
Bridge β. ⟨IEC:alarm‑state⟩ narrower‑than ⟨SOSA:observation‑qualifier⟩, CL=2, loss: SOSA does not prescribe plant‑specific alarm semantics.
Role-Description hooks. AvailabilityStatus → ⟨ITIL:SLO⟩; EvidenceObservation → ⟨SOSA:observation⟩.
Window. Calendar month, business‑hours, exclusion: alarm‑state intervals.
Micro‑narrative (4 lines). A task (IEC) runs; when the plant is in alarm state, observations (SOSA) are flagged and excluded from the availability window. We then compare the remaining interval to the SLO (ITIL) via row ρ. The Bridge β clarifies why the flag is a qualifier in SOSA, not a Status type in ITIL.
Harness pings. S‑Row‑Cross, S‑RoleDescr‑SingleCell, S‑Window, S‑TemporalHonesty.
Relations (with other patterns)
Builds on: F.1 (Contexts), F.2–F.3 (terms & senses), F.4–F.6 (roles), F.7–F.8 (rows), F.9 (bridges), F.10 (windows), F.14 (SoD), F.15 (harness).
Constrains: Any example placed in Part C or Part B must render its claim through this canvas (or a faithful reduction), so readers can run F.15 mentally.
Didactic distillation (60‑second script)
“A good cross‑domain example fits on one page. First, name the claim. Then show the Contexts you’re using. List the SenseCells you will actually touch. Draw one row that makes them the same for this claim. Every Cross‑context nuance you can’t justify in that row becomes a Bridge with a kind, a CL, and a loss sentence. Point each Role Description to one cell. If time/scale matters, state the window; if duties matter, state SoD. Finish with two or three harness pings from F.15. That’s it—no tooling, no long procedures. The reader can now replay your thought and agree (or disagree) at the right place.”
Anti‑patterns & remedies
Extended worked micro‑examples
Each example fits the one‑page canvas (§5) and makes the row and bridges do the work.
Type alignment: OWL class vs FCA concept (design‑time only)
Title & claim. “Two Lenses on Pump: OWL class and FCA concept align for catalogue reasoning.”
Unification line. Kind-CAL (design) + FCA (design).
Contexts. OWL 2 (profiles) — classes, subClassOf (design). FCA corpus — formal concepts, lattice order (design).
SenseCells. ⟨OWL:class ‘Pump’⟩, ⟨FCA:formal‑concept ‘Pump’⟩.
Row ρ. { ⟨OWL:Pump⟩ ↔ ⟨FCA:Pump⟩ } — same practical extension in this product catalogue.
Bridge β. ⟨FCA:lattice‑order⟩ overlaps ⟨OWL:subclass‑order⟩, CL=2, loss: FCA intents may include context attributes not modeled in OWL restrictions.
Role-Description hooks. TypeLabel → ⟨OWL:class⟩ (for naming), no runtime Role Assignment/Enactment.
Micro‑narrative (3 lines). For catalogue queries, the instances covered by OWL class Pump match those of the FCA concept created from the same attributes; we treat them as one row. The orderings diverge in nuance (β), but not for membership in this example.
Harness pings. S‑Row‑Cross, S‑TemporalHonesty (design only), S‑Bridge‑Kind‑CL.
Role vs permission: SoD in enactment vs access control
Title & claim. “Behavioral role (BPMN) is disjoint from access role (RBAC); keep duties separate.”
Unification line. Role Assignmnent and Enactment (design & run) + access/deontics (design).
Contexts. BPMN 2.0 — participant/lanes (design). NIST RBAC (2004) — roles/permissions (design).
SenseCells. ⟨BPMN:participant⟩, ⟨RBAC:role⟩.
Row ρ. — (intentionally none) — we do not treat them as the same.
Bridge β. ⟨BPMN:participant⟩ disjoint ⟨RBAC:role⟩, CL=3, loss: none—different dimensions (behavioral mask vs permission grouping).
Role-Description hooks. Operator → ⟨BPMN:participant⟩; AccessRole → ⟨RBAC:role⟩. SoD: Operator ⟂ AccessRole‑Admin.
Window. Not applicable.
Micro‑narrative (3 lines). We show SoD by prohibiting the same actor from holding Operator and AccessRole‑Admin. The disjoint β prevents leakage between behavioral masks and permission bundles.
Harness pings. S‑RoleDescr‑SingleCell, S‑SoD, S‑Bridge‑Disjoint.
Method quartet: from MethodDescription to Work with observations
Title & claim. “Behavioral role (BPMN) is disjoint from access role (RBAC); keep duties separate.”
Unification line. Role Assignment & Enactment (design & run) + access/deontics (design).
Contexts. SPEM 2.0 (design: Method or MethodDescription), PROV‑O (run: Activity), SOSA/SSN (run: Observation), ITIL 4 (design: SLO).
SenseCells. ⟨SPEM:MethodDescription⟩, ⟨PROV:activity⟩, ⟨SOSA:observation⟩, ⟨ITIL:SLO⟩.
Row ρ. { ⟨ITIL:SLO:build‑time⟩ ↔ ⟨SOSA:observed‑build‑duration⟩ } — compare promised vs observed duration on the same window.
Bridges. β₁: ⟨SPEM:MethodDescription⟩ narrower‑than ⟨PROV:activity‑plan⟩, CL=2, loss: PROV lacks prescriptive structure; β₂: ⟨SOSA:observation⟩ narrower‑than ⟨ITIL:measurement⟩, CL=2, loss: ITIL abstracts from procedure.
Role-Description hooks. Operator → ⟨BPMN:participant⟩; AccessRole → ⟨RBAC:role⟩. SoD: Operator ⟂ AccessRole-Admin.
Window. Release window: calendar week.
Micro‑narrative (4 lines). The MethodDescription (SPEM) implies a target build‑time; Work (PROV activity) occurs; observations (SOSA) provide actuals; we compare against the SLO (ITIL) via row ρ over the calendar week window. Bridges β₁–β₂ explain why plan/measure semantics do not collapse.
Harness pings. S‑Row‑Cross, S‑Window, S‑RoleDesc‑SingleCell, S‑TemporalHonesty.
Reasoning primitives (judgement schemas)
These are mental checks you can perform on any example page.
-
Row validity
cells(ρ) = {⟨Cᵢ,Sᵢ⟩} with |Contexts(ρ)| ≥ 2 ⊢ validRow(ρ)Reading: A row is valid only if it spans at least two Contexts and all entries are legitimate SenseCells (from F.3). -
Bridge coverage
coRef(Ca,Cb) ∧ ¬sameRow(Ca,Cb) ⊢ requires β(Ca↔Cb)Reading: If two Contexts are co‑referenced in the narrative but their senses are not placed in the same row, an explicit Bridge is needed. -
Role-Description single-cell
Role Description τ used ⊢ ∃!⟨C,S⟩ : ref(τ)=⟨C,S⟩ -
Window sufficiency
compare(qᵢ@Cᵢ, qⱼ@Cⱼ) ⊢ windowDeclaredReading: Any Cross‑context quantitative comparison calls for a stated Window. -
Temporal honesty
C has stance s ∈ {design, run} ⊢ claims@C must respect sReading: Do not assert run‑facts in a design‑only Context, or vice versa. -
SoD integrity
SoD(D₁ ⟂ D₂) ∧ assign(actor, D₁) ∧ assign(actor, D₂) ⊢ violationReading: A declared SoD cannot be violated inside the example. -
Bridge clarity
β given ⊢ kind(β) ∧ CL(β) ∧ loss(β)Reading: Every Bridge shows kind, CL, and a one‑line loss. -
Edition clarity
card(C) ⊢ has(name, edition)Reading: Each Context Card specifies name + edition/profile. -
Harness ping mapping
ping ∈ {S‑*, E‑*} ⊢ ping ⇒ subset of judgements aboveReading: Each named harness check (F.15) has a clear reading in these judgements.
Acceptance tests (SCR/RSCR)
Static conformance (SCR)
- SCR‑F16‑S01 (Row present). The page contains ≥ 1 Concept‑Set row spanning ≥ 2 Contexts.
- SCR‑F16‑S02 (Bridge explicit). Every Cross‑context assertion not justified by a row is shown as a Bridge with kind, CL, loss.
- SCR-F16-S03 (Role-Description anchoring). Each Role Description appearing in the page references exactly one SenseCell.
- SCR‑F16‑S04 (Context prefixes). First mention of each ambiguous term is Context‑prefixed.
- SCR‑F16‑S05 (Window discipline). Any numeric comparison across Contexts names a Window.
- SCR‑F16‑S06 (DesignRunTag). Claims respect each Context’s DesignRunTag stance.
- SCR‑F16‑S07 (SoD). If duties are named and SoD is relevant, SoD is stated and unviolated.
- SCR‑F16‑S08 (One‑page parsimony). The example fits the one‑page canvas; if extended, each sub‑page still respects §6 invariants.
Regression (RSCR)
- RSCR‑F16‑E01 (Edition drift). When a Context’s edition changes, the example either (a) is unaffected or (b) adds a note adjusting β or the row; no silent rewrites.
- RSCR‑F16‑E02 (Bridge re‑score). If an upstream CL definition changes (B.3), affected Bridges on the page show the new CL and, if needed, an updated loss sentence.
- RSCR‑F16‑E03 (Row resilience). If a SenseCell is split in F.3 (sense refinement), the example either keeps the same row using one child sense, or splits into two rows with a short justification.
- RSCR‑F16‑E04 (Window clarity). If organisational cadence changes (e.g., from monthly to weekly), windows on the page are updated explicitly.
Migration notes (conceptual)
- Refactor long tutorials. Extract the claim; pick 3–6 Contexts (Cards); list the SenseCells you actually use; write one tight row; surface any cross‑talk as Bridges with loss notes; delete everything else.
- Split crowded rows. If a row tries to carry more than ~4 cells, split into two rows and write a one‑line purpose for each.
- Stabilise vocabulary. If you find yourself rewriting terms mid‑page, you likely forgot a Context; return to F.1 and add a Card.
- Teach the bridge itch. Leave “these are the same” feelings ungratified until you can articulate kind, CL, loss in one sentence.
- DesignRunTag respect. If a design‑only Context tempts you into runtime talk, move that part of the narrative into a run‑Context and Bridge as needed.
- Keep the page living. When upstream rows/bridges evolve (F.7–F.9), adjust the page minimally and call out the change in a margin note (conceptual, not procedural).
Teaching variants (all obey §6 invariants)
- Two‑Context equivalence. Smallest case: 1 row, 2 Contexts, β (≡, CL=3) to explain why they’re truly the same for this claim.
- Triangulation. 1 row, 3 Contexts; typical for measurement ↔ service ↔ execution.
- Disjointness lesson. No row; one β (disjoint) plus a short SoD story.
- Window primer. Same sense across Contexts but different default windows; the page is about the window choice, not the term.
Didactic checklist (author’s quick scan)
- One sentence claim?
- Contexts (with editions) visible?
- SenseCells named (tech & plain labels acceptable)?
- Exactly one tight row (or two, each justified)?
- All Cross‑context steps shown as β(kind, CL, loss)?
- Role Description → one SenseCell each?
- Window present where numbers meet?
- SoD stated where duties appear?
- Page fits a single view?
Closing distillation (30‑second echo)
A useful worked example is a one‑page alignment: claim → Contexts → cells → one row → explicit bridges → Role-Description hooks → window/SoD if needed. No tooling, no process charts—just visible thinking that any careful reader can replay and critique at the right place.
F.16:End
Unified Term Sheet
Type: Lexical publication pattern (F) Status: Stable
Use this when a term decision is to become reader-facing, durable, public, Core-facing, or cross-context. Use it when a role name, status name, relation name, slot name, FPF kind name, local concept name, or bridgeable term set has outgrown one local repair and publication as one reviewed term row is current.
First useful move: identify the governed term decision, not the wording alone. Name the governed value and its kind, the effective U.ReferenceScheme carried by value, the exact local-sense coordinate, and the current direct pattern that owns the underlying value. When the row will compare local senses, compare their semantic-context projections: the <ReferenceScheme, LocalSenseClaim> pairs recovered from the exact cells. If those pairs differ, test an F.9 Bridge and, for a proposed row use, state the separate C.2.1 claim and its A.10 or B.3 reliance. A cross-scheme case is only the subset in which the ReferenceScheme values differ. Then publish only the term-row facts already governed there. A locality label or selected model-use structure enters only when it changes the naming use; neither is a mandatory sense coordinate.
Primary EntityOfConcern: one durable reader-facing term decision published by one UnifiedTermRow in one bounded unification thread. The role, status value, relation, slot kind, local concept, demonstrated row, or other underlying governed value remains the EntityOfConcern of its direct pattern; F.17 publishes its term decision and does not reconstitute that value.
What goes wrong if missed: a public term sheet becomes a global glossary, a row turns into an ontology claim, a block name becomes a subtype, or a familiar label smuggles role, status, evidence, publication, or source authority into reuse.
What this pattern buys: a compact reader-facing row that preserves the governed object, direct pattern, local senses, bridge, selected names, admissible use, blocked use, and currentness condition without redoing the whole unification argument.
Do not use this pattern for one sentence repair, one private glossary note, one local synonym choice, or one attempt to make an object real by putting it into a table. A short local mantra that only keeps one pattern's Solution in attention remains Plain pattern-local wording and needs no UTS row. Use E.10, A.6.P, C.2.P, F.18, or the direct domain pattern first when the kind, relation, slot position, admissible use, or name-card decision is still unsettled.
Intent and applicability
UnifiedTermSheet is a reader-facing term publication for one bounded unification thread. It gives a careful reader one compact table of reviewed term rows: the chosen Tech and Plain names, the governed value and its kind, the local senses, the Bridge relation when the exact local-sense projections differ and a correspondence use is current, and the small rationale that makes the naming decision reviewable.
The pattern is useful when a team has already done enough local sense work that a name can be reused without redoing the whole unification argument each time. It is especially useful for:
- public role names and role names reused under more than one interpretation scheme;
- status-family names and status-window labels;
- durable relation, slot, interface, or signature names;
- FPF kind names and local concept names that appear under more than one effective reference scheme or reader-facing use;
- term rows cited by examples, training material, project standards, or tool interfaces;
- Part G, architecture, transformation, and evaluation vocabulary whose row ids remain stable across editions.
F.17 does not create U.Role, U.Status, U.Evidence, U.Method, U.Work, U.Episteme, U.Relation, U.SlotKind, or any other underlying object. It publishes a term row for an already governed object, relation, slot, or local concept. The direct pattern remains responsible for the object and its admissible use.
Problem frame
Unification work often succeeds locally and then fails in reuse. A term looks stable in one section, but another reader cannot see which governed value, effective reference scheme, local-sense claim, Bridge, NameCard decision, or direct governing pattern was used. Teams then invent new labels, import one local interpretation as if it were universal, or treat a teaching block as if it were an ontology.
The damage is practical:
- local meanings become global slogans;
- one row silently mixes a role, a role description, a status value, a capability claim, and a work assignment;
- public names drift because no row id, edition, or name-card reference stays stable;
- sameness across different semantic-context projections is asserted by spelling instead of by two separate premises: an actual F.9 Bridge that obtains under its relation-semantic profile, and an affirmative C.2.1 claim that says the Bridge is suitable for the row's exact direction, correspondence rule, and loss tolerance, with current A.10 or B.3 reliance;
- examples in other patterns cite a term but not the term decision that makes the example portable.
F.17 fixes this by making the term row itself reviewable. Each row says what kind of thing is being named, where the local senses came from, what bridge is claimed, which name was selected, and which direct pattern owns the underlying object.
Problem
A public term row can make a local word look reusable while hiding the governed object, effective scheme, exact local-sense claim, obtaining Bridge, separate claim about the row's use, reliance basis, direct pattern, currentness condition, or blocked overread. The problem is to publish a compact term decision that travels across examples, training material, interfaces, and projects without turning the sheet itself into an ontology, evidence source, permission, or proof that the named use occurred.
Forces
Solution
A Unified Term Sheet is a table of term rows for one bounded unification thread.
Publish one term decision through this sequence:
- Confirm that the direct pattern already governs the underlying value and its admissible use. If the kind, relation, slot position, or use is unsettled, return there before term publication.
- Decide whether the name now needs durable reader-facing reuse: public publication, reuse across different semantic-context projections, stable citation, training use, interface use, or editioned maintenance. Otherwise keep the wording local and stop.
- Recover each exact local sense under one effective
U.ReferenceSchemecarried by value. Cite aSenseCellAddressRefthat resolves to the F.17 scheme-based coordinate<reference scheme by value, local expression, local-sense claim>; do not require or infer aU.BoundedContext. - Use F.18 and F.5 to select the Tech and Plain names for the governed value, and cite the resulting NameCard. If no NameCard decision is current, the term is not ready for F.17 publication.
- When the row proposes correspondence between local senses whose
<ReferenceScheme, LocalSenseClaim>projections differ, cite two premises in order. The projections may differ because theLocalSenseClaimdiffers even when theReferenceSchemeis the same; different schemes are only a common subset and do not establish a Bridge. First cite an actual F.9 Bridge for the named endpoint cells and editions and show that its relation-semantic profile applies, its Boolean predicate is true, and its required dependencies are present. Second cite an exact current C.2.1 claim with that Bridge as EntityOfConcern and affirmative polarity for the row's named use, direction, use-specific correspondence rule, and permitted-loss tolerance. Recover current reliance through the exact A.10 evidence-provenance relation plus localRelianceDisposition=pass, or the positive B.3 assurance branch when B.3 is triggered. A negative claim or non-passing reliance rejects or weakens the row use without negating or reidentifying an otherwise obtaining Bridge. When the projections are the same, route a different expression to F.18 designation and add no Bridge. When no semantic-correspondence use is current, add no Bridge or Bridge-use claim regardless of how many schemes are present. - Publish one
UnifiedTermRowwith one governed term decision, direct pattern, selected names, scheme-based sense coordinates, row rationale, admissible and blocked use, edition, and currentness condition. Split unlike governed values into separate rows. - Apply the static and regression checks, then stop at term publication. Any later object, evidence, authority, work, or subject-use claim returns to its direct pattern.
Each row has one primary term decision:
The row may cite several local senses and several Bridges, but it does not fuse their underlying objects. If a source phrase points toward multiple typed FPF values, split the row or cite the direct pattern that keeps the values distinct.
Minimal vocabulary
Scheme-based local-sense coordinate and basis relation
A local sense is not grounded merely because its expression has an accepted name. F.17 therefore separates the scheme-based local-sense coordinate, the naming settlement, and any episteme used as the basis for the sense claim.
SenseCellAddressRef is the F.17 reference form for SchemeSenseCell. Its readable SenseCell(...) spelling is an address, not a claim that a SenseCell is a U-kind or that a context holon exists. A legacy F.3 address of the form SenseCell(ContextId, LocalSenseId) may be consumed only when an explicit adapter resolves ContextId to one exact effective reference scheme and the same local expression and sense claim. If that resolution is absent or lossy, stop the row; do not reconstruct U.BoundedContext.
The retained @Context suffix on LocalSenseBasisRelation@Context is lineage-compatible vocabulary for bounded local use, not a participant declaration. New occurrences have no U.BoundedContext slot. A legacy record may retain boundedContextRef only as non-participant address metadata when it resolves to the same exact scheme-based coordinate; otherwise that record is not current for an F.17 row.
basisPublicationUnitRef narrows a relied-on pattern or publication episteme to the exact bounded unit when that precision matters. It does not turn a file, slide carrier, rendering, or publication occurrence into the supporting episteme.
The basis relation says only that the named episteme supports the named local-sense claim for the stated use. Its description says which claim is supported and which uses are admitted or blocked. A changed NameCard reopens the selected expression. A changed scheme, local expression, local-sense claim, basis-episteme edition, or cited publication unit identifies or selects another basis occurrence. A changed supported-use boundary creates another relation-description edition without silently changing the basis relation.
UnifiedTermSheet is the whole reader-facing term table for one bounded unification thread.
UnifiedTermRow is one local F.17 publication-row form in that sheet. It publishes one reviewed term decision and is not a root U-kind or the underlying governed value.
UnificationThreadId identifies the bounded naming thread that groups this row with related term decisions. It is a sheet-local identifier, not an ontological locality bearer; RowEdition identifies the row edition.
GovernedValueRef references the exact value being named. GovernedValueKindRef separately references its kind. When the term names a kind token, such as DemonstrativeUnfoldingSlice@Context, the governed value is that token and its kind is U.Kind; the direct subject pattern states which kinds of instances the token admits. When the term names a role value, relation value, status value, slot kind, or local concept, the two positions reference that value and its exact governed kind. No union field or generic kind container substitutes for this pair.
DirectGoverningPatternRef names the pattern that owns the underlying value or claim. F.17 owns the term-row publication, not that value.
SchemeSenseCell is the exact F.17 local-sense coordinate. It binds one local expression and sense claim to one effective U.ReferenceScheme carried by value. A NameCardRef may accompany it when F.18 selected the expression. A separate LocalSenseBasisRelationRef relates the coordinate to a supporting episteme; the relation description carries the supported-sense and use-boundary claims, and the NameCard fills neither position.
BridgeRef cites an actual F.9 Bridge only when it obtains for the exact scheme-based endpoints under a relation-semantic profile that applies, has a true Boolean predicate, and has every required dependency present. The reference carries no row-use direction, rule, tolerance, polarity, reliance, or permission. An AdmissibleUse between different <ReferenceScheme, LocalSenseClaim> projections separately cites the exact affirmative C.2.1 claim about that Bridge and names its current A.10 or B.3 reliance basis. A scheme difference alone supplies neither premise.
UnifiedTechName and UnifiedPlainName are the selected names governed by F.5 and F.18. Extra aliases belong in the NameCard or local lexicon material, not as rival unified names in the row.
BlockPlan is the didactic grouping of rows. A block is a memory and teaching device, not an ontological parent.
When to create or update a UTS row
Create or update a UTS row when at least one condition is present:
- the name will be public, Core-facing, or reused under more than one effective reference scheme;
- a row id is needed for later examples, checks, dashboards, training material, or tool interface labels;
- a role name, status-family name, slot name, relation name, or local concept name is being reused outside the immediate local repair;
- an obtaining F.9 Bridge and a separately warranted affirmative C.2.1 claim are being used for one exact term-row use between different semantic-context projections;
- a name-card decision from
F.18needs a compact reader-facing term row; - a direct pattern changes the governed object in a way that changes the name, local sense, bridge, or admissible use.
Do not create a row only because a word was noticed. First recover the kind, relation, slot position, and admissible use under the direct governing pattern.
Row schema
Use these columns unless the sheet has a justified specialization.
For SenseCellRefs, cite the exact by-value reference scheme, local expression, and local-sense claim. If the local expression relies on a naming settlement, cite its NameCardRef. If the local-sense claim relies on a publication or another episteme, cite a LocalSenseBasisRelation@Context with an exact U.EpistemeRef and, when needed, the exact publication-unit ref. The retained suffix is a lineage-compatible name, not a context participant. Do not let a source title, file name, carrier, context label, selected structure, or NameCard substitute for the coordinate or its basis relation.
Block plan
A UTS is complete only with a declared block plan. Blocks stay few enough for a careful reader to remember and specific enough to make row search easy.
Example block plan for a role, method, work, and status thread:
- Context and governed values.
- Roles and role descriptions.
- Role assignments and performed work.
- Methods, method descriptions, and work plans.
- Status families and status windows.
- Relation, slot, interface, and bridge terms.
- Evidence, assurance, source, and publication terms when those are the governed values.
This example does not define an ontology. It is a didactic grouping. The sheet may use different blocks when the unification thread is about architecture, transformation flows, evaluation characteristics, Part G search packs, or another area.
Layouts
F.17 admits two common layouts.
Layout A, scheme-first: keep the left rail fixed and add one exact reference-scheme column per selected interpretation basis. Use this when the reader's comparison concerns local senses under named schemes.
Layout B, comparison-column: keep the scheme, local expression, and sense claim inside SenseCellRefs and use a smaller set of presentation columns such as tradition, discipline, language, publication family, or project family. These columns are teaching aids; they have interpretation authority only when each cell still resolves to its exact by-value scheme and local-sense claim.
Never mix a scheme column and a discipline or project-family column as if they had the same kind. A U.ReferenceScheme is an interpretation basis carried by value; a comparison column is a didactic view.
Static conformance rules for a UTS
Use these checks before citing a UTS row outside its local sheet.
Passing the row schema is not the value criterion. A row succeeds only when its intended readers can recover the correct governed value and direct pattern for the declared use and avoid the blocked use. Row count, filled-cell count, label uniformity, block neatness, and stable identifiers are maintenance aids, not evidence that the term decision is useful or semantically adequate.
Regression and stability rules
Recheck only the rows affected by the changed object, name, scheme, sense, Bridge, basis, or source.
Archetypal Grounding - worked cases
Role name becomes public across two project contexts
A project has ReviewerRole@DesignReview and ReviewerRole@ExternalAudit. The local expressions both say "reviewer", but one concerns a system-in-role performing design review work and the other concerns an assurance actor producing an audit report.
The UTS row does not declare one universal reviewer. It either creates two rows or, when one naming use between different semantic-context projections is genuinely needed, cites an obtaining F.9 Bridge plus an affirmative C.2.1 claim that names the use direction, label rule, and tolerated loss. Each row cites the direct role pattern, the RoleDescription when current, and the F.18 NameCardRef. A.10 or B.3 governs reliance on the use claim; no row or card creates a role assignment or review Work.
Status label looks like a role name
A team proposes BlockedReviewer as a public label. F.17 does not accept it as a row until the direct patterns are separated. Reviewer is a role value; blocked is a status-family value or status-window value. The sheet may publish Reviewer as a role row and Blocked as a status row, with a note that a local UI may render them together. The table does not create a role called "blocked reviewer".
Relation and slot names become reusable
An architecture pattern needs public names for interfaceSlot, providedPort, and requiredPort. The UTS row cites A.6.5 for slot discipline, A.6.RSIR when the relation-signature-interface boundary is current, and F.18 for durable names. The row does not treat a slot name as a component, role, or capability. If a project context uses port differently, the UTS row keeps the local sense and bridge explicit.
Misleading evidence-role row
A sheet has a row labelled Evidence role. F.17 repairs the row by recovering the governed object instead of treating that label as a U-kind. If the claim is that an episteme is being used as evidence for another claim, A.10, B.3, or A.2.4 governs the evidence relation. If the claim is that a system performs evidence-producing work, A.2.1, F.6, and A.15.1 govern role assignment and performed work. The UTS may publish names for these values; a generic evidence-role row that fuses them is not admitted.
Manufacturing batch across material and planning contexts
A furnace team uses batch for one physically handled set of shafts that shares a heat-treatment run and traceability basis. A planning dashboard uses batch for a grouping of intended PlanItems. Spelling does not make these one governed value. Recover the physical batch under the direct material or production DPF pattern, including its identity and part-whole treatment when the proposed comparison relies on either; recover the planning grouping under A.15.2 and its direct planning relation. Publish separate rows unless an obtaining F.9 Bridge states the exact semantic relation and a separate affirmative C.2.1 claim names the proposed comparison direction, correspondence rule, and tolerated loss with current A.10 or B.3 reliance. A batch row cannot turn a PlanItem grouping into a physical holon or make the physical batch a WorkPlan.
Clinical discharge wording
A clinical publication proposes one row for discharge and discharge-ready. First separate the governed values. A patient-state classification uses A.19.SPR plus the clinical DPF pattern for its bearer, state frame, evidence, qualification window, and use. An accountable discharge decision remains a decision relation under its direct pattern. A completed discharge is dated Work under A.15.1. Publish distinct rows and connect them only through relations actually governed in the clinical context. One familiar label does not make state, decision, and Work interchangeable.
Demonstrative walkthrough, mantra, and mantra move
These rows publish naming decisions already governed and named in A.22.CGUS. They cover only the CGUS-demonstrative use of mantra and mantra move; they do not define the broader Plain practice of giving one pattern a short repeatable local mantra. F.17 publishes the bounded terms; it does not govern the demonstrated structures, rows, or pattern-local formulas.
The two senses of the same demonstrative value remain distinct:
SeminarExpression.FPFPracticalUse.2026-07-11 names the seminar-content episteme; the publication occurrence that makes an edition available and the .pptx and extracted Markdown carriers remain separate. The public basis relation instead relies on the current A.22.CGUS pattern episteme and narrows that reliance to the ordinary-use publication unit.
This worked case is cross-scheme because its endpoint ReferenceScheme values differ. The obtaining relation and the row's named use are recorded separately:
The Bridge is Narrower-than because the seminar sense adds repetition and attentional use. That relation orientation does not grant a use. The separate affirmative claim states the exact SeminarTeaching-to-FPFPublic naming use, rule, and tolerance; the A.10 relation and RelianceDisposition=pass support reliance only on that claim. Changing reader evidence may reopen the claim or reliance while leaving the Bridge fixed. Neither the card nor the passing disposition authorizes publication or proves that publication Work occurred.
The seminar deck and its textual extraction establish the teaching problem and observed concept use. They do not establish English lexical suitability by themselves. Current English dictionary evidence supports the repeated-formula and watchword senses of mantra, while its Sanskrit analysis as an instrument of thought supplies the attentional rationale. F.18 and reader-use evidence decide whether that English candidate fits this bounded FPF use. This row does not claim that every local pattern mantra is a DemonstrativeUnfoldingSlice@Context; a pattern-local formula is interpreted from that pattern's Solution unless a stronger governed value is claimed. This row makes no cross-language sameness claim. If the term is independently published under another semantic-context projection—including the same scheme with a different LocalSenseClaim or another scheme—that publication needs its own F.18 NameCard, exact F.17 SenseCell, and naming evidence. Only when a named current use relates the two projections must that use also cite an obtaining F.9 Bridge, a separate affirmative C.2.1 bounded-use claim for its exact action, direction, rule, and tolerance, and the claim's current A.10 or B.3 reliance. Without that use, publication alone adds no Bridge or use claim.
No F.17 row is published for working product. The phrase has no single governed value across physical entities, changed states, capabilities, relations, and epistemes. Technical text uses the exact subject-governed result name; ordinary explanation may say result produced by work, or first useful result when firstness and receiving-use value have been established.
Bounded model-use structure public row
This row publishes the already selected A.1.1/F.18 naming decision for the dependent U.Structure specialization. It does not make A.1.1 Stable, create a structure individual, or make any relation obtain.
This row makes only BoundedModelUseStructure current for public reuse. A.22's separate cross-structure NameCard remains local and pending: without an independently governed obtaining crossing and an exact positive membership basis, F.17 returns no public row for that label.
Three bounded-model-use direct relation-kind rows
These rows publish the three already governed A.1.1 relation-kind names used by E.24.UK. Each row publishes a designation only. A.1.1 still decides whether one of those relation occurrences obtains and how it is reidentified. The naming objects and the separately governed local-sense basis occurrences make none of the three A.1.1 relations obtain, and they create no assertion, temporal extent, Work, or structure.
No public F.17 row is returned for ModelExpressionCoherencePredicate: that label remains local to A.1.1 and names the five-part criterion ValueKind rather than any of the three relation kinds.
Bias-Annotation
F.17 blocks table-bias: a row does not make the named object real, global, reusable, equivalent, or authoritative. It also blocks label-bias: the public name is a designation for a governed value, relation, slot, or local concept, not a substitute for the direct pattern, scheme-based local-sense coordinate, Bridge, admissible-use statement, or currentness condition.
Conformance Checklist
Common Anti-Patterns and How to Avoid Them
Closure conditions
A UTS row is ready for ordinary reuse only when:
- the governed value and its exact kind are explicit;
- the direct pattern is named;
- Tech and Plain names are selected under
F.5andF.18; - every local sense resolves to one exact by-value reference scheme, local expression, and local-sense claim;
- each relied-on local-sense basis is separate from its naming settlement and is cited through
LocalSenseBasisRelation@Context; the retained suffix adds no context participant; - every row that claims use between different
<ReferenceScheme, LocalSenseClaim>projections cites an obtaining F.9 Bridge for the exact endpoint cells, then separately cites an affirmative C.2.1 claim for the row's action, direction, rule, and tolerance with current A.10 or B.3 reliance; same-projection designation and no-current-correspondence-use cases add no Bridge or use claim, while scheme difference alone opens only the Bridge question; - the row names admissible use and blocked use;
- currentness conditions are stated;
- any role, status, evidence, source, publication, description, method, work, relation, slot, interface, or characteristic claim remains under its direct pattern.
Consequences
Benefits. A UTS row gives readers a stable place to recover a term decision without treating a table as an ontology. It supports public reuse, examples, training material, interface labels, and comparison across different semantic-context projections while preserving exact local-sense claims and direct-pattern authority.
Costs. A tempting public label may wait until the governed value, effective scheme, exact local-sense claim, any needed Bridge, separate bounded-use claim and reliance basis, naming settlement, and currentness condition are settled.
Failure avoided. F.17 prevents global glossary drift, row-shaped ontology claims, block-as-subtype mistakes, label-based sameness, and evidence or role authority smuggled through a public term.
Rationale
Terms travel farther than the reasoning that produced them. F.17 keeps that travel safe by carrying the minimum reopening hooks: governed object, direct pattern, local senses, obtaining Bridge when needed, separate bounded-use claim and reliance basis, names, admitted and blocked row use, and currentness. The row stays compact because F.9, C.2.1, A.10, B.3, and the direct subject patterns still own those objects.
SoTA-Echoing
The current best problem-solving line for F.17 is the current FPF value, reference-scheme, naming, Bridge, status, and regression architecture. The 2026 language-scent study changes contextual cue handling subject to its evidence limits. SKOS remains a stable reference model for label and mapping separation; its age and stability do not make it the method that governs FPF term decisions.
Currentness rule: when F.5, F.8, F.9, F.10, F.15, F.18, A.1.1, A.2, A.2.1, A.2.7, A.6.5, A.10, B.3, E.17, or E.10.D2 changes the governed value, effective reference scheme, local-sense claim, Bridge, bounded-use claim, reliance basis, source-use boundary, status-family boundary, role boundary, or naming decision, recheck only the affected UTS rows and examples.
Relations
Builds on: F.2 and F.3 for local-sense discovery probes; C.2.1 for the exact episteme and effective by-value reference scheme; and F.5, F.7, F.8, F.9, F.15, and F.18 for naming, Bridge, and conformance decisions. F.17 does not inherit F.3's retired U.BoundedContext reading.
Coordinates with: A.2, A.2.1, A.2.7, A.6.5, A.6.P, A.10, A.15.1, A.19.SPR, B.3, C.2.P, E.10, E.10.D2, E.17, F.4, F.6, F.10, F.14, and G.11. Row-local review after a changed value, name, sense, Bridge, or edition remains with the direct pattern, F.18, F.9, F.15, and these F.17 regression rules. Use G.11 only when an actual refresh plan, edition orchestration, telemetry, freshness, or decay claim is current.
Constrains: any public, Core-facing, durable, or cross-context term sheet row that cites FPF vocabulary, local concepts, relation names, slot names, role names, status names, or bridgeable sense clusters.
Didactic distillation
A Unified Term Sheet is not the ontology and not the object. It lets people reuse a naming decision without guessing. Each row says what is named, which pattern governs it, which local senses were used, whether an exact Bridge obtains between different semantic-context projections, which separate claim supports that row use, which names were selected, and what the row may and may not be cited for. The row, card, and reliance record neither authorize the use nor prove that it happened.
F.17:End
Local-First Unification Naming Protocol
Status: Stable Pattern state: stable pattern. Audience: engineer-managers, lead architects, ontology editors, and authors who must make one name reusable without turning that name into a hidden ontology.
Use This When
Use F.18 when a name must become stable, public, Core-facing, reusable across contexts, or durable enough that later work can cite it without guessing. Typical cases:
- a local expression becomes a durable name for a role, relation, slot, method, work, characteristic, status value, architecture element, or other already governed value;
- two teams use different words for the same candidate sense and need one reusable term plus preserved local wording;
- one tempting head word is useful in one context but misleading in another;
- a role-derived, method-derived, status-like, evidence-like, interface-like, or slot-like name risks creating a second ontology by wording alone.
First useful move: recover the exact governed object or governed value before choosing the name. When relation-facing wording is current, distinguish a predicate-definition episteme, an admitted relation kind, an obtaining relation occurrence, a representation element, and a designator or reference; for a residual relation claim, cite the A.6.RCD settlement before naming. Other candidates—such as a role, method, work, characteristic, status value, architecture element, or claim-bearing episteme—stay under their direct owners rather than being forced into that relation-facing list. Then ask: under which effective by-value U.ReferenceScheme, by which governing pattern, for which use, and with which exact local sense is this object named? Only then decide whether a local expression is enough or a NameCard is needed. A public row is a later step: create one only when public, Core-facing, durable-across-context, or cross-context reuse is current and the F.17 entry/result gate in section 4 passes.
Do not use F.18 for one-off wording repair. If the phrase is local and not becoming a reusable name, use E.10, E.10.ARCH, A.6.P, A.6.RSIR, C.2.P, or the governing pattern for the object being named. In particular, say in ordinary words whether one exact Bridge is suitable for one named use; do not create a NameCard, public claim kind, or durable CamelCase head merely to abbreviate that C.2.1 claim. Reopen F.18 for that claim only when an independent later use actually needs a reusable name beyond the local statement.
Context
Names are handles for use, not creators of ontology. A good name lets people talk about a governed value without smuggling in extra role, capability, method, work, status, evidence, interface, or cross-context claims.
FPFCoreReferenceScheme is the by-value U.ReferenceScheme used to interpret current FPF Core Tech labels and relation names. A NameCard that uses it carries that reference-scheme value by value, consistent with C.2.1; F.18 does not introduce U.ReferenceSchemeRef. A name interpreted under another reference scheme carries that scheme by value. When a naming use must align two exact local senses, compare their <ReferenceScheme, LocalSenseClaim> projections. The same projection plus another expression is a designation question and gets no Bridge. Different projections—including the same scheme with different LocalSenseClaim values—open the F.9 question; a different scheme is only one such case and proves no Bridge. Test the exact F.17 cells and cite a Bridge only when its predicate actually obtains. State the proposed naming use separately in an exact current C.2.1 claim with that Bridge as EntityOfConcern and affirmative polarity; name the direction, correspondence rule, and tolerated loss. For ordinary bounded reliance below B.3's threshold and with no assurance claim, require the exact A.10 evidence-provenance graph relation plus RelianceDisposition=pass for that use. When an assurance claim is made or the threshold is met, follow B.3's first-claim decision and require either a current positive claim carrying that use with its sufficient record or an exact disposition that stops or narrows it; the threshold alone creates no positive claim. The named use is still claim content. Neither reliance route authorizes it or proves that it occurred. If it did occur, recover the actual Work under A.15.1, assertion episteme under C.2.1, publication occurrence under E.17, direct relation under its domain pattern, operation application under A.6.1, or another receiving object under its current owner. Name a BoundedModelUseStructure only when that selected structure changes the sense or naming use. Until the Bridge, separate claim, and required reliance are current, keep the names local or record the unresolved alignment. When no semantic-correspondence use is current, create no Bridge or use claim regardless of scheme count. A reference-scheme or model-use-structure difference alone supplies neither premise, governed-value identity, nor U.BoundedContext.
F.18 supplies the naming discipline for Part F and for any FPF pattern that needs a durable public term. It coordinates with:
F.5for type-name and role-description label form;F.8for the prior decision that an expression should become a durable name rather than remain local, reused, or aliased;F.9for an actual sense Bridge between different<ReferenceScheme, LocalSenseClaim>projections;F.13for renames, aliases, splits, and merges;F.14for anti-explosion control;F.17only as a later public-row consumer whose current entry and result must accept the exact F.18 objects named below;A.6.5andA.6.RSIRwhen relation, signature, interface, slot, or role wording hides the governed object;A.6.P.WMRwhen work/method-boundary wording still hides the exact relation; andA.15.1when a candidate performed-work name still lacks occurrence grounding.
The central subject is one F.18 naming settlement for one exact already-governed value. F.18 governs the candidate comparison, selected Tech and Plain designations, declared naming use, and reopen conditions. The value's direct pattern still governs its kind, identity, obtaining, and other subject semantics.
Its complete claim graph records the selected designation expressions, exact local sense, covered and rejected alternatives, rationale, lineage, and reopen condition.
Problem
FPF texts fail when names are treated as if they carried ontology by themselves.
- A short label appears in another context and gets treated as the same value although no obtaining Bridge establishes the exact sense relation, no separate claim says that Bridge suits this reuse, and no current reliance supports that claim.
- A role-looking name quietly bundles role value, holder assignment, capability, method fit, work evidence, or authorization.
- A status-like or evidence-like phrase becomes a fake role or fake type because the row says "evidence role", "status role", or similar wording.
- A relation, declaration-local slot, interface, port, or signature name hides the exact governed object, relation-participant meaning, or direct pattern that should own the claim.
- A term chosen for convenience becomes a permanent Core-facing name without candidate comparison, rejected alternatives, or lineage.
- Local names proliferate until the corpus has several almost-synonyms and no recoverable reason for choosing one.
The repair is not to choose prettier words. Recover the governed value, then record a naming settlement whose kind, effective reference scheme, exact local sense, intended use, and selected designations remain visible. Publication is a separate later relation.
Forces
Solution
Use a local-first naming protocol:
- Recover the governed value, its kind, and its direct governing pattern.
- Decide whether the expression should remain local or the current use needs a durable reusable name; apply
F.14before adding a card, cell, or row. - For a durable name, constitute one
NameCardepisteme underC.2.1; keep the value, its kind, the card, selected designations, exact local sense, and any basis or Bridge relation distinct. - Choose the Tech and Plain labels from the smallest candidate set that covers the live head-term families and plausible neighbouring objects.
- Record the covered alternatives, rejected candidates, selection reason, lineage, and the smallest condition that reopens the settlement.
- Only for public, Core-facing, durable-across-context, or cross-context reuse, test the then-current
F.17entry. It must accept the exact governed value and kind, NameCard episteme, by-value scheme, local sense, and any actual Bridge. Public or durable reuse alone creates no Bridge. When the named use relates different<ReferenceScheme, LocalSenseClaim>projections, F.17 must also accept the separate affirmative C.2.1 claim and current A.10 or B.3 reliance through the row rationale or notes rather than treating either as NameCard content. Its result must supply the required public row. If any required input or result is absent, retain the durable name and NameCard locally, mark the public row pending, and stop. - Keep the Bridge, the separate claim about its named use, A.10 or B.3 reliance, authorization, and any actual Work, assertion episteme, publication occurrence, direct relation, operation application, status, evidence, slot, role, method, or interface object under their own governing patterns. F.18 decides only the naming settlement.
Naming Invariants
Every durable name must satisfy these invariants.
NameCard Fields
A NameCard is complete when its exact C.2.1 identity-bearing U.ClaimGraph is recoverable; completeness is not a field count. The accepted D11 progressive-minimum cards NC-U-RELATION, NC-CROSS-CONTEXT-RELATION-STRUCTURE, NC-PROBLEM-CRITERION-APPLICABILITY-RELATION, and NC-PROBLEMATIC-FOR-RELATION remain conforming. Each already states the governed value and direct owner, effective scheme and local-sense claim, one selected Tech/Plain pair, candidate set, rejections, rationale, lineage, and reopen condition. Its direct owner makes the governed kind unambiguous. These filled claims together constitute the card's complete claim graph; an omitted expanded field contributes no hidden claim. Section 4.2a carries the four current expanded bounded-model-use cards.
Use the expanded form only when the current naming use needs the additional position:
Field discipline:
- The card is a
[C.2.1](/generated/patterns/C.2.1)episteme.GovernedValueRefis its exactEntityOfConcern; the completeU.ClaimGraphconstituted by all identity-bearing naming-settlement claims is itsClaimContent; andReferenceSchemeis the effective by-valueU.ReferenceSchemeunder which that graph is interpreted. Changing any of those three identifies another card episteme. Changing only a graph designator, card designator, carrier, field order, or layout does not. - In the expanded form, the
ClaimContentfield resolves to that complete graph; it is never a scalar summary beside other identity-bearing claims. The readable sibling fields designate graph nodes, edges, or projections. Changing a selected designation, declared use, local-sense claim, coverage, rejection, rationale, lineage, or reopen claim changes the graph and therefore the card episteme even if the displayedClaimContentreference string stays the same. NameCardIddesignates the card episteme. It is not another identity discriminator and does not create a card kind.GovernedValueRefresolves to the exact already-governed object or value being named.GovernedValueKindRefis added when the kind is not already unambiguous from that value and its direct owner, or when a receiving use needs the exact kind reference. For relation-facing wording the value reference resolves to exactly one of the objects distinguished in section 5.6; a field label, card, table row, or local phrase is not a proxy for that object.GoverningPatternRefnames the direct pattern that decides the value.[F.18](/generated/patterns/F.18)governs only the naming settlement recorded in the card; a pattern that merely presents or teaches the name governs neither the value nor this settlement.LocalSenseRefin a progressive-minimum card states the exact local-sense claim directly under the card's by-value scheme.LocalSenseCellRefin an expanded card resolves to the current F.17 coordinate<ReferenceScheme by value, LocalExpression, LocalSenseClaim>and does not require a context holon.LocalSenseBasisRelationRefis present only when a separately governed relation to a basis episteme is current; a source title, card field, or publication is not that relation.CandidateSetrecords the plausible labels considered by head-term family. When family coverage or an exception is not already recoverable from the set, rejections, and rationale, addCandidateCoverageto state which live families and neighbouring-object readings were tested and whether any plausible alternative remains open.RejectedCandidatesrecords why tempting names were not selected. A usable alias is recorded in lineage as an alias, not left as a second selected Plain label.BridgeRefscontains only actual F.9 Bridge occurrences whose relation-semantic profiles obtain for the exact endpoint senses. It carries no naming-use direction, use-specific rule, tolerated loss, polarity, reliance, or permission. When naming across different semantic-context projections relies on a Bridge, recover the separate C.2.1 claim and its current A.10 or B.3 reliance outside the NameCard; omitBridgeRefswhen the settlement makes no Bridge claim.PublicRowStatusis exactly one oflocalOnly,pending, orcurrentwhen public-row use is current.UnifiedTermRowRefseparately resolves to the exact row and is present only when status iscurrentafter the section 4.4[F.17](/generated/patterns/F.17)entry/result gate passes. Omission in an accepted progressive-minimum card claims no row. A pending public use does not imply that a row already exists.RefreshConditionnames the smallest value, kind, scheme, local-sense, Bridge, governing-pattern, use, or repeated-reader-error change that reopens this exact settlement.
Names such as "foundational principle pattern set", "FPF Core", "domain principle framework", and "local practice framework" require ordinary NameCard work before public stabilization under an effective reference scheme. Source aliases such as ZPF, SPF, TPF, or broad xPF labels remain intake aliases until [F.18](/generated/patterns/F.18) has settled the governed value and kind, by-value reference scheme, exact local sense, rejected candidates, and admissible short form.
Current Bounded-Model-Use NameCards
The four expanded cards below are the current FPFCoreReferenceScheme naming settlements consumed by F.17:12.4d-12.4e. Each resolves to one exact current scheme-based F.17 cell and its separately governed local-sense basis relation. They publish designations for already governed values; they create no kind, structure, relation occurrence, assertion, Work, Bridge, use, reliance, row-availability occurrence, or other receiving action.
All four current cards use one FPFCoreReferenceScheme cell apiece and therefore add no Bridge or use claim. If a named current use relates different <ReferenceScheme, LocalSenseClaim> projections, F.9 separately governs the obtaining Bridge, C.2.1 separately identifies the affirmative bounded-use claim, and A.10 or B.3 separately governs reliance; without that use, no Bridge or use claim is added. For ModelExpressionCoherenceRelation, an A.1.1 predicate may name an obtaining Bridge as a prerequisite of its bridged interpretation branch; a receiving assertion or structure selection that relies on that occurrence still needs its own bounded-use claim and reliance path. None of those objects becomes part of a NameCard or public row.
Candidate Selection
Do not pick a durable label in one stroke or work toward a fixed candidate count. Build the smallest set that covers at least two live head-term families and every plausible neighbouring-object reading that could change the decision. Stop when each live family has a representative and no untested plausible alternative could overturn the selection. If a deadline forces closure while a plausible family or alternative remains untested, record that exception in CandidateCoverage and make it part of RefreshCondition.
Judge candidates on:
- semantic fidelity: does the label preserve the governed value without adding or losing required conditions?
- reader ergonomics: can the intended reader recognize, say, and remember it in the current situation?
- morphology fit: does the word shape fit the kind being named, for example role value, method, work, description, relation, slot, characteristic, or status value?
- alias risk: will a careful reader import a wrong sense from nearby FPF patterns or external practice?
Use these as ordinal comparisons. Do not average them into one score. If a Pareto-front or quality-diversity method is used, the dimensions and dominance rule must be visible on the card.
One candidate can win even when it is not perfect, but the SelectionRationale must say what it buys, what risk remains, and why the covered set is sufficient for this use.
Public Term Rows
A durable local name needs no row. When public, Core-facing, durable-across-context, or cross-context reuse is current, test the then-current F.17 entry with the exact objects already recovered here. Public or durable reuse alone creates no Bridge. The entry must accept separate references to the governed value and its kind, direct pattern, NameCard episteme, selected Tech and Plain designations, effective by-value reference scheme, exact F.17 scheme-based SenseCell, any separate local-sense basis relation, and any actual F.9 Bridge. When the row use relates different <ReferenceScheme, LocalSenseClaim> projections, its rationale or notes must separately cite the affirmative C.2.1 claim for the row's exact action, direction, rule, and tolerance and that claim's current A.10 or B.3 reliance. Its result must return one row for one naming decision with the supported and blocked citation uses visible. If it cannot, keep the durable name and NameCard local and mark the public row pending. Do not repair or emulate the missing row inside F.18.
When that gate passes, keep these positions distinct:
GovernedValueRef: the exact already-governed value;GovernedValueKindRef: its exact kind, never an alternative to the value reference;- direct governing pattern;
- NameCard episteme and selected designation expressions;
- exact local-sense and basis-relation references;
- any actual Bridge occurrence;
- for reuse between different semantic-context projections, the separate affirmative C.2.1 claim about that Bridge and its current A.10 or B.3 reliance, cited in the row rationale or notes rather than absorbed into the NameCard;
- the row or row episteme, its edition, supported citation use, blocked use, and currentness condition.
The row is neither the governed value nor an agent of publication. When availability is needed, an E.24.PUB EpistemePublicationRelation occurrence makes the exact row-episteme edition available to a declared audience for a bounded use through a distinct publication form and presentation carrier. The form does not publish itself, and the row's currentness claim or relation remains separate from the availability occurrence.
A row for ReviewerRole points to the role value and its selected names; it neither creates the role nor makes an assignment obtain. A row for EvidenceUseRelation points to the admitted relation kind or other exact governed object; it does not make an episteme into a role or make the relation obtain. A row for SlotKind or EndpointSlot carries or designates selected vocabulary only after the exact slot object is governed; it neither makes that row edition available nor creates a generic interface ontology.
Role, Assignment, Slot, and Status Naming Settlement
This settlement makes several naming boundaries explicit.
Role Names
A durable role name names one governed U.Role value interpreted through one named role-taxonomy episteme under its effective by-value U.ReferenceScheme. If one selected model-use structure, role-relation structure, claim scope, or project-work relation changes the naming use, cite that object separately; the name does not create it. Good role names normally use role morphology, for example ReviewerRole, ShipbuilderRole, or ServiceProviderRole.
A role name must not include:
- the holder that fills a role assignment;
- capability evidence or skill level;
- method or method-family selection;
- performed work;
- status value or gate result;
- source, evidence, publication, or assurance use.
If a phrase such as SeniorReviewer, NightOperator, or source wording like evidence role appears, recover the governed values first. The result may be a role value, a holder assignment, a status assertion, an evidence-use relation, a work admission condition, or a local source phrase. Do not force all of them into one role name.
Holder Assignment Names
A holder-assignment name denotes one already recoverable obtaining U.RoleAssignment occurrence governed by A.2.1; the role name itself does not identify that occurrence. Before naming it, recover its four actual participants: the admitted holder system, role value, role-taxonomy episteme, and effective reference scheme. Also recover the uninterrupted assignment episode. The currently known AssignmentInterval remains assertion- or occurrence-description content, not a fifth participant. A durable name uses a NameCard whose GovernedValueRef resolves to that occurrence. If public or cross-context reuse is needed, apply the section 4.4 gate; until it passes, retain the card locally and mark the row pending. Neither a name, card, row, nor publication occurrence makes the assignment obtain.
Holder#Role:Context@Window is source notation only. Recover the exact referent behind Context, its kind, and the direct relation that makes it relevant. A selected BoundedModelUseStructure stays in the receiving assertion or use and appears only when it changes interpretation. The token is neither a role name nor proof of assignment, capability, or performed work.
Capability, Method, and Work Names
Keep these separate:
ShipbuilderRolenames a role value;ShipbuildingCapabilitynames a capability of an admittedU.System, including an acting holon admitted as a system for that capability claim;ShipbuildingMethodnames a method or method family;HullAssemblyWorknames a work family or planning-level work label until an exact performed occurrence is current.
A role-derived or role-method-coupled expression is only a naming cue. First recover the exact value it refers to. If that value is an exact method or method family under A.3.1, choose a method name. If it is an exact U.MethodDescription, U.WorkPlan, or dated U.Work occurrence, name that description episteme, plan episteme, or occurrence separately under A.3.2, A.15.2, or A.15.1; those names are not method names. If the expression refers to another value, use that value's direct owner. F.18 chooses a durable name only after this recovery. A role relation may constrain who may use the method or perform the work; it neither creates nor names the method, description, plan, or work occurrence.
Treat an action nominal such as testing, assembly, maintenance, evaluation, or inspection as a morphology cue, not a governed kind. Placement in function- or flow-structure prose identifies no U.Function. If the function-like use remains claim-bearing while its exact object or relation is hidden, apply A.6.F; if it is already recoverable, name the exact method, method description, required-transformation or required-effect claim, actual U.Transformation, TransformationFlowStructure locus, functional-view record, plan content, performed-work occurrence, or other governed value under its direct pattern before F.18 selects a durable name. A WBS element, activity, or Work Package remains plan- or assignment-episteme content about intended work; none of these uses identifies a performed Work occurrence admitted under U.Work.
A durable name for exact performed work names one occurrence already grounded under A.15.1, not the action nominal or plan row. The current naming use must be able to recover the performer through an obtaining U.RoleAssignment, actual enactsMethod, temporal extent, exact containing system, affected referent, and the direct bindings and resource-use facts material to the occurrence. Add the exact continuity policy only when interruption, retry, changed method or bindings, or competing designators make occurrence identity material. Keep neighboring direct subject or resource-use claims, A.15.PROD production claims, measurement-result epistemes, evaluation results, C.11 choices or decisions, delivery occurrences, acceptance verdicts, and downstream-effect claims separately named under their direct governors.
When the underlying boundary wording still hides the relation, apply A.6.P.WMR. F.18 starts only after an exact governed value and its use are recovered through a direct subject relation, an exact A.6.1 application binding, or an exact local A.15.PROD/A.6.RCD claim. An exact non-assertability result independently records factually unsupported, missing-information, or missing-governor; none authorizes durable naming, and only missing-governor is an ontology blocker that names the affected use and future owner. This section selects and tests a name. It does not define a second work-occurrence or work-result recovery algorithm.
Method-relation and method-composition names are method-side names too. If a phrase names serial composition, parallel composition, guarded choice, iteration, refinement, substitution, decomposition, parameterization, method-family membership, fallback, or dispatch among methods, first decide which object the phrase names.
- If admitted submethods make one composite way of doing, name the composite
U.Method.A.3.1governs that Method, and its exact composition relation stays withB.1.5or another direct composition owner. - If the phrase names relations among methods without making one whole Method, select a
U.StructureunderA.22and designate itMethodRelationStructure@BoundedContext. Each included composition, refinement, substitution, iteration, decomposition, family-membership, selector, fallback, description, or work-use relation stays with its directA.3.1,G.5,A.15, or composition owner. - If the current object is a separately identified episteme that describes one exact admitted Method,
A.3.2may classify it asU.MethodDescription; F.18 names that episteme separately from the Method. - If an episteme instead describes the selected relation structure,
C.2.1keeps that structure as its exactEntityOfConcern; the episteme is not thereby aU.MethodDescription.
F.18 settles a durable name only after one of those exact objects has been recovered. Algebraic, graph, categorical, process-calculus, matrix, embedding, distributed, or neural notation names the lens or representation only when that lens is the governed value.
Role-Relation, Method-Relation, Role-Method, and Lens Names
Role-relation expressions remain expressions or relations unless the direct role pattern admits a durable role value and the NameCard settles its by-value reference scheme and local sense. A role-algebra, graph, matrix, embedding, distributed, or neural description is a lens over the selected role relation structure; it is not automatically the named role, holder, method, or work.
First recover what the name is for:
Status, Evidence, Source, and Publication Names
Status-like and evidence-like wording must go to direct patterns:
- status value or status assertion:
F.10orA.19.SPR; - evidence-use relation:
A.10; - assurance use:
B.3; - source use:
E.10.D2or source-use patterns; - description-episteme identity:
C.2.1; - multi-view publication face or form:
E.17; - availability of one selected edition, expression by a form, and bearing by a carrier:
E.24.PUB; - gate or admission result: the relevant gate, decision, or assurance pattern.
Do not name these as U.Role values unless a work-facing role value is actually current. "This standard plays the role of evidence" is repaired to the appropriate evidence-use, source-use, or status-use relation; it is not a work-role assignment for the standard.
Relation, Slot, Interface, Port, and Signature Names
If a name touches relation, slot, interface, port, boundary, protocol, API, or signature wording, use A.6.RSIR and direct governing patterns.
A.6.5governs relation slot discipline and SlotSpecs.A.6.0governs signatures and rule-governed declarations.A.6.Mand architecture patterns govern module interfaces and architecture interfaces.A.6.F, transformation, and architecture patterns govern functional ports and functional structures.A.6.C, protocol, service-access, and commitment patterns govern API, protocol, and service-access cases.C.2.1governs a claim-bearing interface-description episteme.E.17governs a multi-view publication face or form.E.24.PUBgoverns availability of the selected edition and the separate form-expression and carrier-bearing relations.
Before naming a relation-facing object, keep these settlements distinct:
One token may be reused only where the reference scheme and local sense preserve these distinctions; it cannot collapse definition, kind, occurrence, representation, and designator into one object.
F.18 can settle a durable name for the recovered value. It does not decide which value the interface word names, create a public row, or make that row available.
What Belongs In The Label
Belongs in the label:
- a head word that helps readers recognize the governed value;
- a stable qualifier that is part of the local sense;
- role morphology when the governed value is a role;
- relation, slot, method, work, or characteristic morphology when those kinds are current.
Does not belong in the label:
- numbers and thresholds;
- temporary admission state;
- holder identity;
- capability evidence;
- method fit unless the governed value is a method or method family;
- work occurrence;
- gate result;
- source or evidence authority;
- context label used as if it were universal.
Quick check: if removing the word changes only current admission, holder, evidence, date, or gate use, it does not belong in the durable label.
Worked Cases
Role, Holder, Capability, Method, And Work
A shipyard team wants one reusable name for the role used in shipbuilding work. It first separates the values that the source word "shipbuilder" could hide.
Recovered values:
ShipbuilderRole, interpreted through the role-taxonomy epistemeShipyardProductionRoles-2026underShipyard-Production-Scheme;- one holder-assignment occurrence under
A.2.1, with its holder system, role value, taxonomy episteme, and scheme as participants and its known assignment interval stated separately; ShipbuildingCapabilitywith envelope and measures under capability patterns;ShipbuildingMethodor method family underA.3.1; if a separately identifiedShipbuildingMethodDescription : U.MethodDescriptionepisteme is current, name it separately underA.3.2only when its exactEntityOfConcernis that Method;HullAssemblyWorkunder work patterns.
Here HullAssemblyWork is a work-family label or a label in a plan or assignment episteme. A designator such as HullAssemblyWork-42@2026-07-15T09:10/11:35 names performed work only when the current record recovers its obtaining performer assignment, enacted method, temporal extent, containing system, affected hull referent, material bindings and resource-use facts, plus an applicable continuity policy when disambiguation is current. A changed hull state, measurement result, evaluation verdict, delivery occurrence, or acceptance verdict remains a separately governed and separately named value.
F.18 settlement: no separately recoverable F.17 coordinate is current for this local-only case, so the card states one direct LocalSenseRef using the expression shipbuilder role; the other candidates remain comparison alternatives, not extra sense coordinates.
The four candidates execute the section 4.3 stopping rule: each live head family is represented, and the already recovered method and work objects are not plausible alternative labels for this role value. The rejected candidates are not "worse synonyms." They name different governed values or add conditions not carried by this role value. If public, Core-facing, durable-across-context, or cross-context reuse becomes current, apply the section 4.4 gate. Until it passes, keep this card local and do not imply a row or publication occurrence.
Engineer-Roboticist and Musician
A lab says: "Vasya is an engineer, does robot engineering, is therefore an engineer-roboticist. These are musical robots, and Vasya is also a musician, performs music, and teaches robots music."
Recovered values:
- Vasya as the admitted holder system;
MusicalRobotLab_2026is the lab and work locus in its direct relations, not a participant added toU.RoleAssignment; MusicalRobotLabRoles-2026as the role-taxonomy episteme andMusicalRobotLab-Schemeas its effective reference scheme;- an engineering role value or local engineering-role expression;
- robotics as a domain, practice, method-family, or work-field qualification of that engineering role expression;
MusicianRoleas an independent role value when music performance matters separately;- robot-engineering method or work, music-performance work, and robot-music-teaching method or work under method and work patterns;
- an optional role-algebra, graph, matrix, embedding, or neural representation only if the project actually uses such a lens to describe the selected role relation structure.
If a durable qualified role value has been admitted, no separately recoverable F.17 coordinate is current for this local-only case, so the card states one direct LocalSenseRef using engineer-roboticist; robotics engineer remains a NameCard lineage alias and does not identify a second sense coordinate. Its naming settlement can be:
The robotics qualification relation remains separately governed by [A.2.7](/generated/patterns/A.2.7); the card does not absorb it into role identity. If no durable qualified role value is admitted, keep engineer-roboticist as local ordinary wording rather than filling the card. In ordinary project communication, "Vasya is our engineer-roboticist and musician" is admissible when the two assignments remain recoverable. If the current object is a method, name RobotEngineeringMethod or the relevant method family under [A.3.1](/generated/patterns/A.3.1). If a separately identified RobotEngineeringMethodDescription : U.MethodDescription episteme is current, name it separately under [A.3.2](/generated/patterns/A.3.2) only when its exact EntityOfConcern is that Method. If the current object is performed work, name the work occurrence under [A.15.1](/generated/patterns/A.15.1). If public reuse becomes current, apply section 4.4; do not infer a current F.17 row from this local card.
Method Relation Structure and Method Algebra Name
A lab says: "Use the robot-engineering method algebra: choose scouting, then calibration, then training; fall back to teleoperation if training fails."
Recovered values:
- one or more robot-engineering methods or method families under
A.3.1; - a method-family registry or selector outcome under
G.5when the family registry or selector result is current; MethodRelationStructure@MusicalRobotLab_2026when the current claim is serial composition, guarded fallback, or family selection among methods;- a method description when the source notation describes that structure;
- a
C.29mathematical-lens use when "algebra" is the selected representation for checking composition, fallback, or preserved/lost structure; - work plan or dated work only when a concrete plan or occurrence is current.
F.18 settlement: RobotEngineeringMethod names a method or method family only when that is the governed value. RobotEngineeringMethodRelationStructure may be a Tech-register name for the selected method relation structure when durable naming is needed. RobotEngineeringMethodAlgebra names the lens only when the algebraic representation itself is the governed value. Do not use a role label such as RoboticsEngineerRole to name the method relation structure, and do not use "method algebra" to hide a work plan or performed work.
Evidence-Like Source Phrase
A review table contains the phrase "model card evidence role".
Recovered values:
- a model-card episteme;
- an evidence-use relation to a target claim;
- possible source-currentness and assurance-use relations;
- no work-facing role unless an acting system is assigned one.
F.18 settlement: no durable role name is minted. If a public term is needed, first name the exact evidence-use relation, for example ModelCardEvidenceUse, with A.10 as governing pattern. Then apply the section 4.4 gate; until it passes, retain the durable relation name and NameCard locally and mark the public row pending.
Interface-Like Source Phrase
A software team says "the payment interface owns customer identity".
Recovered candidates:
- module interface under
A.6.M; - API description or protocol under
A.6.C; - signature or SlotSpecs under
A.6.0andA.6.5; - claim-bearing interface description under
C.2.1; - multi-view publication face or form under
E.17; - publication availability, form expression, or carrier bearing under
E.24.PUB; - responsible role assignment under
A.2.1.
F.18 settlement: do not mint PaymentInterfaceRole. First recover which governed value the phrase names. Then name that value through its governing pattern.
Cross-Context Name
Two teams use component, module, and unit for nearby meanings.
Recovered values:
- structural component under architecture and part-whole patterns;
- deployable module under module-interface patterns;
- management unit under organizational patterns.
F.18 settlement: first keep the three recovered values and their local labels separate. If only local speech is needed, stop there; do not name a claim merely because one team wants to explain the difference. If a public term use is proposed between different <ReferenceScheme, LocalSenseClaim> projections, identify the exact source and receiving F.17 cells and test the F.9 Bridge predicate between them. The same scheme with different LocalSenseClaim values qualifies; a different scheme only opens the question and never establishes the relation. When the Bridge obtains, state in ordinary C.2.1 wording whether it is suitable for this naming use, naming the direction, label-correspondence rule, tolerated loss, and polarity, and establish the current A.10 or B.3 reliance required by section 1. The Bridge does not choose the Tech label, the claim does not identify the governed value, and neither authorizes or performs publication. Only after those objects are current does section 4.4 send the naming settlement to F.17. If the F.17 gate fails, keep the name and card local and mark the row pending; if no correspondence use is current, stop with the local settlement and create no Bridge or use claim regardless of scheme count.
Anti-Patterns And Repairs
Conformance Checks
Use these checks before a durable name is reused in a pattern. If an F.17 row is current, run its own row checks after the section 4.4 gate; these F.18 checks neither create that row nor establish a publication occurrence for it.
Regression checks:
- When either the effective reference-scheme edition or the
LocalSenseClaimchanges, compare the resulting semantic-context projections. Re-check any obtaining Bridge, the separate claim about the named use between different projections, and that claim's current reliance; same-projection expression changes stay with designation, and no current correspondence use creates no Bridge or use claim. - When a role description changes, re-check role name and any holder-assignment name.
- When a method, capability, work, evidence, or status pattern changes, re-check any name that borrowed morphology from that area.
- When repeated reader errors occur, reopen candidate comparison instead of adding aliases indefinitely.
SoTA-Echoing
Source use was checked on 2026-07-23. F.18 uses only the following decision-governing lines; source prestige does not select an FPF value or name.
Currentness rule: when a direct value owner, C.2.1, F.9, A.10, B.3, or E.24.PUB changes the value, card, sense, Bridge, bounded-use claim, reliance, or publication boundary, reopen only the affected invariant, field, case, or check. A future F.17 edition is consumed only through section 4.4; its change does not reopen local NameCards unless their supported public citation use or object references change.
Relations
Builds on F.0.1, F.1, F.2, F.3, F.5, F.8, F.9, F.13, F.14, F.15, C.2.1, and E.24.PUB.
Coordinates with:
A.2,A.2.1,A.2.5,A.2.7,A.15, andA.15.1for role value, role assignment, role state, exact role relation occurrences and selectedRoleRelationStructure, role-algebra lens use, role-method-work alignment, and exact performed-work occurrence grounding;A.3.1for method and method-family names;A.3.2for a separately identifiedU.MethodDescriptionepisteme whose exactEntityOfConcernis that Method, and for the description episteme's separate name;A.6.P,A.6.P.WMR,A.6.RCD,A.6.REL,A.6.5,A.6.RSIR,A.6.0,A.6.M,A.6.F, andA.6.Cfor relation-claim settlement, work/method-boundary relation recovery, relation-kind and occurrence boundaries, slot, signature, interface, port, and protocol names;A.10,B.3,F.10,E.10.D2, andC.2.1for evidence-use, assurance-use, status-use, source-use, and description-episteme names;E.17for multi-view publication-face and publication-form use;F.17only after its current entry accepts the exact F.18 value, kind, card, and sense result and, for reuse between different semantic-context projections, the separate obtaining Bridge, affirmative C.2.1 use claim, and current A.10 or B.3 reliance; otherwise the local NameCard remains sufficient and the public row stays pending;E.24.PUBfor the separate occurrence, form, carrier, audience, bounded-use, and currentness objects needed when an exact row-episteme edition is actually made available;C.16,C.18, and Part G search patterns when candidate comparison uses Pareto or quality-diversity vocabulary.
Constrained non-use:
F.18admits no new U-kind and creates none of the governed role, assignment, status, method, work, relation, signature, slot, interface, or other subject values it names. ANameCardis a separately constitutedU.EpistemeunderC.2.1, not a kind minted by F.18.F.18does not decide whether two values are the same across contexts. F.9 can establish an exact relation only between local senses whose<ReferenceScheme, LocalSenseClaim>projections differ; a separate C.2.1 claim and A.10 or B.3 reliance govern one proposed naming use between those projections; the direct value owner still governs any identity claim.F.18does not turn a publication row, card, table, or glossary entry into the thing being named.
F.18:End
Ontology-First Plain Technical Rewriting
Type: Plain-technical precision-restoration pattern Status: Stable Normativity: Normative for FPF-governed technical prose unless explicitly marked informative; informative for external source prose until it is rewritten for FPF use
Plain-name. Ontology-first plain rewriting.
Intent.
Repair technical prose whose object, claim, relation, action, role, or flow is buried under extra apparatus. The repair is not cosmetic plain-language editing. It first separates content from apparatus by ontology, then writes the remaining content in the shortest plain technical form that preserves FPF kinds, slots, claim boundaries, and admissible use. Remaining word, head, naming, or wording-use problems then apply E.10, E.10.ARCH, F.18, or the governing pattern for the object.
Builds on. E.8, E.10, E.10.ARCH, F.18, A.6.P, A.7, E.18, E.21, and source-use, evidence, assurance, gate, work, decision, publication, architecture, characteristic, state-family, and relation patterns when those objects carry the repaired span's claim.
Coordinates with. E.19, E.22, E.23, A.19.SPR, C.2.P, C.16.P, C.30.P, E.11, I.2, pattern-quality records, review records, DRRs, projection loci, and source-side notes.
Use this when
Use F.19 when a bounded piece of technical prose is trying to say something precise, but the reader must pass through role labels, container words, status words, process traces, quality proof, repeated negative catalogues, reference boilerplate, or pattern-application metaphors before the object and action are visible.
Typical in-scope prose includes:
- FPF pattern prose;
DRRtext and architecture notes;- review findings and quality-loop records;
- project-facing FPF guidance;
- source prose being rewritten for FPF use;
- other technical prose whose accepted ontology, domain model, controlled vocabulary, or role model must survive simplification.
What goes wrong if missed. Authors replace one official-sounding phrase with another. The text becomes smoother or shorter while the hidden kind error remains, or it becomes easy to read by losing the FPF kind, slot, role, claim boundary, or admissible-use boundary.
What this buys. Plain technical wording becomes an ontological discipline with less apparatus: fewer words, clearer objects, fewer repeated negative catalogues, and no loss of technical semantics.
First useful move. Mark the span under repair. Split it into content candidates and apparatus candidates before rewriting either side.
Not this pattern when.
- If the problem is only one overloaded word or head after the content is visible, apply
E.10. - If the problem is a durable reusable name, apply
F.18. - If the span already names the content-bearing relation, source-use relation, state-family value, architecture label, characteristic, quality term, function wording, evidence claim, gate claim, work claim, decision claim, or other FPF object named by value, apply the governing pattern for that object.
- If the source text is only being observed and not admitted into FPF-governed prose, keep the observation source-side.
Primary EntityOfConcern in plain terms. One phrase-level, sentence-level, row-level, paragraph-level, or small-section technical-prose repair whose goal is kind-preserving plain expression.
Problem frame
Mature technical languages accumulate enough ontology that many bad sentences are not bad because the terms are unknown. They are bad because a simple technical claim is wrapped in process language, role language, status language, quality-proof evidence, pattern-reference boilerplate, or repeated negative distinctions.
The repair question is:
What content remains when words that add no object, kind, relation, claim, role, flow, evidence value, or user-facing action are removed?
Examples inside FPF:
- "
A.15handles the claim" when the text needs to say thatA.15applies to a work-planning claim; - "pattern text" when the text means "the pattern" or "the pattern of concern";
- "governing relation" when the named object is a pattern, not a relation;
- long "not X, not Y, not Z" paragraphs when the text needs a positive object, action, and one stop condition;
- corpus-projection proof written inside a pattern whose own user-facing action is not corpus projection.
The same defect appears outside pattern prose. A system note may hide an evaluation claim inside process language; a project note may treat a dashboard as evidence authority when it is a publication form; an architecture memo may replace a scale-preference claim over alternatives with a platform label.
These failures confuse coupled transformation flows. A pattern under development, a pattern being applied, a quality evaluation of that pattern, a project work occurrence, a source publication, and a projection record are different objects. They may influence one another; they do not become one another by being mentioned in the same paragraph.
Problem
How can FPF make technical prose plain without:
- treating plain language as a synonym-replacement exercise;
- deleting content-bearing technical terms as "jargon";
- replacing established terms with colourful synonyms or role nicknames;
- letting process, review, projection, or quality proof become pattern content;
- repeating the same boundary doctrine in every local pattern;
- hiding current ontic slot, relation-position, use-relation, or claim-kind changes under a shorter phrase;
- turning every phrase repair into a new local mini-ontology?
Forces
Solution
Use OntologyFirstPlainRewrite as a five-step repair over one bounded span.
- Bound the span. Name the sentence, row, paragraph, or small section under repair. Name visible apparatus candidates: pattern-application drift, role label, container word, status word, process trace, quality proof, negative catalogue, reference boilerplate, record, card, table, schema, data-structure wrapping, or other overwrap.
- Separate content from apparatus by ontology. For each phrase part, ask what object, head kind, claim kind or relation kind, current ontic slot, relation position, use relation, publication relation, admissible use, concerned actor or reader role when a role is current, and design, run, or coupled-flow position when flow separation matters. If a phrase part changes one of those values, keep it as content. If it only restates process, role label, negative catalogue, reference boilerplate, record, card, table, schema, data-structure wrapping, or quality proof without changing content, classify it as apparatus.
- Remove or move apparatus. Delete the apparatus or move it to the document, record, note, or publication relation where it belongs:
DRR, review record, quality result, architecture note, README, ToC,E.11, orI.2entry locus, projection record, release or landing evidence document, or source-side note. Do not replace it with a smoother synonym, role label, container word, status word, record, card, table, schema, data-structure wrapper, or publication-form word. - Restore remaining content precision. Apply
E.10,E.10.ARCH,F.18, or the governing pattern when a remaining word, head, relation, claim, current ontic slot, relation position, use relation, source-use relation, durable name, or admissible-use boundary is still hidden. - Rewrite and check loss. Write the shortest plain technical sentence that preserves the repaired object, kind, claim, relation, action, current ontic slot, relation position, use relation, actual role value when current, flow position when current, established term, and admissible use. The rewrite fails if it changes one of those values without an accepted semantic decision, or if it becomes harder for the declared reader to use.
Keep ontology visible only where it carries the sentence. A term-source or type annotation is needed when the wording can change the object, kind, relation, current ontic slot, relation position, use relation, publication relation, admissible use, or governing pattern. A record, card, table, schema, data structure, dashboard, or named form remains apparatus unless it carries one of those values. If ordinary domain wording already preserves those values, keep the ordinary sentence. "The aircraft flies" is better than a typed expansion unless the flight function, system kind, or slot relation is under repair.
Use the full result form when the repair must be inspectable; otherwise a local rewrite plus the kind-preservation check is enough.
Result form
Pattern-prose specialization
When the repaired prose is an FPF pattern, apply the same algorithm with one role test:
Does this sentence address the pattern's intended user, or does it record development, review, projection, landing, quality, or source-management evidence about the pattern version?
If it records evidence about the pattern version, keep that evidence outside the pattern unless the pattern's own primary EntityOfConcern is that evaluation or projection object. The evidence can cause edits to the pattern; it is not automatically pattern content.
Pattern prose keeps:
- the pattern's own primary
EntityOfConcern; - the first useful move;
- the practical delta and cost of missing it;
- local boundary prose only for a documented local confusion and named stop condition;
- short declarative references to related patterns after the pattern's own content is visible.
Pattern prose moves out:
- package-placement rationale;
- correspondence about producing the draft rather than using the pattern;
- quality-status proof;
- README, ToC,
E.11,I.2, retrieval, card, monolith-parity, or landing evidence; - repeated boundary doctrine already carried by another pattern.
Archetypal Grounding
Bias-Annotation
F.19 deliberately biases toward shorter, reader-facing prose. The protected value is kind-preserving clarity, not brevity by itself. A rewrite that removes terms while losing object kind, relation kind, current ontic slot, relation position, use relation, source-use relation, or admissible-use boundary is worse than the original.
F.19 also protects against two common reviewer biases:
- negative-catalogue bias: explaining a class by long lists of what it is not;
- apparatus-preservation bias: replacing one process, role, record, card, table, schema, data-structure wrapper, locus, flow, status, or quality-proof phrase with another phrase that still hides the object.
Conformance checklist
Common anti-patterns and how to avoid them
Consequences
F.19 makes technical prose easier to read because it removes apparatus before shortening the sentence. It also makes reviews stricter: a pleasant paraphrase does not count unless the pre-rewrite and post-rewrite kind, relation, current ontic slot, relation position, use relation, admissible use, and scope are preserved or deliberately changed by accepted decision.
The cost is that some edits need a short repair note before they look simple. That cost is intentional. Without the note, agents tend to do lexical replacement, narrow a graph into a sequence, widen a work occurrence into a method, turn a publication into evidence, or hide a pattern application under a route-like metaphor.
Rationale
Plain technical style in FPF is not a separate aesthetic layer. It is the visible result of ontology-first repair with less apparatus. The order matters:
- remove or move boilerplate;
- restore the remaining content through wording-use, naming, relation, slot, source-use, or object-governing patterns named by value;
- write the shortest sentence that keeps the recovered meaning.
Putting F.19 beside wording-use restoration keeps E.10 from becoming a phrase-style super-pattern. E.10 catches words and heads whose kind or use is hidden. F.19 catches the earlier phrase-level problem: the content may not even be visible until process, role, status, reference, quality, or negative-catalogue apparatus is removed.
SoTA-Echoing
Relations
F.19:End
Last Updated: 2026-07-28 — upstream FPF commit 17edd955 (github.com/ailev/FPF)